diff options
373 files changed, 52323 insertions, 18 deletions
diff --git a/dependencies/nDPIsrvd.py b/dependencies/nDPIsrvd.py index 4bb0f451a..aa395bf06 100644 --- a/dependencies/nDPIsrvd.py +++ b/dependencies/nDPIsrvd.py @@ -28,12 +28,12 @@ PKT_TYPE_ETH_IP6 = 0x86DD class TermColor: - HINT = '\033[33m' + HINT = '\033[33m' WARNING = '\033[93m' - FAIL = '\033[91m' - BOLD = '\033[1m' - END = '\033[0m' - BLINK = '\x1b[5m' + FAIL = '\033[91m' + BOLD = '\033[1m' + END = '\033[0m' + BLINK = '\x1b[5m' if USE_COLORAMA is True: COLOR_TUPLES = [ (Fore.BLUE, [Back.RED, Back.MAGENTA, Back.WHITE]), @@ -52,6 +52,17 @@ class TermColor: (Fore.LIGHTYELLOW_EX, [Back.LIGHTRED_EX, Back.RED]) ] @staticmethod + def disableColor(): + TermColor.HINT = '' + TermColor.WARNING = '' + TermColor.FAIL = '' + TermColor.BOLD = '' + TermColor.END = '' + TermColor.BLINK = '' + global USE_COLORAMA + USE_COLORAMA = False + + @staticmethod def calcColorHash(string): h = 0 for char in string: @@ -68,6 +79,7 @@ class TermColor: @staticmethod def setColorByString(string): + global USE_COLORAMA if USE_COLORAMA is True: fg_color, bg_color = TermColor.getColorsByHash(string) color_hash = TermColor.calcColorHash(string) diff --git a/examples/py-flow-info/flow-info.py b/examples/py-flow-info/flow-info.py index 4c1c2f909..80f7d2692 100755 --- a/examples/py-flow-info/flow-info.py +++ b/examples/py-flow-info/flow-info.py @@ -32,6 +32,7 @@ def set_attr_if_not_set(some_object, attr_name, value): class Stats: def __init__(self, nDPIsrvd_sock): + self.statusbar_enabled = True self.start_time = time.time() self.nsock = nDPIsrvd_sock self.last_status_length = 0 @@ -46,11 +47,14 @@ class Stats: self.json_lines = 0 self.spinner_state = 0 + def disableStatusbar(self): + self.statusbar_enabled = False + def updateSpinner(self): if self.current_time + 0.25 <= time.time(): self.spinner_state += 1 - def getSpinner(self): + def __getSpinner(self): #spinner_states = ['-', '\\', '|', '/'] #spinner_states = ['▉', '▊', '▋', '▌', '▍', '▎', '▏', '▎', '▍', '▌', '▋', '▊', '▉'] spinner_states = ['←', '↖', '↑', '↗', '→', '↘', '↓', '↙'] @@ -59,7 +63,7 @@ class Stats: #spinner_states = ['┤', '┘', '┴', '└', '├', '┌', '┬', '┐'] return spinner_states[self.spinner_state % len(spinner_states)] - def getDataFromJson(self, json_dict, current_flow): + def __getDataFromJson(self, json_dict, current_flow): if current_flow is None: return @@ -87,7 +91,7 @@ class Stats: self.json_lines += 1 self.current_time = time.time() self.avg_xfer_json_bytes = self.nsock.received_bytes / (self.current_time - self.start_time) - self.getDataFromJson(json_dict, current_flow) + self.__getDataFromJson(json_dict, current_flow) def updateOnCleanup(self, current_flow): self.total_flows += 1 @@ -97,7 +101,7 @@ class Stats: self.guessed_flows += 1 if current_flow.guessed != 0 else 0 self.not_detected_flows += 1 if current_flow.not_detected != 0 else 0 - def getStatsFromFlowMgr(self): + def __getStatsFromFlowMgr(self): alias_count = 0 source_count = 0 flow_count = 0 @@ -138,13 +142,19 @@ class Stats: return '{:.2f} {}'.format(s, size_names[i]) def resetStatus(self): + if self.statusbar_enabled is False: + return + sys.stdout.write('\r' + str(' ' * self.last_status_length) + '\r') sys.stdout.flush() def printStatus(self): + if self.statusbar_enabled is False: + return + alias_count, source_count, flow_count, \ tot_l4_payload_len, \ - risky, midstream, guessed, not_detected = self.getStatsFromFlowMgr() + risky, midstream, guessed, not_detected = self.__getStatsFromFlowMgr() out_str = '\r[n|tot|avg JSONs: {}|{}|{}/s] [tot l4: {}] ' \ '[lss|srcs: {}|{}] ' \ @@ -160,7 +170,7 @@ class Stats: midstream + self.midstream_flows, not_detected + self.not_detected_flows, guessed + self.guessed_flows, - self.getSpinner()) + self.__getSpinner()) self.last_status_length = len(out_str) - 1 # '\r' sys.stdout.write(out_str) @@ -251,7 +261,7 @@ def onJsonLineRecvd(json_dict, instance, current_flow, global_user_data): basic_daemon_event_prefix += ' ' * 11 if 'flow_first_seen' in json_dict: first_seen = '[' + prettifyTimediff(nDPIsrvd.toSeconds(json_dict['flow_first_seen']), - nDPIsrvd.toSeconds(json_dict['thread_ts_usec']) + ']') + nDPIsrvd.toSeconds(json_dict['thread_ts_usec'])) + ']' last_seen = '' if args.print_last_seen is True: @@ -259,7 +269,7 @@ def onJsonLineRecvd(json_dict, instance, current_flow, global_user_data): if current_flow is not None: flow_last_seen = nDPIsrvd.FlowManager.getLastPacketTime(instance, current_flow.flow_id, json_dict) last_seen = '[' + prettifyTimediff(nDPIsrvd.toSeconds(flow_last_seen), - nDPIsrvd.toSeconds(json_dict['thread_ts_usec']) + ']') + nDPIsrvd.toSeconds(json_dict['thread_ts_usec'])) + ']' if 'daemon_event_id' in json_dict: if json_dict['daemon_event_name'] == 'status': @@ -298,7 +308,7 @@ def onJsonLineRecvd(json_dict, instance, current_flow, global_user_data): return True ndpi_proto_categ_breed = '' - ndpi_frisk = '' + next_lines = [] if 'ndpi' in json_dict: if 'proto' in json_dict['ndpi']: @@ -314,8 +324,9 @@ def onJsonLineRecvd(json_dict, instance, current_flow, global_user_data): severity = 0 cnt = 0 + next_lines += [''] for key in json_dict['ndpi']['flow_risk']: - ndpi_frisk += str(json_dict['ndpi']['flow_risk'][key]['risk']) + ', ' + next_lines[0] += str(json_dict['ndpi']['flow_risk'][key]['risk']) + ', ' if json_dict['ndpi']['flow_risk'][key]['severity'] == 'Low': severity = max(severity, 1) elif json_dict['ndpi']['flow_risk'][key]['severity'] == 'Medium': @@ -337,7 +348,7 @@ def onJsonLineRecvd(json_dict, instance, current_flow, global_user_data): else: color = '' - ndpi_frisk = '{}{}{}: {}'.format(color, 'RISK', TermColor.END, ndpi_frisk[:-2]) + next_lines[0] = '{}{}{}: {}'.format(color, 'RISK', TermColor.END, next_lines[0][:-2]) line_suffix = '' flow_event_name = '' @@ -351,6 +362,44 @@ def onJsonLineRecvd(json_dict, instance, current_flow, global_user_data): elif json_dict['flow_event_name'] == 'analyse': flow_event_name += '{}{:>16}{}'.format(TermColor.WARNING, json_dict['flow_event_name'], TermColor.END) + if args.print_analyse_results is True: + next_lines = ['[min|max|avg|stddev]'] + next_lines += ['[IAT(flow)...: {:>8.3f}|{:>8.3f}|{:>8.3f}|{:>8.3f}]'.format( + nDPIsrvd.toSeconds(json_dict['data_analysis']['iat']['flow_min']), + nDPIsrvd.toSeconds(json_dict['data_analysis']['iat']['flow_max']), + nDPIsrvd.toSeconds(json_dict['data_analysis']['iat']['flow_avg']), + nDPIsrvd.toSeconds(json_dict['data_analysis']['iat']['flow_stddev']) + )] + next_lines += [''] + next_lines[-1] += '[IAT(c->s)...: {:>8.3f}|{:>8.3f}|{:>8.3f}|{:>8.3f}]'.format( + nDPIsrvd.toSeconds(json_dict['data_analysis']['iat']['c_to_s_min']), + nDPIsrvd.toSeconds(json_dict['data_analysis']['iat']['c_to_s_max']), + nDPIsrvd.toSeconds(json_dict['data_analysis']['iat']['c_to_s_avg']), + nDPIsrvd.toSeconds(json_dict['data_analysis']['iat']['c_to_s_stddev']) + ) + next_lines[-1] += '[IAT(s->c)...: {:>8.3f}|{:>8.3f}|{:>8.3f}|{:>8.3f}]'.format( + nDPIsrvd.toSeconds(json_dict['data_analysis']['iat']['s_to_c_min']), + nDPIsrvd.toSeconds(json_dict['data_analysis']['iat']['s_to_c_max']), + nDPIsrvd.toSeconds(json_dict['data_analysis']['iat']['s_to_c_avg']), + nDPIsrvd.toSeconds(json_dict['data_analysis']['iat']['s_to_c_stddev']) + ) + next_lines += [''] + next_lines[-1] += '[PKTLEN(c->s): {:>8.3f}|{:>8.3f}|{:>8.3f}|{:>8.3f}]'.format( + json_dict['data_analysis']['pktlen']['c_to_s_min'], + json_dict['data_analysis']['pktlen']['c_to_s_max'], + json_dict['data_analysis']['pktlen']['c_to_s_avg'], + json_dict['data_analysis']['pktlen']['c_to_s_stddev'] + ) + next_lines[-1] += '[PKTLEN(s->c): {:>8.3f}|{:>8.3f}|{:>8.3f}|{:>8.3f}]'.format( + json_dict['data_analysis']['pktlen']['s_to_c_min'], + json_dict['data_analysis']['pktlen']['s_to_c_max'], + json_dict['data_analysis']['pktlen']['s_to_c_avg'], + json_dict['data_analysis']['pktlen']['s_to_c_stddev'] + ) + next_lines += [''] + next_lines[-1] += '[BINS(c->s)..: {}]'.format(','.join([str(n) for n in json_dict['data_analysis']['bins']['c_to_s']])) + next_lines += [''] + next_lines[-1] += '[BINS(s->c)..: {}]'.format(','.join([str(n) for n in json_dict['data_analysis']['bins']['s_to_c']])) else: if json_dict['flow_event_name'] == 'new': line_suffix = '' @@ -392,9 +441,9 @@ def onJsonLineRecvd(json_dict, instance, current_flow, global_user_data): else: raise RuntimeError('unsupported l3 protocol: {}'.format(json_dict['l3_proto'])) - if len(ndpi_frisk) > 0: + for line in next_lines: print('{}{}{}{}{:>18}{}'.format(timestamp, first_seen, last_seen, - instance_and_source, '', ndpi_frisk)) + instance_and_source, '', line)) stats.printStatus() @@ -402,6 +451,10 @@ def onJsonLineRecvd(json_dict, instance, current_flow, global_user_data): if __name__ == '__main__': argparser = nDPIsrvd.defaultArgumentParser('Prettify and print events using the nDPIsrvd Python interface.') + argparser.add_argument('--no-color', action='store_true', default=False, + help='Disable all terminal colors.') + argparser.add_argument('--no-statusbar', action='store_true', default=False, + help='Disable informational status bar.') argparser.add_argument('--hide-instance-info', action='store_true', default=False, help='Hide instance Alias/Source prefixed every line.') argparser.add_argument('--print-timestamp', action='store_true', default=False, @@ -423,8 +476,13 @@ if __name__ == '__main__': argparser.add_argument('--analyse', action='store_true', default=False, help='Print only analyse flow events.') argparser.add_argument('--detection', action='store_true', default=False, help='Print only detected/detection-update flow events.') argparser.add_argument('--ipwhois', action='store_true', default=False, help='Use Python-IPWhois to print additional location information.') + argparser.add_argument('--print-analyse-results', action='store_true', default=False, + help='Print detailed results of analyse events.') args = argparser.parse_args() + if args.no_color is True: + TermColor.disableColor() + if args.ipwhois is True: import dns, ipwhois whois_db = dict() @@ -439,6 +497,9 @@ if __name__ == '__main__': nsock.timeout(1.0) stats = Stats(nsock) + if args.no_statusbar is True: + stats.disableStatusbar() + while True: try: nsock.loop(onJsonLineRecvd, onFlowCleanup, stats) diff --git a/test/results/flow-info/1kxun.pcap.out b/test/results/flow-info/1kxun.pcap.out new file mode 100644 index 000000000..d37d56a59 --- /dev/null +++ b/test/results/flow-info/1kxun.pcap.out @@ -0,0 +1,841 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...192.168.5.44][59571] -> [....224.0.0.252][.5355] + detected: [.....1] [ip4][..udp] [...192.168.5.44][59571] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [.....2] [ip4][..udp] [...192.168.5.57][55809] -> [239.255.255.250][.1900] + detected: [.....2] [ip4][..udp] [...192.168.5.57][55809] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [.....3] [ip4][..udp] [...192.168.5.44][51389] -> [239.255.255.250][.1900] + detected: [.....3] [ip4][..udp] [...192.168.5.44][51389] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [.....4] [ip4][..udp] [..192.168.119.1][...67] -> [255.255.255.255][...68] + detected: [.....4] [ip4][..udp] [..192.168.119.1][...67] -> [255.255.255.255][...68] [DHCP][Network][Acceptable] + new: [.....5] [ip4][..tcp] [...192.168.5.16][53605] -> [.68.233.253.133][...80] [MIDSTREAM] + new: [.....6] [ip4][..udp] [...192.168.5.50][64674] -> [239.255.255.250][.1900] + detected: [.....6] [ip4][..udp] [...192.168.5.50][64674] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [.....7] [ip4][..udp] [...192.168.5.41][55312] -> [239.255.255.250][.1900] + detected: [.....7] [ip4][..udp] [...192.168.5.41][55312] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [.....8] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [.....8] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [.....9] [ip6][..udp] [...............fe80::406:55a8:6453:25dd][..546] -> [..............................ff02::1:2][..547] + detected: [.....9] [ip6][..udp] [...............fe80::406:55a8:6453:25dd][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + new: [....10] [ip6][..udp] [..............fe80::edf5:240a:c8c0:8312][61603] -> [..............................ff02::1:3][.5355] + detected: [....10] [ip6][..udp] [..............fe80::edf5:240a:c8c0:8312][61603] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....11] [ip4][..udp] [...192.168.5.47][61603] -> [....224.0.0.252][.5355] + detected: [....11] [ip4][..udp] [...192.168.5.47][61603] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....12] [ip4][..udp] [...192.168.5.47][60267] -> [239.255.255.250][.1900] + detected: [....12] [ip4][..udp] [...192.168.5.47][60267] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....13] [ip4][..udp] [..192.168.115.8][51458] -> [....224.0.0.252][.5355] + detected: [....13] [ip4][..udp] [..192.168.115.8][51458] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....14] [ip4][..udp] [..192.168.115.8][51024] -> [........8.8.8.8][...53] + detected: [....14] [ip4][..udp] [..192.168.115.8][51024] -> [........8.8.8.8][...53] [DNS.1kxun][Streaming][Fun] + detection-update: [....14] [ip4][..udp] [..192.168.115.8][51024] -> [........8.8.8.8][...53] [DNS.1kxun][Streaming][Fun] + new: [....15] [ip4][..tcp] [..192.168.115.8][49597] -> [.106.185.35.110][...80] + detected: [....15] [ip4][..tcp] [..192.168.115.8][49597] -> [.106.185.35.110][...80] [HTTP.1kxun][Streaming][Fun] + new: [....16] [ip4][..udp] [..192.168.115.8][52723] -> [........8.8.8.8][...53] + detected: [....16] [ip4][..udp] [..192.168.115.8][52723] -> [........8.8.8.8][...53] [DNS.1kxun][Streaming][Fun] + new: [....17] [ip4][..tcp] [...192.168.5.16][53622] -> [.192.168.115.75][..443] [MIDSTREAM] + new: [....18] [ip4][..udp] [..192.168.115.8][..137] -> [192.168.255.255][..137] + detected: [....18] [ip4][..udp] [..192.168.115.8][..137] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + new: [....19] [ip6][..udp] [..............fe80::e98f:bae2:19f7:6b0f][58779] -> [..............................ff02::1:3][.5355] + detected: [....19] [ip6][..udp] [..............fe80::e98f:bae2:19f7:6b0f][58779] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....20] [ip4][..udp] [...192.168.3.95][58779] -> [....224.0.0.252][.5355] + detected: [....20] [ip4][..udp] [...192.168.3.95][58779] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....21] [ip4][..udp] [...192.168.3.95][59468] -> [239.255.255.250][.1900] + detected: [....21] [ip4][..udp] [...192.168.3.95][59468] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....22] [ip4][..udp] [.192.168.125.30][62976] -> [255.255.255.255][62976] + new: [....23] [ip6][..udp] [..2001:b030:214:100:c2a0:bbff:fe73:eb47][62976] -> [................................ff02::1][62976] + new: [....24] [ip4][..udp] [..192.168.115.8][52723] -> [.....168.95.1.1][...53] + detected: [....24] [ip4][..udp] [..192.168.115.8][52723] -> [.....168.95.1.1][...53] [DNS.1kxun][Streaming][Fun] + detection-update: [....24] [ip4][..udp] [..192.168.115.8][52723] -> [.....168.95.1.1][...53] [DNS.1kxun][Streaming][Fun] + new: [....25] [ip4][..tcp] [..192.168.115.8][49598] -> [.222.73.254.167][...80] + detection-update: [....16] [ip4][..udp] [..192.168.115.8][52723] -> [........8.8.8.8][...53] [DNS.1kxun][Streaming][Fun] + detected: [....25] [ip4][..tcp] [..192.168.115.8][49598] -> [.222.73.254.167][...80] [HTTP.1kxun][Streaming][Fun] + new: [....26] [ip4][..udp] [..192.168.115.8][60724] -> [........8.8.8.8][...53] + detected: [....26] [ip4][..udp] [..192.168.115.8][60724] -> [........8.8.8.8][...53] [DNS.1kxun][Streaming][Fun] + detection-update: [....26] [ip4][..udp] [..192.168.115.8][60724] -> [........8.8.8.8][...53] [DNS.1kxun][Streaming][Fun] + new: [....27] [ip4][..tcp] [..192.168.115.8][49599] -> [.106.187.35.246][...80] + new: [....28] [ip4][..tcp] [..192.168.115.8][49600] -> [.106.187.35.246][...80] + new: [....29] [ip4][..tcp] [..192.168.115.8][49601] -> [.106.187.35.246][...80] + new: [....30] [ip4][..tcp] [..192.168.115.8][49602] -> [.106.187.35.246][...80] + new: [....31] [ip4][..tcp] [..192.168.115.8][49603] -> [.106.187.35.246][...80] + new: [....32] [ip4][..tcp] [..192.168.115.8][49604] -> [.106.187.35.246][...80] + new: [....33] [ip6][..udp] [..............fe80::e98f:bae2:19f7:6b0f][54888] -> [..............................ff02::1:3][.5355] + detected: [....33] [ip6][..udp] [..............fe80::e98f:bae2:19f7:6b0f][54888] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....34] [ip4][..udp] [...192.168.3.95][54888] -> [....224.0.0.252][.5355] + detected: [....34] [ip4][..udp] [...192.168.3.95][54888] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + detected: [....28] [ip4][..tcp] [..192.168.115.8][49600] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + detected: [....27] [ip4][..tcp] [..192.168.115.8][49599] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + detected: [....32] [ip4][..tcp] [..192.168.115.8][49604] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + detected: [....29] [ip4][..tcp] [..192.168.115.8][49601] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + detected: [....30] [ip4][..tcp] [..192.168.115.8][49602] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + detected: [....31] [ip4][..tcp] [..192.168.115.8][49603] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + analyse: [....29] [ip4][..tcp] [..192.168.115.8][49601] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.056| 0.011| 0.020] + [IAT(c->s)...: 0.000| 0.056| 0.019| 0.025][IAT(s->c)...: 0.000| 0.052| 0.008| 0.017] + [PKTLEN(c->s): 54.000| 414.000| 128.400| 142.900][PKTLEN(s->c): 60.000|1314.000|1157.500| 397.500] + [BINS(c->s)..: 8,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,0,0,0,0,0,0,0,0] + analyse: [....30] [ip4][..tcp] [..192.168.115.8][49602] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.066| 0.012| 0.024] + [IAT(c->s)...: 0.000| 0.066| 0.017| 0.027][IAT(s->c)...: 0.000| 0.065| 0.010| 0.022] + [PKTLEN(c->s): 54.000| 413.000| 115.800| 133.000][PKTLEN(s->c): 60.000|1314.000|1141.800| 413.700] + [BINS(c->s)..: 10,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,0,0,0,0,0,0,0,0] + analyse: [....27] [ip4][..tcp] [..192.168.115.8][49599] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.067| 0.012| 0.023] + [IAT(c->s)...: 0.000| 0.067| 0.017| 0.026][IAT(s->c)...: 0.000| 0.065| 0.010| 0.021] + [PKTLEN(c->s): 54.000| 415.000| 116.200| 133.700][PKTLEN(s->c): 60.000|1314.000|1141.800| 413.700] + [BINS(c->s)..: 10,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,0,0,0,0,0,0,0,0] + analyse: [....32] [ip4][..tcp] [..192.168.115.8][49604] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.096| 0.013| 0.026] + [IAT(c->s)...: 0.000| 0.096| 0.023| 0.034][IAT(s->c)...: 0.000| 0.072| 0.008| 0.021] + [PKTLEN(c->s): 54.000| 423.000| 202.200| 176.700][PKTLEN(s->c): 60.000|1314.000|1140.100| 398.700] + [BINS(c->s)..: 6,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,18,0,0,0,0,0,0,0,0] + analyse: [....28] [ip4][..tcp] [..192.168.115.8][49600] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.142| 0.016| 0.032] + [IAT(c->s)...: 0.000| 0.142| 0.027| 0.045][IAT(s->c)...: 0.000| 0.085| 0.011| 0.024] + [PKTLEN(c->s): 54.000| 416.000| 128.800| 143.700][PKTLEN(s->c): 60.000|1314.000|1157.500| 397.500] + [BINS(c->s)..: 8,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,0,0,0,0,0,0,0,0] + new: [....35] [ip4][..udp] [...192.168.5.67][..138] -> [192.168.255.255][..138] + detected: [....35] [ip4][..udp] [...192.168.5.67][..138] -> [192.168.255.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [....36] [ip4][..tcp] [..192.168.115.8][49605] -> [.106.185.35.110][...80] + new: [....37] [ip4][..tcp] [..192.168.115.8][49606] -> [.106.185.35.110][...80] + detected: [....36] [ip4][..tcp] [..192.168.115.8][49605] -> [.106.185.35.110][...80] [HTTP.1kxun][Streaming][Fun] + detected: [....37] [ip4][..tcp] [..192.168.115.8][49606] -> [.106.185.35.110][...80] [HTTP.1kxun][Streaming][Fun] + analyse: [....37] [ip4][..tcp] [..192.168.115.8][49606] -> [.106.185.35.110][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.147| 0.015| 0.033] + [IAT(c->s)...: 0.000| 0.147| 0.017| 0.040][IAT(s->c)...: 0.000| 0.110| 0.013| 0.027] + [PKTLEN(c->s): 54.000| 411.000| 106.700| 124.300][PKTLEN(s->c): 60.000|1314.000|1175.000| 393.200] + [BINS(c->s)..: 12,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,0,0,0,0,0,0,0,0] + new: [....38] [ip4][..tcp] [..192.168.115.8][49607] -> [218.244.135.170][.9099] + detected: [....38] [ip4][..tcp] [..192.168.115.8][49607] -> [218.244.135.170][.9099] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....39] [ip4][..udp] [..192.168.115.8][54420] -> [........8.8.8.8][...53] + detected: [....39] [ip4][..udp] [..192.168.115.8][54420] -> [........8.8.8.8][...53] [DNS.QQ][Chat][Fun] + detection-update: [....39] [ip4][..udp] [..192.168.115.8][54420] -> [........8.8.8.8][...53] [DNS.QQ][Chat][Fun] + new: [....40] [ip4][..tcp] [..192.168.115.8][49608] -> [203.205.151.234][...80] + detected: [....40] [ip4][..tcp] [..192.168.115.8][49608] -> [203.205.151.234][...80] [HTTP.QQ][Chat][Fun] + new: [....41] [ip4][..tcp] [..192.168.115.8][49609] -> [..42.120.51.152][.8080] + new: [....42] [ip4][..udp] [.192.168.10.110][60480] -> [255.255.255.255][62976] + detected: [....41] [ip4][..tcp] [..192.168.115.8][49609] -> [..42.120.51.152][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....43] [ip4][..udp] [...192.168.5.37][56366] -> [....224.0.0.252][.5355] + detected: [....43] [ip4][..udp] [...192.168.5.37][56366] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....44] [ip4][..udp] [...192.168.5.37][57325] -> [239.255.255.250][.1900] + detected: [....44] [ip4][..udp] [...192.168.5.37][57325] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....45] [ip4][..tcp] [...192.168.5.16][53623] -> [.192.168.115.75][..443] + detected: [....45] [ip4][..tcp] [...192.168.5.16][53623] -> [.192.168.115.75][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....45] [ip4][..tcp] [...192.168.5.16][53623] -> [.192.168.115.75][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS + new: [....46] [ip4][..tcp] [..192.168.115.8][49612] -> [.183.131.48.145][...80] + new: [....47] [ip4][..udp] [.192.168.101.33][58456] -> [....224.0.0.252][.5355] + detected: [....47] [ip4][..udp] [.192.168.101.33][58456] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....48] [ip4][..udp] [....192.168.5.9][58456] -> [....224.0.0.252][.5355] + detected: [....48] [ip4][..udp] [....192.168.5.9][58456] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + detected: [....46] [ip4][..tcp] [..192.168.115.8][49612] -> [.183.131.48.145][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [....49] [ip4][..tcp] [..192.168.115.8][49613] -> [.183.131.48.144][...80] + analyse: [....41] [ip4][..tcp] [..192.168.115.8][49609] -> [..42.120.51.152][.8080] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.399| 0.070| 0.104] + [IAT(c->s)...: 0.000| 0.350| 0.066| 0.103][IAT(s->c)...: 0.000| 0.399| 0.076| 0.106] + [PKTLEN(c->s): 54.000| 499.000| 245.400| 193.100][PKTLEN(s->c): 60.000|1314.000| 538.800| 555.700] + [BINS(c->s)..: 9,0,0,0,0,0,0,4,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0] + detected: [....49] [ip4][..tcp] [..192.168.115.8][49613] -> [.183.131.48.144][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + detection-update: [....49] [ip4][..tcp] [..192.168.115.8][49613] -> [.183.131.48.144][...80] [HTTP][Media][Acceptable] + RISK: HTTP Numeric IP Address + new: [....50] [ip4][..udp] [.192.168.101.33][55485] -> [239.255.255.250][.1900] + detected: [....50] [ip4][..udp] [.192.168.101.33][55485] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....51] [ip4][..udp] [....192.168.5.9][55484] -> [239.255.255.250][.1900] + detected: [....51] [ip4][..udp] [....192.168.5.9][55484] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....52] [ip6][..udp] [...............fe80::9bd:81dd:2fdc:5750][61548] -> [..............................ff02::1:3][.5355] + detected: [....52] [ip6][..udp] [...............fe80::9bd:81dd:2fdc:5750][61548] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....53] [ip4][..udp] [...192.168.5.49][61548] -> [....224.0.0.252][.5355] + detected: [....53] [ip4][..udp] [...192.168.5.49][61548] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....54] [ip4][..udp] [...192.168.5.49][51704] -> [239.255.255.250][.1900] + detected: [....54] [ip4][..udp] [...192.168.5.49][51704] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....55] [ip4][..udp] [...192.168.5.16][...68] -> [..192.168.119.1][...67] + detected: [....55] [ip4][..udp] [...192.168.5.16][...68] -> [..192.168.119.1][...67] [DHCP][Network][Acceptable] + analyse: [....49] [ip4][..tcp] [..192.168.115.8][49613] -> [.183.131.48.144][...80] [HTTP][Media][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.863| 0.183| 0.253] + [IAT(c->s)...: 0.000| 0.863| 0.155| 0.262][IAT(s->c)...: 0.000| 0.666| 0.228| 0.231] + [PKTLEN(c->s): 54.000| 557.000| 105.500| 150.500][PKTLEN(s->c): 60.000|1078.000| 846.400| 406.300] + [BINS(c->s)..: 18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....56] [ip4][..udp] [.59.120.208.218][50151] -> [255.255.255.255][.1947] + new: [....57] [ip4][..tcp] [..192.168.115.8][49596] -> [..203.66.182.87][..443] [MIDSTREAM] + new: [....58] [ip4][..tcp] [...192.168.5.16][53613] -> [.68.233.253.133][...80] [MIDSTREAM] + new: [....59] [ip4][..tcp] [...192.168.5.16][53624] -> [.68.233.253.133][...80] + detected: [....59] [ip4][..tcp] [...192.168.5.16][53624] -> [.68.233.253.133][...80] [HTTP][Web][Acceptable] + new: [....60] [ip6][..udp] [...............fe80::4e5e:cff:fe9a:ec54][.5678] -> [................................ff02::1][.5678] + new: [....61] [ip4][..tcp] [..192.168.115.8][49581] -> [.64.233.189.128][...80] [MIDSTREAM] + new: [....62] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][63659] -> [..............................ff02::1:3][.5355] + detected: [....62] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][63659] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....63] [ip4][..udp] [..192.168.3.236][51714] -> [....224.0.0.252][.5355] + detected: [....63] [ip4][..udp] [..192.168.3.236][51714] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....64] [ip4][..udp] [..192.168.3.236][..137] -> [192.168.255.255][..137] + detected: [....64] [ip4][..udp] [..192.168.3.236][..137] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + new: [....65] [ip4][..udp] [192.168.140.140][62976] -> [255.255.255.255][62976] + new: [....66] [ip6][..udp] [.......2001:b020:6::c2a0:bbff:fe73:eb57][62976] -> [................................ff02::1][62976] + new: [....67] [ip4][..udp] [...192.168.5.45][59789] -> [192.168.255.255][..137] + detected: [....67] [ip4][..udp] [...192.168.5.45][59789] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + new: [....68] [ip4][..udp] [...192.168.5.45][59461] -> [192.168.255.255][..137] + detected: [....68] [ip4][..udp] [...192.168.5.45][59461] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + new: [....69] [ip4][..udp] [...192.168.5.45][..137] -> [192.168.255.255][..137] + detected: [....69] [ip4][..udp] [...192.168.5.45][..137] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + new: [....70] [ip4][..udp] [...192.168.5.45][..138] -> [192.168.255.255][..138] + detected: [....70] [ip4][..udp] [...192.168.5.45][..138] -> [192.168.255.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [....71] [ip4][..udp] [...192.168.10.7][62976] -> [255.255.255.255][62976] + new: [....72] [ip6][..udp] [..............fe80::4568:efbc:40b1:1346][50194] -> [..............................ff02::1:3][.5355] + detected: [....72] [ip6][..udp] [..............fe80::4568:efbc:40b1:1346][50194] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....73] [ip4][..udp] [...192.168.5.41][54470] -> [....224.0.0.252][.5355] + detected: [....73] [ip4][..udp] [...192.168.5.41][54470] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....74] [ip4][..udp] [....192.168.5.9][...68] -> [255.255.255.255][...67] + detected: [....74] [ip4][..udp] [....192.168.5.9][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [....75] [ip4][..udp] [...192.168.5.48][49701] -> [239.255.255.250][.1900] + detected: [....75] [ip4][..udp] [...192.168.5.48][49701] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....76] [ip4][..udp] [...192.168.5.64][.5353] -> [....224.0.0.251][.5353] + detected: [....76] [ip4][..udp] [...192.168.5.64][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....77] [ip4][..udp] [..192.168.2.186][32768] -> [255.255.255.255][.1947] + new: [....78] [ip4][..udp] [...192.168.5.48][59797] -> [....224.0.0.252][.5355] + detected: [....78] [ip4][..udp] [...192.168.5.48][59797] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....79] [ip4][..udp] [..192.168.0.100][50925] -> [255.255.255.255][.5678] + new: [....80] [ip4][..udp] [...192.168.5.57][65150] -> [....224.0.0.252][.5355] + detected: [....80] [ip4][..udp] [...192.168.5.57][65150] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....81] [ip6][..udp] [...............fe80::e034:7be:d8f9:6197][62756] -> [..............................ff02::1:3][.5355] + detected: [....81] [ip6][..udp] [...............fe80::e034:7be:d8f9:6197][62756] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....82] [ip4][..udp] [...192.168.5.50][62756] -> [....224.0.0.252][.5355] + detected: [....82] [ip4][..udp] [...192.168.5.50][62756] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....83] [ip4][..udp] [...192.168.5.49][.1900] -> [239.255.255.250][.1900] + detected: [....83] [ip4][..udp] [...192.168.5.49][.1900] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....84] [ip6][..udp] [...............fe80::9bd:81dd:2fdc:5750][.1900] -> [................................ff02::c][.1900] + detected: [....84] [ip6][..udp] [...............fe80::9bd:81dd:2fdc:5750][.1900] -> [................................ff02::c][.1900] [SSDP][System][Acceptable] + new: [....85] [ip4][..udp] [...192.168.5.50][50030] -> [....224.0.0.252][.5355] + detected: [....85] [ip4][..udp] [...192.168.5.50][50030] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....86] [ip4][..udp] [.59.120.208.212][32768] -> [255.255.255.255][.1947] + new: [....87] [ip4][..tcp] [...192.168.5.16][53625] -> [.192.168.115.75][..443] + detected: [....87] [ip4][..tcp] [...192.168.5.16][53625] -> [.192.168.115.75][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....87] [ip4][..tcp] [...192.168.5.16][53625] -> [.192.168.115.75][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS + new: [....88] [ip4][..udp] [..192.168.119.1][56861] -> [255.255.255.255][.5678] + new: [....89] [ip6][..udp] [................fe80::4e5e:cff:feea:365][.5678] -> [................................ff02::1][.5678] + new: [....90] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][49735] -> [..............................ff02::1:3][.5355] + detected: [....90] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][49735] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....91] [ip4][..udp] [..192.168.3.236][62069] -> [....224.0.0.252][.5355] + detected: [....91] [ip4][..udp] [..192.168.3.236][62069] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....92] [ip4][..udp] [...192.168.5.44][58702] -> [....224.0.0.252][.5355] + detected: [....92] [ip4][..udp] [...192.168.5.44][58702] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....93] [ip6][..udp] [..............fe80::beee:7bff:fe0c:b3de][..546] -> [..............................ff02::1:2][..547] + detected: [....93] [ip6][..udp] [..............fe80::beee:7bff:fe0c:b3de][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + new: [....94] [ip4][..udp] [..192.168.119.2][43786] -> [255.255.255.255][.5678] + new: [....95] [ip6][..udp] [..............fe80::edf5:240a:c8c0:8312][53962] -> [..............................ff02::1:3][.5355] + detected: [....95] [ip6][..udp] [..............fe80::edf5:240a:c8c0:8312][53962] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....96] [ip4][..udp] [...192.168.5.47][53962] -> [....224.0.0.252][.5355] + detected: [....96] [ip4][..udp] [...192.168.5.47][53962] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....97] [ip6][..udp] [..............fe80::e98f:bae2:19f7:6b0f][51451] -> [..............................ff02::1:3][.5355] + detected: [....97] [ip6][..udp] [..............fe80::e98f:bae2:19f7:6b0f][51451] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....98] [ip4][..udp] [...192.168.3.95][51451] -> [....224.0.0.252][.5355] + detected: [....98] [ip4][..udp] [...192.168.3.95][51451] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....99] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][53938] -> [..............................ff02::1:3][.5355] + detected: [....99] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][53938] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [...100] [ip4][..udp] [..192.168.3.236][56043] -> [....224.0.0.252][.5355] + detected: [...100] [ip4][..udp] [..192.168.3.236][56043] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [...101] [ip4][..tcp] [.119.235.235.84][..443] -> [...192.168.5.16][53406] [MIDSTREAM] + new: [...102] [ip4][..udp] [...192.168.5.37][54506] -> [....224.0.0.252][.5355] + detected: [...102] [ip4][..udp] [...192.168.5.37][54506] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [...103] [ip6][..udp] [...............fe80::9bd:81dd:2fdc:5750][64568] -> [..............................ff02::1:3][.5355] + detected: [...103] [ip6][..udp] [...............fe80::9bd:81dd:2fdc:5750][64568] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [...104] [ip4][..udp] [...192.168.5.49][64568] -> [....224.0.0.252][.5355] + detected: [...104] [ip4][..udp] [...192.168.5.49][64568] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [...105] [ip4][..udp] [...192.168.5.41][...68] -> [255.255.255.255][...67] + detected: [...105] [ip4][..udp] [...192.168.5.41][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [...106] [ip4][..tcp] [...192.168.5.16][53580] -> [....31.13.87.36][..443] [MIDSTREAM] + detected: [...106] [ip4][..tcp] [...192.168.5.16][53580] -> [....31.13.87.36][..443] [TLS.Facebook][SocialNetwork][Fun] + new: [...107] [ip4][..tcp] [...192.168.5.16][53626] -> [.192.168.115.75][..443] + detected: [...107] [ip4][..tcp] [...192.168.5.16][53626] -> [.192.168.115.75][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [...107] [ip4][..tcp] [...192.168.5.16][53626] -> [.192.168.115.75][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS + new: [...108] [ip4][..udp] [...192.168.5.16][63372] -> [.....168.95.1.1][...53] + detected: [...108] [ip4][..udp] [...192.168.5.16][63372] -> [.....168.95.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...108] [ip4][..udp] [...192.168.5.16][63372] -> [.....168.95.1.1][...53] [DNS][Network][Acceptable] + new: [...109] [ip4][..tcp] [...192.168.5.16][53627] -> [...203.69.81.73][...80] + new: [...110] [ip4][..tcp] [...192.168.5.16][53628] -> [...203.69.81.73][...80] + detected: [...110] [ip4][..tcp] [...192.168.5.16][53628] -> [...203.69.81.73][...80] [HTTP][Web][Acceptable] + detected: [...109] [ip4][..tcp] [...192.168.5.16][53627] -> [...203.69.81.73][...80] [HTTP][Web][Acceptable] + new: [...111] [ip4][..udp] [.192.168.101.33][62822] -> [....224.0.0.252][.5355] + detected: [...111] [ip4][..udp] [.192.168.101.33][62822] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [...112] [ip4][..udp] [....192.168.5.9][62822] -> [....224.0.0.252][.5355] + detected: [...112] [ip4][..udp] [....192.168.5.9][62822] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [...113] [ip4][..tcp] [.....31.13.87.1][..443] -> [...192.168.5.16][53578] [MIDSTREAM] + detected: [...113] [ip4][..tcp] [.....31.13.87.1][..443] -> [...192.168.5.16][53578] [TLS.Facebook][SocialNetwork][Fun] + new: [...114] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][61172] -> [..............................ff02::1:3][.5355] + detected: [...114] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][61172] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [...115] [ip4][..udp] [..192.168.3.236][59730] -> [....224.0.0.252][.5355] + detected: [...115] [ip4][..udp] [..192.168.3.236][59730] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [...116] [ip6][..udp] [..............fe80::f65c:89ff:fe89:e607][..546] -> [..............................ff02::1:2][..547] + detected: [...116] [ip6][..udp] [..............fe80::f65c:89ff:fe89:e607][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + new: [...117] [ip4][..tcp] [...192.168.5.16][53629] -> [.192.168.115.75][..443] + detected: [...117] [ip4][..tcp] [...192.168.5.16][53629] -> [.192.168.115.75][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [...117] [ip4][..tcp] [...192.168.5.16][53629] -> [.192.168.115.75][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS + update: [.....7] [ip4][..udp] [...192.168.5.41][55312] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....14] [ip4][..udp] [..192.168.115.8][51024] -> [........8.8.8.8][...53] [DNS.1kxun][Streaming][Fun] + update: [....21] [ip4][..udp] [...192.168.3.95][59468] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [.....8] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + update: [.....3] [ip4][..udp] [...192.168.5.44][51389] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [.....4] [ip4][..udp] [..192.168.119.1][...67] -> [255.255.255.255][...68] [DHCP][Network][Acceptable] + update: [.....2] [ip4][..udp] [...192.168.5.57][55809] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....18] [ip4][..udp] [..192.168.115.8][..137] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + update: [....12] [ip4][..udp] [...192.168.5.47][60267] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....20] [ip4][..udp] [...192.168.3.95][58779] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [.....6] [ip4][..udp] [...192.168.5.50][64674] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [.....9] [ip6][..udp] [...............fe80::406:55a8:6453:25dd][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + update: [....19] [ip6][..udp] [..............fe80::e98f:bae2:19f7:6b0f][58779] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [....16] [ip4][..udp] [..192.168.115.8][52723] -> [........8.8.8.8][...53] [DNS.1kxun][Streaming][Fun] + update: [....11] [ip4][..udp] [...192.168.5.47][61603] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [.....1] [ip4][..udp] [...192.168.5.44][59571] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....10] [ip6][..udp] [..............fe80::edf5:240a:c8c0:8312][61603] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [....13] [ip4][..udp] [..192.168.115.8][51458] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + analyse: [....31] [ip4][..tcp] [..192.168.115.8][49603] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 45.001| 1.464| 7.949] + [IAT(c->s)...: 0.000| 45.001| 4.519| 13.494][IAT(s->c)...: 0.000| 0.069| 0.009| 0.022] + [PKTLEN(c->s): 54.000| 415.000| 121.900| 138.200][PKTLEN(s->c): 60.000|1314.000|1148.500| 404.800] + [BINS(c->s)..: 9,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,0,0,0,0,0,0,0,0] + new: [...118] [ip4][..udp] [..192.168.0.104][..137] -> [192.168.255.255][..137] + detected: [...118] [ip4][..udp] [..192.168.0.104][..137] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + new: [...119] [ip4][..udp] [...192.168.5.16][..123] -> [..17.253.26.125][..123] + detected: [...119] [ip4][..udp] [...192.168.5.16][..123] -> [..17.253.26.125][..123] [NTP][System][Acceptable] + new: [...120] [ip6][..udp] [..............fe80::4568:efbc:40b1:1346][57148] -> [..............................ff02::1:3][.5355] + detected: [...120] [ip6][..udp] [..............fe80::4568:efbc:40b1:1346][57148] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [...121] [ip4][..udp] [...192.168.5.41][55593] -> [....224.0.0.252][.5355] + detected: [...121] [ip4][..udp] [...192.168.5.41][55593] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [...122] [ip4][..udp] [...192.168.5.57][64428] -> [....224.0.0.252][.5355] + detected: [...122] [ip4][..udp] [...192.168.5.57][64428] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [...123] [ip6][..udp] [...............fe80::e034:7be:d8f9:6197][57143] -> [..............................ff02::1:3][.5355] + detected: [...123] [ip6][..udp] [...............fe80::e034:7be:d8f9:6197][57143] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [...124] [ip4][..udp] [...192.168.5.50][57143] -> [....224.0.0.252][.5355] + detected: [...124] [ip4][..udp] [...192.168.5.50][57143] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [...125] [ip6][..udp] [...............fe80::e034:7be:d8f9:6197][49766] -> [..............................ff02::1:3][.5355] + detected: [...125] [ip6][..udp] [...............fe80::e034:7be:d8f9:6197][49766] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [...126] [ip4][..udp] [...192.168.5.50][49766] -> [....224.0.0.252][.5355] + detected: [...126] [ip4][..udp] [...192.168.5.50][49766] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [...127] [ip4][..udp] [...192.168.5.44][59062] -> [....224.0.0.252][.5355] + detected: [...127] [ip4][..udp] [...192.168.5.44][59062] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [...128] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][58468] -> [..............................ff02::1:3][.5355] + detected: [...128] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][58468] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [...129] [ip4][..udp] [..192.168.3.236][65496] -> [....224.0.0.252][.5355] + detected: [...129] [ip4][..udp] [..192.168.3.236][65496] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....44] [ip4][..udp] [...192.168.5.37][57325] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....51] [ip4][..udp] [....192.168.5.9][55484] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....50] [ip4][..udp] [.192.168.101.33][55485] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....23] [ip6][..udp] [..2001:b030:214:100:c2a0:bbff:fe73:eb47][62976] -> [................................ff02::1][62976] + update: [....55] [ip4][..udp] [...192.168.5.16][...68] -> [..192.168.119.1][...67] [DHCP][Network][Acceptable] + update: [....54] [ip4][..udp] [...192.168.5.49][51704] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....35] [ip4][..udp] [...192.168.5.67][..138] -> [192.168.255.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [....43] [ip4][..udp] [...192.168.5.37][56366] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....47] [ip4][..udp] [.192.168.101.33][58456] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....48] [ip4][..udp] [....192.168.5.9][58456] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....42] [ip4][..udp] [.192.168.10.110][60480] -> [255.255.255.255][62976] + update: [....56] [ip4][..udp] [.59.120.208.218][50151] -> [255.255.255.255][.1947] + update: [....22] [ip4][..udp] [.192.168.125.30][62976] -> [255.255.255.255][62976] + update: [....34] [ip4][..udp] [...192.168.3.95][54888] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....39] [ip4][..udp] [..192.168.115.8][54420] -> [........8.8.8.8][...53] [DNS.QQ][Chat][Fun] + update: [....26] [ip4][..udp] [..192.168.115.8][60724] -> [........8.8.8.8][...53] [DNS.1kxun][Streaming][Fun] + update: [....52] [ip6][..udp] [...............fe80::9bd:81dd:2fdc:5750][61548] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [....24] [ip4][..udp] [..192.168.115.8][52723] -> [.....168.95.1.1][...53] [DNS.1kxun][Streaming][Fun] + update: [....53] [ip4][..udp] [...192.168.5.49][61548] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....33] [ip6][..udp] [..............fe80::e98f:bae2:19f7:6b0f][54888] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + DAEMON-EVENT: [Processed: 1439 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 129 / 129|skipped: 0|!detected: 0|guessed: 0|detection-updates: 11|updates: 38] + new: [...130] [ip4][..tcp] [..192.168.2.126][60962] -> [..172.104.93.92][.1234] [MIDSTREAM] + detected: [...130] [ip4][..tcp] [..192.168.2.126][60962] -> [..172.104.93.92][.1234] [HTTP.1kxun][Streaming][Fun] + RISK: Known Proto on Non Std Port + new: [...131] [ip4][..tcp] [..192.168.2.126][60972] -> [..172.104.93.92][.1234] [MIDSTREAM] + detected: [...131] [ip4][..tcp] [..192.168.2.126][60972] -> [..172.104.93.92][.1234] [HTTP.1kxun][Streaming][Fun] + RISK: Known Proto on Non Std Port + new: [...132] [ip4][..tcp] [..192.168.2.126][60984] -> [..172.104.93.92][.1234] [MIDSTREAM] + detected: [...132] [ip4][..tcp] [..192.168.2.126][60984] -> [..172.104.93.92][.1234] [HTTP.1kxun][Streaming][Fun] + RISK: Known Proto on Non Std Port + new: [...133] [ip4][..tcp] [..192.168.2.126][47230] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...133] [ip4][..tcp] [..192.168.2.126][47230] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...134] [ip4][..tcp] [..192.168.2.126][41134] -> [.129.226.107.77][...80] [MIDSTREAM] + detected: [...134] [ip4][..tcp] [..192.168.2.126][41134] -> [.129.226.107.77][...80] [HTTP.QQ][Chat][Fun] + new: [...135] [ip4][..tcp] [..192.168.2.126][47246] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...135] [ip4][..tcp] [..192.168.2.126][47246] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...136] [ip4][..tcp] [..192.168.2.126][47262] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...136] [ip4][..tcp] [..192.168.2.126][47262] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [....44] [ip4][..udp] [...192.168.5.37][57325] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....78] [ip4][..udp] [...192.168.5.48][59797] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [...108] [ip4][..udp] [...192.168.5.16][63372] -> [.....168.95.1.1][...53] [DNS][Network][Acceptable] + idle: [.....7] [ip4][..udp] [...192.168.5.41][55312] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [...125] [ip6][..udp] [...............fe80::e034:7be:d8f9:6197][49766] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [...109] [ip4][..tcp] [...192.168.5.16][53627] -> [...203.69.81.73][...80] [HTTP][Web][Acceptable] + idle: [...110] [ip4][..tcp] [...192.168.5.16][53628] -> [...203.69.81.73][...80] [HTTP][Web][Acceptable] + idle: [....14] [ip4][..udp] [..192.168.115.8][51024] -> [........8.8.8.8][...53] [DNS.1kxun][Streaming][Fun] + not-detected: [....77] [ip4][..udp] [..192.168.2.186][32768] -> [255.255.255.255][.1947] [Unknown][Unrated] + idle: [....77] [ip4][..udp] [..192.168.2.186][32768] -> [255.255.255.255][.1947] + idle: [....21] [ip4][..udp] [...192.168.3.95][59468] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [...120] [ip6][..udp] [..............fe80::4568:efbc:40b1:1346][57148] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [.....8] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [....63] [ip4][..udp] [..192.168.3.236][51714] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....40] [ip4][..tcp] [..192.168.115.8][49608] -> [203.205.151.234][...80] [HTTP.QQ][Chat][Fun] + idle: [....51] [ip4][..udp] [....192.168.5.9][55484] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....50] [ip4][..udp] [.192.168.101.33][55485] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [.....3] [ip4][..udp] [...192.168.5.44][51389] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [...113] [ip4][..tcp] [.....31.13.87.1][..443] -> [...192.168.5.16][53578] + idle: [...106] [ip4][..tcp] [...192.168.5.16][53580] -> [....31.13.87.36][..443] + not-detected: [....66] [ip6][..udp] [.......2001:b020:6::c2a0:bbff:fe73:eb57][62976] -> [................................ff02::1][62976] [Unknown][Unrated] + idle: [....66] [ip6][..udp] [.......2001:b020:6::c2a0:bbff:fe73:eb57][62976] -> [................................ff02::1][62976] + not-detected: [....23] [ip6][..udp] [..2001:b030:214:100:c2a0:bbff:fe73:eb47][62976] -> [................................ff02::1][62976] [Unknown][Unrated] + idle: [....23] [ip6][..udp] [..2001:b030:214:100:c2a0:bbff:fe73:eb47][62976] -> [................................ff02::1][62976] + idle: [...126] [ip4][..udp] [...192.168.5.50][49766] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....91] [ip4][..udp] [..192.168.3.236][62069] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [...105] [ip4][..udp] [...192.168.5.41][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [....74] [ip4][..udp] [....192.168.5.9][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [.....4] [ip4][..udp] [..192.168.119.1][...67] -> [255.255.255.255][...68] [DHCP][Network][Acceptable] + idle: [....96] [ip4][..udp] [...192.168.5.47][53962] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [...100] [ip4][..udp] [..192.168.3.236][56043] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....95] [ip6][..udp] [..............fe80::edf5:240a:c8c0:8312][53962] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [....97] [ip6][..udp] [..............fe80::e98f:bae2:19f7:6b0f][51451] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + not-detected: [....94] [ip4][..udp] [..192.168.119.2][43786] -> [255.255.255.255][.5678] [Unknown][Unrated] + idle: [....94] [ip4][..udp] [..192.168.119.2][43786] -> [255.255.255.255][.5678] + idle: [....85] [ip4][..udp] [...192.168.5.50][50030] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....55] [ip4][..udp] [...192.168.5.16][...68] -> [..192.168.119.1][...67] [DHCP][Network][Acceptable] + idle: [....54] [ip4][..udp] [...192.168.5.49][51704] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [.....2] [ip4][..udp] [...192.168.5.57][55809] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [...103] [ip6][..udp] [...............fe80::9bd:81dd:2fdc:5750][64568] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [...122] [ip4][..udp] [...192.168.5.57][64428] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....41] [ip4][..tcp] [..192.168.115.8][49609] -> [..42.120.51.152][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + idle: [...114] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][61172] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [....75] [ip4][..udp] [...192.168.5.48][49701] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....68] [ip4][..udp] [...192.168.5.45][59461] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + idle: [...118] [ip4][..udp] [..192.168.0.104][..137] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + idle: [....69] [ip4][..udp] [...192.168.5.45][..137] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + idle: [....64] [ip4][..udp] [..192.168.3.236][..137] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + idle: [....18] [ip4][..udp] [..192.168.115.8][..137] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + idle: [....70] [ip4][..udp] [...192.168.5.45][..138] -> [192.168.255.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [....35] [ip4][..udp] [...192.168.5.67][..138] -> [192.168.255.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [....43] [ip4][..udp] [...192.168.5.37][56366] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [...104] [ip4][..udp] [...192.168.5.49][64568] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....38] [ip4][..tcp] [..192.168.115.8][49607] -> [218.244.135.170][.9099] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + idle: [....48] [ip4][..udp] [....192.168.5.9][58456] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....47] [ip4][..udp] [.192.168.101.33][58456] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....81] [ip6][..udp] [...............fe80::e034:7be:d8f9:6197][62756] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + not-detected: [....42] [ip4][..udp] [.192.168.10.110][60480] -> [255.255.255.255][62976] [Unknown][Unrated] + idle: [....42] [ip4][..udp] [.192.168.10.110][60480] -> [255.255.255.255][62976] + idle: [....73] [ip4][..udp] [...192.168.5.41][54470] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....76] [ip4][..udp] [...192.168.5.64][.5353] -> [....224.0.0.251][.5353] + idle: [...102] [ip4][..udp] [...192.168.5.37][54506] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....12] [ip4][..udp] [...192.168.5.47][60267] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....67] [ip4][..udp] [...192.168.5.45][59789] -> [192.168.255.255][..137] [NetBIOS][System][Acceptable] + guessed: [.....5] [ip4][..tcp] [...192.168.5.16][53605] -> [.68.233.253.133][...80] [HTTP][Web][Acceptable] + end: [.....5] [ip4][..tcp] [...192.168.5.16][53605] -> [.68.233.253.133][...80] + idle: [....82] [ip4][..udp] [...192.168.5.50][62756] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + guessed: [....58] [ip4][..tcp] [...192.168.5.16][53613] -> [.68.233.253.133][...80] [HTTP][Web][Acceptable] + end: [....58] [ip4][..tcp] [...192.168.5.16][53613] -> [.68.233.253.133][...80] + not-detected: [....56] [ip4][..udp] [.59.120.208.218][50151] -> [255.255.255.255][.1947] [Unknown][Unrated] + idle: [....56] [ip4][..udp] [.59.120.208.218][50151] -> [255.255.255.255][.1947] + end: [....59] [ip4][..tcp] [...192.168.5.16][53624] -> [.68.233.253.133][...80] [HTTP][Web][Acceptable] + idle: [....92] [ip4][..udp] [...192.168.5.44][58702] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....62] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][63659] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [...112] [ip4][..udp] [....192.168.5.9][62822] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [...111] [ip4][..udp] [.192.168.101.33][62822] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + guessed: [....61] [ip4][..tcp] [..192.168.115.8][49581] -> [.64.233.189.128][...80] [HTTP.Google][Web][Acceptable] + idle: [....61] [ip4][..tcp] [..192.168.115.8][49581] -> [.64.233.189.128][...80] + idle: [....20] [ip4][..udp] [...192.168.3.95][58779] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....15] [ip4][..tcp] [..192.168.115.8][49597] -> [.106.185.35.110][...80] [HTTP.1kxun][Streaming][Fun] + idle: [....36] [ip4][..tcp] [..192.168.115.8][49605] -> [.106.185.35.110][...80] [HTTP.1kxun][Streaming][Fun] + idle: [....37] [ip4][..tcp] [..192.168.115.8][49606] -> [.106.185.35.110][...80] [HTTP.1kxun][Streaming][Fun] + idle: [....25] [ip4][..tcp] [..192.168.115.8][49598] -> [.222.73.254.167][...80] [HTTP.1kxun][Streaming][Fun] + guessed: [....17] [ip4][..tcp] [...192.168.5.16][53622] -> [.192.168.115.75][..443] [TLS][Web][Safe] + end: [....17] [ip4][..tcp] [...192.168.5.16][53622] -> [.192.168.115.75][..443] + end: [....45] [ip4][..tcp] [...192.168.5.16][53623] -> [.192.168.115.75][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS + end: [....87] [ip4][..tcp] [...192.168.5.16][53625] -> [.192.168.115.75][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS + end: [...107] [ip4][..tcp] [...192.168.5.16][53626] -> [.192.168.115.75][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS + end: [...117] [ip4][..tcp] [...192.168.5.16][53629] -> [.192.168.115.75][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS + idle: [.....6] [ip4][..udp] [...192.168.5.50][64674] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + not-detected: [....65] [ip4][..udp] [192.168.140.140][62976] -> [255.255.255.255][62976] [Unknown][Unrated] + idle: [....65] [ip4][..udp] [192.168.140.140][62976] -> [255.255.255.255][62976] + not-detected: [....71] [ip4][..udp] [...192.168.10.7][62976] -> [255.255.255.255][62976] [Unknown][Unrated] + idle: [....71] [ip4][..udp] [...192.168.10.7][62976] -> [255.255.255.255][62976] + not-detected: [....22] [ip4][..udp] [.192.168.125.30][62976] -> [255.255.255.255][62976] [Unknown][Unrated] + idle: [....22] [ip4][..udp] [.192.168.125.30][62976] -> [255.255.255.255][62976] + idle: [....34] [ip4][..udp] [...192.168.3.95][54888] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [...123] [ip6][..udp] [...............fe80::e034:7be:d8f9:6197][57143] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [....80] [ip4][..udp] [...192.168.5.57][65150] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + not-detected: [....88] [ip4][..udp] [..192.168.119.1][56861] -> [255.255.255.255][.5678] [Unknown][Unrated] + idle: [....88] [ip4][..udp] [..192.168.119.1][56861] -> [255.255.255.255][.5678] + idle: [...116] [ip6][..udp] [..............fe80::f65c:89ff:fe89:e607][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + idle: [....72] [ip6][..udp] [..............fe80::4568:efbc:40b1:1346][50194] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [...127] [ip4][..udp] [...192.168.5.44][59062] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....90] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][49735] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [....39] [ip4][..udp] [..192.168.115.8][54420] -> [........8.8.8.8][...53] [DNS.QQ][Chat][Fun] + idle: [...124] [ip4][..udp] [...192.168.5.50][57143] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + not-detected: [....79] [ip4][..udp] [..192.168.0.100][50925] -> [255.255.255.255][.5678] [Unknown][Unrated] + idle: [....79] [ip4][..udp] [..192.168.0.100][50925] -> [255.255.255.255][.5678] + idle: [....99] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][53938] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [....27] [ip4][..tcp] [..192.168.115.8][49599] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + idle: [....28] [ip4][..tcp] [..192.168.115.8][49600] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + idle: [....29] [ip4][..tcp] [..192.168.115.8][49601] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + idle: [....30] [ip4][..tcp] [..192.168.115.8][49602] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + idle: [....26] [ip4][..udp] [..192.168.115.8][60724] -> [........8.8.8.8][...53] [DNS.1kxun][Streaming][Fun] + idle: [....31] [ip4][..tcp] [..192.168.115.8][49603] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + idle: [....32] [ip4][..tcp] [..192.168.115.8][49604] -> [.106.187.35.246][...80] [HTTP.1kxun][Streaming][Fun] + idle: [.....9] [ip6][..udp] [...............fe80::406:55a8:6453:25dd][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + idle: [....52] [ip6][..udp] [...............fe80::9bd:81dd:2fdc:5750][61548] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [...129] [ip4][..udp] [..192.168.3.236][65496] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....19] [ip6][..udp] [..............fe80::e98f:bae2:19f7:6b0f][58779] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + guessed: [...101] [ip4][..tcp] [.119.235.235.84][..443] -> [...192.168.5.16][53406] [TLS][Web][Safe] + idle: [...101] [ip4][..tcp] [.119.235.235.84][..443] -> [...192.168.5.16][53406] + end: [....46] [ip4][..tcp] [..192.168.115.8][49612] -> [.183.131.48.145][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + idle: [....49] [ip4][..tcp] [..192.168.115.8][49613] -> [.183.131.48.144][...80] [HTTP][Media][Acceptable] + RISK: HTTP Numeric IP Address + idle: [....24] [ip4][..udp] [..192.168.115.8][52723] -> [.....168.95.1.1][...53] [DNS.1kxun][Streaming][Fun] + not-detected: [....89] [ip6][..udp] [................fe80::4e5e:cff:feea:365][.5678] -> [................................ff02::1][.5678] [Unknown][Unrated] + idle: [....89] [ip6][..udp] [................fe80::4e5e:cff:feea:365][.5678] -> [................................ff02::1][.5678] + not-detected: [....60] [ip6][..udp] [...............fe80::4e5e:cff:fe9a:ec54][.5678] -> [................................ff02::1][.5678] [Unknown][Unrated] + idle: [....60] [ip6][..udp] [...............fe80::4e5e:cff:fe9a:ec54][.5678] -> [................................ff02::1][.5678] + idle: [...119] [ip4][..udp] [...192.168.5.16][..123] -> [..17.253.26.125][..123] [NTP][System][Acceptable] + idle: [....16] [ip4][..udp] [..192.168.115.8][52723] -> [........8.8.8.8][...53] [DNS.1kxun][Streaming][Fun] + guessed: [....57] [ip4][..tcp] [..192.168.115.8][49596] -> [..203.66.182.87][..443] [TLS][Web][Safe] + idle: [....57] [ip4][..tcp] [..192.168.115.8][49596] -> [..203.66.182.87][..443] + idle: [....53] [ip4][..udp] [...192.168.5.49][61548] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....93] [ip6][..udp] [..............fe80::beee:7bff:fe0c:b3de][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + idle: [....11] [ip4][..udp] [...192.168.5.47][61603] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....33] [ip6][..udp] [..............fe80::e98f:bae2:19f7:6b0f][54888] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [.....1] [ip4][..udp] [...192.168.5.44][59571] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....10] [ip6][..udp] [..............fe80::edf5:240a:c8c0:8312][61603] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [....98] [ip4][..udp] [...192.168.3.95][51451] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....83] [ip4][..udp] [...192.168.5.49][.1900] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....13] [ip4][..udp] [..192.168.115.8][51458] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [...128] [ip6][..udp] [..............fe80::5d92:62a8:ebde:1319][58468] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [...121] [ip4][..udp] [...192.168.5.41][55593] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + not-detected: [....86] [ip4][..udp] [.59.120.208.212][32768] -> [255.255.255.255][.1947] [Unknown][Unrated] + idle: [....86] [ip4][..udp] [.59.120.208.212][32768] -> [255.255.255.255][.1947] + idle: [...115] [ip4][..udp] [..192.168.3.236][59730] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....84] [ip6][..udp] [...............fe80::9bd:81dd:2fdc:5750][.1900] -> [................................ff02::c][.1900] [SSDP][System][Acceptable] + new: [...137] [ip4][..tcp] [..192.168.2.126][47272] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...137] [ip4][..tcp] [..192.168.2.126][47272] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...138] [ip4][..tcp] [..192.168.2.126][38834] -> [..119.45.78.184][...80] [MIDSTREAM] + detected: [...138] [ip4][..tcp] [..192.168.2.126][38834] -> [..119.45.78.184][...80] [HTTP.QQ][Chat][Fun] + new: [...139] [ip4][..tcp] [..192.168.2.126][60148] -> [.172.105.121.82][...80] [MIDSTREAM] + detected: [...139] [ip4][..tcp] [..192.168.2.126][60148] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + new: [...140] [ip4][..tcp] [..192.168.2.126][49242] -> [.172.104.119.80][...80] [MIDSTREAM] + detected: [...140] [ip4][..tcp] [..192.168.2.126][49242] -> [.172.104.119.80][...80] [HTTP.1kxun][Streaming][Fun] + new: [...141] [ip4][..tcp] [..192.168.2.126][46184] -> [.172.105.121.82][...80] [MIDSTREAM] + detected: [...141] [ip4][..tcp] [..192.168.2.126][46184] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + new: [...142] [ip4][..tcp] [..192.168.2.126][46170] -> [.172.105.121.82][...80] [MIDSTREAM] + detected: [...142] [ip4][..tcp] [..192.168.2.126][46170] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + new: [...143] [ip4][..tcp] [..192.168.2.126][46200] -> [.172.105.121.82][...80] [MIDSTREAM] + detected: [...143] [ip4][..tcp] [..192.168.2.126][46200] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + new: [...144] [ip4][..tcp] [..192.168.2.126][46212] -> [.172.105.121.82][...80] [MIDSTREAM] + detected: [...144] [ip4][..tcp] [..192.168.2.126][46212] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + analyse: [...142] [ip4][..tcp] [..192.168.2.126][46170] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.895| 0.074| 0.190] + [IAT(c->s)...: 0.895| 0.895| 0.895| 0.000][IAT(s->c)...: 0.000| 0.372| 0.045| 0.111] + [PKTLEN(c->s): 274.000| 278.000| 276.000| 2.000][PKTLEN(s->c): 387.000|21666.000|4833.000|5678.800] + [BINS(c->s)..: 0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,16] + analyse: [...139] [ip4][..tcp] [..192.168.2.126][60148] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.661| 0.481| 1.215] + [IAT(c->s)...: 0.217| 4.661| 1.520| 1.830][IAT(s->c)...: 0.000| 4.604| 0.292| 0.951] + [PKTLEN(c->s): 268.000| 278.000| 273.800| 4.800][PKTLEN(s->c): 384.000|21666.000|5875.000|6417.900] + [BINS(c->s)..: 0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,2,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,17] + analyse: [...143] [ip4][..tcp] [..192.168.2.126][46200] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.892| 0.092| 0.200] + [IAT(c->s)...: 0.892| 0.892| 0.892| 0.000][IAT(s->c)...: 0.000| 0.376| 0.061| 0.126] + [PKTLEN(c->s): 278.000| 278.000| 278.000| 0.000][PKTLEN(s->c): 386.000|21666.000|7390.700|6768.700] + [BINS(c->s)..: 0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,20] + new: [...145] [ip4][..tcp] [..192.168.2.126][35200] -> [...103.29.71.30][...80] [MIDSTREAM] + detected: [...145] [ip4][..tcp] [..192.168.2.126][35200] -> [...103.29.71.30][...80] [HTTP.1kxun][Streaming][Fun] + new: [...146] [ip4][..tcp] [..192.168.2.126][45380] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...146] [ip4][..tcp] [..192.168.2.126][45380] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...147] [ip4][..tcp] [..192.168.2.126][45388] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...147] [ip4][..tcp] [..192.168.2.126][45388] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...148] [ip4][..tcp] [..192.168.2.126][45398] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...148] [ip4][..tcp] [..192.168.2.126][45398] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...149] [ip4][..tcp] [..192.168.2.126][45414] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...149] [ip4][..tcp] [..192.168.2.126][45414] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...150] [ip4][..tcp] [..192.168.2.126][45416] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...150] [ip4][..tcp] [..192.168.2.126][45416] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...151] [ip4][..tcp] [..192.168.2.126][45422] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...151] [ip4][..tcp] [..192.168.2.126][45422] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...152] [ip4][..tcp] [..192.168.2.126][45424] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...152] [ip4][..tcp] [..192.168.2.126][45424] -> [..161.117.13.29][...80] [HTTP][Streaming][Acceptable] + detection-update: [...151] [ip4][..tcp] [..192.168.2.126][45422] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...153] [ip4][..tcp] [..192.168.2.126][41390] -> [....18.64.79.37][...80] [MIDSTREAM] + detected: [...153] [ip4][..tcp] [..192.168.2.126][41390] -> [....18.64.79.37][...80] [HTTP.Google][Web][Acceptable] + analyse: [...146] [ip4][..tcp] [..192.168.2.126][45380] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.409| 0.085| 0.132] + [IAT(c->s)...: 0.380| 0.409| 0.394| 0.014][IAT(s->c)...: 0.000| 0.380| 0.064| 0.108] + [PKTLEN(c->s): 490.000| 831.000| 607.700| 158.000][PKTLEN(s->c): 1267.000|8706.000|2823.700|2208.900] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,16,0,12] + new: [...154] [ip4][..tcp] [..192.168.2.126][51888] -> [.119.28.164.143][...80] [MIDSTREAM] + detected: [...154] [ip4][..tcp] [..192.168.2.126][51888] -> [.119.28.164.143][...80] [HTTP.Tencent][SocialNetwork][Acceptable] + new: [...155] [ip4][..tcp] [..192.168.2.126][38354] -> [.142.250.186.34][...80] [MIDSTREAM] + detected: [...155] [ip4][..tcp] [..192.168.2.126][38354] -> [.142.250.186.34][...80] [HTTP.Google][Advertisement][Acceptable] + detection-update: [...155] [ip4][..tcp] [..192.168.2.126][38354] -> [.142.250.186.34][...80] [HTTP.Google][Advertisement][Acceptable] + new: [...156] [ip4][..tcp] [..192.168.2.126][36732] -> [142.250.186.174][...80] [MIDSTREAM] + detected: [...156] [ip4][..tcp] [..192.168.2.126][36732] -> [142.250.186.174][...80] [HTTP.Google][Advertisement][Acceptable] + new: [...157] [ip4][..tcp] [..192.168.2.126][49354] -> [.14.136.136.108][...80] [MIDSTREAM] + detected: [...157] [ip4][..tcp] [..192.168.2.126][49354] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + new: [...158] [ip4][..tcp] [..192.168.2.126][49372] -> [.14.136.136.108][...80] [MIDSTREAM] + detected: [...158] [ip4][..tcp] [..192.168.2.126][49372] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + new: [...159] [ip4][..tcp] [..192.168.2.126][49370] -> [.14.136.136.108][...80] [MIDSTREAM] + detected: [...159] [ip4][..tcp] [..192.168.2.126][49370] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + new: [...160] [ip4][..tcp] [..192.168.2.126][49380] -> [.14.136.136.108][...80] [MIDSTREAM] + detected: [...160] [ip4][..tcp] [..192.168.2.126][49380] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + new: [...161] [ip4][..tcp] [..192.168.2.126][49412] -> [.14.136.136.108][...80] [MIDSTREAM] + detected: [...161] [ip4][..tcp] [..192.168.2.126][49412] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + new: [...162] [ip4][..tcp] [..192.168.2.126][49396] -> [.14.136.136.108][...80] [MIDSTREAM] + detected: [...162] [ip4][..tcp] [..192.168.2.126][49396] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + analyse: [...157] [ip4][..tcp] [..192.168.2.126][49354] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.832| 0.077| 0.179] + [IAT(c->s)...: 0.832| 0.832| 0.832| 0.000][IAT(s->c)...: 0.000| 0.414| 0.048| 0.103] + [PKTLEN(c->s): 592.000| 592.000| 592.000| 0.000][PKTLEN(s->c): 351.000|10146.000|3286.700|2484.500] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,0,16] + detection-update: [...161] [ip4][..tcp] [..192.168.2.126][49412] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + detection-update: [...160] [ip4][..tcp] [..192.168.2.126][49380] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + analyse: [...159] [ip4][..tcp] [..192.168.2.126][49370] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.877| 0.084| 0.182] + [IAT(c->s)...: 0.877| 0.877| 0.877| 0.000][IAT(s->c)...: 0.000| 0.237| 0.052| 0.091] + [PKTLEN(c->s): 580.000| 592.000| 586.000| 6.000][PKTLEN(s->c): 351.000|15906.000|2906.900|3087.700] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,17,0,10] + analyse: [...160] [ip4][..tcp] [..192.168.2.126][49380] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.887| 0.081| 0.181] + [IAT(c->s)...: 0.887| 0.887| 0.887| 0.000][IAT(s->c)...: 0.000| 0.238| 0.050| 0.090] + [PKTLEN(c->s): 580.000| 592.000| 586.000| 6.000][PKTLEN(s->c): 351.000|18786.000|3329.200|3784.500] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,17,0,11] + analyse: [...158] [ip4][..tcp] [..192.168.2.126][49372] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.900| 0.119| 0.204] + [IAT(c->s)...: 0.407| 0.900| 0.654| 0.246][IAT(s->c)...: 0.000| 0.372| 0.073| 0.113] + [PKTLEN(c->s): 580.000| 592.000| 584.000| 5.700][PKTLEN(s->c): 351.000|18786.000|3984.800|4268.800] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,14] + new: [...163] [ip4][..tcp] [..192.168.2.126][44368] -> [..172.217.18.98][...80] [MIDSTREAM] + detected: [...163] [ip4][..tcp] [..192.168.2.126][44368] -> [..172.217.18.98][...80] [HTTP.GoogleServices][Web][Acceptable] + new: [...164] [ip4][..tcp] [..192.168.2.126][50140] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...164] [ip4][..tcp] [..192.168.2.126][50140] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...165] [ip4][..tcp] [..192.168.2.126][50148] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...165] [ip4][..tcp] [..192.168.2.126][50148] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...166] [ip4][..tcp] [..192.168.2.126][50164] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...166] [ip4][..tcp] [..192.168.2.126][50164] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...167] [ip4][..tcp] [..192.168.2.126][50166] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...167] [ip4][..tcp] [..192.168.2.126][50166] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + new: [...168] [ip4][..tcp] [..192.168.2.126][50176] -> [..161.117.13.29][...80] [MIDSTREAM] + detected: [...168] [ip4][..tcp] [..192.168.2.126][50176] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + analyse: [...150] [ip4][..tcp] [..192.168.2.126][45416] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 6.045| 1.119| 2.029] + [IAT(c->s)...: 0.186| 6.045| 2.305| 2.460][IAT(s->c)...: 0.000| 5.959| 0.742| 1.706] + [PKTLEN(c->s): 500.000|1180.000| 900.200| 214.900][PKTLEN(s->c): 709.000|14466.000|3469.900|3207.100] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,1,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,1,0,0,7,0,13] + new: [...169] [ip4][..tcp] [..192.168.2.126][38326] -> [.172.105.121.82][...80] [MIDSTREAM] + detected: [...169] [ip4][..tcp] [..192.168.2.126][38326] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + new: [...170] [ip4][..tcp] [..192.168.2.126][38314] -> [.172.105.121.82][...80] [MIDSTREAM] + detected: [...170] [ip4][..tcp] [..192.168.2.126][38314] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + new: [...171] [ip4][..tcp] [..192.168.2.126][38316] -> [.172.105.121.82][...80] [MIDSTREAM] + detected: [...171] [ip4][..tcp] [..192.168.2.126][38316] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + analyse: [...141] [ip4][..tcp] [..192.168.2.126][46184] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 39.120| 3.011| 10.152] + [IAT(c->s)...: 0.393| 39.120| 13.465| 18.142][IAT(s->c)...: 0.000| 38.675| 1.705| 7.710] + [PKTLEN(c->s): 273.000| 278.000| 275.500| 2.500][PKTLEN(s->c): 386.000|23106.000|5905.000|6635.000] + [BINS(c->s)..: 0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,7,0,16] + analyse: [...170] [ip4][..tcp] [..192.168.2.126][38314] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.361| 0.129| 0.285] + [IAT(c->s)...: 1.361| 1.361| 1.361| 0.000][IAT(s->c)...: 0.000| 0.401| 0.077| 0.136] + [PKTLEN(c->s): 273.000| 273.000| 273.000| 0.000][PKTLEN(s->c): 388.000|15906.000|6429.300|5274.400] + [BINS(c->s)..: 0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,21] + new: [...172] [ip4][..tcp] [..192.168.2.126][59324] -> [.104.117.221.10][...80] [MIDSTREAM] + detected: [...172] [ip4][..tcp] [..192.168.2.126][59324] -> [.104.117.221.10][...80] [HTTP][Web][Acceptable] + new: [...173] [ip4][..tcp] [..192.168.2.126][56094] -> [....3.72.69.158][...80] [MIDSTREAM] + detected: [...173] [ip4][..tcp] [..192.168.2.126][56094] -> [....3.72.69.158][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...174] [ip4][..tcp] [..192.168.2.126][56098] -> [....3.72.69.158][...80] [MIDSTREAM] + detected: [...174] [ip4][..tcp] [..192.168.2.126][56098] -> [....3.72.69.158][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...175] [ip4][..tcp] [..192.168.2.126][56096] -> [....3.72.69.158][...80] [MIDSTREAM] + detected: [...175] [ip4][..tcp] [..192.168.2.126][56096] -> [....3.72.69.158][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...176] [ip4][..tcp] [..192.168.2.126][56104] -> [....3.72.69.158][...80] [MIDSTREAM] + detected: [...176] [ip4][..tcp] [..192.168.2.126][56104] -> [....3.72.69.158][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...177] [ip4][..tcp] [..192.168.2.126][43266] -> [....18.64.79.58][...80] [MIDSTREAM] + detected: [...177] [ip4][..tcp] [..192.168.2.126][43266] -> [....18.64.79.58][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...178] [ip4][..tcp] [..192.168.2.126][56826] -> [...8.209.97.107][...80] [MIDSTREAM] + detected: [...178] [ip4][..tcp] [..192.168.2.126][56826] -> [...8.209.97.107][...80] [HTTP][Web][Acceptable] + new: [...179] [ip4][..tcp] [..192.168.2.126][43272] -> [....18.64.79.58][...80] [MIDSTREAM] + detected: [...179] [ip4][..tcp] [..192.168.2.126][43272] -> [....18.64.79.58][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...180] [ip4][..tcp] [..192.168.2.126][58758] -> [.202.153.196.53][...80] [MIDSTREAM] + detected: [...180] [ip4][..tcp] [..192.168.2.126][58758] -> [.202.153.196.53][...80] [HTTP][Web][Acceptable] + new: [...181] [ip4][..tcp] [..192.168.2.126][58760] -> [.202.153.196.53][...80] [MIDSTREAM] + detected: [...181] [ip4][..tcp] [..192.168.2.126][58760] -> [.202.153.196.53][...80] [HTTP][Web][Acceptable] + new: [...182] [ip4][..tcp] [..192.168.2.126][35664] -> [.....18.66.2.90][...80] [MIDSTREAM] + detected: [...182] [ip4][..tcp] [..192.168.2.126][35664] -> [.....18.66.2.90][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...183] [ip4][..tcp] [..192.168.2.126][35666] -> [.....18.66.2.90][...80] [MIDSTREAM] + detected: [...183] [ip4][..tcp] [..192.168.2.126][35666] -> [.....18.66.2.90][...80] [HTTP.MpegDash][Media][Acceptable] + new: [...184] [ip4][..tcp] [..192.168.2.126][36636] -> [...18.64.103.30][...80] [MIDSTREAM] + detected: [...184] [ip4][..tcp] [..192.168.2.126][36636] -> [...18.64.103.30][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...185] [ip4][..tcp] [..192.168.2.126][36640] -> [...18.64.103.30][...80] [MIDSTREAM] + detected: [...185] [ip4][..tcp] [..192.168.2.126][36640] -> [...18.64.103.30][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...186] [ip4][..tcp] [..192.168.2.126][36654] -> [...18.64.103.30][...80] [MIDSTREAM] + detected: [...186] [ip4][..tcp] [..192.168.2.126][36654] -> [...18.64.103.30][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + detection-update: [...184] [ip4][..tcp] [..192.168.2.126][36636] -> [...18.64.103.30][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + detection-update: [...185] [ip4][..tcp] [..192.168.2.126][36640] -> [...18.64.103.30][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + detection-update: [...186] [ip4][..tcp] [..192.168.2.126][36654] -> [...18.64.103.30][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...187] [ip4][..tcp] [..192.168.2.126][36660] -> [...18.64.103.30][...80] [MIDSTREAM] + detected: [...187] [ip4][..tcp] [..192.168.2.126][36660] -> [...18.64.103.30][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + analyse: [...182] [ip4][..tcp] [..192.168.2.126][35664] -> [.....18.66.2.90][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.015| 0.003| 0.003] + [IAT(c->s)...: 0.000| 0.000| 0.000| 0.000][IAT(s->c)...: 0.000| 0.015| 0.003| 0.003] + [PKTLEN(c->s): 249.000| 249.000| 249.000| 0.000][PKTLEN(s->c): 797.000|7206.000|4235.400|1662.000] + [BINS(c->s)..: 0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,27] + detection-update: [...187] [ip4][..tcp] [..192.168.2.126][36660] -> [...18.64.103.30][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + analyse: [...185] [ip4][..tcp] [..192.168.2.126][36640] -> [...18.64.103.30][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.021| 0.003| 0.005] + [IAT(c->s)...: 0.000| 0.000| 0.000| 0.000][IAT(s->c)...: 0.000| 0.021| 0.003| 0.005] + [PKTLEN(c->s): 563.000| 563.000| 563.000| 0.000][PKTLEN(s->c): 1494.000|5778.000|3566.900|1641.300] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,0,1,21] + new: [...188] [ip4][..tcp] [..192.168.2.126][37100] -> [..52.29.177.177][...80] [MIDSTREAM] + detected: [...188] [ip4][..tcp] [..192.168.2.126][37100] -> [..52.29.177.177][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...189] [ip4][..tcp] [..192.168.2.126][42554] -> [...35.156.44.13][...80] [MIDSTREAM] + detected: [...189] [ip4][..tcp] [..192.168.2.126][42554] -> [...35.156.44.13][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...190] [ip4][..tcp] [..192.168.2.126][42566] -> [...35.156.44.13][...80] [MIDSTREAM] + detected: [...190] [ip4][..tcp] [..192.168.2.126][42566] -> [...35.156.44.13][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...191] [ip4][..tcp] [..192.168.2.126][41940] -> [....18.64.79.50][...80] [MIDSTREAM] + detected: [...191] [ip4][..tcp] [..192.168.2.126][41940] -> [....18.64.79.50][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + detection-update: [...190] [ip4][..tcp] [..192.168.2.126][42566] -> [...35.156.44.13][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...192] [ip4][..tcp] [..192.168.2.126][54810] -> [..18.233.123.55][...80] [MIDSTREAM] + detected: [...192] [ip4][..tcp] [..192.168.2.126][54810] -> [..18.233.123.55][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...193] [ip4][..tcp] [..192.168.2.126][40204] -> [...18.235.204.9][...80] [MIDSTREAM] + detected: [...193] [ip4][..tcp] [..192.168.2.126][40204] -> [...18.235.204.9][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...194] [ip4][..tcp] [..192.168.2.126][53416] -> [.172.217.16.142][...80] [MIDSTREAM] + detected: [...194] [ip4][..tcp] [..192.168.2.126][53416] -> [.172.217.16.142][...80] [HTTP.Google][Web][Acceptable] + new: [...195] [ip4][..tcp] [..192.168.2.126][33042] -> [...3.122.190.70][...80] [MIDSTREAM] + detected: [...195] [ip4][..tcp] [..192.168.2.126][33042] -> [...3.122.190.70][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + new: [...196] [ip4][..tcp] [..192.168.2.126][35426] -> [..8.209.112.118][...80] [MIDSTREAM] + detected: [...196] [ip4][..tcp] [..192.168.2.126][35426] -> [..8.209.112.118][...80] [HTTP][Web][Acceptable] + new: [...197] [ip4][..tcp] [..192.168.2.126][51686] -> [....18.64.79.64][...80] [MIDSTREAM] + detected: [...197] [ip4][..tcp] [..192.168.2.126][51686] -> [....18.64.79.64][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...147] [ip4][..tcp] [..192.168.2.126][45388] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...148] [ip4][..tcp] [..192.168.2.126][45398] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...163] [ip4][..tcp] [..192.168.2.126][44368] -> [..172.217.18.98][...80] [HTTP.GoogleServices][Web][Acceptable] + idle: [...178] [ip4][..tcp] [..192.168.2.126][56826] -> [...8.209.97.107][...80] [HTTP][Web][Acceptable] + idle: [...149] [ip4][..tcp] [..192.168.2.126][45414] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...150] [ip4][..tcp] [..192.168.2.126][45416] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...151] [ip4][..tcp] [..192.168.2.126][45422] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...152] [ip4][..tcp] [..192.168.2.126][45424] -> [..161.117.13.29][...80] [HTTP][Streaming][Acceptable] + idle: [...154] [ip4][..tcp] [..192.168.2.126][51888] -> [.119.28.164.143][...80] + idle: [...192] [ip4][..tcp] [..192.168.2.126][54810] -> [..18.233.123.55][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...184] [ip4][..tcp] [..192.168.2.126][36636] -> [...18.64.103.30][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...185] [ip4][..tcp] [..192.168.2.126][36640] -> [...18.64.103.30][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...186] [ip4][..tcp] [..192.168.2.126][36654] -> [...18.64.103.30][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...187] [ip4][..tcp] [..192.168.2.126][36660] -> [...18.64.103.30][...80] + idle: [...180] [ip4][..tcp] [..192.168.2.126][58758] -> [.202.153.196.53][...80] [HTTP][Web][Acceptable] + idle: [...181] [ip4][..tcp] [..192.168.2.126][58760] -> [.202.153.196.53][...80] [HTTP][Web][Acceptable] + idle: [...170] [ip4][..tcp] [..192.168.2.126][38314] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...171] [ip4][..tcp] [..192.168.2.126][38316] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...169] [ip4][..tcp] [..192.168.2.126][38326] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...193] [ip4][..tcp] [..192.168.2.126][40204] -> [...18.235.204.9][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...155] [ip4][..tcp] [..192.168.2.126][38354] -> [.142.250.186.34][...80] [HTTP.Google][Advertisement][Acceptable] + idle: [...157] [ip4][..tcp] [..192.168.2.126][49354] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...159] [ip4][..tcp] [..192.168.2.126][49370] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...158] [ip4][..tcp] [..192.168.2.126][49372] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...160] [ip4][..tcp] [..192.168.2.126][49380] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...162] [ip4][..tcp] [..192.168.2.126][49396] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...140] [ip4][..tcp] [..192.168.2.126][49242] -> [.172.104.119.80][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...161] [ip4][..tcp] [..192.168.2.126][49412] -> [.14.136.136.108][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...177] [ip4][..tcp] [..192.168.2.126][43266] -> [....18.64.79.58][...80] + idle: [...179] [ip4][..tcp] [..192.168.2.126][43272] -> [....18.64.79.58][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...164] [ip4][..tcp] [..192.168.2.126][50140] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...165] [ip4][..tcp] [..192.168.2.126][50148] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...166] [ip4][..tcp] [..192.168.2.126][50164] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...167] [ip4][..tcp] [..192.168.2.126][50166] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...168] [ip4][..tcp] [..192.168.2.126][50176] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...153] [ip4][..tcp] [..192.168.2.126][41390] -> [....18.64.79.37][...80] [HTTP.Google][Web][Acceptable] + idle: [...197] [ip4][..tcp] [..192.168.2.126][51686] -> [....18.64.79.64][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...156] [ip4][..tcp] [..192.168.2.126][36732] -> [142.250.186.174][...80] [HTTP.Google][Advertisement][Acceptable] + idle: [...194] [ip4][..tcp] [..192.168.2.126][53416] -> [.172.217.16.142][...80] [HTTP.Google][Web][Acceptable] + idle: [...189] [ip4][..tcp] [..192.168.2.126][42554] -> [...35.156.44.13][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...190] [ip4][..tcp] [..192.168.2.126][42566] -> [...35.156.44.13][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...195] [ip4][..tcp] [..192.168.2.126][33042] -> [...3.122.190.70][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...173] [ip4][..tcp] [..192.168.2.126][56094] -> [....3.72.69.158][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...175] [ip4][..tcp] [..192.168.2.126][56096] -> [....3.72.69.158][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...174] [ip4][..tcp] [..192.168.2.126][56098] -> [....3.72.69.158][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...176] [ip4][..tcp] [..192.168.2.126][56104] -> [....3.72.69.158][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...134] [ip4][..tcp] [..192.168.2.126][41134] -> [.129.226.107.77][...80] [HTTP.QQ][Chat][Fun] + idle: [...130] [ip4][..tcp] [..192.168.2.126][60962] -> [..172.104.93.92][.1234] [HTTP.1kxun][Streaming][Fun] + RISK: Known Proto on Non Std Port + idle: [...131] [ip4][..tcp] [..192.168.2.126][60972] -> [..172.104.93.92][.1234] [HTTP.1kxun][Streaming][Fun] + RISK: Known Proto on Non Std Port + idle: [...132] [ip4][..tcp] [..192.168.2.126][60984] -> [..172.104.93.92][.1234] [HTTP.1kxun][Streaming][Fun] + RISK: Known Proto on Non Std Port + idle: [...196] [ip4][..tcp] [..192.168.2.126][35426] -> [..8.209.112.118][...80] [HTTP][Web][Acceptable] + idle: [...191] [ip4][..tcp] [..192.168.2.126][41940] -> [....18.64.79.50][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...139] [ip4][..tcp] [..192.168.2.126][60148] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...172] [ip4][..tcp] [..192.168.2.126][59324] -> [.104.117.221.10][...80] [HTTP][Web][Acceptable] + idle: [...138] [ip4][..tcp] [..192.168.2.126][38834] -> [..119.45.78.184][...80] [HTTP.QQ][Chat][Fun] + idle: [...182] [ip4][..tcp] [..192.168.2.126][35664] -> [.....18.66.2.90][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...183] [ip4][..tcp] [..192.168.2.126][35666] -> [.....18.66.2.90][...80] + idle: [...142] [ip4][..tcp] [..192.168.2.126][46170] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...141] [ip4][..tcp] [..192.168.2.126][46184] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...133] [ip4][..tcp] [..192.168.2.126][47230] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...188] [ip4][..tcp] [..192.168.2.126][37100] -> [..52.29.177.177][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [...143] [ip4][..tcp] [..192.168.2.126][46200] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...135] [ip4][..tcp] [..192.168.2.126][47246] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...144] [ip4][..tcp] [..192.168.2.126][46212] -> [.172.105.121.82][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...136] [ip4][..tcp] [..192.168.2.126][47262] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...137] [ip4][..tcp] [..192.168.2.126][47272] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...146] [ip4][..tcp] [..192.168.2.126][45380] -> [..161.117.13.29][...80] [HTTP.1kxun][Streaming][Fun] + idle: [...145] [ip4][..tcp] [..192.168.2.126][35200] -> [...103.29.71.30][...80] [HTTP.1kxun][Streaming][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/443-chrome.pcap.out b/test/results/flow-info/443-chrome.pcap.out new file mode 100644 index 000000000..f5fa5daab --- /dev/null +++ b/test/results/flow-info/443-chrome.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.178.62.197.130][..443] -> [...192.168.1.13][53059] [MIDSTREAM] + guessed: [.....1] [ip4][..tcp] [.178.62.197.130][..443] -> [...192.168.1.13][53059] [TLS][Web][Safe] + idle: [.....1] [ip4][..tcp] [.178.62.197.130][..443] -> [...192.168.1.13][53059] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/443-curl.pcap.out b/test/results/flow-info/443-curl.pcap.out new file mode 100644 index 000000000..d491b56a7 --- /dev/null +++ b/test/results/flow-info/443-curl.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.1.13][55523] -> [.178.62.197.130][..443] + detected: [.....1] [ip4][..tcp] [...192.168.1.13][55523] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + detection-update: [.....1] [ip4][..tcp] [...192.168.1.13][55523] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + detection-update: [.....1] [ip4][..tcp] [...192.168.1.13][55523] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + analyse: [.....1] [ip4][..tcp] [...192.168.1.13][55523] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.784| 0.063| 0.190] + [IAT(c->s)...: 0.000| 0.784| 0.061| 0.188][IAT(s->c)...: 0.000| 0.784| 0.065| 0.193] + [PKTLEN(c->s): 66.000| 583.000| 119.600| 120.800][PKTLEN(s->c): 66.000|1506.000| 741.700| 666.100] + [BINS(c->s)..: 10,4,1,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,3,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0] + end: [.....1] [ip4][..tcp] [...192.168.1.13][55523] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/443-firefox.pcap.out b/test/results/flow-info/443-firefox.pcap.out new file mode 100644 index 000000000..4bda4c57f --- /dev/null +++ b/test/results/flow-info/443-firefox.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.1.13][53096] -> [.178.62.197.130][..443] + detected: [.....1] [ip4][..tcp] [...192.168.1.13][53096] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + detection-update: [.....1] [ip4][..tcp] [...192.168.1.13][53096] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + detection-update: [.....1] [ip4][..tcp] [...192.168.1.13][53096] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + analyse: [.....1] [ip4][..tcp] [...192.168.1.13][53096] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.656| 0.130| 0.404] + [IAT(c->s)...: 0.000| 1.656| 0.144| 0.422][IAT(s->c)...: 0.000| 1.656| 0.119| 0.388] + [PKTLEN(c->s): 66.000| 583.000| 136.600| 139.000][PKTLEN(s->c): 66.000|1506.000| 882.200| 650.900] + [BINS(c->s)..: 11,0,1,0,0,1,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,1,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0] + end: [.....1] [ip4][..tcp] [...192.168.1.13][53096] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/443-git.pcap.out b/test/results/flow-info/443-git.pcap.out new file mode 100644 index 000000000..b7ad00650 --- /dev/null +++ b/test/results/flow-info/443-git.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.1.13][55744] -> [...140.82.114.4][..443] + detected: [.....1] [ip4][..tcp] [...192.168.1.13][55744] -> [...140.82.114.4][..443] [TLS.Github][Collaborative][Acceptable] + detection-update: [.....1] [ip4][..tcp] [...192.168.1.13][55744] -> [...140.82.114.4][..443] [TLS.Github][Collaborative][Acceptable] + detection-update: [.....1] [ip4][..tcp] [...192.168.1.13][55744] -> [...140.82.114.4][..443] [TLS.Github][Collaborative][Acceptable] + analyse: [.....1] [ip4][..tcp] [...192.168.1.13][55744] -> [...140.82.114.4][..443] [TLS.Github][Collaborative][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.144| 0.033| 0.053] + [IAT(c->s)...: 0.000| 0.143| 0.032| 0.051][IAT(s->c)...: 0.000| 0.144| 0.034| 0.055] + [PKTLEN(c->s): 66.000| 583.000| 116.700| 128.900][PKTLEN(s->c): 74.000|1490.000| 618.300| 554.700] + [BINS(c->s)..: 14,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,3,1,1,0,0,0,0,0,1,0,1,0,1,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0,0,0] + end: [.....1] [ip4][..tcp] [...192.168.1.13][55744] -> [...140.82.114.4][..443] [TLS.Github][Collaborative][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/443-opvn.pcap.out b/test/results/flow-info/443-opvn.pcap.out new file mode 100644 index 000000000..1561d5f38 --- /dev/null +++ b/test/results/flow-info/443-opvn.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.1.84][52973] -> [.192.12.192.103][.1194] + detected: [.....1] [ip4][..tcp] [...192.168.1.84][52973] -> [.192.12.192.103][.1194] [OpenVPN][VPN][Acceptable] + analyse: [.....1] [ip4][..tcp] [...192.168.1.84][52973] -> [.192.12.192.103][.1194] [OpenVPN][VPN][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.161| 0.158| 0.364] + [IAT(c->s)...: 0.000| 1.161| 0.153| 0.362][IAT(s->c)...: 0.000| 1.123| 0.164| 0.367] + [PKTLEN(c->s): 66.000|1506.000| 269.600| 378.300][PKTLEN(s->c): 66.000|1506.000| 279.600| 438.000] + [BINS(c->s)..: 7,5,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 8,3,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0] + end: [.....1] [ip4][..tcp] [...192.168.1.84][52973] -> [.192.12.192.103][.1194] [OpenVPN][VPN][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/443-safari.pcap.out b/test/results/flow-info/443-safari.pcap.out new file mode 100644 index 000000000..bb2abd53f --- /dev/null +++ b/test/results/flow-info/443-safari.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.1.13][53031] -> [.178.62.197.130][..443] + detected: [.....1] [ip4][..tcp] [...192.168.1.13][53031] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + detection-update: [.....1] [ip4][..tcp] [...192.168.1.13][53031] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + detection-update: [.....1] [ip4][..tcp] [...192.168.1.13][53031] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + analyse: [.....1] [ip4][..tcp] [...192.168.1.13][53031] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.696| 0.070| 0.175] + [IAT(c->s)...: 0.000| 0.696| 0.068| 0.171][IAT(s->c)...: 0.000| 0.696| 0.073| 0.179] + [PKTLEN(c->s): 66.000| 394.000| 113.600| 89.600][PKTLEN(s->c): 66.000|1506.000| 721.700| 680.000] + [BINS(c->s)..: 11,3,1,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0] + idle: [.....1] [ip4][..tcp] [...192.168.1.13][53031] -> [.178.62.197.130][..443] [TLS.ntop][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/4in4tunnel.pcap.out b/test/results/flow-info/4in4tunnel.pcap.out new file mode 100644 index 000000000..61f76d062 --- /dev/null +++ b/test/results/flow-info/4in4tunnel.pcap.out @@ -0,0 +1,17 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/4in6tunnel.pcap.out b/test/results/flow-info/4in6tunnel.pcap.out new file mode 100644 index 000000000..88893175d --- /dev/null +++ b/test/results/flow-info/4in6tunnel.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][....4] [22e0:1685:eda7:38cc:58bd:f3f1:aa3f:22d8] -> [................344a:ba94:152a:ac34::2a] + detected: [.....1] [ip6][....4] [22e0:1685:eda7:38cc:58bd:f3f1:aa3f:22d8] -> [................344a:ba94:152a:ac34::2a] [IP_in_IP][Network][Acceptable] + idle: [.....1] [ip6][....4] [22e0:1685:eda7:38cc:58bd:f3f1:aa3f:22d8] -> [................344a:ba94:152a:ac34::2a] [IP_in_IP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/6in4tunnel.pcap.out b/test/results/flow-info/6in4tunnel.pcap.out new file mode 100644 index 000000000..0cde2a076 --- /dev/null +++ b/test/results/flow-info/6in4tunnel.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][...41] [....174.3.73.24] -> [.184.105.255.26] + analyse: [.....1] [ip4][...41] [....174.3.73.24] -> [.184.105.255.26] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.005| 0.495| 0.455] + [IAT(c->s)...: 0.000| 1.002| 0.452| 0.445][IAT(s->c)...: 0.000| 1.005| 0.548| 0.461] + [PKTLEN(c->s): 106.000| 310.000| 152.200| 53.200][PKTLEN(s->c): 106.000|1911.000| 376.600| 550.800] + [BINS(c->s)..: 0,0,4,11,0,1,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,2,8,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1] + not-detected: [.....1] [ip4][...41] [....174.3.73.24] -> [.184.105.255.26] [Unknown][Unrated] + idle: [.....1] [ip4][...41] [....174.3.73.24] -> [.184.105.255.26] [Unknown][Unrated] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/6in6tunnel.pcap.out b/test/results/flow-info/6in6tunnel.pcap.out new file mode 100644 index 000000000..f32736774 --- /dev/null +++ b/test/results/flow-info/6in6tunnel.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][...41] [........2001:4f8:4:7:2e0:81ff:fe52:ffff] -> [........2001:4f8:4:7:2e0:81ff:fe52:9a6b] + new: [.....2] [ip6][...41] [.............................feed::beef] -> [.............................feed::cafe] + not-detected: [.....1] [ip6][...41] [........2001:4f8:4:7:2e0:81ff:fe52:ffff] -> [........2001:4f8:4:7:2e0:81ff:fe52:9a6b] [Unknown][Unrated] + idle: [.....1] [ip6][...41] [........2001:4f8:4:7:2e0:81ff:fe52:ffff] -> [........2001:4f8:4:7:2e0:81ff:fe52:9a6b] + not-detected: [.....2] [ip6][...41] [.............................feed::beef] -> [.............................feed::cafe] [Unknown][Unrated] + idle: [.....2] [ip6][...41] [.............................feed::beef] -> [.............................feed::cafe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/BGP_Cisco_hdlc_slarp.pcap.out b/test/results/flow-info/BGP_Cisco_hdlc_slarp.pcap.out new file mode 100644 index 000000000..3f2393be1 --- /dev/null +++ b/test/results/flow-info/BGP_Cisco_hdlc_slarp.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....100.16.1.2][18324] -> [.....100.16.1.1][..179] + detected: [.....1] [ip4][..tcp] [.....100.16.1.2][18324] -> [.....100.16.1.1][..179] [BGP][Network][Acceptable] + idle: [.....1] [ip4][..tcp] [.....100.16.1.2][18324] -> [.....100.16.1.1][..179] [BGP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/BGP_redist.pcap.out b/test/results/flow-info/BGP_redist.pcap.out new file mode 100644 index 000000000..ce0f411ae --- /dev/null +++ b/test/results/flow-info/BGP_redist.pcap.out @@ -0,0 +1,8 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown L3 protocol + new: [.....1] [ip4][..tcp] [........2.2.2.2][..179] -> [........5.5.5.5][49433] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [........2.2.2.2][..179] -> [........5.5.5.5][49433] [BGP][Network][Acceptable] + idle: [.....1] [ip4][..tcp] [........2.2.2.2][..179] -> [........5.5.5.5][49433] [BGP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/EAQ.pcap.out b/test/results/flow-info/EAQ.pcap.out new file mode 100644 index 000000000..3c16af9bf --- /dev/null +++ b/test/results/flow-info/EAQ.pcap.out @@ -0,0 +1,130 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.......10.8.0.1][53497] -> [.173.194.119.48][...80] + detected: [.....1] [ip4][..tcp] [.......10.8.0.1][53497] -> [.173.194.119.48][...80] [HTTP.Google][Web][Acceptable] + RISK: HTTP Suspicious User-Agent + new: [.....2] [ip4][..tcp] [.......10.8.0.1][40467] -> [.173.194.119.24][...80] + detected: [.....2] [ip4][..tcp] [.......10.8.0.1][40467] -> [.173.194.119.24][...80] [HTTP.Google][Web][Acceptable] + RISK: HTTP Suspicious User-Agent + new: [.....3] [ip4][..udp] [.......10.8.0.1][52257] -> [200.185.138.146][.6000] + new: [.....4] [ip4][..udp] [.......10.8.0.1][48890] -> [200.185.125.226][.6000] + new: [.....5] [ip4][..udp] [.......10.8.0.1][51569] -> [.200.194.148.67][.6000] + new: [.....6] [ip4][..udp] [.......10.8.0.1][41438] -> [.200.194.141.66][.6000] + new: [.....7] [ip4][..udp] [.......10.8.0.1][42620] -> [.200.194.148.66][.6000] + new: [.....8] [ip4][..udp] [.......10.8.0.1][43641] -> [.200.194.148.68][.6000] + new: [.....9] [ip4][..udp] [.......10.8.0.1][34687] -> [.200.194.141.68][.6000] + new: [....10] [ip4][..udp] [.......10.8.0.1][39221] -> [.200.194.137.67][.6000] + new: [....11] [ip4][..udp] [.......10.8.0.1][53354] -> [.200.194.137.66][.6000] + new: [....12] [ip4][..udp] [.......10.8.0.1][59959] -> [.200.194.137.68][.6000] + new: [....13] [ip4][..udp] [.......10.8.0.1][37985] -> [.200.194.129.67][.6000] + new: [....14] [ip4][..udp] [.......10.8.0.1][48666] -> [.200.194.129.66][.6000] + new: [....15] [ip4][..udp] [.......10.8.0.1][47714] -> [.200.194.129.68][.6000] + new: [....16] [ip4][..udp] [.......10.8.0.1][43979] -> [.200.194.132.66][.6000] + new: [....17] [ip4][..udp] [.......10.8.0.1][48563] -> [.200.194.141.67][.6000] + new: [....18] [ip4][..udp] [.......10.8.0.1][39185] -> [.200.194.132.67][.6000] + new: [....19] [ip4][..udp] [.......10.8.0.1][52726] -> [.200.194.132.68][.6000] + new: [....20] [ip4][..udp] [.......10.8.0.1][56128] -> [.200.194.133.66][.6000] + new: [....21] [ip4][..udp] [.......10.8.0.1][57004] -> [.200.194.133.67][.6000] + new: [....22] [ip4][..udp] [.......10.8.0.1][53059] -> [.200.194.133.68][.6000] + new: [....23] [ip4][..udp] [.......10.8.0.1][36552] -> [.200.194.136.66][.6000] + new: [....24] [ip4][..udp] [.......10.8.0.1][43934] -> [.200.194.136.68][.6000] + new: [....25] [ip4][..udp] [.......10.8.0.1][47346] -> [.200.194.134.66][.6000] + new: [....26] [ip4][..udp] [.......10.8.0.1][59098] -> [.200.194.134.68][.6000] + new: [....27] [ip4][..udp] [.......10.8.0.1][50175] -> [.200.194.149.67][.6000] + new: [....28] [ip4][..udp] [.......10.8.0.1][36577] -> [.200.194.149.68][.6000] + new: [....29] [ip4][..udp] [.......10.8.0.1][60013] -> [.200.194.136.67][.6000] + new: [....30] [ip4][..udp] [.......10.8.0.1][33356] -> [.200.194.149.66][.6000] + new: [....31] [ip4][..udp] [.......10.8.0.1][40058] -> [.200.194.134.67][.6000] + detected: [.....3] [ip4][..udp] [.......10.8.0.1][52257] -> [200.185.138.146][.6000] [EAQ][Network][Acceptable] + detected: [.....4] [ip4][..udp] [.......10.8.0.1][48890] -> [200.185.125.226][.6000] [EAQ][Network][Acceptable] + detected: [.....5] [ip4][..udp] [.......10.8.0.1][51569] -> [.200.194.148.67][.6000] [EAQ][Network][Acceptable] + detected: [.....7] [ip4][..udp] [.......10.8.0.1][42620] -> [.200.194.148.66][.6000] [EAQ][Network][Acceptable] + detected: [.....8] [ip4][..udp] [.......10.8.0.1][43641] -> [.200.194.148.68][.6000] [EAQ][Network][Acceptable] + detected: [....16] [ip4][..udp] [.......10.8.0.1][43979] -> [.200.194.132.66][.6000] [EAQ][Network][Acceptable] + detected: [....18] [ip4][..udp] [.......10.8.0.1][39185] -> [.200.194.132.67][.6000] [EAQ][Network][Acceptable] + detected: [....19] [ip4][..udp] [.......10.8.0.1][52726] -> [.200.194.132.68][.6000] [EAQ][Network][Acceptable] + update: [.....4] [ip4][..udp] [.......10.8.0.1][48890] -> [200.185.125.226][.6000] [EAQ][Network][Acceptable] + update: [.....7] [ip4][..udp] [.......10.8.0.1][42620] -> [.200.194.148.66][.6000] [EAQ][Network][Acceptable] + update: [.....9] [ip4][..udp] [.......10.8.0.1][34687] -> [.200.194.141.68][.6000] + update: [....11] [ip4][..udp] [.......10.8.0.1][53354] -> [.200.194.137.66][.6000] + update: [....10] [ip4][..udp] [.......10.8.0.1][39221] -> [.200.194.137.67][.6000] + update: [.....5] [ip4][..udp] [.......10.8.0.1][51569] -> [.200.194.148.67][.6000] [EAQ][Network][Acceptable] + update: [.....6] [ip4][..udp] [.......10.8.0.1][41438] -> [.200.194.141.66][.6000] + update: [....12] [ip4][..udp] [.......10.8.0.1][59959] -> [.200.194.137.68][.6000] + update: [.....8] [ip4][..udp] [.......10.8.0.1][43641] -> [.200.194.148.68][.6000] [EAQ][Network][Acceptable] + update: [.....3] [ip4][..udp] [.......10.8.0.1][52257] -> [200.185.138.146][.6000] [EAQ][Network][Acceptable] + update: [....17] [ip4][..udp] [.......10.8.0.1][48563] -> [.200.194.141.67][.6000] + update: [....19] [ip4][..udp] [.......10.8.0.1][52726] -> [.200.194.132.68][.6000] [EAQ][Network][Acceptable] + update: [....14] [ip4][..udp] [.......10.8.0.1][48666] -> [.200.194.129.66][.6000] + update: [....21] [ip4][..udp] [.......10.8.0.1][57004] -> [.200.194.133.67][.6000] + update: [....23] [ip4][..udp] [.......10.8.0.1][36552] -> [.200.194.136.66][.6000] + update: [....22] [ip4][..udp] [.......10.8.0.1][53059] -> [.200.194.133.68][.6000] + update: [....25] [ip4][..udp] [.......10.8.0.1][47346] -> [.200.194.134.66][.6000] + update: [....18] [ip4][..udp] [.......10.8.0.1][39185] -> [.200.194.132.67][.6000] [EAQ][Network][Acceptable] + update: [....15] [ip4][..udp] [.......10.8.0.1][47714] -> [.200.194.129.68][.6000] + update: [....20] [ip4][..udp] [.......10.8.0.1][56128] -> [.200.194.133.66][.6000] + update: [....24] [ip4][..udp] [.......10.8.0.1][43934] -> [.200.194.136.68][.6000] + update: [....16] [ip4][..udp] [.......10.8.0.1][43979] -> [.200.194.132.66][.6000] [EAQ][Network][Acceptable] + update: [....13] [ip4][..udp] [.......10.8.0.1][37985] -> [.200.194.129.67][.6000] + detected: [.....6] [ip4][..udp] [.......10.8.0.1][41438] -> [.200.194.141.66][.6000] [EAQ][Network][Acceptable] + detected: [.....9] [ip4][..udp] [.......10.8.0.1][34687] -> [.200.194.141.68][.6000] [EAQ][Network][Acceptable] + detected: [....10] [ip4][..udp] [.......10.8.0.1][39221] -> [.200.194.137.67][.6000] [EAQ][Network][Acceptable] + detected: [....11] [ip4][..udp] [.......10.8.0.1][53354] -> [.200.194.137.66][.6000] [EAQ][Network][Acceptable] + detected: [....12] [ip4][..udp] [.......10.8.0.1][59959] -> [.200.194.137.68][.6000] [EAQ][Network][Acceptable] + detected: [....13] [ip4][..udp] [.......10.8.0.1][37985] -> [.200.194.129.67][.6000] [EAQ][Network][Acceptable] + update: [....26] [ip4][..udp] [.......10.8.0.1][59098] -> [.200.194.134.68][.6000] + update: [....28] [ip4][..udp] [.......10.8.0.1][36577] -> [.200.194.149.68][.6000] + update: [....30] [ip4][..udp] [.......10.8.0.1][33356] -> [.200.194.149.66][.6000] + update: [....29] [ip4][..udp] [.......10.8.0.1][60013] -> [.200.194.136.67][.6000] + update: [....27] [ip4][..udp] [.......10.8.0.1][50175] -> [.200.194.149.67][.6000] + update: [....31] [ip4][..udp] [.......10.8.0.1][40058] -> [.200.194.134.67][.6000] + detected: [....14] [ip4][..udp] [.......10.8.0.1][48666] -> [.200.194.129.66][.6000] [EAQ][Network][Acceptable] + detected: [....15] [ip4][..udp] [.......10.8.0.1][47714] -> [.200.194.129.68][.6000] [EAQ][Network][Acceptable] + detected: [....17] [ip4][..udp] [.......10.8.0.1][48563] -> [.200.194.141.67][.6000] [EAQ][Network][Acceptable] + detected: [....20] [ip4][..udp] [.......10.8.0.1][56128] -> [.200.194.133.66][.6000] [EAQ][Network][Acceptable] + detected: [....21] [ip4][..udp] [.......10.8.0.1][57004] -> [.200.194.133.67][.6000] [EAQ][Network][Acceptable] + detected: [....23] [ip4][..udp] [.......10.8.0.1][36552] -> [.200.194.136.66][.6000] [EAQ][Network][Acceptable] + detected: [....22] [ip4][..udp] [.......10.8.0.1][53059] -> [.200.194.133.68][.6000] [EAQ][Network][Acceptable] + detected: [....24] [ip4][..udp] [.......10.8.0.1][43934] -> [.200.194.136.68][.6000] [EAQ][Network][Acceptable] + detected: [....25] [ip4][..udp] [.......10.8.0.1][47346] -> [.200.194.134.66][.6000] [EAQ][Network][Acceptable] + detected: [....26] [ip4][..udp] [.......10.8.0.1][59098] -> [.200.194.134.68][.6000] [EAQ][Network][Acceptable] + detected: [....27] [ip4][..udp] [.......10.8.0.1][50175] -> [.200.194.149.67][.6000] [EAQ][Network][Acceptable] + detected: [....28] [ip4][..udp] [.......10.8.0.1][36577] -> [.200.194.149.68][.6000] [EAQ][Network][Acceptable] + detected: [....29] [ip4][..udp] [.......10.8.0.1][60013] -> [.200.194.136.67][.6000] [EAQ][Network][Acceptable] + detected: [....30] [ip4][..udp] [.......10.8.0.1][33356] -> [.200.194.149.66][.6000] [EAQ][Network][Acceptable] + detected: [....31] [ip4][..udp] [.......10.8.0.1][40058] -> [.200.194.134.67][.6000] [EAQ][Network][Acceptable] + idle: [....17] [ip4][..udp] [.......10.8.0.1][48563] -> [.200.194.141.67][.6000] [EAQ][Network][Acceptable] + idle: [....19] [ip4][..udp] [.......10.8.0.1][52726] -> [.200.194.132.68][.6000] [EAQ][Network][Acceptable] + idle: [.....4] [ip4][..udp] [.......10.8.0.1][48890] -> [200.185.125.226][.6000] [EAQ][Network][Acceptable] + idle: [....14] [ip4][..udp] [.......10.8.0.1][48666] -> [.200.194.129.66][.6000] [EAQ][Network][Acceptable] + idle: [.....7] [ip4][..udp] [.......10.8.0.1][42620] -> [.200.194.148.66][.6000] [EAQ][Network][Acceptable] + idle: [....21] [ip4][..udp] [.......10.8.0.1][57004] -> [.200.194.133.67][.6000] [EAQ][Network][Acceptable] + idle: [....23] [ip4][..udp] [.......10.8.0.1][36552] -> [.200.194.136.66][.6000] [EAQ][Network][Acceptable] + end: [.....2] [ip4][..tcp] [.......10.8.0.1][40467] -> [.173.194.119.24][...80] [HTTP.Google][Web][Acceptable] + RISK: HTTP Suspicious User-Agent + idle: [....26] [ip4][..udp] [.......10.8.0.1][59098] -> [.200.194.134.68][.6000] [EAQ][Network][Acceptable] + idle: [....28] [ip4][..udp] [.......10.8.0.1][36577] -> [.200.194.149.68][.6000] [EAQ][Network][Acceptable] + idle: [....22] [ip4][..udp] [.......10.8.0.1][53059] -> [.200.194.133.68][.6000] [EAQ][Network][Acceptable] + idle: [.....9] [ip4][..udp] [.......10.8.0.1][34687] -> [.200.194.141.68][.6000] [EAQ][Network][Acceptable] + idle: [....11] [ip4][..udp] [.......10.8.0.1][53354] -> [.200.194.137.66][.6000] [EAQ][Network][Acceptable] + idle: [....25] [ip4][..udp] [.......10.8.0.1][47346] -> [.200.194.134.66][.6000] [EAQ][Network][Acceptable] + idle: [....18] [ip4][..udp] [.......10.8.0.1][39185] -> [.200.194.132.67][.6000] [EAQ][Network][Acceptable] + idle: [....10] [ip4][..udp] [.......10.8.0.1][39221] -> [.200.194.137.67][.6000] [EAQ][Network][Acceptable] + idle: [.....5] [ip4][..udp] [.......10.8.0.1][51569] -> [.200.194.148.67][.6000] [EAQ][Network][Acceptable] + end: [.....1] [ip4][..tcp] [.......10.8.0.1][53497] -> [.173.194.119.48][...80] [HTTP.Google][Web][Acceptable] + RISK: HTTP Suspicious User-Agent + idle: [.....6] [ip4][..udp] [.......10.8.0.1][41438] -> [.200.194.141.66][.6000] [EAQ][Network][Acceptable] + idle: [....12] [ip4][..udp] [.......10.8.0.1][59959] -> [.200.194.137.68][.6000] [EAQ][Network][Acceptable] + idle: [....30] [ip4][..udp] [.......10.8.0.1][33356] -> [.200.194.149.66][.6000] [EAQ][Network][Acceptable] + idle: [....15] [ip4][..udp] [.......10.8.0.1][47714] -> [.200.194.129.68][.6000] [EAQ][Network][Acceptable] + idle: [....29] [ip4][..udp] [.......10.8.0.1][60013] -> [.200.194.136.67][.6000] [EAQ][Network][Acceptable] + idle: [.....8] [ip4][..udp] [.......10.8.0.1][43641] -> [.200.194.148.68][.6000] [EAQ][Network][Acceptable] + idle: [.....3] [ip4][..udp] [.......10.8.0.1][52257] -> [200.185.138.146][.6000] [EAQ][Network][Acceptable] + idle: [....20] [ip4][..udp] [.......10.8.0.1][56128] -> [.200.194.133.66][.6000] [EAQ][Network][Acceptable] + idle: [....24] [ip4][..udp] [.......10.8.0.1][43934] -> [.200.194.136.68][.6000] [EAQ][Network][Acceptable] + idle: [....16] [ip4][..udp] [.......10.8.0.1][43979] -> [.200.194.132.66][.6000] [EAQ][Network][Acceptable] + idle: [....27] [ip4][..udp] [.......10.8.0.1][50175] -> [.200.194.149.67][.6000] [EAQ][Network][Acceptable] + idle: [....13] [ip4][..udp] [.......10.8.0.1][37985] -> [.200.194.129.67][.6000] [EAQ][Network][Acceptable] + idle: [....31] [ip4][..udp] [.......10.8.0.1][40058] -> [.200.194.134.67][.6000] [EAQ][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out b/test/results/flow-info/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out new file mode 100644 index 000000000..967dfa895 --- /dev/null +++ b/test/results/flow-info/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out @@ -0,0 +1,46 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....10.35.40.22][.2944] -> [.....10.23.1.42][.2944] + detected: [.....1] [ip4][..udp] [....10.35.40.22][.2944] -> [.....10.23.1.42][.2944] [Megaco][VoIP][Acceptable] + new: [.....2] [ip4][..udp] [....10.35.60.72][.5060] -> [...10.35.60.100][.5060] + detected: [.....2] [ip4][..udp] [....10.35.60.72][.5060] -> [...10.35.60.100][.5060] [SIP][VoIP][Acceptable] + new: [.....3] [ip4][..udp] [....10.35.40.25][.5060] -> [...10.35.40.200][.5060] + detected: [.....3] [ip4][..udp] [....10.35.40.25][.5060] -> [...10.35.40.200][.5060] [SIP][VoIP][Acceptable] + new: [.....4] [ip4][..udp] [138.132.169.101][.5060] -> [192.168.100.219][.5060] + detected: [.....4] [ip4][..udp] [138.132.169.101][.5060] -> [192.168.100.219][.5060] [SIP][VoIP][Acceptable] + analyse: [.....1] [ip4][..udp] [....10.35.40.22][.2944] -> [.....10.23.1.42][.2944] [Megaco][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.370| 1.692| 2.031] + [IAT(c->s)...: 0.000| 4.370| 1.748| 2.040][IAT(s->c)...: 0.000| 4.370| 1.639| 2.022] + [PKTLEN(c->s): 87.000| 376.000| 105.800| 69.800][PKTLEN(s->c): 101.000| 414.000| 231.900| 82.100] + [BINS(c->s)..: 0,15,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,1,0,7,0,0,0,7,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....5] [ip4][..udp] [...10.35.60.100][15580] -> [.....10.23.1.52][16756] + detected: [.....5] [ip4][..udp] [...10.35.60.100][15580] -> [.....10.23.1.52][16756] [RTP][Media][Acceptable] + analyse: [.....5] [ip4][..udp] [...10.35.60.100][15580] -> [.....10.23.1.52][16756] [RTP][Media][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 0.040| 0.020| 0.005] + [IAT(c->s)...: 0.001| 0.040| 0.020| 0.005][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 214.000| 214.000| 214.000| 0.000][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....1] [ip4][..udp] [....10.35.40.22][.2944] -> [.....10.23.1.42][.2944] [Megaco][VoIP][Acceptable] + analyse: [.....3] [ip4][..udp] [....10.35.40.25][.5060] -> [...10.35.40.200][.5060] [SIP][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 27.628| 2.809| 6.896] + [IAT(c->s)...: 0.000| 27.628| 2.903| 7.003][IAT(s->c)...: 0.000| 27.585| 2.721| 6.792] + [PKTLEN(c->s): 425.000| 923.000| 658.800| 215.100][PKTLEN(s->c): 304.000| 894.000| 551.900| 194.400] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,2,4,2,0,0,0,0,0,0,0,0,0,2,0,2,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,2,0,2,0,0,4,2,0,2,0,0,0,0,0,0,0,2,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....4] [ip4][..udp] [138.132.169.101][.5060] -> [192.168.100.219][.5060] [SIP][VoIP][Acceptable] + update: [.....2] [ip4][..udp] [....10.35.60.72][.5060] -> [...10.35.60.100][.5060] [SIP][VoIP][Acceptable] + update: [.....3] [ip4][..udp] [....10.35.40.25][.5060] -> [...10.35.40.200][.5060] [SIP][VoIP][Acceptable] + update: [.....5] [ip4][..udp] [...10.35.60.100][15580] -> [.....10.23.1.52][16756] [RTP][Media][Acceptable] + update: [.....1] [ip4][..udp] [....10.35.40.22][.2944] -> [.....10.23.1.42][.2944] [Megaco][VoIP][Acceptable] + idle: [.....5] [ip4][..udp] [...10.35.60.100][15580] -> [.....10.23.1.52][16756] [RTP][Media][Acceptable] + idle: [.....1] [ip4][..udp] [....10.35.40.22][.2944] -> [.....10.23.1.42][.2944] [Megaco][VoIP][Acceptable] + idle: [.....4] [ip4][..udp] [138.132.169.101][.5060] -> [192.168.100.219][.5060] [SIP][VoIP][Acceptable] + idle: [.....3] [ip4][..udp] [....10.35.40.25][.5060] -> [...10.35.40.200][.5060] [SIP][VoIP][Acceptable] + idle: [.....2] [ip4][..udp] [....10.35.60.72][.5060] -> [...10.35.60.100][.5060] [SIP][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/IEC104.pcap.out b/test/results/flow-info/IEC104.pcap.out new file mode 100644 index 000000000..ff176c9b6 --- /dev/null +++ b/test/results/flow-info/IEC104.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...10.175.211.1][.2404] -> [..10.119.105.26][54768] [MIDSTREAM] + new: [.....2] [ip4][..tcp] [...10.175.211.3][.2404] -> [..10.119.105.26][54769] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [...10.175.211.1][.2404] -> [..10.119.105.26][54768] [IEC60870][IoT-Scada][Acceptable] + detected: [.....2] [ip4][..tcp] [...10.175.211.3][.2404] -> [..10.119.105.26][54769] [IEC60870][IoT-Scada][Acceptable] + idle: [.....1] [ip4][..tcp] [...10.175.211.1][.2404] -> [..10.119.105.26][54768] [IEC60870][IoT-Scada][Acceptable] + idle: [.....2] [ip4][..tcp] [...10.175.211.3][.2404] -> [..10.119.105.26][54769] [IEC60870][IoT-Scada][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/KakaoTalk_chat.pcap.out b/test/results/flow-info/KakaoTalk_chat.pcap.out new file mode 100644 index 000000000..90c8731eb --- /dev/null +++ b/test/results/flow-info/KakaoTalk_chat.pcap.out @@ -0,0 +1,201 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...10.24.82.188][38448] -> [.....10.188.1.1][...53] + detected: [.....1] [ip4][..udp] [...10.24.82.188][38448] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [.....2] [ip4][..udp] [...10.24.82.188][35603] -> [.....10.188.1.1][...53] + detected: [.....2] [ip4][..udp] [...10.24.82.188][35603] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [.....3] [ip4][..udp] [...10.24.82.188][57816] -> [.....10.188.1.1][...53] + detected: [.....3] [ip4][..udp] [...10.24.82.188][57816] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [.....2] [ip4][..udp] [...10.24.82.188][35603] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [.....1] [ip4][..udp] [...10.24.82.188][38448] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [.....3] [ip4][..udp] [...10.24.82.188][57816] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [.....4] [ip4][..udp] [...10.24.82.188][41909] -> [.....10.188.1.1][...53] + detected: [.....4] [ip4][..udp] [...10.24.82.188][41909] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [.....5] [ip4][..udp] [...10.24.82.188][12908] -> [.....10.188.1.1][...53] + detected: [.....5] [ip4][..udp] [...10.24.82.188][12908] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [.....6] [ip4][..udp] [...10.24.82.188][58810] -> [.....10.188.1.1][...53] + detected: [.....6] [ip4][..udp] [...10.24.82.188][58810] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [.....6] [ip4][..udp] [...10.24.82.188][58810] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [.....5] [ip4][..udp] [...10.24.82.188][12908] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [.....4] [ip4][..udp] [...10.24.82.188][41909] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [.....7] [ip4][..udp] [...10.24.82.188][.5929] -> [.....10.188.1.1][...53] + detected: [.....7] [ip4][..udp] [...10.24.82.188][.5929] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [.....8] [ip4][..udp] [...10.24.82.188][.9094] -> [.....10.188.1.1][...53] + detected: [.....8] [ip4][..udp] [...10.24.82.188][.9094] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [.....9] [ip4][..udp] [...10.24.82.188][56820] -> [.....10.188.1.1][...53] + detected: [.....9] [ip4][..udp] [...10.24.82.188][56820] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [.....7] [ip4][..udp] [...10.24.82.188][.5929] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [.....8] [ip4][..udp] [...10.24.82.188][.9094] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [.....9] [ip4][..udp] [...10.24.82.188][56820] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [....10] [ip4][..udp] [...10.24.82.188][29029] -> [.....10.188.1.1][...53] + detected: [....10] [ip4][..udp] [...10.24.82.188][29029] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [....11] [ip4][..udp] [...10.24.82.188][25117] -> [.....10.188.1.1][...53] + detected: [....11] [ip4][..udp] [...10.24.82.188][25117] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [....12] [ip4][..udp] [...10.24.82.188][43077] -> [.....10.188.1.1][...53] + detected: [....12] [ip4][..udp] [...10.24.82.188][43077] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [....10] [ip4][..udp] [...10.24.82.188][29029] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [....12] [ip4][..udp] [...10.24.82.188][43077] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [....11] [ip4][..udp] [...10.24.82.188][25117] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [....13] [ip4][..tcp] [...10.24.82.188][51021] -> [.103.246.57.251][.8080] + new: [....14] [ip4][..tcp] [..216.58.221.10][...80] -> [...10.24.82.188][35922] [MIDSTREAM] + new: [....15] [ip4][..tcp] [...10.24.82.188][35503] -> [...173.252.97.2][..443] + detected: [....15] [ip4][..tcp] [...10.24.82.188][35503] -> [...173.252.97.2][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + new: [....16] [ip4][..tcp] [..120.28.26.242][...80] -> [...10.24.82.188][34503] [MIDSTREAM] + new: [....17] [ip4][..udp] [...10.24.82.188][61011] -> [.....10.188.1.1][...53] + detected: [....17] [ip4][..udp] [...10.24.82.188][61011] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [....18] [ip4][..udp] [...10.24.82.188][61011] -> [...10.188.191.1][...53] + detected: [....18] [ip4][..udp] [...10.24.82.188][61011] -> [...10.188.191.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [....17] [ip4][..udp] [...10.24.82.188][61011] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + detection-update: [....18] [ip4][..udp] [...10.24.82.188][61011] -> [...10.188.191.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + new: [....19] [ip4][.icmp] [...10.24.82.188] -> [...10.188.191.1] + detected: [....19] [ip4][.icmp] [...10.24.82.188] -> [...10.188.191.1] [ICMP][Network][Acceptable] + new: [....20] [ip4][..tcp] [...10.24.82.188][37821] -> [.210.103.240.15][..443] + detected: [....20] [ip4][..tcp] [...10.24.82.188][37821] -> [.210.103.240.15][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....20] [ip4][..tcp] [...10.24.82.188][37821] -> [.210.103.240.15][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....20] [ip4][..tcp] [...10.24.82.188][37821] -> [.210.103.240.15][..443] [TLS.KakaoTalk][Chat][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [....21] [ip4][..tcp] [...10.24.82.188][37553] -> [....31.13.68.84][...80] + new: [....22] [ip4][..tcp] [....31.13.68.73][..443] -> [...10.24.82.188][47007] [MIDSTREAM] + detected: [....22] [ip4][..tcp] [....31.13.68.73][..443] -> [...10.24.82.188][47007] [TLS.Facebook][SocialNetwork][Fun] + detected: [....21] [ip4][..tcp] [...10.24.82.188][37553] -> [....31.13.68.84][...80] [HTTP.Facebook][SocialNetwork][Fun] + new: [....23] [ip4][..udp] [...10.24.82.188][24596] -> [.....10.188.1.1][...53] + detected: [....23] [ip4][..udp] [...10.24.82.188][24596] -> [.....10.188.1.1][...53] [DNS.Facebook][SocialNetwork][Fun] + detection-update: [....15] [ip4][..tcp] [...10.24.82.188][35503] -> [...173.252.97.2][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....15] [ip4][..tcp] [...10.24.82.188][35503] -> [...173.252.97.2][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....23] [ip4][..udp] [...10.24.82.188][24596] -> [.....10.188.1.1][...53] [DNS.Facebook][SocialNetwork][Fun] + new: [....24] [ip4][..tcp] [...10.24.82.188][45209] -> [....31.13.68.84][..443] + detected: [....24] [ip4][..tcp] [...10.24.82.188][45209] -> [....31.13.68.84][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [....25] [ip4][..udp] [...10.24.82.188][19582] -> [.....10.188.1.1][...53] + detected: [....25] [ip4][..udp] [...10.24.82.188][19582] -> [.....10.188.1.1][...53] [DNS.Facebook][SocialNetwork][Fun] + detection-update: [....24] [ip4][..tcp] [...10.24.82.188][45209] -> [....31.13.68.84][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....24] [ip4][..tcp] [...10.24.82.188][45209] -> [....31.13.68.84][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....25] [ip4][..udp] [...10.24.82.188][19582] -> [.....10.188.1.1][...53] [DNS.Facebook][SocialNetwork][Fun] + new: [....26] [ip4][..tcp] [...10.24.82.188][43581] -> [....31.13.68.70][..443] + detected: [....26] [ip4][..tcp] [...10.24.82.188][43581] -> [....31.13.68.70][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [....27] [ip4][..udp] [...10.24.82.188][.4017] -> [.....10.188.1.1][...53] + detected: [....27] [ip4][..udp] [...10.24.82.188][.4017] -> [.....10.188.1.1][...53] [DNS.Facebook][SocialNetwork][Fun] + detection-update: [....26] [ip4][..tcp] [...10.24.82.188][43581] -> [....31.13.68.70][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....26] [ip4][..tcp] [...10.24.82.188][43581] -> [....31.13.68.70][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....27] [ip4][..udp] [...10.24.82.188][.4017] -> [.....10.188.1.1][...53] [DNS.Facebook][SocialNetwork][Fun] + new: [....28] [ip4][..udp] [...10.24.82.188][14650] -> [.....10.188.1.1][...53] + detected: [....28] [ip4][..udp] [...10.24.82.188][14650] -> [.....10.188.1.1][...53] [DNS][Network][Acceptable] + new: [....29] [ip4][..tcp] [...10.24.82.188][45211] -> [....31.13.68.84][..443] + detection-update: [....28] [ip4][..udp] [...10.24.82.188][14650] -> [.....10.188.1.1][...53] [DNS][Network][Acceptable] + detected: [....29] [ip4][..tcp] [...10.24.82.188][45211] -> [....31.13.68.84][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....29] [ip4][..tcp] [...10.24.82.188][45211] -> [....31.13.68.84][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....29] [ip4][..tcp] [...10.24.82.188][45211] -> [....31.13.68.84][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [....30] [ip4][..tcp] [...10.24.82.188][58927] -> [.54.255.253.199][.5223] [MIDSTREAM] + detected: [....30] [ip4][..tcp] [...10.24.82.188][58927] -> [.54.255.253.199][.5223] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [....26] [ip4][..tcp] [...10.24.82.188][43581] -> [....31.13.68.70][..443] [TLS.Facebook][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.174| 0.038| 0.043] + [IAT(c->s)...: 0.000| 0.124| 0.033| 0.039][IAT(s->c)...: 0.001| 0.174| 0.042| 0.047] + [PKTLEN(c->s): 56.000|1053.000| 212.800| 311.300][PKTLEN(s->c): 56.000|1336.000| 331.300| 442.100] + [BINS(c->s)..: 10,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,3,0,1,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0] + new: [....31] [ip4][..tcp] [...10.24.82.188][42332] -> [.210.103.240.15][..443] [MIDSTREAM] + new: [....32] [ip4][..tcp] [...10.24.82.188][37557] -> [....31.13.68.84][...80] + detected: [....32] [ip4][..tcp] [...10.24.82.188][37557] -> [....31.13.68.84][...80] [HTTP.Facebook][SocialNetwork][Fun] + new: [....33] [ip4][..tcp] [...10.24.82.188][45213] -> [....31.13.68.84][..443] + detected: [....33] [ip4][..tcp] [...10.24.82.188][45213] -> [....31.13.68.84][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + analyse: [....15] [ip4][..tcp] [...10.24.82.188][35503] -> [...173.252.97.2][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.004| 3.803| 0.501| 0.832] + [IAT(c->s)...: 0.004| 3.803| 0.567| 0.983][IAT(s->c)...: 0.004| 2.320| 0.421| 0.590] + [PKTLEN(c->s): 56.000| 710.000| 152.100| 160.300][PKTLEN(s->c): 56.000|1336.000| 318.700| 484.700] + [BINS(c->s)..: 11,0,1,1,1,2,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0] + detection-update: [....15] [ip4][..tcp] [...10.24.82.188][35503] -> [...173.252.97.2][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + new: [....34] [ip4][..tcp] [...10.24.82.188][35511] -> [...173.252.97.2][..443] + detected: [....34] [ip4][..tcp] [...10.24.82.188][35511] -> [...173.252.97.2][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....33] [ip4][..tcp] [...10.24.82.188][45213] -> [....31.13.68.84][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....33] [ip4][..tcp] [...10.24.82.188][45213] -> [....31.13.68.84][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....34] [ip4][..tcp] [...10.24.82.188][35511] -> [...173.252.97.2][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....34] [ip4][..tcp] [...10.24.82.188][35511] -> [...173.252.97.2][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + new: [....35] [ip4][..tcp] [..139.150.0.125][..443] -> [...10.24.82.188][46947] [MIDSTREAM] + new: [....36] [ip4][..tcp] [...10.24.82.188][34686] -> [.173.194.72.188][.5228] [MIDSTREAM] + detected: [....36] [ip4][..tcp] [...10.24.82.188][34686] -> [.173.194.72.188][.5228] [TLS.Google][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....37] [ip4][..tcp] [...10.24.82.188][49217] -> [.216.58.220.174][..443] [MIDSTREAM] + detected: [....37] [ip4][..tcp] [...10.24.82.188][49217] -> [.216.58.220.174][..443] [TLS.Google][Web][Acceptable] + analyse: [....34] [ip4][..tcp] [...10.24.82.188][35511] -> [...173.252.97.2][..443] [TLS.Facebook][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 27.031| 1.853| 6.601] + [IAT(c->s)...: 0.000| 26.938| 1.913| 6.690][IAT(s->c)...: 0.000| 27.031| 1.796| 6.517] + [PKTLEN(c->s): 56.000| 578.000| 142.400| 138.700][PKTLEN(s->c): 56.000|1336.000| 287.100| 461.100] + [BINS(c->s)..: 10,0,1,1,1,1,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 11,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0] + update: [....19] [ip4][.icmp] [...10.24.82.188] -> [...10.188.191.1] [ICMP][Network][Acceptable] + new: [....38] [ip4][..tcp] [...10.24.82.188][58964] -> [.54.255.253.199][.5223] + detected: [....38] [ip4][..tcp] [...10.24.82.188][58964] -> [.54.255.253.199][.5223] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port, Obsolete TLS (v1.1 or older) + idle: [.....4] [ip4][..udp] [...10.24.82.188][41909] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + end: [....21] [ip4][..tcp] [...10.24.82.188][37553] -> [....31.13.68.84][...80] [HTTP.Facebook][SocialNetwork][Fun] + end: [....32] [ip4][..tcp] [...10.24.82.188][37557] -> [....31.13.68.84][...80] [HTTP.Facebook][SocialNetwork][Fun] + idle: [....25] [ip4][..udp] [...10.24.82.188][19582] -> [.....10.188.1.1][...53] [DNS.Facebook][SocialNetwork][Fun] + idle: [....26] [ip4][..tcp] [...10.24.82.188][43581] -> [....31.13.68.70][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: TLS (probably) Not Carrying HTTPS + idle: [....15] [ip4][..tcp] [...10.24.82.188][35503] -> [...173.252.97.2][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + idle: [....34] [ip4][..tcp] [...10.24.82.188][35511] -> [...173.252.97.2][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + end: [....30] [ip4][..tcp] [...10.24.82.188][58927] -> [.54.255.253.199][.5223] + idle: [....38] [ip4][..tcp] [...10.24.82.188][58964] -> [.54.255.253.199][.5223] + idle: [.....6] [ip4][..udp] [...10.24.82.188][58810] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + idle: [.....9] [ip4][..udp] [...10.24.82.188][56820] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + idle: [.....1] [ip4][..udp] [...10.24.82.188][38448] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + idle: [....18] [ip4][..udp] [...10.24.82.188][61011] -> [...10.188.191.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + idle: [....17] [ip4][..udp] [...10.24.82.188][61011] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + idle: [.....7] [ip4][..udp] [...10.24.82.188][.5929] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + guessed: [....16] [ip4][..tcp] [..120.28.26.242][...80] -> [...10.24.82.188][34503] [HTTP][Web][Acceptable] + end: [....16] [ip4][..tcp] [..120.28.26.242][...80] -> [...10.24.82.188][34503] + idle: [....27] [ip4][..udp] [...10.24.82.188][.4017] -> [.....10.188.1.1][...53] [DNS.Facebook][SocialNetwork][Fun] + idle: [....19] [ip4][.icmp] [...10.24.82.188] -> [...10.188.191.1] [ICMP][Network][Acceptable] + idle: [....23] [ip4][..udp] [...10.24.82.188][24596] -> [.....10.188.1.1][...53] [DNS.Facebook][SocialNetwork][Fun] + idle: [....12] [ip4][..udp] [...10.24.82.188][43077] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + idle: [....37] [ip4][..tcp] [...10.24.82.188][49217] -> [.216.58.220.174][..443] [TLS.Google][Web][Acceptable] + guessed: [....13] [ip4][..tcp] [...10.24.82.188][51021] -> [.103.246.57.251][.8080] [HTTP_Proxy][Web][Acceptable] + idle: [....13] [ip4][..tcp] [...10.24.82.188][51021] -> [.103.246.57.251][.8080] + end: [....20] [ip4][..tcp] [...10.24.82.188][37821] -> [.210.103.240.15][..443] + idle: [....28] [ip4][..udp] [...10.24.82.188][14650] -> [.....10.188.1.1][...53] [DNS][Network][Acceptable] + idle: [....10] [ip4][..udp] [...10.24.82.188][29029] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + idle: [.....3] [ip4][..udp] [...10.24.82.188][57816] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + idle: [....11] [ip4][..udp] [...10.24.82.188][25117] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + end: [....22] [ip4][..tcp] [....31.13.68.73][..443] -> [...10.24.82.188][47007] [TLS.Facebook][SocialNetwork][Fun] + idle: [....36] [ip4][..tcp] [...10.24.82.188][34686] -> [.173.194.72.188][.5228] + idle: [.....5] [ip4][..udp] [...10.24.82.188][12908] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + guessed: [....31] [ip4][..tcp] [...10.24.82.188][42332] -> [.210.103.240.15][..443] [TLS][Web][Safe] + end: [....31] [ip4][..tcp] [...10.24.82.188][42332] -> [.210.103.240.15][..443] + idle: [.....2] [ip4][..udp] [...10.24.82.188][35603] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + idle: [....24] [ip4][..tcp] [...10.24.82.188][45209] -> [....31.13.68.84][..443] + idle: [....29] [ip4][..tcp] [...10.24.82.188][45211] -> [....31.13.68.84][..443] + idle: [....33] [ip4][..tcp] [...10.24.82.188][45213] -> [....31.13.68.84][..443] + guessed: [....14] [ip4][..tcp] [..216.58.221.10][...80] -> [...10.24.82.188][35922] [HTTP.Google][Web][Acceptable] + end: [....14] [ip4][..tcp] [..216.58.221.10][...80] -> [...10.24.82.188][35922] + guessed: [....35] [ip4][..tcp] [..139.150.0.125][..443] -> [...10.24.82.188][46947] [TLS][Web][Safe] + idle: [....35] [ip4][..tcp] [..139.150.0.125][..443] -> [...10.24.82.188][46947] + idle: [.....8] [ip4][..udp] [...10.24.82.188][.9094] -> [.....10.188.1.1][...53] [DNS.KakaoTalk][Chat][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/KakaoTalk_talk.pcap.out b/test/results/flow-info/KakaoTalk_talk.pcap.out new file mode 100644 index 000000000..49f336b08 --- /dev/null +++ b/test/results/flow-info/KakaoTalk_talk.pcap.out @@ -0,0 +1,110 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...10.24.82.188][51021] -> [.103.246.57.251][.8080] [MIDSTREAM] + new: [.....2] [ip4][..tcp] [..120.28.26.242][...80] -> [...10.24.82.188][34533] [MIDSTREAM] + new: [.....3] [ip4][..tcp] [...10.24.82.188][58916] -> [.54.255.185.236][.5222] [MIDSTREAM] + new: [.....4] [ip4][..tcp] [...10.24.82.188][48489] -> [203.205.147.215][...80] + new: [.....5] [ip4][..tcp] [.216.58.220.161][..443] -> [...10.24.82.188][56697] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [...10.24.82.188][48489] -> [203.205.147.215][...80] [HTTP_Proxy.QQ][Chat][Fun] + RISK: Known Proto on Non Std Port + detection-update: [.....4] [ip4][..tcp] [...10.24.82.188][48489] -> [203.205.147.215][...80] [HTTP_Proxy.QQ][Download][Fun] + RISK: Binary App Transfer, Known Proto on Non Std Port + new: [.....6] [ip4][..tcp] [...10.24.82.188][32968] -> [..110.76.143.50][.8080] + detected: [.....6] [ip4][..tcp] [...10.24.82.188][32968] -> [..110.76.143.50][.8080] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Obsolete TLS (v1.1 or older) + detection-update: [.....6] [ip4][..tcp] [...10.24.82.188][32968] -> [..110.76.143.50][.8080] [TLS.KakaoTalk][Chat][Acceptable] + RISK: Known Proto on Non Std Port, Self-signed Cert, Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [.....7] [ip4][..tcp] [..139.150.0.125][..443] -> [...10.24.82.188][46947] [MIDSTREAM] + new: [.....8] [ip4][..tcp] [...10.24.82.188][58857] -> [..110.76.143.50][.9001] + detected: [.....8] [ip4][..tcp] [...10.24.82.188][58857] -> [..110.76.143.50][.9001] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Obsolete TLS (v1.1 or older) + detection-update: [.....8] [ip4][..tcp] [...10.24.82.188][58857] -> [..110.76.143.50][.9001] [TLS.KakaoTalk][Chat][Acceptable] + RISK: Known Proto on Non Std Port, Self-signed Cert, Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [.....9] [ip4][..tcp] [...10.24.82.188][34686] -> [.173.194.72.188][.5228] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [...10.24.82.188][34686] -> [.173.194.72.188][.5228] [TLS.Google][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....10] [ip4][..udp] [...10.24.82.188][11321] -> [....1.201.1.174][23045] + detected: [....10] [ip4][..udp] [...10.24.82.188][11321] -> [....1.201.1.174][23045] [KakaoTalk_Voice][VoIP][Acceptable] + new: [....11] [ip4][..udp] [...10.24.82.188][10269] -> [....1.201.1.174][23047] + detected: [....11] [ip4][..udp] [...10.24.82.188][10269] -> [....1.201.1.174][23047] [KakaoTalk_Voice][VoIP][Acceptable] + new: [....12] [ip4][..udp] [...10.24.82.188][11320] -> [....1.201.1.174][23044] + detected: [....12] [ip4][..udp] [...10.24.82.188][11320] -> [....1.201.1.174][23044] [RTP][Media][Acceptable] + new: [....13] [ip4][..udp] [...10.24.82.188][10268] -> [....1.201.1.174][23046] + detected: [....13] [ip4][..udp] [...10.24.82.188][10268] -> [....1.201.1.174][23046] [RTP][Media][Acceptable] + analyse: [....12] [ip4][..udp] [...10.24.82.188][11320] -> [....1.201.1.174][23044] [RTP][Media][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.389| 0.067| 0.073] + [IAT(c->s)...: 0.000| 0.104| 0.052| 0.049][IAT(s->c)...: 0.016| 0.389| 0.090| 0.095] + [PKTLEN(c->s): 99.000| 100.000| 99.100| 0.200][PKTLEN(s->c): 99.000| 192.000| 110.100| 25.800] + [BINS(c->s)..: 0,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,9,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....13] [ip4][..udp] [...10.24.82.188][10268] -> [....1.201.1.174][23046] [RTP][Media][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.004| 0.144| 0.063| 0.038] + [IAT(c->s)...: 0.032| 0.102| 0.057| 0.022][IAT(s->c)...: 0.004| 0.144| 0.071| 0.050] + [PKTLEN(c->s): 99.000| 192.000| 112.400| 26.300][PKTLEN(s->c): 99.000| 99.000| 99.000| 0.000] + [BINS(c->s)..: 0,13,2,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....14] [ip4][..tcp] [...10.24.82.188][49217] -> [.216.58.220.174][..443] [MIDSTREAM] + detected: [....14] [ip4][..tcp] [...10.24.82.188][49217] -> [.216.58.220.174][..443] [TLS.Google][Web][Acceptable] + new: [....15] [ip4][..tcp] [..173.252.122.1][..443] -> [...10.24.82.188][52123] [MIDSTREAM] + new: [....16] [ip4][..tcp] [...10.24.82.188][53974] -> [203.205.151.233][.8080] [MIDSTREAM] + analyse: [.....6] [ip4][..tcp] [...10.24.82.188][32968] -> [..110.76.143.50][.8080] [TLS.KakaoTalk][Chat][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.002| 20.337| 1.801| 4.155] + [IAT(c->s)...: 0.002| 20.337| 2.259| 5.063][IAT(s->c)...: 0.005| 8.676| 1.245| 2.556] + [PKTLEN(c->s): 68.000| 814.000| 204.700| 177.400][PKTLEN(s->c): 68.000| 920.000| 288.900| 276.500] + [BINS(c->s)..: 8,0,0,0,1,7,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,0,0,1,0,1,0,2,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....8] [ip4][..tcp] [...10.24.82.188][58857] -> [..110.76.143.50][.9001] [TLS.KakaoTalk][Chat][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 21.237| 2.444| 5.342] + [IAT(c->s)...: 0.000| 20.472| 2.198| 5.070][IAT(s->c)...: 0.000| 21.237| 2.744| 5.641] + [PKTLEN(c->s): 68.000| 862.000| 226.300| 229.600][PKTLEN(s->c): 68.000| 920.000| 319.400| 299.200] + [BINS(c->s)..: 9,0,0,0,1,5,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,0,0,0,0,1,0,2,0,1,0,0,0,0,0,0,0,0,1,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....17] [ip4][..tcp] [173.194.117.229][..443] -> [...10.24.82.188][38380] [MIDSTREAM] + new: [....18] [ip4][..tcp] [.173.252.88.128][..443] -> [...10.24.82.188][59912] [MIDSTREAM] + new: [....19] [ip4][..tcp] [...10.24.82.188][59954] -> [.173.252.88.128][..443] + new: [....20] [ip4][..udp] [...10.24.82.188][25223] -> [.....10.188.1.1][...53] + detected: [....20] [ip4][..udp] [...10.24.82.188][25223] -> [.....10.188.1.1][...53] [DNS.Facebook][SocialNetwork][Fun] + detected: [....19] [ip4][..tcp] [...10.24.82.188][59954] -> [.173.252.88.128][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....20] [ip4][..udp] [...10.24.82.188][25223] -> [.....10.188.1.1][...53] [DNS.Facebook][SocialNetwork][Fun] + detection-update: [....19] [ip4][..tcp] [...10.24.82.188][59954] -> [.173.252.88.128][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + guessed: [....16] [ip4][..tcp] [...10.24.82.188][53974] -> [203.205.151.233][.8080] [HTTP_Proxy][Web][Acceptable] + idle: [....16] [ip4][..tcp] [...10.24.82.188][53974] -> [203.205.151.233][.8080] + guessed: [....18] [ip4][..tcp] [.173.252.88.128][..443] -> [...10.24.82.188][59912] [TLS.Facebook][SocialNetwork][Fun] + end: [....18] [ip4][..tcp] [.173.252.88.128][..443] -> [...10.24.82.188][59912] + idle: [....19] [ip4][..tcp] [...10.24.82.188][59954] -> [.173.252.88.128][..443] [TLS.Facebook][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + guessed: [.....3] [ip4][..tcp] [...10.24.82.188][58916] -> [.54.255.185.236][.5222] [AmazonAWS][Cloud][Acceptable] + idle: [.....3] [ip4][..tcp] [...10.24.82.188][58916] -> [.54.255.185.236][.5222] + guessed: [....15] [ip4][..tcp] [..173.252.122.1][..443] -> [...10.24.82.188][52123] [TLS.Facebook][SocialNetwork][Fun] + end: [....15] [ip4][..tcp] [..173.252.122.1][..443] -> [...10.24.82.188][52123] + guessed: [.....5] [ip4][..tcp] [.216.58.220.161][..443] -> [...10.24.82.188][56697] [TLS.Google][Web][Acceptable] + end: [.....5] [ip4][..tcp] [.216.58.220.161][..443] -> [...10.24.82.188][56697] + guessed: [....17] [ip4][..tcp] [173.194.117.229][..443] -> [...10.24.82.188][38380] [TLS.Google][Web][Acceptable] + end: [....17] [ip4][..tcp] [173.194.117.229][..443] -> [...10.24.82.188][38380] + idle: [....13] [ip4][..udp] [...10.24.82.188][10268] -> [....1.201.1.174][23046] [RTP][Media][Acceptable] + idle: [....11] [ip4][..udp] [...10.24.82.188][10269] -> [....1.201.1.174][23047] [KakaoTalk_Voice][VoIP][Acceptable] + end: [.....4] [ip4][..tcp] [...10.24.82.188][48489] -> [203.205.147.215][...80] [HTTP_Proxy.QQ][Download][Fun] + RISK: Binary App Transfer, Known Proto on Non Std Port + guessed: [.....2] [ip4][..tcp] [..120.28.26.242][...80] -> [...10.24.82.188][34533] [HTTP][Web][Acceptable] + end: [.....2] [ip4][..tcp] [..120.28.26.242][...80] -> [...10.24.82.188][34533] + idle: [.....6] [ip4][..tcp] [...10.24.82.188][32968] -> [..110.76.143.50][.8080] [TLS.KakaoTalk][Chat][Acceptable] + RISK: Known Proto on Non Std Port, Self-signed Cert, Obsolete TLS (v1.1 or older), Weak TLS Cipher + idle: [....14] [ip4][..tcp] [...10.24.82.188][49217] -> [.216.58.220.174][..443] [TLS.Google][Web][Acceptable] + guessed: [.....1] [ip4][..tcp] [...10.24.82.188][51021] -> [.103.246.57.251][.8080] [HTTP_Proxy][Web][Acceptable] + idle: [.....1] [ip4][..tcp] [...10.24.82.188][51021] -> [.103.246.57.251][.8080] + idle: [.....8] [ip4][..tcp] [...10.24.82.188][58857] -> [..110.76.143.50][.9001] [TLS.KakaoTalk][Chat][Acceptable] + RISK: Known Proto on Non Std Port, Self-signed Cert, Obsolete TLS (v1.1 or older), Weak TLS Cipher + idle: [.....9] [ip4][..tcp] [...10.24.82.188][34686] -> [.173.194.72.188][.5228] + idle: [....20] [ip4][..udp] [...10.24.82.188][25223] -> [.....10.188.1.1][...53] [DNS.Facebook][SocialNetwork][Fun] + idle: [....12] [ip4][..udp] [...10.24.82.188][11320] -> [....1.201.1.174][23044] [RTP][Media][Acceptable] + idle: [....10] [ip4][..udp] [...10.24.82.188][11321] -> [....1.201.1.174][23045] [KakaoTalk_Voice][VoIP][Acceptable] + guessed: [.....7] [ip4][..tcp] [..139.150.0.125][..443] -> [...10.24.82.188][46947] [TLS][Web][Safe] + idle: [.....7] [ip4][..tcp] [..139.150.0.125][..443] -> [...10.24.82.188][46947] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/NTPv2.pcap.out b/test/results/flow-info/NTPv2.pcap.out new file mode 100644 index 000000000..e67a6e727 --- /dev/null +++ b/test/results/flow-info/NTPv2.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..208.104.95.10][..123] -> [.....78.46.76.2][...80] + detected: [.....1] [ip4][..udp] [..208.104.95.10][..123] -> [.....78.46.76.2][...80] [NTP][System][Acceptable] + idle: [.....1] [ip4][..udp] [..208.104.95.10][..123] -> [.....78.46.76.2][...80] [NTP][System][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/NTPv3.pcap.out b/test/results/flow-info/NTPv3.pcap.out new file mode 100644 index 000000000..a7d2656c8 --- /dev/null +++ b/test/results/flow-info/NTPv3.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.175.144.140.29][..123] -> [.....78.46.76.2][...80] + detected: [.....1] [ip4][..udp] [.175.144.140.29][..123] -> [.....78.46.76.2][...80] [NTP][System][Acceptable] + idle: [.....1] [ip4][..udp] [.175.144.140.29][..123] -> [.....78.46.76.2][...80] [NTP][System][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/NTPv4.pcap.out b/test/results/flow-info/NTPv4.pcap.out new file mode 100644 index 000000000..4182a5b51 --- /dev/null +++ b/test/results/flow-info/NTPv4.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...85.22.62.120][..123] -> [....78.46.76.11][..123] + detected: [.....1] [ip4][..udp] [...85.22.62.120][..123] -> [....78.46.76.11][..123] [NTP][System][Acceptable] + idle: [.....1] [ip4][..udp] [...85.22.62.120][..123] -> [....78.46.76.11][..123] [NTP][System][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/Oscar.pcap.out b/test/results/flow-info/Oscar.pcap.out new file mode 100644 index 000000000..0479fe44d --- /dev/null +++ b/test/results/flow-info/Oscar.pcap.out @@ -0,0 +1,15 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.30.29.3][63357] -> [.178.237.24.249][..443] + analyse: [.....1] [ip4][..tcp] [.....10.30.29.3][63357] -> [.178.237.24.249][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 58.215| 3.883| 14.268] + [IAT(c->s)...: 0.000| 58.176| 3.357| 13.300][IAT(s->c)...: 0.000| 58.215| 4.612| 15.479] + [PKTLEN(c->s): 54.000| 369.000| 115.200| 97.600][PKTLEN(s->c): 60.000|1414.000| 290.700| 372.100] + [BINS(c->s)..: 11,4,0,1,0,0,1,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,1,0,0,0,0,1,0,1,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0] + guessed: [.....1] [ip4][..tcp] [.....10.30.29.3][63357] -> [.178.237.24.249][..443] [TLS][Web][Safe] + detected: [.....1] [ip4][..tcp] [.....10.30.29.3][63357] -> [.178.237.24.249][..443] [TLS][Web][Safe] + idle: [.....1] [ip4][..tcp] [.....10.30.29.3][63357] -> [.178.237.24.249][..443] [TLS][Web][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/TivoDVR.pcap.out b/test/results/flow-info/TivoDVR.pcap.out new file mode 100644 index 000000000..53d7f6c81 --- /dev/null +++ b/test/results/flow-info/TivoDVR.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..98.245.242.69][.2190] -> [255.255.255.255][.2190] + detected: [.....1] [ip4][..udp] [..98.245.242.69][.2190] -> [255.255.255.255][.2190] [TiVoConnect][Network][Safe] + idle: [.....1] [ip4][..udp] [..98.245.242.69][.2190] -> [255.255.255.255][.2190] [TiVoConnect][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/WebattackRCE.pcap.out b/test/results/flow-info/WebattackRCE.pcap.out new file mode 100644 index 000000000..009b8f4bc --- /dev/null +++ b/test/results/flow-info/WebattackRCE.pcap.out @@ -0,0 +1,3192 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......127.0.0.1][49544] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [......127.0.0.1][49544] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [.....2] [ip4][..tcp] [......127.0.0.1][49546] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [......127.0.0.1][49546] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [.....3] [ip4][..tcp] [......127.0.0.1][49548] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [......127.0.0.1][49548] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [.....4] [ip4][..tcp] [......127.0.0.1][49550] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [......127.0.0.1][49550] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [.....5] [ip4][..tcp] [......127.0.0.1][49552] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [.....5] [ip4][..tcp] [......127.0.0.1][49552] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [.....6] [ip4][..tcp] [......127.0.0.1][49554] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [.....6] [ip4][..tcp] [......127.0.0.1][49554] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [.....7] [ip4][..tcp] [......127.0.0.1][49556] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [.....7] [ip4][..tcp] [......127.0.0.1][49556] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [.....8] [ip4][..tcp] [......127.0.0.1][49558] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [.....8] [ip4][..tcp] [......127.0.0.1][49558] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [.....9] [ip4][..tcp] [......127.0.0.1][49560] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [......127.0.0.1][49560] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....10] [ip4][..tcp] [......127.0.0.1][49562] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....10] [ip4][..tcp] [......127.0.0.1][49562] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....11] [ip4][..tcp] [......127.0.0.1][49564] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....11] [ip4][..tcp] [......127.0.0.1][49564] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....12] [ip4][..tcp] [......127.0.0.1][49566] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....12] [ip4][..tcp] [......127.0.0.1][49566] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....13] [ip4][..tcp] [......127.0.0.1][49568] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....13] [ip4][..tcp] [......127.0.0.1][49568] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....14] [ip4][..tcp] [......127.0.0.1][49570] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....14] [ip4][..tcp] [......127.0.0.1][49570] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....15] [ip4][..tcp] [......127.0.0.1][49572] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....15] [ip4][..tcp] [......127.0.0.1][49572] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....16] [ip4][..tcp] [......127.0.0.1][49574] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....16] [ip4][..tcp] [......127.0.0.1][49574] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....17] [ip4][..tcp] [......127.0.0.1][49576] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....17] [ip4][..tcp] [......127.0.0.1][49576] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....18] [ip4][..tcp] [......127.0.0.1][49578] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....18] [ip4][..tcp] [......127.0.0.1][49578] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....19] [ip4][..tcp] [......127.0.0.1][49580] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....19] [ip4][..tcp] [......127.0.0.1][49580] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....20] [ip4][..tcp] [......127.0.0.1][49582] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....20] [ip4][..tcp] [......127.0.0.1][49582] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....21] [ip4][..tcp] [......127.0.0.1][49584] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....21] [ip4][..tcp] [......127.0.0.1][49584] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....22] [ip4][..tcp] [......127.0.0.1][49586] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....22] [ip4][..tcp] [......127.0.0.1][49586] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....23] [ip4][..tcp] [......127.0.0.1][49588] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....23] [ip4][..tcp] [......127.0.0.1][49588] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....24] [ip4][..tcp] [......127.0.0.1][49590] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....24] [ip4][..tcp] [......127.0.0.1][49590] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....25] [ip4][..tcp] [......127.0.0.1][49592] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....25] [ip4][..tcp] [......127.0.0.1][49592] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....26] [ip4][..tcp] [......127.0.0.1][49594] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....26] [ip4][..tcp] [......127.0.0.1][49594] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....27] [ip4][..tcp] [......127.0.0.1][49596] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....27] [ip4][..tcp] [......127.0.0.1][49596] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....28] [ip4][..tcp] [......127.0.0.1][49598] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....28] [ip4][..tcp] [......127.0.0.1][49598] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....29] [ip4][..tcp] [......127.0.0.1][49600] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....29] [ip4][..tcp] [......127.0.0.1][49600] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....30] [ip4][..tcp] [......127.0.0.1][49602] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....30] [ip4][..tcp] [......127.0.0.1][49602] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....31] [ip4][..tcp] [......127.0.0.1][49604] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....31] [ip4][..tcp] [......127.0.0.1][49604] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....32] [ip4][..tcp] [......127.0.0.1][49606] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....32] [ip4][..tcp] [......127.0.0.1][49606] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....33] [ip4][..tcp] [......127.0.0.1][49608] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....33] [ip4][..tcp] [......127.0.0.1][49608] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....34] [ip4][..tcp] [......127.0.0.1][49610] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....34] [ip4][..tcp] [......127.0.0.1][49610] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....35] [ip4][..tcp] [......127.0.0.1][49612] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....35] [ip4][..tcp] [......127.0.0.1][49612] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....36] [ip4][..tcp] [......127.0.0.1][49614] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....36] [ip4][..tcp] [......127.0.0.1][49614] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....37] [ip4][..tcp] [......127.0.0.1][49616] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....37] [ip4][..tcp] [......127.0.0.1][49616] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....38] [ip4][..tcp] [......127.0.0.1][49618] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....38] [ip4][..tcp] [......127.0.0.1][49618] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....39] [ip4][..tcp] [......127.0.0.1][49620] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....39] [ip4][..tcp] [......127.0.0.1][49620] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....40] [ip4][..tcp] [......127.0.0.1][49622] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....40] [ip4][..tcp] [......127.0.0.1][49622] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....41] [ip4][..tcp] [......127.0.0.1][49624] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....41] [ip4][..tcp] [......127.0.0.1][49624] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....42] [ip4][..tcp] [......127.0.0.1][49626] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....42] [ip4][..tcp] [......127.0.0.1][49626] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....43] [ip4][..tcp] [......127.0.0.1][49628] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....43] [ip4][..tcp] [......127.0.0.1][49628] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....44] [ip4][..tcp] [......127.0.0.1][49630] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....44] [ip4][..tcp] [......127.0.0.1][49630] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....45] [ip4][..tcp] [......127.0.0.1][49632] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....45] [ip4][..tcp] [......127.0.0.1][49632] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....46] [ip4][..tcp] [......127.0.0.1][49634] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....46] [ip4][..tcp] [......127.0.0.1][49634] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....47] [ip4][..tcp] [......127.0.0.1][49636] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....47] [ip4][..tcp] [......127.0.0.1][49636] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....48] [ip4][..tcp] [......127.0.0.1][49638] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....48] [ip4][..tcp] [......127.0.0.1][49638] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....49] [ip4][..tcp] [......127.0.0.1][49640] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....49] [ip4][..tcp] [......127.0.0.1][49640] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....50] [ip4][..tcp] [......127.0.0.1][49642] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....50] [ip4][..tcp] [......127.0.0.1][49642] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....51] [ip4][..tcp] [......127.0.0.1][49644] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....51] [ip4][..tcp] [......127.0.0.1][49644] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....52] [ip4][..tcp] [......127.0.0.1][49646] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....52] [ip4][..tcp] [......127.0.0.1][49646] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....53] [ip4][..tcp] [......127.0.0.1][49648] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....53] [ip4][..tcp] [......127.0.0.1][49648] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....54] [ip4][..tcp] [......127.0.0.1][49650] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....54] [ip4][..tcp] [......127.0.0.1][49650] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....55] [ip4][..tcp] [......127.0.0.1][49652] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....55] [ip4][..tcp] [......127.0.0.1][49652] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....56] [ip4][..tcp] [......127.0.0.1][49654] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....56] [ip4][..tcp] [......127.0.0.1][49654] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....57] [ip4][..tcp] [......127.0.0.1][49656] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....57] [ip4][..tcp] [......127.0.0.1][49656] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....58] [ip4][..tcp] [......127.0.0.1][49658] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....58] [ip4][..tcp] [......127.0.0.1][49658] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....59] [ip4][..tcp] [......127.0.0.1][49660] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....59] [ip4][..tcp] [......127.0.0.1][49660] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....60] [ip4][..tcp] [......127.0.0.1][49662] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....60] [ip4][..tcp] [......127.0.0.1][49662] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....61] [ip4][..tcp] [......127.0.0.1][49664] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....61] [ip4][..tcp] [......127.0.0.1][49664] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....62] [ip4][..tcp] [......127.0.0.1][49666] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....62] [ip4][..tcp] [......127.0.0.1][49666] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....63] [ip4][..tcp] [......127.0.0.1][49668] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....63] [ip4][..tcp] [......127.0.0.1][49668] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....64] [ip4][..tcp] [......127.0.0.1][49670] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....64] [ip4][..tcp] [......127.0.0.1][49670] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....65] [ip4][..tcp] [......127.0.0.1][49672] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....65] [ip4][..tcp] [......127.0.0.1][49672] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....66] [ip4][..tcp] [......127.0.0.1][49674] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....66] [ip4][..tcp] [......127.0.0.1][49674] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....67] [ip4][..tcp] [......127.0.0.1][49676] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....67] [ip4][..tcp] [......127.0.0.1][49676] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....68] [ip4][..tcp] [......127.0.0.1][49678] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....68] [ip4][..tcp] [......127.0.0.1][49678] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....69] [ip4][..tcp] [......127.0.0.1][49680] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....69] [ip4][..tcp] [......127.0.0.1][49680] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....70] [ip4][..tcp] [......127.0.0.1][49682] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....70] [ip4][..tcp] [......127.0.0.1][49682] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....71] [ip4][..tcp] [......127.0.0.1][49684] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....71] [ip4][..tcp] [......127.0.0.1][49684] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....72] [ip4][..tcp] [......127.0.0.1][49686] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....72] [ip4][..tcp] [......127.0.0.1][49686] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....73] [ip4][..tcp] [......127.0.0.1][49688] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....73] [ip4][..tcp] [......127.0.0.1][49688] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....74] [ip4][..tcp] [......127.0.0.1][49690] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....74] [ip4][..tcp] [......127.0.0.1][49690] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....75] [ip4][..tcp] [......127.0.0.1][49692] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....75] [ip4][..tcp] [......127.0.0.1][49692] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....76] [ip4][..tcp] [......127.0.0.1][49694] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....76] [ip4][..tcp] [......127.0.0.1][49694] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....77] [ip4][..tcp] [......127.0.0.1][49696] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....77] [ip4][..tcp] [......127.0.0.1][49696] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....78] [ip4][..tcp] [......127.0.0.1][49698] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....78] [ip4][..tcp] [......127.0.0.1][49698] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....79] [ip4][..tcp] [......127.0.0.1][49700] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....79] [ip4][..tcp] [......127.0.0.1][49700] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....80] [ip4][..tcp] [......127.0.0.1][49702] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....80] [ip4][..tcp] [......127.0.0.1][49702] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....81] [ip4][..tcp] [......127.0.0.1][49704] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....81] [ip4][..tcp] [......127.0.0.1][49704] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....82] [ip4][..tcp] [......127.0.0.1][49706] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....82] [ip4][..tcp] [......127.0.0.1][49706] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....83] [ip4][..tcp] [......127.0.0.1][49708] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....83] [ip4][..tcp] [......127.0.0.1][49708] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....84] [ip4][..tcp] [......127.0.0.1][49710] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....84] [ip4][..tcp] [......127.0.0.1][49710] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....85] [ip4][..tcp] [......127.0.0.1][49712] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....85] [ip4][..tcp] [......127.0.0.1][49712] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....86] [ip4][..tcp] [......127.0.0.1][49714] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....86] [ip4][..tcp] [......127.0.0.1][49714] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....87] [ip4][..tcp] [......127.0.0.1][49716] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....87] [ip4][..tcp] [......127.0.0.1][49716] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....88] [ip4][..tcp] [......127.0.0.1][49718] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....88] [ip4][..tcp] [......127.0.0.1][49718] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....89] [ip4][..tcp] [......127.0.0.1][49720] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....89] [ip4][..tcp] [......127.0.0.1][49720] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....90] [ip4][..tcp] [......127.0.0.1][49722] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....90] [ip4][..tcp] [......127.0.0.1][49722] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....91] [ip4][..tcp] [......127.0.0.1][49724] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....91] [ip4][..tcp] [......127.0.0.1][49724] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....92] [ip4][..tcp] [......127.0.0.1][49726] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....92] [ip4][..tcp] [......127.0.0.1][49726] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....93] [ip4][..tcp] [......127.0.0.1][49728] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....93] [ip4][..tcp] [......127.0.0.1][49728] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....94] [ip4][..tcp] [......127.0.0.1][49730] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....94] [ip4][..tcp] [......127.0.0.1][49730] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....95] [ip4][..tcp] [......127.0.0.1][49732] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....95] [ip4][..tcp] [......127.0.0.1][49732] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....96] [ip4][..tcp] [......127.0.0.1][49734] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....96] [ip4][..tcp] [......127.0.0.1][49734] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....97] [ip4][..tcp] [......127.0.0.1][49736] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....97] [ip4][..tcp] [......127.0.0.1][49736] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....98] [ip4][..tcp] [......127.0.0.1][49738] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....98] [ip4][..tcp] [......127.0.0.1][49738] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....99] [ip4][..tcp] [......127.0.0.1][49740] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [....99] [ip4][..tcp] [......127.0.0.1][49740] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...100] [ip4][..tcp] [......127.0.0.1][49742] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...100] [ip4][..tcp] [......127.0.0.1][49742] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...101] [ip4][..tcp] [......127.0.0.1][49744] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...101] [ip4][..tcp] [......127.0.0.1][49744] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...102] [ip4][..tcp] [......127.0.0.1][49746] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...102] [ip4][..tcp] [......127.0.0.1][49746] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...103] [ip4][..tcp] [......127.0.0.1][49748] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...103] [ip4][..tcp] [......127.0.0.1][49748] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...104] [ip4][..tcp] [......127.0.0.1][49750] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...104] [ip4][..tcp] [......127.0.0.1][49750] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...105] [ip4][..tcp] [......127.0.0.1][49752] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...105] [ip4][..tcp] [......127.0.0.1][49752] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...106] [ip4][..tcp] [......127.0.0.1][49754] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...106] [ip4][..tcp] [......127.0.0.1][49754] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...107] [ip4][..tcp] [......127.0.0.1][49756] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...107] [ip4][..tcp] [......127.0.0.1][49756] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...108] [ip4][..tcp] [......127.0.0.1][49758] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...108] [ip4][..tcp] [......127.0.0.1][49758] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...109] [ip4][..tcp] [......127.0.0.1][49760] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...109] [ip4][..tcp] [......127.0.0.1][49760] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...110] [ip4][..tcp] [......127.0.0.1][49764] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...110] [ip4][..tcp] [......127.0.0.1][49764] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...111] [ip4][..tcp] [......127.0.0.1][49766] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...111] [ip4][..tcp] [......127.0.0.1][49766] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...112] [ip4][..tcp] [......127.0.0.1][49768] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...112] [ip4][..tcp] [......127.0.0.1][49768] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...113] [ip4][..tcp] [......127.0.0.1][49770] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...113] [ip4][..tcp] [......127.0.0.1][49770] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...114] [ip4][..tcp] [......127.0.0.1][49772] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...114] [ip4][..tcp] [......127.0.0.1][49772] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...115] [ip4][..tcp] [......127.0.0.1][49774] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...115] [ip4][..tcp] [......127.0.0.1][49774] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...116] [ip4][..tcp] [......127.0.0.1][49776] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...116] [ip4][..tcp] [......127.0.0.1][49776] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...117] [ip4][..tcp] [......127.0.0.1][49778] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...117] [ip4][..tcp] [......127.0.0.1][49778] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...118] [ip4][..tcp] [......127.0.0.1][49780] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...118] [ip4][..tcp] [......127.0.0.1][49780] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...119] [ip4][..tcp] [......127.0.0.1][49782] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...119] [ip4][..tcp] [......127.0.0.1][49782] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...120] [ip4][..tcp] [......127.0.0.1][49784] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...120] [ip4][..tcp] [......127.0.0.1][49784] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...121] [ip4][..tcp] [......127.0.0.1][49786] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...121] [ip4][..tcp] [......127.0.0.1][49786] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...122] [ip4][..tcp] [......127.0.0.1][49788] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...122] [ip4][..tcp] [......127.0.0.1][49788] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...123] [ip4][..tcp] [......127.0.0.1][49790] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...123] [ip4][..tcp] [......127.0.0.1][49790] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...124] [ip4][..tcp] [......127.0.0.1][49792] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...124] [ip4][..tcp] [......127.0.0.1][49792] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...125] [ip4][..tcp] [......127.0.0.1][49794] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...125] [ip4][..tcp] [......127.0.0.1][49794] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...126] [ip4][..tcp] [......127.0.0.1][49796] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...126] [ip4][..tcp] [......127.0.0.1][49796] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...127] [ip4][..tcp] [......127.0.0.1][49798] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...127] [ip4][..tcp] [......127.0.0.1][49798] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...128] [ip4][..tcp] [......127.0.0.1][49800] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...128] [ip4][..tcp] [......127.0.0.1][49800] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...129] [ip4][..tcp] [......127.0.0.1][49802] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...129] [ip4][..tcp] [......127.0.0.1][49802] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...130] [ip4][..tcp] [......127.0.0.1][49804] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...130] [ip4][..tcp] [......127.0.0.1][49804] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...131] [ip4][..tcp] [......127.0.0.1][49806] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...131] [ip4][..tcp] [......127.0.0.1][49806] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...132] [ip4][..tcp] [......127.0.0.1][49808] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...132] [ip4][..tcp] [......127.0.0.1][49808] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...133] [ip4][..tcp] [......127.0.0.1][49810] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...133] [ip4][..tcp] [......127.0.0.1][49810] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...134] [ip4][..tcp] [......127.0.0.1][49812] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...134] [ip4][..tcp] [......127.0.0.1][49812] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...135] [ip4][..tcp] [......127.0.0.1][49814] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...135] [ip4][..tcp] [......127.0.0.1][49814] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...136] [ip4][..tcp] [......127.0.0.1][49816] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...136] [ip4][..tcp] [......127.0.0.1][49816] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...137] [ip4][..tcp] [......127.0.0.1][49818] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...137] [ip4][..tcp] [......127.0.0.1][49818] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...138] [ip4][..tcp] [......127.0.0.1][49820] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...138] [ip4][..tcp] [......127.0.0.1][49820] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...139] [ip4][..tcp] [......127.0.0.1][49822] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...139] [ip4][..tcp] [......127.0.0.1][49822] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...140] [ip4][..tcp] [......127.0.0.1][49824] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...140] [ip4][..tcp] [......127.0.0.1][49824] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...141] [ip4][..tcp] [......127.0.0.1][49826] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...141] [ip4][..tcp] [......127.0.0.1][49826] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...142] [ip4][..tcp] [......127.0.0.1][49828] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...142] [ip4][..tcp] [......127.0.0.1][49828] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...143] [ip4][..tcp] [......127.0.0.1][49830] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...143] [ip4][..tcp] [......127.0.0.1][49830] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...144] [ip4][..tcp] [......127.0.0.1][49832] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...144] [ip4][..tcp] [......127.0.0.1][49832] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...145] [ip4][..tcp] [......127.0.0.1][49834] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...145] [ip4][..tcp] [......127.0.0.1][49834] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...146] [ip4][..tcp] [......127.0.0.1][49836] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...146] [ip4][..tcp] [......127.0.0.1][49836] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...147] [ip4][..tcp] [......127.0.0.1][49838] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...147] [ip4][..tcp] [......127.0.0.1][49838] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...148] [ip4][..tcp] [......127.0.0.1][49840] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...148] [ip4][..tcp] [......127.0.0.1][49840] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...149] [ip4][..tcp] [......127.0.0.1][49842] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...149] [ip4][..tcp] [......127.0.0.1][49842] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...150] [ip4][..tcp] [......127.0.0.1][49844] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...150] [ip4][..tcp] [......127.0.0.1][49844] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...151] [ip4][..tcp] [......127.0.0.1][49846] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...151] [ip4][..tcp] [......127.0.0.1][49846] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...152] [ip4][..tcp] [......127.0.0.1][49848] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...152] [ip4][..tcp] [......127.0.0.1][49848] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...153] [ip4][..tcp] [......127.0.0.1][49850] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...153] [ip4][..tcp] [......127.0.0.1][49850] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...154] [ip4][..tcp] [......127.0.0.1][49852] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...154] [ip4][..tcp] [......127.0.0.1][49852] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...155] [ip4][..tcp] [......127.0.0.1][49854] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...155] [ip4][..tcp] [......127.0.0.1][49854] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...156] [ip4][..tcp] [......127.0.0.1][49856] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...156] [ip4][..tcp] [......127.0.0.1][49856] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...157] [ip4][..tcp] [......127.0.0.1][49858] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...157] [ip4][..tcp] [......127.0.0.1][49858] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...158] [ip4][..tcp] [......127.0.0.1][49860] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...158] [ip4][..tcp] [......127.0.0.1][49860] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...159] [ip4][..tcp] [......127.0.0.1][49862] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...159] [ip4][..tcp] [......127.0.0.1][49862] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...160] [ip4][..tcp] [......127.0.0.1][49864] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...160] [ip4][..tcp] [......127.0.0.1][49864] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...161] [ip4][..tcp] [......127.0.0.1][49866] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...161] [ip4][..tcp] [......127.0.0.1][49866] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...162] [ip4][..tcp] [......127.0.0.1][49868] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...162] [ip4][..tcp] [......127.0.0.1][49868] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...163] [ip4][..tcp] [......127.0.0.1][49870] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...163] [ip4][..tcp] [......127.0.0.1][49870] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...164] [ip4][..tcp] [......127.0.0.1][49872] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...164] [ip4][..tcp] [......127.0.0.1][49872] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...165] [ip4][..tcp] [......127.0.0.1][49874] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...165] [ip4][..tcp] [......127.0.0.1][49874] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...166] [ip4][..tcp] [......127.0.0.1][49876] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...166] [ip4][..tcp] [......127.0.0.1][49876] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...167] [ip4][..tcp] [......127.0.0.1][49878] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...167] [ip4][..tcp] [......127.0.0.1][49878] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...168] [ip4][..tcp] [......127.0.0.1][49880] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...168] [ip4][..tcp] [......127.0.0.1][49880] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...169] [ip4][..tcp] [......127.0.0.1][49882] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...169] [ip4][..tcp] [......127.0.0.1][49882] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...170] [ip4][..tcp] [......127.0.0.1][49884] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...170] [ip4][..tcp] [......127.0.0.1][49884] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...171] [ip4][..tcp] [......127.0.0.1][49886] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...171] [ip4][..tcp] [......127.0.0.1][49886] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...172] [ip4][..tcp] [......127.0.0.1][49888] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...172] [ip4][..tcp] [......127.0.0.1][49888] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...173] [ip4][..tcp] [......127.0.0.1][49890] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...173] [ip4][..tcp] [......127.0.0.1][49890] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...174] [ip4][..tcp] [......127.0.0.1][49892] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...174] [ip4][..tcp] [......127.0.0.1][49892] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...175] [ip4][..tcp] [......127.0.0.1][49894] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...175] [ip4][..tcp] [......127.0.0.1][49894] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...176] [ip4][..tcp] [......127.0.0.1][49896] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...176] [ip4][..tcp] [......127.0.0.1][49896] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...177] [ip4][..tcp] [......127.0.0.1][49898] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...177] [ip4][..tcp] [......127.0.0.1][49898] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...178] [ip4][..tcp] [......127.0.0.1][49900] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...178] [ip4][..tcp] [......127.0.0.1][49900] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...179] [ip4][..tcp] [......127.0.0.1][49902] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...179] [ip4][..tcp] [......127.0.0.1][49902] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...180] [ip4][..tcp] [......127.0.0.1][49904] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...180] [ip4][..tcp] [......127.0.0.1][49904] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...181] [ip4][..tcp] [......127.0.0.1][49906] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...181] [ip4][..tcp] [......127.0.0.1][49906] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...182] [ip4][..tcp] [......127.0.0.1][49908] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...182] [ip4][..tcp] [......127.0.0.1][49908] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...183] [ip4][..tcp] [......127.0.0.1][49910] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...183] [ip4][..tcp] [......127.0.0.1][49910] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...184] [ip4][..tcp] [......127.0.0.1][49912] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...184] [ip4][..tcp] [......127.0.0.1][49912] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...185] [ip4][..tcp] [......127.0.0.1][49914] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...185] [ip4][..tcp] [......127.0.0.1][49914] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...186] [ip4][..tcp] [......127.0.0.1][49916] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...186] [ip4][..tcp] [......127.0.0.1][49916] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...187] [ip4][..tcp] [......127.0.0.1][49918] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...187] [ip4][..tcp] [......127.0.0.1][49918] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...188] [ip4][..tcp] [......127.0.0.1][49920] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...188] [ip4][..tcp] [......127.0.0.1][49920] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...189] [ip4][..tcp] [......127.0.0.1][49922] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...189] [ip4][..tcp] [......127.0.0.1][49922] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...190] [ip4][..tcp] [......127.0.0.1][49924] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...190] [ip4][..tcp] [......127.0.0.1][49924] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...191] [ip4][..tcp] [......127.0.0.1][49926] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...191] [ip4][..tcp] [......127.0.0.1][49926] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...192] [ip4][..tcp] [......127.0.0.1][49928] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...192] [ip4][..tcp] [......127.0.0.1][49928] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...193] [ip4][..tcp] [......127.0.0.1][49930] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...193] [ip4][..tcp] [......127.0.0.1][49930] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...194] [ip4][..tcp] [......127.0.0.1][49932] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...194] [ip4][..tcp] [......127.0.0.1][49932] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...195] [ip4][..tcp] [......127.0.0.1][49934] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...195] [ip4][..tcp] [......127.0.0.1][49934] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...196] [ip4][..tcp] [......127.0.0.1][49936] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...196] [ip4][..tcp] [......127.0.0.1][49936] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...197] [ip4][..tcp] [......127.0.0.1][49938] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...197] [ip4][..tcp] [......127.0.0.1][49938] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...198] [ip4][..tcp] [......127.0.0.1][49940] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...198] [ip4][..tcp] [......127.0.0.1][49940] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...199] [ip4][..tcp] [......127.0.0.1][49942] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...199] [ip4][..tcp] [......127.0.0.1][49942] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...200] [ip4][..tcp] [......127.0.0.1][49944] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...200] [ip4][..tcp] [......127.0.0.1][49944] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...201] [ip4][..tcp] [......127.0.0.1][49946] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...201] [ip4][..tcp] [......127.0.0.1][49946] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...202] [ip4][..tcp] [......127.0.0.1][49948] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...202] [ip4][..tcp] [......127.0.0.1][49948] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...203] [ip4][..tcp] [......127.0.0.1][49950] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...203] [ip4][..tcp] [......127.0.0.1][49950] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...204] [ip4][..tcp] [......127.0.0.1][49952] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...204] [ip4][..tcp] [......127.0.0.1][49952] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...205] [ip4][..tcp] [......127.0.0.1][49954] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...205] [ip4][..tcp] [......127.0.0.1][49954] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...206] [ip4][..tcp] [......127.0.0.1][49956] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...206] [ip4][..tcp] [......127.0.0.1][49956] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...207] [ip4][..tcp] [......127.0.0.1][49958] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...207] [ip4][..tcp] [......127.0.0.1][49958] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...208] [ip4][..tcp] [......127.0.0.1][49960] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...208] [ip4][..tcp] [......127.0.0.1][49960] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...209] [ip4][..tcp] [......127.0.0.1][49962] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...209] [ip4][..tcp] [......127.0.0.1][49962] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...210] [ip4][..tcp] [......127.0.0.1][49964] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...210] [ip4][..tcp] [......127.0.0.1][49964] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...211] [ip4][..tcp] [......127.0.0.1][49966] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...211] [ip4][..tcp] [......127.0.0.1][49966] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...212] [ip4][..tcp] [......127.0.0.1][49968] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...212] [ip4][..tcp] [......127.0.0.1][49968] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...213] [ip4][..tcp] [......127.0.0.1][49970] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...213] [ip4][..tcp] [......127.0.0.1][49970] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...214] [ip4][..tcp] [......127.0.0.1][49972] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...214] [ip4][..tcp] [......127.0.0.1][49972] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...215] [ip4][..tcp] [......127.0.0.1][49974] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...215] [ip4][..tcp] [......127.0.0.1][49974] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...216] [ip4][..tcp] [......127.0.0.1][49976] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...216] [ip4][..tcp] [......127.0.0.1][49976] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...217] [ip4][..tcp] [......127.0.0.1][49978] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...217] [ip4][..tcp] [......127.0.0.1][49978] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...218] [ip4][..tcp] [......127.0.0.1][49980] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...218] [ip4][..tcp] [......127.0.0.1][49980] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...219] [ip4][..tcp] [......127.0.0.1][49982] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...219] [ip4][..tcp] [......127.0.0.1][49982] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...220] [ip4][..tcp] [......127.0.0.1][49984] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...220] [ip4][..tcp] [......127.0.0.1][49984] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...221] [ip4][..tcp] [......127.0.0.1][49986] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...221] [ip4][..tcp] [......127.0.0.1][49986] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...222] [ip4][..tcp] [......127.0.0.1][49988] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...222] [ip4][..tcp] [......127.0.0.1][49988] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...223] [ip4][..tcp] [......127.0.0.1][49990] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...223] [ip4][..tcp] [......127.0.0.1][49990] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...224] [ip4][..tcp] [......127.0.0.1][49992] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...224] [ip4][..tcp] [......127.0.0.1][49992] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...225] [ip4][..tcp] [......127.0.0.1][49994] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...225] [ip4][..tcp] [......127.0.0.1][49994] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...226] [ip4][..tcp] [......127.0.0.1][49996] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...226] [ip4][..tcp] [......127.0.0.1][49996] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...227] [ip4][..tcp] [......127.0.0.1][49998] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...227] [ip4][..tcp] [......127.0.0.1][49998] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...228] [ip4][..tcp] [......127.0.0.1][50000] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...228] [ip4][..tcp] [......127.0.0.1][50000] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...229] [ip4][..tcp] [......127.0.0.1][50002] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...229] [ip4][..tcp] [......127.0.0.1][50002] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...230] [ip4][..tcp] [......127.0.0.1][50004] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...230] [ip4][..tcp] [......127.0.0.1][50004] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...231] [ip4][..tcp] [......127.0.0.1][50006] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...231] [ip4][..tcp] [......127.0.0.1][50006] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...232] [ip4][..tcp] [......127.0.0.1][50008] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...232] [ip4][..tcp] [......127.0.0.1][50008] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...233] [ip4][..tcp] [......127.0.0.1][50010] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...233] [ip4][..tcp] [......127.0.0.1][50010] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...234] [ip4][..tcp] [......127.0.0.1][50012] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...234] [ip4][..tcp] [......127.0.0.1][50012] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...235] [ip4][..tcp] [......127.0.0.1][50014] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...235] [ip4][..tcp] [......127.0.0.1][50014] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...236] [ip4][..tcp] [......127.0.0.1][50016] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...236] [ip4][..tcp] [......127.0.0.1][50016] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...237] [ip4][..tcp] [......127.0.0.1][50018] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...237] [ip4][..tcp] [......127.0.0.1][50018] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...238] [ip4][..tcp] [......127.0.0.1][50020] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...238] [ip4][..tcp] [......127.0.0.1][50020] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...239] [ip4][..tcp] [......127.0.0.1][50022] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...239] [ip4][..tcp] [......127.0.0.1][50022] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...240] [ip4][..tcp] [......127.0.0.1][50024] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...240] [ip4][..tcp] [......127.0.0.1][50024] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...241] [ip4][..tcp] [......127.0.0.1][50026] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...241] [ip4][..tcp] [......127.0.0.1][50026] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...242] [ip4][..tcp] [......127.0.0.1][50028] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...242] [ip4][..tcp] [......127.0.0.1][50028] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...243] [ip4][..tcp] [......127.0.0.1][50030] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...243] [ip4][..tcp] [......127.0.0.1][50030] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...244] [ip4][..tcp] [......127.0.0.1][50032] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...244] [ip4][..tcp] [......127.0.0.1][50032] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...245] [ip4][..tcp] [......127.0.0.1][50034] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...245] [ip4][..tcp] [......127.0.0.1][50034] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...246] [ip4][..tcp] [......127.0.0.1][50036] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...246] [ip4][..tcp] [......127.0.0.1][50036] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...247] [ip4][..tcp] [......127.0.0.1][50038] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...247] [ip4][..tcp] [......127.0.0.1][50038] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...248] [ip4][..tcp] [......127.0.0.1][50040] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...248] [ip4][..tcp] [......127.0.0.1][50040] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...249] [ip4][..tcp] [......127.0.0.1][50042] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...249] [ip4][..tcp] [......127.0.0.1][50042] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...250] [ip4][..tcp] [......127.0.0.1][50044] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...250] [ip4][..tcp] [......127.0.0.1][50044] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...251] [ip4][..tcp] [......127.0.0.1][50046] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...251] [ip4][..tcp] [......127.0.0.1][50046] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...252] [ip4][..tcp] [......127.0.0.1][50048] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...252] [ip4][..tcp] [......127.0.0.1][50048] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...253] [ip4][..tcp] [......127.0.0.1][50050] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...253] [ip4][..tcp] [......127.0.0.1][50050] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...254] [ip4][..tcp] [......127.0.0.1][50052] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...254] [ip4][..tcp] [......127.0.0.1][50052] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...255] [ip4][..tcp] [......127.0.0.1][50054] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...255] [ip4][..tcp] [......127.0.0.1][50054] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...256] [ip4][..tcp] [......127.0.0.1][50056] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...256] [ip4][..tcp] [......127.0.0.1][50056] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...257] [ip4][..tcp] [......127.0.0.1][50058] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...257] [ip4][..tcp] [......127.0.0.1][50058] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...258] [ip4][..tcp] [......127.0.0.1][50060] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...258] [ip4][..tcp] [......127.0.0.1][50060] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...259] [ip4][..tcp] [......127.0.0.1][50062] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...259] [ip4][..tcp] [......127.0.0.1][50062] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...260] [ip4][..tcp] [......127.0.0.1][50064] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...260] [ip4][..tcp] [......127.0.0.1][50064] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...261] [ip4][..tcp] [......127.0.0.1][50066] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...261] [ip4][..tcp] [......127.0.0.1][50066] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...262] [ip4][..tcp] [......127.0.0.1][50068] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...262] [ip4][..tcp] [......127.0.0.1][50068] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...263] [ip4][..tcp] [......127.0.0.1][50070] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...263] [ip4][..tcp] [......127.0.0.1][50070] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...264] [ip4][..tcp] [......127.0.0.1][50072] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...264] [ip4][..tcp] [......127.0.0.1][50072] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...265] [ip4][..tcp] [......127.0.0.1][50074] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...265] [ip4][..tcp] [......127.0.0.1][50074] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...266] [ip4][..tcp] [......127.0.0.1][50076] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...266] [ip4][..tcp] [......127.0.0.1][50076] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...267] [ip4][..tcp] [......127.0.0.1][50078] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...267] [ip4][..tcp] [......127.0.0.1][50078] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...268] [ip4][..tcp] [......127.0.0.1][50080] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...268] [ip4][..tcp] [......127.0.0.1][50080] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...269] [ip4][..tcp] [......127.0.0.1][50082] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...269] [ip4][..tcp] [......127.0.0.1][50082] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...270] [ip4][..tcp] [......127.0.0.1][50084] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...270] [ip4][..tcp] [......127.0.0.1][50084] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...271] [ip4][..tcp] [......127.0.0.1][50086] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...271] [ip4][..tcp] [......127.0.0.1][50086] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...272] [ip4][..tcp] [......127.0.0.1][50088] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...272] [ip4][..tcp] [......127.0.0.1][50088] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...273] [ip4][..tcp] [......127.0.0.1][50090] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...273] [ip4][..tcp] [......127.0.0.1][50090] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...274] [ip4][..tcp] [......127.0.0.1][50092] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...274] [ip4][..tcp] [......127.0.0.1][50092] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...275] [ip4][..tcp] [......127.0.0.1][50094] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...275] [ip4][..tcp] [......127.0.0.1][50094] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...276] [ip4][..tcp] [......127.0.0.1][50096] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...276] [ip4][..tcp] [......127.0.0.1][50096] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...277] [ip4][..tcp] [......127.0.0.1][50098] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...277] [ip4][..tcp] [......127.0.0.1][50098] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...278] [ip4][..tcp] [......127.0.0.1][50100] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...278] [ip4][..tcp] [......127.0.0.1][50100] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...279] [ip4][..tcp] [......127.0.0.1][50102] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...279] [ip4][..tcp] [......127.0.0.1][50102] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...280] [ip4][..tcp] [......127.0.0.1][50104] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...280] [ip4][..tcp] [......127.0.0.1][50104] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...281] [ip4][..tcp] [......127.0.0.1][50106] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...281] [ip4][..tcp] [......127.0.0.1][50106] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...282] [ip4][..tcp] [......127.0.0.1][50108] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...282] [ip4][..tcp] [......127.0.0.1][50108] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...283] [ip4][..tcp] [......127.0.0.1][50110] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...283] [ip4][..tcp] [......127.0.0.1][50110] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...284] [ip4][..tcp] [......127.0.0.1][50112] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...284] [ip4][..tcp] [......127.0.0.1][50112] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...285] [ip4][..tcp] [......127.0.0.1][50114] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...285] [ip4][..tcp] [......127.0.0.1][50114] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...286] [ip4][..tcp] [......127.0.0.1][50116] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...286] [ip4][..tcp] [......127.0.0.1][50116] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...287] [ip4][..tcp] [......127.0.0.1][50118] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...287] [ip4][..tcp] [......127.0.0.1][50118] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...288] [ip4][..tcp] [......127.0.0.1][50120] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...288] [ip4][..tcp] [......127.0.0.1][50120] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...289] [ip4][..tcp] [......127.0.0.1][50122] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...289] [ip4][..tcp] [......127.0.0.1][50122] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...290] [ip4][..tcp] [......127.0.0.1][50124] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...290] [ip4][..tcp] [......127.0.0.1][50124] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...291] [ip4][..tcp] [......127.0.0.1][50126] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...291] [ip4][..tcp] [......127.0.0.1][50126] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...292] [ip4][..tcp] [......127.0.0.1][50128] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...292] [ip4][..tcp] [......127.0.0.1][50128] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...293] [ip4][..tcp] [......127.0.0.1][50130] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...293] [ip4][..tcp] [......127.0.0.1][50130] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...294] [ip4][..tcp] [......127.0.0.1][50132] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...294] [ip4][..tcp] [......127.0.0.1][50132] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...295] [ip4][..tcp] [......127.0.0.1][50134] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...295] [ip4][..tcp] [......127.0.0.1][50134] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...296] [ip4][..tcp] [......127.0.0.1][50136] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...296] [ip4][..tcp] [......127.0.0.1][50136] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...297] [ip4][..tcp] [......127.0.0.1][50138] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...297] [ip4][..tcp] [......127.0.0.1][50138] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...298] [ip4][..tcp] [......127.0.0.1][50140] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...298] [ip4][..tcp] [......127.0.0.1][50140] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...299] [ip4][..tcp] [......127.0.0.1][50142] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...299] [ip4][..tcp] [......127.0.0.1][50142] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...300] [ip4][..tcp] [......127.0.0.1][50144] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...300] [ip4][..tcp] [......127.0.0.1][50144] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...301] [ip4][..tcp] [......127.0.0.1][50146] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...301] [ip4][..tcp] [......127.0.0.1][50146] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...302] [ip4][..tcp] [......127.0.0.1][50148] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...302] [ip4][..tcp] [......127.0.0.1][50148] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...303] [ip4][..tcp] [......127.0.0.1][50150] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...303] [ip4][..tcp] [......127.0.0.1][50150] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...304] [ip4][..tcp] [......127.0.0.1][50152] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...304] [ip4][..tcp] [......127.0.0.1][50152] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...305] [ip4][..tcp] [......127.0.0.1][50154] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...305] [ip4][..tcp] [......127.0.0.1][50154] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...306] [ip4][..tcp] [......127.0.0.1][50156] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...306] [ip4][..tcp] [......127.0.0.1][50156] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...307] [ip4][..tcp] [......127.0.0.1][50158] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...307] [ip4][..tcp] [......127.0.0.1][50158] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...308] [ip4][..tcp] [......127.0.0.1][50160] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...308] [ip4][..tcp] [......127.0.0.1][50160] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...309] [ip4][..tcp] [......127.0.0.1][50162] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...309] [ip4][..tcp] [......127.0.0.1][50162] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...310] [ip4][..tcp] [......127.0.0.1][50164] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...310] [ip4][..tcp] [......127.0.0.1][50164] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...311] [ip4][..tcp] [......127.0.0.1][50166] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...311] [ip4][..tcp] [......127.0.0.1][50166] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...312] [ip4][..tcp] [......127.0.0.1][50168] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...312] [ip4][..tcp] [......127.0.0.1][50168] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...313] [ip4][..tcp] [......127.0.0.1][50170] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...313] [ip4][..tcp] [......127.0.0.1][50170] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...314] [ip4][..tcp] [......127.0.0.1][50172] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...314] [ip4][..tcp] [......127.0.0.1][50172] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...315] [ip4][..tcp] [......127.0.0.1][50174] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...315] [ip4][..tcp] [......127.0.0.1][50174] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...316] [ip4][..tcp] [......127.0.0.1][50176] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...316] [ip4][..tcp] [......127.0.0.1][50176] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...317] [ip4][..tcp] [......127.0.0.1][50178] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...317] [ip4][..tcp] [......127.0.0.1][50178] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...318] [ip4][..tcp] [......127.0.0.1][50180] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...318] [ip4][..tcp] [......127.0.0.1][50180] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...319] [ip4][..tcp] [......127.0.0.1][50182] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...319] [ip4][..tcp] [......127.0.0.1][50182] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...320] [ip4][..tcp] [......127.0.0.1][50184] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...320] [ip4][..tcp] [......127.0.0.1][50184] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...321] [ip4][..tcp] [......127.0.0.1][50186] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...321] [ip4][..tcp] [......127.0.0.1][50186] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...322] [ip4][..tcp] [......127.0.0.1][50188] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...322] [ip4][..tcp] [......127.0.0.1][50188] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...323] [ip4][..tcp] [......127.0.0.1][50190] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...323] [ip4][..tcp] [......127.0.0.1][50190] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...324] [ip4][..tcp] [......127.0.0.1][50192] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...324] [ip4][..tcp] [......127.0.0.1][50192] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...325] [ip4][..tcp] [......127.0.0.1][50194] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...325] [ip4][..tcp] [......127.0.0.1][50194] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...326] [ip4][..tcp] [......127.0.0.1][50196] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...326] [ip4][..tcp] [......127.0.0.1][50196] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...327] [ip4][..tcp] [......127.0.0.1][50198] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...327] [ip4][..tcp] [......127.0.0.1][50198] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...328] [ip4][..tcp] [......127.0.0.1][50200] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...328] [ip4][..tcp] [......127.0.0.1][50200] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...329] [ip4][..tcp] [......127.0.0.1][50202] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...329] [ip4][..tcp] [......127.0.0.1][50202] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...330] [ip4][..tcp] [......127.0.0.1][50204] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...330] [ip4][..tcp] [......127.0.0.1][50204] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...331] [ip4][..tcp] [......127.0.0.1][50206] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...331] [ip4][..tcp] [......127.0.0.1][50206] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...332] [ip4][..tcp] [......127.0.0.1][50208] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...332] [ip4][..tcp] [......127.0.0.1][50208] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...333] [ip4][..tcp] [......127.0.0.1][50210] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...333] [ip4][..tcp] [......127.0.0.1][50210] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...334] [ip4][..tcp] [......127.0.0.1][50212] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...334] [ip4][..tcp] [......127.0.0.1][50212] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...335] [ip4][..tcp] [......127.0.0.1][50214] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...335] [ip4][..tcp] [......127.0.0.1][50214] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...336] [ip4][..tcp] [......127.0.0.1][50216] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...336] [ip4][..tcp] [......127.0.0.1][50216] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...337] [ip4][..tcp] [......127.0.0.1][50218] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...337] [ip4][..tcp] [......127.0.0.1][50218] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...338] [ip4][..tcp] [......127.0.0.1][50220] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...338] [ip4][..tcp] [......127.0.0.1][50220] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...339] [ip4][..tcp] [......127.0.0.1][50222] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...339] [ip4][..tcp] [......127.0.0.1][50222] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...340] [ip4][..tcp] [......127.0.0.1][50224] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...340] [ip4][..tcp] [......127.0.0.1][50224] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...341] [ip4][..tcp] [......127.0.0.1][50226] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...341] [ip4][..tcp] [......127.0.0.1][50226] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...342] [ip4][..tcp] [......127.0.0.1][50228] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...342] [ip4][..tcp] [......127.0.0.1][50228] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...343] [ip4][..tcp] [......127.0.0.1][50230] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...343] [ip4][..tcp] [......127.0.0.1][50230] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...344] [ip4][..tcp] [......127.0.0.1][50232] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...344] [ip4][..tcp] [......127.0.0.1][50232] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...345] [ip4][..tcp] [......127.0.0.1][50234] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...345] [ip4][..tcp] [......127.0.0.1][50234] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...346] [ip4][..tcp] [......127.0.0.1][50236] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...346] [ip4][..tcp] [......127.0.0.1][50236] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...347] [ip4][..tcp] [......127.0.0.1][50238] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...347] [ip4][..tcp] [......127.0.0.1][50238] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...348] [ip4][..tcp] [......127.0.0.1][50240] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...348] [ip4][..tcp] [......127.0.0.1][50240] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...349] [ip4][..tcp] [......127.0.0.1][50242] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...349] [ip4][..tcp] [......127.0.0.1][50242] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...350] [ip4][..tcp] [......127.0.0.1][50244] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...350] [ip4][..tcp] [......127.0.0.1][50244] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...351] [ip4][..tcp] [......127.0.0.1][50246] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...351] [ip4][..tcp] [......127.0.0.1][50246] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...352] [ip4][..tcp] [......127.0.0.1][50248] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...352] [ip4][..tcp] [......127.0.0.1][50248] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...353] [ip4][..tcp] [......127.0.0.1][50250] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...353] [ip4][..tcp] [......127.0.0.1][50250] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...354] [ip4][..tcp] [......127.0.0.1][50252] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...354] [ip4][..tcp] [......127.0.0.1][50252] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...355] [ip4][..tcp] [......127.0.0.1][50254] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...355] [ip4][..tcp] [......127.0.0.1][50254] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...356] [ip4][..tcp] [......127.0.0.1][50256] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...356] [ip4][..tcp] [......127.0.0.1][50256] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...357] [ip4][..tcp] [......127.0.0.1][50258] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...357] [ip4][..tcp] [......127.0.0.1][50258] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...358] [ip4][..tcp] [......127.0.0.1][50260] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...358] [ip4][..tcp] [......127.0.0.1][50260] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...359] [ip4][..tcp] [......127.0.0.1][50262] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...359] [ip4][..tcp] [......127.0.0.1][50262] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...360] [ip4][..tcp] [......127.0.0.1][50264] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...360] [ip4][..tcp] [......127.0.0.1][50264] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...361] [ip4][..tcp] [......127.0.0.1][50266] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...361] [ip4][..tcp] [......127.0.0.1][50266] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...362] [ip4][..tcp] [......127.0.0.1][50268] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...362] [ip4][..tcp] [......127.0.0.1][50268] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...363] [ip4][..tcp] [......127.0.0.1][50270] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...363] [ip4][..tcp] [......127.0.0.1][50270] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...364] [ip4][..tcp] [......127.0.0.1][50272] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...364] [ip4][..tcp] [......127.0.0.1][50272] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...365] [ip4][..tcp] [......127.0.0.1][50274] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...365] [ip4][..tcp] [......127.0.0.1][50274] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...366] [ip4][..tcp] [......127.0.0.1][50276] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...366] [ip4][..tcp] [......127.0.0.1][50276] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...367] [ip4][..tcp] [......127.0.0.1][50278] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...367] [ip4][..tcp] [......127.0.0.1][50278] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...368] [ip4][..tcp] [......127.0.0.1][50280] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...368] [ip4][..tcp] [......127.0.0.1][50280] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...369] [ip4][..tcp] [......127.0.0.1][50282] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...369] [ip4][..tcp] [......127.0.0.1][50282] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...370] [ip4][..tcp] [......127.0.0.1][50284] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...370] [ip4][..tcp] [......127.0.0.1][50284] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...371] [ip4][..tcp] [......127.0.0.1][50286] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...371] [ip4][..tcp] [......127.0.0.1][50286] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...372] [ip4][..tcp] [......127.0.0.1][50288] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...372] [ip4][..tcp] [......127.0.0.1][50288] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...373] [ip4][..tcp] [......127.0.0.1][50290] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...373] [ip4][..tcp] [......127.0.0.1][50290] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...374] [ip4][..tcp] [......127.0.0.1][50292] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...374] [ip4][..tcp] [......127.0.0.1][50292] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...375] [ip4][..tcp] [......127.0.0.1][50294] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...375] [ip4][..tcp] [......127.0.0.1][50294] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...376] [ip4][..tcp] [......127.0.0.1][50296] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...376] [ip4][..tcp] [......127.0.0.1][50296] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...377] [ip4][..tcp] [......127.0.0.1][50298] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...377] [ip4][..tcp] [......127.0.0.1][50298] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...378] [ip4][..tcp] [......127.0.0.1][50300] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...378] [ip4][..tcp] [......127.0.0.1][50300] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...379] [ip4][..tcp] [......127.0.0.1][50302] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...379] [ip4][..tcp] [......127.0.0.1][50302] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...380] [ip4][..tcp] [......127.0.0.1][50304] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...380] [ip4][..tcp] [......127.0.0.1][50304] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...381] [ip4][..tcp] [......127.0.0.1][50306] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...381] [ip4][..tcp] [......127.0.0.1][50306] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...382] [ip4][..tcp] [......127.0.0.1][50308] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...382] [ip4][..tcp] [......127.0.0.1][50308] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...383] [ip4][..tcp] [......127.0.0.1][50310] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...383] [ip4][..tcp] [......127.0.0.1][50310] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...384] [ip4][..tcp] [......127.0.0.1][50312] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...384] [ip4][..tcp] [......127.0.0.1][50312] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...385] [ip4][..tcp] [......127.0.0.1][50314] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...385] [ip4][..tcp] [......127.0.0.1][50314] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...386] [ip4][..tcp] [......127.0.0.1][50316] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...386] [ip4][..tcp] [......127.0.0.1][50316] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...387] [ip4][..tcp] [......127.0.0.1][50318] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...387] [ip4][..tcp] [......127.0.0.1][50318] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...388] [ip4][..tcp] [......127.0.0.1][50320] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...388] [ip4][..tcp] [......127.0.0.1][50320] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...389] [ip4][..tcp] [......127.0.0.1][50322] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...389] [ip4][..tcp] [......127.0.0.1][50322] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...390] [ip4][..tcp] [......127.0.0.1][50324] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...390] [ip4][..tcp] [......127.0.0.1][50324] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...391] [ip4][..tcp] [......127.0.0.1][50326] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...391] [ip4][..tcp] [......127.0.0.1][50326] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...392] [ip4][..tcp] [......127.0.0.1][50328] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...392] [ip4][..tcp] [......127.0.0.1][50328] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...393] [ip4][..tcp] [......127.0.0.1][50330] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...393] [ip4][..tcp] [......127.0.0.1][50330] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...394] [ip4][..tcp] [......127.0.0.1][50332] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...394] [ip4][..tcp] [......127.0.0.1][50332] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...395] [ip4][..tcp] [......127.0.0.1][50334] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...395] [ip4][..tcp] [......127.0.0.1][50334] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...396] [ip4][..tcp] [......127.0.0.1][50336] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...396] [ip4][..tcp] [......127.0.0.1][50336] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...397] [ip4][..tcp] [......127.0.0.1][50338] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...397] [ip4][..tcp] [......127.0.0.1][50338] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...398] [ip4][..tcp] [......127.0.0.1][50340] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...398] [ip4][..tcp] [......127.0.0.1][50340] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...399] [ip4][..tcp] [......127.0.0.1][50342] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...399] [ip4][..tcp] [......127.0.0.1][50342] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...400] [ip4][..tcp] [......127.0.0.1][50344] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...400] [ip4][..tcp] [......127.0.0.1][50344] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...401] [ip4][..tcp] [......127.0.0.1][50346] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...401] [ip4][..tcp] [......127.0.0.1][50346] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...402] [ip4][..tcp] [......127.0.0.1][50348] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...402] [ip4][..tcp] [......127.0.0.1][50348] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...403] [ip4][..tcp] [......127.0.0.1][50350] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...403] [ip4][..tcp] [......127.0.0.1][50350] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...404] [ip4][..tcp] [......127.0.0.1][50352] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...404] [ip4][..tcp] [......127.0.0.1][50352] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...405] [ip4][..tcp] [......127.0.0.1][50354] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...405] [ip4][..tcp] [......127.0.0.1][50354] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...406] [ip4][..tcp] [......127.0.0.1][50356] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...406] [ip4][..tcp] [......127.0.0.1][50356] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...407] [ip4][..tcp] [......127.0.0.1][50358] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...407] [ip4][..tcp] [......127.0.0.1][50358] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...408] [ip4][..tcp] [......127.0.0.1][50360] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...408] [ip4][..tcp] [......127.0.0.1][50360] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...409] [ip4][..tcp] [......127.0.0.1][50362] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...409] [ip4][..tcp] [......127.0.0.1][50362] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...410] [ip4][..tcp] [......127.0.0.1][50364] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...410] [ip4][..tcp] [......127.0.0.1][50364] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...411] [ip4][..tcp] [......127.0.0.1][50366] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...411] [ip4][..tcp] [......127.0.0.1][50366] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...412] [ip4][..tcp] [......127.0.0.1][50368] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...412] [ip4][..tcp] [......127.0.0.1][50368] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...413] [ip4][..tcp] [......127.0.0.1][50370] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...413] [ip4][..tcp] [......127.0.0.1][50370] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...414] [ip4][..tcp] [......127.0.0.1][50372] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...414] [ip4][..tcp] [......127.0.0.1][50372] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...415] [ip4][..tcp] [......127.0.0.1][50374] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...415] [ip4][..tcp] [......127.0.0.1][50374] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...416] [ip4][..tcp] [......127.0.0.1][50376] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...416] [ip4][..tcp] [......127.0.0.1][50376] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...417] [ip4][..tcp] [......127.0.0.1][50378] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...417] [ip4][..tcp] [......127.0.0.1][50378] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...418] [ip4][..tcp] [......127.0.0.1][50380] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...418] [ip4][..tcp] [......127.0.0.1][50380] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...419] [ip4][..tcp] [......127.0.0.1][50382] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...419] [ip4][..tcp] [......127.0.0.1][50382] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...420] [ip4][..tcp] [......127.0.0.1][50384] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...420] [ip4][..tcp] [......127.0.0.1][50384] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...421] [ip4][..tcp] [......127.0.0.1][50386] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...421] [ip4][..tcp] [......127.0.0.1][50386] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...422] [ip4][..tcp] [......127.0.0.1][50388] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...422] [ip4][..tcp] [......127.0.0.1][50388] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...423] [ip4][..tcp] [......127.0.0.1][50390] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...423] [ip4][..tcp] [......127.0.0.1][50390] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...424] [ip4][..tcp] [......127.0.0.1][50392] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...424] [ip4][..tcp] [......127.0.0.1][50392] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...425] [ip4][..tcp] [......127.0.0.1][50394] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...425] [ip4][..tcp] [......127.0.0.1][50394] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...426] [ip4][..tcp] [......127.0.0.1][50396] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...426] [ip4][..tcp] [......127.0.0.1][50396] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...427] [ip4][..tcp] [......127.0.0.1][50398] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...427] [ip4][..tcp] [......127.0.0.1][50398] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...428] [ip4][..tcp] [......127.0.0.1][50400] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...428] [ip4][..tcp] [......127.0.0.1][50400] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...429] [ip4][..tcp] [......127.0.0.1][50402] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...429] [ip4][..tcp] [......127.0.0.1][50402] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...430] [ip4][..tcp] [......127.0.0.1][50404] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...430] [ip4][..tcp] [......127.0.0.1][50404] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...431] [ip4][..tcp] [......127.0.0.1][50406] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...431] [ip4][..tcp] [......127.0.0.1][50406] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...432] [ip4][..tcp] [......127.0.0.1][50408] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...432] [ip4][..tcp] [......127.0.0.1][50408] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...433] [ip4][..tcp] [......127.0.0.1][50410] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...433] [ip4][..tcp] [......127.0.0.1][50410] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...434] [ip4][..tcp] [......127.0.0.1][50412] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...434] [ip4][..tcp] [......127.0.0.1][50412] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...435] [ip4][..tcp] [......127.0.0.1][50414] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...435] [ip4][..tcp] [......127.0.0.1][50414] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...436] [ip4][..tcp] [......127.0.0.1][50416] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...436] [ip4][..tcp] [......127.0.0.1][50416] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...437] [ip4][..tcp] [......127.0.0.1][50418] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...437] [ip4][..tcp] [......127.0.0.1][50418] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...438] [ip4][..tcp] [......127.0.0.1][50438] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...438] [ip4][..tcp] [......127.0.0.1][50438] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...439] [ip4][..tcp] [......127.0.0.1][50440] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...439] [ip4][..tcp] [......127.0.0.1][50440] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...440] [ip4][..tcp] [......127.0.0.1][50442] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...440] [ip4][..tcp] [......127.0.0.1][50442] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...441] [ip4][..tcp] [......127.0.0.1][50444] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...441] [ip4][..tcp] [......127.0.0.1][50444] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...442] [ip4][..tcp] [......127.0.0.1][50446] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...442] [ip4][..tcp] [......127.0.0.1][50446] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...443] [ip4][..tcp] [......127.0.0.1][50448] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...443] [ip4][..tcp] [......127.0.0.1][50448] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...444] [ip4][..tcp] [......127.0.0.1][50450] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...444] [ip4][..tcp] [......127.0.0.1][50450] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...445] [ip4][..tcp] [......127.0.0.1][50452] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...445] [ip4][..tcp] [......127.0.0.1][50452] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...446] [ip4][..tcp] [......127.0.0.1][50454] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...446] [ip4][..tcp] [......127.0.0.1][50454] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...447] [ip4][..tcp] [......127.0.0.1][50456] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...447] [ip4][..tcp] [......127.0.0.1][50456] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...448] [ip4][..tcp] [......127.0.0.1][50458] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...448] [ip4][..tcp] [......127.0.0.1][50458] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...449] [ip4][..tcp] [......127.0.0.1][50460] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...449] [ip4][..tcp] [......127.0.0.1][50460] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...450] [ip4][..tcp] [......127.0.0.1][50462] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...450] [ip4][..tcp] [......127.0.0.1][50462] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...451] [ip4][..tcp] [......127.0.0.1][50464] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...451] [ip4][..tcp] [......127.0.0.1][50464] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...452] [ip4][..tcp] [......127.0.0.1][50466] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...452] [ip4][..tcp] [......127.0.0.1][50466] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...453] [ip4][..tcp] [......127.0.0.1][50468] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...453] [ip4][..tcp] [......127.0.0.1][50468] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...454] [ip4][..tcp] [......127.0.0.1][50470] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...454] [ip4][..tcp] [......127.0.0.1][50470] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...455] [ip4][..tcp] [......127.0.0.1][50472] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...455] [ip4][..tcp] [......127.0.0.1][50472] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...456] [ip4][..tcp] [......127.0.0.1][50474] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...456] [ip4][..tcp] [......127.0.0.1][50474] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...457] [ip4][..tcp] [......127.0.0.1][50476] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...457] [ip4][..tcp] [......127.0.0.1][50476] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...458] [ip4][..tcp] [......127.0.0.1][50478] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...458] [ip4][..tcp] [......127.0.0.1][50478] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...459] [ip4][..tcp] [......127.0.0.1][50480] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...459] [ip4][..tcp] [......127.0.0.1][50480] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...460] [ip4][..tcp] [......127.0.0.1][50482] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...460] [ip4][..tcp] [......127.0.0.1][50482] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...461] [ip4][..tcp] [......127.0.0.1][50484] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...461] [ip4][..tcp] [......127.0.0.1][50484] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...462] [ip4][..tcp] [......127.0.0.1][50486] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...462] [ip4][..tcp] [......127.0.0.1][50486] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...463] [ip4][..tcp] [......127.0.0.1][50488] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...463] [ip4][..tcp] [......127.0.0.1][50488] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...464] [ip4][..tcp] [......127.0.0.1][50490] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...464] [ip4][..tcp] [......127.0.0.1][50490] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...465] [ip4][..tcp] [......127.0.0.1][50492] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...465] [ip4][..tcp] [......127.0.0.1][50492] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...466] [ip4][..tcp] [......127.0.0.1][50494] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...466] [ip4][..tcp] [......127.0.0.1][50494] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...467] [ip4][..tcp] [......127.0.0.1][50496] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...467] [ip4][..tcp] [......127.0.0.1][50496] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...468] [ip4][..tcp] [......127.0.0.1][50498] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...468] [ip4][..tcp] [......127.0.0.1][50498] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...469] [ip4][..tcp] [......127.0.0.1][50500] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...469] [ip4][..tcp] [......127.0.0.1][50500] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...470] [ip4][..tcp] [......127.0.0.1][50502] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...470] [ip4][..tcp] [......127.0.0.1][50502] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...471] [ip4][..tcp] [......127.0.0.1][50504] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...471] [ip4][..tcp] [......127.0.0.1][50504] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...472] [ip4][..tcp] [......127.0.0.1][50506] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...472] [ip4][..tcp] [......127.0.0.1][50506] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...473] [ip4][..tcp] [......127.0.0.1][50508] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...473] [ip4][..tcp] [......127.0.0.1][50508] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...474] [ip4][..tcp] [......127.0.0.1][50510] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...474] [ip4][..tcp] [......127.0.0.1][50510] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...475] [ip4][..tcp] [......127.0.0.1][50512] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...475] [ip4][..tcp] [......127.0.0.1][50512] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...476] [ip4][..tcp] [......127.0.0.1][50514] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...476] [ip4][..tcp] [......127.0.0.1][50514] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...477] [ip4][..tcp] [......127.0.0.1][50516] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...477] [ip4][..tcp] [......127.0.0.1][50516] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...478] [ip4][..tcp] [......127.0.0.1][50518] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...478] [ip4][..tcp] [......127.0.0.1][50518] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...479] [ip4][..tcp] [......127.0.0.1][50520] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...479] [ip4][..tcp] [......127.0.0.1][50520] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...480] [ip4][..tcp] [......127.0.0.1][50522] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...480] [ip4][..tcp] [......127.0.0.1][50522] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...481] [ip4][..tcp] [......127.0.0.1][50524] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...481] [ip4][..tcp] [......127.0.0.1][50524] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...482] [ip4][..tcp] [......127.0.0.1][50526] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...482] [ip4][..tcp] [......127.0.0.1][50526] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...483] [ip4][..tcp] [......127.0.0.1][50528] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...483] [ip4][..tcp] [......127.0.0.1][50528] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...484] [ip4][..tcp] [......127.0.0.1][50530] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...484] [ip4][..tcp] [......127.0.0.1][50530] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...485] [ip4][..tcp] [......127.0.0.1][50532] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...485] [ip4][..tcp] [......127.0.0.1][50532] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...486] [ip4][..tcp] [......127.0.0.1][50534] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...486] [ip4][..tcp] [......127.0.0.1][50534] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...487] [ip4][..tcp] [......127.0.0.1][50536] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...487] [ip4][..tcp] [......127.0.0.1][50536] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...488] [ip4][..tcp] [......127.0.0.1][50538] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...488] [ip4][..tcp] [......127.0.0.1][50538] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...489] [ip4][..tcp] [......127.0.0.1][50540] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...489] [ip4][..tcp] [......127.0.0.1][50540] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...490] [ip4][..tcp] [......127.0.0.1][50542] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...490] [ip4][..tcp] [......127.0.0.1][50542] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...491] [ip4][..tcp] [......127.0.0.1][50544] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...491] [ip4][..tcp] [......127.0.0.1][50544] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...492] [ip4][..tcp] [......127.0.0.1][50546] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...492] [ip4][..tcp] [......127.0.0.1][50546] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...493] [ip4][..tcp] [......127.0.0.1][50548] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...493] [ip4][..tcp] [......127.0.0.1][50548] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...494] [ip4][..tcp] [......127.0.0.1][50550] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...494] [ip4][..tcp] [......127.0.0.1][50550] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...495] [ip4][..tcp] [......127.0.0.1][50552] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...495] [ip4][..tcp] [......127.0.0.1][50552] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...496] [ip4][..tcp] [......127.0.0.1][50554] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...496] [ip4][..tcp] [......127.0.0.1][50554] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...497] [ip4][..tcp] [......127.0.0.1][50556] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...497] [ip4][..tcp] [......127.0.0.1][50556] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...498] [ip4][..tcp] [......127.0.0.1][50558] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...498] [ip4][..tcp] [......127.0.0.1][50558] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...499] [ip4][..tcp] [......127.0.0.1][50560] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...499] [ip4][..tcp] [......127.0.0.1][50560] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Suspicious User-Agent, HTTP Numeric IP Address + new: [...500] [ip4][..tcp] [......127.0.0.1][50562] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...500] [ip4][..tcp] [......127.0.0.1][50562] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...501] [ip4][..tcp] [......127.0.0.1][50564] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...501] [ip4][..tcp] [......127.0.0.1][50564] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...502] [ip4][..tcp] [......127.0.0.1][50566] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...502] [ip4][..tcp] [......127.0.0.1][50566] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...503] [ip4][..tcp] [......127.0.0.1][50568] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...503] [ip4][..tcp] [......127.0.0.1][50568] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...504] [ip4][..tcp] [......127.0.0.1][50570] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...504] [ip4][..tcp] [......127.0.0.1][50570] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...505] [ip4][..tcp] [......127.0.0.1][50572] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...505] [ip4][..tcp] [......127.0.0.1][50572] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...506] [ip4][..tcp] [......127.0.0.1][50574] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...506] [ip4][..tcp] [......127.0.0.1][50574] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...507] [ip4][..tcp] [......127.0.0.1][50576] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...507] [ip4][..tcp] [......127.0.0.1][50576] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...508] [ip4][..tcp] [......127.0.0.1][50578] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...508] [ip4][..tcp] [......127.0.0.1][50578] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...509] [ip4][..tcp] [......127.0.0.1][50580] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...509] [ip4][..tcp] [......127.0.0.1][50580] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...510] [ip4][..tcp] [......127.0.0.1][50582] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...510] [ip4][..tcp] [......127.0.0.1][50582] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...511] [ip4][..tcp] [......127.0.0.1][50584] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...511] [ip4][..tcp] [......127.0.0.1][50584] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...512] [ip4][..tcp] [......127.0.0.1][50586] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...512] [ip4][..tcp] [......127.0.0.1][50586] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...513] [ip4][..tcp] [......127.0.0.1][50588] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...513] [ip4][..tcp] [......127.0.0.1][50588] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...514] [ip4][..tcp] [......127.0.0.1][50590] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...514] [ip4][..tcp] [......127.0.0.1][50590] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...515] [ip4][..tcp] [......127.0.0.1][50592] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...515] [ip4][..tcp] [......127.0.0.1][50592] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...516] [ip4][..tcp] [......127.0.0.1][50594] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...516] [ip4][..tcp] [......127.0.0.1][50594] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...517] [ip4][..tcp] [......127.0.0.1][50596] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...517] [ip4][..tcp] [......127.0.0.1][50596] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...518] [ip4][..tcp] [......127.0.0.1][50598] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...518] [ip4][..tcp] [......127.0.0.1][50598] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...519] [ip4][..tcp] [......127.0.0.1][50600] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...519] [ip4][..tcp] [......127.0.0.1][50600] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...520] [ip4][..tcp] [......127.0.0.1][50602] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...520] [ip4][..tcp] [......127.0.0.1][50602] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...521] [ip4][..tcp] [......127.0.0.1][50604] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...521] [ip4][..tcp] [......127.0.0.1][50604] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...522] [ip4][..tcp] [......127.0.0.1][50606] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...522] [ip4][..tcp] [......127.0.0.1][50606] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...523] [ip4][..tcp] [......127.0.0.1][50608] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...523] [ip4][..tcp] [......127.0.0.1][50608] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...524] [ip4][..tcp] [......127.0.0.1][50610] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...524] [ip4][..tcp] [......127.0.0.1][50610] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...525] [ip4][..tcp] [......127.0.0.1][50612] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...525] [ip4][..tcp] [......127.0.0.1][50612] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...526] [ip4][..tcp] [......127.0.0.1][50614] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...526] [ip4][..tcp] [......127.0.0.1][50614] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...527] [ip4][..tcp] [......127.0.0.1][50616] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...527] [ip4][..tcp] [......127.0.0.1][50616] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...528] [ip4][..tcp] [......127.0.0.1][50618] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...528] [ip4][..tcp] [......127.0.0.1][50618] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...529] [ip4][..tcp] [......127.0.0.1][50620] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...529] [ip4][..tcp] [......127.0.0.1][50620] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...530] [ip4][..tcp] [......127.0.0.1][50622] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...530] [ip4][..tcp] [......127.0.0.1][50622] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...531] [ip4][..tcp] [......127.0.0.1][50624] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...531] [ip4][..tcp] [......127.0.0.1][50624] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...532] [ip4][..tcp] [......127.0.0.1][50626] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...532] [ip4][..tcp] [......127.0.0.1][50626] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...533] [ip4][..tcp] [......127.0.0.1][50628] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...533] [ip4][..tcp] [......127.0.0.1][50628] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...534] [ip4][..tcp] [......127.0.0.1][50630] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...534] [ip4][..tcp] [......127.0.0.1][50630] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...535] [ip4][..tcp] [......127.0.0.1][50632] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...535] [ip4][..tcp] [......127.0.0.1][50632] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...536] [ip4][..tcp] [......127.0.0.1][50634] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...536] [ip4][..tcp] [......127.0.0.1][50634] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...537] [ip4][..tcp] [......127.0.0.1][50636] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...537] [ip4][..tcp] [......127.0.0.1][50636] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...538] [ip4][..tcp] [......127.0.0.1][50638] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...538] [ip4][..tcp] [......127.0.0.1][50638] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...539] [ip4][..tcp] [......127.0.0.1][50640] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...539] [ip4][..tcp] [......127.0.0.1][50640] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...540] [ip4][..tcp] [......127.0.0.1][50642] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...540] [ip4][..tcp] [......127.0.0.1][50642] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...541] [ip4][..tcp] [......127.0.0.1][50644] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...541] [ip4][..tcp] [......127.0.0.1][50644] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...542] [ip4][..tcp] [......127.0.0.1][50646] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...542] [ip4][..tcp] [......127.0.0.1][50646] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...543] [ip4][..tcp] [......127.0.0.1][50648] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...543] [ip4][..tcp] [......127.0.0.1][50648] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...544] [ip4][..tcp] [......127.0.0.1][50650] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...544] [ip4][..tcp] [......127.0.0.1][50650] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...545] [ip4][..tcp] [......127.0.0.1][50652] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...545] [ip4][..tcp] [......127.0.0.1][50652] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...546] [ip4][..tcp] [......127.0.0.1][50654] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...546] [ip4][..tcp] [......127.0.0.1][50654] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...547] [ip4][..tcp] [......127.0.0.1][50656] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...547] [ip4][..tcp] [......127.0.0.1][50656] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...548] [ip4][..tcp] [......127.0.0.1][50658] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...548] [ip4][..tcp] [......127.0.0.1][50658] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...549] [ip4][..tcp] [......127.0.0.1][50660] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...549] [ip4][..tcp] [......127.0.0.1][50660] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...550] [ip4][..tcp] [......127.0.0.1][50662] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...550] [ip4][..tcp] [......127.0.0.1][50662] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...551] [ip4][..tcp] [......127.0.0.1][50664] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...551] [ip4][..tcp] [......127.0.0.1][50664] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...552] [ip4][..tcp] [......127.0.0.1][50666] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...552] [ip4][..tcp] [......127.0.0.1][50666] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...553] [ip4][..tcp] [......127.0.0.1][50668] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...553] [ip4][..tcp] [......127.0.0.1][50668] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...554] [ip4][..tcp] [......127.0.0.1][50670] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...554] [ip4][..tcp] [......127.0.0.1][50670] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...555] [ip4][..tcp] [......127.0.0.1][50672] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...555] [ip4][..tcp] [......127.0.0.1][50672] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...556] [ip4][..tcp] [......127.0.0.1][50674] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...556] [ip4][..tcp] [......127.0.0.1][50674] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...557] [ip4][..tcp] [......127.0.0.1][50676] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...557] [ip4][..tcp] [......127.0.0.1][50676] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...558] [ip4][..tcp] [......127.0.0.1][50678] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...558] [ip4][..tcp] [......127.0.0.1][50678] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...559] [ip4][..tcp] [......127.0.0.1][50680] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...559] [ip4][..tcp] [......127.0.0.1][50680] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...560] [ip4][..tcp] [......127.0.0.1][50682] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...560] [ip4][..tcp] [......127.0.0.1][50682] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...561] [ip4][..tcp] [......127.0.0.1][50684] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...561] [ip4][..tcp] [......127.0.0.1][50684] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...562] [ip4][..tcp] [......127.0.0.1][50686] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...562] [ip4][..tcp] [......127.0.0.1][50686] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...563] [ip4][..tcp] [......127.0.0.1][50688] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...563] [ip4][..tcp] [......127.0.0.1][50688] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...564] [ip4][..tcp] [......127.0.0.1][50690] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...564] [ip4][..tcp] [......127.0.0.1][50690] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...565] [ip4][..tcp] [......127.0.0.1][50692] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...565] [ip4][..tcp] [......127.0.0.1][50692] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...566] [ip4][..tcp] [......127.0.0.1][50694] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...566] [ip4][..tcp] [......127.0.0.1][50694] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...567] [ip4][..tcp] [......127.0.0.1][50696] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...567] [ip4][..tcp] [......127.0.0.1][50696] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...568] [ip4][..tcp] [......127.0.0.1][50698] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...568] [ip4][..tcp] [......127.0.0.1][50698] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...569] [ip4][..tcp] [......127.0.0.1][50700] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...569] [ip4][..tcp] [......127.0.0.1][50700] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...570] [ip4][..tcp] [......127.0.0.1][50702] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...570] [ip4][..tcp] [......127.0.0.1][50702] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...571] [ip4][..tcp] [......127.0.0.1][50704] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...571] [ip4][..tcp] [......127.0.0.1][50704] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...572] [ip4][..tcp] [......127.0.0.1][50706] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...572] [ip4][..tcp] [......127.0.0.1][50706] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...573] [ip4][..tcp] [......127.0.0.1][50708] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...573] [ip4][..tcp] [......127.0.0.1][50708] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...574] [ip4][..tcp] [......127.0.0.1][50710] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...574] [ip4][..tcp] [......127.0.0.1][50710] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...575] [ip4][..tcp] [......127.0.0.1][50712] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...575] [ip4][..tcp] [......127.0.0.1][50712] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...576] [ip4][..tcp] [......127.0.0.1][50714] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...576] [ip4][..tcp] [......127.0.0.1][50714] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...577] [ip4][..tcp] [......127.0.0.1][50716] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...577] [ip4][..tcp] [......127.0.0.1][50716] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...578] [ip4][..tcp] [......127.0.0.1][50718] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...578] [ip4][..tcp] [......127.0.0.1][50718] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...579] [ip4][..tcp] [......127.0.0.1][50720] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...579] [ip4][..tcp] [......127.0.0.1][50720] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...580] [ip4][..tcp] [......127.0.0.1][50722] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...580] [ip4][..tcp] [......127.0.0.1][50722] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...581] [ip4][..tcp] [......127.0.0.1][50724] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...581] [ip4][..tcp] [......127.0.0.1][50724] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...582] [ip4][..tcp] [......127.0.0.1][50726] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...582] [ip4][..tcp] [......127.0.0.1][50726] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...583] [ip4][..tcp] [......127.0.0.1][50728] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...583] [ip4][..tcp] [......127.0.0.1][50728] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...584] [ip4][..tcp] [......127.0.0.1][50730] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...584] [ip4][..tcp] [......127.0.0.1][50730] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...585] [ip4][..tcp] [......127.0.0.1][50732] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...585] [ip4][..tcp] [......127.0.0.1][50732] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...586] [ip4][..tcp] [......127.0.0.1][50734] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...586] [ip4][..tcp] [......127.0.0.1][50734] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...587] [ip4][..tcp] [......127.0.0.1][50736] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...587] [ip4][..tcp] [......127.0.0.1][50736] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...588] [ip4][..tcp] [......127.0.0.1][50738] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...588] [ip4][..tcp] [......127.0.0.1][50738] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...589] [ip4][..tcp] [......127.0.0.1][50740] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...589] [ip4][..tcp] [......127.0.0.1][50740] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...590] [ip4][..tcp] [......127.0.0.1][50742] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...590] [ip4][..tcp] [......127.0.0.1][50742] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...591] [ip4][..tcp] [......127.0.0.1][50744] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...591] [ip4][..tcp] [......127.0.0.1][50744] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...592] [ip4][..tcp] [......127.0.0.1][50746] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...592] [ip4][..tcp] [......127.0.0.1][50746] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...593] [ip4][..tcp] [......127.0.0.1][50748] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...593] [ip4][..tcp] [......127.0.0.1][50748] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...594] [ip4][..tcp] [......127.0.0.1][50750] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...594] [ip4][..tcp] [......127.0.0.1][50750] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...595] [ip4][..tcp] [......127.0.0.1][50752] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...595] [ip4][..tcp] [......127.0.0.1][50752] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...596] [ip4][..tcp] [......127.0.0.1][50754] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...596] [ip4][..tcp] [......127.0.0.1][50754] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...597] [ip4][..tcp] [......127.0.0.1][50756] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...597] [ip4][..tcp] [......127.0.0.1][50756] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...598] [ip4][..tcp] [......127.0.0.1][50758] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...598] [ip4][..tcp] [......127.0.0.1][50758] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...599] [ip4][..tcp] [......127.0.0.1][50760] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...599] [ip4][..tcp] [......127.0.0.1][50760] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...600] [ip4][..tcp] [......127.0.0.1][50762] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...600] [ip4][..tcp] [......127.0.0.1][50762] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...601] [ip4][..tcp] [......127.0.0.1][50764] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...601] [ip4][..tcp] [......127.0.0.1][50764] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...602] [ip4][..tcp] [......127.0.0.1][50766] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...602] [ip4][..tcp] [......127.0.0.1][50766] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...603] [ip4][..tcp] [......127.0.0.1][50768] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...603] [ip4][..tcp] [......127.0.0.1][50768] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...604] [ip4][..tcp] [......127.0.0.1][50770] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...604] [ip4][..tcp] [......127.0.0.1][50770] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...605] [ip4][..tcp] [......127.0.0.1][50772] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...605] [ip4][..tcp] [......127.0.0.1][50772] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...606] [ip4][..tcp] [......127.0.0.1][50774] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...606] [ip4][..tcp] [......127.0.0.1][50774] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...607] [ip4][..tcp] [......127.0.0.1][50776] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...607] [ip4][..tcp] [......127.0.0.1][50776] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...608] [ip4][..tcp] [......127.0.0.1][50778] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...608] [ip4][..tcp] [......127.0.0.1][50778] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...609] [ip4][..tcp] [......127.0.0.1][50780] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...609] [ip4][..tcp] [......127.0.0.1][50780] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...610] [ip4][..tcp] [......127.0.0.1][50782] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...610] [ip4][..tcp] [......127.0.0.1][50782] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...611] [ip4][..tcp] [......127.0.0.1][50784] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...611] [ip4][..tcp] [......127.0.0.1][50784] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...612] [ip4][..tcp] [......127.0.0.1][50786] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...612] [ip4][..tcp] [......127.0.0.1][50786] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...613] [ip4][..tcp] [......127.0.0.1][50788] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...613] [ip4][..tcp] [......127.0.0.1][50788] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...614] [ip4][..tcp] [......127.0.0.1][50790] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...614] [ip4][..tcp] [......127.0.0.1][50790] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...615] [ip4][..tcp] [......127.0.0.1][50792] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...615] [ip4][..tcp] [......127.0.0.1][50792] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...616] [ip4][..tcp] [......127.0.0.1][50794] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...616] [ip4][..tcp] [......127.0.0.1][50794] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...617] [ip4][..tcp] [......127.0.0.1][50796] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...617] [ip4][..tcp] [......127.0.0.1][50796] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...618] [ip4][..tcp] [......127.0.0.1][50798] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...618] [ip4][..tcp] [......127.0.0.1][50798] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...619] [ip4][..tcp] [......127.0.0.1][50800] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...619] [ip4][..tcp] [......127.0.0.1][50800] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...620] [ip4][..tcp] [......127.0.0.1][50802] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...620] [ip4][..tcp] [......127.0.0.1][50802] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...621] [ip4][..tcp] [......127.0.0.1][50804] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...621] [ip4][..tcp] [......127.0.0.1][50804] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...622] [ip4][..tcp] [......127.0.0.1][50806] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...622] [ip4][..tcp] [......127.0.0.1][50806] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...623] [ip4][..tcp] [......127.0.0.1][50808] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...623] [ip4][..tcp] [......127.0.0.1][50808] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...624] [ip4][..tcp] [......127.0.0.1][50810] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...624] [ip4][..tcp] [......127.0.0.1][50810] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...625] [ip4][..tcp] [......127.0.0.1][50812] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...625] [ip4][..tcp] [......127.0.0.1][50812] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...626] [ip4][..tcp] [......127.0.0.1][50814] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...626] [ip4][..tcp] [......127.0.0.1][50814] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...627] [ip4][..tcp] [......127.0.0.1][50816] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...627] [ip4][..tcp] [......127.0.0.1][50816] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...628] [ip4][..tcp] [......127.0.0.1][50818] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...628] [ip4][..tcp] [......127.0.0.1][50818] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...629] [ip4][..tcp] [......127.0.0.1][50820] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...629] [ip4][..tcp] [......127.0.0.1][50820] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...630] [ip4][..tcp] [......127.0.0.1][50822] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...630] [ip4][..tcp] [......127.0.0.1][50822] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...631] [ip4][..tcp] [......127.0.0.1][50824] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...631] [ip4][..tcp] [......127.0.0.1][50824] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...632] [ip4][..tcp] [......127.0.0.1][50826] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...632] [ip4][..tcp] [......127.0.0.1][50826] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...633] [ip4][..tcp] [......127.0.0.1][50828] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...633] [ip4][..tcp] [......127.0.0.1][50828] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...634] [ip4][..tcp] [......127.0.0.1][50830] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...634] [ip4][..tcp] [......127.0.0.1][50830] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...635] [ip4][..tcp] [......127.0.0.1][50832] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...635] [ip4][..tcp] [......127.0.0.1][50832] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...636] [ip4][..tcp] [......127.0.0.1][50834] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...636] [ip4][..tcp] [......127.0.0.1][50834] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...637] [ip4][..tcp] [......127.0.0.1][50836] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...637] [ip4][..tcp] [......127.0.0.1][50836] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...638] [ip4][..tcp] [......127.0.0.1][50838] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...638] [ip4][..tcp] [......127.0.0.1][50838] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...639] [ip4][..tcp] [......127.0.0.1][50840] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...639] [ip4][..tcp] [......127.0.0.1][50840] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...640] [ip4][..tcp] [......127.0.0.1][50842] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...640] [ip4][..tcp] [......127.0.0.1][50842] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...641] [ip4][..tcp] [......127.0.0.1][50844] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...641] [ip4][..tcp] [......127.0.0.1][50844] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...642] [ip4][..tcp] [......127.0.0.1][50846] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...642] [ip4][..tcp] [......127.0.0.1][50846] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...643] [ip4][..tcp] [......127.0.0.1][50848] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...643] [ip4][..tcp] [......127.0.0.1][50848] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...644] [ip4][..tcp] [......127.0.0.1][50850] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...644] [ip4][..tcp] [......127.0.0.1][50850] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...645] [ip4][..tcp] [......127.0.0.1][50852] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...645] [ip4][..tcp] [......127.0.0.1][50852] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...646] [ip4][..tcp] [......127.0.0.1][50854] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...646] [ip4][..tcp] [......127.0.0.1][50854] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...647] [ip4][..tcp] [......127.0.0.1][50856] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...647] [ip4][..tcp] [......127.0.0.1][50856] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...648] [ip4][..tcp] [......127.0.0.1][50858] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...648] [ip4][..tcp] [......127.0.0.1][50858] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...649] [ip4][..tcp] [......127.0.0.1][50860] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...649] [ip4][..tcp] [......127.0.0.1][50860] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...650] [ip4][..tcp] [......127.0.0.1][50862] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...650] [ip4][..tcp] [......127.0.0.1][50862] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...651] [ip4][..tcp] [......127.0.0.1][50864] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...651] [ip4][..tcp] [......127.0.0.1][50864] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...652] [ip4][..tcp] [......127.0.0.1][50866] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...652] [ip4][..tcp] [......127.0.0.1][50866] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...653] [ip4][..tcp] [......127.0.0.1][50868] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...653] [ip4][..tcp] [......127.0.0.1][50868] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...654] [ip4][..tcp] [......127.0.0.1][50870] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...654] [ip4][..tcp] [......127.0.0.1][50870] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...655] [ip4][..tcp] [......127.0.0.1][50872] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...655] [ip4][..tcp] [......127.0.0.1][50872] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...656] [ip4][..tcp] [......127.0.0.1][50874] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...656] [ip4][..tcp] [......127.0.0.1][50874] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...657] [ip4][..tcp] [......127.0.0.1][50876] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...657] [ip4][..tcp] [......127.0.0.1][50876] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...658] [ip4][..tcp] [......127.0.0.1][50878] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...658] [ip4][..tcp] [......127.0.0.1][50878] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...659] [ip4][..tcp] [......127.0.0.1][50880] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...659] [ip4][..tcp] [......127.0.0.1][50880] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...660] [ip4][..tcp] [......127.0.0.1][50882] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...660] [ip4][..tcp] [......127.0.0.1][50882] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...661] [ip4][..tcp] [......127.0.0.1][50884] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...661] [ip4][..tcp] [......127.0.0.1][50884] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...662] [ip4][..tcp] [......127.0.0.1][50886] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...662] [ip4][..tcp] [......127.0.0.1][50886] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...663] [ip4][..tcp] [......127.0.0.1][50888] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...663] [ip4][..tcp] [......127.0.0.1][50888] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...664] [ip4][..tcp] [......127.0.0.1][50890] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...664] [ip4][..tcp] [......127.0.0.1][50890] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...665] [ip4][..tcp] [......127.0.0.1][50892] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...665] [ip4][..tcp] [......127.0.0.1][50892] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...666] [ip4][..tcp] [......127.0.0.1][50894] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...666] [ip4][..tcp] [......127.0.0.1][50894] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...667] [ip4][..tcp] [......127.0.0.1][50896] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...667] [ip4][..tcp] [......127.0.0.1][50896] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...668] [ip4][..tcp] [......127.0.0.1][50898] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...668] [ip4][..tcp] [......127.0.0.1][50898] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...669] [ip4][..tcp] [......127.0.0.1][50900] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...669] [ip4][..tcp] [......127.0.0.1][50900] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...670] [ip4][..tcp] [......127.0.0.1][50902] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...670] [ip4][..tcp] [......127.0.0.1][50902] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...671] [ip4][..tcp] [......127.0.0.1][50904] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...671] [ip4][..tcp] [......127.0.0.1][50904] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...672] [ip4][..tcp] [......127.0.0.1][50906] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...672] [ip4][..tcp] [......127.0.0.1][50906] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...673] [ip4][..tcp] [......127.0.0.1][50908] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...673] [ip4][..tcp] [......127.0.0.1][50908] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...674] [ip4][..tcp] [......127.0.0.1][50910] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...674] [ip4][..tcp] [......127.0.0.1][50910] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...675] [ip4][..tcp] [......127.0.0.1][50912] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...675] [ip4][..tcp] [......127.0.0.1][50912] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...676] [ip4][..tcp] [......127.0.0.1][50914] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...676] [ip4][..tcp] [......127.0.0.1][50914] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...677] [ip4][..tcp] [......127.0.0.1][50916] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...677] [ip4][..tcp] [......127.0.0.1][50916] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...678] [ip4][..tcp] [......127.0.0.1][50918] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...678] [ip4][..tcp] [......127.0.0.1][50918] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...679] [ip4][..tcp] [......127.0.0.1][50920] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...679] [ip4][..tcp] [......127.0.0.1][50920] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...680] [ip4][..tcp] [......127.0.0.1][50922] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...680] [ip4][..tcp] [......127.0.0.1][50922] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...681] [ip4][..tcp] [......127.0.0.1][50924] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...681] [ip4][..tcp] [......127.0.0.1][50924] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...682] [ip4][..tcp] [......127.0.0.1][50926] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...682] [ip4][..tcp] [......127.0.0.1][50926] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...683] [ip4][..tcp] [......127.0.0.1][50928] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...683] [ip4][..tcp] [......127.0.0.1][50928] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...684] [ip4][..tcp] [......127.0.0.1][50930] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...684] [ip4][..tcp] [......127.0.0.1][50930] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...685] [ip4][..tcp] [......127.0.0.1][50932] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...685] [ip4][..tcp] [......127.0.0.1][50932] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...686] [ip4][..tcp] [......127.0.0.1][50934] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...686] [ip4][..tcp] [......127.0.0.1][50934] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...687] [ip4][..tcp] [......127.0.0.1][50936] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...687] [ip4][..tcp] [......127.0.0.1][50936] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...688] [ip4][..tcp] [......127.0.0.1][50938] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...688] [ip4][..tcp] [......127.0.0.1][50938] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...689] [ip4][..tcp] [......127.0.0.1][50940] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...689] [ip4][..tcp] [......127.0.0.1][50940] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...690] [ip4][..tcp] [......127.0.0.1][50942] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...690] [ip4][..tcp] [......127.0.0.1][50942] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...691] [ip4][..tcp] [......127.0.0.1][50944] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...691] [ip4][..tcp] [......127.0.0.1][50944] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...692] [ip4][..tcp] [......127.0.0.1][50946] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...692] [ip4][..tcp] [......127.0.0.1][50946] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...693] [ip4][..tcp] [......127.0.0.1][50948] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...693] [ip4][..tcp] [......127.0.0.1][50948] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...694] [ip4][..tcp] [......127.0.0.1][50950] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...694] [ip4][..tcp] [......127.0.0.1][50950] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...695] [ip4][..tcp] [......127.0.0.1][50952] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...695] [ip4][..tcp] [......127.0.0.1][50952] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...696] [ip4][..tcp] [......127.0.0.1][50954] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...696] [ip4][..tcp] [......127.0.0.1][50954] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...697] [ip4][..tcp] [......127.0.0.1][50956] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...697] [ip4][..tcp] [......127.0.0.1][50956] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...698] [ip4][..tcp] [......127.0.0.1][50958] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...698] [ip4][..tcp] [......127.0.0.1][50958] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...699] [ip4][..tcp] [......127.0.0.1][50960] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...699] [ip4][..tcp] [......127.0.0.1][50960] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...700] [ip4][..tcp] [......127.0.0.1][50962] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...700] [ip4][..tcp] [......127.0.0.1][50962] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...701] [ip4][..tcp] [......127.0.0.1][50964] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...701] [ip4][..tcp] [......127.0.0.1][50964] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...702] [ip4][..tcp] [......127.0.0.1][50966] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...702] [ip4][..tcp] [......127.0.0.1][50966] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...703] [ip4][..tcp] [......127.0.0.1][50968] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...703] [ip4][..tcp] [......127.0.0.1][50968] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...704] [ip4][..tcp] [......127.0.0.1][50970] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...704] [ip4][..tcp] [......127.0.0.1][50970] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...705] [ip4][..tcp] [......127.0.0.1][50972] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...705] [ip4][..tcp] [......127.0.0.1][50972] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...706] [ip4][..tcp] [......127.0.0.1][50974] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...706] [ip4][..tcp] [......127.0.0.1][50974] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...707] [ip4][..tcp] [......127.0.0.1][50976] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...707] [ip4][..tcp] [......127.0.0.1][50976] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...708] [ip4][..tcp] [......127.0.0.1][50978] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...708] [ip4][..tcp] [......127.0.0.1][50978] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...709] [ip4][..tcp] [......127.0.0.1][50980] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...709] [ip4][..tcp] [......127.0.0.1][50980] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...710] [ip4][..tcp] [......127.0.0.1][50982] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...710] [ip4][..tcp] [......127.0.0.1][50982] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...711] [ip4][..tcp] [......127.0.0.1][50984] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...711] [ip4][..tcp] [......127.0.0.1][50984] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...712] [ip4][..tcp] [......127.0.0.1][50986] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...712] [ip4][..tcp] [......127.0.0.1][50986] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...713] [ip4][..tcp] [......127.0.0.1][50988] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...713] [ip4][..tcp] [......127.0.0.1][50988] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...714] [ip4][..tcp] [......127.0.0.1][50990] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...714] [ip4][..tcp] [......127.0.0.1][50990] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...715] [ip4][..tcp] [......127.0.0.1][50992] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...715] [ip4][..tcp] [......127.0.0.1][50992] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...716] [ip4][..tcp] [......127.0.0.1][50994] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...716] [ip4][..tcp] [......127.0.0.1][50994] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...717] [ip4][..tcp] [......127.0.0.1][50996] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...717] [ip4][..tcp] [......127.0.0.1][50996] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...718] [ip4][..tcp] [......127.0.0.1][50998] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...718] [ip4][..tcp] [......127.0.0.1][50998] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...719] [ip4][..tcp] [......127.0.0.1][51000] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...719] [ip4][..tcp] [......127.0.0.1][51000] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...720] [ip4][..tcp] [......127.0.0.1][51002] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...720] [ip4][..tcp] [......127.0.0.1][51002] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...721] [ip4][..tcp] [......127.0.0.1][51004] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...721] [ip4][..tcp] [......127.0.0.1][51004] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...722] [ip4][..tcp] [......127.0.0.1][51006] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...722] [ip4][..tcp] [......127.0.0.1][51006] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...723] [ip4][..tcp] [......127.0.0.1][51008] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...723] [ip4][..tcp] [......127.0.0.1][51008] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...724] [ip4][..tcp] [......127.0.0.1][51010] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...724] [ip4][..tcp] [......127.0.0.1][51010] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...725] [ip4][..tcp] [......127.0.0.1][51012] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...725] [ip4][..tcp] [......127.0.0.1][51012] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...726] [ip4][..tcp] [......127.0.0.1][51014] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...726] [ip4][..tcp] [......127.0.0.1][51014] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...727] [ip4][..tcp] [......127.0.0.1][51016] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...727] [ip4][..tcp] [......127.0.0.1][51016] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...728] [ip4][..tcp] [......127.0.0.1][51018] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...728] [ip4][..tcp] [......127.0.0.1][51018] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...729] [ip4][..tcp] [......127.0.0.1][51020] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...729] [ip4][..tcp] [......127.0.0.1][51020] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...730] [ip4][..tcp] [......127.0.0.1][51022] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...730] [ip4][..tcp] [......127.0.0.1][51022] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...731] [ip4][..tcp] [......127.0.0.1][51024] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...731] [ip4][..tcp] [......127.0.0.1][51024] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...732] [ip4][..tcp] [......127.0.0.1][51026] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...732] [ip4][..tcp] [......127.0.0.1][51026] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...733] [ip4][..tcp] [......127.0.0.1][51028] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...733] [ip4][..tcp] [......127.0.0.1][51028] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...734] [ip4][..tcp] [......127.0.0.1][51030] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...734] [ip4][..tcp] [......127.0.0.1][51030] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...735] [ip4][..tcp] [......127.0.0.1][51032] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...735] [ip4][..tcp] [......127.0.0.1][51032] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...736] [ip4][..tcp] [......127.0.0.1][51034] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...736] [ip4][..tcp] [......127.0.0.1][51034] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...737] [ip4][..tcp] [......127.0.0.1][51036] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...737] [ip4][..tcp] [......127.0.0.1][51036] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...738] [ip4][..tcp] [......127.0.0.1][51038] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...738] [ip4][..tcp] [......127.0.0.1][51038] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...739] [ip4][..tcp] [......127.0.0.1][51040] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...739] [ip4][..tcp] [......127.0.0.1][51040] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...740] [ip4][..tcp] [......127.0.0.1][51042] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...740] [ip4][..tcp] [......127.0.0.1][51042] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...741] [ip4][..tcp] [......127.0.0.1][51044] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...741] [ip4][..tcp] [......127.0.0.1][51044] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...742] [ip4][..tcp] [......127.0.0.1][51046] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...742] [ip4][..tcp] [......127.0.0.1][51046] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...743] [ip4][..tcp] [......127.0.0.1][51048] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...743] [ip4][..tcp] [......127.0.0.1][51048] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...744] [ip4][..tcp] [......127.0.0.1][51050] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...744] [ip4][..tcp] [......127.0.0.1][51050] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...745] [ip4][..tcp] [......127.0.0.1][51052] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...745] [ip4][..tcp] [......127.0.0.1][51052] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...746] [ip4][..tcp] [......127.0.0.1][51054] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...746] [ip4][..tcp] [......127.0.0.1][51054] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...747] [ip4][..tcp] [......127.0.0.1][51056] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...747] [ip4][..tcp] [......127.0.0.1][51056] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...748] [ip4][..tcp] [......127.0.0.1][51058] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...748] [ip4][..tcp] [......127.0.0.1][51058] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...749] [ip4][..tcp] [......127.0.0.1][51060] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...749] [ip4][..tcp] [......127.0.0.1][51060] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...750] [ip4][..tcp] [......127.0.0.1][51062] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...750] [ip4][..tcp] [......127.0.0.1][51062] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...751] [ip4][..tcp] [......127.0.0.1][51064] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...751] [ip4][..tcp] [......127.0.0.1][51064] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...752] [ip4][..tcp] [......127.0.0.1][51066] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...752] [ip4][..tcp] [......127.0.0.1][51066] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...753] [ip4][..tcp] [......127.0.0.1][51068] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...753] [ip4][..tcp] [......127.0.0.1][51068] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...754] [ip4][..tcp] [......127.0.0.1][51070] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...754] [ip4][..tcp] [......127.0.0.1][51070] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...755] [ip4][..tcp] [......127.0.0.1][51072] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...755] [ip4][..tcp] [......127.0.0.1][51072] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...756] [ip4][..tcp] [......127.0.0.1][51074] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...756] [ip4][..tcp] [......127.0.0.1][51074] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...757] [ip4][..tcp] [......127.0.0.1][51076] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...757] [ip4][..tcp] [......127.0.0.1][51076] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...758] [ip4][..tcp] [......127.0.0.1][51078] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...758] [ip4][..tcp] [......127.0.0.1][51078] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...759] [ip4][..tcp] [......127.0.0.1][51080] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...759] [ip4][..tcp] [......127.0.0.1][51080] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...760] [ip4][..tcp] [......127.0.0.1][51082] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...760] [ip4][..tcp] [......127.0.0.1][51082] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...761] [ip4][..tcp] [......127.0.0.1][51084] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...761] [ip4][..tcp] [......127.0.0.1][51084] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...762] [ip4][..tcp] [......127.0.0.1][51086] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...762] [ip4][..tcp] [......127.0.0.1][51086] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...763] [ip4][..tcp] [......127.0.0.1][51088] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...763] [ip4][..tcp] [......127.0.0.1][51088] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...764] [ip4][..tcp] [......127.0.0.1][51090] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...764] [ip4][..tcp] [......127.0.0.1][51090] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...765] [ip4][..tcp] [......127.0.0.1][51092] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...765] [ip4][..tcp] [......127.0.0.1][51092] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...766] [ip4][..tcp] [......127.0.0.1][51094] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...766] [ip4][..tcp] [......127.0.0.1][51094] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...767] [ip4][..tcp] [......127.0.0.1][51096] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...767] [ip4][..tcp] [......127.0.0.1][51096] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...768] [ip4][..tcp] [......127.0.0.1][51098] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...768] [ip4][..tcp] [......127.0.0.1][51098] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...769] [ip4][..tcp] [......127.0.0.1][51100] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...769] [ip4][..tcp] [......127.0.0.1][51100] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...770] [ip4][..tcp] [......127.0.0.1][51148] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...770] [ip4][..tcp] [......127.0.0.1][51148] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...771] [ip4][..tcp] [......127.0.0.1][51150] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...771] [ip4][..tcp] [......127.0.0.1][51150] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...772] [ip4][..tcp] [......127.0.0.1][51152] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...772] [ip4][..tcp] [......127.0.0.1][51152] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...773] [ip4][..tcp] [......127.0.0.1][51154] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...773] [ip4][..tcp] [......127.0.0.1][51154] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...774] [ip4][..tcp] [......127.0.0.1][51156] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...774] [ip4][..tcp] [......127.0.0.1][51156] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...775] [ip4][..tcp] [......127.0.0.1][51158] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...775] [ip4][..tcp] [......127.0.0.1][51158] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...776] [ip4][..tcp] [......127.0.0.1][51160] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...776] [ip4][..tcp] [......127.0.0.1][51160] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...777] [ip4][..tcp] [......127.0.0.1][51162] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...777] [ip4][..tcp] [......127.0.0.1][51162] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...778] [ip4][..tcp] [......127.0.0.1][51164] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...778] [ip4][..tcp] [......127.0.0.1][51164] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...779] [ip4][..tcp] [......127.0.0.1][51166] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...779] [ip4][..tcp] [......127.0.0.1][51166] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...780] [ip4][..tcp] [......127.0.0.1][51168] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...780] [ip4][..tcp] [......127.0.0.1][51168] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...781] [ip4][..tcp] [......127.0.0.1][51170] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...781] [ip4][..tcp] [......127.0.0.1][51170] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...782] [ip4][..tcp] [......127.0.0.1][51172] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...782] [ip4][..tcp] [......127.0.0.1][51172] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...783] [ip4][..tcp] [......127.0.0.1][51174] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...783] [ip4][..tcp] [......127.0.0.1][51174] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...784] [ip4][..tcp] [......127.0.0.1][51176] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...784] [ip4][..tcp] [......127.0.0.1][51176] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...785] [ip4][..tcp] [......127.0.0.1][51178] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...785] [ip4][..tcp] [......127.0.0.1][51178] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...786] [ip4][..tcp] [......127.0.0.1][51182] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...786] [ip4][..tcp] [......127.0.0.1][51182] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...787] [ip4][..tcp] [......127.0.0.1][51184] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...787] [ip4][..tcp] [......127.0.0.1][51184] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...788] [ip4][..tcp] [......127.0.0.1][51186] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...788] [ip4][..tcp] [......127.0.0.1][51186] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...789] [ip4][..tcp] [......127.0.0.1][51188] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...789] [ip4][..tcp] [......127.0.0.1][51188] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...790] [ip4][..tcp] [......127.0.0.1][51190] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...790] [ip4][..tcp] [......127.0.0.1][51190] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...791] [ip4][..tcp] [......127.0.0.1][51192] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...791] [ip4][..tcp] [......127.0.0.1][51192] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...792] [ip4][..tcp] [......127.0.0.1][51194] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...792] [ip4][..tcp] [......127.0.0.1][51194] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...793] [ip4][..tcp] [......127.0.0.1][51196] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...793] [ip4][..tcp] [......127.0.0.1][51196] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...794] [ip4][..tcp] [......127.0.0.1][51198] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...794] [ip4][..tcp] [......127.0.0.1][51198] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...795] [ip4][..tcp] [......127.0.0.1][51200] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...795] [ip4][..tcp] [......127.0.0.1][51200] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...796] [ip4][..tcp] [......127.0.0.1][51202] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...796] [ip4][..tcp] [......127.0.0.1][51202] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [...797] [ip4][..tcp] [......127.0.0.1][51204] -> [......127.0.0.1][.8080] [MIDSTREAM] + detected: [...797] [ip4][..tcp] [......127.0.0.1][51204] -> [......127.0.0.1][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + idle: [...745] [ip4][..tcp] [......127.0.0.1][51052] -> [......127.0.0.1][.8080] + idle: [...746] [ip4][..tcp] [......127.0.0.1][51054] -> [......127.0.0.1][.8080] + idle: [...747] [ip4][..tcp] [......127.0.0.1][51056] -> [......127.0.0.1][.8080] + idle: [...748] [ip4][..tcp] [......127.0.0.1][51058] -> [......127.0.0.1][.8080] + idle: [...749] [ip4][..tcp] [......127.0.0.1][51060] -> [......127.0.0.1][.8080] + idle: [...750] [ip4][..tcp] [......127.0.0.1][51062] -> [......127.0.0.1][.8080] + idle: [...751] [ip4][..tcp] [......127.0.0.1][51064] -> [......127.0.0.1][.8080] + idle: [...752] [ip4][..tcp] [......127.0.0.1][51066] -> [......127.0.0.1][.8080] + idle: [...753] [ip4][..tcp] [......127.0.0.1][51068] -> [......127.0.0.1][.8080] + idle: [...754] [ip4][..tcp] [......127.0.0.1][51070] -> [......127.0.0.1][.8080] + idle: [...755] [ip4][..tcp] [......127.0.0.1][51072] -> [......127.0.0.1][.8080] + idle: [...756] [ip4][..tcp] [......127.0.0.1][51074] -> [......127.0.0.1][.8080] + idle: [...757] [ip4][..tcp] [......127.0.0.1][51076] -> [......127.0.0.1][.8080] + idle: [...758] [ip4][..tcp] [......127.0.0.1][51078] -> [......127.0.0.1][.8080] + idle: [...759] [ip4][..tcp] [......127.0.0.1][51080] -> [......127.0.0.1][.8080] + idle: [...760] [ip4][..tcp] [......127.0.0.1][51082] -> [......127.0.0.1][.8080] + idle: [...761] [ip4][..tcp] [......127.0.0.1][51084] -> [......127.0.0.1][.8080] + idle: [...762] [ip4][..tcp] [......127.0.0.1][51086] -> [......127.0.0.1][.8080] + idle: [...763] [ip4][..tcp] [......127.0.0.1][51088] -> [......127.0.0.1][.8080] + idle: [...764] [ip4][..tcp] [......127.0.0.1][51090] -> [......127.0.0.1][.8080] + idle: [...765] [ip4][..tcp] [......127.0.0.1][51092] -> [......127.0.0.1][.8080] + idle: [...766] [ip4][..tcp] [......127.0.0.1][51094] -> [......127.0.0.1][.8080] + idle: [...767] [ip4][..tcp] [......127.0.0.1][51096] -> [......127.0.0.1][.8080] + idle: [...768] [ip4][..tcp] [......127.0.0.1][51098] -> [......127.0.0.1][.8080] + idle: [...769] [ip4][..tcp] [......127.0.0.1][51100] -> [......127.0.0.1][.8080] + idle: [...770] [ip4][..tcp] [......127.0.0.1][51148] -> [......127.0.0.1][.8080] + idle: [...771] [ip4][..tcp] [......127.0.0.1][51150] -> [......127.0.0.1][.8080] + idle: [...772] [ip4][..tcp] [......127.0.0.1][51152] -> [......127.0.0.1][.8080] + idle: [...773] [ip4][..tcp] [......127.0.0.1][51154] -> [......127.0.0.1][.8080] + idle: [...774] [ip4][..tcp] [......127.0.0.1][51156] -> [......127.0.0.1][.8080] + idle: [...775] [ip4][..tcp] [......127.0.0.1][51158] -> [......127.0.0.1][.8080] + idle: [...776] [ip4][..tcp] [......127.0.0.1][51160] -> [......127.0.0.1][.8080] + idle: [...777] [ip4][..tcp] [......127.0.0.1][51162] -> [......127.0.0.1][.8080] + idle: [...778] [ip4][..tcp] [......127.0.0.1][51164] -> [......127.0.0.1][.8080] + idle: [...779] [ip4][..tcp] [......127.0.0.1][51166] -> [......127.0.0.1][.8080] + idle: [...780] [ip4][..tcp] [......127.0.0.1][51168] -> [......127.0.0.1][.8080] + idle: [...781] [ip4][..tcp] [......127.0.0.1][51170] -> [......127.0.0.1][.8080] + idle: [...782] [ip4][..tcp] [......127.0.0.1][51172] -> [......127.0.0.1][.8080] + idle: [...783] [ip4][..tcp] [......127.0.0.1][51174] -> [......127.0.0.1][.8080] + idle: [...784] [ip4][..tcp] [......127.0.0.1][51176] -> [......127.0.0.1][.8080] + idle: [...785] [ip4][..tcp] [......127.0.0.1][51178] -> [......127.0.0.1][.8080] + idle: [...786] [ip4][..tcp] [......127.0.0.1][51182] -> [......127.0.0.1][.8080] + idle: [...787] [ip4][..tcp] [......127.0.0.1][51184] -> [......127.0.0.1][.8080] + idle: [...788] [ip4][..tcp] [......127.0.0.1][51186] -> [......127.0.0.1][.8080] + idle: [...789] [ip4][..tcp] [......127.0.0.1][51188] -> [......127.0.0.1][.8080] + idle: [...790] [ip4][..tcp] [......127.0.0.1][51190] -> [......127.0.0.1][.8080] + idle: [...791] [ip4][..tcp] [......127.0.0.1][51192] -> [......127.0.0.1][.8080] + idle: [...792] [ip4][..tcp] [......127.0.0.1][51194] -> [......127.0.0.1][.8080] + idle: [...793] [ip4][..tcp] [......127.0.0.1][51196] -> [......127.0.0.1][.8080] + idle: [...794] [ip4][..tcp] [......127.0.0.1][51198] -> [......127.0.0.1][.8080] + idle: [...795] [ip4][..tcp] [......127.0.0.1][51200] -> [......127.0.0.1][.8080] + idle: [...796] [ip4][..tcp] [......127.0.0.1][51202] -> [......127.0.0.1][.8080] + idle: [...797] [ip4][..tcp] [......127.0.0.1][51204] -> [......127.0.0.1][.8080] + idle: [.....1] [ip4][..tcp] [......127.0.0.1][49544] -> [......127.0.0.1][.8080] + idle: [.....2] [ip4][..tcp] [......127.0.0.1][49546] -> [......127.0.0.1][.8080] + idle: [.....3] [ip4][..tcp] [......127.0.0.1][49548] -> [......127.0.0.1][.8080] + idle: [.....4] [ip4][..tcp] [......127.0.0.1][49550] -> [......127.0.0.1][.8080] + idle: [.....5] [ip4][..tcp] [......127.0.0.1][49552] -> [......127.0.0.1][.8080] + idle: [.....6] [ip4][..tcp] [......127.0.0.1][49554] -> [......127.0.0.1][.8080] + idle: [.....7] [ip4][..tcp] [......127.0.0.1][49556] -> [......127.0.0.1][.8080] + idle: [.....8] [ip4][..tcp] [......127.0.0.1][49558] -> [......127.0.0.1][.8080] + idle: [.....9] [ip4][..tcp] [......127.0.0.1][49560] -> [......127.0.0.1][.8080] + idle: [....10] [ip4][..tcp] [......127.0.0.1][49562] -> [......127.0.0.1][.8080] + idle: [....11] [ip4][..tcp] [......127.0.0.1][49564] -> [......127.0.0.1][.8080] + idle: [....12] [ip4][..tcp] [......127.0.0.1][49566] -> [......127.0.0.1][.8080] + idle: [....13] [ip4][..tcp] [......127.0.0.1][49568] -> [......127.0.0.1][.8080] + idle: [....14] [ip4][..tcp] [......127.0.0.1][49570] -> [......127.0.0.1][.8080] + idle: [....15] [ip4][..tcp] [......127.0.0.1][49572] -> [......127.0.0.1][.8080] + idle: [....16] [ip4][..tcp] [......127.0.0.1][49574] -> [......127.0.0.1][.8080] + idle: [....17] [ip4][..tcp] [......127.0.0.1][49576] -> [......127.0.0.1][.8080] + idle: [....18] [ip4][..tcp] [......127.0.0.1][49578] -> [......127.0.0.1][.8080] + idle: [....19] [ip4][..tcp] [......127.0.0.1][49580] -> [......127.0.0.1][.8080] + idle: [....20] [ip4][..tcp] [......127.0.0.1][49582] -> [......127.0.0.1][.8080] + idle: [....21] [ip4][..tcp] [......127.0.0.1][49584] -> [......127.0.0.1][.8080] + idle: [....22] [ip4][..tcp] [......127.0.0.1][49586] -> [......127.0.0.1][.8080] + idle: [....23] [ip4][..tcp] [......127.0.0.1][49588] -> [......127.0.0.1][.8080] + idle: [....24] [ip4][..tcp] [......127.0.0.1][49590] -> [......127.0.0.1][.8080] + idle: [....25] [ip4][..tcp] [......127.0.0.1][49592] -> [......127.0.0.1][.8080] + idle: [....26] [ip4][..tcp] [......127.0.0.1][49594] -> [......127.0.0.1][.8080] + idle: [....27] [ip4][..tcp] [......127.0.0.1][49596] -> [......127.0.0.1][.8080] + idle: [....28] [ip4][..tcp] [......127.0.0.1][49598] -> [......127.0.0.1][.8080] + idle: [....29] [ip4][..tcp] [......127.0.0.1][49600] -> [......127.0.0.1][.8080] + idle: [....30] [ip4][..tcp] [......127.0.0.1][49602] -> [......127.0.0.1][.8080] + idle: [....31] [ip4][..tcp] [......127.0.0.1][49604] -> [......127.0.0.1][.8080] + idle: [....32] [ip4][..tcp] [......127.0.0.1][49606] -> [......127.0.0.1][.8080] + idle: [....33] [ip4][..tcp] [......127.0.0.1][49608] -> [......127.0.0.1][.8080] + idle: [....34] [ip4][..tcp] [......127.0.0.1][49610] -> [......127.0.0.1][.8080] + idle: [....35] [ip4][..tcp] [......127.0.0.1][49612] -> [......127.0.0.1][.8080] + idle: [....36] [ip4][..tcp] [......127.0.0.1][49614] -> [......127.0.0.1][.8080] + idle: [....37] [ip4][..tcp] [......127.0.0.1][49616] -> [......127.0.0.1][.8080] + idle: [....38] [ip4][..tcp] [......127.0.0.1][49618] -> [......127.0.0.1][.8080] + idle: [....39] [ip4][..tcp] [......127.0.0.1][49620] -> [......127.0.0.1][.8080] + idle: [....40] [ip4][..tcp] [......127.0.0.1][49622] -> [......127.0.0.1][.8080] + idle: [....41] [ip4][..tcp] [......127.0.0.1][49624] -> [......127.0.0.1][.8080] + idle: [....42] [ip4][..tcp] [......127.0.0.1][49626] -> [......127.0.0.1][.8080] + idle: [....43] [ip4][..tcp] [......127.0.0.1][49628] -> [......127.0.0.1][.8080] + idle: [....44] [ip4][..tcp] [......127.0.0.1][49630] -> [......127.0.0.1][.8080] + idle: [....45] [ip4][..tcp] [......127.0.0.1][49632] -> [......127.0.0.1][.8080] + idle: [....46] [ip4][..tcp] [......127.0.0.1][49634] -> [......127.0.0.1][.8080] + idle: [....47] [ip4][..tcp] [......127.0.0.1][49636] -> [......127.0.0.1][.8080] + idle: [....48] [ip4][..tcp] [......127.0.0.1][49638] -> [......127.0.0.1][.8080] + idle: [....49] [ip4][..tcp] [......127.0.0.1][49640] -> [......127.0.0.1][.8080] + idle: [....50] [ip4][..tcp] [......127.0.0.1][49642] -> [......127.0.0.1][.8080] + idle: [....51] [ip4][..tcp] [......127.0.0.1][49644] -> [......127.0.0.1][.8080] + idle: [....52] [ip4][..tcp] [......127.0.0.1][49646] -> [......127.0.0.1][.8080] + idle: [....53] [ip4][..tcp] [......127.0.0.1][49648] -> [......127.0.0.1][.8080] + idle: [....54] [ip4][..tcp] [......127.0.0.1][49650] -> [......127.0.0.1][.8080] + idle: [....55] [ip4][..tcp] [......127.0.0.1][49652] -> [......127.0.0.1][.8080] + idle: [....56] [ip4][..tcp] [......127.0.0.1][49654] -> [......127.0.0.1][.8080] + idle: [....57] [ip4][..tcp] [......127.0.0.1][49656] -> [......127.0.0.1][.8080] + idle: [....58] [ip4][..tcp] [......127.0.0.1][49658] -> [......127.0.0.1][.8080] + idle: [....59] [ip4][..tcp] [......127.0.0.1][49660] -> [......127.0.0.1][.8080] + idle: [....60] [ip4][..tcp] [......127.0.0.1][49662] -> [......127.0.0.1][.8080] + idle: [....61] [ip4][..tcp] [......127.0.0.1][49664] -> [......127.0.0.1][.8080] + idle: [....62] [ip4][..tcp] [......127.0.0.1][49666] -> [......127.0.0.1][.8080] + idle: [....63] [ip4][..tcp] [......127.0.0.1][49668] -> [......127.0.0.1][.8080] + idle: [....64] [ip4][..tcp] [......127.0.0.1][49670] -> [......127.0.0.1][.8080] + idle: [....65] [ip4][..tcp] [......127.0.0.1][49672] -> [......127.0.0.1][.8080] + idle: [....66] [ip4][..tcp] [......127.0.0.1][49674] -> [......127.0.0.1][.8080] + idle: [....67] [ip4][..tcp] [......127.0.0.1][49676] -> [......127.0.0.1][.8080] + idle: [....68] [ip4][..tcp] [......127.0.0.1][49678] -> [......127.0.0.1][.8080] + idle: [....69] [ip4][..tcp] [......127.0.0.1][49680] -> [......127.0.0.1][.8080] + idle: [....70] [ip4][..tcp] [......127.0.0.1][49682] -> [......127.0.0.1][.8080] + idle: [....71] [ip4][..tcp] [......127.0.0.1][49684] -> [......127.0.0.1][.8080] + idle: [....72] [ip4][..tcp] [......127.0.0.1][49686] -> [......127.0.0.1][.8080] + idle: [....73] [ip4][..tcp] [......127.0.0.1][49688] -> [......127.0.0.1][.8080] + idle: [....74] [ip4][..tcp] [......127.0.0.1][49690] -> [......127.0.0.1][.8080] + idle: [....75] [ip4][..tcp] [......127.0.0.1][49692] -> [......127.0.0.1][.8080] + idle: [....76] [ip4][..tcp] [......127.0.0.1][49694] -> [......127.0.0.1][.8080] + idle: [....77] [ip4][..tcp] [......127.0.0.1][49696] -> [......127.0.0.1][.8080] + idle: [....78] [ip4][..tcp] [......127.0.0.1][49698] -> [......127.0.0.1][.8080] + idle: [....79] [ip4][..tcp] [......127.0.0.1][49700] -> [......127.0.0.1][.8080] + idle: [....80] [ip4][..tcp] [......127.0.0.1][49702] -> [......127.0.0.1][.8080] + idle: [....81] [ip4][..tcp] [......127.0.0.1][49704] -> [......127.0.0.1][.8080] + idle: [....82] [ip4][..tcp] [......127.0.0.1][49706] -> [......127.0.0.1][.8080] + idle: [....83] [ip4][..tcp] [......127.0.0.1][49708] -> [......127.0.0.1][.8080] + idle: [....84] [ip4][..tcp] [......127.0.0.1][49710] -> [......127.0.0.1][.8080] + idle: [....85] [ip4][..tcp] [......127.0.0.1][49712] -> [......127.0.0.1][.8080] + idle: [....86] [ip4][..tcp] [......127.0.0.1][49714] -> [......127.0.0.1][.8080] + idle: [....87] [ip4][..tcp] [......127.0.0.1][49716] -> [......127.0.0.1][.8080] + idle: [....88] [ip4][..tcp] [......127.0.0.1][49718] -> [......127.0.0.1][.8080] + idle: [....89] [ip4][..tcp] [......127.0.0.1][49720] -> [......127.0.0.1][.8080] + idle: [....90] [ip4][..tcp] [......127.0.0.1][49722] -> [......127.0.0.1][.8080] + idle: [....91] [ip4][..tcp] [......127.0.0.1][49724] -> [......127.0.0.1][.8080] + idle: [....92] [ip4][..tcp] [......127.0.0.1][49726] -> [......127.0.0.1][.8080] + idle: [....93] [ip4][..tcp] [......127.0.0.1][49728] -> [......127.0.0.1][.8080] + idle: [....94] [ip4][..tcp] [......127.0.0.1][49730] -> [......127.0.0.1][.8080] + idle: [....95] [ip4][..tcp] [......127.0.0.1][49732] -> [......127.0.0.1][.8080] + idle: [....96] [ip4][..tcp] [......127.0.0.1][49734] -> [......127.0.0.1][.8080] + idle: [....97] [ip4][..tcp] [......127.0.0.1][49736] -> [......127.0.0.1][.8080] + idle: [....98] [ip4][..tcp] [......127.0.0.1][49738] -> [......127.0.0.1][.8080] + idle: [....99] [ip4][..tcp] [......127.0.0.1][49740] -> [......127.0.0.1][.8080] + idle: [...100] [ip4][..tcp] [......127.0.0.1][49742] -> [......127.0.0.1][.8080] + idle: [...101] [ip4][..tcp] [......127.0.0.1][49744] -> [......127.0.0.1][.8080] + idle: [...102] [ip4][..tcp] [......127.0.0.1][49746] -> [......127.0.0.1][.8080] + idle: [...103] [ip4][..tcp] [......127.0.0.1][49748] -> [......127.0.0.1][.8080] + idle: [...104] [ip4][..tcp] [......127.0.0.1][49750] -> [......127.0.0.1][.8080] + idle: [...105] [ip4][..tcp] [......127.0.0.1][49752] -> [......127.0.0.1][.8080] + idle: [...106] [ip4][..tcp] [......127.0.0.1][49754] -> [......127.0.0.1][.8080] + idle: [...107] [ip4][..tcp] [......127.0.0.1][49756] -> [......127.0.0.1][.8080] + idle: [...108] [ip4][..tcp] [......127.0.0.1][49758] -> [......127.0.0.1][.8080] + idle: [...109] [ip4][..tcp] [......127.0.0.1][49760] -> [......127.0.0.1][.8080] + idle: [...110] [ip4][..tcp] [......127.0.0.1][49764] -> [......127.0.0.1][.8080] + idle: [...111] [ip4][..tcp] [......127.0.0.1][49766] -> [......127.0.0.1][.8080] + idle: [...112] [ip4][..tcp] [......127.0.0.1][49768] -> [......127.0.0.1][.8080] + idle: [...113] [ip4][..tcp] [......127.0.0.1][49770] -> [......127.0.0.1][.8080] + idle: [...114] [ip4][..tcp] [......127.0.0.1][49772] -> [......127.0.0.1][.8080] + idle: [...115] [ip4][..tcp] [......127.0.0.1][49774] -> [......127.0.0.1][.8080] + idle: [...116] [ip4][..tcp] [......127.0.0.1][49776] -> [......127.0.0.1][.8080] + idle: [...117] [ip4][..tcp] [......127.0.0.1][49778] -> [......127.0.0.1][.8080] + idle: [...118] [ip4][..tcp] [......127.0.0.1][49780] -> [......127.0.0.1][.8080] + idle: [...119] [ip4][..tcp] [......127.0.0.1][49782] -> [......127.0.0.1][.8080] + idle: [...120] [ip4][..tcp] [......127.0.0.1][49784] -> [......127.0.0.1][.8080] + idle: [...121] [ip4][..tcp] [......127.0.0.1][49786] -> [......127.0.0.1][.8080] + idle: [...122] [ip4][..tcp] [......127.0.0.1][49788] -> [......127.0.0.1][.8080] + idle: [...123] [ip4][..tcp] [......127.0.0.1][49790] -> [......127.0.0.1][.8080] + idle: [...124] [ip4][..tcp] [......127.0.0.1][49792] -> [......127.0.0.1][.8080] + idle: [...125] [ip4][..tcp] [......127.0.0.1][49794] -> [......127.0.0.1][.8080] + idle: [...126] [ip4][..tcp] [......127.0.0.1][49796] -> [......127.0.0.1][.8080] + idle: [...127] [ip4][..tcp] [......127.0.0.1][49798] -> [......127.0.0.1][.8080] + idle: [...128] [ip4][..tcp] [......127.0.0.1][49800] -> [......127.0.0.1][.8080] + idle: [...129] [ip4][..tcp] [......127.0.0.1][49802] -> [......127.0.0.1][.8080] + idle: [...130] [ip4][..tcp] [......127.0.0.1][49804] -> [......127.0.0.1][.8080] + idle: [...131] [ip4][..tcp] [......127.0.0.1][49806] -> [......127.0.0.1][.8080] + idle: [...132] [ip4][..tcp] [......127.0.0.1][49808] -> [......127.0.0.1][.8080] + idle: [...133] [ip4][..tcp] [......127.0.0.1][49810] -> [......127.0.0.1][.8080] + idle: [...134] [ip4][..tcp] [......127.0.0.1][49812] -> [......127.0.0.1][.8080] + idle: [...135] [ip4][..tcp] [......127.0.0.1][49814] -> [......127.0.0.1][.8080] + idle: [...136] [ip4][..tcp] [......127.0.0.1][49816] -> [......127.0.0.1][.8080] + idle: [...137] [ip4][..tcp] [......127.0.0.1][49818] -> [......127.0.0.1][.8080] + idle: [...138] [ip4][..tcp] [......127.0.0.1][49820] -> [......127.0.0.1][.8080] + idle: [...139] [ip4][..tcp] [......127.0.0.1][49822] -> [......127.0.0.1][.8080] + idle: [...140] [ip4][..tcp] [......127.0.0.1][49824] -> [......127.0.0.1][.8080] + idle: [...141] [ip4][..tcp] [......127.0.0.1][49826] -> [......127.0.0.1][.8080] + idle: [...142] [ip4][..tcp] [......127.0.0.1][49828] -> [......127.0.0.1][.8080] + idle: [...143] [ip4][..tcp] [......127.0.0.1][49830] -> [......127.0.0.1][.8080] + idle: [...144] [ip4][..tcp] [......127.0.0.1][49832] -> [......127.0.0.1][.8080] + idle: [...145] [ip4][..tcp] [......127.0.0.1][49834] -> [......127.0.0.1][.8080] + idle: [...146] [ip4][..tcp] [......127.0.0.1][49836] -> [......127.0.0.1][.8080] + idle: [...147] [ip4][..tcp] [......127.0.0.1][49838] -> [......127.0.0.1][.8080] + idle: [...148] [ip4][..tcp] [......127.0.0.1][49840] -> [......127.0.0.1][.8080] + idle: [...149] [ip4][..tcp] [......127.0.0.1][49842] -> [......127.0.0.1][.8080] + idle: [...150] [ip4][..tcp] [......127.0.0.1][49844] -> [......127.0.0.1][.8080] + idle: [...151] [ip4][..tcp] [......127.0.0.1][49846] -> [......127.0.0.1][.8080] + idle: [...152] [ip4][..tcp] [......127.0.0.1][49848] -> [......127.0.0.1][.8080] + idle: [...153] [ip4][..tcp] [......127.0.0.1][49850] -> [......127.0.0.1][.8080] + idle: [...154] [ip4][..tcp] [......127.0.0.1][49852] -> [......127.0.0.1][.8080] + idle: [...155] [ip4][..tcp] [......127.0.0.1][49854] -> [......127.0.0.1][.8080] + idle: [...156] [ip4][..tcp] [......127.0.0.1][49856] -> [......127.0.0.1][.8080] + idle: [...157] [ip4][..tcp] [......127.0.0.1][49858] -> [......127.0.0.1][.8080] + idle: [...158] [ip4][..tcp] [......127.0.0.1][49860] -> [......127.0.0.1][.8080] + idle: [...159] [ip4][..tcp] [......127.0.0.1][49862] -> [......127.0.0.1][.8080] + idle: [...160] [ip4][..tcp] [......127.0.0.1][49864] -> [......127.0.0.1][.8080] + idle: [...161] [ip4][..tcp] [......127.0.0.1][49866] -> [......127.0.0.1][.8080] + idle: [...162] [ip4][..tcp] [......127.0.0.1][49868] -> [......127.0.0.1][.8080] + idle: [...163] [ip4][..tcp] [......127.0.0.1][49870] -> [......127.0.0.1][.8080] + idle: [...164] [ip4][..tcp] [......127.0.0.1][49872] -> [......127.0.0.1][.8080] + idle: [...165] [ip4][..tcp] [......127.0.0.1][49874] -> [......127.0.0.1][.8080] + idle: [...166] [ip4][..tcp] [......127.0.0.1][49876] -> [......127.0.0.1][.8080] + idle: [...167] [ip4][..tcp] [......127.0.0.1][49878] -> [......127.0.0.1][.8080] + idle: [...168] [ip4][..tcp] [......127.0.0.1][49880] -> [......127.0.0.1][.8080] + idle: [...169] [ip4][..tcp] [......127.0.0.1][49882] -> [......127.0.0.1][.8080] + idle: [...170] [ip4][..tcp] [......127.0.0.1][49884] -> [......127.0.0.1][.8080] + idle: [...171] [ip4][..tcp] [......127.0.0.1][49886] -> [......127.0.0.1][.8080] + idle: [...172] [ip4][..tcp] [......127.0.0.1][49888] -> [......127.0.0.1][.8080] + idle: [...173] [ip4][..tcp] [......127.0.0.1][49890] -> [......127.0.0.1][.8080] + idle: [...174] [ip4][..tcp] [......127.0.0.1][49892] -> [......127.0.0.1][.8080] + idle: [...175] [ip4][..tcp] [......127.0.0.1][49894] -> [......127.0.0.1][.8080] + idle: [...176] [ip4][..tcp] [......127.0.0.1][49896] -> [......127.0.0.1][.8080] + idle: [...177] [ip4][..tcp] [......127.0.0.1][49898] -> [......127.0.0.1][.8080] + idle: [...178] [ip4][..tcp] [......127.0.0.1][49900] -> [......127.0.0.1][.8080] + idle: [...179] [ip4][..tcp] [......127.0.0.1][49902] -> [......127.0.0.1][.8080] + idle: [...180] [ip4][..tcp] [......127.0.0.1][49904] -> [......127.0.0.1][.8080] + idle: [...181] [ip4][..tcp] [......127.0.0.1][49906] -> [......127.0.0.1][.8080] + idle: [...182] [ip4][..tcp] [......127.0.0.1][49908] -> [......127.0.0.1][.8080] + idle: [...183] [ip4][..tcp] [......127.0.0.1][49910] -> [......127.0.0.1][.8080] + idle: [...184] [ip4][..tcp] [......127.0.0.1][49912] -> [......127.0.0.1][.8080] + idle: [...185] [ip4][..tcp] [......127.0.0.1][49914] -> [......127.0.0.1][.8080] + idle: [...186] [ip4][..tcp] [......127.0.0.1][49916] -> [......127.0.0.1][.8080] + idle: [...187] [ip4][..tcp] [......127.0.0.1][49918] -> [......127.0.0.1][.8080] + idle: [...188] [ip4][..tcp] [......127.0.0.1][49920] -> [......127.0.0.1][.8080] + idle: [...189] [ip4][..tcp] [......127.0.0.1][49922] -> [......127.0.0.1][.8080] + idle: [...190] [ip4][..tcp] [......127.0.0.1][49924] -> [......127.0.0.1][.8080] + idle: [...191] [ip4][..tcp] [......127.0.0.1][49926] -> [......127.0.0.1][.8080] + idle: [...192] [ip4][..tcp] [......127.0.0.1][49928] -> [......127.0.0.1][.8080] + idle: [...193] [ip4][..tcp] [......127.0.0.1][49930] -> [......127.0.0.1][.8080] + idle: [...194] [ip4][..tcp] [......127.0.0.1][49932] -> [......127.0.0.1][.8080] + idle: [...195] [ip4][..tcp] [......127.0.0.1][49934] -> [......127.0.0.1][.8080] + idle: [...196] [ip4][..tcp] [......127.0.0.1][49936] -> [......127.0.0.1][.8080] + idle: [...197] [ip4][..tcp] [......127.0.0.1][49938] -> [......127.0.0.1][.8080] + idle: [...198] [ip4][..tcp] [......127.0.0.1][49940] -> [......127.0.0.1][.8080] + idle: [...199] [ip4][..tcp] [......127.0.0.1][49942] -> [......127.0.0.1][.8080] + idle: [...200] [ip4][..tcp] [......127.0.0.1][49944] -> [......127.0.0.1][.8080] + idle: [...201] [ip4][..tcp] [......127.0.0.1][49946] -> [......127.0.0.1][.8080] + idle: [...202] [ip4][..tcp] [......127.0.0.1][49948] -> [......127.0.0.1][.8080] + idle: [...203] [ip4][..tcp] [......127.0.0.1][49950] -> [......127.0.0.1][.8080] + idle: [...204] [ip4][..tcp] [......127.0.0.1][49952] -> [......127.0.0.1][.8080] + idle: [...205] [ip4][..tcp] [......127.0.0.1][49954] -> [......127.0.0.1][.8080] + idle: [...206] [ip4][..tcp] [......127.0.0.1][49956] -> [......127.0.0.1][.8080] + idle: [...207] [ip4][..tcp] [......127.0.0.1][49958] -> [......127.0.0.1][.8080] + idle: [...208] [ip4][..tcp] [......127.0.0.1][49960] -> [......127.0.0.1][.8080] + idle: [...209] [ip4][..tcp] [......127.0.0.1][49962] -> [......127.0.0.1][.8080] + idle: [...210] [ip4][..tcp] [......127.0.0.1][49964] -> [......127.0.0.1][.8080] + idle: [...211] [ip4][..tcp] [......127.0.0.1][49966] -> [......127.0.0.1][.8080] + idle: [...212] [ip4][..tcp] [......127.0.0.1][49968] -> [......127.0.0.1][.8080] + idle: [...213] [ip4][..tcp] [......127.0.0.1][49970] -> [......127.0.0.1][.8080] + idle: [...214] [ip4][..tcp] [......127.0.0.1][49972] -> [......127.0.0.1][.8080] + idle: [...215] [ip4][..tcp] [......127.0.0.1][49974] -> [......127.0.0.1][.8080] + idle: [...216] [ip4][..tcp] [......127.0.0.1][49976] -> [......127.0.0.1][.8080] + idle: [...217] [ip4][..tcp] [......127.0.0.1][49978] -> [......127.0.0.1][.8080] + idle: [...218] [ip4][..tcp] [......127.0.0.1][49980] -> [......127.0.0.1][.8080] + idle: [...219] [ip4][..tcp] [......127.0.0.1][49982] -> [......127.0.0.1][.8080] + idle: [...220] [ip4][..tcp] [......127.0.0.1][49984] -> [......127.0.0.1][.8080] + idle: [...221] [ip4][..tcp] [......127.0.0.1][49986] -> [......127.0.0.1][.8080] + idle: [...222] [ip4][..tcp] [......127.0.0.1][49988] -> [......127.0.0.1][.8080] + idle: [...223] [ip4][..tcp] [......127.0.0.1][49990] -> [......127.0.0.1][.8080] + idle: [...224] [ip4][..tcp] [......127.0.0.1][49992] -> [......127.0.0.1][.8080] + idle: [...225] [ip4][..tcp] [......127.0.0.1][49994] -> [......127.0.0.1][.8080] + idle: [...226] [ip4][..tcp] [......127.0.0.1][49996] -> [......127.0.0.1][.8080] + idle: [...227] [ip4][..tcp] [......127.0.0.1][49998] -> [......127.0.0.1][.8080] + idle: [...228] [ip4][..tcp] [......127.0.0.1][50000] -> [......127.0.0.1][.8080] + idle: [...229] [ip4][..tcp] [......127.0.0.1][50002] -> [......127.0.0.1][.8080] + idle: [...230] [ip4][..tcp] [......127.0.0.1][50004] -> [......127.0.0.1][.8080] + idle: [...231] [ip4][..tcp] [......127.0.0.1][50006] -> [......127.0.0.1][.8080] + idle: [...232] [ip4][..tcp] [......127.0.0.1][50008] -> [......127.0.0.1][.8080] + idle: [...233] [ip4][..tcp] [......127.0.0.1][50010] -> [......127.0.0.1][.8080] + idle: [...234] [ip4][..tcp] [......127.0.0.1][50012] -> [......127.0.0.1][.8080] + idle: [...235] [ip4][..tcp] [......127.0.0.1][50014] -> [......127.0.0.1][.8080] + idle: [...236] [ip4][..tcp] [......127.0.0.1][50016] -> [......127.0.0.1][.8080] + idle: [...237] [ip4][..tcp] [......127.0.0.1][50018] -> [......127.0.0.1][.8080] + idle: [...238] [ip4][..tcp] [......127.0.0.1][50020] -> [......127.0.0.1][.8080] + idle: [...239] [ip4][..tcp] [......127.0.0.1][50022] -> [......127.0.0.1][.8080] + idle: [...240] [ip4][..tcp] [......127.0.0.1][50024] -> [......127.0.0.1][.8080] + idle: [...241] [ip4][..tcp] [......127.0.0.1][50026] -> [......127.0.0.1][.8080] + idle: [...242] [ip4][..tcp] [......127.0.0.1][50028] -> [......127.0.0.1][.8080] + idle: [...243] [ip4][..tcp] [......127.0.0.1][50030] -> [......127.0.0.1][.8080] + idle: [...244] [ip4][..tcp] [......127.0.0.1][50032] -> [......127.0.0.1][.8080] + idle: [...245] [ip4][..tcp] [......127.0.0.1][50034] -> [......127.0.0.1][.8080] + idle: [...246] [ip4][..tcp] [......127.0.0.1][50036] -> [......127.0.0.1][.8080] + idle: [...247] [ip4][..tcp] [......127.0.0.1][50038] -> [......127.0.0.1][.8080] + idle: [...248] [ip4][..tcp] [......127.0.0.1][50040] -> [......127.0.0.1][.8080] + idle: [...249] [ip4][..tcp] [......127.0.0.1][50042] -> [......127.0.0.1][.8080] + idle: [...250] [ip4][..tcp] [......127.0.0.1][50044] -> [......127.0.0.1][.8080] + idle: [...251] [ip4][..tcp] [......127.0.0.1][50046] -> [......127.0.0.1][.8080] + idle: [...252] [ip4][..tcp] [......127.0.0.1][50048] -> [......127.0.0.1][.8080] + idle: [...253] [ip4][..tcp] [......127.0.0.1][50050] -> [......127.0.0.1][.8080] + idle: [...254] [ip4][..tcp] [......127.0.0.1][50052] -> [......127.0.0.1][.8080] + idle: [...255] [ip4][..tcp] [......127.0.0.1][50054] -> [......127.0.0.1][.8080] + idle: [...256] [ip4][..tcp] [......127.0.0.1][50056] -> [......127.0.0.1][.8080] + idle: [...257] [ip4][..tcp] [......127.0.0.1][50058] -> [......127.0.0.1][.8080] + idle: [...258] [ip4][..tcp] [......127.0.0.1][50060] -> [......127.0.0.1][.8080] + idle: [...259] [ip4][..tcp] [......127.0.0.1][50062] -> [......127.0.0.1][.8080] + idle: [...260] [ip4][..tcp] [......127.0.0.1][50064] -> [......127.0.0.1][.8080] + idle: [...261] [ip4][..tcp] [......127.0.0.1][50066] -> [......127.0.0.1][.8080] + idle: [...262] [ip4][..tcp] [......127.0.0.1][50068] -> [......127.0.0.1][.8080] + idle: [...263] [ip4][..tcp] [......127.0.0.1][50070] -> [......127.0.0.1][.8080] + idle: [...264] [ip4][..tcp] [......127.0.0.1][50072] -> [......127.0.0.1][.8080] + idle: [...265] [ip4][..tcp] [......127.0.0.1][50074] -> [......127.0.0.1][.8080] + idle: [...266] [ip4][..tcp] [......127.0.0.1][50076] -> [......127.0.0.1][.8080] + idle: [...267] [ip4][..tcp] [......127.0.0.1][50078] -> [......127.0.0.1][.8080] + idle: [...268] [ip4][..tcp] [......127.0.0.1][50080] -> [......127.0.0.1][.8080] + idle: [...269] [ip4][..tcp] [......127.0.0.1][50082] -> [......127.0.0.1][.8080] + idle: [...270] [ip4][..tcp] [......127.0.0.1][50084] -> [......127.0.0.1][.8080] + idle: [...271] [ip4][..tcp] [......127.0.0.1][50086] -> [......127.0.0.1][.8080] + idle: [...272] [ip4][..tcp] [......127.0.0.1][50088] -> [......127.0.0.1][.8080] + idle: [...273] [ip4][..tcp] [......127.0.0.1][50090] -> [......127.0.0.1][.8080] + idle: [...274] [ip4][..tcp] [......127.0.0.1][50092] -> [......127.0.0.1][.8080] + idle: [...275] [ip4][..tcp] [......127.0.0.1][50094] -> [......127.0.0.1][.8080] + idle: [...276] [ip4][..tcp] [......127.0.0.1][50096] -> [......127.0.0.1][.8080] + idle: [...277] [ip4][..tcp] [......127.0.0.1][50098] -> [......127.0.0.1][.8080] + idle: [...278] [ip4][..tcp] [......127.0.0.1][50100] -> [......127.0.0.1][.8080] + idle: [...279] [ip4][..tcp] [......127.0.0.1][50102] -> [......127.0.0.1][.8080] + idle: [...280] [ip4][..tcp] [......127.0.0.1][50104] -> [......127.0.0.1][.8080] + idle: [...281] [ip4][..tcp] [......127.0.0.1][50106] -> [......127.0.0.1][.8080] + idle: [...282] [ip4][..tcp] [......127.0.0.1][50108] -> [......127.0.0.1][.8080] + idle: [...283] [ip4][..tcp] [......127.0.0.1][50110] -> [......127.0.0.1][.8080] + idle: [...284] [ip4][..tcp] [......127.0.0.1][50112] -> [......127.0.0.1][.8080] + idle: [...285] [ip4][..tcp] [......127.0.0.1][50114] -> [......127.0.0.1][.8080] + idle: [...286] [ip4][..tcp] [......127.0.0.1][50116] -> [......127.0.0.1][.8080] + idle: [...287] [ip4][..tcp] [......127.0.0.1][50118] -> [......127.0.0.1][.8080] + idle: [...288] [ip4][..tcp] [......127.0.0.1][50120] -> [......127.0.0.1][.8080] + idle: [...289] [ip4][..tcp] [......127.0.0.1][50122] -> [......127.0.0.1][.8080] + idle: [...290] [ip4][..tcp] [......127.0.0.1][50124] -> [......127.0.0.1][.8080] + idle: [...291] [ip4][..tcp] [......127.0.0.1][50126] -> [......127.0.0.1][.8080] + idle: [...292] [ip4][..tcp] [......127.0.0.1][50128] -> [......127.0.0.1][.8080] + idle: [...293] [ip4][..tcp] [......127.0.0.1][50130] -> [......127.0.0.1][.8080] + idle: [...294] [ip4][..tcp] [......127.0.0.1][50132] -> [......127.0.0.1][.8080] + idle: [...295] [ip4][..tcp] [......127.0.0.1][50134] -> [......127.0.0.1][.8080] + idle: [...296] [ip4][..tcp] [......127.0.0.1][50136] -> [......127.0.0.1][.8080] + idle: [...297] [ip4][..tcp] [......127.0.0.1][50138] -> [......127.0.0.1][.8080] + idle: [...298] [ip4][..tcp] [......127.0.0.1][50140] -> [......127.0.0.1][.8080] + idle: [...299] [ip4][..tcp] [......127.0.0.1][50142] -> [......127.0.0.1][.8080] + idle: [...300] [ip4][..tcp] [......127.0.0.1][50144] -> [......127.0.0.1][.8080] + idle: [...301] [ip4][..tcp] [......127.0.0.1][50146] -> [......127.0.0.1][.8080] + idle: [...302] [ip4][..tcp] [......127.0.0.1][50148] -> [......127.0.0.1][.8080] + idle: [...303] [ip4][..tcp] [......127.0.0.1][50150] -> [......127.0.0.1][.8080] + idle: [...304] [ip4][..tcp] [......127.0.0.1][50152] -> [......127.0.0.1][.8080] + idle: [...305] [ip4][..tcp] [......127.0.0.1][50154] -> [......127.0.0.1][.8080] + idle: [...306] [ip4][..tcp] [......127.0.0.1][50156] -> [......127.0.0.1][.8080] + idle: [...307] [ip4][..tcp] [......127.0.0.1][50158] -> [......127.0.0.1][.8080] + idle: [...308] [ip4][..tcp] [......127.0.0.1][50160] -> [......127.0.0.1][.8080] + idle: [...309] [ip4][..tcp] [......127.0.0.1][50162] -> [......127.0.0.1][.8080] + idle: [...310] [ip4][..tcp] [......127.0.0.1][50164] -> [......127.0.0.1][.8080] + idle: [...311] [ip4][..tcp] [......127.0.0.1][50166] -> [......127.0.0.1][.8080] + idle: [...312] [ip4][..tcp] [......127.0.0.1][50168] -> [......127.0.0.1][.8080] + idle: [...313] [ip4][..tcp] [......127.0.0.1][50170] -> [......127.0.0.1][.8080] + idle: [...314] [ip4][..tcp] [......127.0.0.1][50172] -> [......127.0.0.1][.8080] + idle: [...315] [ip4][..tcp] [......127.0.0.1][50174] -> [......127.0.0.1][.8080] + idle: [...316] [ip4][..tcp] [......127.0.0.1][50176] -> [......127.0.0.1][.8080] + idle: [...317] [ip4][..tcp] [......127.0.0.1][50178] -> [......127.0.0.1][.8080] + idle: [...318] [ip4][..tcp] [......127.0.0.1][50180] -> [......127.0.0.1][.8080] + idle: [...319] [ip4][..tcp] [......127.0.0.1][50182] -> [......127.0.0.1][.8080] + idle: [...320] [ip4][..tcp] [......127.0.0.1][50184] -> [......127.0.0.1][.8080] + idle: [...321] [ip4][..tcp] [......127.0.0.1][50186] -> [......127.0.0.1][.8080] + idle: [...322] [ip4][..tcp] [......127.0.0.1][50188] -> [......127.0.0.1][.8080] + idle: [...323] [ip4][..tcp] [......127.0.0.1][50190] -> [......127.0.0.1][.8080] + idle: [...324] [ip4][..tcp] [......127.0.0.1][50192] -> [......127.0.0.1][.8080] + idle: [...325] [ip4][..tcp] [......127.0.0.1][50194] -> [......127.0.0.1][.8080] + idle: [...326] [ip4][..tcp] [......127.0.0.1][50196] -> [......127.0.0.1][.8080] + idle: [...327] [ip4][..tcp] [......127.0.0.1][50198] -> [......127.0.0.1][.8080] + idle: [...328] [ip4][..tcp] [......127.0.0.1][50200] -> [......127.0.0.1][.8080] + idle: [...329] [ip4][..tcp] [......127.0.0.1][50202] -> [......127.0.0.1][.8080] + idle: [...330] [ip4][..tcp] [......127.0.0.1][50204] -> [......127.0.0.1][.8080] + idle: [...331] [ip4][..tcp] [......127.0.0.1][50206] -> [......127.0.0.1][.8080] + idle: [...332] [ip4][..tcp] [......127.0.0.1][50208] -> [......127.0.0.1][.8080] + idle: [...333] [ip4][..tcp] [......127.0.0.1][50210] -> [......127.0.0.1][.8080] + idle: [...334] [ip4][..tcp] [......127.0.0.1][50212] -> [......127.0.0.1][.8080] + idle: [...335] [ip4][..tcp] [......127.0.0.1][50214] -> [......127.0.0.1][.8080] + idle: [...336] [ip4][..tcp] [......127.0.0.1][50216] -> [......127.0.0.1][.8080] + idle: [...337] [ip4][..tcp] [......127.0.0.1][50218] -> [......127.0.0.1][.8080] + idle: [...338] [ip4][..tcp] [......127.0.0.1][50220] -> [......127.0.0.1][.8080] + idle: [...339] [ip4][..tcp] [......127.0.0.1][50222] -> [......127.0.0.1][.8080] + idle: [...340] [ip4][..tcp] [......127.0.0.1][50224] -> [......127.0.0.1][.8080] + idle: [...341] [ip4][..tcp] [......127.0.0.1][50226] -> [......127.0.0.1][.8080] + idle: [...342] [ip4][..tcp] [......127.0.0.1][50228] -> [......127.0.0.1][.8080] + idle: [...343] [ip4][..tcp] [......127.0.0.1][50230] -> [......127.0.0.1][.8080] + idle: [...344] [ip4][..tcp] [......127.0.0.1][50232] -> [......127.0.0.1][.8080] + idle: [...345] [ip4][..tcp] [......127.0.0.1][50234] -> [......127.0.0.1][.8080] + idle: [...346] [ip4][..tcp] [......127.0.0.1][50236] -> [......127.0.0.1][.8080] + idle: [...347] [ip4][..tcp] [......127.0.0.1][50238] -> [......127.0.0.1][.8080] + idle: [...348] [ip4][..tcp] [......127.0.0.1][50240] -> [......127.0.0.1][.8080] + idle: [...349] [ip4][..tcp] [......127.0.0.1][50242] -> [......127.0.0.1][.8080] + idle: [...350] [ip4][..tcp] [......127.0.0.1][50244] -> [......127.0.0.1][.8080] + idle: [...351] [ip4][..tcp] [......127.0.0.1][50246] -> [......127.0.0.1][.8080] + idle: [...352] [ip4][..tcp] [......127.0.0.1][50248] -> [......127.0.0.1][.8080] + idle: [...353] [ip4][..tcp] [......127.0.0.1][50250] -> [......127.0.0.1][.8080] + idle: [...354] [ip4][..tcp] [......127.0.0.1][50252] -> [......127.0.0.1][.8080] + idle: [...355] [ip4][..tcp] [......127.0.0.1][50254] -> [......127.0.0.1][.8080] + idle: [...356] [ip4][..tcp] [......127.0.0.1][50256] -> [......127.0.0.1][.8080] + idle: [...357] [ip4][..tcp] [......127.0.0.1][50258] -> [......127.0.0.1][.8080] + idle: [...358] [ip4][..tcp] [......127.0.0.1][50260] -> [......127.0.0.1][.8080] + idle: [...359] [ip4][..tcp] [......127.0.0.1][50262] -> [......127.0.0.1][.8080] + idle: [...360] [ip4][..tcp] [......127.0.0.1][50264] -> [......127.0.0.1][.8080] + idle: [...361] [ip4][..tcp] [......127.0.0.1][50266] -> [......127.0.0.1][.8080] + idle: [...362] [ip4][..tcp] [......127.0.0.1][50268] -> [......127.0.0.1][.8080] + idle: [...363] [ip4][..tcp] [......127.0.0.1][50270] -> [......127.0.0.1][.8080] + idle: [...364] [ip4][..tcp] [......127.0.0.1][50272] -> [......127.0.0.1][.8080] + idle: [...365] [ip4][..tcp] [......127.0.0.1][50274] -> [......127.0.0.1][.8080] + idle: [...366] [ip4][..tcp] [......127.0.0.1][50276] -> [......127.0.0.1][.8080] + idle: [...367] [ip4][..tcp] [......127.0.0.1][50278] -> [......127.0.0.1][.8080] + idle: [...368] [ip4][..tcp] [......127.0.0.1][50280] -> [......127.0.0.1][.8080] + idle: [...369] [ip4][..tcp] [......127.0.0.1][50282] -> [......127.0.0.1][.8080] + idle: [...370] [ip4][..tcp] [......127.0.0.1][50284] -> [......127.0.0.1][.8080] + idle: [...371] [ip4][..tcp] [......127.0.0.1][50286] -> [......127.0.0.1][.8080] + idle: [...372] [ip4][..tcp] [......127.0.0.1][50288] -> [......127.0.0.1][.8080] + idle: [...373] [ip4][..tcp] [......127.0.0.1][50290] -> [......127.0.0.1][.8080] + idle: [...374] [ip4][..tcp] [......127.0.0.1][50292] -> [......127.0.0.1][.8080] + idle: [...375] [ip4][..tcp] [......127.0.0.1][50294] -> [......127.0.0.1][.8080] + idle: [...376] [ip4][..tcp] [......127.0.0.1][50296] -> [......127.0.0.1][.8080] + idle: [...377] [ip4][..tcp] [......127.0.0.1][50298] -> [......127.0.0.1][.8080] + idle: [...378] [ip4][..tcp] [......127.0.0.1][50300] -> [......127.0.0.1][.8080] + idle: [...379] [ip4][..tcp] [......127.0.0.1][50302] -> [......127.0.0.1][.8080] + idle: [...380] [ip4][..tcp] [......127.0.0.1][50304] -> [......127.0.0.1][.8080] + idle: [...381] [ip4][..tcp] [......127.0.0.1][50306] -> [......127.0.0.1][.8080] + idle: [...382] [ip4][..tcp] [......127.0.0.1][50308] -> [......127.0.0.1][.8080] + idle: [...383] [ip4][..tcp] [......127.0.0.1][50310] -> [......127.0.0.1][.8080] + idle: [...384] [ip4][..tcp] [......127.0.0.1][50312] -> [......127.0.0.1][.8080] + idle: [...385] [ip4][..tcp] [......127.0.0.1][50314] -> [......127.0.0.1][.8080] + idle: [...386] [ip4][..tcp] [......127.0.0.1][50316] -> [......127.0.0.1][.8080] + idle: [...387] [ip4][..tcp] [......127.0.0.1][50318] -> [......127.0.0.1][.8080] + idle: [...388] [ip4][..tcp] [......127.0.0.1][50320] -> [......127.0.0.1][.8080] + idle: [...389] [ip4][..tcp] [......127.0.0.1][50322] -> [......127.0.0.1][.8080] + idle: [...390] [ip4][..tcp] [......127.0.0.1][50324] -> [......127.0.0.1][.8080] + idle: [...391] [ip4][..tcp] [......127.0.0.1][50326] -> [......127.0.0.1][.8080] + idle: [...392] [ip4][..tcp] [......127.0.0.1][50328] -> [......127.0.0.1][.8080] + idle: [...393] [ip4][..tcp] [......127.0.0.1][50330] -> [......127.0.0.1][.8080] + idle: [...394] [ip4][..tcp] [......127.0.0.1][50332] -> [......127.0.0.1][.8080] + idle: [...395] [ip4][..tcp] [......127.0.0.1][50334] -> [......127.0.0.1][.8080] + idle: [...396] [ip4][..tcp] [......127.0.0.1][50336] -> [......127.0.0.1][.8080] + idle: [...397] [ip4][..tcp] [......127.0.0.1][50338] -> [......127.0.0.1][.8080] + idle: [...398] [ip4][..tcp] [......127.0.0.1][50340] -> [......127.0.0.1][.8080] + idle: [...399] [ip4][..tcp] [......127.0.0.1][50342] -> [......127.0.0.1][.8080] + idle: [...400] [ip4][..tcp] [......127.0.0.1][50344] -> [......127.0.0.1][.8080] + idle: [...401] [ip4][..tcp] [......127.0.0.1][50346] -> [......127.0.0.1][.8080] + idle: [...402] [ip4][..tcp] [......127.0.0.1][50348] -> [......127.0.0.1][.8080] + idle: [...403] [ip4][..tcp] [......127.0.0.1][50350] -> [......127.0.0.1][.8080] + idle: [...404] [ip4][..tcp] [......127.0.0.1][50352] -> [......127.0.0.1][.8080] + idle: [...405] [ip4][..tcp] [......127.0.0.1][50354] -> [......127.0.0.1][.8080] + idle: [...406] [ip4][..tcp] [......127.0.0.1][50356] -> [......127.0.0.1][.8080] + idle: [...407] [ip4][..tcp] [......127.0.0.1][50358] -> [......127.0.0.1][.8080] + idle: [...408] [ip4][..tcp] [......127.0.0.1][50360] -> [......127.0.0.1][.8080] + idle: [...409] [ip4][..tcp] [......127.0.0.1][50362] -> [......127.0.0.1][.8080] + idle: [...410] [ip4][..tcp] [......127.0.0.1][50364] -> [......127.0.0.1][.8080] + idle: [...411] [ip4][..tcp] [......127.0.0.1][50366] -> [......127.0.0.1][.8080] + idle: [...412] [ip4][..tcp] [......127.0.0.1][50368] -> [......127.0.0.1][.8080] + idle: [...413] [ip4][..tcp] [......127.0.0.1][50370] -> [......127.0.0.1][.8080] + idle: [...414] [ip4][..tcp] [......127.0.0.1][50372] -> [......127.0.0.1][.8080] + idle: [...415] [ip4][..tcp] [......127.0.0.1][50374] -> [......127.0.0.1][.8080] + idle: [...416] [ip4][..tcp] [......127.0.0.1][50376] -> [......127.0.0.1][.8080] + idle: [...417] [ip4][..tcp] [......127.0.0.1][50378] -> [......127.0.0.1][.8080] + idle: [...418] [ip4][..tcp] [......127.0.0.1][50380] -> [......127.0.0.1][.8080] + idle: [...419] [ip4][..tcp] [......127.0.0.1][50382] -> [......127.0.0.1][.8080] + idle: [...420] [ip4][..tcp] [......127.0.0.1][50384] -> [......127.0.0.1][.8080] + idle: [...421] [ip4][..tcp] [......127.0.0.1][50386] -> [......127.0.0.1][.8080] + idle: [...422] [ip4][..tcp] [......127.0.0.1][50388] -> [......127.0.0.1][.8080] + idle: [...423] [ip4][..tcp] [......127.0.0.1][50390] -> [......127.0.0.1][.8080] + idle: [...424] [ip4][..tcp] [......127.0.0.1][50392] -> [......127.0.0.1][.8080] + idle: [...425] [ip4][..tcp] [......127.0.0.1][50394] -> [......127.0.0.1][.8080] + idle: [...426] [ip4][..tcp] [......127.0.0.1][50396] -> [......127.0.0.1][.8080] + idle: [...427] [ip4][..tcp] [......127.0.0.1][50398] -> [......127.0.0.1][.8080] + idle: [...428] [ip4][..tcp] [......127.0.0.1][50400] -> [......127.0.0.1][.8080] + idle: [...429] [ip4][..tcp] [......127.0.0.1][50402] -> [......127.0.0.1][.8080] + idle: [...430] [ip4][..tcp] [......127.0.0.1][50404] -> [......127.0.0.1][.8080] + idle: [...431] [ip4][..tcp] [......127.0.0.1][50406] -> [......127.0.0.1][.8080] + idle: [...432] [ip4][..tcp] [......127.0.0.1][50408] -> [......127.0.0.1][.8080] + idle: [...433] [ip4][..tcp] [......127.0.0.1][50410] -> [......127.0.0.1][.8080] + idle: [...434] [ip4][..tcp] [......127.0.0.1][50412] -> [......127.0.0.1][.8080] + idle: [...435] [ip4][..tcp] [......127.0.0.1][50414] -> [......127.0.0.1][.8080] + idle: [...436] [ip4][..tcp] [......127.0.0.1][50416] -> [......127.0.0.1][.8080] + idle: [...437] [ip4][..tcp] [......127.0.0.1][50418] -> [......127.0.0.1][.8080] + idle: [...438] [ip4][..tcp] [......127.0.0.1][50438] -> [......127.0.0.1][.8080] + idle: [...439] [ip4][..tcp] [......127.0.0.1][50440] -> [......127.0.0.1][.8080] + idle: [...440] [ip4][..tcp] [......127.0.0.1][50442] -> [......127.0.0.1][.8080] + idle: [...441] [ip4][..tcp] [......127.0.0.1][50444] -> [......127.0.0.1][.8080] + idle: [...442] [ip4][..tcp] [......127.0.0.1][50446] -> [......127.0.0.1][.8080] + idle: [...443] [ip4][..tcp] [......127.0.0.1][50448] -> [......127.0.0.1][.8080] + idle: [...444] [ip4][..tcp] [......127.0.0.1][50450] -> [......127.0.0.1][.8080] + idle: [...445] [ip4][..tcp] [......127.0.0.1][50452] -> [......127.0.0.1][.8080] + idle: [...446] [ip4][..tcp] [......127.0.0.1][50454] -> [......127.0.0.1][.8080] + idle: [...447] [ip4][..tcp] [......127.0.0.1][50456] -> [......127.0.0.1][.8080] + idle: [...448] [ip4][..tcp] [......127.0.0.1][50458] -> [......127.0.0.1][.8080] + idle: [...449] [ip4][..tcp] [......127.0.0.1][50460] -> [......127.0.0.1][.8080] + idle: [...450] [ip4][..tcp] [......127.0.0.1][50462] -> [......127.0.0.1][.8080] + idle: [...451] [ip4][..tcp] [......127.0.0.1][50464] -> [......127.0.0.1][.8080] + idle: [...452] [ip4][..tcp] [......127.0.0.1][50466] -> [......127.0.0.1][.8080] + idle: [...453] [ip4][..tcp] [......127.0.0.1][50468] -> [......127.0.0.1][.8080] + idle: [...454] [ip4][..tcp] [......127.0.0.1][50470] -> [......127.0.0.1][.8080] + idle: [...455] [ip4][..tcp] [......127.0.0.1][50472] -> [......127.0.0.1][.8080] + idle: [...456] [ip4][..tcp] [......127.0.0.1][50474] -> [......127.0.0.1][.8080] + idle: [...457] [ip4][..tcp] [......127.0.0.1][50476] -> [......127.0.0.1][.8080] + idle: [...458] [ip4][..tcp] [......127.0.0.1][50478] -> [......127.0.0.1][.8080] + idle: [...459] [ip4][..tcp] [......127.0.0.1][50480] -> [......127.0.0.1][.8080] + idle: [...460] [ip4][..tcp] [......127.0.0.1][50482] -> [......127.0.0.1][.8080] + idle: [...461] [ip4][..tcp] [......127.0.0.1][50484] -> [......127.0.0.1][.8080] + idle: [...462] [ip4][..tcp] [......127.0.0.1][50486] -> [......127.0.0.1][.8080] + idle: [...463] [ip4][..tcp] [......127.0.0.1][50488] -> [......127.0.0.1][.8080] + idle: [...464] [ip4][..tcp] [......127.0.0.1][50490] -> [......127.0.0.1][.8080] + idle: [...465] [ip4][..tcp] [......127.0.0.1][50492] -> [......127.0.0.1][.8080] + idle: [...466] [ip4][..tcp] [......127.0.0.1][50494] -> [......127.0.0.1][.8080] + idle: [...467] [ip4][..tcp] [......127.0.0.1][50496] -> [......127.0.0.1][.8080] + idle: [...468] [ip4][..tcp] [......127.0.0.1][50498] -> [......127.0.0.1][.8080] + idle: [...469] [ip4][..tcp] [......127.0.0.1][50500] -> [......127.0.0.1][.8080] + idle: [...470] [ip4][..tcp] [......127.0.0.1][50502] -> [......127.0.0.1][.8080] + idle: [...471] [ip4][..tcp] [......127.0.0.1][50504] -> [......127.0.0.1][.8080] + idle: [...472] [ip4][..tcp] [......127.0.0.1][50506] -> [......127.0.0.1][.8080] + idle: [...473] [ip4][..tcp] [......127.0.0.1][50508] -> [......127.0.0.1][.8080] + idle: [...474] [ip4][..tcp] [......127.0.0.1][50510] -> [......127.0.0.1][.8080] + idle: [...475] [ip4][..tcp] [......127.0.0.1][50512] -> [......127.0.0.1][.8080] + idle: [...476] [ip4][..tcp] [......127.0.0.1][50514] -> [......127.0.0.1][.8080] + idle: [...477] [ip4][..tcp] [......127.0.0.1][50516] -> [......127.0.0.1][.8080] + idle: [...478] [ip4][..tcp] [......127.0.0.1][50518] -> [......127.0.0.1][.8080] + idle: [...479] [ip4][..tcp] [......127.0.0.1][50520] -> [......127.0.0.1][.8080] + idle: [...480] [ip4][..tcp] [......127.0.0.1][50522] -> [......127.0.0.1][.8080] + idle: [...481] [ip4][..tcp] [......127.0.0.1][50524] -> [......127.0.0.1][.8080] + idle: [...482] [ip4][..tcp] [......127.0.0.1][50526] -> [......127.0.0.1][.8080] + idle: [...483] [ip4][..tcp] [......127.0.0.1][50528] -> [......127.0.0.1][.8080] + idle: [...484] [ip4][..tcp] [......127.0.0.1][50530] -> [......127.0.0.1][.8080] + idle: [...485] [ip4][..tcp] [......127.0.0.1][50532] -> [......127.0.0.1][.8080] + idle: [...486] [ip4][..tcp] [......127.0.0.1][50534] -> [......127.0.0.1][.8080] + idle: [...487] [ip4][..tcp] [......127.0.0.1][50536] -> [......127.0.0.1][.8080] + idle: [...488] [ip4][..tcp] [......127.0.0.1][50538] -> [......127.0.0.1][.8080] + idle: [...489] [ip4][..tcp] [......127.0.0.1][50540] -> [......127.0.0.1][.8080] + idle: [...490] [ip4][..tcp] [......127.0.0.1][50542] -> [......127.0.0.1][.8080] + idle: [...491] [ip4][..tcp] [......127.0.0.1][50544] -> [......127.0.0.1][.8080] + idle: [...492] [ip4][..tcp] [......127.0.0.1][50546] -> [......127.0.0.1][.8080] + idle: [...493] [ip4][..tcp] [......127.0.0.1][50548] -> [......127.0.0.1][.8080] + idle: [...494] [ip4][..tcp] [......127.0.0.1][50550] -> [......127.0.0.1][.8080] + idle: [...495] [ip4][..tcp] [......127.0.0.1][50552] -> [......127.0.0.1][.8080] + idle: [...496] [ip4][..tcp] [......127.0.0.1][50554] -> [......127.0.0.1][.8080] + idle: [...497] [ip4][..tcp] [......127.0.0.1][50556] -> [......127.0.0.1][.8080] + idle: [...498] [ip4][..tcp] [......127.0.0.1][50558] -> [......127.0.0.1][.8080] + idle: [...499] [ip4][..tcp] [......127.0.0.1][50560] -> [......127.0.0.1][.8080] + idle: [...500] [ip4][..tcp] [......127.0.0.1][50562] -> [......127.0.0.1][.8080] + idle: [...501] [ip4][..tcp] [......127.0.0.1][50564] -> [......127.0.0.1][.8080] + idle: [...502] [ip4][..tcp] [......127.0.0.1][50566] -> [......127.0.0.1][.8080] + idle: [...503] [ip4][..tcp] [......127.0.0.1][50568] -> [......127.0.0.1][.8080] + idle: [...504] [ip4][..tcp] [......127.0.0.1][50570] -> [......127.0.0.1][.8080] + idle: [...505] [ip4][..tcp] [......127.0.0.1][50572] -> [......127.0.0.1][.8080] + idle: [...506] [ip4][..tcp] [......127.0.0.1][50574] -> [......127.0.0.1][.8080] + idle: [...507] [ip4][..tcp] [......127.0.0.1][50576] -> [......127.0.0.1][.8080] + idle: [...508] [ip4][..tcp] [......127.0.0.1][50578] -> [......127.0.0.1][.8080] + idle: [...509] [ip4][..tcp] [......127.0.0.1][50580] -> [......127.0.0.1][.8080] + idle: [...510] [ip4][..tcp] [......127.0.0.1][50582] -> [......127.0.0.1][.8080] + idle: [...511] [ip4][..tcp] [......127.0.0.1][50584] -> [......127.0.0.1][.8080] + idle: [...512] [ip4][..tcp] [......127.0.0.1][50586] -> [......127.0.0.1][.8080] + idle: [...513] [ip4][..tcp] [......127.0.0.1][50588] -> [......127.0.0.1][.8080] + idle: [...514] [ip4][..tcp] [......127.0.0.1][50590] -> [......127.0.0.1][.8080] + idle: [...515] [ip4][..tcp] [......127.0.0.1][50592] -> [......127.0.0.1][.8080] + idle: [...516] [ip4][..tcp] [......127.0.0.1][50594] -> [......127.0.0.1][.8080] + idle: [...517] [ip4][..tcp] [......127.0.0.1][50596] -> [......127.0.0.1][.8080] + idle: [...518] [ip4][..tcp] [......127.0.0.1][50598] -> [......127.0.0.1][.8080] + idle: [...519] [ip4][..tcp] [......127.0.0.1][50600] -> [......127.0.0.1][.8080] + idle: [...520] [ip4][..tcp] [......127.0.0.1][50602] -> [......127.0.0.1][.8080] + idle: [...521] [ip4][..tcp] [......127.0.0.1][50604] -> [......127.0.0.1][.8080] + idle: [...522] [ip4][..tcp] [......127.0.0.1][50606] -> [......127.0.0.1][.8080] + idle: [...523] [ip4][..tcp] [......127.0.0.1][50608] -> [......127.0.0.1][.8080] + idle: [...524] [ip4][..tcp] [......127.0.0.1][50610] -> [......127.0.0.1][.8080] + idle: [...525] [ip4][..tcp] [......127.0.0.1][50612] -> [......127.0.0.1][.8080] + idle: [...526] [ip4][..tcp] [......127.0.0.1][50614] -> [......127.0.0.1][.8080] + idle: [...527] [ip4][..tcp] [......127.0.0.1][50616] -> [......127.0.0.1][.8080] + idle: [...528] [ip4][..tcp] [......127.0.0.1][50618] -> [......127.0.0.1][.8080] + idle: [...529] [ip4][..tcp] [......127.0.0.1][50620] -> [......127.0.0.1][.8080] + idle: [...530] [ip4][..tcp] [......127.0.0.1][50622] -> [......127.0.0.1][.8080] + idle: [...531] [ip4][..tcp] [......127.0.0.1][50624] -> [......127.0.0.1][.8080] + idle: [...532] [ip4][..tcp] [......127.0.0.1][50626] -> [......127.0.0.1][.8080] + idle: [...533] [ip4][..tcp] [......127.0.0.1][50628] -> [......127.0.0.1][.8080] + idle: [...534] [ip4][..tcp] [......127.0.0.1][50630] -> [......127.0.0.1][.8080] + idle: [...535] [ip4][..tcp] [......127.0.0.1][50632] -> [......127.0.0.1][.8080] + idle: [...536] [ip4][..tcp] [......127.0.0.1][50634] -> [......127.0.0.1][.8080] + idle: [...537] [ip4][..tcp] [......127.0.0.1][50636] -> [......127.0.0.1][.8080] + idle: [...538] [ip4][..tcp] [......127.0.0.1][50638] -> [......127.0.0.1][.8080] + idle: [...539] [ip4][..tcp] [......127.0.0.1][50640] -> [......127.0.0.1][.8080] + idle: [...540] [ip4][..tcp] [......127.0.0.1][50642] -> [......127.0.0.1][.8080] + idle: [...541] [ip4][..tcp] [......127.0.0.1][50644] -> [......127.0.0.1][.8080] + idle: [...542] [ip4][..tcp] [......127.0.0.1][50646] -> [......127.0.0.1][.8080] + idle: [...543] [ip4][..tcp] [......127.0.0.1][50648] -> [......127.0.0.1][.8080] + idle: [...544] [ip4][..tcp] [......127.0.0.1][50650] -> [......127.0.0.1][.8080] + idle: [...545] [ip4][..tcp] [......127.0.0.1][50652] -> [......127.0.0.1][.8080] + idle: [...546] [ip4][..tcp] [......127.0.0.1][50654] -> [......127.0.0.1][.8080] + idle: [...547] [ip4][..tcp] [......127.0.0.1][50656] -> [......127.0.0.1][.8080] + idle: [...548] [ip4][..tcp] [......127.0.0.1][50658] -> [......127.0.0.1][.8080] + idle: [...549] [ip4][..tcp] [......127.0.0.1][50660] -> [......127.0.0.1][.8080] + idle: [...550] [ip4][..tcp] [......127.0.0.1][50662] -> [......127.0.0.1][.8080] + idle: [...551] [ip4][..tcp] [......127.0.0.1][50664] -> [......127.0.0.1][.8080] + idle: [...552] [ip4][..tcp] [......127.0.0.1][50666] -> [......127.0.0.1][.8080] + idle: [...553] [ip4][..tcp] [......127.0.0.1][50668] -> [......127.0.0.1][.8080] + idle: [...554] [ip4][..tcp] [......127.0.0.1][50670] -> [......127.0.0.1][.8080] + idle: [...555] [ip4][..tcp] [......127.0.0.1][50672] -> [......127.0.0.1][.8080] + idle: [...556] [ip4][..tcp] [......127.0.0.1][50674] -> [......127.0.0.1][.8080] + idle: [...557] [ip4][..tcp] [......127.0.0.1][50676] -> [......127.0.0.1][.8080] + idle: [...558] [ip4][..tcp] [......127.0.0.1][50678] -> [......127.0.0.1][.8080] + idle: [...559] [ip4][..tcp] [......127.0.0.1][50680] -> [......127.0.0.1][.8080] + idle: [...560] [ip4][..tcp] [......127.0.0.1][50682] -> [......127.0.0.1][.8080] + idle: [...561] [ip4][..tcp] [......127.0.0.1][50684] -> [......127.0.0.1][.8080] + idle: [...562] [ip4][..tcp] [......127.0.0.1][50686] -> [......127.0.0.1][.8080] + idle: [...563] [ip4][..tcp] [......127.0.0.1][50688] -> [......127.0.0.1][.8080] + idle: [...564] [ip4][..tcp] [......127.0.0.1][50690] -> [......127.0.0.1][.8080] + idle: [...565] [ip4][..tcp] [......127.0.0.1][50692] -> [......127.0.0.1][.8080] + idle: [...566] [ip4][..tcp] [......127.0.0.1][50694] -> [......127.0.0.1][.8080] + idle: [...567] [ip4][..tcp] [......127.0.0.1][50696] -> [......127.0.0.1][.8080] + idle: [...568] [ip4][..tcp] [......127.0.0.1][50698] -> [......127.0.0.1][.8080] + idle: [...569] [ip4][..tcp] [......127.0.0.1][50700] -> [......127.0.0.1][.8080] + idle: [...570] [ip4][..tcp] [......127.0.0.1][50702] -> [......127.0.0.1][.8080] + idle: [...571] [ip4][..tcp] [......127.0.0.1][50704] -> [......127.0.0.1][.8080] + idle: [...572] [ip4][..tcp] [......127.0.0.1][50706] -> [......127.0.0.1][.8080] + idle: [...573] [ip4][..tcp] [......127.0.0.1][50708] -> [......127.0.0.1][.8080] + idle: [...574] [ip4][..tcp] [......127.0.0.1][50710] -> [......127.0.0.1][.8080] + idle: [...575] [ip4][..tcp] [......127.0.0.1][50712] -> [......127.0.0.1][.8080] + idle: [...576] [ip4][..tcp] [......127.0.0.1][50714] -> [......127.0.0.1][.8080] + idle: [...577] [ip4][..tcp] [......127.0.0.1][50716] -> [......127.0.0.1][.8080] + idle: [...578] [ip4][..tcp] [......127.0.0.1][50718] -> [......127.0.0.1][.8080] + idle: [...579] [ip4][..tcp] [......127.0.0.1][50720] -> [......127.0.0.1][.8080] + idle: [...580] [ip4][..tcp] [......127.0.0.1][50722] -> [......127.0.0.1][.8080] + idle: [...581] [ip4][..tcp] [......127.0.0.1][50724] -> [......127.0.0.1][.8080] + idle: [...582] [ip4][..tcp] [......127.0.0.1][50726] -> [......127.0.0.1][.8080] + idle: [...583] [ip4][..tcp] [......127.0.0.1][50728] -> [......127.0.0.1][.8080] + idle: [...584] [ip4][..tcp] [......127.0.0.1][50730] -> [......127.0.0.1][.8080] + idle: [...585] [ip4][..tcp] [......127.0.0.1][50732] -> [......127.0.0.1][.8080] + idle: [...586] [ip4][..tcp] [......127.0.0.1][50734] -> [......127.0.0.1][.8080] + idle: [...587] [ip4][..tcp] [......127.0.0.1][50736] -> [......127.0.0.1][.8080] + idle: [...588] [ip4][..tcp] [......127.0.0.1][50738] -> [......127.0.0.1][.8080] + idle: [...589] [ip4][..tcp] [......127.0.0.1][50740] -> [......127.0.0.1][.8080] + idle: [...590] [ip4][..tcp] [......127.0.0.1][50742] -> [......127.0.0.1][.8080] + idle: [...591] [ip4][..tcp] [......127.0.0.1][50744] -> [......127.0.0.1][.8080] + idle: [...592] [ip4][..tcp] [......127.0.0.1][50746] -> [......127.0.0.1][.8080] + idle: [...593] [ip4][..tcp] [......127.0.0.1][50748] -> [......127.0.0.1][.8080] + idle: [...594] [ip4][..tcp] [......127.0.0.1][50750] -> [......127.0.0.1][.8080] + idle: [...595] [ip4][..tcp] [......127.0.0.1][50752] -> [......127.0.0.1][.8080] + idle: [...596] [ip4][..tcp] [......127.0.0.1][50754] -> [......127.0.0.1][.8080] + idle: [...597] [ip4][..tcp] [......127.0.0.1][50756] -> [......127.0.0.1][.8080] + idle: [...598] [ip4][..tcp] [......127.0.0.1][50758] -> [......127.0.0.1][.8080] + idle: [...599] [ip4][..tcp] [......127.0.0.1][50760] -> [......127.0.0.1][.8080] + idle: [...600] [ip4][..tcp] [......127.0.0.1][50762] -> [......127.0.0.1][.8080] + idle: [...601] [ip4][..tcp] [......127.0.0.1][50764] -> [......127.0.0.1][.8080] + idle: [...602] [ip4][..tcp] [......127.0.0.1][50766] -> [......127.0.0.1][.8080] + idle: [...603] [ip4][..tcp] [......127.0.0.1][50768] -> [......127.0.0.1][.8080] + idle: [...604] [ip4][..tcp] [......127.0.0.1][50770] -> [......127.0.0.1][.8080] + idle: [...605] [ip4][..tcp] [......127.0.0.1][50772] -> [......127.0.0.1][.8080] + idle: [...606] [ip4][..tcp] [......127.0.0.1][50774] -> [......127.0.0.1][.8080] + idle: [...607] [ip4][..tcp] [......127.0.0.1][50776] -> [......127.0.0.1][.8080] + idle: [...608] [ip4][..tcp] [......127.0.0.1][50778] -> [......127.0.0.1][.8080] + idle: [...609] [ip4][..tcp] [......127.0.0.1][50780] -> [......127.0.0.1][.8080] + idle: [...610] [ip4][..tcp] [......127.0.0.1][50782] -> [......127.0.0.1][.8080] + idle: [...611] [ip4][..tcp] [......127.0.0.1][50784] -> [......127.0.0.1][.8080] + idle: [...612] [ip4][..tcp] [......127.0.0.1][50786] -> [......127.0.0.1][.8080] + idle: [...613] [ip4][..tcp] [......127.0.0.1][50788] -> [......127.0.0.1][.8080] + idle: [...614] [ip4][..tcp] [......127.0.0.1][50790] -> [......127.0.0.1][.8080] + idle: [...615] [ip4][..tcp] [......127.0.0.1][50792] -> [......127.0.0.1][.8080] + idle: [...616] [ip4][..tcp] [......127.0.0.1][50794] -> [......127.0.0.1][.8080] + idle: [...617] [ip4][..tcp] [......127.0.0.1][50796] -> [......127.0.0.1][.8080] + idle: [...618] [ip4][..tcp] [......127.0.0.1][50798] -> [......127.0.0.1][.8080] + idle: [...619] [ip4][..tcp] [......127.0.0.1][50800] -> [......127.0.0.1][.8080] + idle: [...620] [ip4][..tcp] [......127.0.0.1][50802] -> [......127.0.0.1][.8080] + idle: [...621] [ip4][..tcp] [......127.0.0.1][50804] -> [......127.0.0.1][.8080] + idle: [...622] [ip4][..tcp] [......127.0.0.1][50806] -> [......127.0.0.1][.8080] + idle: [...623] [ip4][..tcp] [......127.0.0.1][50808] -> [......127.0.0.1][.8080] + idle: [...624] [ip4][..tcp] [......127.0.0.1][50810] -> [......127.0.0.1][.8080] + idle: [...625] [ip4][..tcp] [......127.0.0.1][50812] -> [......127.0.0.1][.8080] + idle: [...626] [ip4][..tcp] [......127.0.0.1][50814] -> [......127.0.0.1][.8080] + idle: [...627] [ip4][..tcp] [......127.0.0.1][50816] -> [......127.0.0.1][.8080] + idle: [...628] [ip4][..tcp] [......127.0.0.1][50818] -> [......127.0.0.1][.8080] + idle: [...629] [ip4][..tcp] [......127.0.0.1][50820] -> [......127.0.0.1][.8080] + idle: [...630] [ip4][..tcp] [......127.0.0.1][50822] -> [......127.0.0.1][.8080] + idle: [...631] [ip4][..tcp] [......127.0.0.1][50824] -> [......127.0.0.1][.8080] + idle: [...632] [ip4][..tcp] [......127.0.0.1][50826] -> [......127.0.0.1][.8080] + idle: [...633] [ip4][..tcp] [......127.0.0.1][50828] -> [......127.0.0.1][.8080] + idle: [...634] [ip4][..tcp] [......127.0.0.1][50830] -> [......127.0.0.1][.8080] + idle: [...635] [ip4][..tcp] [......127.0.0.1][50832] -> [......127.0.0.1][.8080] + idle: [...636] [ip4][..tcp] [......127.0.0.1][50834] -> [......127.0.0.1][.8080] + idle: [...637] [ip4][..tcp] [......127.0.0.1][50836] -> [......127.0.0.1][.8080] + idle: [...638] [ip4][..tcp] [......127.0.0.1][50838] -> [......127.0.0.1][.8080] + idle: [...639] [ip4][..tcp] [......127.0.0.1][50840] -> [......127.0.0.1][.8080] + idle: [...640] [ip4][..tcp] [......127.0.0.1][50842] -> [......127.0.0.1][.8080] + idle: [...641] [ip4][..tcp] [......127.0.0.1][50844] -> [......127.0.0.1][.8080] + idle: [...642] [ip4][..tcp] [......127.0.0.1][50846] -> [......127.0.0.1][.8080] + idle: [...643] [ip4][..tcp] [......127.0.0.1][50848] -> [......127.0.0.1][.8080] + idle: [...644] [ip4][..tcp] [......127.0.0.1][50850] -> [......127.0.0.1][.8080] + idle: [...645] [ip4][..tcp] [......127.0.0.1][50852] -> [......127.0.0.1][.8080] + idle: [...646] [ip4][..tcp] [......127.0.0.1][50854] -> [......127.0.0.1][.8080] + idle: [...647] [ip4][..tcp] [......127.0.0.1][50856] -> [......127.0.0.1][.8080] + idle: [...648] [ip4][..tcp] [......127.0.0.1][50858] -> [......127.0.0.1][.8080] + idle: [...649] [ip4][..tcp] [......127.0.0.1][50860] -> [......127.0.0.1][.8080] + idle: [...650] [ip4][..tcp] [......127.0.0.1][50862] -> [......127.0.0.1][.8080] + idle: [...651] [ip4][..tcp] [......127.0.0.1][50864] -> [......127.0.0.1][.8080] + idle: [...652] [ip4][..tcp] [......127.0.0.1][50866] -> [......127.0.0.1][.8080] + idle: [...653] [ip4][..tcp] [......127.0.0.1][50868] -> [......127.0.0.1][.8080] + idle: [...654] [ip4][..tcp] [......127.0.0.1][50870] -> [......127.0.0.1][.8080] + idle: [...655] [ip4][..tcp] [......127.0.0.1][50872] -> [......127.0.0.1][.8080] + idle: [...656] [ip4][..tcp] [......127.0.0.1][50874] -> [......127.0.0.1][.8080] + idle: [...657] [ip4][..tcp] [......127.0.0.1][50876] -> [......127.0.0.1][.8080] + idle: [...658] [ip4][..tcp] [......127.0.0.1][50878] -> [......127.0.0.1][.8080] + idle: [...659] [ip4][..tcp] [......127.0.0.1][50880] -> [......127.0.0.1][.8080] + idle: [...660] [ip4][..tcp] [......127.0.0.1][50882] -> [......127.0.0.1][.8080] + idle: [...661] [ip4][..tcp] [......127.0.0.1][50884] -> [......127.0.0.1][.8080] + idle: [...662] [ip4][..tcp] [......127.0.0.1][50886] -> [......127.0.0.1][.8080] + idle: [...663] [ip4][..tcp] [......127.0.0.1][50888] -> [......127.0.0.1][.8080] + idle: [...664] [ip4][..tcp] [......127.0.0.1][50890] -> [......127.0.0.1][.8080] + idle: [...665] [ip4][..tcp] [......127.0.0.1][50892] -> [......127.0.0.1][.8080] + idle: [...666] [ip4][..tcp] [......127.0.0.1][50894] -> [......127.0.0.1][.8080] + idle: [...667] [ip4][..tcp] [......127.0.0.1][50896] -> [......127.0.0.1][.8080] + idle: [...668] [ip4][..tcp] [......127.0.0.1][50898] -> [......127.0.0.1][.8080] + idle: [...669] [ip4][..tcp] [......127.0.0.1][50900] -> [......127.0.0.1][.8080] + idle: [...670] [ip4][..tcp] [......127.0.0.1][50902] -> [......127.0.0.1][.8080] + idle: [...671] [ip4][..tcp] [......127.0.0.1][50904] -> [......127.0.0.1][.8080] + idle: [...672] [ip4][..tcp] [......127.0.0.1][50906] -> [......127.0.0.1][.8080] + idle: [...673] [ip4][..tcp] [......127.0.0.1][50908] -> [......127.0.0.1][.8080] + idle: [...674] [ip4][..tcp] [......127.0.0.1][50910] -> [......127.0.0.1][.8080] + idle: [...675] [ip4][..tcp] [......127.0.0.1][50912] -> [......127.0.0.1][.8080] + idle: [...676] [ip4][..tcp] [......127.0.0.1][50914] -> [......127.0.0.1][.8080] + idle: [...677] [ip4][..tcp] [......127.0.0.1][50916] -> [......127.0.0.1][.8080] + idle: [...678] [ip4][..tcp] [......127.0.0.1][50918] -> [......127.0.0.1][.8080] + idle: [...679] [ip4][..tcp] [......127.0.0.1][50920] -> [......127.0.0.1][.8080] + idle: [...680] [ip4][..tcp] [......127.0.0.1][50922] -> [......127.0.0.1][.8080] + idle: [...681] [ip4][..tcp] [......127.0.0.1][50924] -> [......127.0.0.1][.8080] + idle: [...682] [ip4][..tcp] [......127.0.0.1][50926] -> [......127.0.0.1][.8080] + idle: [...683] [ip4][..tcp] [......127.0.0.1][50928] -> [......127.0.0.1][.8080] + idle: [...684] [ip4][..tcp] [......127.0.0.1][50930] -> [......127.0.0.1][.8080] + idle: [...685] [ip4][..tcp] [......127.0.0.1][50932] -> [......127.0.0.1][.8080] + idle: [...686] [ip4][..tcp] [......127.0.0.1][50934] -> [......127.0.0.1][.8080] + idle: [...687] [ip4][..tcp] [......127.0.0.1][50936] -> [......127.0.0.1][.8080] + idle: [...688] [ip4][..tcp] [......127.0.0.1][50938] -> [......127.0.0.1][.8080] + idle: [...689] [ip4][..tcp] [......127.0.0.1][50940] -> [......127.0.0.1][.8080] + idle: [...690] [ip4][..tcp] [......127.0.0.1][50942] -> [......127.0.0.1][.8080] + idle: [...691] [ip4][..tcp] [......127.0.0.1][50944] -> [......127.0.0.1][.8080] + idle: [...692] [ip4][..tcp] [......127.0.0.1][50946] -> [......127.0.0.1][.8080] + idle: [...693] [ip4][..tcp] [......127.0.0.1][50948] -> [......127.0.0.1][.8080] + idle: [...694] [ip4][..tcp] [......127.0.0.1][50950] -> [......127.0.0.1][.8080] + idle: [...695] [ip4][..tcp] [......127.0.0.1][50952] -> [......127.0.0.1][.8080] + idle: [...696] [ip4][..tcp] [......127.0.0.1][50954] -> [......127.0.0.1][.8080] + idle: [...697] [ip4][..tcp] [......127.0.0.1][50956] -> [......127.0.0.1][.8080] + idle: [...698] [ip4][..tcp] [......127.0.0.1][50958] -> [......127.0.0.1][.8080] + idle: [...699] [ip4][..tcp] [......127.0.0.1][50960] -> [......127.0.0.1][.8080] + idle: [...700] [ip4][..tcp] [......127.0.0.1][50962] -> [......127.0.0.1][.8080] + idle: [...701] [ip4][..tcp] [......127.0.0.1][50964] -> [......127.0.0.1][.8080] + idle: [...702] [ip4][..tcp] [......127.0.0.1][50966] -> [......127.0.0.1][.8080] + idle: [...703] [ip4][..tcp] [......127.0.0.1][50968] -> [......127.0.0.1][.8080] + idle: [...704] [ip4][..tcp] [......127.0.0.1][50970] -> [......127.0.0.1][.8080] + idle: [...705] [ip4][..tcp] [......127.0.0.1][50972] -> [......127.0.0.1][.8080] + idle: [...706] [ip4][..tcp] [......127.0.0.1][50974] -> [......127.0.0.1][.8080] + idle: [...707] [ip4][..tcp] [......127.0.0.1][50976] -> [......127.0.0.1][.8080] + idle: [...708] [ip4][..tcp] [......127.0.0.1][50978] -> [......127.0.0.1][.8080] + idle: [...709] [ip4][..tcp] [......127.0.0.1][50980] -> [......127.0.0.1][.8080] + idle: [...710] [ip4][..tcp] [......127.0.0.1][50982] -> [......127.0.0.1][.8080] + idle: [...711] [ip4][..tcp] [......127.0.0.1][50984] -> [......127.0.0.1][.8080] + idle: [...712] [ip4][..tcp] [......127.0.0.1][50986] -> [......127.0.0.1][.8080] + idle: [...713] [ip4][..tcp] [......127.0.0.1][50988] -> [......127.0.0.1][.8080] + idle: [...714] [ip4][..tcp] [......127.0.0.1][50990] -> [......127.0.0.1][.8080] + idle: [...715] [ip4][..tcp] [......127.0.0.1][50992] -> [......127.0.0.1][.8080] + idle: [...716] [ip4][..tcp] [......127.0.0.1][50994] -> [......127.0.0.1][.8080] + idle: [...717] [ip4][..tcp] [......127.0.0.1][50996] -> [......127.0.0.1][.8080] + idle: [...718] [ip4][..tcp] [......127.0.0.1][50998] -> [......127.0.0.1][.8080] + idle: [...719] [ip4][..tcp] [......127.0.0.1][51000] -> [......127.0.0.1][.8080] + idle: [...720] [ip4][..tcp] [......127.0.0.1][51002] -> [......127.0.0.1][.8080] + idle: [...721] [ip4][..tcp] [......127.0.0.1][51004] -> [......127.0.0.1][.8080] + idle: [...722] [ip4][..tcp] [......127.0.0.1][51006] -> [......127.0.0.1][.8080] + idle: [...723] [ip4][..tcp] [......127.0.0.1][51008] -> [......127.0.0.1][.8080] + idle: [...724] [ip4][..tcp] [......127.0.0.1][51010] -> [......127.0.0.1][.8080] + idle: [...725] [ip4][..tcp] [......127.0.0.1][51012] -> [......127.0.0.1][.8080] + idle: [...726] [ip4][..tcp] [......127.0.0.1][51014] -> [......127.0.0.1][.8080] + idle: [...727] [ip4][..tcp] [......127.0.0.1][51016] -> [......127.0.0.1][.8080] + idle: [...728] [ip4][..tcp] [......127.0.0.1][51018] -> [......127.0.0.1][.8080] + idle: [...729] [ip4][..tcp] [......127.0.0.1][51020] -> [......127.0.0.1][.8080] + idle: [...730] [ip4][..tcp] [......127.0.0.1][51022] -> [......127.0.0.1][.8080] + idle: [...731] [ip4][..tcp] [......127.0.0.1][51024] -> [......127.0.0.1][.8080] + idle: [...732] [ip4][..tcp] [......127.0.0.1][51026] -> [......127.0.0.1][.8080] + idle: [...733] [ip4][..tcp] [......127.0.0.1][51028] -> [......127.0.0.1][.8080] + idle: [...734] [ip4][..tcp] [......127.0.0.1][51030] -> [......127.0.0.1][.8080] + idle: [...735] [ip4][..tcp] [......127.0.0.1][51032] -> [......127.0.0.1][.8080] + idle: [...736] [ip4][..tcp] [......127.0.0.1][51034] -> [......127.0.0.1][.8080] + idle: [...737] [ip4][..tcp] [......127.0.0.1][51036] -> [......127.0.0.1][.8080] + idle: [...738] [ip4][..tcp] [......127.0.0.1][51038] -> [......127.0.0.1][.8080] + idle: [...739] [ip4][..tcp] [......127.0.0.1][51040] -> [......127.0.0.1][.8080] + idle: [...740] [ip4][..tcp] [......127.0.0.1][51042] -> [......127.0.0.1][.8080] + idle: [...741] [ip4][..tcp] [......127.0.0.1][51044] -> [......127.0.0.1][.8080] + idle: [...742] [ip4][..tcp] [......127.0.0.1][51046] -> [......127.0.0.1][.8080] + idle: [...743] [ip4][..tcp] [......127.0.0.1][51048] -> [......127.0.0.1][.8080] + idle: [...744] [ip4][..tcp] [......127.0.0.1][51050] -> [......127.0.0.1][.8080] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/WebattackSQLinj.pcap.out b/test/results/flow-info/WebattackSQLinj.pcap.out new file mode 100644 index 000000000..f68c45e3c --- /dev/null +++ b/test/results/flow-info/WebattackSQLinj.pcap.out @@ -0,0 +1,49 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....172.16.0.1][36196] -> [..192.168.10.50][...80] + detected: [.....1] [ip4][..tcp] [.....172.16.0.1][36196] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [.....2] [ip4][..tcp] [.....172.16.0.1][36198] -> [..192.168.10.50][...80] + detected: [.....2] [ip4][..tcp] [.....172.16.0.1][36198] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [.....3] [ip4][..tcp] [.....172.16.0.1][36200] -> [..192.168.10.50][...80] + detected: [.....3] [ip4][..tcp] [.....172.16.0.1][36200] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [.....4] [ip4][..tcp] [.....172.16.0.1][36202] -> [..192.168.10.50][...80] + detected: [.....4] [ip4][..tcp] [.....172.16.0.1][36202] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [.....5] [ip4][..tcp] [.....172.16.0.1][36204] -> [..192.168.10.50][...80] + detected: [.....5] [ip4][..tcp] [.....172.16.0.1][36204] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [.....6] [ip4][..tcp] [.....172.16.0.1][36206] -> [..192.168.10.50][...80] + detected: [.....6] [ip4][..tcp] [.....172.16.0.1][36206] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [.....7] [ip4][..tcp] [.....172.16.0.1][36208] -> [..192.168.10.50][...80] + detected: [.....7] [ip4][..tcp] [.....172.16.0.1][36208] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [.....8] [ip4][..tcp] [.....172.16.0.1][36210] -> [..192.168.10.50][...80] + detected: [.....8] [ip4][..tcp] [.....172.16.0.1][36210] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [.....9] [ip4][..tcp] [.....172.16.0.1][36212] -> [..192.168.10.50][...80] + detected: [.....9] [ip4][..tcp] [.....172.16.0.1][36212] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + end: [.....1] [ip4][..tcp] [.....172.16.0.1][36196] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + end: [.....2] [ip4][..tcp] [.....172.16.0.1][36198] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: SQL Injection, HTTP Numeric IP Address + end: [.....3] [ip4][..tcp] [.....172.16.0.1][36200] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: SQL Injection, HTTP Numeric IP Address + end: [.....4] [ip4][..tcp] [.....172.16.0.1][36202] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: SQL Injection, HTTP Numeric IP Address + end: [.....5] [ip4][..tcp] [.....172.16.0.1][36204] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: SQL Injection, HTTP Numeric IP Address + end: [.....6] [ip4][..tcp] [.....172.16.0.1][36206] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + end: [.....7] [ip4][..tcp] [.....172.16.0.1][36208] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: SQL Injection, HTTP Numeric IP Address + end: [.....8] [ip4][..tcp] [.....172.16.0.1][36210] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: SQL Injection, HTTP Numeric IP Address + end: [.....9] [ip4][..tcp] [.....172.16.0.1][36212] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: SQL Injection, HTTP Numeric IP Address + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/WebattackXSS.pcap.out b/test/results/flow-info/WebattackXSS.pcap.out new file mode 100644 index 000000000..1649e16f3 --- /dev/null +++ b/test/results/flow-info/WebattackXSS.pcap.out @@ -0,0 +1,2166 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....172.16.0.1][52098] -> [..192.168.10.50][...80] + detected: [.....1] [ip4][..tcp] [.....172.16.0.1][52098] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [.....2] [ip4][..tcp] [.....172.16.0.1][52100] -> [..192.168.10.50][...80] + new: [.....3] [ip4][..tcp] [.....172.16.0.1][52118] -> [..192.168.10.50][...80] + new: [.....4] [ip4][..tcp] [.....172.16.0.1][52120] -> [..192.168.10.50][...80] + new: [.....5] [ip4][..tcp] [.....172.16.0.1][52200] -> [..192.168.10.50][...80] + detected: [.....5] [ip4][..tcp] [.....172.16.0.1][52200] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [.....6] [ip4][..tcp] [.....172.16.0.1][52202] -> [..192.168.10.50][...80] + new: [.....7] [ip4][..tcp] [.....172.16.0.1][52220] -> [..192.168.10.50][...80] + new: [.....8] [ip4][..tcp] [.....172.16.0.1][52222] -> [..192.168.10.50][...80] + analyse: [.....5] [ip4][..tcp] [.....172.16.0.1][52200] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.805| 0.259| 0.699] + [IAT(c->s)...: 0.000| 2.804| 0.212| 0.639][IAT(s->c)...: 0.000| 2.805| 0.335| 0.779] + [PKTLEN(c->s): 66.000| 625.000| 215.000| 187.800][PKTLEN(s->c): 66.000|7992.000|1204.400|2089.100] + [BINS(c->s)..: 12,0,0,0,0,0,0,0,0,2,2,2,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,0,0,0,0,0,0,0,0,0,1,0,0,0,2,2,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,1] + new: [.....9] [ip4][..tcp] [.....172.16.0.1][52298] -> [..192.168.10.50][...80] + detected: [.....9] [ip4][..tcp] [.....172.16.0.1][52298] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [....10] [ip4][..tcp] [.....172.16.0.1][52300] -> [..192.168.10.50][...80] + new: [....11] [ip4][..tcp] [.....172.16.0.1][52318] -> [..192.168.10.50][...80] + new: [....12] [ip4][..tcp] [.....172.16.0.1][52320] -> [..192.168.10.50][...80] + analyse: [.....9] [ip4][..tcp] [.....172.16.0.1][52298] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.856| 0.080| 0.207] + [IAT(c->s)...: 0.000| 0.852| 0.065| 0.188][IAT(s->c)...: 0.000| 0.856| 0.103| 0.231] + [PKTLEN(c->s): 66.000| 625.000| 216.300| 189.300][PKTLEN(s->c): 66.000|4410.000|1311.500|1460.300] + [BINS(c->s)..: 12,0,0,0,0,0,0,0,0,2,2,2,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,1,0,0,0,2,1,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,3] + detected: [....10] [ip4][..tcp] [.....172.16.0.1][52300] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + detected: [....11] [ip4][..tcp] [.....172.16.0.1][52318] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [....13] [ip4][..tcp] [.....172.16.0.1][52386] -> [..192.168.10.50][...80] + new: [....14] [ip4][..tcp] [.....172.16.0.1][52400] -> [..192.168.10.50][...80] + new: [....15] [ip4][..tcp] [.....172.16.0.1][52414] -> [..192.168.10.50][...80] + new: [....16] [ip4][..tcp] [.....172.16.0.1][52440] -> [..192.168.10.50][...80] + new: [....17] [ip4][..tcp] [.....172.16.0.1][52454] -> [..192.168.10.50][...80] + new: [....18] [ip4][..tcp] [.....172.16.0.1][52480] -> [..192.168.10.50][...80] + new: [....19] [ip4][..tcp] [.....172.16.0.1][52494] -> [..192.168.10.50][...80] + new: [....20] [ip4][..tcp] [.....172.16.0.1][52508] -> [..192.168.10.50][...80] + new: [....21] [ip4][..tcp] [.....172.16.0.1][52534] -> [..192.168.10.50][...80] + new: [....22] [ip4][..tcp] [.....172.16.0.1][52548] -> [..192.168.10.50][...80] + new: [....23] [ip4][..tcp] [.....172.16.0.1][52574] -> [..192.168.10.50][...80] + new: [....24] [ip4][..tcp] [.....172.16.0.1][52588] -> [..192.168.10.50][...80] + new: [....25] [ip4][..tcp] [.....172.16.0.1][52602] -> [..192.168.10.50][...80] + new: [....26] [ip4][..tcp] [.....172.16.0.1][52628] -> [..192.168.10.50][...80] + new: [....27] [ip4][..tcp] [.....172.16.0.1][52642] -> [..192.168.10.50][...80] + new: [....28] [ip4][..tcp] [.....172.16.0.1][52668] -> [..192.168.10.50][...80] + new: [....29] [ip4][..tcp] [.....172.16.0.1][52682] -> [..192.168.10.50][...80] + new: [....30] [ip4][..tcp] [.....172.16.0.1][52696] -> [..192.168.10.50][...80] + new: [....31] [ip4][..tcp] [.....172.16.0.1][52722] -> [..192.168.10.50][...80] + new: [....32] [ip4][..tcp] [.....172.16.0.1][52736] -> [..192.168.10.50][...80] + new: [....33] [ip4][..tcp] [.....172.16.0.1][52750] -> [..192.168.10.50][...80] + new: [....34] [ip4][..tcp] [.....172.16.0.1][52776] -> [..192.168.10.50][...80] + new: [....35] [ip4][..tcp] [.....172.16.0.1][52790] -> [..192.168.10.50][...80] + new: [....36] [ip4][..tcp] [.....172.16.0.1][52816] -> [..192.168.10.50][...80] + new: [....37] [ip4][..tcp] [.....172.16.0.1][52830] -> [..192.168.10.50][...80] + new: [....38] [ip4][..tcp] [.....172.16.0.1][52856] -> [..192.168.10.50][...80] + new: [....39] [ip4][..tcp] [.....172.16.0.1][52870] -> [..192.168.10.50][...80] + new: [....40] [ip4][..tcp] [.....172.16.0.1][52884] -> [..192.168.10.50][...80] + new: [....41] [ip4][..tcp] [.....172.16.0.1][52910] -> [..192.168.10.50][...80] + new: [....42] [ip4][..tcp] [.....172.16.0.1][52924] -> [..192.168.10.50][...80] + new: [....43] [ip4][..tcp] [.....172.16.0.1][52938] -> [..192.168.10.50][...80] + detected: [....41] [ip4][..tcp] [.....172.16.0.1][52910] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [....44] [ip4][..tcp] [.....172.16.0.1][52964] -> [..192.168.10.50][...80] + new: [....45] [ip4][..tcp] [.....172.16.0.1][52978] -> [..192.168.10.50][...80] + new: [....46] [ip4][..tcp] [.....172.16.0.1][53004] -> [..192.168.10.50][...80] + analyse: [....41] [ip4][..tcp] [.....172.16.0.1][52910] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.809| 0.610| 0.941] + [IAT(c->s)...: 0.001| 3.808| 0.498| 0.866][IAT(s->c)...: 0.000| 3.809| 0.814| 1.032] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1559.300| 703.400] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [....47] [ip4][..tcp] [.....172.16.0.1][53018] -> [..192.168.10.50][...80] + new: [....48] [ip4][..tcp] [.....172.16.0.1][53032] -> [..192.168.10.50][...80] + new: [....49] [ip4][..tcp] [.....172.16.0.1][53058] -> [..192.168.10.50][...80] + new: [....50] [ip4][..tcp] [.....172.16.0.1][53072] -> [..192.168.10.50][...80] + new: [....51] [ip4][..tcp] [.....172.16.0.1][53098] -> [..192.168.10.50][...80] + new: [....52] [ip4][..tcp] [.....172.16.0.1][53112] -> [..192.168.10.50][...80] + new: [....53] [ip4][..tcp] [.....172.16.0.1][53126] -> [..192.168.10.50][...80] + new: [....54] [ip4][..tcp] [.....172.16.0.1][53152] -> [..192.168.10.50][...80] + new: [....55] [ip4][..tcp] [.....172.16.0.1][53166] -> [..192.168.10.50][...80] + new: [....56] [ip4][..tcp] [.....172.16.0.1][53192] -> [..192.168.10.50][...80] + new: [....57] [ip4][..tcp] [.....172.16.0.1][53206] -> [..192.168.10.50][...80] + new: [....58] [ip4][..tcp] [.....172.16.0.1][53220] -> [..192.168.10.50][...80] + new: [....59] [ip4][..tcp] [.....172.16.0.1][53246] -> [..192.168.10.50][...80] + new: [....60] [ip4][..tcp] [.....172.16.0.1][53260] -> [..192.168.10.50][...80] + end: [.....1] [ip4][..tcp] [.....172.16.0.1][52098] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + guessed: [.....2] [ip4][..tcp] [.....172.16.0.1][52100] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [.....2] [ip4][..tcp] [.....172.16.0.1][52100] -> [..192.168.10.50][...80] + guessed: [.....3] [ip4][..tcp] [.....172.16.0.1][52118] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [.....3] [ip4][..tcp] [.....172.16.0.1][52118] -> [..192.168.10.50][...80] + guessed: [.....4] [ip4][..tcp] [.....172.16.0.1][52120] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [.....4] [ip4][..tcp] [.....172.16.0.1][52120] -> [..192.168.10.50][...80] + new: [....61] [ip4][..tcp] [.....172.16.0.1][53286] -> [..192.168.10.50][...80] + new: [....62] [ip4][..tcp] [.....172.16.0.1][53300] -> [..192.168.10.50][...80] + new: [....63] [ip4][..tcp] [.....172.16.0.1][53314] -> [..192.168.10.50][...80] + new: [....64] [ip4][..tcp] [.....172.16.0.1][53340] -> [..192.168.10.50][...80] + new: [....65] [ip4][..tcp] [.....172.16.0.1][53354] -> [..192.168.10.50][...80] + new: [....66] [ip4][..tcp] [.....172.16.0.1][53380] -> [..192.168.10.50][...80] + new: [....67] [ip4][..tcp] [.....172.16.0.1][53394] -> [..192.168.10.50][...80] + new: [....68] [ip4][..tcp] [.....172.16.0.1][53408] -> [..192.168.10.50][...80] + new: [....69] [ip4][..tcp] [.....172.16.0.1][53422] -> [..192.168.10.50][...80] + new: [....70] [ip4][..tcp] [.....172.16.0.1][53436] -> [..192.168.10.50][...80] + new: [....71] [ip4][..tcp] [.....172.16.0.1][53450] -> [..192.168.10.50][...80] + new: [....72] [ip4][..tcp] [.....172.16.0.1][53476] -> [..192.168.10.50][...80] + new: [....73] [ip4][..tcp] [.....172.16.0.1][53490] -> [..192.168.10.50][...80] + end: [.....5] [ip4][..tcp] [.....172.16.0.1][52200] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + guessed: [.....6] [ip4][..tcp] [.....172.16.0.1][52202] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [.....6] [ip4][..tcp] [.....172.16.0.1][52202] -> [..192.168.10.50][...80] + guessed: [.....7] [ip4][..tcp] [.....172.16.0.1][52220] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [.....7] [ip4][..tcp] [.....172.16.0.1][52220] -> [..192.168.10.50][...80] + guessed: [.....8] [ip4][..tcp] [.....172.16.0.1][52222] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [.....8] [ip4][..tcp] [.....172.16.0.1][52222] -> [..192.168.10.50][...80] + new: [....74] [ip4][..tcp] [.....172.16.0.1][53516] -> [..192.168.10.50][...80] + new: [....75] [ip4][..tcp] [.....172.16.0.1][53530] -> [..192.168.10.50][...80] + new: [....76] [ip4][..tcp] [.....172.16.0.1][53544] -> [..192.168.10.50][...80] + new: [....77] [ip4][..tcp] [.....172.16.0.1][53570] -> [..192.168.10.50][...80] + new: [....78] [ip4][..tcp] [.....172.16.0.1][53584] -> [..192.168.10.50][...80] + new: [....79] [ip4][..tcp] [.....172.16.0.1][53598] -> [..192.168.10.50][...80] + new: [....80] [ip4][..tcp] [.....172.16.0.1][53624] -> [..192.168.10.50][...80] + detected: [....78] [ip4][..tcp] [.....172.16.0.1][53584] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [....81] [ip4][..tcp] [.....172.16.0.1][53638] -> [..192.168.10.50][...80] + new: [....82] [ip4][..tcp] [.....172.16.0.1][53664] -> [..192.168.10.50][...80] + new: [....83] [ip4][..tcp] [.....172.16.0.1][53678] -> [..192.168.10.50][...80] + new: [....84] [ip4][..tcp] [.....172.16.0.1][53692] -> [..192.168.10.50][...80] + analyse: [....78] [ip4][..tcp] [.....172.16.0.1][53584] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.899| 0.653| 1.186] + [IAT(c->s)...: 0.001| 4.898| 0.513| 1.076][IAT(s->c)...: 0.000| 4.899| 0.909| 1.326] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1934.000|1550.300| 699.200] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + end: [....10] [ip4][..tcp] [.....172.16.0.1][52300] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + end: [....11] [ip4][..tcp] [.....172.16.0.1][52318] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + guessed: [....12] [ip4][..tcp] [.....172.16.0.1][52320] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....12] [ip4][..tcp] [.....172.16.0.1][52320] -> [..192.168.10.50][...80] + guessed: [....13] [ip4][..tcp] [.....172.16.0.1][52386] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....13] [ip4][..tcp] [.....172.16.0.1][52386] -> [..192.168.10.50][...80] + new: [....85] [ip4][..tcp] [.....172.16.0.1][53718] -> [..192.168.10.50][...80] + new: [....86] [ip4][..tcp] [.....172.16.0.1][53732] -> [..192.168.10.50][...80] + new: [....87] [ip4][..tcp] [.....172.16.0.1][53758] -> [..192.168.10.50][...80] + new: [....88] [ip4][..tcp] [.....172.16.0.1][53772] -> [..192.168.10.50][...80] + new: [....89] [ip4][..tcp] [.....172.16.0.1][53786] -> [..192.168.10.50][...80] + new: [....90] [ip4][..tcp] [.....172.16.0.1][53812] -> [..192.168.10.50][...80] + guessed: [....14] [ip4][..tcp] [.....172.16.0.1][52400] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....14] [ip4][..tcp] [.....172.16.0.1][52400] -> [..192.168.10.50][...80] + guessed: [....15] [ip4][..tcp] [.....172.16.0.1][52414] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....15] [ip4][..tcp] [.....172.16.0.1][52414] -> [..192.168.10.50][...80] + guessed: [....16] [ip4][..tcp] [.....172.16.0.1][52440] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....16] [ip4][..tcp] [.....172.16.0.1][52440] -> [..192.168.10.50][...80] + guessed: [....17] [ip4][..tcp] [.....172.16.0.1][52454] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....17] [ip4][..tcp] [.....172.16.0.1][52454] -> [..192.168.10.50][...80] + guessed: [....18] [ip4][..tcp] [.....172.16.0.1][52480] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....18] [ip4][..tcp] [.....172.16.0.1][52480] -> [..192.168.10.50][...80] + guessed: [....19] [ip4][..tcp] [.....172.16.0.1][52494] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....19] [ip4][..tcp] [.....172.16.0.1][52494] -> [..192.168.10.50][...80] + new: [....91] [ip4][..tcp] [.....172.16.0.1][53826] -> [..192.168.10.50][...80] + new: [....92] [ip4][..tcp] [.....172.16.0.1][53852] -> [..192.168.10.50][...80] + new: [....93] [ip4][..tcp] [.....172.16.0.1][53866] -> [..192.168.10.50][...80] + new: [....94] [ip4][..tcp] [.....172.16.0.1][53880] -> [..192.168.10.50][...80] + new: [....95] [ip4][..tcp] [.....172.16.0.1][53906] -> [..192.168.10.50][...80] + new: [....96] [ip4][..tcp] [.....172.16.0.1][53920] -> [..192.168.10.50][...80] + guessed: [....20] [ip4][..tcp] [.....172.16.0.1][52508] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....20] [ip4][..tcp] [.....172.16.0.1][52508] -> [..192.168.10.50][...80] + guessed: [....21] [ip4][..tcp] [.....172.16.0.1][52534] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....21] [ip4][..tcp] [.....172.16.0.1][52534] -> [..192.168.10.50][...80] + guessed: [....22] [ip4][..tcp] [.....172.16.0.1][52548] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....22] [ip4][..tcp] [.....172.16.0.1][52548] -> [..192.168.10.50][...80] + guessed: [....23] [ip4][..tcp] [.....172.16.0.1][52574] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....23] [ip4][..tcp] [.....172.16.0.1][52574] -> [..192.168.10.50][...80] + guessed: [....24] [ip4][..tcp] [.....172.16.0.1][52588] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....24] [ip4][..tcp] [.....172.16.0.1][52588] -> [..192.168.10.50][...80] + guessed: [....25] [ip4][..tcp] [.....172.16.0.1][52602] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....25] [ip4][..tcp] [.....172.16.0.1][52602] -> [..192.168.10.50][...80] + new: [....97] [ip4][..tcp] [.....172.16.0.1][53946] -> [..192.168.10.50][...80] + new: [....98] [ip4][..tcp] [.....172.16.0.1][53960] -> [..192.168.10.50][...80] + new: [....99] [ip4][..tcp] [.....172.16.0.1][53974] -> [..192.168.10.50][...80] + new: [...100] [ip4][..tcp] [.....172.16.0.1][54000] -> [..192.168.10.50][...80] + new: [...101] [ip4][..tcp] [.....172.16.0.1][54014] -> [..192.168.10.50][...80] + guessed: [....26] [ip4][..tcp] [.....172.16.0.1][52628] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....26] [ip4][..tcp] [.....172.16.0.1][52628] -> [..192.168.10.50][...80] + guessed: [....27] [ip4][..tcp] [.....172.16.0.1][52642] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....27] [ip4][..tcp] [.....172.16.0.1][52642] -> [..192.168.10.50][...80] + guessed: [....28] [ip4][..tcp] [.....172.16.0.1][52668] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....28] [ip4][..tcp] [.....172.16.0.1][52668] -> [..192.168.10.50][...80] + guessed: [....29] [ip4][..tcp] [.....172.16.0.1][52682] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....29] [ip4][..tcp] [.....172.16.0.1][52682] -> [..192.168.10.50][...80] + guessed: [....30] [ip4][..tcp] [.....172.16.0.1][52696] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....30] [ip4][..tcp] [.....172.16.0.1][52696] -> [..192.168.10.50][...80] + new: [...102] [ip4][..tcp] [.....172.16.0.1][54040] -> [..192.168.10.50][...80] + new: [...103] [ip4][..tcp] [.....172.16.0.1][54054] -> [..192.168.10.50][...80] + new: [...104] [ip4][..tcp] [.....172.16.0.1][54068] -> [..192.168.10.50][...80] + new: [...105] [ip4][..tcp] [.....172.16.0.1][54094] -> [..192.168.10.50][...80] + new: [...106] [ip4][..tcp] [.....172.16.0.1][54108] -> [..192.168.10.50][...80] + new: [...107] [ip4][..tcp] [.....172.16.0.1][54134] -> [..192.168.10.50][...80] + guessed: [....36] [ip4][..tcp] [.....172.16.0.1][52816] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....36] [ip4][..tcp] [.....172.16.0.1][52816] -> [..192.168.10.50][...80] + guessed: [....31] [ip4][..tcp] [.....172.16.0.1][52722] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....31] [ip4][..tcp] [.....172.16.0.1][52722] -> [..192.168.10.50][...80] + guessed: [....32] [ip4][..tcp] [.....172.16.0.1][52736] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....32] [ip4][..tcp] [.....172.16.0.1][52736] -> [..192.168.10.50][...80] + guessed: [....33] [ip4][..tcp] [.....172.16.0.1][52750] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....33] [ip4][..tcp] [.....172.16.0.1][52750] -> [..192.168.10.50][...80] + guessed: [....34] [ip4][..tcp] [.....172.16.0.1][52776] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....34] [ip4][..tcp] [.....172.16.0.1][52776] -> [..192.168.10.50][...80] + guessed: [....35] [ip4][..tcp] [.....172.16.0.1][52790] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....35] [ip4][..tcp] [.....172.16.0.1][52790] -> [..192.168.10.50][...80] + new: [...108] [ip4][..tcp] [.....172.16.0.1][54148] -> [..192.168.10.50][...80] + new: [...109] [ip4][..tcp] [.....172.16.0.1][54162] -> [..192.168.10.50][...80] + new: [...110] [ip4][..tcp] [.....172.16.0.1][54188] -> [..192.168.10.50][...80] + new: [...111] [ip4][..tcp] [.....172.16.0.1][54202] -> [..192.168.10.50][...80] + new: [...112] [ip4][..tcp] [.....172.16.0.1][54228] -> [..192.168.10.50][...80] + new: [...113] [ip4][..tcp] [.....172.16.0.1][54242] -> [..192.168.10.50][...80] + guessed: [....37] [ip4][..tcp] [.....172.16.0.1][52830] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....37] [ip4][..tcp] [.....172.16.0.1][52830] -> [..192.168.10.50][...80] + guessed: [....38] [ip4][..tcp] [.....172.16.0.1][52856] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....38] [ip4][..tcp] [.....172.16.0.1][52856] -> [..192.168.10.50][...80] + guessed: [....39] [ip4][..tcp] [.....172.16.0.1][52870] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....39] [ip4][..tcp] [.....172.16.0.1][52870] -> [..192.168.10.50][...80] + guessed: [....40] [ip4][..tcp] [.....172.16.0.1][52884] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....40] [ip4][..tcp] [.....172.16.0.1][52884] -> [..192.168.10.50][...80] + guessed: [....42] [ip4][..tcp] [.....172.16.0.1][52924] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....42] [ip4][..tcp] [.....172.16.0.1][52924] -> [..192.168.10.50][...80] + end: [.....9] [ip4][..tcp] [.....172.16.0.1][52298] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...114] [ip4][..tcp] [.....172.16.0.1][54268] -> [..192.168.10.50][...80] + new: [...115] [ip4][..tcp] [.....172.16.0.1][54282] -> [..192.168.10.50][...80] + new: [...116] [ip4][..tcp] [.....172.16.0.1][54296] -> [..192.168.10.50][...80] + detected: [...114] [ip4][..tcp] [.....172.16.0.1][54268] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...117] [ip4][..tcp] [.....172.16.0.1][54322] -> [..192.168.10.50][...80] + new: [...118] [ip4][..tcp] [.....172.16.0.1][54336] -> [..192.168.10.50][...80] + guessed: [....43] [ip4][..tcp] [.....172.16.0.1][52938] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....43] [ip4][..tcp] [.....172.16.0.1][52938] -> [..192.168.10.50][...80] + guessed: [....44] [ip4][..tcp] [.....172.16.0.1][52964] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....44] [ip4][..tcp] [.....172.16.0.1][52964] -> [..192.168.10.50][...80] + guessed: [....45] [ip4][..tcp] [.....172.16.0.1][52978] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....45] [ip4][..tcp] [.....172.16.0.1][52978] -> [..192.168.10.50][...80] + guessed: [....46] [ip4][..tcp] [.....172.16.0.1][53004] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....46] [ip4][..tcp] [.....172.16.0.1][53004] -> [..192.168.10.50][...80] + guessed: [....47] [ip4][..tcp] [.....172.16.0.1][53018] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....47] [ip4][..tcp] [.....172.16.0.1][53018] -> [..192.168.10.50][...80] + guessed: [....48] [ip4][..tcp] [.....172.16.0.1][53032] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....48] [ip4][..tcp] [.....172.16.0.1][53032] -> [..192.168.10.50][...80] + new: [...119] [ip4][..tcp] [.....172.16.0.1][54362] -> [..192.168.10.50][...80] + analyse: [...114] [ip4][..tcp] [.....172.16.0.1][54268] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.827| 0.609| 0.943] + [IAT(c->s)...: 0.001| 3.826| 0.497| 0.869][IAT(s->c)...: 0.000| 3.827| 0.811| 1.036] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1559.200| 703.400] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...120] [ip4][..tcp] [.....172.16.0.1][54376] -> [..192.168.10.50][...80] + new: [...121] [ip4][..tcp] [.....172.16.0.1][54390] -> [..192.168.10.50][...80] + new: [...122] [ip4][..tcp] [.....172.16.0.1][54416] -> [..192.168.10.50][...80] + new: [...123] [ip4][..tcp] [.....172.16.0.1][54430] -> [..192.168.10.50][...80] + new: [...124] [ip4][..tcp] [.....172.16.0.1][54456] -> [..192.168.10.50][...80] + guessed: [....49] [ip4][..tcp] [.....172.16.0.1][53058] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....49] [ip4][..tcp] [.....172.16.0.1][53058] -> [..192.168.10.50][...80] + guessed: [....50] [ip4][..tcp] [.....172.16.0.1][53072] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....50] [ip4][..tcp] [.....172.16.0.1][53072] -> [..192.168.10.50][...80] + guessed: [....51] [ip4][..tcp] [.....172.16.0.1][53098] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....51] [ip4][..tcp] [.....172.16.0.1][53098] -> [..192.168.10.50][...80] + guessed: [....52] [ip4][..tcp] [.....172.16.0.1][53112] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....52] [ip4][..tcp] [.....172.16.0.1][53112] -> [..192.168.10.50][...80] + guessed: [....53] [ip4][..tcp] [.....172.16.0.1][53126] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....53] [ip4][..tcp] [.....172.16.0.1][53126] -> [..192.168.10.50][...80] + new: [...125] [ip4][..tcp] [.....172.16.0.1][54470] -> [..192.168.10.50][...80] + new: [...126] [ip4][..tcp] [.....172.16.0.1][54484] -> [..192.168.10.50][...80] + new: [...127] [ip4][..tcp] [.....172.16.0.1][54510] -> [..192.168.10.50][...80] + new: [...128] [ip4][..tcp] [.....172.16.0.1][54524] -> [..192.168.10.50][...80] + new: [...129] [ip4][..tcp] [.....172.16.0.1][54538] -> [..192.168.10.50][...80] + new: [...130] [ip4][..tcp] [.....172.16.0.1][54552] -> [..192.168.10.50][...80] + new: [...131] [ip4][..tcp] [.....172.16.0.1][54566] -> [..192.168.10.50][...80] + guessed: [....54] [ip4][..tcp] [.....172.16.0.1][53152] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....54] [ip4][..tcp] [.....172.16.0.1][53152] -> [..192.168.10.50][...80] + guessed: [....55] [ip4][..tcp] [.....172.16.0.1][53166] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....55] [ip4][..tcp] [.....172.16.0.1][53166] -> [..192.168.10.50][...80] + guessed: [....56] [ip4][..tcp] [.....172.16.0.1][53192] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....56] [ip4][..tcp] [.....172.16.0.1][53192] -> [..192.168.10.50][...80] + guessed: [....57] [ip4][..tcp] [.....172.16.0.1][53206] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....57] [ip4][..tcp] [.....172.16.0.1][53206] -> [..192.168.10.50][...80] + guessed: [....58] [ip4][..tcp] [.....172.16.0.1][53220] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....58] [ip4][..tcp] [.....172.16.0.1][53220] -> [..192.168.10.50][...80] + guessed: [....59] [ip4][..tcp] [.....172.16.0.1][53246] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....59] [ip4][..tcp] [.....172.16.0.1][53246] -> [..192.168.10.50][...80] + guessed: [....60] [ip4][..tcp] [.....172.16.0.1][53260] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....60] [ip4][..tcp] [.....172.16.0.1][53260] -> [..192.168.10.50][...80] + new: [...132] [ip4][..tcp] [.....172.16.0.1][54580] -> [..192.168.10.50][...80] + new: [...133] [ip4][..tcp] [.....172.16.0.1][54606] -> [..192.168.10.50][...80] + new: [...134] [ip4][..tcp] [.....172.16.0.1][54620] -> [..192.168.10.50][...80] + new: [...135] [ip4][..tcp] [.....172.16.0.1][54634] -> [..192.168.10.50][...80] + new: [...136] [ip4][..tcp] [.....172.16.0.1][54660] -> [..192.168.10.50][...80] + new: [...137] [ip4][..tcp] [.....172.16.0.1][54674] -> [..192.168.10.50][...80] + guessed: [....61] [ip4][..tcp] [.....172.16.0.1][53286] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....61] [ip4][..tcp] [.....172.16.0.1][53286] -> [..192.168.10.50][...80] + guessed: [....62] [ip4][..tcp] [.....172.16.0.1][53300] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....62] [ip4][..tcp] [.....172.16.0.1][53300] -> [..192.168.10.50][...80] + guessed: [....63] [ip4][..tcp] [.....172.16.0.1][53314] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....63] [ip4][..tcp] [.....172.16.0.1][53314] -> [..192.168.10.50][...80] + guessed: [....64] [ip4][..tcp] [.....172.16.0.1][53340] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....64] [ip4][..tcp] [.....172.16.0.1][53340] -> [..192.168.10.50][...80] + guessed: [....65] [ip4][..tcp] [.....172.16.0.1][53354] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....65] [ip4][..tcp] [.....172.16.0.1][53354] -> [..192.168.10.50][...80] + new: [...138] [ip4][..tcp] [.....172.16.0.1][54688] -> [..192.168.10.50][...80] + new: [...139] [ip4][..tcp] [.....172.16.0.1][54714] -> [..192.168.10.50][...80] + new: [...140] [ip4][..tcp] [.....172.16.0.1][54728] -> [..192.168.10.50][...80] + new: [...141] [ip4][..tcp] [.....172.16.0.1][54742] -> [..192.168.10.50][...80] + new: [...142] [ip4][..tcp] [.....172.16.0.1][54768] -> [..192.168.10.50][...80] + new: [...143] [ip4][..tcp] [.....172.16.0.1][54782] -> [..192.168.10.50][...80] + guessed: [....66] [ip4][..tcp] [.....172.16.0.1][53380] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....66] [ip4][..tcp] [.....172.16.0.1][53380] -> [..192.168.10.50][...80] + guessed: [....67] [ip4][..tcp] [.....172.16.0.1][53394] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....67] [ip4][..tcp] [.....172.16.0.1][53394] -> [..192.168.10.50][...80] + guessed: [....68] [ip4][..tcp] [.....172.16.0.1][53408] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....68] [ip4][..tcp] [.....172.16.0.1][53408] -> [..192.168.10.50][...80] + guessed: [....69] [ip4][..tcp] [.....172.16.0.1][53422] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....69] [ip4][..tcp] [.....172.16.0.1][53422] -> [..192.168.10.50][...80] + guessed: [....70] [ip4][..tcp] [.....172.16.0.1][53436] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....70] [ip4][..tcp] [.....172.16.0.1][53436] -> [..192.168.10.50][...80] + guessed: [....71] [ip4][..tcp] [.....172.16.0.1][53450] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....71] [ip4][..tcp] [.....172.16.0.1][53450] -> [..192.168.10.50][...80] + new: [...144] [ip4][..tcp] [.....172.16.0.1][54808] -> [..192.168.10.50][...80] + new: [...145] [ip4][..tcp] [.....172.16.0.1][54822] -> [..192.168.10.50][...80] + new: [...146] [ip4][..tcp] [.....172.16.0.1][54836] -> [..192.168.10.50][...80] + new: [...147] [ip4][..tcp] [.....172.16.0.1][54862] -> [..192.168.10.50][...80] + new: [...148] [ip4][..tcp] [.....172.16.0.1][54876] -> [..192.168.10.50][...80] + new: [...149] [ip4][..tcp] [.....172.16.0.1][54890] -> [..192.168.10.50][...80] + end: [....41] [ip4][..tcp] [.....172.16.0.1][52910] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: XSS Attack, HTTP Numeric IP Address + guessed: [....72] [ip4][..tcp] [.....172.16.0.1][53476] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....72] [ip4][..tcp] [.....172.16.0.1][53476] -> [..192.168.10.50][...80] + guessed: [....73] [ip4][..tcp] [.....172.16.0.1][53490] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....73] [ip4][..tcp] [.....172.16.0.1][53490] -> [..192.168.10.50][...80] + guessed: [....74] [ip4][..tcp] [.....172.16.0.1][53516] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....74] [ip4][..tcp] [.....172.16.0.1][53516] -> [..192.168.10.50][...80] + guessed: [....75] [ip4][..tcp] [.....172.16.0.1][53530] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....75] [ip4][..tcp] [.....172.16.0.1][53530] -> [..192.168.10.50][...80] + guessed: [....76] [ip4][..tcp] [.....172.16.0.1][53544] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....76] [ip4][..tcp] [.....172.16.0.1][53544] -> [..192.168.10.50][...80] + guessed: [....77] [ip4][..tcp] [.....172.16.0.1][53570] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....77] [ip4][..tcp] [.....172.16.0.1][53570] -> [..192.168.10.50][...80] + new: [...150] [ip4][..tcp] [.....172.16.0.1][54916] -> [..192.168.10.50][...80] + new: [...151] [ip4][..tcp] [.....172.16.0.1][54930] -> [..192.168.10.50][...80] + new: [...152] [ip4][..tcp] [.....172.16.0.1][54956] -> [..192.168.10.50][...80] + new: [...153] [ip4][..tcp] [.....172.16.0.1][54970] -> [..192.168.10.50][...80] + new: [...154] [ip4][..tcp] [.....172.16.0.1][54984] -> [..192.168.10.50][...80] + detected: [...152] [ip4][..tcp] [.....172.16.0.1][54956] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + guessed: [....79] [ip4][..tcp] [.....172.16.0.1][53598] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....79] [ip4][..tcp] [.....172.16.0.1][53598] -> [..192.168.10.50][...80] + guessed: [....80] [ip4][..tcp] [.....172.16.0.1][53624] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....80] [ip4][..tcp] [.....172.16.0.1][53624] -> [..192.168.10.50][...80] + guessed: [....81] [ip4][..tcp] [.....172.16.0.1][53638] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....81] [ip4][..tcp] [.....172.16.0.1][53638] -> [..192.168.10.50][...80] + guessed: [....82] [ip4][..tcp] [.....172.16.0.1][53664] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....82] [ip4][..tcp] [.....172.16.0.1][53664] -> [..192.168.10.50][...80] + guessed: [....83] [ip4][..tcp] [.....172.16.0.1][53678] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....83] [ip4][..tcp] [.....172.16.0.1][53678] -> [..192.168.10.50][...80] + new: [...155] [ip4][..tcp] [.....172.16.0.1][55010] -> [..192.168.10.50][...80] + new: [...156] [ip4][..tcp] [.....172.16.0.1][55024] -> [..192.168.10.50][...80] + new: [...157] [ip4][..tcp] [.....172.16.0.1][55038] -> [..192.168.10.50][...80] + analyse: [...152] [ip4][..tcp] [.....172.16.0.1][54956] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.643| 0.568| 0.904] + [IAT(c->s)...: 0.001| 3.642| 0.446| 0.827][IAT(s->c)...: 0.000| 3.643| 0.788| 0.991] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1550.100| 699.100] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...158] [ip4][..tcp] [.....172.16.0.1][55064] -> [..192.168.10.50][...80] + new: [...159] [ip4][..tcp] [.....172.16.0.1][55078] -> [..192.168.10.50][...80] + new: [...160] [ip4][..tcp] [.....172.16.0.1][55092] -> [..192.168.10.50][...80] + guessed: [....84] [ip4][..tcp] [.....172.16.0.1][53692] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....84] [ip4][..tcp] [.....172.16.0.1][53692] -> [..192.168.10.50][...80] + guessed: [....85] [ip4][..tcp] [.....172.16.0.1][53718] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....85] [ip4][..tcp] [.....172.16.0.1][53718] -> [..192.168.10.50][...80] + guessed: [....86] [ip4][..tcp] [.....172.16.0.1][53732] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....86] [ip4][..tcp] [.....172.16.0.1][53732] -> [..192.168.10.50][...80] + guessed: [....87] [ip4][..tcp] [.....172.16.0.1][53758] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....87] [ip4][..tcp] [.....172.16.0.1][53758] -> [..192.168.10.50][...80] + guessed: [....88] [ip4][..tcp] [.....172.16.0.1][53772] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....88] [ip4][..tcp] [.....172.16.0.1][53772] -> [..192.168.10.50][...80] + new: [...161] [ip4][..tcp] [.....172.16.0.1][55118] -> [..192.168.10.50][...80] + new: [...162] [ip4][..tcp] [.....172.16.0.1][55132] -> [..192.168.10.50][...80] + new: [...163] [ip4][..tcp] [.....172.16.0.1][55158] -> [..192.168.10.50][...80] + new: [...164] [ip4][..tcp] [.....172.16.0.1][55172] -> [..192.168.10.50][...80] + new: [...165] [ip4][..tcp] [.....172.16.0.1][55186] -> [..192.168.10.50][...80] + new: [...166] [ip4][..tcp] [.....172.16.0.1][55212] -> [..192.168.10.50][...80] + guessed: [....89] [ip4][..tcp] [.....172.16.0.1][53786] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....89] [ip4][..tcp] [.....172.16.0.1][53786] -> [..192.168.10.50][...80] + guessed: [....90] [ip4][..tcp] [.....172.16.0.1][53812] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....90] [ip4][..tcp] [.....172.16.0.1][53812] -> [..192.168.10.50][...80] + guessed: [....91] [ip4][..tcp] [.....172.16.0.1][53826] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....91] [ip4][..tcp] [.....172.16.0.1][53826] -> [..192.168.10.50][...80] + guessed: [....92] [ip4][..tcp] [.....172.16.0.1][53852] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....92] [ip4][..tcp] [.....172.16.0.1][53852] -> [..192.168.10.50][...80] + guessed: [....93] [ip4][..tcp] [.....172.16.0.1][53866] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....93] [ip4][..tcp] [.....172.16.0.1][53866] -> [..192.168.10.50][...80] + guessed: [....94] [ip4][..tcp] [.....172.16.0.1][53880] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....94] [ip4][..tcp] [.....172.16.0.1][53880] -> [..192.168.10.50][...80] + new: [...167] [ip4][..tcp] [.....172.16.0.1][55226] -> [..192.168.10.50][...80] + new: [...168] [ip4][..tcp] [.....172.16.0.1][55240] -> [..192.168.10.50][...80] + new: [...169] [ip4][..tcp] [.....172.16.0.1][55266] -> [..192.168.10.50][...80] + new: [...170] [ip4][..tcp] [.....172.16.0.1][55280] -> [..192.168.10.50][...80] + new: [...171] [ip4][..tcp] [.....172.16.0.1][55294] -> [..192.168.10.50][...80] + new: [...172] [ip4][..tcp] [.....172.16.0.1][55320] -> [..192.168.10.50][...80] + guessed: [....95] [ip4][..tcp] [.....172.16.0.1][53906] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....95] [ip4][..tcp] [.....172.16.0.1][53906] -> [..192.168.10.50][...80] + guessed: [....96] [ip4][..tcp] [.....172.16.0.1][53920] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....96] [ip4][..tcp] [.....172.16.0.1][53920] -> [..192.168.10.50][...80] + guessed: [....97] [ip4][..tcp] [.....172.16.0.1][53946] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....97] [ip4][..tcp] [.....172.16.0.1][53946] -> [..192.168.10.50][...80] + guessed: [....98] [ip4][..tcp] [.....172.16.0.1][53960] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....98] [ip4][..tcp] [.....172.16.0.1][53960] -> [..192.168.10.50][...80] + guessed: [....99] [ip4][..tcp] [.....172.16.0.1][53974] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [....99] [ip4][..tcp] [.....172.16.0.1][53974] -> [..192.168.10.50][...80] + guessed: [...100] [ip4][..tcp] [.....172.16.0.1][54000] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...100] [ip4][..tcp] [.....172.16.0.1][54000] -> [..192.168.10.50][...80] + new: [...173] [ip4][..tcp] [.....172.16.0.1][55334] -> [..192.168.10.50][...80] + new: [...174] [ip4][..tcp] [.....172.16.0.1][55348] -> [..192.168.10.50][...80] + new: [...175] [ip4][..tcp] [.....172.16.0.1][55362] -> [..192.168.10.50][...80] + new: [...176] [ip4][..tcp] [.....172.16.0.1][55376] -> [..192.168.10.50][...80] + new: [...177] [ip4][..tcp] [.....172.16.0.1][55390] -> [..192.168.10.50][...80] + new: [...178] [ip4][..tcp] [.....172.16.0.1][55416] -> [..192.168.10.50][...80] + new: [...179] [ip4][..tcp] [.....172.16.0.1][55430] -> [..192.168.10.50][...80] + guessed: [...101] [ip4][..tcp] [.....172.16.0.1][54014] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...101] [ip4][..tcp] [.....172.16.0.1][54014] -> [..192.168.10.50][...80] + guessed: [...102] [ip4][..tcp] [.....172.16.0.1][54040] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...102] [ip4][..tcp] [.....172.16.0.1][54040] -> [..192.168.10.50][...80] + guessed: [...103] [ip4][..tcp] [.....172.16.0.1][54054] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...103] [ip4][..tcp] [.....172.16.0.1][54054] -> [..192.168.10.50][...80] + guessed: [...104] [ip4][..tcp] [.....172.16.0.1][54068] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...104] [ip4][..tcp] [.....172.16.0.1][54068] -> [..192.168.10.50][...80] + guessed: [...105] [ip4][..tcp] [.....172.16.0.1][54094] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...105] [ip4][..tcp] [.....172.16.0.1][54094] -> [..192.168.10.50][...80] + guessed: [...106] [ip4][..tcp] [.....172.16.0.1][54108] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...106] [ip4][..tcp] [.....172.16.0.1][54108] -> [..192.168.10.50][...80] + new: [...180] [ip4][..tcp] [.....172.16.0.1][55444] -> [..192.168.10.50][...80] + new: [...181] [ip4][..tcp] [.....172.16.0.1][55470] -> [..192.168.10.50][...80] + new: [...182] [ip4][..tcp] [.....172.16.0.1][55484] -> [..192.168.10.50][...80] + new: [...183] [ip4][..tcp] [.....172.16.0.1][55510] -> [..192.168.10.50][...80] + new: [...184] [ip4][..tcp] [.....172.16.0.1][55524] -> [..192.168.10.50][...80] + new: [...185] [ip4][..tcp] [.....172.16.0.1][55538] -> [..192.168.10.50][...80] + guessed: [...107] [ip4][..tcp] [.....172.16.0.1][54134] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...107] [ip4][..tcp] [.....172.16.0.1][54134] -> [..192.168.10.50][...80] + guessed: [...108] [ip4][..tcp] [.....172.16.0.1][54148] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...108] [ip4][..tcp] [.....172.16.0.1][54148] -> [..192.168.10.50][...80] + guessed: [...109] [ip4][..tcp] [.....172.16.0.1][54162] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...109] [ip4][..tcp] [.....172.16.0.1][54162] -> [..192.168.10.50][...80] + guessed: [...110] [ip4][..tcp] [.....172.16.0.1][54188] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...110] [ip4][..tcp] [.....172.16.0.1][54188] -> [..192.168.10.50][...80] + guessed: [...111] [ip4][..tcp] [.....172.16.0.1][54202] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...111] [ip4][..tcp] [.....172.16.0.1][54202] -> [..192.168.10.50][...80] + new: [...186] [ip4][..tcp] [.....172.16.0.1][55564] -> [..192.168.10.50][...80] + new: [...187] [ip4][..tcp] [.....172.16.0.1][55578] -> [..192.168.10.50][...80] + new: [...188] [ip4][..tcp] [.....172.16.0.1][55592] -> [..192.168.10.50][...80] + new: [...189] [ip4][..tcp] [.....172.16.0.1][55618] -> [..192.168.10.50][...80] + new: [...190] [ip4][..tcp] [.....172.16.0.1][55632] -> [..192.168.10.50][...80] + new: [...191] [ip4][..tcp] [.....172.16.0.1][55646] -> [..192.168.10.50][...80] + end: [....78] [ip4][..tcp] [.....172.16.0.1][53584] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + guessed: [...112] [ip4][..tcp] [.....172.16.0.1][54228] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...112] [ip4][..tcp] [.....172.16.0.1][54228] -> [..192.168.10.50][...80] + guessed: [...113] [ip4][..tcp] [.....172.16.0.1][54242] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...113] [ip4][..tcp] [.....172.16.0.1][54242] -> [..192.168.10.50][...80] + guessed: [...115] [ip4][..tcp] [.....172.16.0.1][54282] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...115] [ip4][..tcp] [.....172.16.0.1][54282] -> [..192.168.10.50][...80] + guessed: [...116] [ip4][..tcp] [.....172.16.0.1][54296] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...116] [ip4][..tcp] [.....172.16.0.1][54296] -> [..192.168.10.50][...80] + new: [...192] [ip4][..tcp] [.....172.16.0.1][55672] -> [..192.168.10.50][...80] + detected: [...190] [ip4][..tcp] [.....172.16.0.1][55632] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...193] [ip4][..tcp] [.....172.16.0.1][55686] -> [..192.168.10.50][...80] + new: [...194] [ip4][..tcp] [.....172.16.0.1][55700] -> [..192.168.10.50][...80] + new: [...195] [ip4][..tcp] [.....172.16.0.1][55726] -> [..192.168.10.50][...80] + analyse: [...190] [ip4][..tcp] [.....172.16.0.1][55632] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.785| 0.602| 0.936] + [IAT(c->s)...: 0.001| 3.784| 0.492| 0.861][IAT(s->c)...: 0.000| 3.785| 0.802| 1.028] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1559.600| 703.600] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...196] [ip4][..tcp] [.....172.16.0.1][55740] -> [..192.168.10.50][...80] + guessed: [...117] [ip4][..tcp] [.....172.16.0.1][54322] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...117] [ip4][..tcp] [.....172.16.0.1][54322] -> [..192.168.10.50][...80] + guessed: [...118] [ip4][..tcp] [.....172.16.0.1][54336] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...118] [ip4][..tcp] [.....172.16.0.1][54336] -> [..192.168.10.50][...80] + guessed: [...119] [ip4][..tcp] [.....172.16.0.1][54362] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...119] [ip4][..tcp] [.....172.16.0.1][54362] -> [..192.168.10.50][...80] + guessed: [...120] [ip4][..tcp] [.....172.16.0.1][54376] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...120] [ip4][..tcp] [.....172.16.0.1][54376] -> [..192.168.10.50][...80] + guessed: [...121] [ip4][..tcp] [.....172.16.0.1][54390] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...121] [ip4][..tcp] [.....172.16.0.1][54390] -> [..192.168.10.50][...80] + guessed: [...122] [ip4][..tcp] [.....172.16.0.1][54416] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...122] [ip4][..tcp] [.....172.16.0.1][54416] -> [..192.168.10.50][...80] + guessed: [...123] [ip4][..tcp] [.....172.16.0.1][54430] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...123] [ip4][..tcp] [.....172.16.0.1][54430] -> [..192.168.10.50][...80] + new: [...197] [ip4][..tcp] [.....172.16.0.1][55766] -> [..192.168.10.50][...80] + new: [...198] [ip4][..tcp] [.....172.16.0.1][55780] -> [..192.168.10.50][...80] + new: [...199] [ip4][..tcp] [.....172.16.0.1][55794] -> [..192.168.10.50][...80] + new: [...200] [ip4][..tcp] [.....172.16.0.1][55820] -> [..192.168.10.50][...80] + new: [...201] [ip4][..tcp] [.....172.16.0.1][55834] -> [..192.168.10.50][...80] + new: [...202] [ip4][..tcp] [.....172.16.0.1][55860] -> [..192.168.10.50][...80] + guessed: [...124] [ip4][..tcp] [.....172.16.0.1][54456] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...124] [ip4][..tcp] [.....172.16.0.1][54456] -> [..192.168.10.50][...80] + guessed: [...125] [ip4][..tcp] [.....172.16.0.1][54470] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...125] [ip4][..tcp] [.....172.16.0.1][54470] -> [..192.168.10.50][...80] + guessed: [...126] [ip4][..tcp] [.....172.16.0.1][54484] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...126] [ip4][..tcp] [.....172.16.0.1][54484] -> [..192.168.10.50][...80] + guessed: [...127] [ip4][..tcp] [.....172.16.0.1][54510] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...127] [ip4][..tcp] [.....172.16.0.1][54510] -> [..192.168.10.50][...80] + guessed: [...128] [ip4][..tcp] [.....172.16.0.1][54524] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...128] [ip4][..tcp] [.....172.16.0.1][54524] -> [..192.168.10.50][...80] + new: [...203] [ip4][..tcp] [.....172.16.0.1][55874] -> [..192.168.10.50][...80] + new: [...204] [ip4][..tcp] [.....172.16.0.1][55888] -> [..192.168.10.50][...80] + new: [...205] [ip4][..tcp] [.....172.16.0.1][55914] -> [..192.168.10.50][...80] + new: [...206] [ip4][..tcp] [.....172.16.0.1][55928] -> [..192.168.10.50][...80] + new: [...207] [ip4][..tcp] [.....172.16.0.1][55942] -> [..192.168.10.50][...80] + new: [...208] [ip4][..tcp] [.....172.16.0.1][55968] -> [..192.168.10.50][...80] + guessed: [...129] [ip4][..tcp] [.....172.16.0.1][54538] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...129] [ip4][..tcp] [.....172.16.0.1][54538] -> [..192.168.10.50][...80] + guessed: [...130] [ip4][..tcp] [.....172.16.0.1][54552] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...130] [ip4][..tcp] [.....172.16.0.1][54552] -> [..192.168.10.50][...80] + guessed: [...131] [ip4][..tcp] [.....172.16.0.1][54566] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...131] [ip4][..tcp] [.....172.16.0.1][54566] -> [..192.168.10.50][...80] + guessed: [...132] [ip4][..tcp] [.....172.16.0.1][54580] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...132] [ip4][..tcp] [.....172.16.0.1][54580] -> [..192.168.10.50][...80] + guessed: [...133] [ip4][..tcp] [.....172.16.0.1][54606] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...133] [ip4][..tcp] [.....172.16.0.1][54606] -> [..192.168.10.50][...80] + guessed: [...134] [ip4][..tcp] [.....172.16.0.1][54620] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...134] [ip4][..tcp] [.....172.16.0.1][54620] -> [..192.168.10.50][...80] + guessed: [...135] [ip4][..tcp] [.....172.16.0.1][54634] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...135] [ip4][..tcp] [.....172.16.0.1][54634] -> [..192.168.10.50][...80] + new: [...209] [ip4][..tcp] [.....172.16.0.1][55982] -> [..192.168.10.50][...80] + new: [...210] [ip4][..tcp] [.....172.16.0.1][55996] -> [..192.168.10.50][...80] + new: [...211] [ip4][..tcp] [.....172.16.0.1][56022] -> [..192.168.10.50][...80] + new: [...212] [ip4][..tcp] [.....172.16.0.1][56036] -> [..192.168.10.50][...80] + new: [...213] [ip4][..tcp] [.....172.16.0.1][56062] -> [..192.168.10.50][...80] + new: [...214] [ip4][..tcp] [.....172.16.0.1][56076] -> [..192.168.10.50][...80] + guessed: [...136] [ip4][..tcp] [.....172.16.0.1][54660] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...136] [ip4][..tcp] [.....172.16.0.1][54660] -> [..192.168.10.50][...80] + guessed: [...137] [ip4][..tcp] [.....172.16.0.1][54674] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...137] [ip4][..tcp] [.....172.16.0.1][54674] -> [..192.168.10.50][...80] + guessed: [...138] [ip4][..tcp] [.....172.16.0.1][54688] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...138] [ip4][..tcp] [.....172.16.0.1][54688] -> [..192.168.10.50][...80] + guessed: [...139] [ip4][..tcp] [.....172.16.0.1][54714] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...139] [ip4][..tcp] [.....172.16.0.1][54714] -> [..192.168.10.50][...80] + guessed: [...140] [ip4][..tcp] [.....172.16.0.1][54728] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...140] [ip4][..tcp] [.....172.16.0.1][54728] -> [..192.168.10.50][...80] + guessed: [...141] [ip4][..tcp] [.....172.16.0.1][54742] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...141] [ip4][..tcp] [.....172.16.0.1][54742] -> [..192.168.10.50][...80] + new: [...215] [ip4][..tcp] [.....172.16.0.1][56090] -> [..192.168.10.50][...80] + new: [...216] [ip4][..tcp] [.....172.16.0.1][56116] -> [..192.168.10.50][...80] + new: [...217] [ip4][..tcp] [.....172.16.0.1][56130] -> [..192.168.10.50][...80] + new: [...218] [ip4][..tcp] [.....172.16.0.1][56144] -> [..192.168.10.50][...80] + new: [...219] [ip4][..tcp] [.....172.16.0.1][56158] -> [..192.168.10.50][...80] + new: [...220] [ip4][..tcp] [.....172.16.0.1][56172] -> [..192.168.10.50][...80] + new: [...221] [ip4][..tcp] [.....172.16.0.1][56186] -> [..192.168.10.50][...80] + guessed: [...142] [ip4][..tcp] [.....172.16.0.1][54768] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...142] [ip4][..tcp] [.....172.16.0.1][54768] -> [..192.168.10.50][...80] + guessed: [...143] [ip4][..tcp] [.....172.16.0.1][54782] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...143] [ip4][..tcp] [.....172.16.0.1][54782] -> [..192.168.10.50][...80] + guessed: [...144] [ip4][..tcp] [.....172.16.0.1][54808] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...144] [ip4][..tcp] [.....172.16.0.1][54808] -> [..192.168.10.50][...80] + guessed: [...145] [ip4][..tcp] [.....172.16.0.1][54822] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...145] [ip4][..tcp] [.....172.16.0.1][54822] -> [..192.168.10.50][...80] + guessed: [...146] [ip4][..tcp] [.....172.16.0.1][54836] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...146] [ip4][..tcp] [.....172.16.0.1][54836] -> [..192.168.10.50][...80] + new: [...222] [ip4][..tcp] [.....172.16.0.1][56212] -> [..192.168.10.50][...80] + new: [...223] [ip4][..tcp] [.....172.16.0.1][56226] -> [..192.168.10.50][...80] + new: [...224] [ip4][..tcp] [.....172.16.0.1][56240] -> [..192.168.10.50][...80] + new: [...225] [ip4][..tcp] [.....172.16.0.1][56266] -> [..192.168.10.50][...80] + new: [...226] [ip4][..tcp] [.....172.16.0.1][56280] -> [..192.168.10.50][...80] + guessed: [...147] [ip4][..tcp] [.....172.16.0.1][54862] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...147] [ip4][..tcp] [.....172.16.0.1][54862] -> [..192.168.10.50][...80] + guessed: [...148] [ip4][..tcp] [.....172.16.0.1][54876] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...148] [ip4][..tcp] [.....172.16.0.1][54876] -> [..192.168.10.50][...80] + guessed: [...149] [ip4][..tcp] [.....172.16.0.1][54890] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...149] [ip4][..tcp] [.....172.16.0.1][54890] -> [..192.168.10.50][...80] + guessed: [...150] [ip4][..tcp] [.....172.16.0.1][54916] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...150] [ip4][..tcp] [.....172.16.0.1][54916] -> [..192.168.10.50][...80] + guessed: [...151] [ip4][..tcp] [.....172.16.0.1][54930] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...151] [ip4][..tcp] [.....172.16.0.1][54930] -> [..192.168.10.50][...80] + end: [...114] [ip4][..tcp] [.....172.16.0.1][54268] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: XSS Attack, HTTP Numeric IP Address + new: [...227] [ip4][..tcp] [.....172.16.0.1][56306] -> [..192.168.10.50][...80] + new: [...228] [ip4][..tcp] [.....172.16.0.1][56320] -> [..192.168.10.50][...80] + new: [...229] [ip4][..tcp] [.....172.16.0.1][56334] -> [..192.168.10.50][...80] + detected: [...227] [ip4][..tcp] [.....172.16.0.1][56306] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...230] [ip4][..tcp] [.....172.16.0.1][56360] -> [..192.168.10.50][...80] + new: [...231] [ip4][..tcp] [.....172.16.0.1][56374] -> [..192.168.10.50][...80] + new: [...232] [ip4][..tcp] [.....172.16.0.1][56400] -> [..192.168.10.50][...80] + guessed: [...153] [ip4][..tcp] [.....172.16.0.1][54970] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...153] [ip4][..tcp] [.....172.16.0.1][54970] -> [..192.168.10.50][...80] + guessed: [...154] [ip4][..tcp] [.....172.16.0.1][54984] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...154] [ip4][..tcp] [.....172.16.0.1][54984] -> [..192.168.10.50][...80] + guessed: [...155] [ip4][..tcp] [.....172.16.0.1][55010] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...155] [ip4][..tcp] [.....172.16.0.1][55010] -> [..192.168.10.50][...80] + guessed: [...156] [ip4][..tcp] [.....172.16.0.1][55024] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...156] [ip4][..tcp] [.....172.16.0.1][55024] -> [..192.168.10.50][...80] + guessed: [...157] [ip4][..tcp] [.....172.16.0.1][55038] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...157] [ip4][..tcp] [.....172.16.0.1][55038] -> [..192.168.10.50][...80] + guessed: [...158] [ip4][..tcp] [.....172.16.0.1][55064] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...158] [ip4][..tcp] [.....172.16.0.1][55064] -> [..192.168.10.50][...80] + analyse: [...227] [ip4][..tcp] [.....172.16.0.1][56306] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.805| 0.635| 1.170] + [IAT(c->s)...: 0.001| 4.805| 0.547| 1.107][IAT(s->c)...: 0.000| 4.805| 0.757| 1.241] + [PKTLEN(c->s): 66.000| 651.000| 290.400| 245.600][PKTLEN(s->c): 66.000|1934.000|1322.200| 716.700] + [BINS(c->s)..: 10,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,7] + new: [...233] [ip4][..tcp] [.....172.16.0.1][56414] -> [..192.168.10.50][...80] + new: [...234] [ip4][..tcp] [.....172.16.0.1][56428] -> [..192.168.10.50][...80] + new: [...235] [ip4][..tcp] [.....172.16.0.1][56454] -> [..192.168.10.50][...80] + new: [...236] [ip4][..tcp] [.....172.16.0.1][56468] -> [..192.168.10.50][...80] + new: [...237] [ip4][..tcp] [.....172.16.0.1][56482] -> [..192.168.10.50][...80] + new: [...238] [ip4][..tcp] [.....172.16.0.1][56508] -> [..192.168.10.50][...80] + guessed: [...159] [ip4][..tcp] [.....172.16.0.1][55078] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...159] [ip4][..tcp] [.....172.16.0.1][55078] -> [..192.168.10.50][...80] + guessed: [...160] [ip4][..tcp] [.....172.16.0.1][55092] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...160] [ip4][..tcp] [.....172.16.0.1][55092] -> [..192.168.10.50][...80] + guessed: [...161] [ip4][..tcp] [.....172.16.0.1][55118] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...161] [ip4][..tcp] [.....172.16.0.1][55118] -> [..192.168.10.50][...80] + guessed: [...162] [ip4][..tcp] [.....172.16.0.1][55132] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...162] [ip4][..tcp] [.....172.16.0.1][55132] -> [..192.168.10.50][...80] + guessed: [...163] [ip4][..tcp] [.....172.16.0.1][55158] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...163] [ip4][..tcp] [.....172.16.0.1][55158] -> [..192.168.10.50][...80] + guessed: [...164] [ip4][..tcp] [.....172.16.0.1][55172] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...164] [ip4][..tcp] [.....172.16.0.1][55172] -> [..192.168.10.50][...80] + guessed: [...165] [ip4][..tcp] [.....172.16.0.1][55186] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...165] [ip4][..tcp] [.....172.16.0.1][55186] -> [..192.168.10.50][...80] + new: [...239] [ip4][..tcp] [.....172.16.0.1][56522] -> [..192.168.10.50][...80] + new: [...240] [ip4][..tcp] [.....172.16.0.1][56536] -> [..192.168.10.50][...80] + new: [...241] [ip4][..tcp] [.....172.16.0.1][56562] -> [..192.168.10.50][...80] + new: [...242] [ip4][..tcp] [.....172.16.0.1][56576] -> [..192.168.10.50][...80] + new: [...243] [ip4][..tcp] [.....172.16.0.1][56590] -> [..192.168.10.50][...80] + new: [...244] [ip4][..tcp] [.....172.16.0.1][56616] -> [..192.168.10.50][...80] + guessed: [...166] [ip4][..tcp] [.....172.16.0.1][55212] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...166] [ip4][..tcp] [.....172.16.0.1][55212] -> [..192.168.10.50][...80] + guessed: [...167] [ip4][..tcp] [.....172.16.0.1][55226] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...167] [ip4][..tcp] [.....172.16.0.1][55226] -> [..192.168.10.50][...80] + guessed: [...168] [ip4][..tcp] [.....172.16.0.1][55240] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...168] [ip4][..tcp] [.....172.16.0.1][55240] -> [..192.168.10.50][...80] + guessed: [...169] [ip4][..tcp] [.....172.16.0.1][55266] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...169] [ip4][..tcp] [.....172.16.0.1][55266] -> [..192.168.10.50][...80] + guessed: [...170] [ip4][..tcp] [.....172.16.0.1][55280] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...170] [ip4][..tcp] [.....172.16.0.1][55280] -> [..192.168.10.50][...80] + new: [...245] [ip4][..tcp] [.....172.16.0.1][56630] -> [..192.168.10.50][...80] + new: [...246] [ip4][..tcp] [.....172.16.0.1][56644] -> [..192.168.10.50][...80] + new: [...247] [ip4][..tcp] [.....172.16.0.1][56670] -> [..192.168.10.50][...80] + new: [...248] [ip4][..tcp] [.....172.16.0.1][56684] -> [..192.168.10.50][...80] + new: [...249] [ip4][..tcp] [.....172.16.0.1][56710] -> [..192.168.10.50][...80] + new: [...250] [ip4][..tcp] [.....172.16.0.1][56724] -> [..192.168.10.50][...80] + guessed: [...171] [ip4][..tcp] [.....172.16.0.1][55294] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...171] [ip4][..tcp] [.....172.16.0.1][55294] -> [..192.168.10.50][...80] + guessed: [...172] [ip4][..tcp] [.....172.16.0.1][55320] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...172] [ip4][..tcp] [.....172.16.0.1][55320] -> [..192.168.10.50][...80] + guessed: [...173] [ip4][..tcp] [.....172.16.0.1][55334] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...173] [ip4][..tcp] [.....172.16.0.1][55334] -> [..192.168.10.50][...80] + guessed: [...174] [ip4][..tcp] [.....172.16.0.1][55348] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...174] [ip4][..tcp] [.....172.16.0.1][55348] -> [..192.168.10.50][...80] + guessed: [...175] [ip4][..tcp] [.....172.16.0.1][55362] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...175] [ip4][..tcp] [.....172.16.0.1][55362] -> [..192.168.10.50][...80] + guessed: [...176] [ip4][..tcp] [.....172.16.0.1][55376] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...176] [ip4][..tcp] [.....172.16.0.1][55376] -> [..192.168.10.50][...80] + guessed: [...177] [ip4][..tcp] [.....172.16.0.1][55390] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...177] [ip4][..tcp] [.....172.16.0.1][55390] -> [..192.168.10.50][...80] + new: [...251] [ip4][..tcp] [.....172.16.0.1][56738] -> [..192.168.10.50][...80] + new: [...252] [ip4][..tcp] [.....172.16.0.1][56764] -> [..192.168.10.50][...80] + new: [...253] [ip4][..tcp] [.....172.16.0.1][56778] -> [..192.168.10.50][...80] + new: [...254] [ip4][..tcp] [.....172.16.0.1][56792] -> [..192.168.10.50][...80] + new: [...255] [ip4][..tcp] [.....172.16.0.1][56818] -> [..192.168.10.50][...80] + new: [...256] [ip4][..tcp] [.....172.16.0.1][56832] -> [..192.168.10.50][...80] + guessed: [...178] [ip4][..tcp] [.....172.16.0.1][55416] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...178] [ip4][..tcp] [.....172.16.0.1][55416] -> [..192.168.10.50][...80] + guessed: [...179] [ip4][..tcp] [.....172.16.0.1][55430] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...179] [ip4][..tcp] [.....172.16.0.1][55430] -> [..192.168.10.50][...80] + guessed: [...180] [ip4][..tcp] [.....172.16.0.1][55444] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...180] [ip4][..tcp] [.....172.16.0.1][55444] -> [..192.168.10.50][...80] + guessed: [...181] [ip4][..tcp] [.....172.16.0.1][55470] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...181] [ip4][..tcp] [.....172.16.0.1][55470] -> [..192.168.10.50][...80] + guessed: [...182] [ip4][..tcp] [.....172.16.0.1][55484] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...182] [ip4][..tcp] [.....172.16.0.1][55484] -> [..192.168.10.50][...80] + new: [...257] [ip4][..tcp] [.....172.16.0.1][56858] -> [..192.168.10.50][...80] + new: [...258] [ip4][..tcp] [.....172.16.0.1][56872] -> [..192.168.10.50][...80] + new: [...259] [ip4][..tcp] [.....172.16.0.1][56886] -> [..192.168.10.50][...80] + new: [...260] [ip4][..tcp] [.....172.16.0.1][56912] -> [..192.168.10.50][...80] + new: [...261] [ip4][..tcp] [.....172.16.0.1][56926] -> [..192.168.10.50][...80] + new: [...262] [ip4][..tcp] [.....172.16.0.1][56940] -> [..192.168.10.50][...80] + guessed: [...183] [ip4][..tcp] [.....172.16.0.1][55510] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...183] [ip4][..tcp] [.....172.16.0.1][55510] -> [..192.168.10.50][...80] + guessed: [...184] [ip4][..tcp] [.....172.16.0.1][55524] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...184] [ip4][..tcp] [.....172.16.0.1][55524] -> [..192.168.10.50][...80] + guessed: [...185] [ip4][..tcp] [.....172.16.0.1][55538] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...185] [ip4][..tcp] [.....172.16.0.1][55538] -> [..192.168.10.50][...80] + guessed: [...186] [ip4][..tcp] [.....172.16.0.1][55564] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...186] [ip4][..tcp] [.....172.16.0.1][55564] -> [..192.168.10.50][...80] + guessed: [...187] [ip4][..tcp] [.....172.16.0.1][55578] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...187] [ip4][..tcp] [.....172.16.0.1][55578] -> [..192.168.10.50][...80] + guessed: [...188] [ip4][..tcp] [.....172.16.0.1][55592] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...188] [ip4][..tcp] [.....172.16.0.1][55592] -> [..192.168.10.50][...80] + new: [...263] [ip4][..tcp] [.....172.16.0.1][56966] -> [..192.168.10.50][...80] + new: [...264] [ip4][..tcp] [.....172.16.0.1][56980] -> [..192.168.10.50][...80] + new: [...265] [ip4][..tcp] [.....172.16.0.1][56994] -> [..192.168.10.50][...80] + new: [...266] [ip4][..tcp] [.....172.16.0.1][57008] -> [..192.168.10.50][...80] + new: [...267] [ip4][..tcp] [.....172.16.0.1][57022] -> [..192.168.10.50][...80] + new: [...268] [ip4][..tcp] [.....172.16.0.1][57036] -> [..192.168.10.50][...80] + detected: [...265] [ip4][..tcp] [.....172.16.0.1][56994] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + end: [...152] [ip4][..tcp] [.....172.16.0.1][54956] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + guessed: [...189] [ip4][..tcp] [.....172.16.0.1][55618] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...189] [ip4][..tcp] [.....172.16.0.1][55618] -> [..192.168.10.50][...80] + guessed: [...191] [ip4][..tcp] [.....172.16.0.1][55646] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...191] [ip4][..tcp] [.....172.16.0.1][55646] -> [..192.168.10.50][...80] + guessed: [...192] [ip4][..tcp] [.....172.16.0.1][55672] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...192] [ip4][..tcp] [.....172.16.0.1][55672] -> [..192.168.10.50][...80] + guessed: [...193] [ip4][..tcp] [.....172.16.0.1][55686] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...193] [ip4][..tcp] [.....172.16.0.1][55686] -> [..192.168.10.50][...80] + guessed: [...194] [ip4][..tcp] [.....172.16.0.1][55700] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...194] [ip4][..tcp] [.....172.16.0.1][55700] -> [..192.168.10.50][...80] + new: [...269] [ip4][..tcp] [.....172.16.0.1][57062] -> [..192.168.10.50][...80] + new: [...270] [ip4][..tcp] [.....172.16.0.1][57076] -> [..192.168.10.50][...80] + new: [...271] [ip4][..tcp] [.....172.16.0.1][57090] -> [..192.168.10.50][...80] + analyse: [...265] [ip4][..tcp] [.....172.16.0.1][56994] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.819| 0.606| 0.944] + [IAT(c->s)...: 0.001| 3.818| 0.495| 0.869][IAT(s->c)...: 0.000| 3.819| 0.808| 1.038] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1934.000|1559.000| 703.300] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...272] [ip4][..tcp] [.....172.16.0.1][57116] -> [..192.168.10.50][...80] + new: [...273] [ip4][..tcp] [.....172.16.0.1][57130] -> [..192.168.10.50][...80] + new: [...274] [ip4][..tcp] [.....172.16.0.1][57144] -> [..192.168.10.50][...80] + guessed: [...195] [ip4][..tcp] [.....172.16.0.1][55726] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...195] [ip4][..tcp] [.....172.16.0.1][55726] -> [..192.168.10.50][...80] + guessed: [...196] [ip4][..tcp] [.....172.16.0.1][55740] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...196] [ip4][..tcp] [.....172.16.0.1][55740] -> [..192.168.10.50][...80] + guessed: [...197] [ip4][..tcp] [.....172.16.0.1][55766] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...197] [ip4][..tcp] [.....172.16.0.1][55766] -> [..192.168.10.50][...80] + guessed: [...198] [ip4][..tcp] [.....172.16.0.1][55780] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...198] [ip4][..tcp] [.....172.16.0.1][55780] -> [..192.168.10.50][...80] + guessed: [...199] [ip4][..tcp] [.....172.16.0.1][55794] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...199] [ip4][..tcp] [.....172.16.0.1][55794] -> [..192.168.10.50][...80] + guessed: [...200] [ip4][..tcp] [.....172.16.0.1][55820] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...200] [ip4][..tcp] [.....172.16.0.1][55820] -> [..192.168.10.50][...80] + new: [...275] [ip4][..tcp] [.....172.16.0.1][57170] -> [..192.168.10.50][...80] + new: [...276] [ip4][..tcp] [.....172.16.0.1][57184] -> [..192.168.10.50][...80] + new: [...277] [ip4][..tcp] [.....172.16.0.1][57210] -> [..192.168.10.50][...80] + new: [...278] [ip4][..tcp] [.....172.16.0.1][57224] -> [..192.168.10.50][...80] + new: [...279] [ip4][..tcp] [.....172.16.0.1][57238] -> [..192.168.10.50][...80] + new: [...280] [ip4][..tcp] [.....172.16.0.1][57264] -> [..192.168.10.50][...80] + guessed: [...201] [ip4][..tcp] [.....172.16.0.1][55834] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...201] [ip4][..tcp] [.....172.16.0.1][55834] -> [..192.168.10.50][...80] + guessed: [...202] [ip4][..tcp] [.....172.16.0.1][55860] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...202] [ip4][..tcp] [.....172.16.0.1][55860] -> [..192.168.10.50][...80] + guessed: [...203] [ip4][..tcp] [.....172.16.0.1][55874] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...203] [ip4][..tcp] [.....172.16.0.1][55874] -> [..192.168.10.50][...80] + guessed: [...204] [ip4][..tcp] [.....172.16.0.1][55888] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...204] [ip4][..tcp] [.....172.16.0.1][55888] -> [..192.168.10.50][...80] + guessed: [...205] [ip4][..tcp] [.....172.16.0.1][55914] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...205] [ip4][..tcp] [.....172.16.0.1][55914] -> [..192.168.10.50][...80] + guessed: [...206] [ip4][..tcp] [.....172.16.0.1][55928] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...206] [ip4][..tcp] [.....172.16.0.1][55928] -> [..192.168.10.50][...80] + new: [...281] [ip4][..tcp] [.....172.16.0.1][57278] -> [..192.168.10.50][...80] + new: [...282] [ip4][..tcp] [.....172.16.0.1][57292] -> [..192.168.10.50][...80] + new: [...283] [ip4][..tcp] [.....172.16.0.1][57318] -> [..192.168.10.50][...80] + new: [...284] [ip4][..tcp] [.....172.16.0.1][57332] -> [..192.168.10.50][...80] + new: [...285] [ip4][..tcp] [.....172.16.0.1][57346] -> [..192.168.10.50][...80] + new: [...286] [ip4][..tcp] [.....172.16.0.1][57372] -> [..192.168.10.50][...80] + guessed: [...207] [ip4][..tcp] [.....172.16.0.1][55942] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...207] [ip4][..tcp] [.....172.16.0.1][55942] -> [..192.168.10.50][...80] + guessed: [...208] [ip4][..tcp] [.....172.16.0.1][55968] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...208] [ip4][..tcp] [.....172.16.0.1][55968] -> [..192.168.10.50][...80] + guessed: [...209] [ip4][..tcp] [.....172.16.0.1][55982] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...209] [ip4][..tcp] [.....172.16.0.1][55982] -> [..192.168.10.50][...80] + guessed: [...210] [ip4][..tcp] [.....172.16.0.1][55996] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...210] [ip4][..tcp] [.....172.16.0.1][55996] -> [..192.168.10.50][...80] + guessed: [...211] [ip4][..tcp] [.....172.16.0.1][56022] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...211] [ip4][..tcp] [.....172.16.0.1][56022] -> [..192.168.10.50][...80] + guessed: [...212] [ip4][..tcp] [.....172.16.0.1][56036] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...212] [ip4][..tcp] [.....172.16.0.1][56036] -> [..192.168.10.50][...80] + new: [...287] [ip4][..tcp] [.....172.16.0.1][57386] -> [..192.168.10.50][...80] + new: [...288] [ip4][..tcp] [.....172.16.0.1][57400] -> [..192.168.10.50][...80] + new: [...289] [ip4][..tcp] [.....172.16.0.1][57426] -> [..192.168.10.50][...80] + new: [...290] [ip4][..tcp] [.....172.16.0.1][57440] -> [..192.168.10.50][...80] + new: [...291] [ip4][..tcp] [.....172.16.0.1][57454] -> [..192.168.10.50][...80] + new: [...292] [ip4][..tcp] [.....172.16.0.1][57480] -> [..192.168.10.50][...80] + guessed: [...213] [ip4][..tcp] [.....172.16.0.1][56062] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...213] [ip4][..tcp] [.....172.16.0.1][56062] -> [..192.168.10.50][...80] + guessed: [...214] [ip4][..tcp] [.....172.16.0.1][56076] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...214] [ip4][..tcp] [.....172.16.0.1][56076] -> [..192.168.10.50][...80] + guessed: [...215] [ip4][..tcp] [.....172.16.0.1][56090] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...215] [ip4][..tcp] [.....172.16.0.1][56090] -> [..192.168.10.50][...80] + guessed: [...216] [ip4][..tcp] [.....172.16.0.1][56116] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...216] [ip4][..tcp] [.....172.16.0.1][56116] -> [..192.168.10.50][...80] + guessed: [...217] [ip4][..tcp] [.....172.16.0.1][56130] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...217] [ip4][..tcp] [.....172.16.0.1][56130] -> [..192.168.10.50][...80] + guessed: [...218] [ip4][..tcp] [.....172.16.0.1][56144] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...218] [ip4][..tcp] [.....172.16.0.1][56144] -> [..192.168.10.50][...80] + new: [...293] [ip4][..tcp] [.....172.16.0.1][57494] -> [..192.168.10.50][...80] + new: [...294] [ip4][..tcp] [.....172.16.0.1][57508] -> [..192.168.10.50][...80] + new: [...295] [ip4][..tcp] [.....172.16.0.1][57522] -> [..192.168.10.50][...80] + new: [...296] [ip4][..tcp] [.....172.16.0.1][57536] -> [..192.168.10.50][...80] + new: [...297] [ip4][..tcp] [.....172.16.0.1][57550] -> [..192.168.10.50][...80] + new: [...298] [ip4][..tcp] [.....172.16.0.1][57576] -> [..192.168.10.50][...80] + new: [...299] [ip4][..tcp] [.....172.16.0.1][57590] -> [..192.168.10.50][...80] + guessed: [...219] [ip4][..tcp] [.....172.16.0.1][56158] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...219] [ip4][..tcp] [.....172.16.0.1][56158] -> [..192.168.10.50][...80] + guessed: [...220] [ip4][..tcp] [.....172.16.0.1][56172] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...220] [ip4][..tcp] [.....172.16.0.1][56172] -> [..192.168.10.50][...80] + guessed: [...221] [ip4][..tcp] [.....172.16.0.1][56186] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...221] [ip4][..tcp] [.....172.16.0.1][56186] -> [..192.168.10.50][...80] + guessed: [...222] [ip4][..tcp] [.....172.16.0.1][56212] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...222] [ip4][..tcp] [.....172.16.0.1][56212] -> [..192.168.10.50][...80] + guessed: [...223] [ip4][..tcp] [.....172.16.0.1][56226] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...223] [ip4][..tcp] [.....172.16.0.1][56226] -> [..192.168.10.50][...80] + guessed: [...224] [ip4][..tcp] [.....172.16.0.1][56240] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...224] [ip4][..tcp] [.....172.16.0.1][56240] -> [..192.168.10.50][...80] + new: [...300] [ip4][..tcp] [.....172.16.0.1][57604] -> [..192.168.10.50][...80] + new: [...301] [ip4][..tcp] [.....172.16.0.1][57630] -> [..192.168.10.50][...80] + new: [...302] [ip4][..tcp] [.....172.16.0.1][57644] -> [..192.168.10.50][...80] + new: [...303] [ip4][..tcp] [.....172.16.0.1][57658] -> [..192.168.10.50][...80] + new: [...304] [ip4][..tcp] [.....172.16.0.1][57684] -> [..192.168.10.50][...80] + new: [...305] [ip4][..tcp] [.....172.16.0.1][57698] -> [..192.168.10.50][...80] + end: [...190] [ip4][..tcp] [.....172.16.0.1][55632] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: XSS Attack, HTTP Numeric IP Address + guessed: [...225] [ip4][..tcp] [.....172.16.0.1][56266] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...225] [ip4][..tcp] [.....172.16.0.1][56266] -> [..192.168.10.50][...80] + guessed: [...226] [ip4][..tcp] [.....172.16.0.1][56280] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...226] [ip4][..tcp] [.....172.16.0.1][56280] -> [..192.168.10.50][...80] + guessed: [...228] [ip4][..tcp] [.....172.16.0.1][56320] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...228] [ip4][..tcp] [.....172.16.0.1][56320] -> [..192.168.10.50][...80] + guessed: [...229] [ip4][..tcp] [.....172.16.0.1][56334] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...229] [ip4][..tcp] [.....172.16.0.1][56334] -> [..192.168.10.50][...80] + guessed: [...230] [ip4][..tcp] [.....172.16.0.1][56360] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...230] [ip4][..tcp] [.....172.16.0.1][56360] -> [..192.168.10.50][...80] + new: [...306] [ip4][..tcp] [.....172.16.0.1][57712] -> [..192.168.10.50][...80] + detected: [...304] [ip4][..tcp] [.....172.16.0.1][57684] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...307] [ip4][..tcp] [.....172.16.0.1][57738] -> [..192.168.10.50][...80] + new: [...308] [ip4][..tcp] [.....172.16.0.1][57752] -> [..192.168.10.50][...80] + new: [...309] [ip4][..tcp] [.....172.16.0.1][57778] -> [..192.168.10.50][...80] + analyse: [...304] [ip4][..tcp] [.....172.16.0.1][57684] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.536| 0.567| 0.877] + [IAT(c->s)...: 0.001| 3.535| 0.445| 0.805][IAT(s->c)...: 0.000| 3.536| 0.788| 0.957] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1934.000|1550.300| 699.200] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...310] [ip4][..tcp] [.....172.16.0.1][57792] -> [..192.168.10.50][...80] + new: [...311] [ip4][..tcp] [.....172.16.0.1][57806] -> [..192.168.10.50][...80] + guessed: [...231] [ip4][..tcp] [.....172.16.0.1][56374] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...231] [ip4][..tcp] [.....172.16.0.1][56374] -> [..192.168.10.50][...80] + guessed: [...232] [ip4][..tcp] [.....172.16.0.1][56400] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...232] [ip4][..tcp] [.....172.16.0.1][56400] -> [..192.168.10.50][...80] + guessed: [...233] [ip4][..tcp] [.....172.16.0.1][56414] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...233] [ip4][..tcp] [.....172.16.0.1][56414] -> [..192.168.10.50][...80] + guessed: [...234] [ip4][..tcp] [.....172.16.0.1][56428] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...234] [ip4][..tcp] [.....172.16.0.1][56428] -> [..192.168.10.50][...80] + guessed: [...235] [ip4][..tcp] [.....172.16.0.1][56454] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...235] [ip4][..tcp] [.....172.16.0.1][56454] -> [..192.168.10.50][...80] + guessed: [...236] [ip4][..tcp] [.....172.16.0.1][56468] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...236] [ip4][..tcp] [.....172.16.0.1][56468] -> [..192.168.10.50][...80] + new: [...312] [ip4][..tcp] [.....172.16.0.1][57832] -> [..192.168.10.50][...80] + new: [...313] [ip4][..tcp] [.....172.16.0.1][57846] -> [..192.168.10.50][...80] + new: [...314] [ip4][..tcp] [.....172.16.0.1][57860] -> [..192.168.10.50][...80] + new: [...315] [ip4][..tcp] [.....172.16.0.1][57886] -> [..192.168.10.50][...80] + new: [...316] [ip4][..tcp] [.....172.16.0.1][57900] -> [..192.168.10.50][...80] + new: [...317] [ip4][..tcp] [.....172.16.0.1][57914] -> [..192.168.10.50][...80] + guessed: [...237] [ip4][..tcp] [.....172.16.0.1][56482] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...237] [ip4][..tcp] [.....172.16.0.1][56482] -> [..192.168.10.50][...80] + guessed: [...238] [ip4][..tcp] [.....172.16.0.1][56508] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...238] [ip4][..tcp] [.....172.16.0.1][56508] -> [..192.168.10.50][...80] + guessed: [...239] [ip4][..tcp] [.....172.16.0.1][56522] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...239] [ip4][..tcp] [.....172.16.0.1][56522] -> [..192.168.10.50][...80] + guessed: [...240] [ip4][..tcp] [.....172.16.0.1][56536] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...240] [ip4][..tcp] [.....172.16.0.1][56536] -> [..192.168.10.50][...80] + guessed: [...241] [ip4][..tcp] [.....172.16.0.1][56562] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...241] [ip4][..tcp] [.....172.16.0.1][56562] -> [..192.168.10.50][...80] + guessed: [...242] [ip4][..tcp] [.....172.16.0.1][56576] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...242] [ip4][..tcp] [.....172.16.0.1][56576] -> [..192.168.10.50][...80] + new: [...318] [ip4][..tcp] [.....172.16.0.1][57940] -> [..192.168.10.50][...80] + new: [...319] [ip4][..tcp] [.....172.16.0.1][57954] -> [..192.168.10.50][...80] + new: [...320] [ip4][..tcp] [.....172.16.0.1][57980] -> [..192.168.10.50][...80] + new: [...321] [ip4][..tcp] [.....172.16.0.1][57994] -> [..192.168.10.50][...80] + new: [...322] [ip4][..tcp] [.....172.16.0.1][58008] -> [..192.168.10.50][...80] + guessed: [...243] [ip4][..tcp] [.....172.16.0.1][56590] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...243] [ip4][..tcp] [.....172.16.0.1][56590] -> [..192.168.10.50][...80] + guessed: [...244] [ip4][..tcp] [.....172.16.0.1][56616] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...244] [ip4][..tcp] [.....172.16.0.1][56616] -> [..192.168.10.50][...80] + guessed: [...245] [ip4][..tcp] [.....172.16.0.1][56630] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...245] [ip4][..tcp] [.....172.16.0.1][56630] -> [..192.168.10.50][...80] + guessed: [...246] [ip4][..tcp] [.....172.16.0.1][56644] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...246] [ip4][..tcp] [.....172.16.0.1][56644] -> [..192.168.10.50][...80] + guessed: [...247] [ip4][..tcp] [.....172.16.0.1][56670] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...247] [ip4][..tcp] [.....172.16.0.1][56670] -> [..192.168.10.50][...80] + guessed: [...248] [ip4][..tcp] [.....172.16.0.1][56684] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...248] [ip4][..tcp] [.....172.16.0.1][56684] -> [..192.168.10.50][...80] + new: [...323] [ip4][..tcp] [.....172.16.0.1][58034] -> [..192.168.10.50][...80] + new: [...324] [ip4][..tcp] [.....172.16.0.1][58048] -> [..192.168.10.50][...80] + new: [...325] [ip4][..tcp] [.....172.16.0.1][58062] -> [..192.168.10.50][...80] + new: [...326] [ip4][..tcp] [.....172.16.0.1][58088] -> [..192.168.10.50][...80] + new: [...327] [ip4][..tcp] [.....172.16.0.1][58102] -> [..192.168.10.50][...80] + new: [...328] [ip4][..tcp] [.....172.16.0.1][58116] -> [..192.168.10.50][...80] + new: [...329] [ip4][..tcp] [.....172.16.0.1][58130] -> [..192.168.10.50][...80] + guessed: [...249] [ip4][..tcp] [.....172.16.0.1][56710] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...249] [ip4][..tcp] [.....172.16.0.1][56710] -> [..192.168.10.50][...80] + guessed: [...250] [ip4][..tcp] [.....172.16.0.1][56724] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...250] [ip4][..tcp] [.....172.16.0.1][56724] -> [..192.168.10.50][...80] + guessed: [...251] [ip4][..tcp] [.....172.16.0.1][56738] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...251] [ip4][..tcp] [.....172.16.0.1][56738] -> [..192.168.10.50][...80] + guessed: [...252] [ip4][..tcp] [.....172.16.0.1][56764] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...252] [ip4][..tcp] [.....172.16.0.1][56764] -> [..192.168.10.50][...80] + guessed: [...253] [ip4][..tcp] [.....172.16.0.1][56778] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...253] [ip4][..tcp] [.....172.16.0.1][56778] -> [..192.168.10.50][...80] + new: [...330] [ip4][..tcp] [.....172.16.0.1][58144] -> [..192.168.10.50][...80] + new: [...331] [ip4][..tcp] [.....172.16.0.1][58158] -> [..192.168.10.50][...80] + new: [...332] [ip4][..tcp] [.....172.16.0.1][58184] -> [..192.168.10.50][...80] + new: [...333] [ip4][..tcp] [.....172.16.0.1][58198] -> [..192.168.10.50][...80] + new: [...334] [ip4][..tcp] [.....172.16.0.1][58224] -> [..192.168.10.50][...80] + DAEMON-EVENT: [Processed: 4739 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 82 / 334|skipped: 0|!detected: 0|guessed: 242|detection-updates: 0|updates: 0] + new: [...335] [ip4][..tcp] [.....172.16.0.1][58238] -> [..192.168.10.50][...80] + guessed: [...254] [ip4][..tcp] [.....172.16.0.1][56792] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...254] [ip4][..tcp] [.....172.16.0.1][56792] -> [..192.168.10.50][...80] + guessed: [...255] [ip4][..tcp] [.....172.16.0.1][56818] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...255] [ip4][..tcp] [.....172.16.0.1][56818] -> [..192.168.10.50][...80] + guessed: [...256] [ip4][..tcp] [.....172.16.0.1][56832] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...256] [ip4][..tcp] [.....172.16.0.1][56832] -> [..192.168.10.50][...80] + guessed: [...257] [ip4][..tcp] [.....172.16.0.1][56858] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...257] [ip4][..tcp] [.....172.16.0.1][56858] -> [..192.168.10.50][...80] + guessed: [...258] [ip4][..tcp] [.....172.16.0.1][56872] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...258] [ip4][..tcp] [.....172.16.0.1][56872] -> [..192.168.10.50][...80] + guessed: [...259] [ip4][..tcp] [.....172.16.0.1][56886] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...259] [ip4][..tcp] [.....172.16.0.1][56886] -> [..192.168.10.50][...80] + new: [...336] [ip4][..tcp] [.....172.16.0.1][58252] -> [..192.168.10.50][...80] + new: [...337] [ip4][..tcp] [.....172.16.0.1][58278] -> [..192.168.10.50][...80] + new: [...338] [ip4][..tcp] [.....172.16.0.1][58292] -> [..192.168.10.50][...80] + new: [...339] [ip4][..tcp] [.....172.16.0.1][58306] -> [..192.168.10.50][...80] + new: [...340] [ip4][..tcp] [.....172.16.0.1][58332] -> [..192.168.10.50][...80] + new: [...341] [ip4][..tcp] [.....172.16.0.1][58346] -> [..192.168.10.50][...80] + guessed: [...260] [ip4][..tcp] [.....172.16.0.1][56912] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...260] [ip4][..tcp] [.....172.16.0.1][56912] -> [..192.168.10.50][...80] + guessed: [...261] [ip4][..tcp] [.....172.16.0.1][56926] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...261] [ip4][..tcp] [.....172.16.0.1][56926] -> [..192.168.10.50][...80] + guessed: [...262] [ip4][..tcp] [.....172.16.0.1][56940] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...262] [ip4][..tcp] [.....172.16.0.1][56940] -> [..192.168.10.50][...80] + guessed: [...263] [ip4][..tcp] [.....172.16.0.1][56966] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...263] [ip4][..tcp] [.....172.16.0.1][56966] -> [..192.168.10.50][...80] + guessed: [...264] [ip4][..tcp] [.....172.16.0.1][56980] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...264] [ip4][..tcp] [.....172.16.0.1][56980] -> [..192.168.10.50][...80] + guessed: [...266] [ip4][..tcp] [.....172.16.0.1][57008] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...266] [ip4][..tcp] [.....172.16.0.1][57008] -> [..192.168.10.50][...80] + end: [...227] [ip4][..tcp] [.....172.16.0.1][56306] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...342] [ip4][..tcp] [.....172.16.0.1][58360] -> [..192.168.10.50][...80] + new: [...343] [ip4][..tcp] [.....172.16.0.1][58386] -> [..192.168.10.50][...80] + new: [...344] [ip4][..tcp] [.....172.16.0.1][58400] -> [..192.168.10.50][...80] + detected: [...342] [ip4][..tcp] [.....172.16.0.1][58360] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...345] [ip4][..tcp] [.....172.16.0.1][58414] -> [..192.168.10.50][...80] + new: [...346] [ip4][..tcp] [.....172.16.0.1][58440] -> [..192.168.10.50][...80] + new: [...347] [ip4][..tcp] [.....172.16.0.1][58454] -> [..192.168.10.50][...80] + guessed: [...267] [ip4][..tcp] [.....172.16.0.1][57022] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...267] [ip4][..tcp] [.....172.16.0.1][57022] -> [..192.168.10.50][...80] + guessed: [...268] [ip4][..tcp] [.....172.16.0.1][57036] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...268] [ip4][..tcp] [.....172.16.0.1][57036] -> [..192.168.10.50][...80] + guessed: [...269] [ip4][..tcp] [.....172.16.0.1][57062] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...269] [ip4][..tcp] [.....172.16.0.1][57062] -> [..192.168.10.50][...80] + guessed: [...270] [ip4][..tcp] [.....172.16.0.1][57076] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...270] [ip4][..tcp] [.....172.16.0.1][57076] -> [..192.168.10.50][...80] + guessed: [...271] [ip4][..tcp] [.....172.16.0.1][57090] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...271] [ip4][..tcp] [.....172.16.0.1][57090] -> [..192.168.10.50][...80] + guessed: [...272] [ip4][..tcp] [.....172.16.0.1][57116] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...272] [ip4][..tcp] [.....172.16.0.1][57116] -> [..192.168.10.50][...80] + analyse: [...342] [ip4][..tcp] [.....172.16.0.1][58360] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.810| 0.603| 0.941] + [IAT(c->s)...: 0.001| 3.809| 0.492| 0.866][IAT(s->c)...: 0.000| 3.810| 0.804| 1.034] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1559.400| 703.500] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...348] [ip4][..tcp] [.....172.16.0.1][58468] -> [..192.168.10.50][...80] + new: [...349] [ip4][..tcp] [.....172.16.0.1][58482] -> [..192.168.10.50][...80] + new: [...350] [ip4][..tcp] [.....172.16.0.1][58496] -> [..192.168.10.50][...80] + new: [...351] [ip4][..tcp] [.....172.16.0.1][58510] -> [..192.168.10.50][...80] + new: [...352] [ip4][..tcp] [.....172.16.0.1][58536] -> [..192.168.10.50][...80] + new: [...353] [ip4][..tcp] [.....172.16.0.1][58550] -> [..192.168.10.50][...80] + new: [...354] [ip4][..tcp] [.....172.16.0.1][58564] -> [..192.168.10.50][...80] + guessed: [...273] [ip4][..tcp] [.....172.16.0.1][57130] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...273] [ip4][..tcp] [.....172.16.0.1][57130] -> [..192.168.10.50][...80] + guessed: [...274] [ip4][..tcp] [.....172.16.0.1][57144] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...274] [ip4][..tcp] [.....172.16.0.1][57144] -> [..192.168.10.50][...80] + guessed: [...275] [ip4][..tcp] [.....172.16.0.1][57170] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...275] [ip4][..tcp] [.....172.16.0.1][57170] -> [..192.168.10.50][...80] + guessed: [...276] [ip4][..tcp] [.....172.16.0.1][57184] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...276] [ip4][..tcp] [.....172.16.0.1][57184] -> [..192.168.10.50][...80] + guessed: [...277] [ip4][..tcp] [.....172.16.0.1][57210] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...277] [ip4][..tcp] [.....172.16.0.1][57210] -> [..192.168.10.50][...80] + guessed: [...278] [ip4][..tcp] [.....172.16.0.1][57224] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...278] [ip4][..tcp] [.....172.16.0.1][57224] -> [..192.168.10.50][...80] + new: [...355] [ip4][..tcp] [.....172.16.0.1][58590] -> [..192.168.10.50][...80] + new: [...356] [ip4][..tcp] [.....172.16.0.1][58604] -> [..192.168.10.50][...80] + new: [...357] [ip4][..tcp] [.....172.16.0.1][58630] -> [..192.168.10.50][...80] + new: [...358] [ip4][..tcp] [.....172.16.0.1][58650] -> [..192.168.10.50][...80] + new: [...359] [ip4][..tcp] [.....172.16.0.1][58664] -> [..192.168.10.50][...80] + guessed: [...279] [ip4][..tcp] [.....172.16.0.1][57238] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...279] [ip4][..tcp] [.....172.16.0.1][57238] -> [..192.168.10.50][...80] + guessed: [...280] [ip4][..tcp] [.....172.16.0.1][57264] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...280] [ip4][..tcp] [.....172.16.0.1][57264] -> [..192.168.10.50][...80] + guessed: [...281] [ip4][..tcp] [.....172.16.0.1][57278] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...281] [ip4][..tcp] [.....172.16.0.1][57278] -> [..192.168.10.50][...80] + guessed: [...282] [ip4][..tcp] [.....172.16.0.1][57292] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...282] [ip4][..tcp] [.....172.16.0.1][57292] -> [..192.168.10.50][...80] + guessed: [...283] [ip4][..tcp] [.....172.16.0.1][57318] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...283] [ip4][..tcp] [.....172.16.0.1][57318] -> [..192.168.10.50][...80] + guessed: [...284] [ip4][..tcp] [.....172.16.0.1][57332] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...284] [ip4][..tcp] [.....172.16.0.1][57332] -> [..192.168.10.50][...80] + new: [...360] [ip4][..tcp] [.....172.16.0.1][58690] -> [..192.168.10.50][...80] + new: [...361] [ip4][..tcp] [.....172.16.0.1][58704] -> [..192.168.10.50][...80] + new: [...362] [ip4][..tcp] [.....172.16.0.1][58718] -> [..192.168.10.50][...80] + new: [...363] [ip4][..tcp] [.....172.16.0.1][58744] -> [..192.168.10.50][...80] + new: [...364] [ip4][..tcp] [.....172.16.0.1][58758] -> [..192.168.10.50][...80] + new: [...365] [ip4][..tcp] [.....172.16.0.1][58772] -> [..192.168.10.50][...80] + guessed: [...285] [ip4][..tcp] [.....172.16.0.1][57346] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...285] [ip4][..tcp] [.....172.16.0.1][57346] -> [..192.168.10.50][...80] + guessed: [...286] [ip4][..tcp] [.....172.16.0.1][57372] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...286] [ip4][..tcp] [.....172.16.0.1][57372] -> [..192.168.10.50][...80] + guessed: [...287] [ip4][..tcp] [.....172.16.0.1][57386] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...287] [ip4][..tcp] [.....172.16.0.1][57386] -> [..192.168.10.50][...80] + guessed: [...288] [ip4][..tcp] [.....172.16.0.1][57400] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...288] [ip4][..tcp] [.....172.16.0.1][57400] -> [..192.168.10.50][...80] + guessed: [...289] [ip4][..tcp] [.....172.16.0.1][57426] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...289] [ip4][..tcp] [.....172.16.0.1][57426] -> [..192.168.10.50][...80] + guessed: [...290] [ip4][..tcp] [.....172.16.0.1][57440] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...290] [ip4][..tcp] [.....172.16.0.1][57440] -> [..192.168.10.50][...80] + new: [...366] [ip4][..tcp] [.....172.16.0.1][58798] -> [..192.168.10.50][...80] + new: [...367] [ip4][..tcp] [.....172.16.0.1][58812] -> [..192.168.10.50][...80] + new: [...368] [ip4][..tcp] [.....172.16.0.1][58838] -> [..192.168.10.50][...80] + new: [...369] [ip4][..tcp] [.....172.16.0.1][58852] -> [..192.168.10.50][...80] + new: [...370] [ip4][..tcp] [.....172.16.0.1][58866] -> [..192.168.10.50][...80] + new: [...371] [ip4][..tcp] [.....172.16.0.1][58892] -> [..192.168.10.50][...80] + guessed: [...291] [ip4][..tcp] [.....172.16.0.1][57454] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...291] [ip4][..tcp] [.....172.16.0.1][57454] -> [..192.168.10.50][...80] + guessed: [...292] [ip4][..tcp] [.....172.16.0.1][57480] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...292] [ip4][..tcp] [.....172.16.0.1][57480] -> [..192.168.10.50][...80] + guessed: [...293] [ip4][..tcp] [.....172.16.0.1][57494] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...293] [ip4][..tcp] [.....172.16.0.1][57494] -> [..192.168.10.50][...80] + guessed: [...294] [ip4][..tcp] [.....172.16.0.1][57508] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...294] [ip4][..tcp] [.....172.16.0.1][57508] -> [..192.168.10.50][...80] + guessed: [...295] [ip4][..tcp] [.....172.16.0.1][57522] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...295] [ip4][..tcp] [.....172.16.0.1][57522] -> [..192.168.10.50][...80] + guessed: [...296] [ip4][..tcp] [.....172.16.0.1][57536] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...296] [ip4][..tcp] [.....172.16.0.1][57536] -> [..192.168.10.50][...80] + guessed: [...297] [ip4][..tcp] [.....172.16.0.1][57550] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...297] [ip4][..tcp] [.....172.16.0.1][57550] -> [..192.168.10.50][...80] + new: [...372] [ip4][..tcp] [.....172.16.0.1][58906] -> [..192.168.10.50][...80] + new: [...373] [ip4][..tcp] [.....172.16.0.1][58920] -> [..192.168.10.50][...80] + new: [...374] [ip4][..tcp] [.....172.16.0.1][58946] -> [..192.168.10.50][...80] + new: [...375] [ip4][..tcp] [.....172.16.0.1][58960] -> [..192.168.10.50][...80] + new: [...376] [ip4][..tcp] [.....172.16.0.1][58974] -> [..192.168.10.50][...80] + new: [...377] [ip4][..tcp] [.....172.16.0.1][58988] -> [..192.168.10.50][...80] + new: [...378] [ip4][..tcp] [.....172.16.0.1][59002] -> [..192.168.10.50][...80] + end: [...265] [ip4][..tcp] [.....172.16.0.1][56994] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: XSS Attack, HTTP Numeric IP Address + guessed: [...298] [ip4][..tcp] [.....172.16.0.1][57576] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...298] [ip4][..tcp] [.....172.16.0.1][57576] -> [..192.168.10.50][...80] + guessed: [...299] [ip4][..tcp] [.....172.16.0.1][57590] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...299] [ip4][..tcp] [.....172.16.0.1][57590] -> [..192.168.10.50][...80] + guessed: [...300] [ip4][..tcp] [.....172.16.0.1][57604] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...300] [ip4][..tcp] [.....172.16.0.1][57604] -> [..192.168.10.50][...80] + guessed: [...301] [ip4][..tcp] [.....172.16.0.1][57630] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...301] [ip4][..tcp] [.....172.16.0.1][57630] -> [..192.168.10.50][...80] + guessed: [...302] [ip4][..tcp] [.....172.16.0.1][57644] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...302] [ip4][..tcp] [.....172.16.0.1][57644] -> [..192.168.10.50][...80] + guessed: [...303] [ip4][..tcp] [.....172.16.0.1][57658] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...303] [ip4][..tcp] [.....172.16.0.1][57658] -> [..192.168.10.50][...80] + new: [...379] [ip4][..tcp] [.....172.16.0.1][59016] -> [..192.168.10.50][...80] + new: [...380] [ip4][..tcp] [.....172.16.0.1][59042] -> [..192.168.10.50][...80] + new: [...381] [ip4][..tcp] [.....172.16.0.1][59056] -> [..192.168.10.50][...80] + new: [...382] [ip4][..tcp] [.....172.16.0.1][59070] -> [..192.168.10.50][...80] + detected: [...380] [ip4][..tcp] [.....172.16.0.1][59042] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...383] [ip4][..tcp] [.....172.16.0.1][59096] -> [..192.168.10.50][...80] + new: [...384] [ip4][..tcp] [.....172.16.0.1][59110] -> [..192.168.10.50][...80] + guessed: [...305] [ip4][..tcp] [.....172.16.0.1][57698] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...305] [ip4][..tcp] [.....172.16.0.1][57698] -> [..192.168.10.50][...80] + guessed: [...306] [ip4][..tcp] [.....172.16.0.1][57712] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...306] [ip4][..tcp] [.....172.16.0.1][57712] -> [..192.168.10.50][...80] + guessed: [...307] [ip4][..tcp] [.....172.16.0.1][57738] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...307] [ip4][..tcp] [.....172.16.0.1][57738] -> [..192.168.10.50][...80] + guessed: [...308] [ip4][..tcp] [.....172.16.0.1][57752] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...308] [ip4][..tcp] [.....172.16.0.1][57752] -> [..192.168.10.50][...80] + new: [...385] [ip4][..tcp] [.....172.16.0.1][59124] -> [..192.168.10.50][...80] + analyse: [...380] [ip4][..tcp] [.....172.16.0.1][59042] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.823| 0.637| 1.173] + [IAT(c->s)...: 0.001| 4.822| 0.494| 1.065][IAT(s->c)...: 0.000| 4.823| 0.897| 1.306] + [PKTLEN(c->s): 66.000| 651.000| 269.000| 242.700][PKTLEN(s->c): 66.000|1935.000|1550.600| 699.400] + [BINS(c->s)..: 12,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...386] [ip4][..tcp] [.....172.16.0.1][59150] -> [..192.168.10.50][...80] + new: [...387] [ip4][..tcp] [.....172.16.0.1][59164] -> [..192.168.10.50][...80] + new: [...388] [ip4][..tcp] [.....172.16.0.1][59178] -> [..192.168.10.50][...80] + new: [...389] [ip4][..tcp] [.....172.16.0.1][59192] -> [..192.168.10.50][...80] + new: [...390] [ip4][..tcp] [.....172.16.0.1][59206] -> [..192.168.10.50][...80] + new: [...391] [ip4][..tcp] [.....172.16.0.1][59220] -> [..192.168.10.50][...80] + guessed: [...309] [ip4][..tcp] [.....172.16.0.1][57778] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...309] [ip4][..tcp] [.....172.16.0.1][57778] -> [..192.168.10.50][...80] + guessed: [...310] [ip4][..tcp] [.....172.16.0.1][57792] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...310] [ip4][..tcp] [.....172.16.0.1][57792] -> [..192.168.10.50][...80] + guessed: [...311] [ip4][..tcp] [.....172.16.0.1][57806] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...311] [ip4][..tcp] [.....172.16.0.1][57806] -> [..192.168.10.50][...80] + guessed: [...312] [ip4][..tcp] [.....172.16.0.1][57832] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...312] [ip4][..tcp] [.....172.16.0.1][57832] -> [..192.168.10.50][...80] + guessed: [...313] [ip4][..tcp] [.....172.16.0.1][57846] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...313] [ip4][..tcp] [.....172.16.0.1][57846] -> [..192.168.10.50][...80] + guessed: [...314] [ip4][..tcp] [.....172.16.0.1][57860] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...314] [ip4][..tcp] [.....172.16.0.1][57860] -> [..192.168.10.50][...80] + new: [...392] [ip4][..tcp] [.....172.16.0.1][59246] -> [..192.168.10.50][...80] + new: [...393] [ip4][..tcp] [.....172.16.0.1][59260] -> [..192.168.10.50][...80] + new: [...394] [ip4][..tcp] [.....172.16.0.1][59274] -> [..192.168.10.50][...80] + new: [...395] [ip4][..tcp] [.....172.16.0.1][59300] -> [..192.168.10.50][...80] + new: [...396] [ip4][..tcp] [.....172.16.0.1][59314] -> [..192.168.10.50][...80] + new: [...397] [ip4][..tcp] [.....172.16.0.1][59328] -> [..192.168.10.50][...80] + guessed: [...315] [ip4][..tcp] [.....172.16.0.1][57886] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...315] [ip4][..tcp] [.....172.16.0.1][57886] -> [..192.168.10.50][...80] + guessed: [...316] [ip4][..tcp] [.....172.16.0.1][57900] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...316] [ip4][..tcp] [.....172.16.0.1][57900] -> [..192.168.10.50][...80] + guessed: [...317] [ip4][..tcp] [.....172.16.0.1][57914] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...317] [ip4][..tcp] [.....172.16.0.1][57914] -> [..192.168.10.50][...80] + guessed: [...318] [ip4][..tcp] [.....172.16.0.1][57940] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...318] [ip4][..tcp] [.....172.16.0.1][57940] -> [..192.168.10.50][...80] + guessed: [...319] [ip4][..tcp] [.....172.16.0.1][57954] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...319] [ip4][..tcp] [.....172.16.0.1][57954] -> [..192.168.10.50][...80] + guessed: [...320] [ip4][..tcp] [.....172.16.0.1][57980] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...320] [ip4][..tcp] [.....172.16.0.1][57980] -> [..192.168.10.50][...80] + new: [...398] [ip4][..tcp] [.....172.16.0.1][59354] -> [..192.168.10.50][...80] + new: [...399] [ip4][..tcp] [.....172.16.0.1][59368] -> [..192.168.10.50][...80] + new: [...400] [ip4][..tcp] [.....172.16.0.1][59382] -> [..192.168.10.50][...80] + new: [...401] [ip4][..tcp] [.....172.16.0.1][59408] -> [..192.168.10.50][...80] + new: [...402] [ip4][..tcp] [.....172.16.0.1][59422] -> [..192.168.10.50][...80] + new: [...403] [ip4][..tcp] [.....172.16.0.1][59436] -> [..192.168.10.50][...80] + guessed: [...321] [ip4][..tcp] [.....172.16.0.1][57994] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...321] [ip4][..tcp] [.....172.16.0.1][57994] -> [..192.168.10.50][...80] + guessed: [...322] [ip4][..tcp] [.....172.16.0.1][58008] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...322] [ip4][..tcp] [.....172.16.0.1][58008] -> [..192.168.10.50][...80] + guessed: [...323] [ip4][..tcp] [.....172.16.0.1][58034] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...323] [ip4][..tcp] [.....172.16.0.1][58034] -> [..192.168.10.50][...80] + guessed: [...324] [ip4][..tcp] [.....172.16.0.1][58048] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...324] [ip4][..tcp] [.....172.16.0.1][58048] -> [..192.168.10.50][...80] + guessed: [...325] [ip4][..tcp] [.....172.16.0.1][58062] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...325] [ip4][..tcp] [.....172.16.0.1][58062] -> [..192.168.10.50][...80] + guessed: [...326] [ip4][..tcp] [.....172.16.0.1][58088] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...326] [ip4][..tcp] [.....172.16.0.1][58088] -> [..192.168.10.50][...80] + new: [...404] [ip4][..tcp] [.....172.16.0.1][59462] -> [..192.168.10.50][...80] + new: [...405] [ip4][..tcp] [.....172.16.0.1][59476] -> [..192.168.10.50][...80] + new: [...406] [ip4][..tcp] [.....172.16.0.1][59502] -> [..192.168.10.50][...80] + new: [...407] [ip4][..tcp] [.....172.16.0.1][59516] -> [..192.168.10.50][...80] + new: [...408] [ip4][..tcp] [.....172.16.0.1][59530] -> [..192.168.10.50][...80] + guessed: [...327] [ip4][..tcp] [.....172.16.0.1][58102] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...327] [ip4][..tcp] [.....172.16.0.1][58102] -> [..192.168.10.50][...80] + guessed: [...328] [ip4][..tcp] [.....172.16.0.1][58116] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...328] [ip4][..tcp] [.....172.16.0.1][58116] -> [..192.168.10.50][...80] + guessed: [...329] [ip4][..tcp] [.....172.16.0.1][58130] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...329] [ip4][..tcp] [.....172.16.0.1][58130] -> [..192.168.10.50][...80] + guessed: [...330] [ip4][..tcp] [.....172.16.0.1][58144] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...330] [ip4][..tcp] [.....172.16.0.1][58144] -> [..192.168.10.50][...80] + guessed: [...331] [ip4][..tcp] [.....172.16.0.1][58158] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...331] [ip4][..tcp] [.....172.16.0.1][58158] -> [..192.168.10.50][...80] + guessed: [...332] [ip4][..tcp] [.....172.16.0.1][58184] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...332] [ip4][..tcp] [.....172.16.0.1][58184] -> [..192.168.10.50][...80] + guessed: [...333] [ip4][..tcp] [.....172.16.0.1][58198] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...333] [ip4][..tcp] [.....172.16.0.1][58198] -> [..192.168.10.50][...80] + new: [...409] [ip4][..tcp] [.....172.16.0.1][59556] -> [..192.168.10.50][...80] + new: [...410] [ip4][..tcp] [.....172.16.0.1][59570] -> [..192.168.10.50][...80] + new: [...411] [ip4][..tcp] [.....172.16.0.1][59584] -> [..192.168.10.50][...80] + new: [...412] [ip4][..tcp] [.....172.16.0.1][59610] -> [..192.168.10.50][...80] + new: [...413] [ip4][..tcp] [.....172.16.0.1][59624] -> [..192.168.10.50][...80] + new: [...414] [ip4][..tcp] [.....172.16.0.1][59650] -> [..192.168.10.50][...80] + guessed: [...334] [ip4][..tcp] [.....172.16.0.1][58224] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...334] [ip4][..tcp] [.....172.16.0.1][58224] -> [..192.168.10.50][...80] + guessed: [...335] [ip4][..tcp] [.....172.16.0.1][58238] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...335] [ip4][..tcp] [.....172.16.0.1][58238] -> [..192.168.10.50][...80] + guessed: [...336] [ip4][..tcp] [.....172.16.0.1][58252] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...336] [ip4][..tcp] [.....172.16.0.1][58252] -> [..192.168.10.50][...80] + guessed: [...337] [ip4][..tcp] [.....172.16.0.1][58278] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...337] [ip4][..tcp] [.....172.16.0.1][58278] -> [..192.168.10.50][...80] + guessed: [...338] [ip4][..tcp] [.....172.16.0.1][58292] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...338] [ip4][..tcp] [.....172.16.0.1][58292] -> [..192.168.10.50][...80] + guessed: [...339] [ip4][..tcp] [.....172.16.0.1][58306] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...339] [ip4][..tcp] [.....172.16.0.1][58306] -> [..192.168.10.50][...80] + new: [...415] [ip4][..tcp] [.....172.16.0.1][59664] -> [..192.168.10.50][...80] + new: [...416] [ip4][..tcp] [.....172.16.0.1][59678] -> [..192.168.10.50][...80] + new: [...417] [ip4][..tcp] [.....172.16.0.1][59704] -> [..192.168.10.50][...80] + new: [...418] [ip4][..tcp] [.....172.16.0.1][59718] -> [..192.168.10.50][...80] + new: [...419] [ip4][..tcp] [.....172.16.0.1][59732] -> [..192.168.10.50][...80] + new: [...420] [ip4][..tcp] [.....172.16.0.1][59758] -> [..192.168.10.50][...80] + end: [...304] [ip4][..tcp] [.....172.16.0.1][57684] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + guessed: [...340] [ip4][..tcp] [.....172.16.0.1][58332] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...340] [ip4][..tcp] [.....172.16.0.1][58332] -> [..192.168.10.50][...80] + guessed: [...341] [ip4][..tcp] [.....172.16.0.1][58346] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...341] [ip4][..tcp] [.....172.16.0.1][58346] -> [..192.168.10.50][...80] + guessed: [...343] [ip4][..tcp] [.....172.16.0.1][58386] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...343] [ip4][..tcp] [.....172.16.0.1][58386] -> [..192.168.10.50][...80] + guessed: [...344] [ip4][..tcp] [.....172.16.0.1][58400] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...344] [ip4][..tcp] [.....172.16.0.1][58400] -> [..192.168.10.50][...80] + guessed: [...345] [ip4][..tcp] [.....172.16.0.1][58414] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...345] [ip4][..tcp] [.....172.16.0.1][58414] -> [..192.168.10.50][...80] + new: [...421] [ip4][..tcp] [.....172.16.0.1][59772] -> [..192.168.10.50][...80] + detected: [...419] [ip4][..tcp] [.....172.16.0.1][59732] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...422] [ip4][..tcp] [.....172.16.0.1][59786] -> [..192.168.10.50][...80] + new: [...423] [ip4][..tcp] [.....172.16.0.1][59812] -> [..192.168.10.50][...80] + new: [...424] [ip4][..tcp] [.....172.16.0.1][59826] -> [..192.168.10.50][...80] + analyse: [...419] [ip4][..tcp] [.....172.16.0.1][59732] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.767| 0.604| 0.933] + [IAT(c->s)...: 0.001| 3.766| 0.494| 0.860][IAT(s->c)...: 0.000| 3.767| 0.806| 1.024] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1559.300| 703.400] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...425] [ip4][..tcp] [.....172.16.0.1][59852] -> [..192.168.10.50][...80] + new: [...426] [ip4][..tcp] [.....172.16.0.1][59866] -> [..192.168.10.50][...80] + guessed: [...346] [ip4][..tcp] [.....172.16.0.1][58440] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...346] [ip4][..tcp] [.....172.16.0.1][58440] -> [..192.168.10.50][...80] + guessed: [...347] [ip4][..tcp] [.....172.16.0.1][58454] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...347] [ip4][..tcp] [.....172.16.0.1][58454] -> [..192.168.10.50][...80] + guessed: [...348] [ip4][..tcp] [.....172.16.0.1][58468] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...348] [ip4][..tcp] [.....172.16.0.1][58468] -> [..192.168.10.50][...80] + guessed: [...349] [ip4][..tcp] [.....172.16.0.1][58482] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...349] [ip4][..tcp] [.....172.16.0.1][58482] -> [..192.168.10.50][...80] + guessed: [...350] [ip4][..tcp] [.....172.16.0.1][58496] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...350] [ip4][..tcp] [.....172.16.0.1][58496] -> [..192.168.10.50][...80] + guessed: [...351] [ip4][..tcp] [.....172.16.0.1][58510] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...351] [ip4][..tcp] [.....172.16.0.1][58510] -> [..192.168.10.50][...80] + new: [...427] [ip4][..tcp] [.....172.16.0.1][59880] -> [..192.168.10.50][...80] + new: [...428] [ip4][..tcp] [.....172.16.0.1][59906] -> [..192.168.10.50][...80] + new: [...429] [ip4][..tcp] [.....172.16.0.1][59920] -> [..192.168.10.50][...80] + new: [...430] [ip4][..tcp] [.....172.16.0.1][59934] -> [..192.168.10.50][...80] + new: [...431] [ip4][..tcp] [.....172.16.0.1][59960] -> [..192.168.10.50][...80] + new: [...432] [ip4][..tcp] [.....172.16.0.1][59974] -> [..192.168.10.50][...80] + guessed: [...352] [ip4][..tcp] [.....172.16.0.1][58536] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...352] [ip4][..tcp] [.....172.16.0.1][58536] -> [..192.168.10.50][...80] + guessed: [...353] [ip4][..tcp] [.....172.16.0.1][58550] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...353] [ip4][..tcp] [.....172.16.0.1][58550] -> [..192.168.10.50][...80] + guessed: [...354] [ip4][..tcp] [.....172.16.0.1][58564] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...354] [ip4][..tcp] [.....172.16.0.1][58564] -> [..192.168.10.50][...80] + guessed: [...355] [ip4][..tcp] [.....172.16.0.1][58590] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...355] [ip4][..tcp] [.....172.16.0.1][58590] -> [..192.168.10.50][...80] + guessed: [...356] [ip4][..tcp] [.....172.16.0.1][58604] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...356] [ip4][..tcp] [.....172.16.0.1][58604] -> [..192.168.10.50][...80] + guessed: [...357] [ip4][..tcp] [.....172.16.0.1][58630] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...357] [ip4][..tcp] [.....172.16.0.1][58630] -> [..192.168.10.50][...80] + new: [...433] [ip4][..tcp] [.....172.16.0.1][59988] -> [..192.168.10.50][...80] + new: [...434] [ip4][..tcp] [.....172.16.0.1][60014] -> [..192.168.10.50][...80] + new: [...435] [ip4][..tcp] [.....172.16.0.1][60028] -> [..192.168.10.50][...80] + new: [...436] [ip4][..tcp] [.....172.16.0.1][60042] -> [..192.168.10.50][...80] + new: [...437] [ip4][..tcp] [.....172.16.0.1][60056] -> [..192.168.10.50][...80] + new: [...438] [ip4][..tcp] [.....172.16.0.1][60084] -> [..192.168.10.50][...80] + guessed: [...358] [ip4][..tcp] [.....172.16.0.1][58650] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...358] [ip4][..tcp] [.....172.16.0.1][58650] -> [..192.168.10.50][...80] + guessed: [...359] [ip4][..tcp] [.....172.16.0.1][58664] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...359] [ip4][..tcp] [.....172.16.0.1][58664] -> [..192.168.10.50][...80] + guessed: [...360] [ip4][..tcp] [.....172.16.0.1][58690] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...360] [ip4][..tcp] [.....172.16.0.1][58690] -> [..192.168.10.50][...80] + guessed: [...361] [ip4][..tcp] [.....172.16.0.1][58704] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...361] [ip4][..tcp] [.....172.16.0.1][58704] -> [..192.168.10.50][...80] + guessed: [...362] [ip4][..tcp] [.....172.16.0.1][58718] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...362] [ip4][..tcp] [.....172.16.0.1][58718] -> [..192.168.10.50][...80] + guessed: [...363] [ip4][..tcp] [.....172.16.0.1][58744] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...363] [ip4][..tcp] [.....172.16.0.1][58744] -> [..192.168.10.50][...80] + new: [...439] [ip4][..tcp] [.....172.16.0.1][60134] -> [..192.168.10.50][...80] + new: [...440] [ip4][..tcp] [.....172.16.0.1][60136] -> [..192.168.10.50][...80] + new: [...441] [ip4][..tcp] [.....172.16.0.1][60154] -> [..192.168.10.50][...80] + new: [...442] [ip4][..tcp] [.....172.16.0.1][60180] -> [..192.168.10.50][...80] + new: [...443] [ip4][..tcp] [.....172.16.0.1][60194] -> [..192.168.10.50][...80] + new: [...444] [ip4][..tcp] [.....172.16.0.1][60220] -> [..192.168.10.50][...80] + guessed: [...364] [ip4][..tcp] [.....172.16.0.1][58758] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...364] [ip4][..tcp] [.....172.16.0.1][58758] -> [..192.168.10.50][...80] + guessed: [...365] [ip4][..tcp] [.....172.16.0.1][58772] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...365] [ip4][..tcp] [.....172.16.0.1][58772] -> [..192.168.10.50][...80] + guessed: [...366] [ip4][..tcp] [.....172.16.0.1][58798] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...366] [ip4][..tcp] [.....172.16.0.1][58798] -> [..192.168.10.50][...80] + guessed: [...367] [ip4][..tcp] [.....172.16.0.1][58812] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...367] [ip4][..tcp] [.....172.16.0.1][58812] -> [..192.168.10.50][...80] + guessed: [...368] [ip4][..tcp] [.....172.16.0.1][58838] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...368] [ip4][..tcp] [.....172.16.0.1][58838] -> [..192.168.10.50][...80] + guessed: [...369] [ip4][..tcp] [.....172.16.0.1][58852] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...369] [ip4][..tcp] [.....172.16.0.1][58852] -> [..192.168.10.50][...80] + guessed: [...370] [ip4][..tcp] [.....172.16.0.1][58866] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...370] [ip4][..tcp] [.....172.16.0.1][58866] -> [..192.168.10.50][...80] + new: [...445] [ip4][..tcp] [.....172.16.0.1][60234] -> [..192.168.10.50][...80] + new: [...446] [ip4][..tcp] [.....172.16.0.1][60260] -> [..192.168.10.50][...80] + new: [...447] [ip4][..tcp] [.....172.16.0.1][60274] -> [..192.168.10.50][...80] + new: [...448] [ip4][..tcp] [.....172.16.0.1][60288] -> [..192.168.10.50][...80] + new: [...449] [ip4][..tcp] [.....172.16.0.1][60314] -> [..192.168.10.50][...80] + new: [...450] [ip4][..tcp] [.....172.16.0.1][60328] -> [..192.168.10.50][...80] + guessed: [...374] [ip4][..tcp] [.....172.16.0.1][58946] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...374] [ip4][..tcp] [.....172.16.0.1][58946] -> [..192.168.10.50][...80] + guessed: [...375] [ip4][..tcp] [.....172.16.0.1][58960] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...375] [ip4][..tcp] [.....172.16.0.1][58960] -> [..192.168.10.50][...80] + guessed: [...376] [ip4][..tcp] [.....172.16.0.1][58974] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...376] [ip4][..tcp] [.....172.16.0.1][58974] -> [..192.168.10.50][...80] + guessed: [...371] [ip4][..tcp] [.....172.16.0.1][58892] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...371] [ip4][..tcp] [.....172.16.0.1][58892] -> [..192.168.10.50][...80] + guessed: [...372] [ip4][..tcp] [.....172.16.0.1][58906] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...372] [ip4][..tcp] [.....172.16.0.1][58906] -> [..192.168.10.50][...80] + guessed: [...373] [ip4][..tcp] [.....172.16.0.1][58920] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...373] [ip4][..tcp] [.....172.16.0.1][58920] -> [..192.168.10.50][...80] + new: [...451] [ip4][..tcp] [.....172.16.0.1][60342] -> [..192.168.10.50][...80] + new: [...452] [ip4][..tcp] [.....172.16.0.1][60356] -> [..192.168.10.50][...80] + new: [...453] [ip4][..tcp] [.....172.16.0.1][60370] -> [..192.168.10.50][...80] + new: [...454] [ip4][..tcp] [.....172.16.0.1][60384] -> [..192.168.10.50][...80] + new: [...455] [ip4][..tcp] [.....172.16.0.1][60410] -> [..192.168.10.50][...80] + new: [...456] [ip4][..tcp] [.....172.16.0.1][60424] -> [..192.168.10.50][...80] + new: [...457] [ip4][..tcp] [.....172.16.0.1][60438] -> [..192.168.10.50][...80] + guessed: [...377] [ip4][..tcp] [.....172.16.0.1][58988] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...377] [ip4][..tcp] [.....172.16.0.1][58988] -> [..192.168.10.50][...80] + guessed: [...378] [ip4][..tcp] [.....172.16.0.1][59002] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...378] [ip4][..tcp] [.....172.16.0.1][59002] -> [..192.168.10.50][...80] + guessed: [...379] [ip4][..tcp] [.....172.16.0.1][59016] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...379] [ip4][..tcp] [.....172.16.0.1][59016] -> [..192.168.10.50][...80] + guessed: [...381] [ip4][..tcp] [.....172.16.0.1][59056] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...381] [ip4][..tcp] [.....172.16.0.1][59056] -> [..192.168.10.50][...80] + guessed: [...382] [ip4][..tcp] [.....172.16.0.1][59070] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...382] [ip4][..tcp] [.....172.16.0.1][59070] -> [..192.168.10.50][...80] + end: [...342] [ip4][..tcp] [.....172.16.0.1][58360] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: XSS Attack, HTTP Numeric IP Address + new: [...458] [ip4][..tcp] [.....172.16.0.1][60464] -> [..192.168.10.50][...80] + new: [...459] [ip4][..tcp] [.....172.16.0.1][60478] -> [..192.168.10.50][...80] + detected: [...458] [ip4][..tcp] [.....172.16.0.1][60464] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...460] [ip4][..tcp] [.....172.16.0.1][60504] -> [..192.168.10.50][...80] + new: [...461] [ip4][..tcp] [.....172.16.0.1][60518] -> [..192.168.10.50][...80] + new: [...462] [ip4][..tcp] [.....172.16.0.1][60532] -> [..192.168.10.50][...80] + guessed: [...383] [ip4][..tcp] [.....172.16.0.1][59096] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...383] [ip4][..tcp] [.....172.16.0.1][59096] -> [..192.168.10.50][...80] + guessed: [...384] [ip4][..tcp] [.....172.16.0.1][59110] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...384] [ip4][..tcp] [.....172.16.0.1][59110] -> [..192.168.10.50][...80] + guessed: [...385] [ip4][..tcp] [.....172.16.0.1][59124] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...385] [ip4][..tcp] [.....172.16.0.1][59124] -> [..192.168.10.50][...80] + guessed: [...386] [ip4][..tcp] [.....172.16.0.1][59150] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...386] [ip4][..tcp] [.....172.16.0.1][59150] -> [..192.168.10.50][...80] + guessed: [...387] [ip4][..tcp] [.....172.16.0.1][59164] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...387] [ip4][..tcp] [.....172.16.0.1][59164] -> [..192.168.10.50][...80] + guessed: [...388] [ip4][..tcp] [.....172.16.0.1][59178] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...388] [ip4][..tcp] [.....172.16.0.1][59178] -> [..192.168.10.50][...80] + guessed: [...389] [ip4][..tcp] [.....172.16.0.1][59192] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...389] [ip4][..tcp] [.....172.16.0.1][59192] -> [..192.168.10.50][...80] + new: [...463] [ip4][..tcp] [.....172.16.0.1][60558] -> [..192.168.10.50][...80] + analyse: [...458] [ip4][..tcp] [.....172.16.0.1][60464] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.582| 0.571| 0.887] + [IAT(c->s)...: 0.001| 3.581| 0.449| 0.813][IAT(s->c)...: 0.000| 3.582| 0.793| 0.969] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1934.000|1550.300| 699.200] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...464] [ip4][..tcp] [.....172.16.0.1][60572] -> [..192.168.10.50][...80] + new: [...465] [ip4][..tcp] [.....172.16.0.1][60598] -> [..192.168.10.50][...80] + new: [...466] [ip4][..tcp] [.....172.16.0.1][60612] -> [..192.168.10.50][...80] + new: [...467] [ip4][..tcp] [.....172.16.0.1][60626] -> [..192.168.10.50][...80] + new: [...468] [ip4][..tcp] [.....172.16.0.1][60652] -> [..192.168.10.50][...80] + guessed: [...390] [ip4][..tcp] [.....172.16.0.1][59206] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...390] [ip4][..tcp] [.....172.16.0.1][59206] -> [..192.168.10.50][...80] + guessed: [...391] [ip4][..tcp] [.....172.16.0.1][59220] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...391] [ip4][..tcp] [.....172.16.0.1][59220] -> [..192.168.10.50][...80] + guessed: [...392] [ip4][..tcp] [.....172.16.0.1][59246] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...392] [ip4][..tcp] [.....172.16.0.1][59246] -> [..192.168.10.50][...80] + guessed: [...393] [ip4][..tcp] [.....172.16.0.1][59260] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...393] [ip4][..tcp] [.....172.16.0.1][59260] -> [..192.168.10.50][...80] + guessed: [...394] [ip4][..tcp] [.....172.16.0.1][59274] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...394] [ip4][..tcp] [.....172.16.0.1][59274] -> [..192.168.10.50][...80] + guessed: [...395] [ip4][..tcp] [.....172.16.0.1][59300] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...395] [ip4][..tcp] [.....172.16.0.1][59300] -> [..192.168.10.50][...80] + guessed: [...396] [ip4][..tcp] [.....172.16.0.1][59314] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...396] [ip4][..tcp] [.....172.16.0.1][59314] -> [..192.168.10.50][...80] + new: [...469] [ip4][..tcp] [.....172.16.0.1][60666] -> [..192.168.10.50][...80] + new: [...470] [ip4][..tcp] [.....172.16.0.1][60692] -> [..192.168.10.50][...80] + new: [...471] [ip4][..tcp] [.....172.16.0.1][60706] -> [..192.168.10.50][...80] + new: [...472] [ip4][..tcp] [.....172.16.0.1][60720] -> [..192.168.10.50][...80] + new: [...473] [ip4][..tcp] [.....172.16.0.1][60734] -> [..192.168.10.50][...80] + new: [...474] [ip4][..tcp] [.....172.16.0.1][60748] -> [..192.168.10.50][...80] + new: [...475] [ip4][..tcp] [.....172.16.0.1][60762] -> [..192.168.10.50][...80] + guessed: [...397] [ip4][..tcp] [.....172.16.0.1][59328] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...397] [ip4][..tcp] [.....172.16.0.1][59328] -> [..192.168.10.50][...80] + guessed: [...398] [ip4][..tcp] [.....172.16.0.1][59354] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...398] [ip4][..tcp] [.....172.16.0.1][59354] -> [..192.168.10.50][...80] + guessed: [...399] [ip4][..tcp] [.....172.16.0.1][59368] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...399] [ip4][..tcp] [.....172.16.0.1][59368] -> [..192.168.10.50][...80] + guessed: [...400] [ip4][..tcp] [.....172.16.0.1][59382] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...400] [ip4][..tcp] [.....172.16.0.1][59382] -> [..192.168.10.50][...80] + guessed: [...401] [ip4][..tcp] [.....172.16.0.1][59408] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...401] [ip4][..tcp] [.....172.16.0.1][59408] -> [..192.168.10.50][...80] + guessed: [...402] [ip4][..tcp] [.....172.16.0.1][59422] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...402] [ip4][..tcp] [.....172.16.0.1][59422] -> [..192.168.10.50][...80] + new: [...476] [ip4][..tcp] [.....172.16.0.1][60788] -> [..192.168.10.50][...80] + new: [...477] [ip4][..tcp] [.....172.16.0.1][60802] -> [..192.168.10.50][...80] + new: [...478] [ip4][..tcp] [.....172.16.0.1][60816] -> [..192.168.10.50][...80] + new: [...479] [ip4][..tcp] [.....172.16.0.1][60842] -> [..192.168.10.50][...80] + new: [...480] [ip4][..tcp] [.....172.16.0.1][60856] -> [..192.168.10.50][...80] + guessed: [...403] [ip4][..tcp] [.....172.16.0.1][59436] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...403] [ip4][..tcp] [.....172.16.0.1][59436] -> [..192.168.10.50][...80] + guessed: [...404] [ip4][..tcp] [.....172.16.0.1][59462] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...404] [ip4][..tcp] [.....172.16.0.1][59462] -> [..192.168.10.50][...80] + guessed: [...405] [ip4][..tcp] [.....172.16.0.1][59476] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...405] [ip4][..tcp] [.....172.16.0.1][59476] -> [..192.168.10.50][...80] + guessed: [...406] [ip4][..tcp] [.....172.16.0.1][59502] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...406] [ip4][..tcp] [.....172.16.0.1][59502] -> [..192.168.10.50][...80] + guessed: [...407] [ip4][..tcp] [.....172.16.0.1][59516] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...407] [ip4][..tcp] [.....172.16.0.1][59516] -> [..192.168.10.50][...80] + guessed: [...408] [ip4][..tcp] [.....172.16.0.1][59530] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...408] [ip4][..tcp] [.....172.16.0.1][59530] -> [..192.168.10.50][...80] + new: [...481] [ip4][..tcp] [.....172.16.0.1][60882] -> [..192.168.10.50][...80] + new: [...482] [ip4][..tcp] [.....172.16.0.1][60896] -> [..192.168.10.50][...80] + new: [...483] [ip4][..tcp] [.....172.16.0.1][60922] -> [..192.168.10.50][...80] + new: [...484] [ip4][..tcp] [.....172.16.0.1][60936] -> [..192.168.10.50][...80] + new: [...485] [ip4][..tcp] [.....172.16.0.1][60950] -> [..192.168.10.50][...80] + new: [...486] [ip4][..tcp] [.....172.16.0.1][60976] -> [..192.168.10.50][...80] + guessed: [...409] [ip4][..tcp] [.....172.16.0.1][59556] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...409] [ip4][..tcp] [.....172.16.0.1][59556] -> [..192.168.10.50][...80] + guessed: [...410] [ip4][..tcp] [.....172.16.0.1][59570] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...410] [ip4][..tcp] [.....172.16.0.1][59570] -> [..192.168.10.50][...80] + guessed: [...411] [ip4][..tcp] [.....172.16.0.1][59584] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...411] [ip4][..tcp] [.....172.16.0.1][59584] -> [..192.168.10.50][...80] + guessed: [...412] [ip4][..tcp] [.....172.16.0.1][59610] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...412] [ip4][..tcp] [.....172.16.0.1][59610] -> [..192.168.10.50][...80] + guessed: [...413] [ip4][..tcp] [.....172.16.0.1][59624] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...413] [ip4][..tcp] [.....172.16.0.1][59624] -> [..192.168.10.50][...80] + new: [...487] [ip4][..tcp] [.....172.16.0.1][60990] -> [..192.168.10.50][...80] + new: [...488] [ip4][..tcp] [.....172.16.0.1][32784] -> [..192.168.10.50][...80] + new: [...489] [ip4][..tcp] [.....172.16.0.1][32798] -> [..192.168.10.50][...80] + new: [...490] [ip4][..tcp] [.....172.16.0.1][32812] -> [..192.168.10.50][...80] + new: [...491] [ip4][..tcp] [.....172.16.0.1][32838] -> [..192.168.10.50][...80] + new: [...492] [ip4][..tcp] [.....172.16.0.1][32852] -> [..192.168.10.50][...80] + end: [...380] [ip4][..tcp] [.....172.16.0.1][59042] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + guessed: [...414] [ip4][..tcp] [.....172.16.0.1][59650] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...414] [ip4][..tcp] [.....172.16.0.1][59650] -> [..192.168.10.50][...80] + guessed: [...415] [ip4][..tcp] [.....172.16.0.1][59664] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...415] [ip4][..tcp] [.....172.16.0.1][59664] -> [..192.168.10.50][...80] + guessed: [...416] [ip4][..tcp] [.....172.16.0.1][59678] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...416] [ip4][..tcp] [.....172.16.0.1][59678] -> [..192.168.10.50][...80] + guessed: [...417] [ip4][..tcp] [.....172.16.0.1][59704] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...417] [ip4][..tcp] [.....172.16.0.1][59704] -> [..192.168.10.50][...80] + guessed: [...418] [ip4][..tcp] [.....172.16.0.1][59718] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...418] [ip4][..tcp] [.....172.16.0.1][59718] -> [..192.168.10.50][...80] + new: [...493] [ip4][..tcp] [.....172.16.0.1][32878] -> [..192.168.10.50][...80] + new: [...494] [ip4][..tcp] [.....172.16.0.1][32892] -> [..192.168.10.50][...80] + new: [...495] [ip4][..tcp] [.....172.16.0.1][32906] -> [..192.168.10.50][...80] + new: [...496] [ip4][..tcp] [.....172.16.0.1][32932] -> [..192.168.10.50][...80] + new: [...497] [ip4][..tcp] [.....172.16.0.1][32946] -> [..192.168.10.50][...80] + detected: [...495] [ip4][..tcp] [.....172.16.0.1][32906] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...498] [ip4][..tcp] [.....172.16.0.1][32960] -> [..192.168.10.50][...80] + guessed: [...420] [ip4][..tcp] [.....172.16.0.1][59758] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...420] [ip4][..tcp] [.....172.16.0.1][59758] -> [..192.168.10.50][...80] + guessed: [...421] [ip4][..tcp] [.....172.16.0.1][59772] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...421] [ip4][..tcp] [.....172.16.0.1][59772] -> [..192.168.10.50][...80] + guessed: [...422] [ip4][..tcp] [.....172.16.0.1][59786] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...422] [ip4][..tcp] [.....172.16.0.1][59786] -> [..192.168.10.50][...80] + guessed: [...423] [ip4][..tcp] [.....172.16.0.1][59812] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...423] [ip4][..tcp] [.....172.16.0.1][59812] -> [..192.168.10.50][...80] + guessed: [...424] [ip4][..tcp] [.....172.16.0.1][59826] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...424] [ip4][..tcp] [.....172.16.0.1][59826] -> [..192.168.10.50][...80] + new: [...499] [ip4][..tcp] [.....172.16.0.1][32974] -> [..192.168.10.50][...80] + new: [...500] [ip4][..tcp] [.....172.16.0.1][32988] -> [..192.168.10.50][...80] + new: [...501] [ip4][..tcp] [.....172.16.0.1][33002] -> [..192.168.10.50][...80] + analyse: [...495] [ip4][..tcp] [.....172.16.0.1][32906] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.862| 0.614| 0.953] + [IAT(c->s)...: 0.001| 3.861| 0.502| 0.878][IAT(s->c)...: 0.000| 3.862| 0.818| 1.046] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1559.200| 703.400] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...502] [ip4][..tcp] [.....172.16.0.1][33028] -> [..192.168.10.50][...80] + new: [...503] [ip4][..tcp] [.....172.16.0.1][33042] -> [..192.168.10.50][...80] + new: [...504] [ip4][..tcp] [.....172.16.0.1][33068] -> [..192.168.10.50][...80] + guessed: [...425] [ip4][..tcp] [.....172.16.0.1][59852] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...425] [ip4][..tcp] [.....172.16.0.1][59852] -> [..192.168.10.50][...80] + guessed: [...426] [ip4][..tcp] [.....172.16.0.1][59866] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...426] [ip4][..tcp] [.....172.16.0.1][59866] -> [..192.168.10.50][...80] + guessed: [...427] [ip4][..tcp] [.....172.16.0.1][59880] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...427] [ip4][..tcp] [.....172.16.0.1][59880] -> [..192.168.10.50][...80] + guessed: [...428] [ip4][..tcp] [.....172.16.0.1][59906] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...428] [ip4][..tcp] [.....172.16.0.1][59906] -> [..192.168.10.50][...80] + guessed: [...429] [ip4][..tcp] [.....172.16.0.1][59920] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...429] [ip4][..tcp] [.....172.16.0.1][59920] -> [..192.168.10.50][...80] + guessed: [...430] [ip4][..tcp] [.....172.16.0.1][59934] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...430] [ip4][..tcp] [.....172.16.0.1][59934] -> [..192.168.10.50][...80] + guessed: [...431] [ip4][..tcp] [.....172.16.0.1][59960] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...431] [ip4][..tcp] [.....172.16.0.1][59960] -> [..192.168.10.50][...80] + new: [...505] [ip4][..tcp] [.....172.16.0.1][33082] -> [..192.168.10.50][...80] + new: [...506] [ip4][..tcp] [.....172.16.0.1][33096] -> [..192.168.10.50][...80] + new: [...507] [ip4][..tcp] [.....172.16.0.1][33122] -> [..192.168.10.50][...80] + new: [...508] [ip4][..tcp] [.....172.16.0.1][33136] -> [..192.168.10.50][...80] + new: [...509] [ip4][..tcp] [.....172.16.0.1][33162] -> [..192.168.10.50][...80] + new: [...510] [ip4][..tcp] [.....172.16.0.1][33176] -> [..192.168.10.50][...80] + guessed: [...432] [ip4][..tcp] [.....172.16.0.1][59974] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...432] [ip4][..tcp] [.....172.16.0.1][59974] -> [..192.168.10.50][...80] + guessed: [...433] [ip4][..tcp] [.....172.16.0.1][59988] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...433] [ip4][..tcp] [.....172.16.0.1][59988] -> [..192.168.10.50][...80] + guessed: [...434] [ip4][..tcp] [.....172.16.0.1][60014] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...434] [ip4][..tcp] [.....172.16.0.1][60014] -> [..192.168.10.50][...80] + guessed: [...435] [ip4][..tcp] [.....172.16.0.1][60028] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...435] [ip4][..tcp] [.....172.16.0.1][60028] -> [..192.168.10.50][...80] + guessed: [...436] [ip4][..tcp] [.....172.16.0.1][60042] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...436] [ip4][..tcp] [.....172.16.0.1][60042] -> [..192.168.10.50][...80] + guessed: [...437] [ip4][..tcp] [.....172.16.0.1][60056] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...437] [ip4][..tcp] [.....172.16.0.1][60056] -> [..192.168.10.50][...80] + new: [...511] [ip4][..tcp] [.....172.16.0.1][33202] -> [..192.168.10.50][...80] + new: [...512] [ip4][..tcp] [.....172.16.0.1][33216] -> [..192.168.10.50][...80] + new: [...513] [ip4][..tcp] [.....172.16.0.1][33230] -> [..192.168.10.50][...80] + new: [...514] [ip4][..tcp] [.....172.16.0.1][33256] -> [..192.168.10.50][...80] + new: [...515] [ip4][..tcp] [.....172.16.0.1][33270] -> [..192.168.10.50][...80] + guessed: [...438] [ip4][..tcp] [.....172.16.0.1][60084] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...438] [ip4][..tcp] [.....172.16.0.1][60084] -> [..192.168.10.50][...80] + guessed: [...439] [ip4][..tcp] [.....172.16.0.1][60134] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...439] [ip4][..tcp] [.....172.16.0.1][60134] -> [..192.168.10.50][...80] + guessed: [...440] [ip4][..tcp] [.....172.16.0.1][60136] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...440] [ip4][..tcp] [.....172.16.0.1][60136] -> [..192.168.10.50][...80] + guessed: [...441] [ip4][..tcp] [.....172.16.0.1][60154] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...441] [ip4][..tcp] [.....172.16.0.1][60154] -> [..192.168.10.50][...80] + guessed: [...442] [ip4][..tcp] [.....172.16.0.1][60180] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...442] [ip4][..tcp] [.....172.16.0.1][60180] -> [..192.168.10.50][...80] + guessed: [...443] [ip4][..tcp] [.....172.16.0.1][60194] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...443] [ip4][..tcp] [.....172.16.0.1][60194] -> [..192.168.10.50][...80] + new: [...516] [ip4][..tcp] [.....172.16.0.1][33296] -> [..192.168.10.50][...80] + new: [...517] [ip4][..tcp] [.....172.16.0.1][33310] -> [..192.168.10.50][...80] + new: [...518] [ip4][..tcp] [.....172.16.0.1][33324] -> [..192.168.10.50][...80] + new: [...519] [ip4][..tcp] [.....172.16.0.1][33350] -> [..192.168.10.50][...80] + new: [...520] [ip4][..tcp] [.....172.16.0.1][33364] -> [..192.168.10.50][...80] + new: [...521] [ip4][..tcp] [.....172.16.0.1][33378] -> [..192.168.10.50][...80] + guessed: [...444] [ip4][..tcp] [.....172.16.0.1][60220] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...444] [ip4][..tcp] [.....172.16.0.1][60220] -> [..192.168.10.50][...80] + guessed: [...445] [ip4][..tcp] [.....172.16.0.1][60234] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...445] [ip4][..tcp] [.....172.16.0.1][60234] -> [..192.168.10.50][...80] + guessed: [...446] [ip4][..tcp] [.....172.16.0.1][60260] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...446] [ip4][..tcp] [.....172.16.0.1][60260] -> [..192.168.10.50][...80] + guessed: [...447] [ip4][..tcp] [.....172.16.0.1][60274] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...447] [ip4][..tcp] [.....172.16.0.1][60274] -> [..192.168.10.50][...80] + guessed: [...448] [ip4][..tcp] [.....172.16.0.1][60288] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...448] [ip4][..tcp] [.....172.16.0.1][60288] -> [..192.168.10.50][...80] + new: [...522] [ip4][..tcp] [.....172.16.0.1][33404] -> [..192.168.10.50][...80] + new: [...523] [ip4][..tcp] [.....172.16.0.1][33418] -> [..192.168.10.50][...80] + new: [...524] [ip4][..tcp] [.....172.16.0.1][33444] -> [..192.168.10.50][...80] + new: [...525] [ip4][..tcp] [.....172.16.0.1][33458] -> [..192.168.10.50][...80] + new: [...526] [ip4][..tcp] [.....172.16.0.1][33472] -> [..192.168.10.50][...80] + new: [...527] [ip4][..tcp] [.....172.16.0.1][33486] -> [..192.168.10.50][...80] + new: [...528] [ip4][..tcp] [.....172.16.0.1][33500] -> [..192.168.10.50][...80] + guessed: [...449] [ip4][..tcp] [.....172.16.0.1][60314] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...449] [ip4][..tcp] [.....172.16.0.1][60314] -> [..192.168.10.50][...80] + guessed: [...450] [ip4][..tcp] [.....172.16.0.1][60328] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...450] [ip4][..tcp] [.....172.16.0.1][60328] -> [..192.168.10.50][...80] + guessed: [...451] [ip4][..tcp] [.....172.16.0.1][60342] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...451] [ip4][..tcp] [.....172.16.0.1][60342] -> [..192.168.10.50][...80] + guessed: [...452] [ip4][..tcp] [.....172.16.0.1][60356] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...452] [ip4][..tcp] [.....172.16.0.1][60356] -> [..192.168.10.50][...80] + guessed: [...453] [ip4][..tcp] [.....172.16.0.1][60370] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...453] [ip4][..tcp] [.....172.16.0.1][60370] -> [..192.168.10.50][...80] + guessed: [...454] [ip4][..tcp] [.....172.16.0.1][60384] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...454] [ip4][..tcp] [.....172.16.0.1][60384] -> [..192.168.10.50][...80] + guessed: [...455] [ip4][..tcp] [.....172.16.0.1][60410] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...455] [ip4][..tcp] [.....172.16.0.1][60410] -> [..192.168.10.50][...80] + guessed: [...456] [ip4][..tcp] [.....172.16.0.1][60424] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...456] [ip4][..tcp] [.....172.16.0.1][60424] -> [..192.168.10.50][...80] + new: [...529] [ip4][..tcp] [.....172.16.0.1][33526] -> [..192.168.10.50][...80] + new: [...530] [ip4][..tcp] [.....172.16.0.1][33540] -> [..192.168.10.50][...80] + new: [...531] [ip4][..tcp] [.....172.16.0.1][33554] -> [..192.168.10.50][...80] + new: [...532] [ip4][..tcp] [.....172.16.0.1][33580] -> [..192.168.10.50][...80] + new: [...533] [ip4][..tcp] [.....172.16.0.1][33594] -> [..192.168.10.50][...80] + new: [...534] [ip4][..tcp] [.....172.16.0.1][33608] -> [..192.168.10.50][...80] + end: [...419] [ip4][..tcp] [.....172.16.0.1][59732] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: XSS Attack, HTTP Numeric IP Address + guessed: [...457] [ip4][..tcp] [.....172.16.0.1][60438] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...457] [ip4][..tcp] [.....172.16.0.1][60438] -> [..192.168.10.50][...80] + guessed: [...459] [ip4][..tcp] [.....172.16.0.1][60478] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...459] [ip4][..tcp] [.....172.16.0.1][60478] -> [..192.168.10.50][...80] + guessed: [...460] [ip4][..tcp] [.....172.16.0.1][60504] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...460] [ip4][..tcp] [.....172.16.0.1][60504] -> [..192.168.10.50][...80] + guessed: [...461] [ip4][..tcp] [.....172.16.0.1][60518] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...461] [ip4][..tcp] [.....172.16.0.1][60518] -> [..192.168.10.50][...80] + guessed: [...462] [ip4][..tcp] [.....172.16.0.1][60532] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...462] [ip4][..tcp] [.....172.16.0.1][60532] -> [..192.168.10.50][...80] + detected: [...532] [ip4][..tcp] [.....172.16.0.1][33580] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...535] [ip4][..tcp] [.....172.16.0.1][33634] -> [..192.168.10.50][...80] + new: [...536] [ip4][..tcp] [.....172.16.0.1][33648] -> [..192.168.10.50][...80] + new: [...537] [ip4][..tcp] [.....172.16.0.1][33674] -> [..192.168.10.50][...80] + analyse: [...532] [ip4][..tcp] [.....172.16.0.1][33580] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.841| 0.651| 1.171] + [IAT(c->s)...: 0.001| 4.840| 0.511| 1.064][IAT(s->c)...: 0.000| 4.841| 0.906| 1.307] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1550.500| 699.300] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...538] [ip4][..tcp] [.....172.16.0.1][33688] -> [..192.168.10.50][...80] + new: [...539] [ip4][..tcp] [.....172.16.0.1][33702] -> [..192.168.10.50][...80] + guessed: [...463] [ip4][..tcp] [.....172.16.0.1][60558] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...463] [ip4][..tcp] [.....172.16.0.1][60558] -> [..192.168.10.50][...80] + guessed: [...464] [ip4][..tcp] [.....172.16.0.1][60572] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...464] [ip4][..tcp] [.....172.16.0.1][60572] -> [..192.168.10.50][...80] + guessed: [...465] [ip4][..tcp] [.....172.16.0.1][60598] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...465] [ip4][..tcp] [.....172.16.0.1][60598] -> [..192.168.10.50][...80] + guessed: [...466] [ip4][..tcp] [.....172.16.0.1][60612] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...466] [ip4][..tcp] [.....172.16.0.1][60612] -> [..192.168.10.50][...80] + guessed: [...467] [ip4][..tcp] [.....172.16.0.1][60626] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...467] [ip4][..tcp] [.....172.16.0.1][60626] -> [..192.168.10.50][...80] + new: [...540] [ip4][..tcp] [.....172.16.0.1][33728] -> [..192.168.10.50][...80] + new: [...541] [ip4][..tcp] [.....172.16.0.1][33742] -> [..192.168.10.50][...80] + new: [...542] [ip4][..tcp] [.....172.16.0.1][33768] -> [..192.168.10.50][...80] + new: [...543] [ip4][..tcp] [.....172.16.0.1][33782] -> [..192.168.10.50][...80] + new: [...544] [ip4][..tcp] [.....172.16.0.1][33808] -> [..192.168.10.50][...80] + new: [...545] [ip4][..tcp] [.....172.16.0.1][33822] -> [..192.168.10.50][...80] + guessed: [...468] [ip4][..tcp] [.....172.16.0.1][60652] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...468] [ip4][..tcp] [.....172.16.0.1][60652] -> [..192.168.10.50][...80] + guessed: [...469] [ip4][..tcp] [.....172.16.0.1][60666] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...469] [ip4][..tcp] [.....172.16.0.1][60666] -> [..192.168.10.50][...80] + guessed: [...470] [ip4][..tcp] [.....172.16.0.1][60692] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...470] [ip4][..tcp] [.....172.16.0.1][60692] -> [..192.168.10.50][...80] + guessed: [...471] [ip4][..tcp] [.....172.16.0.1][60706] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...471] [ip4][..tcp] [.....172.16.0.1][60706] -> [..192.168.10.50][...80] + guessed: [...472] [ip4][..tcp] [.....172.16.0.1][60720] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...472] [ip4][..tcp] [.....172.16.0.1][60720] -> [..192.168.10.50][...80] + guessed: [...473] [ip4][..tcp] [.....172.16.0.1][60734] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...473] [ip4][..tcp] [.....172.16.0.1][60734] -> [..192.168.10.50][...80] + guessed: [...474] [ip4][..tcp] [.....172.16.0.1][60748] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...474] [ip4][..tcp] [.....172.16.0.1][60748] -> [..192.168.10.50][...80] + new: [...546] [ip4][..tcp] [.....172.16.0.1][33836] -> [..192.168.10.50][...80] + new: [...547] [ip4][..tcp] [.....172.16.0.1][33862] -> [..192.168.10.50][...80] + new: [...548] [ip4][..tcp] [.....172.16.0.1][33876] -> [..192.168.10.50][...80] + new: [...549] [ip4][..tcp] [.....172.16.0.1][33902] -> [..192.168.10.50][...80] + new: [...550] [ip4][..tcp] [.....172.16.0.1][33916] -> [..192.168.10.50][...80] + new: [...551] [ip4][..tcp] [.....172.16.0.1][33930] -> [..192.168.10.50][...80] + guessed: [...475] [ip4][..tcp] [.....172.16.0.1][60762] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...475] [ip4][..tcp] [.....172.16.0.1][60762] -> [..192.168.10.50][...80] + guessed: [...476] [ip4][..tcp] [.....172.16.0.1][60788] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...476] [ip4][..tcp] [.....172.16.0.1][60788] -> [..192.168.10.50][...80] + guessed: [...477] [ip4][..tcp] [.....172.16.0.1][60802] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...477] [ip4][..tcp] [.....172.16.0.1][60802] -> [..192.168.10.50][...80] + guessed: [...478] [ip4][..tcp] [.....172.16.0.1][60816] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...478] [ip4][..tcp] [.....172.16.0.1][60816] -> [..192.168.10.50][...80] + guessed: [...479] [ip4][..tcp] [.....172.16.0.1][60842] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...479] [ip4][..tcp] [.....172.16.0.1][60842] -> [..192.168.10.50][...80] + guessed: [...480] [ip4][..tcp] [.....172.16.0.1][60856] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...480] [ip4][..tcp] [.....172.16.0.1][60856] -> [..192.168.10.50][...80] + new: [...552] [ip4][..tcp] [.....172.16.0.1][33956] -> [..192.168.10.50][...80] + new: [...553] [ip4][..tcp] [.....172.16.0.1][33970] -> [..192.168.10.50][...80] + new: [...554] [ip4][..tcp] [.....172.16.0.1][33996] -> [..192.168.10.50][...80] + new: [...555] [ip4][..tcp] [.....172.16.0.1][34010] -> [..192.168.10.50][...80] + new: [...556] [ip4][..tcp] [.....172.16.0.1][34024] -> [..192.168.10.50][...80] + guessed: [...481] [ip4][..tcp] [.....172.16.0.1][60882] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...481] [ip4][..tcp] [.....172.16.0.1][60882] -> [..192.168.10.50][...80] + guessed: [...482] [ip4][..tcp] [.....172.16.0.1][60896] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...482] [ip4][..tcp] [.....172.16.0.1][60896] -> [..192.168.10.50][...80] + guessed: [...483] [ip4][..tcp] [.....172.16.0.1][60922] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...483] [ip4][..tcp] [.....172.16.0.1][60922] -> [..192.168.10.50][...80] + guessed: [...484] [ip4][..tcp] [.....172.16.0.1][60936] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...484] [ip4][..tcp] [.....172.16.0.1][60936] -> [..192.168.10.50][...80] + guessed: [...485] [ip4][..tcp] [.....172.16.0.1][60950] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...485] [ip4][..tcp] [.....172.16.0.1][60950] -> [..192.168.10.50][...80] + new: [...557] [ip4][..tcp] [.....172.16.0.1][34050] -> [..192.168.10.50][...80] + new: [...558] [ip4][..tcp] [.....172.16.0.1][34064] -> [..192.168.10.50][...80] + new: [...559] [ip4][..tcp] [.....172.16.0.1][34090] -> [..192.168.10.50][...80] + new: [...560] [ip4][..tcp] [.....172.16.0.1][34104] -> [..192.168.10.50][...80] + new: [...561] [ip4][..tcp] [.....172.16.0.1][34118] -> [..192.168.10.50][...80] + new: [...562] [ip4][..tcp] [.....172.16.0.1][34144] -> [..192.168.10.50][...80] + guessed: [...487] [ip4][..tcp] [.....172.16.0.1][60990] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...487] [ip4][..tcp] [.....172.16.0.1][60990] -> [..192.168.10.50][...80] + guessed: [...488] [ip4][..tcp] [.....172.16.0.1][32784] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...488] [ip4][..tcp] [.....172.16.0.1][32784] -> [..192.168.10.50][...80] + guessed: [...489] [ip4][..tcp] [.....172.16.0.1][32798] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...489] [ip4][..tcp] [.....172.16.0.1][32798] -> [..192.168.10.50][...80] + guessed: [...490] [ip4][..tcp] [.....172.16.0.1][32812] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...490] [ip4][..tcp] [.....172.16.0.1][32812] -> [..192.168.10.50][...80] + guessed: [...491] [ip4][..tcp] [.....172.16.0.1][32838] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...491] [ip4][..tcp] [.....172.16.0.1][32838] -> [..192.168.10.50][...80] + guessed: [...486] [ip4][..tcp] [.....172.16.0.1][60976] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...486] [ip4][..tcp] [.....172.16.0.1][60976] -> [..192.168.10.50][...80] + new: [...563] [ip4][..tcp] [.....172.16.0.1][34158] -> [..192.168.10.50][...80] + new: [...564] [ip4][..tcp] [.....172.16.0.1][34184] -> [..192.168.10.50][...80] + new: [...565] [ip4][..tcp] [.....172.16.0.1][34198] -> [..192.168.10.50][...80] + new: [...566] [ip4][..tcp] [.....172.16.0.1][34224] -> [..192.168.10.50][...80] + new: [...567] [ip4][..tcp] [.....172.16.0.1][34238] -> [..192.168.10.50][...80] + new: [...568] [ip4][..tcp] [.....172.16.0.1][34252] -> [..192.168.10.50][...80] + guessed: [...492] [ip4][..tcp] [.....172.16.0.1][32852] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...492] [ip4][..tcp] [.....172.16.0.1][32852] -> [..192.168.10.50][...80] + guessed: [...493] [ip4][..tcp] [.....172.16.0.1][32878] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...493] [ip4][..tcp] [.....172.16.0.1][32878] -> [..192.168.10.50][...80] + guessed: [...494] [ip4][..tcp] [.....172.16.0.1][32892] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...494] [ip4][..tcp] [.....172.16.0.1][32892] -> [..192.168.10.50][...80] + guessed: [...496] [ip4][..tcp] [.....172.16.0.1][32932] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...496] [ip4][..tcp] [.....172.16.0.1][32932] -> [..192.168.10.50][...80] + guessed: [...497] [ip4][..tcp] [.....172.16.0.1][32946] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...497] [ip4][..tcp] [.....172.16.0.1][32946] -> [..192.168.10.50][...80] + end: [...458] [ip4][..tcp] [.....172.16.0.1][60464] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...569] [ip4][..tcp] [.....172.16.0.1][34278] -> [..192.168.10.50][...80] + new: [...570] [ip4][..tcp] [.....172.16.0.1][34292] -> [..192.168.10.50][...80] + detected: [...569] [ip4][..tcp] [.....172.16.0.1][34278] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...571] [ip4][..tcp] [.....172.16.0.1][34318] -> [..192.168.10.50][...80] + new: [...572] [ip4][..tcp] [.....172.16.0.1][34332] -> [..192.168.10.50][...80] + new: [...573] [ip4][..tcp] [.....172.16.0.1][34346] -> [..192.168.10.50][...80] + analyse: [...569] [ip4][..tcp] [.....172.16.0.1][34278] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.588| 0.498| 0.689] + [IAT(c->s)...: 0.000| 2.588| 0.386| 0.640][IAT(s->c)...: 0.000| 2.588| 0.702| 0.726] + [PKTLEN(c->s): 66.000| 651.000| 278.600| 253.400][PKTLEN(s->c): 66.000|1934.000|1558.800| 703.200] + [BINS(c->s)..: 12,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + guessed: [...498] [ip4][..tcp] [.....172.16.0.1][32960] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...498] [ip4][..tcp] [.....172.16.0.1][32960] -> [..192.168.10.50][...80] + guessed: [...499] [ip4][..tcp] [.....172.16.0.1][32974] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...499] [ip4][..tcp] [.....172.16.0.1][32974] -> [..192.168.10.50][...80] + guessed: [...500] [ip4][..tcp] [.....172.16.0.1][32988] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...500] [ip4][..tcp] [.....172.16.0.1][32988] -> [..192.168.10.50][...80] + guessed: [...501] [ip4][..tcp] [.....172.16.0.1][33002] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...501] [ip4][..tcp] [.....172.16.0.1][33002] -> [..192.168.10.50][...80] + guessed: [...502] [ip4][..tcp] [.....172.16.0.1][33028] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...502] [ip4][..tcp] [.....172.16.0.1][33028] -> [..192.168.10.50][...80] + guessed: [...503] [ip4][..tcp] [.....172.16.0.1][33042] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...503] [ip4][..tcp] [.....172.16.0.1][33042] -> [..192.168.10.50][...80] + new: [...574] [ip4][..tcp] [.....172.16.0.1][34372] -> [..192.168.10.50][...80] + new: [...575] [ip4][..tcp] [.....172.16.0.1][34386] -> [..192.168.10.50][...80] + new: [...576] [ip4][..tcp] [.....172.16.0.1][34412] -> [..192.168.10.50][...80] + new: [...577] [ip4][..tcp] [.....172.16.0.1][34426] -> [..192.168.10.50][...80] + new: [...578] [ip4][..tcp] [.....172.16.0.1][34440] -> [..192.168.10.50][...80] + new: [...579] [ip4][..tcp] [.....172.16.0.1][34466] -> [..192.168.10.50][...80] + guessed: [...504] [ip4][..tcp] [.....172.16.0.1][33068] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...504] [ip4][..tcp] [.....172.16.0.1][33068] -> [..192.168.10.50][...80] + guessed: [...505] [ip4][..tcp] [.....172.16.0.1][33082] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...505] [ip4][..tcp] [.....172.16.0.1][33082] -> [..192.168.10.50][...80] + guessed: [...506] [ip4][..tcp] [.....172.16.0.1][33096] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...506] [ip4][..tcp] [.....172.16.0.1][33096] -> [..192.168.10.50][...80] + guessed: [...507] [ip4][..tcp] [.....172.16.0.1][33122] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...507] [ip4][..tcp] [.....172.16.0.1][33122] -> [..192.168.10.50][...80] + guessed: [...508] [ip4][..tcp] [.....172.16.0.1][33136] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...508] [ip4][..tcp] [.....172.16.0.1][33136] -> [..192.168.10.50][...80] + guessed: [...509] [ip4][..tcp] [.....172.16.0.1][33162] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...509] [ip4][..tcp] [.....172.16.0.1][33162] -> [..192.168.10.50][...80] + new: [...580] [ip4][..tcp] [.....172.16.0.1][34480] -> [..192.168.10.50][...80] + new: [...581] [ip4][..tcp] [.....172.16.0.1][34506] -> [..192.168.10.50][...80] + new: [...582] [ip4][..tcp] [.....172.16.0.1][34520] -> [..192.168.10.50][...80] + new: [...583] [ip4][..tcp] [.....172.16.0.1][34534] -> [..192.168.10.50][...80] + new: [...584] [ip4][..tcp] [.....172.16.0.1][34548] -> [..192.168.10.50][...80] + new: [...585] [ip4][..tcp] [.....172.16.0.1][34562] -> [..192.168.10.50][...80] + new: [...586] [ip4][..tcp] [.....172.16.0.1][34576] -> [..192.168.10.50][...80] + guessed: [...510] [ip4][..tcp] [.....172.16.0.1][33176] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...510] [ip4][..tcp] [.....172.16.0.1][33176] -> [..192.168.10.50][...80] + guessed: [...511] [ip4][..tcp] [.....172.16.0.1][33202] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...511] [ip4][..tcp] [.....172.16.0.1][33202] -> [..192.168.10.50][...80] + guessed: [...512] [ip4][..tcp] [.....172.16.0.1][33216] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...512] [ip4][..tcp] [.....172.16.0.1][33216] -> [..192.168.10.50][...80] + guessed: [...513] [ip4][..tcp] [.....172.16.0.1][33230] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...513] [ip4][..tcp] [.....172.16.0.1][33230] -> [..192.168.10.50][...80] + guessed: [...514] [ip4][..tcp] [.....172.16.0.1][33256] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...514] [ip4][..tcp] [.....172.16.0.1][33256] -> [..192.168.10.50][...80] + guessed: [...515] [ip4][..tcp] [.....172.16.0.1][33270] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...515] [ip4][..tcp] [.....172.16.0.1][33270] -> [..192.168.10.50][...80] + new: [...587] [ip4][..tcp] [.....172.16.0.1][34602] -> [..192.168.10.50][...80] + new: [...588] [ip4][..tcp] [.....172.16.0.1][34616] -> [..192.168.10.50][...80] + new: [...589] [ip4][..tcp] [.....172.16.0.1][34642] -> [..192.168.10.50][...80] + new: [...590] [ip4][..tcp] [.....172.16.0.1][34656] -> [..192.168.10.50][...80] + new: [...591] [ip4][..tcp] [.....172.16.0.1][34670] -> [..192.168.10.50][...80] + guessed: [...516] [ip4][..tcp] [.....172.16.0.1][33296] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...516] [ip4][..tcp] [.....172.16.0.1][33296] -> [..192.168.10.50][...80] + guessed: [...517] [ip4][..tcp] [.....172.16.0.1][33310] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...517] [ip4][..tcp] [.....172.16.0.1][33310] -> [..192.168.10.50][...80] + guessed: [...518] [ip4][..tcp] [.....172.16.0.1][33324] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...518] [ip4][..tcp] [.....172.16.0.1][33324] -> [..192.168.10.50][...80] + guessed: [...519] [ip4][..tcp] [.....172.16.0.1][33350] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...519] [ip4][..tcp] [.....172.16.0.1][33350] -> [..192.168.10.50][...80] + guessed: [...520] [ip4][..tcp] [.....172.16.0.1][33364] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...520] [ip4][..tcp] [.....172.16.0.1][33364] -> [..192.168.10.50][...80] + guessed: [...521] [ip4][..tcp] [.....172.16.0.1][33378] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...521] [ip4][..tcp] [.....172.16.0.1][33378] -> [..192.168.10.50][...80] + new: [...592] [ip4][..tcp] [.....172.16.0.1][34696] -> [..192.168.10.50][...80] + new: [...593] [ip4][..tcp] [.....172.16.0.1][34710] -> [..192.168.10.50][...80] + new: [...594] [ip4][..tcp] [.....172.16.0.1][34724] -> [..192.168.10.50][...80] + new: [...595] [ip4][..tcp] [.....172.16.0.1][34738] -> [..192.168.10.50][...80] + new: [...596] [ip4][..tcp] [.....172.16.0.1][34752] -> [..192.168.10.50][...80] + new: [...597] [ip4][..tcp] [.....172.16.0.1][34766] -> [..192.168.10.50][...80] + new: [...598] [ip4][..tcp] [.....172.16.0.1][34792] -> [..192.168.10.50][...80] + guessed: [...522] [ip4][..tcp] [.....172.16.0.1][33404] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...522] [ip4][..tcp] [.....172.16.0.1][33404] -> [..192.168.10.50][...80] + guessed: [...523] [ip4][..tcp] [.....172.16.0.1][33418] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...523] [ip4][..tcp] [.....172.16.0.1][33418] -> [..192.168.10.50][...80] + guessed: [...524] [ip4][..tcp] [.....172.16.0.1][33444] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...524] [ip4][..tcp] [.....172.16.0.1][33444] -> [..192.168.10.50][...80] + guessed: [...525] [ip4][..tcp] [.....172.16.0.1][33458] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...525] [ip4][..tcp] [.....172.16.0.1][33458] -> [..192.168.10.50][...80] + guessed: [...526] [ip4][..tcp] [.....172.16.0.1][33472] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...526] [ip4][..tcp] [.....172.16.0.1][33472] -> [..192.168.10.50][...80] + guessed: [...527] [ip4][..tcp] [.....172.16.0.1][33486] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...527] [ip4][..tcp] [.....172.16.0.1][33486] -> [..192.168.10.50][...80] + new: [...599] [ip4][..tcp] [.....172.16.0.1][34806] -> [..192.168.10.50][...80] + new: [...600] [ip4][..tcp] [.....172.16.0.1][34832] -> [..192.168.10.50][...80] + new: [...601] [ip4][..tcp] [.....172.16.0.1][34846] -> [..192.168.10.50][...80] + new: [...602] [ip4][..tcp] [.....172.16.0.1][34860] -> [..192.168.10.50][...80] + new: [...603] [ip4][..tcp] [.....172.16.0.1][34886] -> [..192.168.10.50][...80] + new: [...604] [ip4][..tcp] [.....172.16.0.1][34900] -> [..192.168.10.50][...80] + end: [...495] [ip4][..tcp] [.....172.16.0.1][32906] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: XSS Attack, HTTP Numeric IP Address + guessed: [...528] [ip4][..tcp] [.....172.16.0.1][33500] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...528] [ip4][..tcp] [.....172.16.0.1][33500] -> [..192.168.10.50][...80] + guessed: [...529] [ip4][..tcp] [.....172.16.0.1][33526] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...529] [ip4][..tcp] [.....172.16.0.1][33526] -> [..192.168.10.50][...80] + guessed: [...530] [ip4][..tcp] [.....172.16.0.1][33540] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...530] [ip4][..tcp] [.....172.16.0.1][33540] -> [..192.168.10.50][...80] + guessed: [...531] [ip4][..tcp] [.....172.16.0.1][33554] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...531] [ip4][..tcp] [.....172.16.0.1][33554] -> [..192.168.10.50][...80] + guessed: [...533] [ip4][..tcp] [.....172.16.0.1][33594] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...533] [ip4][..tcp] [.....172.16.0.1][33594] -> [..192.168.10.50][...80] + new: [...605] [ip4][..tcp] [.....172.16.0.1][34926] -> [..192.168.10.50][...80] + new: [...606] [ip4][..tcp] [.....172.16.0.1][34940] -> [..192.168.10.50][...80] + new: [...607] [ip4][..tcp] [.....172.16.0.1][34954] -> [..192.168.10.50][...80] + new: [...608] [ip4][..tcp] [.....172.16.0.1][34980] -> [..192.168.10.50][...80] + detected: [...606] [ip4][..tcp] [.....172.16.0.1][34940] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...609] [ip4][..tcp] [.....172.16.0.1][34994] -> [..192.168.10.50][...80] + guessed: [...534] [ip4][..tcp] [.....172.16.0.1][33608] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...534] [ip4][..tcp] [.....172.16.0.1][33608] -> [..192.168.10.50][...80] + guessed: [...535] [ip4][..tcp] [.....172.16.0.1][33634] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...535] [ip4][..tcp] [.....172.16.0.1][33634] -> [..192.168.10.50][...80] + guessed: [...536] [ip4][..tcp] [.....172.16.0.1][33648] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...536] [ip4][..tcp] [.....172.16.0.1][33648] -> [..192.168.10.50][...80] + guessed: [...537] [ip4][..tcp] [.....172.16.0.1][33674] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...537] [ip4][..tcp] [.....172.16.0.1][33674] -> [..192.168.10.50][...80] + guessed: [...538] [ip4][..tcp] [.....172.16.0.1][33688] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...538] [ip4][..tcp] [.....172.16.0.1][33688] -> [..192.168.10.50][...80] + guessed: [...539] [ip4][..tcp] [.....172.16.0.1][33702] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...539] [ip4][..tcp] [.....172.16.0.1][33702] -> [..192.168.10.50][...80] + new: [...610] [ip4][..tcp] [.....172.16.0.1][35020] -> [..192.168.10.50][...80] + new: [...611] [ip4][..tcp] [.....172.16.0.1][35034] -> [..192.168.10.50][...80] + new: [...612] [ip4][..tcp] [.....172.16.0.1][35048] -> [..192.168.10.50][...80] + analyse: [...606] [ip4][..tcp] [.....172.16.0.1][34940] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.897| 0.655| 1.187] + [IAT(c->s)...: 0.001| 4.896| 0.514| 1.077][IAT(s->c)...: 0.000| 4.897| 0.912| 1.325] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1934.000|1550.500| 699.300] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...613] [ip4][..tcp] [.....172.16.0.1][35074] -> [..192.168.10.50][...80] + new: [...614] [ip4][..tcp] [.....172.16.0.1][35088] -> [..192.168.10.50][...80] + new: [...615] [ip4][..tcp] [.....172.16.0.1][35114] -> [..192.168.10.50][...80] + guessed: [...540] [ip4][..tcp] [.....172.16.0.1][33728] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...540] [ip4][..tcp] [.....172.16.0.1][33728] -> [..192.168.10.50][...80] + guessed: [...541] [ip4][..tcp] [.....172.16.0.1][33742] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...541] [ip4][..tcp] [.....172.16.0.1][33742] -> [..192.168.10.50][...80] + guessed: [...542] [ip4][..tcp] [.....172.16.0.1][33768] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...542] [ip4][..tcp] [.....172.16.0.1][33768] -> [..192.168.10.50][...80] + guessed: [...543] [ip4][..tcp] [.....172.16.0.1][33782] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...543] [ip4][..tcp] [.....172.16.0.1][33782] -> [..192.168.10.50][...80] + new: [...616] [ip4][..tcp] [.....172.16.0.1][35128] -> [..192.168.10.50][...80] + new: [...617] [ip4][..tcp] [.....172.16.0.1][35142] -> [..192.168.10.50][...80] + new: [...618] [ip4][..tcp] [.....172.16.0.1][35168] -> [..192.168.10.50][...80] + new: [...619] [ip4][..tcp] [.....172.16.0.1][35182] -> [..192.168.10.50][...80] + new: [...620] [ip4][..tcp] [.....172.16.0.1][35208] -> [..192.168.10.50][...80] + new: [...621] [ip4][..tcp] [.....172.16.0.1][35222] -> [..192.168.10.50][...80] + guessed: [...544] [ip4][..tcp] [.....172.16.0.1][33808] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...544] [ip4][..tcp] [.....172.16.0.1][33808] -> [..192.168.10.50][...80] + guessed: [...545] [ip4][..tcp] [.....172.16.0.1][33822] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...545] [ip4][..tcp] [.....172.16.0.1][33822] -> [..192.168.10.50][...80] + guessed: [...546] [ip4][..tcp] [.....172.16.0.1][33836] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...546] [ip4][..tcp] [.....172.16.0.1][33836] -> [..192.168.10.50][...80] + guessed: [...547] [ip4][..tcp] [.....172.16.0.1][33862] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...547] [ip4][..tcp] [.....172.16.0.1][33862] -> [..192.168.10.50][...80] + guessed: [...548] [ip4][..tcp] [.....172.16.0.1][33876] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...548] [ip4][..tcp] [.....172.16.0.1][33876] -> [..192.168.10.50][...80] + guessed: [...549] [ip4][..tcp] [.....172.16.0.1][33902] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...549] [ip4][..tcp] [.....172.16.0.1][33902] -> [..192.168.10.50][...80] + guessed: [...550] [ip4][..tcp] [.....172.16.0.1][33916] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...550] [ip4][..tcp] [.....172.16.0.1][33916] -> [..192.168.10.50][...80] + new: [...622] [ip4][..tcp] [.....172.16.0.1][35236] -> [..192.168.10.50][...80] + new: [...623] [ip4][..tcp] [.....172.16.0.1][35262] -> [..192.168.10.50][...80] + new: [...624] [ip4][..tcp] [.....172.16.0.1][35276] -> [..192.168.10.50][...80] + new: [...625] [ip4][..tcp] [.....172.16.0.1][35302] -> [..192.168.10.50][...80] + new: [...626] [ip4][..tcp] [.....172.16.0.1][35316] -> [..192.168.10.50][...80] + guessed: [...551] [ip4][..tcp] [.....172.16.0.1][33930] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...551] [ip4][..tcp] [.....172.16.0.1][33930] -> [..192.168.10.50][...80] + guessed: [...552] [ip4][..tcp] [.....172.16.0.1][33956] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...552] [ip4][..tcp] [.....172.16.0.1][33956] -> [..192.168.10.50][...80] + guessed: [...553] [ip4][..tcp] [.....172.16.0.1][33970] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...553] [ip4][..tcp] [.....172.16.0.1][33970] -> [..192.168.10.50][...80] + guessed: [...554] [ip4][..tcp] [.....172.16.0.1][33996] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...554] [ip4][..tcp] [.....172.16.0.1][33996] -> [..192.168.10.50][...80] + guessed: [...555] [ip4][..tcp] [.....172.16.0.1][34010] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...555] [ip4][..tcp] [.....172.16.0.1][34010] -> [..192.168.10.50][...80] + guessed: [...556] [ip4][..tcp] [.....172.16.0.1][34024] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...556] [ip4][..tcp] [.....172.16.0.1][34024] -> [..192.168.10.50][...80] + new: [...627] [ip4][..tcp] [.....172.16.0.1][35342] -> [..192.168.10.50][...80] + new: [...628] [ip4][..tcp] [.....172.16.0.1][35356] -> [..192.168.10.50][...80] + new: [...629] [ip4][..tcp] [.....172.16.0.1][35370] -> [..192.168.10.50][...80] + new: [...630] [ip4][..tcp] [.....172.16.0.1][35396] -> [..192.168.10.50][...80] + new: [...631] [ip4][..tcp] [.....172.16.0.1][35410] -> [..192.168.10.50][...80] + new: [...632] [ip4][..tcp] [.....172.16.0.1][35436] -> [..192.168.10.50][...80] + guessed: [...557] [ip4][..tcp] [.....172.16.0.1][34050] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...557] [ip4][..tcp] [.....172.16.0.1][34050] -> [..192.168.10.50][...80] + guessed: [...558] [ip4][..tcp] [.....172.16.0.1][34064] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...558] [ip4][..tcp] [.....172.16.0.1][34064] -> [..192.168.10.50][...80] + guessed: [...559] [ip4][..tcp] [.....172.16.0.1][34090] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...559] [ip4][..tcp] [.....172.16.0.1][34090] -> [..192.168.10.50][...80] + guessed: [...560] [ip4][..tcp] [.....172.16.0.1][34104] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...560] [ip4][..tcp] [.....172.16.0.1][34104] -> [..192.168.10.50][...80] + guessed: [...561] [ip4][..tcp] [.....172.16.0.1][34118] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...561] [ip4][..tcp] [.....172.16.0.1][34118] -> [..192.168.10.50][...80] + new: [...633] [ip4][..tcp] [.....172.16.0.1][35450] -> [..192.168.10.50][...80] + new: [...634] [ip4][..tcp] [.....172.16.0.1][35464] -> [..192.168.10.50][...80] + new: [...635] [ip4][..tcp] [.....172.16.0.1][35490] -> [..192.168.10.50][...80] + new: [...636] [ip4][..tcp] [.....172.16.0.1][35504] -> [..192.168.10.50][...80] + new: [...637] [ip4][..tcp] [.....172.16.0.1][35518] -> [..192.168.10.50][...80] + new: [...638] [ip4][..tcp] [.....172.16.0.1][35532] -> [..192.168.10.50][...80] + new: [...639] [ip4][..tcp] [.....172.16.0.1][35546] -> [..192.168.10.50][...80] + guessed: [...562] [ip4][..tcp] [.....172.16.0.1][34144] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...562] [ip4][..tcp] [.....172.16.0.1][34144] -> [..192.168.10.50][...80] + guessed: [...563] [ip4][..tcp] [.....172.16.0.1][34158] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...563] [ip4][..tcp] [.....172.16.0.1][34158] -> [..192.168.10.50][...80] + guessed: [...564] [ip4][..tcp] [.....172.16.0.1][34184] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...564] [ip4][..tcp] [.....172.16.0.1][34184] -> [..192.168.10.50][...80] + guessed: [...565] [ip4][..tcp] [.....172.16.0.1][34198] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...565] [ip4][..tcp] [.....172.16.0.1][34198] -> [..192.168.10.50][...80] + guessed: [...566] [ip4][..tcp] [.....172.16.0.1][34224] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...566] [ip4][..tcp] [.....172.16.0.1][34224] -> [..192.168.10.50][...80] + guessed: [...567] [ip4][..tcp] [.....172.16.0.1][34238] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...567] [ip4][..tcp] [.....172.16.0.1][34238] -> [..192.168.10.50][...80] + new: [...640] [ip4][..tcp] [.....172.16.0.1][35560] -> [..192.168.10.50][...80] + new: [...641] [ip4][..tcp] [.....172.16.0.1][35586] -> [..192.168.10.50][...80] + new: [...642] [ip4][..tcp] [.....172.16.0.1][35600] -> [..192.168.10.50][...80] + new: [...643] [ip4][..tcp] [.....172.16.0.1][35626] -> [..192.168.10.50][...80] + new: [...644] [ip4][..tcp] [.....172.16.0.1][35640] -> [..192.168.10.50][...80] + new: [...645] [ip4][..tcp] [.....172.16.0.1][35654] -> [..192.168.10.50][...80] + end: [...532] [ip4][..tcp] [.....172.16.0.1][33580] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + guessed: [...568] [ip4][..tcp] [.....172.16.0.1][34252] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...568] [ip4][..tcp] [.....172.16.0.1][34252] -> [..192.168.10.50][...80] + guessed: [...570] [ip4][..tcp] [.....172.16.0.1][34292] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...570] [ip4][..tcp] [.....172.16.0.1][34292] -> [..192.168.10.50][...80] + guessed: [...571] [ip4][..tcp] [.....172.16.0.1][34318] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...571] [ip4][..tcp] [.....172.16.0.1][34318] -> [..192.168.10.50][...80] + guessed: [...572] [ip4][..tcp] [.....172.16.0.1][34332] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...572] [ip4][..tcp] [.....172.16.0.1][34332] -> [..192.168.10.50][...80] + guessed: [...573] [ip4][..tcp] [.....172.16.0.1][34346] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...573] [ip4][..tcp] [.....172.16.0.1][34346] -> [..192.168.10.50][...80] + new: [...646] [ip4][..tcp] [.....172.16.0.1][35668] -> [..192.168.10.50][...80] + detected: [...643] [ip4][..tcp] [.....172.16.0.1][35626] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [...647] [ip4][..tcp] [.....172.16.0.1][35682] -> [..192.168.10.50][...80] + new: [...648] [ip4][..tcp] [.....172.16.0.1][35696] -> [..192.168.10.50][...80] + new: [...649] [ip4][..tcp] [.....172.16.0.1][35722] -> [..192.168.10.50][...80] + analyse: [...643] [ip4][..tcp] [.....172.16.0.1][35626] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.954| 0.620| 0.972] + [IAT(c->s)...: 0.001| 3.953| 0.506| 0.895][IAT(s->c)...: 0.000| 3.954| 0.826| 1.070] + [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1934.000|1559.000| 703.300] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9] + new: [...650] [ip4][..tcp] [.....172.16.0.1][35736] -> [..192.168.10.50][...80] + new: [...651] [ip4][..tcp] [.....172.16.0.1][35762] -> [..192.168.10.50][...80] + guessed: [...574] [ip4][..tcp] [.....172.16.0.1][34372] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...574] [ip4][..tcp] [.....172.16.0.1][34372] -> [..192.168.10.50][...80] + guessed: [...575] [ip4][..tcp] [.....172.16.0.1][34386] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...575] [ip4][..tcp] [.....172.16.0.1][34386] -> [..192.168.10.50][...80] + guessed: [...576] [ip4][..tcp] [.....172.16.0.1][34412] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...576] [ip4][..tcp] [.....172.16.0.1][34412] -> [..192.168.10.50][...80] + guessed: [...577] [ip4][..tcp] [.....172.16.0.1][34426] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...577] [ip4][..tcp] [.....172.16.0.1][34426] -> [..192.168.10.50][...80] + guessed: [...578] [ip4][..tcp] [.....172.16.0.1][34440] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...578] [ip4][..tcp] [.....172.16.0.1][34440] -> [..192.168.10.50][...80] + new: [...652] [ip4][..tcp] [.....172.16.0.1][35776] -> [..192.168.10.50][...80] + new: [...653] [ip4][..tcp] [.....172.16.0.1][35790] -> [..192.168.10.50][...80] + new: [...654] [ip4][..tcp] [.....172.16.0.1][35816] -> [..192.168.10.50][...80] + new: [...655] [ip4][..tcp] [.....172.16.0.1][35830] -> [..192.168.10.50][...80] + new: [...656] [ip4][..tcp] [.....172.16.0.1][35856] -> [..192.168.10.50][...80] + new: [...657] [ip4][..tcp] [.....172.16.0.1][35870] -> [..192.168.10.50][...80] + guessed: [...579] [ip4][..tcp] [.....172.16.0.1][34466] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...579] [ip4][..tcp] [.....172.16.0.1][34466] -> [..192.168.10.50][...80] + guessed: [...580] [ip4][..tcp] [.....172.16.0.1][34480] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...580] [ip4][..tcp] [.....172.16.0.1][34480] -> [..192.168.10.50][...80] + guessed: [...581] [ip4][..tcp] [.....172.16.0.1][34506] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...581] [ip4][..tcp] [.....172.16.0.1][34506] -> [..192.168.10.50][...80] + guessed: [...582] [ip4][..tcp] [.....172.16.0.1][34520] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...582] [ip4][..tcp] [.....172.16.0.1][34520] -> [..192.168.10.50][...80] + guessed: [...583] [ip4][..tcp] [.....172.16.0.1][34534] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...583] [ip4][..tcp] [.....172.16.0.1][34534] -> [..192.168.10.50][...80] + guessed: [...584] [ip4][..tcp] [.....172.16.0.1][34548] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...584] [ip4][..tcp] [.....172.16.0.1][34548] -> [..192.168.10.50][...80] + guessed: [...585] [ip4][..tcp] [.....172.16.0.1][34562] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...585] [ip4][..tcp] [.....172.16.0.1][34562] -> [..192.168.10.50][...80] + new: [...658] [ip4][..tcp] [.....172.16.0.1][35884] -> [..192.168.10.50][...80] + new: [...659] [ip4][..tcp] [.....172.16.0.1][35910] -> [..192.168.10.50][...80] + new: [...660] [ip4][..tcp] [.....172.16.0.1][35924] -> [..192.168.10.50][...80] + new: [...661] [ip4][..tcp] [.....172.16.0.1][35950] -> [..192.168.10.50][...80] + guessed: [...586] [ip4][..tcp] [.....172.16.0.1][34576] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...586] [ip4][..tcp] [.....172.16.0.1][34576] -> [..192.168.10.50][...80] + guessed: [...587] [ip4][..tcp] [.....172.16.0.1][34602] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...587] [ip4][..tcp] [.....172.16.0.1][34602] -> [..192.168.10.50][...80] + guessed: [...588] [ip4][..tcp] [.....172.16.0.1][34616] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...588] [ip4][..tcp] [.....172.16.0.1][34616] -> [..192.168.10.50][...80] + guessed: [...589] [ip4][..tcp] [.....172.16.0.1][34642] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...589] [ip4][..tcp] [.....172.16.0.1][34642] -> [..192.168.10.50][...80] + guessed: [...590] [ip4][..tcp] [.....172.16.0.1][34656] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...590] [ip4][..tcp] [.....172.16.0.1][34656] -> [..192.168.10.50][...80] + guessed: [...591] [ip4][..tcp] [.....172.16.0.1][34670] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...591] [ip4][..tcp] [.....172.16.0.1][34670] -> [..192.168.10.50][...80] + guessed: [...592] [ip4][..tcp] [.....172.16.0.1][34696] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...592] [ip4][..tcp] [.....172.16.0.1][34696] -> [..192.168.10.50][...80] + guessed: [...593] [ip4][..tcp] [.....172.16.0.1][34710] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...593] [ip4][..tcp] [.....172.16.0.1][34710] -> [..192.168.10.50][...80] + guessed: [...594] [ip4][..tcp] [.....172.16.0.1][34724] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...594] [ip4][..tcp] [.....172.16.0.1][34724] -> [..192.168.10.50][...80] + guessed: [...595] [ip4][..tcp] [.....172.16.0.1][34738] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...595] [ip4][..tcp] [.....172.16.0.1][34738] -> [..192.168.10.50][...80] + guessed: [...596] [ip4][..tcp] [.....172.16.0.1][34752] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...596] [ip4][..tcp] [.....172.16.0.1][34752] -> [..192.168.10.50][...80] + guessed: [...597] [ip4][..tcp] [.....172.16.0.1][34766] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...597] [ip4][..tcp] [.....172.16.0.1][34766] -> [..192.168.10.50][...80] + guessed: [...598] [ip4][..tcp] [.....172.16.0.1][34792] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...598] [ip4][..tcp] [.....172.16.0.1][34792] -> [..192.168.10.50][...80] + guessed: [...599] [ip4][..tcp] [.....172.16.0.1][34806] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...599] [ip4][..tcp] [.....172.16.0.1][34806] -> [..192.168.10.50][...80] + guessed: [...600] [ip4][..tcp] [.....172.16.0.1][34832] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...600] [ip4][..tcp] [.....172.16.0.1][34832] -> [..192.168.10.50][...80] + guessed: [...601] [ip4][..tcp] [.....172.16.0.1][34846] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...601] [ip4][..tcp] [.....172.16.0.1][34846] -> [..192.168.10.50][...80] + guessed: [...602] [ip4][..tcp] [.....172.16.0.1][34860] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...602] [ip4][..tcp] [.....172.16.0.1][34860] -> [..192.168.10.50][...80] + guessed: [...603] [ip4][..tcp] [.....172.16.0.1][34886] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...603] [ip4][..tcp] [.....172.16.0.1][34886] -> [..192.168.10.50][...80] + guessed: [...604] [ip4][..tcp] [.....172.16.0.1][34900] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...604] [ip4][..tcp] [.....172.16.0.1][34900] -> [..192.168.10.50][...80] + guessed: [...605] [ip4][..tcp] [.....172.16.0.1][34926] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...605] [ip4][..tcp] [.....172.16.0.1][34926] -> [..192.168.10.50][...80] + end: [...606] [ip4][..tcp] [.....172.16.0.1][34940] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + guessed: [...607] [ip4][..tcp] [.....172.16.0.1][34954] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...607] [ip4][..tcp] [.....172.16.0.1][34954] -> [..192.168.10.50][...80] + guessed: [...608] [ip4][..tcp] [.....172.16.0.1][34980] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...608] [ip4][..tcp] [.....172.16.0.1][34980] -> [..192.168.10.50][...80] + guessed: [...609] [ip4][..tcp] [.....172.16.0.1][34994] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...609] [ip4][..tcp] [.....172.16.0.1][34994] -> [..192.168.10.50][...80] + guessed: [...610] [ip4][..tcp] [.....172.16.0.1][35020] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...610] [ip4][..tcp] [.....172.16.0.1][35020] -> [..192.168.10.50][...80] + guessed: [...611] [ip4][..tcp] [.....172.16.0.1][35034] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...611] [ip4][..tcp] [.....172.16.0.1][35034] -> [..192.168.10.50][...80] + guessed: [...612] [ip4][..tcp] [.....172.16.0.1][35048] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...612] [ip4][..tcp] [.....172.16.0.1][35048] -> [..192.168.10.50][...80] + guessed: [...613] [ip4][..tcp] [.....172.16.0.1][35074] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...613] [ip4][..tcp] [.....172.16.0.1][35074] -> [..192.168.10.50][...80] + guessed: [...614] [ip4][..tcp] [.....172.16.0.1][35088] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...614] [ip4][..tcp] [.....172.16.0.1][35088] -> [..192.168.10.50][...80] + guessed: [...615] [ip4][..tcp] [.....172.16.0.1][35114] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...615] [ip4][..tcp] [.....172.16.0.1][35114] -> [..192.168.10.50][...80] + guessed: [...616] [ip4][..tcp] [.....172.16.0.1][35128] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...616] [ip4][..tcp] [.....172.16.0.1][35128] -> [..192.168.10.50][...80] + guessed: [...617] [ip4][..tcp] [.....172.16.0.1][35142] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...617] [ip4][..tcp] [.....172.16.0.1][35142] -> [..192.168.10.50][...80] + guessed: [...618] [ip4][..tcp] [.....172.16.0.1][35168] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...618] [ip4][..tcp] [.....172.16.0.1][35168] -> [..192.168.10.50][...80] + guessed: [...619] [ip4][..tcp] [.....172.16.0.1][35182] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...619] [ip4][..tcp] [.....172.16.0.1][35182] -> [..192.168.10.50][...80] + guessed: [...620] [ip4][..tcp] [.....172.16.0.1][35208] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...620] [ip4][..tcp] [.....172.16.0.1][35208] -> [..192.168.10.50][...80] + guessed: [...621] [ip4][..tcp] [.....172.16.0.1][35222] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...621] [ip4][..tcp] [.....172.16.0.1][35222] -> [..192.168.10.50][...80] + guessed: [...622] [ip4][..tcp] [.....172.16.0.1][35236] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...622] [ip4][..tcp] [.....172.16.0.1][35236] -> [..192.168.10.50][...80] + guessed: [...623] [ip4][..tcp] [.....172.16.0.1][35262] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...623] [ip4][..tcp] [.....172.16.0.1][35262] -> [..192.168.10.50][...80] + guessed: [...624] [ip4][..tcp] [.....172.16.0.1][35276] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...624] [ip4][..tcp] [.....172.16.0.1][35276] -> [..192.168.10.50][...80] + guessed: [...625] [ip4][..tcp] [.....172.16.0.1][35302] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...625] [ip4][..tcp] [.....172.16.0.1][35302] -> [..192.168.10.50][...80] + guessed: [...626] [ip4][..tcp] [.....172.16.0.1][35316] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...626] [ip4][..tcp] [.....172.16.0.1][35316] -> [..192.168.10.50][...80] + guessed: [...627] [ip4][..tcp] [.....172.16.0.1][35342] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...627] [ip4][..tcp] [.....172.16.0.1][35342] -> [..192.168.10.50][...80] + guessed: [...628] [ip4][..tcp] [.....172.16.0.1][35356] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...628] [ip4][..tcp] [.....172.16.0.1][35356] -> [..192.168.10.50][...80] + guessed: [...629] [ip4][..tcp] [.....172.16.0.1][35370] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...629] [ip4][..tcp] [.....172.16.0.1][35370] -> [..192.168.10.50][...80] + guessed: [...630] [ip4][..tcp] [.....172.16.0.1][35396] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...630] [ip4][..tcp] [.....172.16.0.1][35396] -> [..192.168.10.50][...80] + guessed: [...631] [ip4][..tcp] [.....172.16.0.1][35410] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...631] [ip4][..tcp] [.....172.16.0.1][35410] -> [..192.168.10.50][...80] + guessed: [...632] [ip4][..tcp] [.....172.16.0.1][35436] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...632] [ip4][..tcp] [.....172.16.0.1][35436] -> [..192.168.10.50][...80] + guessed: [...633] [ip4][..tcp] [.....172.16.0.1][35450] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...633] [ip4][..tcp] [.....172.16.0.1][35450] -> [..192.168.10.50][...80] + guessed: [...634] [ip4][..tcp] [.....172.16.0.1][35464] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...634] [ip4][..tcp] [.....172.16.0.1][35464] -> [..192.168.10.50][...80] + guessed: [...635] [ip4][..tcp] [.....172.16.0.1][35490] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...635] [ip4][..tcp] [.....172.16.0.1][35490] -> [..192.168.10.50][...80] + guessed: [...636] [ip4][..tcp] [.....172.16.0.1][35504] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...636] [ip4][..tcp] [.....172.16.0.1][35504] -> [..192.168.10.50][...80] + guessed: [...637] [ip4][..tcp] [.....172.16.0.1][35518] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...637] [ip4][..tcp] [.....172.16.0.1][35518] -> [..192.168.10.50][...80] + guessed: [...638] [ip4][..tcp] [.....172.16.0.1][35532] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...638] [ip4][..tcp] [.....172.16.0.1][35532] -> [..192.168.10.50][...80] + guessed: [...639] [ip4][..tcp] [.....172.16.0.1][35546] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...639] [ip4][..tcp] [.....172.16.0.1][35546] -> [..192.168.10.50][...80] + guessed: [...640] [ip4][..tcp] [.....172.16.0.1][35560] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...640] [ip4][..tcp] [.....172.16.0.1][35560] -> [..192.168.10.50][...80] + guessed: [...641] [ip4][..tcp] [.....172.16.0.1][35586] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...641] [ip4][..tcp] [.....172.16.0.1][35586] -> [..192.168.10.50][...80] + guessed: [...642] [ip4][..tcp] [.....172.16.0.1][35600] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...642] [ip4][..tcp] [.....172.16.0.1][35600] -> [..192.168.10.50][...80] + idle: [...643] [ip4][..tcp] [.....172.16.0.1][35626] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: XSS Attack, HTTP Numeric IP Address + guessed: [...644] [ip4][..tcp] [.....172.16.0.1][35640] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...644] [ip4][..tcp] [.....172.16.0.1][35640] -> [..192.168.10.50][...80] + guessed: [...645] [ip4][..tcp] [.....172.16.0.1][35654] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...645] [ip4][..tcp] [.....172.16.0.1][35654] -> [..192.168.10.50][...80] + guessed: [...646] [ip4][..tcp] [.....172.16.0.1][35668] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...646] [ip4][..tcp] [.....172.16.0.1][35668] -> [..192.168.10.50][...80] + guessed: [...647] [ip4][..tcp] [.....172.16.0.1][35682] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...647] [ip4][..tcp] [.....172.16.0.1][35682] -> [..192.168.10.50][...80] + guessed: [...648] [ip4][..tcp] [.....172.16.0.1][35696] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...648] [ip4][..tcp] [.....172.16.0.1][35696] -> [..192.168.10.50][...80] + guessed: [...649] [ip4][..tcp] [.....172.16.0.1][35722] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...649] [ip4][..tcp] [.....172.16.0.1][35722] -> [..192.168.10.50][...80] + guessed: [...650] [ip4][..tcp] [.....172.16.0.1][35736] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...650] [ip4][..tcp] [.....172.16.0.1][35736] -> [..192.168.10.50][...80] + guessed: [...651] [ip4][..tcp] [.....172.16.0.1][35762] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...651] [ip4][..tcp] [.....172.16.0.1][35762] -> [..192.168.10.50][...80] + guessed: [...652] [ip4][..tcp] [.....172.16.0.1][35776] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...652] [ip4][..tcp] [.....172.16.0.1][35776] -> [..192.168.10.50][...80] + guessed: [...653] [ip4][..tcp] [.....172.16.0.1][35790] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...653] [ip4][..tcp] [.....172.16.0.1][35790] -> [..192.168.10.50][...80] + guessed: [...654] [ip4][..tcp] [.....172.16.0.1][35816] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...654] [ip4][..tcp] [.....172.16.0.1][35816] -> [..192.168.10.50][...80] + guessed: [...655] [ip4][..tcp] [.....172.16.0.1][35830] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...655] [ip4][..tcp] [.....172.16.0.1][35830] -> [..192.168.10.50][...80] + guessed: [...656] [ip4][..tcp] [.....172.16.0.1][35856] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...656] [ip4][..tcp] [.....172.16.0.1][35856] -> [..192.168.10.50][...80] + guessed: [...657] [ip4][..tcp] [.....172.16.0.1][35870] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...657] [ip4][..tcp] [.....172.16.0.1][35870] -> [..192.168.10.50][...80] + guessed: [...658] [ip4][..tcp] [.....172.16.0.1][35884] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + end: [...658] [ip4][..tcp] [.....172.16.0.1][35884] -> [..192.168.10.50][...80] + guessed: [...659] [ip4][..tcp] [.....172.16.0.1][35910] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + idle: [...659] [ip4][..tcp] [.....172.16.0.1][35910] -> [..192.168.10.50][...80] + guessed: [...660] [ip4][..tcp] [.....172.16.0.1][35924] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + idle: [...660] [ip4][..tcp] [.....172.16.0.1][35924] -> [..192.168.10.50][...80] + guessed: [...661] [ip4][..tcp] [.....172.16.0.1][35950] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + idle: [...661] [ip4][..tcp] [.....172.16.0.1][35950] -> [..192.168.10.50][...80] + end: [...569] [ip4][..tcp] [.....172.16.0.1][34278] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable] + RISK: XSS Attack, HTTP Numeric IP Address + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/activision.pcap.out b/test/results/flow-info/activision.pcap.out new file mode 100644 index 000000000..5beb45fb6 --- /dev/null +++ b/test/results/flow-info/activision.pcap.out @@ -0,0 +1,21 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][.3074] -> [..108.61.235.31][33441] + detected: [.....1] [ip4][..udp] [..192.168.2.100][.3074] -> [..108.61.235.31][33441] [Activision][Game][Fun] + new: [.....2] [ip4][..udp] [..192.168.2.100][.3074] -> [...45.63.112.54][34741] + detected: [.....2] [ip4][..udp] [..192.168.2.100][.3074] -> [...45.63.112.54][34741] [Activision][Game][Fun] + update: [.....1] [ip4][..udp] [..192.168.2.100][.3074] -> [..108.61.235.31][33441] [Activision][Game][Fun] + DAEMON-EVENT: [Processed: 30 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 1] + new: [.....3] [ip4][..udp] [..192.168.2.100][.3074] -> [.148.72.173.162][34311] + detected: [.....3] [ip4][..udp] [..192.168.2.100][.3074] -> [.148.72.173.162][34311] [Activision][Game][Fun] + idle: [.....2] [ip4][..udp] [..192.168.2.100][.3074] -> [...45.63.112.54][34741] [Activision][Game][Fun] + idle: [.....1] [ip4][..udp] [..192.168.2.100][.3074] -> [..108.61.235.31][33441] [Activision][Game][Fun] + DAEMON-EVENT: [Processed: 45 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 1] + new: [.....4] [ip4][..udp] [..192.168.2.100][.3074] -> [...173.199.67.5][37081] + detected: [.....4] [ip4][..udp] [..192.168.2.100][.3074] -> [...173.199.67.5][37081] [Activision][Game][Fun] + idle: [.....3] [ip4][..udp] [..192.168.2.100][.3074] -> [.148.72.173.162][34311] [Activision][Game][Fun] + idle: [.....4] [ip4][..udp] [..192.168.2.100][.3074] -> [...173.199.67.5][37081] [Activision][Game][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/afp.pcap.out b/test/results/flow-info/afp.pcap.out new file mode 100644 index 000000000..cc8070473 --- /dev/null +++ b/test/results/flow-info/afp.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.27.57][64987] -> [.192.168.27.139][..548] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [..192.168.27.57][64987] -> [.192.168.27.139][..548] [AFP][DataTransfer][Acceptable] + idle: [.....1] [ip4][..tcp] [..192.168.27.57][64987] -> [.192.168.27.139][..548] [AFP][DataTransfer][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/agora-sd-rtn.pcap.out b/test/results/flow-info/agora-sd-rtn.pcap.out new file mode 100644 index 000000000..d1cd61928 --- /dev/null +++ b/test/results/flow-info/agora-sd-rtn.pcap.out @@ -0,0 +1,113 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][35778] -> [.23.248.186.179][.8130] + detected: [.....1] [ip4][..udp] [..192.168.2.100][35778] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + new: [.....2] [ip4][..udp] [..192.168.2.100][35778] -> [.104.166.161.75][.8130] + detected: [.....2] [ip4][..udp] [..192.168.2.100][35778] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + new: [.....3] [ip4][..udp] [..192.168.2.100][44131] -> [.104.166.161.75][.8130] + detected: [.....3] [ip4][..udp] [..192.168.2.100][44131] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + new: [.....4] [ip4][..udp] [..192.168.2.100][44131] -> [.104.166.161.19][.8130] + detected: [.....4] [ip4][..udp] [..192.168.2.100][44131] -> [.104.166.161.19][.8130] [SD-RTN][Media][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.2.100][35778] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + update: [.....1] [ip4][..udp] [..192.168.2.100][35778] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + new: [.....5] [ip4][..udp] [..192.168.2.100][44131] -> [....128.1.77.66][.8130] + detected: [.....5] [ip4][..udp] [..192.168.2.100][44131] -> [....128.1.77.66][.8130] [SD-RTN][Media][Acceptable] + new: [.....6] [ip4][..udp] [..192.168.2.100][44131] -> [.23.248.186.179][.8130] + detected: [.....6] [ip4][..udp] [..192.168.2.100][44131] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + new: [.....7] [ip4][..udp] [..192.168.2.100][46798] -> [.23.248.186.179][.8130] + detected: [.....7] [ip4][..udp] [..192.168.2.100][46798] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.2.100][35778] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + update: [.....3] [ip4][..udp] [..192.168.2.100][44131] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + update: [.....4] [ip4][..udp] [..192.168.2.100][44131] -> [.104.166.161.19][.8130] [SD-RTN][Media][Acceptable] + update: [.....1] [ip4][..udp] [..192.168.2.100][35778] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + update: [.....5] [ip4][..udp] [..192.168.2.100][44131] -> [....128.1.77.66][.8130] [SD-RTN][Media][Acceptable] + new: [.....8] [ip4][..udp] [..192.168.2.100][44131] -> [.23.248.186.180][.8130] + detected: [.....8] [ip4][..udp] [..192.168.2.100][44131] -> [.23.248.186.180][.8130] [SD-RTN][Media][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.2.100][35778] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + idle: [.....1] [ip4][..udp] [..192.168.2.100][35778] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + update: [.....3] [ip4][..udp] [..192.168.2.100][44131] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + update: [.....4] [ip4][..udp] [..192.168.2.100][44131] -> [.104.166.161.19][.8130] [SD-RTN][Media][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][44131] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + update: [.....5] [ip4][..udp] [..192.168.2.100][44131] -> [....128.1.77.66][.8130] [SD-RTN][Media][Acceptable] + update: [.....7] [ip4][..udp] [..192.168.2.100][46798] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + DAEMON-EVENT: [Processed: 120 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 6 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 12] + new: [.....9] [ip4][..udp] [..192.168.2.100][40393] -> [.23.248.186.179][.8130] + detected: [.....9] [ip4][..udp] [..192.168.2.100][40393] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + new: [....10] [ip4][..udp] [..192.168.2.100][47453] -> [.23.248.186.179][.8130] + detected: [....10] [ip4][..udp] [..192.168.2.100][47453] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + new: [....11] [ip4][..udp] [..192.168.2.100][40393] -> [.104.166.161.75][.8130] + detected: [....11] [ip4][..udp] [..192.168.2.100][40393] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + idle: [.....4] [ip4][..udp] [..192.168.2.100][44131] -> [.104.166.161.19][.8130] [SD-RTN][Media][Acceptable] + idle: [.....3] [ip4][..udp] [..192.168.2.100][44131] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + idle: [.....8] [ip4][..udp] [..192.168.2.100][44131] -> [.23.248.186.180][.8130] [SD-RTN][Media][Acceptable] + idle: [.....6] [ip4][..udp] [..192.168.2.100][44131] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + idle: [.....5] [ip4][..udp] [..192.168.2.100][44131] -> [....128.1.77.66][.8130] [SD-RTN][Media][Acceptable] + idle: [.....7] [ip4][..udp] [..192.168.2.100][46798] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + new: [....12] [ip4][..udp] [..192.168.2.100][55322] -> [.104.166.161.75][.8130] + detected: [....12] [ip4][..udp] [..192.168.2.100][55322] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + new: [....13] [ip4][..udp] [..192.168.2.100][55322] -> [..128.1.233.218][.8130] + detected: [....13] [ip4][..udp] [..192.168.2.100][55322] -> [..128.1.233.218][.8130] [SD-RTN][Media][Acceptable] + new: [....14] [ip4][..udp] [..192.168.2.100][55322] -> [.193.118.52.182][.8130] + detected: [....14] [ip4][..udp] [..192.168.2.100][55322] -> [.193.118.52.182][.8130] [SD-RTN][Media][Acceptable] + update: [....10] [ip4][..udp] [..192.168.2.100][47453] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + update: [....11] [ip4][..udp] [..192.168.2.100][40393] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + update: [.....9] [ip4][..udp] [..192.168.2.100][40393] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + DAEMON-EVENT: [Processed: 210 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 6 / 14|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 15] + idle: [....10] [ip4][..udp] [..192.168.2.100][47453] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + idle: [....13] [ip4][..udp] [..192.168.2.100][55322] -> [..128.1.233.218][.8130] [SD-RTN][Media][Acceptable] + idle: [....11] [ip4][..udp] [..192.168.2.100][40393] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + idle: [.....9] [ip4][..udp] [..192.168.2.100][40393] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + idle: [....14] [ip4][..udp] [..192.168.2.100][55322] -> [.193.118.52.182][.8130] [SD-RTN][Media][Acceptable] + update: [....12] [ip4][..udp] [..192.168.2.100][55322] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + new: [....15] [ip4][..udp] [..192.168.2.100][55322] -> [..128.1.193.223][.8130] + detected: [....15] [ip4][..udp] [..192.168.2.100][55322] -> [..128.1.193.223][.8130] [SD-RTN][Media][Acceptable] + new: [....16] [ip4][..udp] [..192.168.2.100][55322] -> [.23.248.186.180][.8130] + detected: [....16] [ip4][..udp] [..192.168.2.100][55322] -> [.23.248.186.180][.8130] [SD-RTN][Media][Acceptable] + update: [....12] [ip4][..udp] [..192.168.2.100][55322] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + new: [....17] [ip4][..udp] [..192.168.2.100][55322] -> [..128.1.193.224][.8130] + detected: [....17] [ip4][..udp] [..192.168.2.100][55322] -> [..128.1.193.224][.8130] [SD-RTN][Media][Acceptable] + update: [....15] [ip4][..udp] [..192.168.2.100][55322] -> [..128.1.193.223][.8130] [SD-RTN][Media][Acceptable] + new: [....18] [ip4][..udp] [..192.168.2.100][55322] -> [.23.248.186.179][.8130] + detected: [....18] [ip4][..udp] [..192.168.2.100][55322] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + idle: [....16] [ip4][..udp] [..192.168.2.100][55322] -> [.23.248.186.180][.8130] [SD-RTN][Media][Acceptable] + idle: [....15] [ip4][..udp] [..192.168.2.100][55322] -> [..128.1.193.223][.8130] [SD-RTN][Media][Acceptable] + idle: [....12] [ip4][..udp] [..192.168.2.100][55322] -> [.104.166.161.75][.8130] [SD-RTN][Media][Acceptable] + update: [....17] [ip4][..udp] [..192.168.2.100][55322] -> [..128.1.193.224][.8130] [SD-RTN][Media][Acceptable] + DAEMON-EVENT: [Processed: 285 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 18|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 19] + new: [....19] [ip4][..udp] [..192.168.2.100][47805] -> [..128.1.193.223][.8130] + detected: [....19] [ip4][..udp] [..192.168.2.100][47805] -> [..128.1.193.223][.8130] [SD-RTN][Media][Acceptable] + new: [....20] [ip4][..udp] [..192.168.2.100][47805] -> [.202.226.25.166][.8130] + detected: [....20] [ip4][..udp] [..192.168.2.100][47805] -> [.202.226.25.166][.8130] [SD-RTN][Media][Acceptable] + idle: [....18] [ip4][..udp] [..192.168.2.100][55322] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + idle: [....17] [ip4][..udp] [..192.168.2.100][55322] -> [..128.1.193.224][.8130] [SD-RTN][Media][Acceptable] + new: [....21] [ip4][..udp] [..192.168.2.100][47805] -> [103.104.168.244][.8130] + detected: [....21] [ip4][..udp] [..192.168.2.100][47805] -> [103.104.168.244][.8130] [SD-RTN][Media][Acceptable] + new: [....22] [ip4][..udp] [..192.168.2.100][47805] -> [.199.190.44.135][.8130] + detected: [....22] [ip4][..udp] [..192.168.2.100][47805] -> [.199.190.44.135][.8130] [SD-RTN][Media][Acceptable] + new: [....23] [ip4][..udp] [..192.168.2.100][47805] -> [..128.1.193.224][.8130] + detected: [....23] [ip4][..udp] [..192.168.2.100][47805] -> [..128.1.193.224][.8130] [SD-RTN][Media][Acceptable] + new: [....24] [ip4][..udp] [..192.168.2.100][47805] -> [.23.248.186.179][.8130] + detected: [....24] [ip4][..udp] [..192.168.2.100][47805] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + new: [....25] [ip4][..udp] [..192.168.2.100][55094] -> [..128.1.193.223][.8130] + detected: [....25] [ip4][..udp] [..192.168.2.100][55094] -> [..128.1.193.223][.8130] [SD-RTN][Media][Acceptable] + update: [....22] [ip4][..udp] [..192.168.2.100][47805] -> [.199.190.44.135][.8130] [SD-RTN][Media][Acceptable] + update: [....21] [ip4][..udp] [..192.168.2.100][47805] -> [103.104.168.244][.8130] [SD-RTN][Media][Acceptable] + update: [....19] [ip4][..udp] [..192.168.2.100][47805] -> [..128.1.193.223][.8130] [SD-RTN][Media][Acceptable] + update: [....20] [ip4][..udp] [..192.168.2.100][47805] -> [.202.226.25.166][.8130] [SD-RTN][Media][Acceptable] + new: [....26] [ip4][..udp] [..192.168.2.100][47805] -> [.23.248.186.180][.8130] + detected: [....26] [ip4][..udp] [..192.168.2.100][47805] -> [.23.248.186.180][.8130] [SD-RTN][Media][Acceptable] + DAEMON-EVENT: [Processed: 400 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 8 / 26|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 23] + idle: [....25] [ip4][..udp] [..192.168.2.100][55094] -> [..128.1.193.223][.8130] [SD-RTN][Media][Acceptable] + idle: [....22] [ip4][..udp] [..192.168.2.100][47805] -> [.199.190.44.135][.8130] [SD-RTN][Media][Acceptable] + idle: [....26] [ip4][..udp] [..192.168.2.100][47805] -> [.23.248.186.180][.8130] [SD-RTN][Media][Acceptable] + idle: [....24] [ip4][..udp] [..192.168.2.100][47805] -> [.23.248.186.179][.8130] [SD-RTN][Media][Acceptable] + idle: [....21] [ip4][..udp] [..192.168.2.100][47805] -> [103.104.168.244][.8130] [SD-RTN][Media][Acceptable] + idle: [....23] [ip4][..udp] [..192.168.2.100][47805] -> [..128.1.193.224][.8130] [SD-RTN][Media][Acceptable] + idle: [....19] [ip4][..udp] [..192.168.2.100][47805] -> [..128.1.193.223][.8130] [SD-RTN][Media][Acceptable] + idle: [....20] [ip4][..udp] [..192.168.2.100][47805] -> [.202.226.25.166][.8130] [SD-RTN][Media][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ah.pcapng.out b/test/results/flow-info/ah.pcapng.out new file mode 100644 index 000000000..72c1545ad --- /dev/null +++ b/test/results/flow-info/ah.pcapng.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.......10.2.3.2][..500] -> [.......10.3.4.4][..500] + detected: [.....1] [ip4][..udp] [.......10.2.3.2][..500] -> [.......10.3.4.4][..500] [IPSec][VPN][Safe] + new: [.....2] [ip4][...51] [.......10.2.3.2] -> [.......10.3.4.4] + detected: [.....2] [ip4][...51] [.......10.2.3.2] -> [.......10.3.4.4] [IPSec][VPN][Safe] + idle: [.....1] [ip4][..udp] [.......10.2.3.2][..500] -> [.......10.3.4.4][..500] [IPSec][VPN][Safe] + idle: [.....2] [ip4][...51] [.......10.2.3.2] -> [.......10.3.4.4] [IPSec][VPN][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/aimini-http.pcap.out b/test/results/flow-info/aimini-http.pcap.out new file mode 100644 index 000000000..80c3c602d --- /dev/null +++ b/test/results/flow-info/aimini-http.pcap.out @@ -0,0 +1,23 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.101.0.2][28501] -> [.....10.102.0.2][...80] + detected: [.....1] [ip4][..tcp] [.....10.101.0.2][28501] -> [.....10.102.0.2][...80] [HTTP.Aimini][Download][Fun] + new: [.....2] [ip4][..tcp] [.....10.101.0.2][28502] -> [.....10.102.0.2][...80] + detected: [.....2] [ip4][..tcp] [.....10.101.0.2][28502] -> [.....10.102.0.2][...80] [HTTP.Aimini][Download][Fun] + analyse: [.....1] [ip4][..tcp] [.....10.101.0.2][28501] -> [.....10.102.0.2][...80] [HTTP.Aimini][Download][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.001| 0.000| 0.000] + [IAT(c->s)...: 0.000| 0.001| 0.000| 0.000][IAT(s->c)...: 0.000| 0.001| 0.000| 0.000] + [PKTLEN(c->s): 60.000|1514.000| 352.100| 516.000][PKTLEN(s->c): 62.000|1514.000|1216.700| 558.800] + [BINS(c->s)..: 10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,0,0] + new: [.....3] [ip4][..tcp] [.....10.101.0.2][28503] -> [.....10.102.0.2][...80] + detected: [.....3] [ip4][..tcp] [.....10.101.0.2][28503] -> [.....10.102.0.2][...80] [HTTP.Aimini][Download][Fun] + new: [.....4] [ip4][..tcp] [.....10.101.0.2][28504] -> [.....10.102.0.2][...80] + detected: [.....4] [ip4][..tcp] [.....10.101.0.2][28504] -> [.....10.102.0.2][...80] [HTTP.Aimini][Download][Fun] + end: [.....1] [ip4][..tcp] [.....10.101.0.2][28501] -> [.....10.102.0.2][...80] [HTTP.Aimini][Download][Fun] + end: [.....2] [ip4][..tcp] [.....10.101.0.2][28502] -> [.....10.102.0.2][...80] [HTTP.Aimini][Download][Fun] + end: [.....3] [ip4][..tcp] [.....10.101.0.2][28503] -> [.....10.102.0.2][...80] [HTTP.Aimini][Download][Fun] + end: [.....4] [ip4][..tcp] [.....10.101.0.2][28504] -> [.....10.102.0.2][...80] [HTTP.Aimini][Download][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ajp.pcap.out b/test/results/flow-info/ajp.pcap.out new file mode 100644 index 000000000..fe7876d80 --- /dev/null +++ b/test/results/flow-info/ajp.pcap.out @@ -0,0 +1,22 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...172.29.9.146][38856] -> [...172.29.9.147][.8009] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + detected: [.....1] [ip4][..tcp] [...172.29.9.146][38856] -> [...172.29.9.147][.8009] [AJP][Web][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [.....2] [ip4][..tcp] [...172.29.9.146][38856] -> [...172.29.9.147][.8010] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + detected: [.....2] [ip4][..tcp] [...172.29.9.146][38856] -> [...172.29.9.147][.8010] [AJP][Web][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + idle: [.....1] [ip4][..tcp] [...172.29.9.146][38856] -> [...172.29.9.147][.8009] [AJP][Web][Acceptable] + idle: [.....2] [ip4][..tcp] [...172.29.9.146][38856] -> [...172.29.9.147][.8010] [AJP][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/alexa-app.pcapng.out b/test/results/flow-info/alexa-app.pcapng.out new file mode 100644 index 000000000..b1d0f884b --- /dev/null +++ b/test/results/flow-info/alexa-app.pcapng.out @@ -0,0 +1,1016 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffd3:fbc2] + detected: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffd3:fbc2] [ICMPV6][Network][Acceptable] + new: [.....2] [ip6][icmp6] [.....................................::] -> [...............................ff02::16] + detected: [.....2] [ip6][icmp6] [.....................................::] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + new: [.....3] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [.....3] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [.....4] [ip4][..udp] [....172.16.42.1][...67] -> [..172.16.42.216][...68] + detected: [.....4] [ip4][..udp] [....172.16.42.1][...67] -> [..172.16.42.216][...68] [DHCP][Network][Acceptable] + new: [.....5] [ip6][icmp6] [..............fe80::7af8:82ff:fed3:fbc2] -> [................................ff02::2] + detected: [.....5] [ip6][icmp6] [..............fe80::7af8:82ff:fed3:fbc2] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + new: [.....6] [ip4][..udp] [..172.16.42.216][.3440] -> [....172.16.42.1][...53] + detected: [.....6] [ip4][..udp] [..172.16.42.216][.3440] -> [....172.16.42.1][...53] [DNS][ConnCheck][Acceptable] + detection-update: [.....6] [ip4][..udp] [..172.16.42.216][.3440] -> [....172.16.42.1][...53] [DNS][ConnCheck][Acceptable] + new: [.....7] [ip4][..udp] [..172.16.42.216][55619] -> [....172.16.42.1][...53] + detected: [.....7] [ip4][..udp] [..172.16.42.216][55619] -> [....172.16.42.1][...53] [DNS][ConnCheck][Acceptable] + detection-update: [.....7] [ip4][..udp] [..172.16.42.216][55619] -> [....172.16.42.1][...53] [DNS][ConnCheck][Acceptable] + new: [.....8] [ip4][..tcp] [..172.16.42.216][60246] -> [..172.217.9.142][...80] + detected: [.....8] [ip4][..tcp] [..172.16.42.216][60246] -> [..172.217.9.142][...80] [HTTP.Google][ConnCheck][Acceptable] + new: [.....9] [ip4][..udp] [..172.16.42.216][53188] -> [....172.16.42.1][...53] + detected: [.....9] [ip4][..udp] [..172.16.42.216][53188] -> [....172.16.42.1][...53] [DNS.GoogleServices][Web][Acceptable] + new: [....10] [ip4][..udp] [..172.16.42.216][52603] -> [....172.16.42.1][...53] + detected: [....10] [ip4][..udp] [..172.16.42.216][52603] -> [....172.16.42.1][...53] [DNS.Google][Web][Acceptable] + detection-update: [....10] [ip4][..udp] [..172.16.42.216][52603] -> [....172.16.42.1][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....9] [ip4][..udp] [..172.16.42.216][53188] -> [....172.16.42.1][...53] [DNS.GoogleServices][Web][Acceptable] + new: [....11] [ip4][..tcp] [..172.16.42.216][42878] -> [173.194.223.188][.5228] + detected: [....11] [ip4][..tcp] [..172.16.42.216][42878] -> [173.194.223.188][.5228] [TLS.GoogleServices][Web][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + detection-update: [....11] [ip4][..tcp] [..172.16.42.216][42878] -> [173.194.223.188][.5228] [TLS.GoogleServices][Web][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + new: [....12] [ip4][..udp] [..172.16.42.216][10462] -> [....172.16.42.1][...53] + detected: [....12] [ip4][..udp] [..172.16.42.216][10462] -> [....172.16.42.1][...53] [DNS.Google][Web][Acceptable] + detection-update: [....12] [ip4][..udp] [..172.16.42.216][10462] -> [....172.16.42.1][...53] [DNS.Google][Web][Acceptable] + new: [....13] [ip4][..tcp] [..172.16.42.216][35540] -> [..172.217.9.142][...80] + detected: [....13] [ip4][..tcp] [..172.16.42.216][35540] -> [..172.217.9.142][...80] [HTTP.Google][ConnCheck][Acceptable] + new: [....14] [ip4][.icmp] [....172.16.42.1] -> [..172.16.42.216] + detected: [....14] [ip4][.icmp] [....172.16.42.1] -> [..172.16.42.216] [ICMP][Network][Acceptable] + new: [....15] [ip4][..udp] [..172.16.42.216][48155] -> [....172.16.42.1][...53] + detected: [....15] [ip4][..udp] [..172.16.42.216][48155] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [....15] [ip4][..udp] [..172.16.42.216][48155] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [....16] [ip4][..tcp] [..172.16.42.216][55242] -> [..52.85.209.197][..443] + detected: [....16] [ip4][..tcp] [..172.16.42.216][55242] -> [..52.85.209.197][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....16] [ip4][..tcp] [..172.16.42.216][55242] -> [..52.85.209.197][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....16] [ip4][..tcp] [..172.16.42.216][55242] -> [..52.85.209.197][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [....17] [ip4][..udp] [..172.16.42.216][19967] -> [....172.16.42.1][...53] + detected: [....17] [ip4][..udp] [..172.16.42.216][19967] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [....17] [ip4][..udp] [..172.16.42.216][19967] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [....18] [ip4][..tcp] [..172.16.42.216][33556] -> [....52.94.232.0][..443] + detected: [....18] [ip4][..tcp] [..172.16.42.216][33556] -> [....52.94.232.0][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....18] [ip4][..tcp] [..172.16.42.216][33556] -> [....52.94.232.0][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....18] [ip4][..tcp] [..172.16.42.216][33556] -> [....52.94.232.0][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [....19] [ip4][..udp] [..172.16.42.216][.7358] -> [....172.16.42.1][...53] + detected: [....19] [ip4][..udp] [..172.16.42.216][.7358] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [....19] [ip4][..udp] [..172.16.42.216][.7358] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [....20] [ip4][..tcp] [..172.16.42.216][53682] -> [..54.239.22.185][..443] + detected: [....20] [ip4][..tcp] [..172.16.42.216][53682] -> [..54.239.22.185][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....20] [ip4][..tcp] [..172.16.42.216][53682] -> [..54.239.22.185][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....20] [ip4][..tcp] [..172.16.42.216][53682] -> [..54.239.22.185][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [....21] [ip4][..udp] [..172.16.42.216][41030] -> [....172.16.42.1][...53] + detected: [....21] [ip4][..udp] [..172.16.42.216][41030] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + detection-update: [....21] [ip4][..udp] [..172.16.42.216][41030] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + new: [....22] [ip4][..tcp] [..172.16.42.216][49572] -> [..52.94.232.134][...80] + detected: [....22] [ip4][..tcp] [..172.16.42.216][49572] -> [..52.94.232.134][...80] [HTTP.AmazonAlexa][VirtAssistant][Acceptable] + new: [....23] [ip6][icmp6] [..............fe80::7af8:82ff:fed3:fbc2] -> [...............................ff02::16] + detected: [....23] [ip6][icmp6] [..............fe80::7af8:82ff:fed3:fbc2] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + new: [....24] [ip4][..udp] [..172.16.42.216][23559] -> [....172.16.42.1][...53] + detected: [....24] [ip4][..udp] [..172.16.42.216][23559] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + detection-update: [....24] [ip4][..udp] [..172.16.42.216][23559] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + new: [....25] [ip4][..tcp] [..172.16.42.216][38363] -> [..34.199.52.240][..443] + detected: [....25] [ip4][..tcp] [..172.16.42.216][38363] -> [..34.199.52.240][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....25] [ip4][..tcp] [..172.16.42.216][38363] -> [..34.199.52.240][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....25] [ip4][..tcp] [..172.16.42.216][38363] -> [..34.199.52.240][..443] [TLS.AmazonAWS][Cloud][Acceptable] + new: [....26] [ip4][..tcp] [..172.16.42.216][38364] -> [..34.199.52.240][..443] + detected: [....26] [ip4][..tcp] [..172.16.42.216][38364] -> [..34.199.52.240][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....26] [ip4][..tcp] [..172.16.42.216][38364] -> [..34.199.52.240][..443] [TLS.AmazonAWS][Cloud][Acceptable] + new: [....27] [ip4][..udp] [..172.16.42.216][54886] -> [....172.16.42.1][...53] + detected: [....27] [ip4][..udp] [..172.16.42.216][54886] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [....27] [ip4][..udp] [..172.16.42.216][54886] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [....28] [ip4][..tcp] [..172.16.42.216][45661] -> [..52.94.232.134][..443] + detected: [....28] [ip4][..tcp] [..172.16.42.216][45661] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....28] [ip4][..tcp] [..172.16.42.216][45661] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [....29] [ip4][..tcp] [..172.16.42.216][45662] -> [..52.94.232.134][..443] + new: [....30] [ip4][..tcp] [..172.16.42.216][45663] -> [..52.94.232.134][..443] + new: [....31] [ip4][..tcp] [..172.16.42.216][40200] -> [.10.201.126.241][.8080] + new: [....32] [ip4][..tcp] [..172.16.42.216][38391] -> [...192.168.11.1][.8080] + detected: [....29] [ip4][..tcp] [..172.16.42.216][45662] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....30] [ip4][..tcp] [..172.16.42.216][45663] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....30] [ip4][..tcp] [..172.16.42.216][45663] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....29] [ip4][..tcp] [..172.16.42.216][45662] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [....33] [ip4][..tcp] [..172.16.42.216][40202] -> [.10.201.126.241][.8080] + new: [....34] [ip4][..udp] [..172.16.42.216][21391] -> [....172.16.42.1][...53] + detected: [....34] [ip4][..udp] [..172.16.42.216][21391] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + new: [....35] [ip4][..udp] [..172.16.42.216][52077] -> [....172.16.42.1][...53] + detected: [....35] [ip4][..udp] [..172.16.42.216][52077] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [....34] [ip4][..udp] [..172.16.42.216][21391] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + new: [....36] [ip4][..tcp] [..172.16.42.216][34019] -> [..54.239.24.186][..443] + detection-update: [....35] [ip4][..udp] [..172.16.42.216][52077] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [....37] [ip4][..tcp] [..172.16.42.216][54411] -> [..52.85.209.216][..443] + new: [....38] [ip4][..tcp] [..172.16.42.216][54412] -> [..52.85.209.216][..443] + detected: [....36] [ip4][..tcp] [..172.16.42.216][34019] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detected: [....37] [ip4][..tcp] [..172.16.42.216][54411] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + new: [....39] [ip4][..tcp] [..172.16.42.216][54413] -> [..52.85.209.216][..443] + detected: [....38] [ip4][..tcp] [..172.16.42.216][54412] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....37] [ip4][..tcp] [..172.16.42.216][54411] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....37] [ip4][..tcp] [..172.16.42.216][54411] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....38] [ip4][..tcp] [..172.16.42.216][54412] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....38] [ip4][..tcp] [..172.16.42.216][54412] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + analyse: [....37] [ip4][..tcp] [..172.16.42.216][54411] -> [..52.85.209.216][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.091| 0.022| 0.031] + [IAT(c->s)...: 0.000| 0.091| 0.027| 0.034][IAT(s->c)...: 0.000| 0.075| 0.019| 0.028] + [PKTLEN(c->s): 66.000|1096.000| 163.600| 265.200][PKTLEN(s->c): 66.000|1514.000| 929.400| 640.400] + [BINS(c->s)..: 11,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,1,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,9,0,0] + detection-update: [....37] [ip4][..tcp] [..172.16.42.216][54411] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....36] [ip4][..tcp] [..172.16.42.216][34019] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....36] [ip4][..tcp] [..172.16.42.216][34019] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + new: [....40] [ip4][..udp] [..172.16.42.216][43350] -> [....172.16.42.1][...53] + detected: [....40] [ip4][..udp] [..172.16.42.216][43350] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + ERROR-EVENT: Unknown packet type + analyse: [....28] [ip4][..tcp] [..172.16.42.216][45661] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.016| 0.161| 0.286] + [IAT(c->s)...: 0.000| 1.016| 0.147| 0.253][IAT(s->c)...: 0.000| 0.966| 0.178| 0.321] + [PKTLEN(c->s): 54.000|1168.000| 325.200| 441.600][PKTLEN(s->c): 60.000|1514.000| 451.100| 527.500] + [BINS(c->s)..: 12,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,1,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + detection-update: [....40] [ip4][..udp] [..172.16.42.216][43350] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [....41] [ip4][..tcp] [..172.16.42.216][42129] -> [..72.21.206.135][..443] + new: [....42] [ip4][..tcp] [..172.16.42.216][42130] -> [..72.21.206.135][..443] + detected: [....42] [ip4][..tcp] [..172.16.42.216][42130] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + detected: [....41] [ip4][..tcp] [..172.16.42.216][42129] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....41] [ip4][..tcp] [..172.16.42.216][42129] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....41] [ip4][..tcp] [..172.16.42.216][42129] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + new: [....43] [ip4][..tcp] [..172.16.42.216][45673] -> [..52.94.232.134][..443] + new: [....44] [ip4][..tcp] [..172.16.42.216][45674] -> [..52.94.232.134][..443] + detected: [....43] [ip4][..tcp] [..172.16.42.216][45673] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....44] [ip4][..tcp] [..172.16.42.216][45674] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....43] [ip4][..tcp] [..172.16.42.216][45673] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....44] [ip4][..tcp] [..172.16.42.216][45674] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [....45] [ip4][..tcp] [..172.16.42.216][49589] -> [..52.94.232.134][...80] + new: [....46] [ip4][..tcp] [..172.16.42.216][45676] -> [..52.94.232.134][..443] + new: [....47] [ip4][..tcp] [..172.16.42.216][45677] -> [..52.94.232.134][..443] + new: [....48] [ip4][..tcp] [..172.16.42.216][45678] -> [..52.94.232.134][..443] + new: [....49] [ip4][..tcp] [..172.16.42.216][45679] -> [..52.94.232.134][..443] + detected: [....45] [ip4][..tcp] [..172.16.42.216][49589] -> [..52.94.232.134][...80] [HTTP.AmazonAlexa][VirtAssistant][Acceptable] + detected: [....46] [ip4][..tcp] [..172.16.42.216][45676] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....47] [ip4][..tcp] [..172.16.42.216][45677] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....48] [ip4][..tcp] [..172.16.42.216][45678] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....49] [ip4][..tcp] [..172.16.42.216][45679] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....47] [ip4][..tcp] [..172.16.42.216][45677] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....46] [ip4][..tcp] [..172.16.42.216][45676] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....49] [ip4][..tcp] [..172.16.42.216][45679] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....48] [ip4][..tcp] [..172.16.42.216][45678] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....42] [ip4][..tcp] [..172.16.42.216][42130] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....42] [ip4][..tcp] [..172.16.42.216][42130] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + analyse: [....42] [ip4][..tcp] [..172.16.42.216][42130] -> [..72.21.206.135][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.836| 0.167| 0.244] + [IAT(c->s)...: 0.000| 0.784| 0.152| 0.207][IAT(s->c)...: 0.000| 0.836| 0.185| 0.281] + [PKTLEN(c->s): 54.000|1514.000| 346.500| 493.600][PKTLEN(s->c): 60.000|1514.000| 471.000| 575.600] + [BINS(c->s)..: 10,0,0,1,0,0,3,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 7,1,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + detection-update: [....42] [ip4][..tcp] [..172.16.42.216][42130] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + new: [....50] [ip4][..tcp] [..172.16.42.216][45680] -> [..52.94.232.134][..443] + detected: [....50] [ip4][..tcp] [..172.16.42.216][45680] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....50] [ip4][..tcp] [..172.16.42.216][45680] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [....51] [ip4][..tcp] [..172.16.42.216][34033] -> [..54.239.24.186][..443] + new: [....52] [ip4][..tcp] [..172.16.42.216][34034] -> [..54.239.24.186][..443] + detected: [....51] [ip4][..tcp] [..172.16.42.216][34033] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + new: [....53] [ip4][..tcp] [..172.16.42.216][45683] -> [..52.94.232.134][..443] + detected: [....52] [ip4][..tcp] [..172.16.42.216][34034] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....51] [ip4][..tcp] [..172.16.42.216][34033] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detected: [....53] [ip4][..tcp] [..172.16.42.216][45683] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....52] [ip4][..tcp] [..172.16.42.216][34034] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....53] [ip4][..tcp] [..172.16.42.216][45683] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [....54] [ip4][..tcp] [..172.16.42.216][54427] -> [..52.85.209.216][..443] + new: [....55] [ip4][..tcp] [..172.16.42.216][42143] -> [..72.21.206.135][..443] + detected: [....54] [ip4][..tcp] [..172.16.42.216][54427] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + detected: [....55] [ip4][..tcp] [..172.16.42.216][42143] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....54] [ip4][..tcp] [..172.16.42.216][54427] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....55] [ip4][..tcp] [..172.16.42.216][42143] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + analyse: [....52] [ip4][..tcp] [..172.16.42.216][34034] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.352| 0.044| 0.079] + [IAT(c->s)...: 0.000| 0.352| 0.038| 0.081][IAT(s->c)...: 0.000| 0.295| 0.053| 0.075] + [PKTLEN(c->s): 54.000|1514.000|1031.400| 643.700][PKTLEN(s->c): 60.000| 564.000| 110.500| 136.800] + [BINS(c->s)..: 4,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,11,0,0] + [BINS(s->c)..: 11,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....56] [ip4][..tcp] [..172.16.42.216][42144] -> [..72.21.206.135][..443] + detected: [....56] [ip4][..tcp] [..172.16.42.216][42144] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....56] [ip4][..tcp] [..172.16.42.216][42144] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + ERROR-EVENT: Unknown packet type + new: [....57] [ip4][..tcp] [..172.16.42.216][45687] -> [..52.94.232.134][..443] + detected: [....57] [ip4][..tcp] [..172.16.42.216][45687] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....57] [ip4][..tcp] [..172.16.42.216][45687] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [....58] [ip4][....2] [........0.0.0.0] -> [......224.0.0.1] + detected: [....58] [ip4][....2] [........0.0.0.0] -> [......224.0.0.1] [IGMP][Network][Acceptable] + new: [....59] [ip4][..tcp] [..172.16.42.216][45688] -> [..52.94.232.134][..443] + detected: [....59] [ip4][..tcp] [..172.16.42.216][45688] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....59] [ip4][..tcp] [..172.16.42.216][45688] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [....60] [ip4][..tcp] [..172.16.42.216][34041] -> [..54.239.24.186][..443] + detected: [....60] [ip4][..tcp] [..172.16.42.216][34041] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....60] [ip4][..tcp] [..172.16.42.216][34041] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + update: [....14] [ip4][.icmp] [....172.16.42.1] -> [..172.16.42.216] [ICMP][Network][Acceptable] + update: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffd3:fbc2] [ICMPV6][Network][Acceptable] + update: [.....2] [ip6][icmp6] [.....................................::] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + update: [.....5] [ip6][icmp6] [..............fe80::7af8:82ff:fed3:fbc2] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + new: [....61] [ip4][..tcp] [..172.16.42.216][42148] -> [..72.21.206.135][..443] + new: [....62] [ip4][..udp] [..172.16.42.216][44475] -> [....172.16.42.1][...53] + detected: [....62] [ip4][..udp] [..172.16.42.216][44475] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detected: [....61] [ip4][..tcp] [..172.16.42.216][42148] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....62] [ip4][..udp] [..172.16.42.216][44475] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [....63] [ip4][..tcp] [..172.16.42.216][54434] -> [..52.85.209.216][..443] + detection-update: [....61] [ip4][..tcp] [..172.16.42.216][42148] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + detected: [....63] [ip4][..tcp] [..172.16.42.216][54434] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....63] [ip4][..tcp] [..172.16.42.216][54434] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + new: [....64] [ip4][..udp] [..172.16.42.216][60804] -> [....172.16.42.1][...53] + detected: [....64] [ip4][..udp] [..172.16.42.216][60804] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [....64] [ip4][..udp] [..172.16.42.216][60804] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [....65] [ip4][..tcp] [..172.16.42.216][41691] -> [..54.239.29.146][..443] + detected: [....65] [ip4][..tcp] [..172.16.42.216][41691] -> [..54.239.29.146][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....65] [ip4][..tcp] [..172.16.42.216][41691] -> [..54.239.29.146][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....65] [ip4][..tcp] [..172.16.42.216][41691] -> [..54.239.29.146][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [....63] [ip4][..tcp] [..172.16.42.216][54434] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.897| 0.237| 0.560] + [IAT(c->s)...: 0.000| 2.897| 0.227| 0.703][IAT(s->c)...: 0.000| 1.117| 0.248| 0.347] + [PKTLEN(c->s): 66.000|1514.000| 531.800| 642.500][PKTLEN(s->c): 66.000|1514.000| 713.900| 677.700] + [BINS(c->s)..: 9,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0,0] + [BINS(s->c)..: 7,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,5,0,0] + analyse: [....65] [ip4][..tcp] [..172.16.42.216][41691] -> [..54.239.29.146][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.486| 0.102| 0.138] + [IAT(c->s)...: 0.000| 0.293| 0.082| 0.091][IAT(s->c)...: 0.000| 0.486| 0.112| 0.155] + [PKTLEN(c->s): 54.000|1514.000| 397.600| 545.400][PKTLEN(s->c): 60.000|1514.000| 858.800| 692.600] + [BINS(c->s)..: 6,0,0,1,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 6,1,0,0,0,2,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0] + detection-update: [....65] [ip4][..tcp] [..172.16.42.216][41691] -> [..54.239.29.146][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [....66] [ip4][..tcp] [..172.16.42.216][49606] -> [..52.94.232.134][...80] + new: [....67] [ip4][..tcp] [..172.16.42.216][45693] -> [..52.94.232.134][..443] + new: [....68] [ip4][..tcp] [..172.16.42.216][45694] -> [..52.94.232.134][..443] + new: [....69] [ip4][..udp] [..172.16.42.216][25081] -> [....172.16.42.1][...53] + detected: [....69] [ip4][..udp] [..172.16.42.216][25081] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + detected: [....66] [ip4][..tcp] [..172.16.42.216][49606] -> [..52.94.232.134][...80] [HTTP.AmazonAlexa][VirtAssistant][Acceptable] + new: [....70] [ip4][..tcp] [..172.16.42.216][45695] -> [..52.94.232.134][..443] + detected: [....68] [ip4][..tcp] [..172.16.42.216][45694] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....67] [ip4][..tcp] [..172.16.42.216][45693] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + new: [....71] [ip4][..tcp] [..172.16.42.216][45696] -> [..52.94.232.134][..443] + new: [....72] [ip4][..tcp] [..172.16.42.216][45697] -> [..52.94.232.134][..443] + detection-update: [....69] [ip4][..udp] [..172.16.42.216][25081] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + new: [....73] [ip4][..tcp] [..172.16.42.216][59698] -> [..52.94.232.134][..443] + detection-update: [....68] [ip4][..tcp] [..172.16.42.216][45694] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detected: [....71] [ip4][..tcp] [..172.16.42.216][45696] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....70] [ip4][..tcp] [..172.16.42.216][45695] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....72] [ip4][..tcp] [..172.16.42.216][45697] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....67] [ip4][..tcp] [..172.16.42.216][45693] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detected: [....73] [ip4][..tcp] [..172.16.42.216][59698] -> [..52.94.232.134][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [....71] [ip4][..tcp] [..172.16.42.216][45696] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....70] [ip4][..tcp] [..172.16.42.216][45695] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....73] [ip4][..tcp] [..172.16.42.216][59698] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + new: [....74] [ip4][..tcp] [..172.16.42.216][45698] -> [..52.94.232.134][..443] + detected: [....74] [ip4][..tcp] [..172.16.42.216][45698] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....74] [ip4][..tcp] [..172.16.42.216][45698] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....72] [ip4][..tcp] [..172.16.42.216][45697] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + update: [.....3] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + update: [.....9] [ip4][..udp] [..172.16.42.216][53188] -> [....172.16.42.1][...53] [DNS.GoogleServices][Web][Acceptable] + update: [.....4] [ip4][..udp] [....172.16.42.1][...67] -> [..172.16.42.216][...68] [DHCP][Network][Acceptable] + update: [....12] [ip4][..udp] [..172.16.42.216][10462] -> [....172.16.42.1][...53] [DNS.Google][Web][Acceptable] + update: [.....7] [ip4][..udp] [..172.16.42.216][55619] -> [....172.16.42.1][...53] [DNS][ConnCheck][Acceptable] + update: [....23] [ip6][icmp6] [..............fe80::7af8:82ff:fed3:fbc2] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + update: [.....6] [ip4][..udp] [..172.16.42.216][.3440] -> [....172.16.42.1][...53] [DNS][ConnCheck][Acceptable] + update: [....10] [ip4][..udp] [..172.16.42.216][52603] -> [....172.16.42.1][...53] [DNS.Google][Web][Acceptable] + new: [....75] [ip4][..tcp] [..172.16.42.216][37113] -> [..52.94.232.134][..443] + detected: [....75] [ip4][..tcp] [..172.16.42.216][37113] -> [..52.94.232.134][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....75] [ip4][..tcp] [..172.16.42.216][37113] -> [..52.94.232.134][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [....76] [ip4][..tcp] [..172.16.42.216][49613] -> [..52.94.232.134][...80] + detected: [....76] [ip4][..tcp] [..172.16.42.216][49613] -> [..52.94.232.134][...80] [HTTP.AmazonAlexa][VirtAssistant][Acceptable] + new: [....77] [ip4][..tcp] [..172.16.42.216][38404] -> [..34.199.52.240][..443] + detected: [....77] [ip4][..tcp] [..172.16.42.216][38404] -> [..34.199.52.240][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....77] [ip4][..tcp] [..172.16.42.216][38404] -> [..34.199.52.240][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....77] [ip4][..tcp] [..172.16.42.216][38404] -> [..34.199.52.240][..443] [TLS.AmazonAWS][Cloud][Acceptable] + new: [....78] [ip4][..tcp] [..172.16.42.216][34053] -> [..54.239.24.186][..443] + new: [....79] [ip4][..tcp] [..172.16.42.216][34054] -> [..54.239.24.186][..443] + detected: [....78] [ip4][..tcp] [..172.16.42.216][34053] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....78] [ip4][..tcp] [..172.16.42.216][34053] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + update: [....21] [ip4][..udp] [..172.16.42.216][41030] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + update: [....24] [ip4][..udp] [..172.16.42.216][23559] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + update: [....15] [ip4][..udp] [..172.16.42.216][48155] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....19] [ip4][..udp] [..172.16.42.216][.7358] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....17] [ip4][..udp] [..172.16.42.216][19967] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [....80] [ip4][..tcp] [..172.16.42.216][45703] -> [..52.94.232.134][..443] + new: [....81] [ip4][..tcp] [..172.16.42.216][45704] -> [..52.94.232.134][..443] + new: [....82] [ip4][..tcp] [..172.16.42.216][45705] -> [..52.94.232.134][..443] + new: [....83] [ip4][..tcp] [..172.16.42.216][40242] -> [.10.201.126.241][.8080] + new: [....84] [ip4][..tcp] [..172.16.42.216][45707] -> [..52.94.232.134][..443] + new: [....85] [ip4][..tcp] [..172.16.42.216][38434] -> [...192.168.11.1][.8080] + detected: [....80] [ip4][..tcp] [..172.16.42.216][45703] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....81] [ip4][..tcp] [..172.16.42.216][45704] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....80] [ip4][..tcp] [..172.16.42.216][45703] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....81] [ip4][..tcp] [..172.16.42.216][45704] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detected: [....82] [ip4][..tcp] [..172.16.42.216][45705] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....82] [ip4][..tcp] [..172.16.42.216][45705] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [....86] [ip4][..tcp] [..172.16.42.216][45709] -> [..52.94.232.134][..443] + new: [....87] [ip4][..tcp] [..172.16.42.216][45710] -> [..52.94.232.134][..443] + detected: [....86] [ip4][..tcp] [..172.16.42.216][45709] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....87] [ip4][..tcp] [..172.16.42.216][45710] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + new: [....88] [ip4][..tcp] [..172.16.42.216][45711] -> [..52.94.232.134][..443] + new: [....89] [ip4][..tcp] [..172.16.42.216][45712] -> [..52.94.232.134][..443] + new: [....90] [ip4][..tcp] [..172.16.42.216][49627] -> [..52.94.232.134][...80] + new: [....91] [ip4][..tcp] [..172.16.42.216][45714] -> [..52.94.232.134][..443] + new: [....92] [ip4][..tcp] [..172.16.42.216][45715] -> [..52.94.232.134][..443] + new: [....93] [ip4][..tcp] [..172.16.42.216][49630] -> [..52.94.232.134][...80] + detection-update: [....87] [ip4][..tcp] [..172.16.42.216][45710] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....86] [ip4][..tcp] [..172.16.42.216][45709] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detected: [....92] [ip4][..tcp] [..172.16.42.216][45715] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....88] [ip4][..tcp] [..172.16.42.216][45711] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....91] [ip4][..tcp] [..172.16.42.216][45714] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....89] [ip4][..tcp] [..172.16.42.216][45712] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [....93] [ip4][..tcp] [..172.16.42.216][49630] -> [..52.94.232.134][...80] [HTTP.AmazonAlexa][VirtAssistant][Acceptable] + analyse: [....80] [ip4][..tcp] [..172.16.42.216][45703] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.570| 0.289| 0.417] + [IAT(c->s)...: 0.000| 1.570| 0.253| 0.411][IAT(s->c)...: 0.000| 1.486| 0.338| 0.420] + [PKTLEN(c->s): 54.000|1514.000| 488.200| 617.300][PKTLEN(s->c): 60.000| 731.000| 234.500| 245.400] + [BINS(c->s)..: 8,1,0,0,2,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0] + [BINS(s->c)..: 7,1,1,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [....92] [ip4][..tcp] [..172.16.42.216][45715] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....89] [ip4][..tcp] [..172.16.42.216][45712] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [....91] [ip4][..tcp] [..172.16.42.216][45714] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [....94] [ip4][..tcp] [..172.16.42.216][34069] -> [..54.239.24.186][..443] + detected: [....94] [ip4][..tcp] [..172.16.42.216][34069] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + new: [....95] [ip4][..udp] [..172.16.42.216][35726] -> [....172.16.42.1][...53] + detected: [....95] [ip4][..udp] [..172.16.42.216][35726] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + detection-update: [....94] [ip4][..tcp] [..172.16.42.216][34069] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....95] [ip4][..udp] [..172.16.42.216][35726] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + new: [....96] [ip4][..tcp] [..172.16.42.216][41820] -> [...54.231.72.88][..443] + new: [....97] [ip4][..tcp] [..172.16.42.216][41821] -> [...54.231.72.88][..443] + detected: [....96] [ip4][..tcp] [..172.16.42.216][41820] -> [...54.231.72.88][..443] [TLS.AmazonAWS][Cloud][Acceptable] + analyse: [....87] [ip4][..tcp] [..172.16.42.216][45710] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.192| 0.160| 0.282] + [IAT(c->s)...: 0.000| 1.162| 0.158| 0.284][IAT(s->c)...: 0.000| 1.192| 0.162| 0.280] + [PKTLEN(c->s): 54.000|1514.000| 508.900| 586.100][PKTLEN(s->c): 60.000|1147.000| 205.100| 290.000] + [BINS(c->s)..: 4,1,0,1,1,1,1,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0] + [BINS(s->c)..: 10,1,1,0,1,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [....96] [ip4][..tcp] [..172.16.42.216][41820] -> [...54.231.72.88][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....96] [ip4][..tcp] [..172.16.42.216][41820] -> [...54.231.72.88][..443] [TLS.AmazonAWS][Cloud][Acceptable] + analyse: [....89] [ip4][..tcp] [..172.16.42.216][45712] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.080| 0.209| 0.303] + [IAT(c->s)...: 0.000| 1.006| 0.189| 0.280][IAT(s->c)...: 0.000| 1.080| 0.234| 0.328] + [PKTLEN(c->s): 54.000|1514.000| 519.700| 621.700][PKTLEN(s->c): 60.000| 715.000| 187.900| 225.900] + [BINS(c->s)..: 7,1,0,0,0,2,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0] + [BINS(s->c)..: 9,1,1,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....98] [ip4][..udp] [..172.16.42.216][41639] -> [....172.16.42.1][...53] + detected: [....98] [ip4][..udp] [..172.16.42.216][41639] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [....98] [ip4][..udp] [..172.16.42.216][41639] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [....99] [ip4][..tcp] [..172.16.42.216][44001] -> [..176.32.101.52][..443] + detected: [....99] [ip4][..tcp] [..172.16.42.216][44001] -> [..176.32.101.52][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....99] [ip4][..tcp] [..172.16.42.216][44001] -> [..176.32.101.52][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + ERROR-EVENT: Unknown packet type + update: [....27] [ip4][..udp] [..172.16.42.216][54886] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....14] [ip4][.icmp] [....172.16.42.1] -> [..172.16.42.216] [ICMP][Network][Acceptable] + update: [....40] [ip4][..udp] [..172.16.42.216][43350] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffd3:fbc2] [ICMPV6][Network][Acceptable] + update: [.....2] [ip6][icmp6] [.....................................::] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + update: [.....5] [ip6][icmp6] [..............fe80::7af8:82ff:fed3:fbc2] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + update: [....35] [ip4][..udp] [..172.16.42.216][52077] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....34] [ip4][..udp] [..172.16.42.216][21391] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + detection-update: [....88] [ip4][..tcp] [..172.16.42.216][45711] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [...100] [ip4][..tcp] [..172.16.42.216][34073] -> [..54.239.24.186][..443] + new: [...101] [ip4][..tcp] [..172.16.42.216][34074] -> [..54.239.24.186][..443] + new: [...102] [ip4][..tcp] [..172.16.42.216][41825] -> [...54.231.72.88][..443] + detected: [...101] [ip4][..tcp] [..172.16.42.216][34074] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detected: [...102] [ip4][..tcp] [..172.16.42.216][41825] -> [...54.231.72.88][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [...101] [ip4][..tcp] [..172.16.42.216][34074] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [...102] [ip4][..tcp] [..172.16.42.216][41825] -> [...54.231.72.88][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [...102] [ip4][..tcp] [..172.16.42.216][41825] -> [...54.231.72.88][..443] [TLS.AmazonAWS][Cloud][Acceptable] + update: [....23] [ip6][icmp6] [..............fe80::7af8:82ff:fed3:fbc2] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + new: [...103] [ip4][..udp] [..172.16.42.216][14476] -> [....172.16.42.1][...53] + detected: [...103] [ip4][..udp] [..172.16.42.216][14476] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [...103] [ip4][..udp] [..172.16.42.216][14476] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [...104] [ip4][..tcp] [..172.16.42.216][40853] -> [..54.239.29.253][..443] + new: [...105] [ip4][..tcp] [..172.16.42.216][40854] -> [..54.239.29.253][..443] + new: [...106] [ip4][..tcp] [..172.16.42.216][40855] -> [..54.239.29.253][..443] + new: [...107] [ip4][..tcp] [..172.16.42.216][40856] -> [..54.239.29.253][..443] + detected: [...105] [ip4][..tcp] [..172.16.42.216][40854] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + detected: [...104] [ip4][..tcp] [..172.16.42.216][40853] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + detected: [...107] [ip4][..tcp] [..172.16.42.216][40856] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...105] [ip4][..tcp] [..172.16.42.216][40854] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [...104] [ip4][..tcp] [..172.16.42.216][40853] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [...107] [ip4][..tcp] [..172.16.42.216][40856] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + analyse: [...107] [ip4][..tcp] [..172.16.42.216][40856] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.326| 0.037| 0.075] + [IAT(c->s)...: 0.000| 0.326| 0.058| 0.097][IAT(s->c)...: 0.000| 0.247| 0.028| 0.059] + [PKTLEN(c->s): 54.000|1514.000| 258.300| 413.000][PKTLEN(s->c): 60.000|1514.000| 717.200| 451.500] + [BINS(c->s)..: 7,0,0,0,0,0,1,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 3,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,1,0,0,0,0,0,0,3,0,0] + analyse: [...105] [ip4][..tcp] [..172.16.42.216][40854] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.933| 0.089| 0.198] + [IAT(c->s)...: 0.000| 0.639| 0.087| 0.163][IAT(s->c)...: 0.000| 0.933| 0.092| 0.230] + [PKTLEN(c->s): 54.000|1514.000| 357.000| 544.000][PKTLEN(s->c): 60.000|1514.000| 585.500| 512.300] + [BINS(c->s)..: 11,0,0,0,0,0,2,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + [BINS(s->c)..: 4,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,1,1,0,0] + analyse: [....88] [ip4][..tcp] [..172.16.42.216][45711] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 9.247| 1.357| 2.197] + [IAT(c->s)...: 0.000| 6.020| 1.049| 1.691][IAT(s->c)...: 0.000| 9.247| 1.919| 2.813] + [PKTLEN(c->s): 54.000|1514.000| 551.800| 616.700][PKTLEN(s->c): 60.000| 955.000| 225.800| 322.700] + [BINS(c->s)..: 9,1,0,0,0,1,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,5,0,0] + [BINS(s->c)..: 7,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....99] [ip4][..tcp] [..172.16.42.216][44001] -> [..176.32.101.52][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 19.096| 0.770| 3.358] + [IAT(c->s)...: 0.000| 19.096| 1.344| 4.593][IAT(s->c)...: 0.000| 0.973| 0.158| 0.262] + [PKTLEN(c->s): 54.000|1514.000| 240.400| 333.700][PKTLEN(s->c): 60.000|1514.000| 328.100| 483.100] + [BINS(c->s)..: 7,0,1,1,0,0,5,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 8,1,0,0,1,0,1,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + detection-update: [....99] [ip4][..tcp] [..172.16.42.216][44001] -> [..176.32.101.52][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [...108] [ip4][..udp] [..172.16.42.216][20922] -> [....172.16.42.1][...53] + detected: [...108] [ip4][..udp] [..172.16.42.216][20922] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [...108] [ip4][..udp] [..172.16.42.216][20922] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [...109] [ip4][..tcp] [..172.16.42.216][45728] -> [..52.94.232.134][..443] + new: [...110] [ip4][..tcp] [..172.16.42.216][45729] -> [..52.94.232.134][..443] + new: [...111] [ip4][..tcp] [..172.16.42.216][45730] -> [..52.94.232.134][..443] + new: [...112] [ip4][..tcp] [..172.16.42.216][45731] -> [..52.94.232.134][..443] + new: [...113] [ip4][..tcp] [..172.16.42.216][45732] -> [..52.94.232.134][..443] + detected: [...110] [ip4][..tcp] [..172.16.42.216][45729] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [...109] [ip4][..tcp] [..172.16.42.216][45728] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [...111] [ip4][..tcp] [..172.16.42.216][45730] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [...112] [ip4][..tcp] [..172.16.42.216][45731] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detected: [...113] [ip4][..tcp] [..172.16.42.216][45732] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...110] [ip4][..tcp] [..172.16.42.216][45729] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [...111] [ip4][..tcp] [..172.16.42.216][45730] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [...109] [ip4][..tcp] [..172.16.42.216][45728] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [...112] [ip4][..tcp] [..172.16.42.216][45731] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [...113] [ip4][..tcp] [..172.16.42.216][45732] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [...114] [ip4][..udp] [..172.16.42.216][28614] -> [....172.16.42.1][...53] + detected: [...114] [ip4][..udp] [..172.16.42.216][28614] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + detection-update: [...114] [ip4][..udp] [..172.16.42.216][28614] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + new: [...115] [ip4][..tcp] [..172.16.42.216][37551] -> [..54.239.24.180][..443] + new: [...116] [ip4][..tcp] [..172.16.42.216][37552] -> [..54.239.24.180][..443] + detected: [...115] [ip4][..tcp] [..172.16.42.216][37551] -> [..54.239.24.180][..443] [TLS.AmazonAWS][Cloud][Acceptable] + update: [....69] [ip4][..udp] [..172.16.42.216][25081] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + update: [....64] [ip4][..udp] [..172.16.42.216][60804] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....62] [ip4][..udp] [..172.16.42.216][44475] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [...115] [ip4][..tcp] [..172.16.42.216][37551] -> [..54.239.24.180][..443] [TLS.AmazonAWS][Cloud][Acceptable] + update: [.....3] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + update: [.....9] [ip4][..udp] [..172.16.42.216][53188] -> [....172.16.42.1][...53] [DNS.GoogleServices][Web][Acceptable] + update: [.....4] [ip4][..udp] [....172.16.42.1][...67] -> [..172.16.42.216][...68] [DHCP][Network][Acceptable] + update: [....12] [ip4][..udp] [..172.16.42.216][10462] -> [....172.16.42.1][...53] [DNS.Google][Web][Acceptable] + update: [.....7] [ip4][..udp] [..172.16.42.216][55619] -> [....172.16.42.1][...53] [DNS][ConnCheck][Acceptable] + update: [.....6] [ip4][..udp] [..172.16.42.216][.3440] -> [....172.16.42.1][...53] [DNS][ConnCheck][Acceptable] + update: [....10] [ip4][..udp] [..172.16.42.216][52603] -> [....172.16.42.1][...53] [DNS.Google][Web][Acceptable] + new: [...117] [ip4][..tcp] [..172.16.42.216][40864] -> [..54.239.29.253][..443] + detected: [...117] [ip4][..tcp] [..172.16.42.216][40864] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...117] [ip4][..tcp] [..172.16.42.216][40864] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [...118] [ip4][..udp] [..172.16.42.216][.4920] -> [....172.16.42.1][...53] + detected: [...118] [ip4][..udp] [..172.16.42.216][.4920] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [...118] [ip4][..udp] [..172.16.42.216][.4920] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [...119] [ip4][..tcp] [..172.16.42.216][51985] -> [....52.84.63.56][...80] + new: [...120] [ip4][..tcp] [..172.16.42.216][51986] -> [....52.84.63.56][...80] + new: [...121] [ip4][..tcp] [..172.16.42.216][51987] -> [....52.84.63.56][...80] + new: [...122] [ip4][..tcp] [..172.16.42.216][51988] -> [....52.84.63.56][...80] + new: [...123] [ip4][..tcp] [..172.16.42.216][51989] -> [....52.84.63.56][...80] + new: [...124] [ip4][..tcp] [..172.16.42.216][51990] -> [....52.84.63.56][...80] + detected: [...123] [ip4][..tcp] [..172.16.42.216][51989] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + detected: [...122] [ip4][..tcp] [..172.16.42.216][51988] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + detected: [...119] [ip4][..tcp] [..172.16.42.216][51985] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + detected: [...120] [ip4][..tcp] [..172.16.42.216][51986] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + detected: [...121] [ip4][..tcp] [..172.16.42.216][51987] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + detected: [...124] [ip4][..tcp] [..172.16.42.216][51990] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + analyse: [...120] [ip4][..tcp] [..172.16.42.216][51986] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.295| 0.052| 0.098] + [IAT(c->s)...: 0.000| 0.287| 0.050| 0.094][IAT(s->c)...: 0.000| 0.295| 0.053| 0.101] + [PKTLEN(c->s): 66.000| 613.000| 163.700| 208.000][PKTLEN(s->c): 66.000|1514.000|1117.900| 574.100] + [BINS(c->s)..: 14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0] + new: [...125] [ip4][..tcp] [..172.16.42.216][40871] -> [..54.239.29.253][..443] + detected: [...125] [ip4][..tcp] [..172.16.42.216][40871] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...125] [ip4][..tcp] [..172.16.42.216][40871] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + analyse: [...125] [ip4][..tcp] [..172.16.42.216][40871] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.107| 0.141| 0.257] + [IAT(c->s)...: 0.000| 0.707| 0.146| 0.216][IAT(s->c)...: 0.000| 1.107| 0.137| 0.286] + [PKTLEN(c->s): 54.000|1514.000| 499.700| 619.000][PKTLEN(s->c): 60.000|1514.000| 394.900| 487.200] + [BINS(c->s)..: 7,1,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0] + [BINS(s->c)..: 6,2,2,1,0,0,0,0,0,0,0,0,1,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + new: [...126] [ip4][..tcp] [..172.16.42.216][51992] -> [....52.84.63.56][...80] + new: [...127] [ip4][..tcp] [..172.16.42.216][51993] -> [....52.84.63.56][...80] + new: [...128] [ip4][..tcp] [..172.16.42.216][51994] -> [....52.84.63.56][...80] + new: [...129] [ip4][..tcp] [..172.16.42.216][51995] -> [....52.84.63.56][...80] + new: [...130] [ip4][..tcp] [..172.16.42.216][51996] -> [....52.84.63.56][...80] + new: [...131] [ip4][..tcp] [..172.16.42.216][51997] -> [....52.84.63.56][...80] + detected: [...126] [ip4][..tcp] [..172.16.42.216][51992] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + detected: [...128] [ip4][..tcp] [..172.16.42.216][51994] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + detected: [...129] [ip4][..tcp] [..172.16.42.216][51995] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + detected: [...127] [ip4][..tcp] [..172.16.42.216][51993] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + detected: [...130] [ip4][..tcp] [..172.16.42.216][51996] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + detected: [...131] [ip4][..tcp] [..172.16.42.216][51997] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + analyse: [...129] [ip4][..tcp] [..172.16.42.216][51995] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.179| 0.023| 0.044] + [IAT(c->s)...: 0.000| 0.179| 0.026| 0.053][IAT(s->c)...: 0.000| 0.113| 0.021| 0.035] + [PKTLEN(c->s): 66.000| 613.000| 140.300| 185.500][PKTLEN(s->c): 66.000|1514.000|1301.900| 459.300] + [BINS(c->s)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,1,0,0,0,0,12,0,0] + update: [....27] [ip4][..udp] [..172.16.42.216][54886] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....14] [ip4][.icmp] [....172.16.42.1] -> [..172.16.42.216] [ICMP][Network][Acceptable] + update: [....21] [ip4][..udp] [..172.16.42.216][41030] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + update: [....40] [ip4][..udp] [..172.16.42.216][43350] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffd3:fbc2] [ICMPV6][Network][Acceptable] + update: [.....2] [ip6][icmp6] [.....................................::] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + update: [....98] [ip4][..udp] [..172.16.42.216][41639] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [.....5] [ip6][icmp6] [..............fe80::7af8:82ff:fed3:fbc2] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + update: [....23] [ip6][icmp6] [..............fe80::7af8:82ff:fed3:fbc2] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + update: [....35] [ip4][..udp] [..172.16.42.216][52077] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....95] [ip4][..udp] [..172.16.42.216][35726] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + update: [....34] [ip4][..udp] [..172.16.42.216][21391] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + update: [....24] [ip4][..udp] [..172.16.42.216][23559] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + update: [....15] [ip4][..udp] [..172.16.42.216][48155] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....19] [ip4][..udp] [..172.16.42.216][.7358] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....17] [ip4][..udp] [..172.16.42.216][19967] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + analyse: [...126] [ip4][..tcp] [..172.16.42.216][51992] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.511| 0.042| 0.110] + [IAT(c->s)...: 0.000| 0.369| 0.039| 0.093][IAT(s->c)...: 0.000| 0.511| 0.045| 0.124] + [PKTLEN(c->s): 66.000| 613.000| 169.800| 212.900][PKTLEN(s->c): 66.000|1514.000|1217.400| 555.800] + [BINS(c->s)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,11,0,0] + new: [...132] [ip4][..tcp] [..172.16.42.216][40878] -> [..54.239.29.253][..443] + detected: [...132] [ip4][..tcp] [..172.16.42.216][40878] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...132] [ip4][..tcp] [..172.16.42.216][40878] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [...133] [ip4][..tcp] [..172.16.42.216][45750] -> [..52.94.232.134][..443] + detected: [...133] [ip4][..tcp] [..172.16.42.216][45750] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...133] [ip4][..tcp] [..172.16.42.216][45750] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + idle: [.....2] [ip6][icmp6] [.....................................::] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + idle: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffd3:fbc2] [ICMPV6][Network][Acceptable] + analyse: [....16] [ip4][..tcp] [..172.16.42.216][55242] -> [..52.85.209.197][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 120.003| 3.968| 21.185] + [IAT(c->s)...: 0.002| 0.290| 0.108| 0.116][IAT(s->c)...: 0.000| 120.003| 7.148| 28.214] + [PKTLEN(c->s): 66.000|1514.000| 431.500| 564.700][PKTLEN(s->c): 66.000|1514.000| 467.300| 574.100] + [BINS(c->s)..: 9,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,1,0,0] + [BINS(s->c)..: 7,3,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,3,0,0] + detection-update: [....16] [ip4][..tcp] [..172.16.42.216][55242] -> [..52.85.209.197][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [...134] [ip4][..tcp] [..172.16.42.216][45751] -> [..52.94.232.134][..443] + detected: [...134] [ip4][..tcp] [..172.16.42.216][45751] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...134] [ip4][..tcp] [..172.16.42.216][45751] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....22] [ip4][..tcp] [..172.16.42.216][49572] -> [..52.94.232.134][...80] [HTTP.AmazonAlexa][VirtAssistant][Acceptable] + idle: [....14] [ip4][.icmp] [....172.16.42.1] -> [..172.16.42.216] [ICMP][Network][Acceptable] + idle: [....23] [ip6][icmp6] [..............fe80::7af8:82ff:fed3:fbc2] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + idle: [.....5] [ip6][icmp6] [..............fe80::7af8:82ff:fed3:fbc2] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + end: [....25] [ip4][..tcp] [..172.16.42.216][38363] -> [..34.199.52.240][..443] + update: [...103] [ip4][..udp] [..172.16.42.216][14476] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [...108] [ip4][..udp] [..172.16.42.216][20922] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [...135] [ip4][..udp] [..172.16.42.216][64073] -> [....172.16.42.1][...53] + detected: [...135] [ip4][..udp] [..172.16.42.216][64073] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + detection-update: [...135] [ip4][..udp] [..172.16.42.216][64073] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + new: [...136] [ip4][..tcp] [..172.16.42.216][39750] -> [..52.94.232.134][..443] + detected: [...136] [ip4][..tcp] [..172.16.42.216][39750] -> [..52.94.232.134][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [...136] [ip4][..tcp] [..172.16.42.216][39750] -> [..52.94.232.134][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [...137] [ip4][..tcp] [..172.16.42.216][45752] -> [..52.94.232.134][..443] + detected: [...137] [ip4][..tcp] [..172.16.42.216][45752] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...137] [ip4][..tcp] [..172.16.42.216][45752] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....45] [ip4][..tcp] [..172.16.42.216][49589] -> [..52.94.232.134][...80] [HTTP.AmazonAlexa][VirtAssistant][Acceptable] + end: [....28] [ip4][..tcp] [..172.16.42.216][45661] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....29] [ip4][..tcp] [..172.16.42.216][45662] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....30] [ip4][..tcp] [..172.16.42.216][45663] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....43] [ip4][..tcp] [..172.16.42.216][45673] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....44] [ip4][..tcp] [..172.16.42.216][45674] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....46] [ip4][..tcp] [..172.16.42.216][45676] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....47] [ip4][..tcp] [..172.16.42.216][45677] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....48] [ip4][..tcp] [..172.16.42.216][45678] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....49] [ip4][..tcp] [..172.16.42.216][45679] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....50] [ip4][..tcp] [..172.16.42.216][45680] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....53] [ip4][..tcp] [..172.16.42.216][45683] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....37] [ip4][..tcp] [..172.16.42.216][54411] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + end: [....38] [ip4][..tcp] [..172.16.42.216][54412] -> [..52.85.209.216][..443] + guessed: [....39] [ip4][..tcp] [..172.16.42.216][54413] -> [..52.85.209.216][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [....39] [ip4][..tcp] [..172.16.42.216][54413] -> [..52.85.209.216][..443] + end: [....54] [ip4][..tcp] [..172.16.42.216][54427] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + end: [....41] [ip4][..tcp] [..172.16.42.216][42129] -> [..72.21.206.135][..443] + end: [....42] [ip4][..tcp] [..172.16.42.216][42130] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + end: [....55] [ip4][..tcp] [..172.16.42.216][42143] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + end: [....56] [ip4][..tcp] [..172.16.42.216][42144] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + end: [....36] [ip4][..tcp] [..172.16.42.216][34019] -> [..54.239.24.186][..443] + end: [....51] [ip4][..tcp] [..172.16.42.216][34033] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [....52] [ip4][..tcp] [..172.16.42.216][34034] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + guessed: [....32] [ip4][..tcp] [..172.16.42.216][38391] -> [...192.168.11.1][.8080] [HTTP_Proxy][Web][Acceptable] + end: [....32] [ip4][..tcp] [..172.16.42.216][38391] -> [...192.168.11.1][.8080] + end: [....26] [ip4][..tcp] [..172.16.42.216][38364] -> [..34.199.52.240][..443] [TLS.AmazonAWS][Cloud][Acceptable] + update: [.....3] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + update: [.....9] [ip4][..udp] [..172.16.42.216][53188] -> [....172.16.42.1][...53] [DNS.GoogleServices][Web][Acceptable] + update: [...114] [ip4][..udp] [..172.16.42.216][28614] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + update: [.....4] [ip4][..udp] [....172.16.42.1][...67] -> [..172.16.42.216][...68] [DHCP][Network][Acceptable] + update: [....12] [ip4][..udp] [..172.16.42.216][10462] -> [....172.16.42.1][...53] [DNS.Google][Web][Acceptable] + update: [.....7] [ip4][..udp] [..172.16.42.216][55619] -> [....172.16.42.1][...53] [DNS][ConnCheck][Acceptable] + update: [....69] [ip4][..udp] [..172.16.42.216][25081] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + update: [.....6] [ip4][..udp] [..172.16.42.216][.3440] -> [....172.16.42.1][...53] [DNS][ConnCheck][Acceptable] + update: [....10] [ip4][..udp] [..172.16.42.216][52603] -> [....172.16.42.1][...53] [DNS.Google][Web][Acceptable] + update: [....64] [ip4][..udp] [..172.16.42.216][60804] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....62] [ip4][..udp] [..172.16.42.216][44475] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [...138] [ip4][..udp] [..172.16.42.216][.4312] -> [....172.16.42.1][...53] + detected: [...138] [ip4][..udp] [..172.16.42.216][.4312] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [...138] [ip4][..udp] [..172.16.42.216][.4312] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [...139] [ip4][..tcp] [..172.16.42.216][50796] -> [..54.239.28.178][..443] + new: [...140] [ip4][..tcp] [..172.16.42.216][50797] -> [..54.239.28.178][..443] + new: [...141] [ip4][..tcp] [..172.16.42.216][50798] -> [..54.239.28.178][..443] + detected: [...139] [ip4][..tcp] [..172.16.42.216][50796] -> [..54.239.28.178][..443] [TLS.Amazon][Web][Acceptable] + detected: [...140] [ip4][..tcp] [..172.16.42.216][50797] -> [..54.239.28.178][..443] [TLS.Amazon][Web][Acceptable] + new: [...142] [ip4][..tcp] [..172.16.42.216][50799] -> [..54.239.28.178][..443] + detection-update: [...139] [ip4][..tcp] [..172.16.42.216][50796] -> [..54.239.28.178][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detection-update: [...140] [ip4][..tcp] [..172.16.42.216][50797] -> [..54.239.28.178][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detected: [...142] [ip4][..tcp] [..172.16.42.216][50799] -> [..54.239.28.178][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...142] [ip4][..tcp] [..172.16.42.216][50799] -> [..54.239.28.178][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....57] [ip4][..tcp] [..172.16.42.216][45687] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....59] [ip4][..tcp] [..172.16.42.216][45688] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....60] [ip4][..tcp] [..172.16.42.216][34041] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + update: [...118] [ip4][..udp] [..172.16.42.216][.4920] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [...143] [ip4][..tcp] [..172.16.42.216][50800] -> [..54.239.28.178][..443] + detected: [...143] [ip4][..tcp] [..172.16.42.216][50800] -> [..54.239.28.178][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...143] [ip4][..tcp] [..172.16.42.216][50800] -> [..54.239.28.178][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + new: [...144] [ip4][..udp] [..172.16.42.216][.8669] -> [....172.16.42.1][...53] + detected: [...144] [ip4][..udp] [..172.16.42.216][.8669] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + detection-update: [...144] [ip4][..udp] [..172.16.42.216][.8669] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + new: [...145] [ip4][..tcp] [..172.16.42.216][44912] -> [...54.239.23.94][..443] + detected: [...145] [ip4][..tcp] [..172.16.42.216][44912] -> [...54.239.23.94][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [...145] [ip4][..tcp] [..172.16.42.216][44912] -> [...54.239.23.94][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [...145] [ip4][..tcp] [..172.16.42.216][44912] -> [...54.239.23.94][..443] [TLS.AmazonAWS][Cloud][Acceptable] + new: [...146] [ip4][..udp] [..172.16.42.216][59908] -> [....172.16.42.1][...53] + detected: [...146] [ip4][..udp] [..172.16.42.216][59908] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + detection-update: [...146] [ip4][..udp] [..172.16.42.216][59908] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + new: [...147] [ip4][..tcp] [..172.16.42.216][38757] -> [..54.239.28.178][..443] + analyse: [...142] [ip4][..tcp] [..172.16.42.216][50799] -> [..54.239.28.178][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 8.001| 0.664| 1.905] + [IAT(c->s)...: 0.000| 7.767| 0.606| 1.800][IAT(s->c)...: 0.000| 8.001| 0.735| 2.024] + [PKTLEN(c->s): 54.000|1514.000| 512.300| 628.500][PKTLEN(s->c): 60.000|1514.000| 344.100| 507.600] + [BINS(c->s)..: 9,0,0,0,1,0,1,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0] + [BINS(s->c)..: 8,2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + detection-update: [...142] [ip4][..tcp] [..172.16.42.216][50799] -> [..54.239.28.178][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + detected: [...147] [ip4][..tcp] [..172.16.42.216][38757] -> [..54.239.28.178][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [...147] [ip4][..tcp] [..172.16.42.216][38757] -> [..54.239.28.178][..443] [TLS.Amazon][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [...148] [ip4][..udp] [..172.16.42.216][14934] -> [....172.16.42.1][...53] + detected: [...148] [ip4][..udp] [..172.16.42.216][14934] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [...148] [ip4][..udp] [..172.16.42.216][14934] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [...149] [ip4][..tcp] [..172.16.42.216][41828] -> [..52.85.209.143][..443] + new: [...150] [ip4][..udp] [..172.16.42.216][40425] -> [....172.16.42.1][...53] + detected: [...150] [ip4][..udp] [..172.16.42.216][40425] -> [....172.16.42.1][...53] [DNS.PlayStore][SoftwareUpdate][Safe] + detected: [...149] [ip4][..tcp] [..172.16.42.216][41828] -> [..52.85.209.143][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...149] [ip4][..tcp] [..172.16.42.216][41828] -> [..52.85.209.143][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...149] [ip4][..tcp] [..172.16.42.216][41828] -> [..52.85.209.143][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...150] [ip4][..udp] [..172.16.42.216][40425] -> [....172.16.42.1][...53] [DNS.PlayStore][SoftwareUpdate][Safe] + new: [...151] [ip4][..tcp] [..172.16.42.216][49067] -> [..216.58.194.78][..443] + detected: [...151] [ip4][..tcp] [..172.16.42.216][49067] -> [..216.58.194.78][..443] [TLS.PlayStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [...151] [ip4][..tcp] [..172.16.42.216][49067] -> [..216.58.194.78][..443] [TLS.PlayStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [...151] [ip4][..tcp] [..172.16.42.216][49067] -> [..216.58.194.78][..443] [TLS.PlayStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [...149] [ip4][..tcp] [..172.16.42.216][41828] -> [..52.85.209.143][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.106| 0.022| 0.031] + [IAT(c->s)...: 0.000| 0.102| 0.025| 0.032][IAT(s->c)...: 0.000| 0.106| 0.020| 0.030] + [PKTLEN(c->s): 66.000|1514.000| 337.500| 494.700][PKTLEN(s->c): 66.000|1514.000| 718.200| 628.200] + [BINS(c->s)..: 9,0,0,2,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 5,0,1,1,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0] + detection-update: [...149] [ip4][..tcp] [..172.16.42.216][41828] -> [..52.85.209.143][..443] [TLS.Amazon][Web][Acceptable] + new: [...152] [ip4][..udp] [..172.16.42.216][.4612] -> [....172.16.42.1][...53] + detected: [...152] [ip4][..udp] [..172.16.42.216][.4612] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + detection-update: [...152] [ip4][..udp] [..172.16.42.216][.4612] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [...153] [ip4][..tcp] [..172.16.42.216][41912] -> [...52.84.62.115][..443] + new: [...154] [ip4][..tcp] [..172.16.42.216][41913] -> [...52.84.62.115][..443] + new: [...155] [ip4][..tcp] [..172.16.42.216][41914] -> [...52.84.62.115][..443] + detected: [...154] [ip4][..tcp] [..172.16.42.216][41913] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + detected: [...153] [ip4][..tcp] [..172.16.42.216][41912] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + detected: [...155] [ip4][..tcp] [..172.16.42.216][41914] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + new: [...156] [ip4][..tcp] [..172.16.42.216][58048] -> [..54.239.28.178][..443] + detection-update: [...154] [ip4][..tcp] [..172.16.42.216][41913] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...154] [ip4][..tcp] [..172.16.42.216][41913] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...155] [ip4][..tcp] [..172.16.42.216][41914] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...155] [ip4][..tcp] [..172.16.42.216][41914] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...153] [ip4][..tcp] [..172.16.42.216][41912] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...153] [ip4][..tcp] [..172.16.42.216][41912] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + detected: [...156] [ip4][..tcp] [..172.16.42.216][58048] -> [..54.239.28.178][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [...156] [ip4][..tcp] [..172.16.42.216][58048] -> [..54.239.28.178][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + end: [....66] [ip4][..tcp] [..172.16.42.216][49606] -> [..52.94.232.134][...80] [HTTP.AmazonAlexa][VirtAssistant][Acceptable] + end: [....67] [ip4][..tcp] [..172.16.42.216][45693] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....68] [ip4][..tcp] [..172.16.42.216][45694] -> [..52.94.232.134][..443] + end: [....70] [ip4][..tcp] [..172.16.42.216][45695] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....71] [ip4][..tcp] [..172.16.42.216][45696] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....72] [ip4][..tcp] [..172.16.42.216][45697] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....74] [ip4][..tcp] [..172.16.42.216][45698] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....63] [ip4][..tcp] [..172.16.42.216][54434] -> [..52.85.209.216][..443] [TLS.Amazon][Web][Acceptable] + end: [....61] [ip4][..tcp] [..172.16.42.216][42148] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable] + update: [....27] [ip4][..udp] [..172.16.42.216][54886] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....21] [ip4][..udp] [..172.16.42.216][41030] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + update: [....40] [ip4][..udp] [..172.16.42.216][43350] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....98] [ip4][..udp] [..172.16.42.216][41639] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....35] [ip4][..udp] [..172.16.42.216][52077] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....95] [ip4][..udp] [..172.16.42.216][35726] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + update: [....34] [ip4][..udp] [..172.16.42.216][21391] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + update: [....24] [ip4][..udp] [..172.16.42.216][23559] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + update: [....15] [ip4][..udp] [..172.16.42.216][48155] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....19] [ip4][..udp] [..172.16.42.216][.7358] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + update: [....17] [ip4][..udp] [..172.16.42.216][19967] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [...157] [ip4][..tcp] [..172.16.42.216][38483] -> [..52.85.209.143][..443] + detected: [...157] [ip4][..tcp] [..172.16.42.216][38483] -> [..52.85.209.143][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [...157] [ip4][..tcp] [..172.16.42.216][38483] -> [..52.85.209.143][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [...157] [ip4][..tcp] [..172.16.42.216][38483] -> [..52.85.209.143][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + analyse: [...154] [ip4][..tcp] [..172.16.42.216][41913] -> [...52.84.62.115][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.262| 0.033| 0.059] + [IAT(c->s)...: 0.000| 0.217| 0.033| 0.053][IAT(s->c)...: 0.000| 0.262| 0.033| 0.064] + [PKTLEN(c->s): 66.000|1343.000| 402.200| 532.800][PKTLEN(s->c): 66.000|1514.000| 859.900| 626.500] + [BINS(c->s)..: 10,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,3,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0] + detection-update: [...154] [ip4][..tcp] [..172.16.42.216][41913] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + analyse: [...157] [ip4][..tcp] [..172.16.42.216][38483] -> [..52.85.209.143][..443] [TLS.Amazon][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.241| 0.031| 0.057] + [IAT(c->s)...: 0.000| 0.227| 0.047| 0.066][IAT(s->c)...: 0.000| 0.241| 0.025| 0.052] + [PKTLEN(c->s): 66.000| 732.000| 233.200| 257.200][PKTLEN(s->c): 66.000|1514.000| 816.800| 591.700] + [BINS(c->s)..: 6,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,2,0,1,0,0,1,0,0,0,0,1,1,0,0,1,0,1,0,0,0,0,0,1,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0] + new: [...158] [ip4][..udp] [..172.16.42.216][.2707] -> [....172.16.42.1][...53] + detected: [...158] [ip4][..udp] [..172.16.42.216][.2707] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + analyse: [...155] [ip4][..tcp] [..172.16.42.216][41914] -> [...52.84.62.115][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.264| 0.057| 0.086] + [IAT(c->s)...: 0.000| 0.222| 0.053| 0.076][IAT(s->c)...: 0.000| 0.264| 0.063| 0.096] + [PKTLEN(c->s): 66.000|1351.000| 371.700| 524.400][PKTLEN(s->c): 66.000|1514.000| 770.600| 605.600] + [BINS(c->s)..: 12,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,2,0,0,0,0,0,0,2,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0] + detection-update: [...155] [ip4][..tcp] [..172.16.42.216][41914] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...158] [ip4][..udp] [..172.16.42.216][.2707] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + new: [...159] [ip4][..tcp] [..172.16.42.216][47605] -> [..72.21.206.121][..443] + detected: [...159] [ip4][..tcp] [..172.16.42.216][47605] -> [..72.21.206.121][..443] [TLS.Amazon][Web][Acceptable] + new: [...160] [ip4][..tcp] [..172.16.42.216][47606] -> [..72.21.206.121][..443] + analyse: [...145] [ip4][..tcp] [..172.16.42.216][44912] -> [...54.239.23.94][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 7.471| 0.614| 1.478] + [IAT(c->s)...: 0.000| 3.665| 0.505| 0.954][IAT(s->c)...: 0.000| 7.471| 0.747| 1.923] + [PKTLEN(c->s): 54.000|1514.000| 634.900| 654.900][PKTLEN(s->c): 60.000|1514.000| 418.400| 592.600] + [BINS(c->s)..: 8,0,0,1,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,1,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + detection-update: [...145] [ip4][..tcp] [..172.16.42.216][44912] -> [...54.239.23.94][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detected: [...160] [ip4][..tcp] [..172.16.42.216][47606] -> [..72.21.206.121][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...159] [ip4][..tcp] [..172.16.42.216][47605] -> [..72.21.206.121][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...159] [ip4][..tcp] [..172.16.42.216][47605] -> [..72.21.206.121][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...160] [ip4][..tcp] [..172.16.42.216][47606] -> [..72.21.206.121][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [...160] [ip4][..tcp] [..172.16.42.216][47606] -> [..72.21.206.121][..443] [TLS.Amazon][Web][Acceptable] + idle: [....27] [ip4][..udp] [..172.16.42.216][54886] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + idle: [...139] [ip4][..tcp] [..172.16.42.216][50796] -> [..54.239.28.178][..443] + idle: [...140] [ip4][..tcp] [..172.16.42.216][50797] -> [..54.239.28.178][..443] + guessed: [...141] [ip4][..tcp] [..172.16.42.216][50798] -> [..54.239.28.178][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [...141] [ip4][..tcp] [..172.16.42.216][50798] -> [..54.239.28.178][..443] + end: [...142] [ip4][..tcp] [..172.16.42.216][50799] -> [..54.239.28.178][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + idle: [...143] [ip4][..tcp] [..172.16.42.216][50800] -> [..54.239.28.178][..443] + end: [...119] [ip4][..tcp] [..172.16.42.216][51985] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + end: [...120] [ip4][..tcp] [..172.16.42.216][51986] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + end: [...121] [ip4][..tcp] [..172.16.42.216][51987] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + end: [...122] [ip4][..tcp] [..172.16.42.216][51988] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + end: [...123] [ip4][..tcp] [..172.16.42.216][51989] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + end: [...124] [ip4][..tcp] [..172.16.42.216][51990] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + end: [...126] [ip4][..tcp] [..172.16.42.216][51992] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + end: [...127] [ip4][..tcp] [..172.16.42.216][51993] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + end: [...128] [ip4][..tcp] [..172.16.42.216][51994] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + end: [...129] [ip4][..tcp] [..172.16.42.216][51995] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + end: [...130] [ip4][..tcp] [..172.16.42.216][51996] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + end: [...131] [ip4][..tcp] [..172.16.42.216][51997] -> [....52.84.63.56][...80] [HTTP.Amazon][Web][Acceptable] + idle: [.....3] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [....58] [ip4][....2] [........0.0.0.0] -> [......224.0.0.1] [IGMP][Network][Acceptable] + end: [....76] [ip4][..tcp] [..172.16.42.216][49613] -> [..52.94.232.134][...80] [HTTP.AmazonAlexa][VirtAssistant][Acceptable] + idle: [...147] [ip4][..tcp] [..172.16.42.216][38757] -> [..54.239.28.178][..443] + guessed: [....90] [ip4][..tcp] [..172.16.42.216][49627] -> [..52.94.232.134][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + end: [....90] [ip4][..tcp] [..172.16.42.216][49627] -> [..52.94.232.134][...80] + end: [...145] [ip4][..tcp] [..172.16.42.216][44912] -> [...54.239.23.94][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [....93] [ip4][..tcp] [..172.16.42.216][49630] -> [..52.94.232.134][...80] [HTTP.AmazonAlexa][VirtAssistant][Acceptable] + end: [...104] [ip4][..tcp] [..172.16.42.216][40853] -> [..54.239.29.253][..443] + end: [...105] [ip4][..tcp] [..172.16.42.216][40854] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + guessed: [...106] [ip4][..tcp] [..172.16.42.216][40855] -> [..54.239.29.253][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [...106] [ip4][..tcp] [..172.16.42.216][40855] -> [..54.239.29.253][..443] + end: [...107] [ip4][..tcp] [..172.16.42.216][40856] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [...117] [ip4][..tcp] [..172.16.42.216][40864] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [...125] [ip4][..tcp] [..172.16.42.216][40871] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [...132] [ip4][..tcp] [..172.16.42.216][40878] -> [..54.239.29.253][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + idle: [.....9] [ip4][..udp] [..172.16.42.216][53188] -> [....172.16.42.1][...53] [DNS.GoogleServices][Web][Acceptable] + idle: [...114] [ip4][..udp] [..172.16.42.216][28614] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + end: [....75] [ip4][..tcp] [..172.16.42.216][37113] -> [..52.94.232.134][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + idle: [...159] [ip4][..tcp] [..172.16.42.216][47605] -> [..72.21.206.121][..443] + idle: [...160] [ip4][..tcp] [..172.16.42.216][47606] -> [..72.21.206.121][..443] + end: [....73] [ip4][..tcp] [..172.16.42.216][59698] -> [..52.94.232.134][..443] + idle: [....21] [ip4][..udp] [..172.16.42.216][41030] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + idle: [.....4] [ip4][..udp] [....172.16.42.1][...67] -> [..172.16.42.216][...68] [DHCP][Network][Acceptable] + idle: [...103] [ip4][..udp] [..172.16.42.216][14476] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + idle: [...153] [ip4][..tcp] [..172.16.42.216][41912] -> [...52.84.62.115][..443] + idle: [...154] [ip4][..tcp] [..172.16.42.216][41913] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + idle: [...155] [ip4][..tcp] [..172.16.42.216][41914] -> [...52.84.62.115][..443] [TLS.Amazon][Web][Acceptable] + idle: [...138] [ip4][..udp] [..172.16.42.216][.4312] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + idle: [....12] [ip4][..udp] [..172.16.42.216][10462] -> [....172.16.42.1][...53] [DNS.Google][Web][Acceptable] + idle: [.....7] [ip4][..udp] [..172.16.42.216][55619] -> [....172.16.42.1][...53] [DNS][ConnCheck][Acceptable] + idle: [....40] [ip4][..udp] [..172.16.42.216][43350] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + idle: [...149] [ip4][..tcp] [..172.16.42.216][41828] -> [..52.85.209.143][..443] [TLS.Amazon][Web][Acceptable] + end: [....80] [ip4][..tcp] [..172.16.42.216][45703] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....81] [ip4][..tcp] [..172.16.42.216][45704] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....82] [ip4][..tcp] [..172.16.42.216][45705] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + guessed: [....84] [ip4][..tcp] [..172.16.42.216][45707] -> [..52.94.232.134][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [....84] [ip4][..tcp] [..172.16.42.216][45707] -> [..52.94.232.134][..443] + end: [....86] [ip4][..tcp] [..172.16.42.216][45709] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....87] [ip4][..tcp] [..172.16.42.216][45710] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....88] [ip4][..tcp] [..172.16.42.216][45711] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....89] [ip4][..tcp] [..172.16.42.216][45712] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....91] [ip4][..tcp] [..172.16.42.216][45714] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [....92] [ip4][..tcp] [..172.16.42.216][45715] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [...109] [ip4][..tcp] [..172.16.42.216][45728] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [...110] [ip4][..tcp] [..172.16.42.216][45729] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [...111] [ip4][..tcp] [..172.16.42.216][45730] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [...112] [ip4][..tcp] [..172.16.42.216][45731] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [...113] [ip4][..tcp] [..172.16.42.216][45732] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + idle: [....20] [ip4][..tcp] [..172.16.42.216][53682] -> [..54.239.22.185][..443] + end: [...133] [ip4][..tcp] [..172.16.42.216][45750] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + end: [...134] [ip4][..tcp] [..172.16.42.216][45751] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + idle: [...108] [ip4][..udp] [..172.16.42.216][20922] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + end: [...137] [ip4][..tcp] [..172.16.42.216][45752] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] + RISK: Weak TLS Cipher + idle: [...144] [ip4][..udp] [..172.16.42.216][.8669] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + idle: [....69] [ip4][..udp] [..172.16.42.216][25081] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + idle: [...152] [ip4][..udp] [..172.16.42.216][.4612] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + idle: [...146] [ip4][..udp] [..172.16.42.216][59908] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + end: [....18] [ip4][..tcp] [..172.16.42.216][33556] -> [....52.94.232.0][..443] + end: [...136] [ip4][..tcp] [..172.16.42.216][39750] -> [..52.94.232.134][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + idle: [...135] [ip4][..udp] [..172.16.42.216][64073] -> [....172.16.42.1][...53] [DNS.AmazonAlexa][VirtAssistant][Acceptable] + idle: [...148] [ip4][..udp] [..172.16.42.216][14934] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + idle: [...158] [ip4][..udp] [..172.16.42.216][.2707] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + idle: [....98] [ip4][..udp] [..172.16.42.216][41639] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + end: [...115] [ip4][..tcp] [..172.16.42.216][37551] -> [..54.239.24.180][..443] [TLS.AmazonAWS][Cloud][Acceptable] + guessed: [...116] [ip4][..tcp] [..172.16.42.216][37552] -> [..54.239.24.180][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [...116] [ip4][..tcp] [..172.16.42.216][37552] -> [..54.239.24.180][..443] + end: [...156] [ip4][..tcp] [..172.16.42.216][58048] -> [..54.239.28.178][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + end: [....65] [ip4][..tcp] [..172.16.42.216][41691] -> [..54.239.29.146][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + idle: [...118] [ip4][..udp] [..172.16.42.216][.4920] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + idle: [...151] [ip4][..tcp] [..172.16.42.216][49067] -> [..216.58.194.78][..443] + end: [....96] [ip4][..tcp] [..172.16.42.216][41820] -> [...54.231.72.88][..443] + guessed: [....97] [ip4][..tcp] [..172.16.42.216][41821] -> [...54.231.72.88][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [....97] [ip4][..tcp] [..172.16.42.216][41821] -> [...54.231.72.88][..443] + end: [...102] [ip4][..tcp] [..172.16.42.216][41825] -> [...54.231.72.88][..443] + idle: [....35] [ip4][..udp] [..172.16.42.216][52077] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + idle: [....95] [ip4][..udp] [..172.16.42.216][35726] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + idle: [....34] [ip4][..udp] [..172.16.42.216][21391] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + idle: [....13] [ip4][..tcp] [..172.16.42.216][35540] -> [..172.217.9.142][...80] [HTTP.Google][ConnCheck][Acceptable] + idle: [....24] [ip4][..udp] [..172.16.42.216][23559] -> [....172.16.42.1][...53] [DNS.AmazonAWS][Cloud][Acceptable] + idle: [....15] [ip4][..udp] [..172.16.42.216][48155] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + idle: [...157] [ip4][..tcp] [..172.16.42.216][38483] -> [..52.85.209.143][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + idle: [.....8] [ip4][..tcp] [..172.16.42.216][60246] -> [..172.217.9.142][...80] [HTTP.Google][ConnCheck][Acceptable] + guessed: [....31] [ip4][..tcp] [..172.16.42.216][40200] -> [.10.201.126.241][.8080] [HTTP_Proxy][Web][Acceptable] + end: [....31] [ip4][..tcp] [..172.16.42.216][40200] -> [.10.201.126.241][.8080] + guessed: [....33] [ip4][..tcp] [..172.16.42.216][40202] -> [.10.201.126.241][.8080] [HTTP_Proxy][Web][Acceptable] + end: [....33] [ip4][..tcp] [..172.16.42.216][40202] -> [.10.201.126.241][.8080] + idle: [....19] [ip4][..udp] [..172.16.42.216][.7358] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + guessed: [....83] [ip4][..tcp] [..172.16.42.216][40242] -> [.10.201.126.241][.8080] [HTTP_Proxy][Web][Acceptable] + idle: [....83] [ip4][..tcp] [..172.16.42.216][40242] -> [.10.201.126.241][.8080] + end: [....78] [ip4][..tcp] [..172.16.42.216][34053] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + guessed: [....79] [ip4][..tcp] [..172.16.42.216][34054] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [....79] [ip4][..tcp] [..172.16.42.216][34054] -> [..54.239.24.186][..443] + end: [....94] [ip4][..tcp] [..172.16.42.216][34069] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + guessed: [...100] [ip4][..tcp] [..172.16.42.216][34073] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [...100] [ip4][..tcp] [..172.16.42.216][34073] -> [..54.239.24.186][..443] + end: [...101] [ip4][..tcp] [..172.16.42.216][34074] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [....99] [ip4][..tcp] [..172.16.42.216][44001] -> [..176.32.101.52][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....6] [ip4][..udp] [..172.16.42.216][.3440] -> [....172.16.42.1][...53] [DNS][ConnCheck][Acceptable] + idle: [....10] [ip4][..udp] [..172.16.42.216][52603] -> [....172.16.42.1][...53] [DNS.Google][Web][Acceptable] + idle: [....64] [ip4][..udp] [..172.16.42.216][60804] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + guessed: [....85] [ip4][..tcp] [..172.16.42.216][38434] -> [...192.168.11.1][.8080] [HTTP_Proxy][Web][Acceptable] + end: [....85] [ip4][..tcp] [..172.16.42.216][38434] -> [...192.168.11.1][.8080] + idle: [....11] [ip4][..tcp] [..172.16.42.216][42878] -> [173.194.223.188][.5228] [TLS.GoogleServices][Web][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + idle: [....62] [ip4][..udp] [..172.16.42.216][44475] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + end: [....16] [ip4][..tcp] [..172.16.42.216][55242] -> [..52.85.209.197][..443] [TLS.Amazon][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + idle: [...150] [ip4][..udp] [..172.16.42.216][40425] -> [....172.16.42.1][...53] [DNS.PlayStore][SoftwareUpdate][Safe] + end: [....77] [ip4][..tcp] [..172.16.42.216][38404] -> [..34.199.52.240][..443] + idle: [....17] [ip4][..udp] [..172.16.42.216][19967] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/alicloud.pcap.out b/test/results/flow-info/alicloud.pcap.out new file mode 100644 index 000000000..bf723ec4a --- /dev/null +++ b/test/results/flow-info/alicloud.pcap.out @@ -0,0 +1,73 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.2.100][39018] -> [...8.209.104.12][.8999] + detected: [.....1] [ip4][..tcp] [..192.168.2.100][39018] -> [...8.209.104.12][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [..192.168.2.100][41056] -> [...8.209.73.197][.8999] + detected: [.....2] [ip4][..tcp] [..192.168.2.100][41056] -> [...8.209.73.197][.8999] [AliCloud][Cloud][Acceptable] + idle: [.....1] [ip4][..tcp] [..192.168.2.100][39018] -> [...8.209.104.12][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 30 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..tcp] [..192.168.2.100][38094] -> [..8.209.104.159][.8999] + detected: [.....3] [ip4][..tcp] [..192.168.2.100][38094] -> [..8.209.104.159][.8999] [AliCloud][Cloud][Acceptable] + idle: [.....2] [ip4][..tcp] [..192.168.2.100][41056] -> [...8.209.73.197][.8999] [AliCloud][Cloud][Acceptable] + new: [.....4] [ip4][..tcp] [..192.168.2.100][45078] -> [..8.209.105.125][.8999] + detected: [.....4] [ip4][..tcp] [..192.168.2.100][45078] -> [..8.209.105.125][.8999] [AliCloud][Cloud][Acceptable] + new: [.....5] [ip4][..tcp] [..192.168.2.100][42430] -> [..8.209.104.130][.8999] + detected: [.....5] [ip4][..tcp] [..192.168.2.100][42430] -> [..8.209.104.130][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 75 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....6] [ip4][..tcp] [..192.168.2.100][55484] -> [..8.209.107.157][.8999] + detected: [.....6] [ip4][..tcp] [..192.168.2.100][55484] -> [..8.209.107.157][.8999] [AliCloud][Cloud][Acceptable] + idle: [.....3] [ip4][..tcp] [..192.168.2.100][38094] -> [..8.209.104.159][.8999] [AliCloud][Cloud][Acceptable] + idle: [.....5] [ip4][..tcp] [..192.168.2.100][42430] -> [..8.209.104.130][.8999] [AliCloud][Cloud][Acceptable] + idle: [.....4] [ip4][..tcp] [..192.168.2.100][45078] -> [..8.209.105.125][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 90 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....7] [ip4][..tcp] [..192.168.2.100][40154] -> [..8.209.104.159][.8999] + detected: [.....7] [ip4][..tcp] [..192.168.2.100][40154] -> [..8.209.104.159][.8999] [AliCloud][Cloud][Acceptable] + idle: [.....6] [ip4][..tcp] [..192.168.2.100][55484] -> [..8.209.107.157][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 105 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 7|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....8] [ip4][..tcp] [..192.168.2.100][42600] -> [..8.209.105.125][.8999] + detected: [.....8] [ip4][..tcp] [..192.168.2.100][42600] -> [..8.209.105.125][.8999] [AliCloud][Cloud][Acceptable] + idle: [.....7] [ip4][..tcp] [..192.168.2.100][40154] -> [..8.209.104.159][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 120 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....9] [ip4][..tcp] [..192.168.2.100][51682] -> [...8.209.73.197][.8999] + detected: [.....9] [ip4][..tcp] [..192.168.2.100][51682] -> [...8.209.73.197][.8999] [AliCloud][Cloud][Acceptable] + idle: [.....8] [ip4][..tcp] [..192.168.2.100][42600] -> [..8.209.105.125][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 135 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 9|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....10] [ip4][..tcp] [..192.168.2.100][52228] -> [...8.209.73.197][.8999] + detected: [....10] [ip4][..tcp] [..192.168.2.100][52228] -> [...8.209.73.197][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 150 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 10|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....11] [ip4][..tcp] [..192.168.2.100][44388] -> [..8.209.107.125][.8999] + detected: [....11] [ip4][..tcp] [..192.168.2.100][44388] -> [..8.209.107.125][.8999] [AliCloud][Cloud][Acceptable] + idle: [....10] [ip4][..tcp] [..192.168.2.100][52228] -> [...8.209.73.197][.8999] [AliCloud][Cloud][Acceptable] + idle: [.....9] [ip4][..tcp] [..192.168.2.100][51682] -> [...8.209.73.197][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 165 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 11|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....12] [ip4][..tcp] [..192.168.2.100][37160] -> [..8.209.107.125][.8999] + detected: [....12] [ip4][..tcp] [..192.168.2.100][37160] -> [..8.209.107.125][.8999] [AliCloud][Cloud][Acceptable] + idle: [....11] [ip4][..tcp] [..192.168.2.100][44388] -> [..8.209.107.125][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 180 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 12|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....13] [ip4][..tcp] [..192.168.2.100][45094] -> [...8.209.76.194][.8999] + detected: [....13] [ip4][..tcp] [..192.168.2.100][45094] -> [...8.209.76.194][.8999] [AliCloud][Cloud][Acceptable] + idle: [....12] [ip4][..tcp] [..192.168.2.100][37160] -> [..8.209.107.125][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 195 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 13|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....14] [ip4][..tcp] [..192.168.2.100][57322] -> [..8.209.107.122][.8999] + detected: [....14] [ip4][..tcp] [..192.168.2.100][57322] -> [..8.209.107.122][.8999] [AliCloud][Cloud][Acceptable] + idle: [....13] [ip4][..tcp] [..192.168.2.100][45094] -> [...8.209.76.194][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 210 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 14|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....15] [ip4][..tcp] [..192.168.2.100][51774] -> [....8.209.77.36][.8999] + detected: [....15] [ip4][..tcp] [..192.168.2.100][51774] -> [....8.209.77.36][.8999] [AliCloud][Cloud][Acceptable] + idle: [....14] [ip4][..tcp] [..192.168.2.100][57322] -> [..8.209.107.122][.8999] [AliCloud][Cloud][Acceptable] + idle: [....15] [ip4][..tcp] [..192.168.2.100][51774] -> [....8.209.77.36][.8999] [AliCloud][Cloud][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/among_us.pcap.out b/test/results/flow-info/among_us.pcap.out new file mode 100644 index 000000000..c2471787f --- /dev/null +++ b/test/results/flow-info/among_us.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.......10.0.0.1][64260] -> [172.105.251.170][22023] + detected: [.....1] [ip4][..udp] [.......10.0.0.1][64260] -> [172.105.251.170][22023] [AmongUs][Game][Fun] + idle: [.....1] [ip4][..udp] [.......10.0.0.1][64260] -> [172.105.251.170][22023] [AmongUs][Game][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/amqp.pcap.out b/test/results/flow-info/amqp.pcap.out new file mode 100644 index 000000000..cf392e64a --- /dev/null +++ b/test/results/flow-info/amqp.pcap.out @@ -0,0 +1,20 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......127.0.0.1][44205] -> [......127.0.1.1][.5672] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [......127.0.0.1][44205] -> [......127.0.1.1][.5672] [AMQP][RPC][Acceptable] + new: [.....2] [ip4][..tcp] [......127.0.1.1][.5672] -> [......127.0.0.1][44204] [MIDSTREAM] + new: [.....3] [ip4][..tcp] [......127.0.0.1][44206] -> [......127.0.1.1][.5672] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [......127.0.0.1][44206] -> [......127.0.1.1][.5672] [AMQP][RPC][Acceptable] + detected: [.....2] [ip4][..tcp] [......127.0.1.1][.5672] -> [......127.0.0.1][44204] [AMQP][RPC][Acceptable] + analyse: [.....1] [ip4][..tcp] [......127.0.0.1][44205] -> [......127.0.1.1][.5672] [AMQP][RPC][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.002| 0.224| 0.537] + [IAT(c->s)...: 0.000| 2.002| 0.232| 0.544][IAT(s->c)...: 0.000| 2.002| 0.217| 0.530] + [PKTLEN(c->s): 103.000| 395.000| 198.100| 105.200][PKTLEN(s->c): 66.000| 66.000| 66.000| 0.000] + [BINS(c->s)..: 0,6,0,5,0,0,1,0,1,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....2] [ip4][..tcp] [......127.0.1.1][.5672] -> [......127.0.0.1][44204] [AMQP][RPC][Acceptable] + idle: [.....1] [ip4][..tcp] [......127.0.0.1][44205] -> [......127.0.1.1][.5672] [AMQP][RPC][Acceptable] + idle: [.....3] [ip4][..tcp] [......127.0.0.1][44206] -> [......127.0.1.1][.5672] [AMQP][RPC][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/android.pcap.out b/test/results/flow-info/android.pcap.out new file mode 100644 index 000000000..a1e00193a --- /dev/null +++ b/test/results/flow-info/android.pcap.out @@ -0,0 +1,257 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...95.101.24.53][..443] -> [...192.168.2.17][50677] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [...95.101.24.53][..443] -> [...192.168.2.17][50677] [TLS][Web][Safe] + new: [.....2] [ip4][..tcp] [..17.248.176.75][..443] -> [...192.168.2.17][50584] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [..17.248.176.75][..443] -> [...192.168.2.17][50584] [TLS.Apple][Web][Safe] + new: [.....3] [ip4][..tcp] [..17.248.176.75][..443] -> [...192.168.2.17][50580] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [..17.248.176.75][..443] -> [...192.168.2.17][50580] [TLS.Apple][Web][Safe] + new: [.....4] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [.....4] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [.....5] [ip4][..tcp] [..17.248.185.10][..443] -> [...192.168.2.17][50702] [MIDSTREAM] + detected: [.....5] [ip4][..tcp] [..17.248.185.10][..443] -> [...192.168.2.17][50702] [TLS.Apple][Web][Safe] + new: [.....6] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] + detected: [.....6] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + new: [.....7] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] + detected: [.....7] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + new: [.....8] [ip4][..udp] [169.254.225.216][.5353] -> [....224.0.0.251][.5353] + detected: [.....8] [ip4][..udp] [169.254.225.216][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [.....9] [ip4][..udp] [....192.168.2.1][.5353] -> [....224.0.0.251][.5353] + detected: [.....9] [ip4][..udp] [....192.168.2.1][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....10] [ip4][..udp] [169.254.225.216][60538] -> [239.255.255.250][.1900] + detected: [....10] [ip4][..udp] [169.254.225.216][60538] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....11] [ip4][..udp] [....192.168.2.1][51411] -> [239.255.255.250][.1900] + detected: [....11] [ip4][..udp] [....192.168.2.1][51411] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [.....4] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + update: [.....6] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + update: [.....7] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + new: [....12] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ff9f:f627] + detected: [....12] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ff9f:f627] [ICMPV6][Network][Acceptable] + new: [....13] [ip6][icmp6] [.....................................::] -> [...............................ff02::16] + detected: [....13] [ip6][icmp6] [.....................................::] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + new: [....14] [ip4][..udp] [....192.168.2.1][...67] -> [...192.168.2.16][...68] + detected: [....14] [ip4][..udp] [....192.168.2.1][...67] -> [...192.168.2.16][...68] [DHCP][Network][Acceptable] + new: [....15] [ip6][..udp] [..............fe80::4e6a:f6ff:fe9f:f627][..546] -> [..............................ff02::1:2][..547] + detected: [....15] [ip6][..udp] [..............fe80::4e6a:f6ff:fe9f:f627][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + new: [....16] [ip6][icmp6] [..............fe80::4e6a:f6ff:fe9f:f627] -> [...............................ff02::16] + detected: [....16] [ip6][icmp6] [..............fe80::4e6a:f6ff:fe9f:f627] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + new: [....17] [ip6][icmp6] [..............fe80::4e6a:f6ff:fe9f:f627] -> [................................ff02::2] + detected: [....17] [ip6][icmp6] [..............fe80::4e6a:f6ff:fe9f:f627] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + new: [....18] [ip4][..udp] [...192.168.2.16][52953] -> [....192.168.2.1][...53] + detected: [....18] [ip4][..udp] [...192.168.2.16][52953] -> [....192.168.2.1][...53] [DNS][ConnCheck][Acceptable] + detection-update: [....18] [ip4][..udp] [...192.168.2.16][52953] -> [....192.168.2.1][...53] [DNS.Apple][ConnCheck][Safe] + new: [....19] [ip4][..tcp] [...192.168.2.16][58338] -> [..17.253.53.201][...80] + detected: [....19] [ip4][..tcp] [...192.168.2.16][58338] -> [..17.253.53.201][...80] [HTTP.Apple][ConnCheck][Safe] + new: [....20] [ip4][..udp] [...192.168.2.16][35825] -> [....192.168.2.1][...53] + detected: [....20] [ip4][..udp] [...192.168.2.16][35825] -> [....192.168.2.1][...53] [DNS][Network][Acceptable] + detection-update: [....20] [ip4][..udp] [...192.168.2.16][35825] -> [....192.168.2.1][...53] [DNS][Network][Acceptable] + new: [....21] [ip4][..udp] [...192.168.2.16][45863] -> [...216.239.35.8][..123] + detected: [....21] [ip4][..udp] [...192.168.2.16][45863] -> [...216.239.35.8][..123] [NTP][System][Acceptable] + new: [....22] [ip4][..udp] [...192.168.2.16][34540] -> [....192.168.2.1][...53] + detected: [....22] [ip4][..udp] [...192.168.2.16][34540] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + detection-update: [....22] [ip4][..udp] [...192.168.2.16][34540] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + new: [....23] [ip4][..tcp] [...192.168.2.16][32974] -> [.216.239.38.120][..443] + new: [....24] [ip4][..udp] [...192.168.2.16][54837] -> [....192.168.2.1][...53] + detected: [....24] [ip4][..udp] [...192.168.2.16][54837] -> [....192.168.2.1][...53] [DNS.GoogleServices][Web][Acceptable] + detected: [....23] [ip4][..tcp] [...192.168.2.16][32974] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....24] [ip4][..udp] [...192.168.2.16][54837] -> [....192.168.2.1][...53] [DNS.GoogleServices][Web][Acceptable] + detection-update: [....23] [ip4][..tcp] [...192.168.2.16][32974] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....23] [ip4][..tcp] [...192.168.2.16][32974] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [....25] [ip4][..tcp] [...192.168.2.16][52486] -> [..172.217.20.74][..443] + detected: [....25] [ip4][..tcp] [...192.168.2.16][52486] -> [..172.217.20.74][..443] [TLS.GoogleServices][Web][Acceptable] + new: [....26] [ip4][..udp] [...192.168.2.16][47081] -> [....192.168.2.1][...53] + detected: [....26] [ip4][..udp] [...192.168.2.16][47081] -> [....192.168.2.1][...53] [DNS][ConnCheck][Acceptable] + detection-update: [....25] [ip4][..tcp] [...192.168.2.16][52486] -> [..172.217.20.74][..443] [TLS.GoogleServices][Web][Acceptable] + detection-update: [....25] [ip4][..tcp] [...192.168.2.16][52486] -> [..172.217.20.74][..443] [TLS.GoogleServices][Web][Acceptable] + detection-update: [....26] [ip4][..udp] [...192.168.2.16][47081] -> [....192.168.2.1][...53] [DNS.Google][ConnCheck][Acceptable] + new: [....27] [ip4][..tcp] [...192.168.2.16][36888] -> [...172.217.18.3][..443] + new: [....28] [ip4][..tcp] [...192.168.2.16][36890] -> [...172.217.18.3][..443] + detected: [....28] [ip4][..tcp] [...192.168.2.16][36890] -> [...172.217.18.3][..443] [TLS.Google][ConnCheck][Acceptable] + new: [....29] [ip4][..udp] [...192.168.2.16][51430] -> [....192.168.2.1][...53] + detected: [....29] [ip4][..udp] [...192.168.2.16][51430] -> [....192.168.2.1][...53] [DNS][Network][Acceptable] + detection-update: [....29] [ip4][..udp] [...192.168.2.16][51430] -> [....192.168.2.1][...53] [DNS][Network][Acceptable] + detection-update: [....28] [ip4][..tcp] [...192.168.2.16][36890] -> [...172.217.18.3][..443] [TLS.Google][ConnCheck][Acceptable] + detection-update: [....28] [ip4][..tcp] [...192.168.2.16][36890] -> [...172.217.18.3][..443] [TLS.Google][ConnCheck][Acceptable] + detected: [....27] [ip4][..tcp] [...192.168.2.16][36888] -> [...172.217.18.3][..443] [TLS.Google][ConnCheck][Acceptable] + detection-update: [....27] [ip4][..tcp] [...192.168.2.16][36888] -> [...172.217.18.3][..443] [TLS.Google][ConnCheck][Acceptable] + new: [....30] [ip4][..udp] [...192.168.2.16][39008] -> [....192.168.2.1][...53] + detected: [....30] [ip4][..udp] [...192.168.2.16][39008] -> [....192.168.2.1][...53] [DNS.GoogleServices][Web][Acceptable] + detection-update: [....30] [ip4][..udp] [...192.168.2.16][39008] -> [....192.168.2.1][...53] [DNS.GoogleServices][Web][Acceptable] + new: [....31] [ip4][..tcp] [...192.168.2.16][50384] -> [172.217.168.206][..443] + detected: [....31] [ip4][..tcp] [...192.168.2.16][50384] -> [172.217.168.206][..443] [TLS.Google][Web][Acceptable] + new: [....32] [ip4][..tcp] [...192.168.2.16][49510] -> [.216.239.38.120][.5228] + detection-update: [....31] [ip4][..tcp] [...192.168.2.16][50384] -> [172.217.168.206][..443] [TLS.Google][Web][Acceptable] + detection-update: [....31] [ip4][..tcp] [...192.168.2.16][50384] -> [172.217.168.206][..443] [TLS.Google][Advertisement][Acceptable] + new: [....33] [ip4][..udp] [...192.168.2.16][36613] -> [....192.168.2.1][...53] + detected: [....33] [ip4][..udp] [...192.168.2.16][36613] -> [....192.168.2.1][...53] [DNS.PlayStore][SoftwareUpdate][Safe] + detection-update: [....33] [ip4][..udp] [...192.168.2.16][36613] -> [....192.168.2.1][...53] [DNS.PlayStore][SoftwareUpdate][Safe] + new: [....34] [ip4][..tcp] [...192.168.2.16][32986] -> [.216.239.38.120][..443] + new: [....35] [ip4][..udp] [...192.168.2.16][32412] -> [....192.168.2.1][...53] + detected: [....35] [ip4][..udp] [...192.168.2.16][32412] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + new: [....36] [ip4][..udp] [...192.168.2.16][.7660] -> [....192.168.2.1][...53] + detected: [....36] [ip4][..udp] [...192.168.2.16][.7660] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + new: [....37] [ip4][..tcp] [...192.168.2.16][32988] -> [.216.239.38.120][..443] + new: [....38] [ip4][..tcp] [...192.168.2.16][32990] -> [.216.239.38.120][..443] + detection-update: [....35] [ip4][..udp] [...192.168.2.16][32412] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + new: [....39] [ip4][..tcp] [...192.168.2.16][36834] -> [.173.194.79.114][...80] + detection-update: [....36] [ip4][..udp] [...192.168.2.16][.7660] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + new: [....40] [ip4][..tcp] [...192.168.2.16][51928] -> [.172.217.21.202][..443] + detected: [....38] [ip4][..tcp] [...192.168.2.16][32990] -> [.216.239.38.120][..443] [TLS.PlayStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....34] [ip4][..tcp] [...192.168.2.16][32986] -> [.216.239.38.120][..443] [TLS.PlayStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + new: [....41] [ip4][..udp] [...192.168.2.16][40580] -> [....192.168.2.1][...53] + detected: [....41] [ip4][..udp] [...192.168.2.16][40580] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + detection-update: [....41] [ip4][..udp] [...192.168.2.16][40580] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + detected: [....39] [ip4][..tcp] [...192.168.2.16][36834] -> [.173.194.79.114][...80] [HTTP.DataSaver][Web][Fun] + detection-update: [....38] [ip4][..tcp] [...192.168.2.16][32990] -> [.216.239.38.120][..443] [TLS.PlayStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....34] [ip4][..tcp] [...192.168.2.16][32986] -> [.216.239.38.120][..443] [TLS.PlayStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....40] [ip4][..tcp] [...192.168.2.16][51928] -> [.172.217.21.202][..443] [TLS.DataSaver][Web][Fun] + new: [....42] [ip4][..tcp] [...192.168.2.16][32996] -> [.216.239.38.120][..443] + detection-update: [....40] [ip4][..tcp] [...192.168.2.16][51928] -> [.172.217.21.202][..443] [TLS.DataSaver][Web][Fun] + detected: [....42] [ip4][..tcp] [...192.168.2.16][32996] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + detected: [....37] [ip4][..tcp] [...192.168.2.16][32988] -> [.216.239.38.120][..443] [TLS.PlayStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....42] [ip4][..tcp] [...192.168.2.16][32996] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + detection-update: [....42] [ip4][..tcp] [...192.168.2.16][32996] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + detection-update: [....37] [ip4][..tcp] [...192.168.2.16][32988] -> [.216.239.38.120][..443] [TLS.PlayStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + new: [....43] [ip4][..udp] [...192.168.2.16][46359] -> [....192.168.2.1][...53] + detected: [....43] [ip4][..udp] [...192.168.2.16][46359] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + detection-update: [....43] [ip4][..udp] [...192.168.2.16][46359] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + new: [....44] [ip4][..tcp] [...192.168.2.16][32998] -> [.216.239.38.120][..443] + detected: [....44] [ip4][..tcp] [...192.168.2.16][32998] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + new: [....45] [ip4][..udp] [...192.168.2.16][35689] -> [....192.168.2.1][...53] + detected: [....45] [ip4][..udp] [...192.168.2.16][35689] -> [....192.168.2.1][...53] [DNS.GoogleServices][Web][Acceptable] + detection-update: [....44] [ip4][..tcp] [...192.168.2.16][32998] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + detection-update: [....45] [ip4][..udp] [...192.168.2.16][35689] -> [....192.168.2.1][...53] [DNS.GoogleServices][Web][Acceptable] + new: [....46] [ip4][..udp] [...192.168.2.16][22850] -> [....192.168.2.1][...53] + detected: [....46] [ip4][..udp] [...192.168.2.16][22850] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + detection-update: [....46] [ip4][..udp] [...192.168.2.16][22850] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + new: [....47] [ip4][..tcp] [...192.168.2.16][43634] -> [..172.217.20.76][..443] + new: [....48] [ip4][..udp] [...192.168.2.16][58892] -> [....192.168.2.1][...53] + detected: [....48] [ip4][..udp] [...192.168.2.16][58892] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + detection-update: [....48] [ip4][..udp] [...192.168.2.16][58892] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + detected: [....47] [ip4][..tcp] [...192.168.2.16][43634] -> [..172.217.20.76][..443] [TLS.DataSaver][Web][Fun] + new: [....49] [ip4][..tcp] [...192.168.2.16][33002] -> [.216.239.38.120][..443] + detection-update: [....47] [ip4][..tcp] [...192.168.2.16][43634] -> [..172.217.20.76][..443] [TLS.DataSaver][Web][Fun] + detected: [....49] [ip4][..tcp] [...192.168.2.16][33002] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + new: [....50] [ip4][..udp] [...192.168.2.16][33240] -> [....192.168.2.1][...53] + detected: [....50] [ip4][..udp] [...192.168.2.16][33240] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + detection-update: [....50] [ip4][..udp] [...192.168.2.16][33240] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + detection-update: [....49] [ip4][..tcp] [...192.168.2.16][33002] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + new: [....51] [ip4][..tcp] [...192.168.2.16][52514] -> [..172.217.20.74][..443] + new: [....52] [ip4][..tcp] [...192.168.2.16][36848] -> [.173.194.79.114][...80] + new: [....53] [ip4][..tcp] [...192.168.2.16][36850] -> [.173.194.79.114][...80] + new: [....54] [ip4][..udp] [...192.168.2.16][18379] -> [....192.168.2.1][...53] + detected: [....54] [ip4][..udp] [...192.168.2.16][18379] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + detection-update: [....54] [ip4][..udp] [...192.168.2.16][18379] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + new: [....55] [ip4][..tcp] [...192.168.2.16][51944] -> [.172.217.21.202][..443] + detected: [....52] [ip4][..tcp] [...192.168.2.16][36848] -> [.173.194.79.114][...80] [HTTP.DataSaver][Web][Fun] + new: [....56] [ip4][..udp] [...192.168.2.16][10677] -> [....192.168.2.1][...53] + detected: [....56] [ip4][..udp] [...192.168.2.16][10677] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + detection-update: [....56] [ip4][..udp] [...192.168.2.16][10677] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + new: [....57] [ip4][..udp] [...192.168.2.16][32832] -> [....192.168.2.1][...53] + detected: [....57] [ip4][..udp] [...192.168.2.16][32832] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + detection-update: [....57] [ip4][..udp] [...192.168.2.16][32832] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + new: [....58] [ip4][..tcp] [...192.168.2.16][43646] -> [..172.217.20.76][..443] + new: [....59] [ip4][..tcp] [...192.168.2.16][33014] -> [.216.239.38.120][..443] + detected: [....55] [ip4][..tcp] [...192.168.2.16][51944] -> [.172.217.21.202][..443] [TLS.DataSaver][Web][Fun] + detected: [....59] [ip4][..tcp] [...192.168.2.16][33014] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + new: [....60] [ip4][..udp] [...192.168.2.16][39760] -> [....192.168.2.1][...53] + detected: [....60] [ip4][..udp] [...192.168.2.16][39760] -> [....192.168.2.1][...53] [DNS.GoogleServices][Web][Acceptable] + detected: [....58] [ip4][..tcp] [...192.168.2.16][43646] -> [..172.217.20.76][..443] [TLS.DataSaver][Web][Fun] + analyse: [....42] [ip4][..tcp] [...192.168.2.16][32996] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.405| 0.048| 0.104] + [IAT(c->s)...: 0.000| 0.387| 0.047| 0.099][IAT(s->c)...: 0.000| 0.405| 0.050| 0.109] + [PKTLEN(c->s): 66.000| 578.000| 114.600| 124.700][PKTLEN(s->c): 66.000|1484.000| 788.400| 626.900] + [BINS(c->s)..: 13,1,1,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,1,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,5,0,0,0] + detection-update: [....59] [ip4][..tcp] [...192.168.2.16][33014] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + detection-update: [....55] [ip4][..tcp] [...192.168.2.16][51944] -> [.172.217.21.202][..443] [TLS.DataSaver][Web][Fun] + detection-update: [....60] [ip4][..udp] [...192.168.2.16][39760] -> [....192.168.2.1][...53] [DNS.GoogleServices][Web][Acceptable] + detection-update: [....58] [ip4][..tcp] [...192.168.2.16][43646] -> [..172.217.20.76][..443] [TLS.DataSaver][Web][Fun] + new: [....61] [ip4][..tcp] [...192.168.2.16][44374] -> [..172.217.22.10][..443] + detected: [....61] [ip4][..tcp] [...192.168.2.16][44374] -> [..172.217.22.10][..443] [TLS.GoogleServices][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....51] [ip4][..tcp] [...192.168.2.16][52514] -> [..172.217.20.74][..443] [TLS.GoogleServices][Web][Acceptable] + new: [....62] [ip4][..udp] [...192.168.2.16][56312] -> [....192.168.2.1][...53] + detected: [....62] [ip4][..udp] [...192.168.2.16][56312] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + detection-update: [....62] [ip4][..udp] [...192.168.2.16][56312] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + new: [....63] [ip4][..tcp] [...192.168.2.16][43652] -> [..172.217.20.76][..443] + detection-update: [....61] [ip4][..tcp] [...192.168.2.16][44374] -> [..172.217.22.10][..443] [TLS.GoogleServices][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + end: [.....3] [ip4][..tcp] [..17.248.176.75][..443] -> [...192.168.2.17][50580] [TLS.Apple][Web][Safe] + end: [.....2] [ip4][..tcp] [..17.248.176.75][..443] -> [...192.168.2.17][50584] [TLS.Apple][Web][Safe] + idle: [....41] [ip4][..udp] [...192.168.2.16][40580] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + idle: [....35] [ip4][..udp] [...192.168.2.16][32412] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + idle: [.....4] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [....18] [ip4][..udp] [...192.168.2.16][52953] -> [....192.168.2.1][...53] [DNS.Apple][ConnCheck][Safe] + end: [.....5] [ip4][..tcp] [..17.248.185.10][..443] -> [...192.168.2.17][50702] [TLS.Apple][Web][Safe] + idle: [....22] [ip4][..udp] [...192.168.2.16][34540] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + idle: [....33] [ip4][..udp] [...192.168.2.16][36613] -> [....192.168.2.1][...53] [DNS.PlayStore][SoftwareUpdate][Safe] + idle: [....31] [ip4][..tcp] [...192.168.2.16][50384] -> [172.217.168.206][..443] + idle: [....11] [ip4][..udp] [....192.168.2.1][51411] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....25] [ip4][..tcp] [...192.168.2.16][52486] -> [..172.217.20.74][..443] + idle: [....51] [ip4][..tcp] [...192.168.2.16][52514] -> [..172.217.20.74][..443] + idle: [.....8] [ip4][..udp] [169.254.225.216][.5353] -> [....224.0.0.251][.5353] + idle: [....61] [ip4][..tcp] [...192.168.2.16][44374] -> [..172.217.22.10][..443] + idle: [....54] [ip4][..udp] [...192.168.2.16][18379] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + idle: [....26] [ip4][..udp] [...192.168.2.16][47081] -> [....192.168.2.1][...53] [DNS.Google][ConnCheck][Acceptable] + idle: [....57] [ip4][..udp] [...192.168.2.16][32832] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + end: [....19] [ip4][..tcp] [...192.168.2.16][58338] -> [..17.253.53.201][...80] [HTTP.Apple][ConnCheck][Safe] + idle: [....14] [ip4][..udp] [....192.168.2.1][...67] -> [...192.168.2.16][...68] [DHCP][Network][Acceptable] + idle: [....30] [ip4][..udp] [...192.168.2.16][39008] -> [....192.168.2.1][...53] [DNS.GoogleServices][Web][Acceptable] + idle: [.....6] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....10] [ip4][..udp] [169.254.225.216][60538] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....15] [ip6][..udp] [..............fe80::4e6a:f6ff:fe9f:f627][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + idle: [....29] [ip4][..udp] [...192.168.2.16][51430] -> [....192.168.2.1][...53] [DNS][Network][Acceptable] + idle: [....46] [ip4][..udp] [...192.168.2.16][22850] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + end: [....23] [ip4][..tcp] [...192.168.2.16][32974] -> [.216.239.38.120][..443] + idle: [....34] [ip4][..tcp] [...192.168.2.16][32986] -> [.216.239.38.120][..443] + idle: [....37] [ip4][..tcp] [...192.168.2.16][32988] -> [.216.239.38.120][..443] + idle: [....38] [ip4][..tcp] [...192.168.2.16][32990] -> [.216.239.38.120][..443] + idle: [....13] [ip6][icmp6] [.....................................::] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + idle: [....12] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ff9f:f627] [ICMPV6][Network][Acceptable] + idle: [....42] [ip4][..tcp] [...192.168.2.16][32996] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + end: [....44] [ip4][..tcp] [...192.168.2.16][32998] -> [.216.239.38.120][..443] + idle: [....49] [ip4][..tcp] [...192.168.2.16][33002] -> [.216.239.38.120][..443] [TLS.Google][Web][Acceptable] + idle: [....59] [ip4][..tcp] [...192.168.2.16][33014] -> [.216.239.38.120][..443] + idle: [....56] [ip4][..udp] [...192.168.2.16][10677] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + idle: [.....9] [ip4][..udp] [....192.168.2.1][.5353] -> [....224.0.0.251][.5353] + idle: [....50] [ip4][..udp] [...192.168.2.16][33240] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + end: [....39] [ip4][..tcp] [...192.168.2.16][36834] -> [.173.194.79.114][...80] [HTTP.DataSaver][Web][Fun] + idle: [....52] [ip4][..tcp] [...192.168.2.16][36848] -> [.173.194.79.114][...80] [HTTP.DataSaver][Web][Fun] + guessed: [....53] [ip4][..tcp] [...192.168.2.16][36850] -> [.173.194.79.114][...80] [HTTP.Google][Web][Acceptable] + idle: [....53] [ip4][..tcp] [...192.168.2.16][36850] -> [.173.194.79.114][...80] + idle: [.....7] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + idle: [....27] [ip4][..tcp] [...192.168.2.16][36888] -> [...172.217.18.3][..443] [TLS.Google][ConnCheck][Acceptable] + idle: [....28] [ip4][..tcp] [...192.168.2.16][36890] -> [...172.217.18.3][..443] + idle: [....21] [ip4][..udp] [...192.168.2.16][45863] -> [...216.239.35.8][..123] [NTP][System][Acceptable] + idle: [....60] [ip4][..udp] [...192.168.2.16][39760] -> [....192.168.2.1][...53] [DNS.GoogleServices][Web][Acceptable] + idle: [....45] [ip4][..udp] [...192.168.2.16][35689] -> [....192.168.2.1][...53] [DNS.GoogleServices][Web][Acceptable] + idle: [....20] [ip4][..udp] [...192.168.2.16][35825] -> [....192.168.2.1][...53] [DNS][Network][Acceptable] + idle: [....62] [ip4][..udp] [...192.168.2.16][56312] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + idle: [.....1] [ip4][..tcp] [...95.101.24.53][..443] -> [...192.168.2.17][50677] + guessed: [....32] [ip4][..tcp] [...192.168.2.16][49510] -> [.216.239.38.120][.5228] [Google][Web][Acceptable] + idle: [....32] [ip4][..tcp] [...192.168.2.16][49510] -> [.216.239.38.120][.5228] + idle: [....17] [ip6][icmp6] [..............fe80::4e6a:f6ff:fe9f:f627] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + idle: [....16] [ip6][icmp6] [..............fe80::4e6a:f6ff:fe9f:f627] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + end: [....47] [ip4][..tcp] [...192.168.2.16][43634] -> [..172.217.20.76][..443] + end: [....58] [ip4][..tcp] [...192.168.2.16][43646] -> [..172.217.20.76][..443] + guessed: [....63] [ip4][..tcp] [...192.168.2.16][43652] -> [..172.217.20.76][..443] [TLS.Google][Web][Acceptable] + idle: [....63] [ip4][..tcp] [...192.168.2.16][43652] -> [..172.217.20.76][..443] + idle: [....43] [ip4][..udp] [...192.168.2.16][46359] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + idle: [....40] [ip4][..tcp] [...192.168.2.16][51928] -> [.172.217.21.202][..443] [TLS.DataSaver][Web][Fun] + idle: [....55] [ip4][..tcp] [...192.168.2.16][51944] -> [.172.217.21.202][..443] [TLS.DataSaver][Web][Fun] + idle: [....36] [ip4][..udp] [...192.168.2.16][.7660] -> [....192.168.2.1][...53] [DNS.DataSaver][Web][Fun] + idle: [....48] [ip4][..udp] [...192.168.2.16][58892] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + idle: [....24] [ip4][..udp] [...192.168.2.16][54837] -> [....192.168.2.1][...53] [DNS.GoogleServices][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/anyconnect-vpn.pcap.out b/test/results/flow-info/anyconnect-vpn.pcap.out new file mode 100644 index 000000000..3dbd9d25e --- /dev/null +++ b/test/results/flow-info/anyconnect-vpn.pcap.out @@ -0,0 +1,305 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.0.0.227][56885] -> [...184.25.56.53][...80] [MIDSTREAM] + new: [.....2] [ip4][..tcp] [.....10.0.0.227][56916] -> [.....10.0.0.151][.8009] + new: [.....3] [ip4][..tcp] [.....10.0.0.227][56320] -> [.....10.0.0.149][.8009] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [.....10.0.0.227][56320] -> [.....10.0.0.149][.8009] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port + new: [.....4] [ip4][....2] [.......10.0.0.1] -> [......224.0.0.1] + detected: [.....4] [ip4][....2] [.......10.0.0.1] -> [......224.0.0.1] [IGMP][Network][Acceptable] + new: [.....5] [ip6][icmp6] [..............fe80::2e7e:81ff:feb0:4aa1] -> [................................ff02::1] + detected: [.....5] [ip6][icmp6] [..............fe80::2e7e:81ff:feb0:4aa1] -> [................................ff02::1] [ICMPV6][Network][Acceptable] + new: [.....6] [ip4][....2] [.....10.0.0.149] -> [....224.0.0.251] + detected: [.....6] [ip4][....2] [.....10.0.0.149] -> [....224.0.0.251] [IGMP][Network][Acceptable] + new: [.....7] [ip4][....2] [.....10.0.0.149] -> [...239.255.3.22] + detected: [.....7] [ip4][....2] [.....10.0.0.149] -> [...239.255.3.22] [IGMP][Network][Acceptable] + new: [.....8] [ip4][....2] [.....10.0.0.149] -> [239.255.255.250] + detected: [.....8] [ip4][....2] [.....10.0.0.149] -> [239.255.255.250] [IGMP][Network][Acceptable] + new: [.....9] [ip4][..udp] [.....10.0.0.227][52879] -> [....75.75.76.76][...53] + detected: [.....9] [ip4][..udp] [.....10.0.0.227][52879] -> [....75.75.76.76][...53] [DNS][Network][Acceptable] + detection-update: [.....9] [ip4][..udp] [.....10.0.0.227][52879] -> [....75.75.76.76][...53] [DNS][Network][Acceptable] + new: [....10] [ip4][..udp] [.....10.0.0.227][61387] -> [....75.75.75.75][...53] + detected: [....10] [ip4][..udp] [.....10.0.0.227][61387] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + detection-update: [....10] [ip4][..udp] [.....10.0.0.227][61387] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + new: [....11] [ip4][..udp] [.....10.0.0.227][62322] -> [....75.75.76.76][...53] + detected: [....11] [ip4][..udp] [.....10.0.0.227][62322] -> [....75.75.76.76][...53] [DNS][Network][Acceptable] + detection-update: [....11] [ip4][..udp] [.....10.0.0.227][62322] -> [....75.75.76.76][...53] [DNS][Network][Acceptable] + new: [....12] [ip4][..tcp] [.....10.0.0.227][56918] -> [....8.37.102.91][..443] + detected: [....12] [ip4][..tcp] [.....10.0.0.227][56918] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: Missing SNI TLS Extn + detection-update: [....12] [ip4][..tcp] [.....10.0.0.227][56918] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, Missing SNI TLS Extn + detection-update: [....12] [ip4][..tcp] [.....10.0.0.227][56918] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, Missing SNI TLS Extn + new: [....13] [ip4][..tcp] [.....10.0.0.227][56915] -> [..52.37.243.173][..443] [MIDSTREAM] + detected: [....13] [ip4][..tcp] [.....10.0.0.227][56915] -> [..52.37.243.173][..443] [TLS.AmazonAWS][Cloud][Acceptable] + new: [....14] [ip4][..tcp] [.....10.0.0.227][56914] -> [..52.37.243.173][..443] [MIDSTREAM] + detected: [....14] [ip4][..tcp] [.....10.0.0.227][56914] -> [..52.37.243.173][..443] [TLS.AmazonAWS][Cloud][Acceptable] + new: [....15] [ip4][..tcp] [.....10.0.0.227][56919] -> [....8.37.102.91][..443] + detected: [....15] [ip4][..tcp] [.....10.0.0.227][56919] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: Missing SNI TLS Extn + detection-update: [....15] [ip4][..tcp] [.....10.0.0.227][56919] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, Missing SNI TLS Extn + detection-update: [....15] [ip4][..tcp] [.....10.0.0.227][56919] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, Missing SNI TLS Extn + analyse: [....15] [ip4][..tcp] [.....10.0.0.227][56919] -> [....8.37.102.91][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.072| 0.022| 0.022] + [IAT(c->s)...: 0.000| 0.045| 0.023| 0.020][IAT(s->c)...: 0.000| 0.072| 0.021| 0.023] + [PKTLEN(c->s): 66.000|1514.000| 422.600| 556.700][PKTLEN(s->c): 66.000|1514.000| 597.800| 627.100] + [BINS(c->s)..: 11,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 6,1,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,4,0,0] + detection-update: [....15] [ip4][..tcp] [.....10.0.0.227][56919] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, Missing SNI TLS Extn + new: [....16] [ip4][..udp] [.....10.0.0.227][63107] -> [....75.75.76.76][...53] + detected: [....16] [ip4][..udp] [.....10.0.0.227][63107] -> [....75.75.76.76][...53] [DNS][Network][Acceptable] + detection-update: [....16] [ip4][..udp] [.....10.0.0.227][63107] -> [....75.75.76.76][...53] [DNS][Network][Acceptable] + new: [....17] [ip4][.icmp] [.....10.0.0.227] -> [....75.75.76.76] + detected: [....17] [ip4][.icmp] [.....10.0.0.227] -> [....75.75.76.76] [ICMP][Network][Acceptable] + new: [....18] [ip4][..udp] [.....10.0.0.213][.5353] -> [....224.0.0.251][.5353] + detected: [....18] [ip4][..udp] [.....10.0.0.213][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....19] [ip6][..udp] [...............fe80::408:3e45:3abc:1552][.5353] -> [...............................ff02::fb][.5353] + detected: [....19] [ip6][..udp] [...............fe80::408:3e45:3abc:1552][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....20] [ip4][....2] [.....10.0.0.213] -> [......224.0.0.2] + detected: [....20] [ip4][....2] [.....10.0.0.213] -> [......224.0.0.2] [IGMP][Network][Acceptable] + new: [....21] [ip4][....2] [.....10.0.0.213] -> [....224.0.0.251] + detected: [....21] [ip4][....2] [.....10.0.0.213] -> [....224.0.0.251] [IGMP][Network][Acceptable] + new: [....22] [ip4][..udp] [.....10.0.0.227][.5353] -> [.....10.0.0.213][.5353] + detected: [....22] [ip4][..udp] [.....10.0.0.227][.5353] -> [.....10.0.0.213][.5353] [MDNS][Network][Acceptable] + new: [....23] [ip6][icmp6] [...............fe80::408:3e45:3abc:1552] -> [...............................ff02::16] + detected: [....23] [ip6][icmp6] [...............fe80::408:3e45:3abc:1552] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + new: [....24] [ip4][..tcp] [.....10.0.0.227][56917] -> [...184.25.56.77][...80] [MIDSTREAM] + new: [....25] [ip4][..tcp] [.....10.0.0.227][56884] -> [...184.25.56.77][...80] [MIDSTREAM] + new: [....26] [ip4][..udp] [.....10.0.0.227][54851] -> [....75.75.76.76][...53] + detected: [....26] [ip4][..udp] [.....10.0.0.227][54851] -> [....75.75.76.76][...53] [DNS][Network][Acceptable] + detection-update: [....26] [ip4][..udp] [.....10.0.0.227][54851] -> [....75.75.76.76][...53] [DNS][Network][Acceptable] + new: [....27] [ip4][..udp] [.....10.0.0.227][58155] -> [....75.75.76.76][...53] + detected: [....27] [ip4][..udp] [.....10.0.0.227][58155] -> [....75.75.76.76][...53] [DNS.Slack][Collaborative][Acceptable] + detection-update: [....27] [ip4][..udp] [.....10.0.0.227][58155] -> [....75.75.76.76][...53] [DNS.Slack][Collaborative][Acceptable] + new: [....28] [ip4][..tcp] [.....10.0.0.227][56920] -> [...99.86.34.156][..443] + detected: [....28] [ip4][..tcp] [.....10.0.0.227][56920] -> [...99.86.34.156][..443] [TLS.Slack][Collaborative][Acceptable] + detection-update: [....28] [ip4][..tcp] [.....10.0.0.227][56920] -> [...99.86.34.156][..443] [TLS.Slack][Collaborative][Acceptable] + new: [....29] [ip4][..tcp] [.....10.0.0.227][56910] -> [...35.201.124.9][..443] [MIDSTREAM] + detected: [....29] [ip4][..tcp] [.....10.0.0.227][56910] -> [...35.201.124.9][..443] [TLS.GoogleCloud][Cloud][Acceptable] + new: [....30] [ip4][..tcp] [.....10.0.0.227][56921] -> [....8.37.96.194][.4287] + detected: [....30] [ip4][..tcp] [.....10.0.0.227][56921] -> [....8.37.96.194][.4287] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [....30] [ip4][..tcp] [.....10.0.0.227][56921] -> [....8.37.96.194][.4287] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Self-signed Cert, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + new: [....31] [ip4][..udp] [.....10.0.0.227][64972] -> [....75.75.75.75][...53] + detected: [....31] [ip4][..udp] [.....10.0.0.227][64972] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + new: [....32] [ip4][..udp] [.....10.0.0.227][61613] -> [....75.75.75.75][...53] + detected: [....32] [ip4][..udp] [.....10.0.0.227][61613] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + detection-update: [....31] [ip4][..udp] [.....10.0.0.227][64972] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + detection-update: [....32] [ip4][..udp] [.....10.0.0.227][61613] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + new: [....33] [ip4][..udp] [.....10.0.0.227][57261] -> [....75.75.75.75][...53] + detected: [....33] [ip4][..udp] [.....10.0.0.227][57261] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + new: [....34] [ip4][..udp] [.....10.0.0.227][52879] -> [....75.75.75.75][...53] + detected: [....34] [ip4][..udp] [.....10.0.0.227][52879] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + detection-update: [....33] [ip4][..udp] [.....10.0.0.227][57261] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + detection-update: [....34] [ip4][..udp] [.....10.0.0.227][52879] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + detection-update: [....18] [ip4][..udp] [.....10.0.0.213][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + detection-update: [....19] [ip6][..udp] [...............fe80::408:3e45:3abc:1552][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....35] [ip4][..udp] [.....10.0.0.227][59222] -> [....75.75.75.75][...53] + detected: [....35] [ip4][..udp] [.....10.0.0.227][59222] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + new: [....36] [ip4][..udp] [.....10.0.0.227][57017] -> [....75.75.75.75][...53] + detected: [....36] [ip4][..udp] [.....10.0.0.227][57017] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + detection-update: [....35] [ip4][..udp] [.....10.0.0.227][59222] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + detection-update: [....36] [ip4][..udp] [.....10.0.0.227][57017] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + analyse: [....30] [ip4][..tcp] [.....10.0.0.227][56921] -> [....8.37.96.194][.4287] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.385| 0.079| 0.122] + [IAT(c->s)...: 0.000| 0.358| 0.081| 0.117][IAT(s->c)...: 0.002| 0.385| 0.078| 0.126] + [PKTLEN(c->s): 66.000|1261.000| 250.700| 328.900][PKTLEN(s->c): 66.000|1434.000| 347.300| 483.300] + [BINS(c->s)..: 9,2,0,0,1,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,2,1,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,1,0,0,0,0,0] + new: [....37] [ip4][..tcp] [.....10.0.0.227][56881] -> [.162.222.43.153][..443] [MIDSTREAM] + new: [....38] [ip4][..tcp] [.....10.0.0.227][56929] -> [....8.37.102.91][..443] + detected: [....38] [ip4][..tcp] [.....10.0.0.227][56929] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [....38] [ip4][..tcp] [.....10.0.0.227][56929] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [....38] [ip4][..tcp] [.....10.0.0.227][56929] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + analyse: [....38] [ip4][..tcp] [.....10.0.0.227][56929] -> [....8.37.102.91][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.138| 0.027| 0.033] + [IAT(c->s)...: 0.000| 0.097| 0.033| 0.029][IAT(s->c)...: 0.000| 0.138| 0.022| 0.035] + [PKTLEN(c->s): 66.000|1031.000| 164.900| 249.400][PKTLEN(s->c): 66.000|1514.000| 854.600| 666.400] + [BINS(c->s)..: 12,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,1,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,8,0,0] + detection-update: [....38] [ip4][..tcp] [.....10.0.0.227][56929] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + new: [....39] [ip4][..tcp] [.....10.0.0.227][56865] -> [.....10.0.0.149][.8008] [MIDSTREAM] + new: [....40] [ip4][..tcp] [.....10.0.0.227][56866] -> [.....10.0.0.151][.8060] [MIDSTREAM] + new: [....41] [ip4][..udp] [.....10.0.0.227][57253] -> [....75.75.75.75][...53] + detected: [....41] [ip4][..udp] [.....10.0.0.227][57253] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + new: [....42] [ip4][..udp] [.....10.0.0.227][62427] -> [....75.75.75.75][...53] + detected: [....42] [ip4][..udp] [.....10.0.0.227][62427] -> [....75.75.75.75][...53] [DNS][ConnCheck][Acceptable] + detected: [....25] [ip4][..tcp] [.....10.0.0.227][56884] -> [...184.25.56.77][...80] [HTTP][ConnCheck][Acceptable] + detected: [....24] [ip4][..tcp] [.....10.0.0.227][56917] -> [...184.25.56.77][...80] [HTTP][ConnCheck][Acceptable] + detection-update: [....41] [ip4][..udp] [.....10.0.0.227][57253] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + detection-update: [....42] [ip4][..udp] [.....10.0.0.227][62427] -> [....75.75.75.75][...53] [DNS][ConnCheck][Acceptable] + new: [....43] [ip4][..tcp] [.....10.0.0.227][56879] -> [..52.10.115.210][..443] [MIDSTREAM] + detected: [....43] [ip4][..tcp] [.....10.0.0.227][56879] -> [..52.10.115.210][..443] [TLS.AmazonAWS][Cloud][Acceptable] + new: [....44] [ip4][..tcp] [.....10.0.0.227][56886] -> [..17.57.144.116][.5223] [MIDSTREAM] + new: [....45] [ip4][..udp] [.....10.0.0.227][60341] -> [....75.75.75.75][...53] + detected: [....45] [ip4][..udp] [.....10.0.0.227][60341] -> [....75.75.75.75][...53] [DNS.Apple][Web][Safe] + new: [....46] [ip4][..udp] [.....10.0.0.227][51060] -> [....75.75.75.75][...53] + detected: [....46] [ip4][..udp] [.....10.0.0.227][51060] -> [....75.75.75.75][...53] [DNS.ApplePush][Cloud][Acceptable] + new: [....47] [ip4][..udp] [.....10.0.0.227][59582] -> [....75.75.75.75][...53] + detected: [....47] [ip4][..udp] [.....10.0.0.227][59582] -> [....75.75.75.75][...53] [DNS.ApplePush][Cloud][Acceptable] + new: [....48] [ip4][..udp] [.....10.0.0.227][64193] -> [....75.75.75.75][...53] + detected: [....48] [ip4][..udp] [.....10.0.0.227][64193] -> [....75.75.75.75][...53] [DNS.ApplePush][Cloud][Acceptable] + new: [....49] [ip4][..udp] [.....10.0.0.227][51990] -> [....75.75.75.75][...53] + detected: [....49] [ip4][..udp] [.....10.0.0.227][51990] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + detection-update: [....45] [ip4][..udp] [.....10.0.0.227][60341] -> [....75.75.75.75][...53] [DNS.Apple][Web][Safe] + detection-update: [....47] [ip4][..udp] [.....10.0.0.227][59582] -> [....75.75.75.75][...53] [DNS.ApplePush][Cloud][Acceptable] + detection-update: [....46] [ip4][..udp] [.....10.0.0.227][51060] -> [....75.75.75.75][...53] [DNS.ApplePush][Cloud][Acceptable] + detected: [....44] [ip4][..tcp] [.....10.0.0.227][56886] -> [..17.57.144.116][.5223] [TLS.Apple][Web][Safe] + RISK: Known Proto on Non Std Port + detection-update: [....48] [ip4][..udp] [.....10.0.0.227][64193] -> [....75.75.75.75][...53] [DNS.ApplePush][Cloud][Acceptable] + new: [....50] [ip4][..udp] [.....10.0.0.227][49781] -> [....75.75.75.75][...53] + detected: [....50] [ip4][..udp] [.....10.0.0.227][49781] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + new: [....51] [ip4][..tcp] [.....10.0.0.227][56871] -> [...8.37.103.196][..443] [MIDSTREAM] + detection-update: [....50] [ip4][..udp] [.....10.0.0.227][49781] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + detection-update: [....49] [ip4][..udp] [.....10.0.0.227][51990] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + new: [....52] [ip4][..udp] [.....10.0.0.227][58074] -> [....75.75.75.75][...53] + detected: [....52] [ip4][..udp] [.....10.0.0.227][58074] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + detection-update: [....52] [ip4][..udp] [.....10.0.0.227][58074] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + new: [....53] [ip4][..tcp] [.....10.0.0.227][56874] -> [.74.125.197.188][..443] [MIDSTREAM] + new: [....54] [ip4][..udp] [.....10.0.0.227][61328] -> [239.255.255.250][.1900] + detected: [....54] [ip4][..udp] [.....10.0.0.227][61328] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....55] [ip4][..udp] [.....10.0.0.149][38616] -> [.....10.0.0.227][61328] + detected: [....55] [ip4][..udp] [.....10.0.0.149][38616] -> [.....10.0.0.227][61328] [SSDP][System][Acceptable] + new: [....56] [ip4][..udp] [.....10.0.0.151][.1900] -> [.....10.0.0.227][61328] + detected: [....56] [ip4][..udp] [.....10.0.0.151][.1900] -> [.....10.0.0.227][61328] [SSDP][System][Acceptable] + new: [....57] [ip4][..udp] [.....10.0.0.227][57547] -> [239.255.255.250][.1900] + detected: [....57] [ip4][..udp] [.....10.0.0.227][57547] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....58] [ip4][..udp] [.....10.0.0.227][54107] -> [....8.37.102.91][..443] + detected: [....58] [ip4][..udp] [.....10.0.0.227][54107] -> [....8.37.102.91][..443] [DTLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + new: [....59] [ip4][..udp] [.....10.0.0.149][50081] -> [.....10.0.0.227][57547] + detected: [....59] [ip4][..udp] [.....10.0.0.149][50081] -> [.....10.0.0.227][57547] [SSDP][System][Acceptable] + detection-update: [....58] [ip4][..udp] [.....10.0.0.227][54107] -> [....8.37.102.91][..443] [DTLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + analyse: [....58] [ip4][..udp] [.....10.0.0.227][54107] -> [....8.37.102.91][..443] [DTLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.047| 0.016| 0.019] + [IAT(c->s)...: 0.000| 0.047| 0.016| 0.018][IAT(s->c)...: 0.000| 0.047| 0.015| 0.019] + [PKTLEN(c->s): 135.000| 199.000| 168.000| 16.800][PKTLEN(s->c): 90.000| 407.000| 258.100| 75.200] + [BINS(c->s)..: 0,0,1,11,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,1,0,0,2,5,1,2,2,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....60] [ip4][..udp] [.....10.0.0.227][52595] -> [.......10.0.0.1][..192] + new: [....61] [ip4][..udp] [.....10.0.0.151][.1900] -> [.....10.0.0.227][57547] + detected: [....61] [ip4][..udp] [.....10.0.0.151][.1900] -> [.....10.0.0.227][57547] [SSDP][System][Acceptable] + new: [....62] [ip4][..tcp] [.....10.0.0.227][56954] -> [.....10.0.0.149][.8008] + new: [....63] [ip4][..tcp] [.....10.0.0.227][56955] -> [.....10.0.0.151][.8060] + detected: [....62] [ip4][..tcp] [.....10.0.0.227][56954] -> [.....10.0.0.149][.8008] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + detected: [....63] [ip4][..tcp] [.....10.0.0.227][56955] -> [.....10.0.0.151][.8060] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [....64] [ip4][..udp] [.....10.0.0.149][49816] -> [.....10.0.0.227][57547] + detected: [....64] [ip4][..udp] [.....10.0.0.149][49816] -> [.....10.0.0.227][57547] [SSDP][System][Acceptable] + new: [....65] [ip4][..udp] [.....10.0.0.149][48166] -> [.....10.0.0.227][57547] + detected: [....65] [ip4][..udp] [.....10.0.0.149][48166] -> [.....10.0.0.227][57547] [SSDP][System][Acceptable] + new: [....66] [ip4][..udp] [.....10.0.0.149][51382] -> [.....10.0.0.227][57547] + detected: [....66] [ip4][..udp] [.....10.0.0.149][51382] -> [.....10.0.0.227][57547] [SSDP][System][Acceptable] + new: [....67] [ip4][..udp] [.....10.0.0.227][..137] -> [.....10.0.0.255][..137] + detected: [....67] [ip4][..udp] [.....10.0.0.227][..137] -> [.....10.0.0.255][..137] [NetBIOS][System][Acceptable] + update: [.....5] [ip6][icmp6] [..............fe80::2e7e:81ff:feb0:4aa1] -> [................................ff02::1] [ICMPV6][Network][Acceptable] + update: [....17] [ip4][.icmp] [.....10.0.0.227] -> [....75.75.76.76] [ICMP][Network][Acceptable] + update: [....23] [ip6][icmp6] [...............fe80::408:3e45:3abc:1552] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + new: [....68] [ip4][..udp] [.....10.0.0.149][.5353] -> [....224.0.0.251][.5353] + detected: [....68] [ip4][..udp] [.....10.0.0.149][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + detection-update: [....68] [ip4][..udp] [.....10.0.0.149][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + detection-update: [....68] [ip4][..udp] [.....10.0.0.149][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....69] [ip4][.icmp] [.......10.0.0.1] -> [......224.0.0.1] + detected: [....69] [ip4][.icmp] [.......10.0.0.1] -> [......224.0.0.1] [ICMP][Network][Acceptable] + idle: [....57] [ip4][..udp] [.....10.0.0.227][57547] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....25] [ip4][..tcp] [.....10.0.0.227][56884] -> [...184.25.56.77][...80] [HTTP][ConnCheck][Acceptable] + guessed: [.....1] [ip4][..tcp] [.....10.0.0.227][56885] -> [...184.25.56.53][...80] [HTTP][Web][Acceptable] + end: [.....1] [ip4][..tcp] [.....10.0.0.227][56885] -> [...184.25.56.53][...80] + idle: [....61] [ip4][..udp] [.....10.0.0.151][.1900] -> [.....10.0.0.227][57547] [SSDP][System][Acceptable] + idle: [....24] [ip4][..tcp] [.....10.0.0.227][56917] -> [...184.25.56.77][...80] [HTTP][ConnCheck][Acceptable] + idle: [....69] [ip4][.icmp] [.......10.0.0.1] -> [......224.0.0.1] [ICMP][Network][Acceptable] + idle: [....21] [ip4][....2] [.....10.0.0.213] -> [....224.0.0.251] [IGMP][Network][Acceptable] + idle: [....20] [ip4][....2] [.....10.0.0.213] -> [......224.0.0.2] [IGMP][Network][Acceptable] + idle: [.....6] [ip4][....2] [.....10.0.0.149] -> [....224.0.0.251] [IGMP][Network][Acceptable] + idle: [.....4] [ip4][....2] [.......10.0.0.1] -> [......224.0.0.1] [IGMP][Network][Acceptable] + idle: [....67] [ip4][..udp] [.....10.0.0.227][..137] -> [.....10.0.0.255][..137] [NetBIOS][System][Acceptable] + idle: [....29] [ip4][..tcp] [.....10.0.0.227][56910] -> [...35.201.124.9][..443] + idle: [....31] [ip4][..udp] [.....10.0.0.227][64972] -> [....75.75.75.75][...53] + idle: [....66] [ip4][..udp] [.....10.0.0.149][51382] -> [.....10.0.0.227][57547] [SSDP][System][Acceptable] + idle: [....26] [ip4][..udp] [.....10.0.0.227][54851] -> [....75.75.76.76][...53] [DNS][Network][Acceptable] + idle: [....22] [ip4][..udp] [.....10.0.0.227][.5353] -> [.....10.0.0.213][.5353] [MDNS][Network][Acceptable] + idle: [....16] [ip4][..udp] [.....10.0.0.227][63107] -> [....75.75.76.76][...53] [DNS][Network][Acceptable] + idle: [....34] [ip4][..udp] [.....10.0.0.227][52879] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + idle: [.....9] [ip4][..udp] [.....10.0.0.227][52879] -> [....75.75.76.76][...53] [DNS][Network][Acceptable] + idle: [....43] [ip4][..tcp] [.....10.0.0.227][56879] -> [..52.10.115.210][..443] + idle: [....58] [ip4][..udp] [.....10.0.0.227][54107] -> [....8.37.102.91][..443] [DTLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + idle: [....36] [ip4][..udp] [.....10.0.0.227][57017] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + idle: [.....5] [ip6][icmp6] [..............fe80::2e7e:81ff:feb0:4aa1] -> [................................ff02::1] [ICMPV6][Network][Acceptable] + idle: [....68] [ip4][..udp] [.....10.0.0.149][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + idle: [....18] [ip4][..udp] [.....10.0.0.213][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + idle: [....35] [ip4][..udp] [.....10.0.0.227][59222] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + idle: [....46] [ip4][..udp] [.....10.0.0.227][51060] -> [....75.75.75.75][...53] [DNS.ApplePush][Cloud][Acceptable] + idle: [....41] [ip4][..udp] [.....10.0.0.227][57253] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + idle: [....33] [ip4][..udp] [.....10.0.0.227][57261] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + idle: [....17] [ip4][.icmp] [.....10.0.0.227] -> [....75.75.76.76] [ICMP][Network][Acceptable] + idle: [.....3] [ip4][..tcp] [.....10.0.0.227][56320] -> [.....10.0.0.149][.8009] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port + idle: [....10] [ip4][..udp] [.....10.0.0.227][61387] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + idle: [....64] [ip4][..udp] [.....10.0.0.149][49816] -> [.....10.0.0.227][57547] [SSDP][System][Acceptable] + end: [....44] [ip4][..tcp] [.....10.0.0.227][56886] -> [..17.57.144.116][.5223] [TLS.Apple][Web][Safe] + RISK: Known Proto on Non Std Port + idle: [....30] [ip4][..tcp] [.....10.0.0.227][56921] -> [....8.37.96.194][.4287] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Self-signed Cert, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + idle: [....23] [ip6][icmp6] [...............fe80::408:3e45:3abc:1552] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + idle: [....32] [ip4][..udp] [.....10.0.0.227][61613] -> [....75.75.75.75][...53] + idle: [....47] [ip4][..udp] [.....10.0.0.227][59582] -> [....75.75.75.75][...53] [DNS.ApplePush][Cloud][Acceptable] + idle: [....59] [ip4][..udp] [.....10.0.0.149][50081] -> [.....10.0.0.227][57547] [SSDP][System][Acceptable] + guessed: [....51] [ip4][..tcp] [.....10.0.0.227][56871] -> [...8.37.103.196][..443] [TLS][Web][Safe] + end: [....51] [ip4][..tcp] [.....10.0.0.227][56871] -> [...8.37.103.196][..443] + idle: [....65] [ip4][..udp] [.....10.0.0.149][48166] -> [.....10.0.0.227][57547] [SSDP][System][Acceptable] + end: [....12] [ip4][..tcp] [.....10.0.0.227][56918] -> [....8.37.102.91][..443] + end: [....15] [ip4][..tcp] [.....10.0.0.227][56919] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, Missing SNI TLS Extn + idle: [....38] [ip4][..tcp] [.....10.0.0.227][56929] -> [....8.37.102.91][..443] [TLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + guessed: [....53] [ip4][..tcp] [.....10.0.0.227][56874] -> [.74.125.197.188][..443] [TLS.Google][Web][Acceptable] + end: [....53] [ip4][..tcp] [.....10.0.0.227][56874] -> [.74.125.197.188][..443] + idle: [....14] [ip4][..tcp] [.....10.0.0.227][56914] -> [..52.37.243.173][..443] + idle: [....13] [ip4][..tcp] [.....10.0.0.227][56915] -> [..52.37.243.173][..443] + guessed: [....39] [ip4][..tcp] [.....10.0.0.227][56865] -> [.....10.0.0.149][.8008] [CiscoVPN][VPN][Acceptable] + end: [....39] [ip4][..tcp] [.....10.0.0.227][56865] -> [.....10.0.0.149][.8008] + guessed: [.....2] [ip4][..tcp] [.....10.0.0.227][56916] -> [.....10.0.0.151][.8009] [AJP][Web][Acceptable] + idle: [.....2] [ip4][..tcp] [.....10.0.0.227][56916] -> [.....10.0.0.151][.8009] + not-detected: [....40] [ip4][..tcp] [.....10.0.0.227][56866] -> [.....10.0.0.151][.8060] [Unknown][Unrated] + end: [....40] [ip4][..tcp] [.....10.0.0.227][56866] -> [.....10.0.0.151][.8060] + idle: [....62] [ip4][..tcp] [.....10.0.0.227][56954] -> [.....10.0.0.149][.8008] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + idle: [....19] [ip6][..udp] [...............fe80::408:3e45:3abc:1552][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + idle: [....50] [ip4][..udp] [.....10.0.0.227][49781] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + end: [....63] [ip4][..tcp] [.....10.0.0.227][56955] -> [.....10.0.0.151][.8060] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + not-detected: [....60] [ip4][..udp] [.....10.0.0.227][52595] -> [.......10.0.0.1][..192] [Unknown][Unrated] + idle: [....60] [ip4][..udp] [.....10.0.0.227][52595] -> [.......10.0.0.1][..192] + idle: [....48] [ip4][..udp] [.....10.0.0.227][64193] -> [....75.75.75.75][...53] [DNS.ApplePush][Cloud][Acceptable] + idle: [....52] [ip4][..udp] [.....10.0.0.227][58074] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + end: [....28] [ip4][..tcp] [.....10.0.0.227][56920] -> [...99.86.34.156][..443] [TLS.Slack][Collaborative][Acceptable] + idle: [....55] [ip4][..udp] [.....10.0.0.149][38616] -> [.....10.0.0.227][61328] [SSDP][System][Acceptable] + guessed: [....37] [ip4][..tcp] [.....10.0.0.227][56881] -> [.162.222.43.153][..443] [TLS][Web][Safe] + idle: [....37] [ip4][..tcp] [.....10.0.0.227][56881] -> [.162.222.43.153][..443] + idle: [....49] [ip4][..udp] [.....10.0.0.227][51990] -> [....75.75.75.75][...53] [DNS][Network][Acceptable] + idle: [....27] [ip4][..udp] [.....10.0.0.227][58155] -> [....75.75.76.76][...53] [DNS.Slack][Collaborative][Acceptable] + idle: [....54] [ip4][..udp] [.....10.0.0.227][61328] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....11] [ip4][..udp] [.....10.0.0.227][62322] -> [....75.75.76.76][...53] [DNS][Network][Acceptable] + idle: [....56] [ip4][..udp] [.....10.0.0.151][.1900] -> [.....10.0.0.227][61328] [SSDP][System][Acceptable] + idle: [....45] [ip4][..udp] [.....10.0.0.227][60341] -> [....75.75.75.75][...53] [DNS.Apple][Web][Safe] + idle: [....42] [ip4][..udp] [.....10.0.0.227][62427] -> [....75.75.75.75][...53] [DNS][ConnCheck][Acceptable] + idle: [.....8] [ip4][....2] [.....10.0.0.149] -> [239.255.255.250] [IGMP][Network][Acceptable] + idle: [.....7] [ip4][....2] [.....10.0.0.149] -> [...239.255.3.22] [IGMP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/anydesk.pcapng.out b/test/results/flow-info/anydesk.pcapng.out new file mode 100644 index 000000000..516685020 --- /dev/null +++ b/test/results/flow-info/anydesk.pcapng.out @@ -0,0 +1,75 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [192.168.149.129][36351] -> [..51.83.239.144][...80] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [192.168.149.129][36351] -> [..51.83.239.144][...80] [TLS.AnyDesk][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, Desktop/File Sharing + new: [.....2] [ip4][..tcp] [192.168.149.129][43535] -> [..51.83.238.219][...80] + detected: [.....2] [ip4][..tcp] [192.168.149.129][43535] -> [..51.83.238.219][...80] [TLS.AnyDesk][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn, Desktop/File Sharing + detection-update: [.....2] [ip4][..tcp] [192.168.149.129][43535] -> [..51.83.238.219][...80] [TLS.AnyDesk][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn, Desktop/File Sharing + detection-update: [.....2] [ip4][..tcp] [192.168.149.129][43535] -> [..51.83.238.219][...80] [TLS.AnyDesk][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn, Desktop/File Sharing + analyse: [.....2] [ip4][..tcp] [192.168.149.129][43535] -> [..51.83.238.219][...80] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.603| 0.177| 0.394] + [IAT(c->s)...: 0.000| 1.216| 0.138| 0.310][IAT(s->c)...: 0.000| 1.603| 0.208| 0.450] + [PKTLEN(c->s): 54.000|1514.000| 435.100| 567.000][PKTLEN(s->c): 60.000|1514.000| 381.600| 543.300] + [BINS(c->s)..: 8,0,1,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 9,2,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,2,0,0,0,0,1,0,0] + detection-update: [.....2] [ip4][..tcp] [192.168.149.129][43535] -> [..51.83.238.219][...80] [TLS.AnyDesk][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn, Desktop/File Sharing + DAEMON-EVENT: [Processed: 6963 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 3|updates: 0] + new: [.....3] [ip4][..udp] [..192.168.1.187][59511] -> [....192.168.1.1][...53] + detected: [.....3] [ip4][..udp] [..192.168.1.187][59511] -> [....192.168.1.1][...53] [DNS.AnyDesk][RemoteAccess][Acceptable] + detection-update: [.....3] [ip4][..udp] [..192.168.1.187][59511] -> [....192.168.1.1][...53] [DNS.AnyDesk][RemoteAccess][Acceptable] + new: [.....4] [ip4][..udp] [..192.168.1.187][55376] -> [....192.168.1.1][...53] + detected: [.....4] [ip4][..udp] [..192.168.1.187][55376] -> [....192.168.1.1][...53] [DNS.AnyDesk][RemoteAccess][Acceptable] + detection-update: [.....4] [ip4][..udp] [..192.168.1.187][55376] -> [....192.168.1.1][...53] [DNS.AnyDesk][RemoteAccess][Acceptable] + idle: [.....1] [ip4][..tcp] [192.168.149.129][36351] -> [..51.83.239.144][...80] [TLS.AnyDesk][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, Desktop/File Sharing + idle: [.....2] [ip4][..tcp] [192.168.149.129][43535] -> [..51.83.238.219][...80] [TLS.AnyDesk][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn, Desktop/File Sharing + new: [.....5] [ip4][..tcp] [..192.168.1.187][54164] -> [..192.168.1.178][.7070] + detected: [.....5] [ip4][..tcp] [..192.168.1.187][54164] -> [..192.168.1.178][.7070] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....5] [ip4][..tcp] [..192.168.1.187][54164] -> [..192.168.1.178][.7070] [TLS.AnyDesk][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn, Desktop/File Sharing + new: [.....6] [ip4][..tcp] [..192.168.1.178][52039] -> [..192.168.1.187][.7070] + detected: [.....6] [ip4][..tcp] [..192.168.1.178][52039] -> [..192.168.1.187][.7070] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....6] [ip4][..tcp] [..192.168.1.178][52039] -> [..192.168.1.187][.7070] [TLS.AnyDesk][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn, Desktop/File Sharing + analyse: [.....5] [ip4][..tcp] [..192.168.1.187][54164] -> [..192.168.1.178][.7070] [TLS.AnyDesk][RemoteAccess][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.022| 0.471| 0.869] + [IAT(c->s)...: 0.000| 2.967| 0.489| 0.871][IAT(s->c)...: 0.000| 3.022| 0.454| 0.866] + [PKTLEN(c->s): 54.000|3980.000| 462.900|1028.200][PKTLEN(s->c): 60.000|1514.000| 209.500| 377.600] + [BINS(c->s)..: 6,4,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1] + [BINS(s->c)..: 11,3,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + DAEMON-EVENT: [Processed: 9484 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 7|updates: 0] + new: [.....7] [ip4][..tcp] [..192.168.1.128][48260] -> [195.181.174.176][..443] + detected: [.....7] [ip4][..tcp] [..192.168.1.128][48260] -> [195.181.174.176][..443] [TLS][Web][Safe] + RISK: Missing SNI TLS Extn + detection-update: [.....7] [ip4][..tcp] [..192.168.1.128][48260] -> [195.181.174.176][..443] [TLS][Web][Safe] + RISK: Missing SNI TLS Extn + detection-update: [.....7] [ip4][..tcp] [..192.168.1.128][48260] -> [195.181.174.176][..443] [TLS.AnyDesk][RemoteAccess][Acceptable] + RISK: Missing SNI TLS Extn, Desktop/File Sharing + analyse: [.....7] [ip4][..tcp] [..192.168.1.128][48260] -> [195.181.174.176][..443] [TLS.AnyDesk][RemoteAccess][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 8.445| 0.583| 2.064] + [IAT(c->s)...: 0.000| 8.428| 0.592| 2.095][IAT(s->c)...: 0.000| 8.445| 0.575| 2.034] + [PKTLEN(c->s): 66.000|1514.000| 430.100| 552.300][PKTLEN(s->c): 66.000|1514.000| 255.800| 413.300] + [BINS(c->s)..: 8,0,2,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 7,4,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + end: [.....6] [ip4][..tcp] [..192.168.1.178][52039] -> [..192.168.1.187][.7070] + idle: [.....5] [ip4][..tcp] [..192.168.1.187][54164] -> [..192.168.1.178][.7070] [TLS.AnyDesk][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn, Desktop/File Sharing + idle: [.....4] [ip4][..udp] [..192.168.1.187][55376] -> [....192.168.1.1][...53] [DNS.AnyDesk][RemoteAccess][Acceptable] + idle: [.....3] [ip4][..udp] [..192.168.1.187][59511] -> [....192.168.1.1][...53] [DNS.AnyDesk][RemoteAccess][Acceptable] + idle: [.....7] [ip4][..tcp] [..192.168.1.128][48260] -> [195.181.174.176][..443] [TLS.AnyDesk][RemoteAccess][Acceptable] + RISK: Missing SNI TLS Extn, Desktop/File Sharing + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/avast.pcap.out b/test/results/flow-info/avast.pcap.out new file mode 100644 index 000000000..952202340 --- /dev/null +++ b/test/results/flow-info/avast.pcap.out @@ -0,0 +1,70 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.2.100][64357] -> [.....5.62.54.29][...80] + detected: [.....1] [ip4][..tcp] [..192.168.2.100][64357] -> [.....5.62.54.29][...80] [AVAST][Network][Safe] + DAEMON-EVENT: [Processed: 13 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [..192.168.2.100][64701] -> [.....5.62.53.53][...80] + detected: [.....2] [ip4][..tcp] [..192.168.2.100][64701] -> [.....5.62.53.53][...80] [AVAST][Network][Safe] + idle: [.....1] [ip4][..tcp] [..192.168.2.100][64357] -> [.....5.62.54.29][...80] [AVAST][Network][Safe] + DAEMON-EVENT: [Processed: 28 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + DAEMON-EVENT: [Processed: 30 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..tcp] [..192.168.2.100][64903] -> [.....5.62.53.53][...80] + detected: [.....3] [ip4][..tcp] [..192.168.2.100][64903] -> [.....5.62.53.53][...80] [AVAST][Network][Safe] + idle: [.....2] [ip4][..tcp] [..192.168.2.100][64701] -> [.....5.62.53.53][...80] [AVAST][Network][Safe] + DAEMON-EVENT: [Processed: 39 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + DAEMON-EVENT: [Processed: 43 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + DAEMON-EVENT: [Processed: 45 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....4] [ip4][..tcp] [..192.168.2.100][58030] -> [.....5.62.54.89][...80] + detected: [.....4] [ip4][..tcp] [..192.168.2.100][58030] -> [.....5.62.54.89][...80] [AVAST][Network][Safe] + idle: [.....3] [ip4][..tcp] [..192.168.2.100][64903] -> [.....5.62.53.53][...80] [AVAST][Network][Safe] + DAEMON-EVENT: [Processed: 56 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + DAEMON-EVENT: [Processed: 60 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..tcp] [..192.168.2.100][49758] -> [.....5.62.53.53][...80] + detected: [.....5] [ip4][..tcp] [..192.168.2.100][49758] -> [.....5.62.53.53][...80] [AVAST][Network][Safe] + idle: [.....4] [ip4][..tcp] [..192.168.2.100][58030] -> [.....5.62.54.89][...80] [AVAST][Network][Safe] + DAEMON-EVENT: [Processed: 69 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + DAEMON-EVENT: [Processed: 73 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + DAEMON-EVENT: [Processed: 75 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....6] [ip4][..tcp] [..192.168.2.100][49532] -> [.....5.62.54.89][...80] + detected: [.....6] [ip4][..tcp] [..192.168.2.100][49532] -> [.....5.62.54.89][...80] [AVAST][Network][Safe] + idle: [.....5] [ip4][..tcp] [..192.168.2.100][49758] -> [.....5.62.53.53][...80] [AVAST][Network][Safe] + DAEMON-EVENT: [Processed: 88 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + DAEMON-EVENT: [Processed: 90 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....7] [ip4][..tcp] [..192.168.2.100][58412] -> [.....5.62.54.29][...80] + detected: [.....7] [ip4][..tcp] [..192.168.2.100][58412] -> [.....5.62.54.29][...80] [AVAST][Network][Safe] + idle: [.....6] [ip4][..tcp] [..192.168.2.100][49532] -> [.....5.62.54.89][...80] [AVAST][Network][Safe] + new: [.....8] [ip4][..tcp] [..192.168.2.100][54405] -> [.....5.62.54.89][...80] + detected: [.....8] [ip4][..tcp] [..192.168.2.100][54405] -> [.....5.62.54.89][...80] [AVAST][Network][Safe] + DAEMON-EVENT: [Processed: 109 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + end: [.....7] [ip4][..tcp] [..192.168.2.100][58412] -> [.....5.62.54.29][...80] [AVAST][Network][Safe] + DAEMON-EVENT: [Processed: 112 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....9] [ip4][..tcp] [..192.168.2.100][57727] -> [.....5.62.54.29][...80] + detected: [.....9] [ip4][..tcp] [..192.168.2.100][57727] -> [.....5.62.54.29][...80] [AVAST][Network][Safe] + end: [.....8] [ip4][..tcp] [..192.168.2.100][54405] -> [.....5.62.54.89][...80] [AVAST][Network][Safe] + DAEMON-EVENT: [Processed: 123 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 9|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + DAEMON-EVENT: [Processed: 127 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 9|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....10] [ip4][..tcp] [..192.168.2.100][62741] -> [....5.62.53.131][...80] + detected: [....10] [ip4][..tcp] [..192.168.2.100][62741] -> [....5.62.53.131][...80] [AVAST][Network][Safe] + idle: [.....9] [ip4][..tcp] [..192.168.2.100][57727] -> [.....5.62.54.29][...80] [AVAST][Network][Safe] + idle: [....10] [ip4][..tcp] [..192.168.2.100][62741] -> [....5.62.53.131][...80] [AVAST][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/avast_securedns.pcapng.out b/test/results/flow-info/avast_securedns.pcapng.out new file mode 100644 index 000000000..81b0d2189 --- /dev/null +++ b/test/results/flow-info/avast_securedns.pcapng.out @@ -0,0 +1,154 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][57970] -> [.181.214.35.149][..443] + detected: [.....1] [ip4][..udp] [..192.168.2.100][57970] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: [Processed: 2 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..udp] [..192.168.2.100][61201] -> [.181.214.35.149][..443] + detected: [.....2] [ip4][..udp] [..192.168.2.100][61201] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [.....3] [ip4][..udp] [..192.168.2.100][60835] -> [.181.214.35.149][..443] + detected: [.....3] [ip4][..udp] [..192.168.2.100][60835] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [.....1] [ip4][..udp] [..192.168.2.100][57970] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [.....4] [ip4][..udp] [..192.168.2.100][62775] -> [.181.214.35.149][..443] + detected: [.....4] [ip4][..udp] [..192.168.2.100][62775] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: [Processed: 8 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..udp] [..192.168.2.100][56581] -> [.181.214.35.149][..443] + detected: [.....5] [ip4][..udp] [..192.168.2.100][56581] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [.....6] [ip4][..udp] [..192.168.2.100][56765] -> [.181.214.35.149][..443] + detected: [.....6] [ip4][..udp] [..192.168.2.100][56765] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [.....2] [ip4][..udp] [..192.168.2.100][61201] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [.....4] [ip4][..udp] [..192.168.2.100][62775] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [.....3] [ip4][..udp] [..192.168.2.100][60835] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: [Processed: 12 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....7] [ip4][..udp] [..192.168.2.100][50581] -> [.181.214.35.149][..443] + detected: [.....7] [ip4][..udp] [..192.168.2.100][50581] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [.....8] [ip4][..udp] [..192.168.2.100][61107] -> [.181.214.35.149][..443] + detected: [.....8] [ip4][..udp] [..192.168.2.100][61107] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [.....5] [ip4][..udp] [..192.168.2.100][56581] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [.....6] [ip4][..udp] [..192.168.2.100][56765] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: [Processed: 16 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....9] [ip4][..udp] [..192.168.2.100][64954] -> [.181.214.35.149][..443] + detected: [.....9] [ip4][..udp] [..192.168.2.100][64954] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....10] [ip4][..udp] [..192.168.2.100][59621] -> [.181.214.35.149][..443] + detected: [....10] [ip4][..udp] [..192.168.2.100][59621] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [.....7] [ip4][..udp] [..192.168.2.100][50581] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [.....8] [ip4][..udp] [..192.168.2.100][61107] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: [Processed: 20 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 10|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....11] [ip4][..udp] [..192.168.2.100][52485] -> [.181.214.35.149][..443] + detected: [....11] [ip4][..udp] [..192.168.2.100][52485] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....12] [ip4][..udp] [..192.168.2.100][54938] -> [.181.214.35.149][..443] + detected: [....12] [ip4][..udp] [..192.168.2.100][54938] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....10] [ip4][..udp] [..192.168.2.100][59621] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [.....9] [ip4][..udp] [..192.168.2.100][64954] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: [Processed: 24 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 12|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....13] [ip4][..udp] [..192.168.2.100][56839] -> [.181.214.35.149][..443] + detected: [....13] [ip4][..udp] [..192.168.2.100][56839] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....11] [ip4][..udp] [..192.168.2.100][52485] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....12] [ip4][..udp] [..192.168.2.100][54938] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: [Processed: 26 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 13|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....14] [ip4][..udp] [..192.168.2.100][58155] -> [.181.214.35.149][..443] + detected: [....14] [ip4][..udp] [..192.168.2.100][58155] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....15] [ip4][..udp] [..192.168.2.100][64487] -> [.181.214.35.149][..443] + detected: [....15] [ip4][..udp] [..192.168.2.100][64487] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....16] [ip4][..udp] [..192.168.2.100][49704] -> [.181.214.35.149][..443] + detected: [....16] [ip4][..udp] [..192.168.2.100][49704] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....13] [ip4][..udp] [..192.168.2.100][56839] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....17] [ip4][..udp] [..192.168.2.100][55311] -> [.181.214.35.149][..443] + detected: [....17] [ip4][..udp] [..192.168.2.100][55311] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....18] [ip4][..udp] [..192.168.2.100][56111] -> [.181.214.35.149][..443] + detected: [....18] [ip4][..udp] [..192.168.2.100][56111] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: [Processed: 36 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 18|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....19] [ip4][..udp] [..192.168.2.100][64494] -> [.181.214.35.149][..443] + detected: [....19] [ip4][..udp] [..192.168.2.100][64494] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....20] [ip4][..udp] [..192.168.2.100][51415] -> [.181.214.35.149][..443] + detected: [....20] [ip4][..udp] [..192.168.2.100][51415] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....17] [ip4][..udp] [..192.168.2.100][55311] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....16] [ip4][..udp] [..192.168.2.100][49704] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....14] [ip4][..udp] [..192.168.2.100][58155] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....18] [ip4][..udp] [..192.168.2.100][56111] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....15] [ip4][..udp] [..192.168.2.100][64487] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....21] [ip4][..udp] [..192.168.2.100][63776] -> [.181.214.35.149][..443] + detected: [....21] [ip4][..udp] [..192.168.2.100][63776] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....22] [ip4][..udp] [..192.168.2.100][50008] -> [.181.214.35.149][..443] + detected: [....22] [ip4][..udp] [..192.168.2.100][50008] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....23] [ip4][..udp] [..192.168.2.100][49737] -> [.181.214.35.149][..443] + detected: [....23] [ip4][..udp] [..192.168.2.100][49737] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + update: [....20] [ip4][..udp] [..192.168.2.100][51415] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + update: [....19] [ip4][..udp] [..192.168.2.100][64494] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....24] [ip4][..udp] [..192.168.2.100][51887] -> [.181.214.35.149][..443] + detected: [....24] [ip4][..udp] [..192.168.2.100][51887] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....25] [ip4][..udp] [..192.168.2.100][60127] -> [.181.214.35.149][..443] + detected: [....25] [ip4][..udp] [..192.168.2.100][60127] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....26] [ip4][..udp] [..192.168.2.100][54546] -> [.181.214.35.149][..443] + detected: [....26] [ip4][..udp] [..192.168.2.100][54546] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + update: [....20] [ip4][..udp] [..192.168.2.100][51415] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + update: [....21] [ip4][..udp] [..192.168.2.100][63776] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + update: [....23] [ip4][..udp] [..192.168.2.100][49737] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + update: [....22] [ip4][..udp] [..192.168.2.100][50008] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + update: [....19] [ip4][..udp] [..192.168.2.100][64494] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: [Processed: 52 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 8 / 26|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 7] + new: [....27] [ip4][..udp] [..192.168.2.100][64432] -> [.181.214.35.149][..443] + detected: [....27] [ip4][..udp] [..192.168.2.100][64432] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....20] [ip4][..udp] [..192.168.2.100][51415] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....21] [ip4][..udp] [..192.168.2.100][63776] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....23] [ip4][..udp] [..192.168.2.100][49737] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....24] [ip4][..udp] [..192.168.2.100][51887] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....25] [ip4][..udp] [..192.168.2.100][60127] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....22] [ip4][..udp] [..192.168.2.100][50008] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....19] [ip4][..udp] [..192.168.2.100][64494] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....26] [ip4][..udp] [..192.168.2.100][54546] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....28] [ip4][..udp] [..192.168.2.100][59613] -> [.181.214.35.149][..443] + detected: [....28] [ip4][..udp] [..192.168.2.100][59613] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....29] [ip4][..udp] [..192.168.2.100][65063] -> [.181.214.35.149][..443] + detected: [....29] [ip4][..udp] [..192.168.2.100][65063] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....30] [ip4][..udp] [..192.168.2.100][51929] -> [.181.214.35.149][..443] + detected: [....30] [ip4][..udp] [..192.168.2.100][51929] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....31] [ip4][..udp] [..192.168.2.100][52417] -> [.181.214.35.149][..443] + detected: [....31] [ip4][..udp] [..192.168.2.100][52417] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + update: [....28] [ip4][..udp] [..192.168.2.100][59613] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + update: [....27] [ip4][..udp] [..192.168.2.100][64432] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: [Processed: 62 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 31|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 9] + new: [....32] [ip4][..udp] [..192.168.2.100][59474] -> [.181.214.35.149][..443] + detected: [....32] [ip4][..udp] [..192.168.2.100][59474] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....33] [ip4][..udp] [..192.168.2.100][53839] -> [.181.214.35.149][..443] + detected: [....33] [ip4][..udp] [..192.168.2.100][53839] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....28] [ip4][..udp] [..192.168.2.100][59613] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....30] [ip4][..udp] [..192.168.2.100][51929] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....27] [ip4][..udp] [..192.168.2.100][64432] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....31] [ip4][..udp] [..192.168.2.100][52417] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....29] [ip4][..udp] [..192.168.2.100][65063] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: [Processed: 66 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 33|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 9] + new: [....34] [ip4][..udp] [..192.168.2.100][55948] -> [.181.214.35.149][..443] + detected: [....34] [ip4][..udp] [..192.168.2.100][55948] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....35] [ip4][..udp] [..192.168.2.100][51383] -> [.181.214.35.149][..443] + detected: [....35] [ip4][..udp] [..192.168.2.100][51383] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....32] [ip4][..udp] [..192.168.2.100][59474] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....33] [ip4][..udp] [..192.168.2.100][53839] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....36] [ip4][..udp] [..192.168.2.100][64700] -> [.181.214.35.149][..443] + detected: [....36] [ip4][..udp] [..192.168.2.100][64700] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....37] [ip4][..udp] [..192.168.2.100][54549] -> [.181.214.35.149][..443] + detected: [....37] [ip4][..udp] [..192.168.2.100][54549] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: [Processed: 73 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 37|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 9] + new: [....38] [ip4][..udp] [..192.168.2.100][54760] -> [.181.214.35.149][..443] + detected: [....38] [ip4][..udp] [..192.168.2.100][54760] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + new: [....39] [ip4][..udp] [..192.168.2.100][49152] -> [.181.214.35.149][..443] + detected: [....39] [ip4][..udp] [..192.168.2.100][49152] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....39] [ip4][..udp] [..192.168.2.100][49152] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....35] [ip4][..udp] [..192.168.2.100][51383] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....34] [ip4][..udp] [..192.168.2.100][55948] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....36] [ip4][..udp] [..192.168.2.100][64700] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....37] [ip4][..udp] [..192.168.2.100][54549] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + idle: [....38] [ip4][..udp] [..192.168.2.100][54760] -> [.181.214.35.149][..443] [AVASTSecureDNS][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/bad-dns-traffic.pcap.out b/test/results/flow-info/bad-dns-traffic.pcap.out new file mode 100644 index 000000000..04e10c0d4 --- /dev/null +++ b/test/results/flow-info/bad-dns-traffic.pcap.out @@ -0,0 +1,48 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.43.91][35966] -> [........4.2.2.4][...53] + detected: [.....1] [ip4][..udp] [..192.168.43.91][35966] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name + detection-update: [.....1] [ip4][..udp] [..192.168.43.91][35966] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name + detection-update: [.....1] [ip4][..udp] [..192.168.43.91][35966] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + new: [.....2] [ip4][..udp] [..192.168.43.91][56354] -> [........4.2.2.4][...53] + detected: [.....2] [ip4][..udp] [..192.168.43.91][56354] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name + detection-update: [.....2] [ip4][..udp] [..192.168.43.91][56354] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name + detection-update: [.....2] [ip4][..udp] [..192.168.43.91][56354] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name + detection-update: [.....2] [ip4][..udp] [..192.168.43.91][56354] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name + detection-update: [.....2] [ip4][..udp] [..192.168.43.91][56354] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name + detection-update: [.....2] [ip4][..udp] [..192.168.43.91][56354] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + analyse: [.....2] [ip4][..udp] [..192.168.43.91][56354] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.063| 4.102| 1.074| 0.689] + [IAT(c->s)...: 0.073| 1.042| 0.918| 0.283][IAT(s->c)...: 0.063| 4.102| 1.290| 0.970] + [PKTLEN(c->s): 95.000| 290.000| 115.300| 44.400][PKTLEN(s->c): 126.000| 323.000| 149.500| 52.200] + [BINS(c->s)..: 0,13,5,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,10,1,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....1] [ip4][..udp] [..192.168.43.91][35966] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + update: [.....2] [ip4][..udp] [..192.168.43.91][56354] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + update: [.....1] [ip4][..udp] [..192.168.43.91][35966] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + new: [.....3] [ip4][..udp] [..192.168.43.91][46961] -> [........4.2.2.4][...53] + detected: [.....3] [ip4][..udp] [..192.168.43.91][46961] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name + detection-update: [.....3] [ip4][..udp] [..192.168.43.91][46961] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + idle: [.....3] [ip4][..udp] [..192.168.43.91][46961] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + idle: [.....2] [ip4][..udp] [..192.168.43.91][56354] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + idle: [.....1] [ip4][..udp] [..192.168.43.91][35966] -> [........4.2.2.4][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/badpackets.pcap.out b/test/results/flow-info/badpackets.pcap.out new file mode 100644 index 000000000..fb062506b --- /dev/null +++ b/test/results/flow-info/badpackets.pcap.out @@ -0,0 +1,106 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/bitcoin.pcap.out b/test/results/flow-info/bitcoin.pcap.out new file mode 100644 index 000000000..764935325 --- /dev/null +++ b/test/results/flow-info/bitcoin.pcap.out @@ -0,0 +1,68 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.142][55317] -> [188.165.213.169][.8333] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [..192.168.1.142][55317] -> [188.165.213.169][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [.....2] [ip4][..tcp] [..192.168.1.142][55328] -> [..69.118.54.122][.8333] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [..192.168.1.142][55328] -> [..69.118.54.122][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [.....2] [ip4][..tcp] [..192.168.1.142][55328] -> [..69.118.54.122][.8333] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 141.657| 9.231| 28.185] + [IAT(c->s)...: 141.657| 141.657| 141.657| 0.000][IAT(s->c)...: 0.000| 71.060| 4.817| 14.725] + [PKTLEN(c->s): 110.000| 171.000| 140.500| 30.500][PKTLEN(s->c): 86.000|1514.000|1267.100| 517.100] + [BINS(c->s)..: 0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,3,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,0,0] + new: [.....3] [ip4][..tcp] [..192.168.1.142][55348] -> [..74.89.181.229][.8333] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [..192.168.1.142][55348] -> [..74.89.181.229][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [.....3] [ip4][..tcp] [..192.168.1.142][55348] -> [..74.89.181.229][.8333] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 100.111| 6.495| 19.445] + [IAT(c->s)...: 0.312| 100.111| 50.211| 49.900][IAT(s->c)...: 0.000| 39.766| 3.480| 9.569] + [PKTLEN(c->s): 110.000| 171.000| 134.000| 26.500][PKTLEN(s->c): 86.000|1514.000|1276.400| 520.700] + [BINS(c->s)..: 0,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,2,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,0,0] + new: [.....4] [ip4][..tcp] [..192.168.1.142][55383] -> [....66.68.83.22][.8333] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [..192.168.1.142][55383] -> [....66.68.83.22][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + DAEMON-EVENT: [Processed: 214 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + analyse: [.....4] [ip4][..tcp] [..192.168.1.142][55383] -> [....66.68.83.22][.8333] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 134.322| 8.966| 25.482] + [IAT(c->s)...: 0.000| 134.322| 16.848| 44.401][IAT(s->c)...: 0.000| 45.583| 6.224| 12.662] + [PKTLEN(c->s): 110.000|1514.000|1077.300| 619.900][PKTLEN(s->c): 86.000|1514.000|1094.400| 634.600] + [BINS(c->s)..: 0,1,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0] + [BINS(s->c)..: 1,4,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,0,0] + new: [.....5] [ip4][..tcp] [..192.168.1.142][55400] -> [.195.218.16.178][.8333] [MIDSTREAM] + detected: [.....5] [ip4][..tcp] [..192.168.1.142][55400] -> [.195.218.16.178][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [.....5] [ip4][..tcp] [..192.168.1.142][55400] -> [.195.218.16.178][.8333] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 41.186| 2.780| 7.976] + [IAT(c->s)...: 0.000| 41.186| 8.435| 16.376][IAT(s->c)...: 0.002| 17.195| 1.693| 4.116] + [PKTLEN(c->s): 110.000|1514.000|1037.000| 635.500][PKTLEN(s->c): 86.000|1514.000|1139.800| 616.700] + [BINS(c->s)..: 0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,3,0,0] + [BINS(s->c)..: 1,5,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,0,0] + DAEMON-EVENT: [Processed: 494 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....6] [ip4][..tcp] [..192.168.1.142][55487] -> [.184.58.165.119][.8333] [MIDSTREAM] + detected: [.....6] [ip4][..tcp] [..192.168.1.142][55487] -> [.184.58.165.119][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + DAEMON-EVENT: [Processed: 621 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 6 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + idle: [.....3] [ip4][..tcp] [..192.168.1.142][55348] -> [..74.89.181.229][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....5] [ip4][..tcp] [..192.168.1.142][55400] -> [.195.218.16.178][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....6] [ip4][..tcp] [..192.168.1.142][55487] -> [.184.58.165.119][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....4] [ip4][..tcp] [..192.168.1.142][55383] -> [....66.68.83.22][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....1] [ip4][..tcp] [..192.168.1.142][55317] -> [188.165.213.169][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....2] [ip4][..tcp] [..192.168.1.142][55328] -> [..69.118.54.122][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/bittorrent.pcap.out b/test/results/flow-info/bittorrent.pcap.out new file mode 100644 index 000000000..d58d8fff2 --- /dev/null +++ b/test/results/flow-info/bittorrent.pcap.out @@ -0,0 +1,127 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....192.168.1.3][52888] -> [..82.58.216.115][38305] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [....192.168.1.3][52888] -> [..82.58.216.115][38305] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....2] [ip4][..tcp] [....192.168.1.3][52887] -> [....82.57.97.83][53137] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [....192.168.1.3][52887] -> [....82.57.97.83][53137] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....3] [ip4][..tcp] [....192.168.1.3][52895] -> [.83.216.184.241][51413] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [....192.168.1.3][52895] -> [.83.216.184.241][51413] [BitTorrent][Download][Acceptable] + new: [.....4] [ip4][..tcp] [....192.168.1.3][52896] -> [....79.53.228.2][14627] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [....192.168.1.3][52896] -> [....79.53.228.2][14627] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....5] [ip4][..tcp] [....192.168.1.3][52894] -> [..120.62.33.241][39332] [MIDSTREAM] + detected: [.....5] [ip4][..tcp] [....192.168.1.3][52894] -> [..120.62.33.241][39332] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....6] [ip4][..tcp] [....192.168.1.3][52897] -> [...151.26.95.30][22673] [MIDSTREAM] + detected: [.....6] [ip4][..tcp] [....192.168.1.3][52897] -> [...151.26.95.30][22673] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....7] [ip4][..tcp] [....192.168.1.3][52893] -> [...79.55.129.22][12097] [MIDSTREAM] + detected: [.....7] [ip4][..tcp] [....192.168.1.3][52893] -> [...79.55.129.22][12097] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....8] [ip4][..tcp] [....192.168.1.3][52903] -> [..198.100.146.9][60163] [MIDSTREAM] + detected: [.....8] [ip4][..tcp] [....192.168.1.3][52903] -> [..198.100.146.9][60163] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....9] [ip4][..tcp] [....192.168.1.3][52902] -> [.190.103.195.56][46633] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [....192.168.1.3][52902] -> [.190.103.195.56][46633] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....10] [ip4][..tcp] [....192.168.1.3][52907] -> [..82.58.216.115][38305] [MIDSTREAM] + detected: [....10] [ip4][..tcp] [....192.168.1.3][52907] -> [..82.58.216.115][38305] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....11] [ip4][..tcp] [....192.168.1.3][52906] -> [....82.57.97.83][53137] [MIDSTREAM] + detected: [....11] [ip4][..tcp] [....192.168.1.3][52906] -> [....82.57.97.83][53137] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....12] [ip4][..tcp] [....192.168.1.3][52911] -> [...151.26.95.30][22673] [MIDSTREAM] + detected: [....12] [ip4][..tcp] [....192.168.1.3][52911] -> [...151.26.95.30][22673] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....13] [ip4][..tcp] [....192.168.1.3][52912] -> [.151.72.255.163][59928] [MIDSTREAM] + detected: [....13] [ip4][..tcp] [....192.168.1.3][52912] -> [.151.72.255.163][59928] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....14] [ip4][..tcp] [....192.168.1.3][52909] -> [....79.53.228.2][14627] [MIDSTREAM] + detected: [....14] [ip4][..tcp] [....192.168.1.3][52909] -> [....79.53.228.2][14627] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....15] [ip4][..tcp] [....192.168.1.3][52910] -> [..120.62.33.241][39332] [MIDSTREAM] + detected: [....15] [ip4][..tcp] [....192.168.1.3][52910] -> [..120.62.33.241][39332] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....16] [ip4][..tcp] [....192.168.1.3][52908] -> [...79.55.129.22][12097] [MIDSTREAM] + detected: [....16] [ip4][..tcp] [....192.168.1.3][52908] -> [...79.55.129.22][12097] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....17] [ip4][..tcp] [....192.168.1.3][52915] -> [..198.100.146.9][60163] [MIDSTREAM] + detected: [....17] [ip4][..tcp] [....192.168.1.3][52915] -> [..198.100.146.9][60163] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....18] [ip4][..tcp] [....192.168.1.3][52914] -> [.190.103.195.56][46633] [MIDSTREAM] + detected: [....18] [ip4][..tcp] [....192.168.1.3][52914] -> [.190.103.195.56][46633] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....19] [ip4][..tcp] [....192.168.1.3][52917] -> [..151.15.48.189][47001] [MIDSTREAM] + detected: [....19] [ip4][..tcp] [....192.168.1.3][52917] -> [..151.15.48.189][47001] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....20] [ip4][..tcp] [....192.168.1.3][52921] -> [..95.234.159.16][41205] [MIDSTREAM] + detected: [....20] [ip4][..tcp] [....192.168.1.3][52921] -> [..95.234.159.16][41205] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....21] [ip4][..tcp] [....192.168.1.3][52922] -> [..95.237.193.34][11321] [MIDSTREAM] + detected: [....21] [ip4][..tcp] [....192.168.1.3][52922] -> [..95.237.193.34][11321] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [....17] [ip4][..tcp] [....192.168.1.3][52915] -> [..198.100.146.9][60163] [BitTorrent][Download][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.012| 0.920| 0.247| 0.229] + [IAT(c->s)...: 0.012| 0.780| 0.345| 0.226][IAT(s->c)...: 0.013| 0.920| 0.193| 0.212] + [PKTLEN(c->s): 83.000| 242.000| 142.300| 59.300][PKTLEN(s->c): 80.000|1506.000|1092.800| 551.900] + [BINS(c->s)..: 5,1,1,1,3,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,1,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,12,0,0] + new: [....22] [ip4][..tcp] [....192.168.1.3][52927] -> [.83.216.184.241][51413] [MIDSTREAM] + detected: [....22] [ip4][..tcp] [....192.168.1.3][52927] -> [.83.216.184.241][51413] [BitTorrent][Download][Acceptable] + new: [....23] [ip4][..tcp] [....192.168.1.3][52926] -> [..93.65.249.100][31336] [MIDSTREAM] + detected: [....23] [ip4][..tcp] [....192.168.1.3][52926] -> [..93.65.249.100][31336] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [....24] [ip4][..tcp] [....192.168.1.3][52925] -> [..93.65.227.100][19116] [MIDSTREAM] + detected: [....24] [ip4][..tcp] [....192.168.1.3][52925] -> [..93.65.227.100][19116] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + end: [.....2] [ip4][..tcp] [....192.168.1.3][52887] -> [....82.57.97.83][53137] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + end: [....11] [ip4][..tcp] [....192.168.1.3][52906] -> [....82.57.97.83][53137] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + end: [.....3] [ip4][..tcp] [....192.168.1.3][52895] -> [.83.216.184.241][51413] [BitTorrent][Download][Acceptable] + idle: [....22] [ip4][..tcp] [....192.168.1.3][52927] -> [.83.216.184.241][51413] [BitTorrent][Download][Acceptable] + end: [....21] [ip4][..tcp] [....192.168.1.3][52922] -> [..95.237.193.34][11321] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + end: [....13] [ip4][..tcp] [....192.168.1.3][52912] -> [.151.72.255.163][59928] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....6] [ip4][..tcp] [....192.168.1.3][52897] -> [...151.26.95.30][22673] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....12] [ip4][..tcp] [....192.168.1.3][52911] -> [...151.26.95.30][22673] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + end: [....20] [ip4][..tcp] [....192.168.1.3][52921] -> [..95.234.159.16][41205] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + end: [....23] [ip4][..tcp] [....192.168.1.3][52926] -> [..93.65.249.100][31336] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....24] [ip4][..tcp] [....192.168.1.3][52925] -> [..93.65.227.100][19116] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + end: [.....9] [ip4][..tcp] [....192.168.1.3][52902] -> [.190.103.195.56][46633] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....18] [ip4][..tcp] [....192.168.1.3][52914] -> [.190.103.195.56][46633] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + end: [.....4] [ip4][..tcp] [....192.168.1.3][52896] -> [....79.53.228.2][14627] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....14] [ip4][..tcp] [....192.168.1.3][52909] -> [....79.53.228.2][14627] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....7] [ip4][..tcp] [....192.168.1.3][52893] -> [...79.55.129.22][12097] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....16] [ip4][..tcp] [....192.168.1.3][52908] -> [...79.55.129.22][12097] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + end: [....19] [ip4][..tcp] [....192.168.1.3][52917] -> [..151.15.48.189][47001] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....8] [ip4][..tcp] [....192.168.1.3][52903] -> [..198.100.146.9][60163] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....17] [ip4][..tcp] [....192.168.1.3][52915] -> [..198.100.146.9][60163] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + end: [.....1] [ip4][..tcp] [....192.168.1.3][52888] -> [..82.58.216.115][38305] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....10] [ip4][..tcp] [....192.168.1.3][52907] -> [..82.58.216.115][38305] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....5] [ip4][..tcp] [....192.168.1.3][52894] -> [..120.62.33.241][39332] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....15] [ip4][..tcp] [....192.168.1.3][52910] -> [..120.62.33.241][39332] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/bittorrent_utp.pcap.out b/test/results/flow-info/bittorrent_utp.pcap.out new file mode 100644 index 000000000..b789180e7 --- /dev/null +++ b/test/results/flow-info/bittorrent_utp.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..82.243.113.43][64969] -> [....192.168.1.5][40959] + detected: [.....1] [ip4][..udp] [..82.243.113.43][64969] -> [....192.168.1.5][40959] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [.....1] [ip4][..udp] [..82.243.113.43][64969] -> [....192.168.1.5][40959] [BitTorrent][Download][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 5.430| 0.412| 1.202] + [IAT(c->s)...: 0.001| 4.392| 0.378| 1.031][IAT(s->c)...: 0.012| 5.430| 0.453| 1.381] + [PKTLEN(c->s): 62.000|1514.000| 827.700| 634.300][PKTLEN(s->c): 62.000| 519.000| 104.300| 116.000] + [BINS(c->s)..: 3,0,0,3,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0] + [BINS(s->c)..: 11,1,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..udp] [..82.243.113.43][64969] -> [....192.168.1.5][40959] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/bjnp.pcap.out b/test/results/flow-info/bjnp.pcap.out new file mode 100644 index 000000000..823819b3b --- /dev/null +++ b/test/results/flow-info/bjnp.pcap.out @@ -0,0 +1,34 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [192.168.185.141][50087] -> [...192.168.1.17][.8612] + detected: [.....1] [ip4][..udp] [192.168.185.141][50087] -> [...192.168.1.17][.8612] [BJNP][System][Acceptable] + new: [.....2] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.1][.8612] + detected: [.....2] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.1][.8612] [BJNP][System][Acceptable] + new: [.....3] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.2][.8612] + detected: [.....3] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.2][.8612] [BJNP][System][Acceptable] + new: [.....4] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.3][.8612] + detected: [.....4] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.3][.8612] [BJNP][System][Acceptable] + new: [.....5] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.4][.8612] + detected: [.....5] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.4][.8612] [BJNP][System][Acceptable] + new: [.....6] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.5][.8612] + detected: [.....6] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.5][.8612] [BJNP][System][Acceptable] + new: [.....7] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.6][.8612] + detected: [.....7] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.6][.8612] [BJNP][System][Acceptable] + new: [.....8] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.7][.8612] + detected: [.....8] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.7][.8612] [BJNP][System][Acceptable] + new: [.....9] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.8][.8612] + detected: [.....9] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.8][.8612] [BJNP][System][Acceptable] + new: [....10] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.9][.8612] + detected: [....10] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.9][.8612] [BJNP][System][Acceptable] + idle: [.....1] [ip4][..udp] [192.168.185.141][50087] -> [...192.168.1.17][.8612] [BJNP][System][Acceptable] + idle: [....10] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.9][.8612] [BJNP][System][Acceptable] + idle: [.....9] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.8][.8612] [BJNP][System][Acceptable] + idle: [.....8] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.7][.8612] [BJNP][System][Acceptable] + idle: [.....7] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.6][.8612] [BJNP][System][Acceptable] + idle: [.....6] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.5][.8612] [BJNP][System][Acceptable] + idle: [.....5] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.4][.8612] [BJNP][System][Acceptable] + idle: [.....4] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.3][.8612] [BJNP][System][Acceptable] + idle: [.....3] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.2][.8612] [BJNP][System][Acceptable] + idle: [.....2] [ip4][..udp] [192.168.185.141][50089] -> [....192.168.1.1][.8612] [BJNP][System][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/bot.pcap.out b/test/results/flow-info/bot.pcap.out new file mode 100644 index 000000000..7b9e5e2ab --- /dev/null +++ b/test/results/flow-info/bot.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...40.77.167.36][64768] -> [...89.31.72.220][...80] + detected: [.....1] [ip4][..tcp] [...40.77.167.36][64768] -> [...89.31.72.220][...80] [HTTP.Azure][Cloud][Acceptable] + analyse: [.....1] [ip4][..tcp] [...40.77.167.36][64768] -> [...89.31.72.220][...80] [HTTP.Azure][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.114| 0.014| 0.036] + [IAT(c->s)...: 0.000| 0.114| 0.037| 0.052][IAT(s->c)...: 0.000| 0.107| 0.009| 0.029] + [PKTLEN(c->s): 64.000| 374.000| 108.600| 108.400][PKTLEN(s->c): 64.000|1498.000|1383.400| 388.800] + [BINS(c->s)..: 6,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,0,0] + end: [.....1] [ip4][..tcp] [...40.77.167.36][64768] -> [...89.31.72.220][...80] [HTTP.Azure][Cloud][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/bt_search.pcap.out b/test/results/flow-info/bt_search.pcap.out new file mode 100644 index 000000000..577d22e85 --- /dev/null +++ b/test/results/flow-info/bt_search.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.0.102][.6771] -> [239.192.152.143][.6771] + detected: [.....1] [ip4][..udp] [..192.168.0.102][.6771] -> [239.192.152.143][.6771] [BitTorrent][Download][Acceptable] + idle: [.....1] [ip4][..udp] [..192.168.0.102][.6771] -> [239.192.152.143][.6771] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/cachefly.pcapng.out b/test/results/flow-info/cachefly.pcapng.out new file mode 100644 index 000000000..1793c3f2b --- /dev/null +++ b/test/results/flow-info/cachefly.pcapng.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][43766] + detected: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][43766] [TLS][Web][Safe] + detection-update: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][43766] [TLS][Web][Safe] + detection-update: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][43766] [TLS.Cachefly][Cloud][Acceptable] + idle: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][43766] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/capwap.pcap.out b/test/results/flow-info/capwap.pcap.out new file mode 100644 index 000000000..acaa9a5a1 --- /dev/null +++ b/test/results/flow-info/capwap.pcap.out @@ -0,0 +1,57 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12379] + detected: [.....1] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12379] [CAPWAP][Network][Acceptable] + new: [.....2] [ip4][..udp] [..192.168.10.10][49259] -> [255.255.255.255][...53] + detected: [.....2] [ip4][..udp] [..192.168.10.10][49259] -> [255.255.255.255][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [.....3] [ip4][..udp] [..192.168.10.10][12380] -> [255.255.255.255][.5246] + detected: [.....3] [ip4][..udp] [..192.168.10.10][12380] -> [255.255.255.255][.5246] [CAPWAP][Network][Acceptable] + new: [.....4] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12380] + detected: [.....4] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12380] [CAPWAP][Network][Acceptable] + update: [.....1] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12379] [CAPWAP][Network][Acceptable] + analyse: [.....4] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12380] [CAPWAP][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 10.093| 0.751| 2.532] + [IAT(c->s)...: 0.000| 10.093| 0.681| 2.432][IAT(s->c)...: 0.000| 9.998| 0.838| 2.646] + [PKTLEN(c->s): 106.000|1499.000| 546.600| 501.400][PKTLEN(s->c): 115.000|1499.000| 473.200| 463.600] + [BINS(c->s)..: 0,0,5,3,0,0,0,0,0,1,0,0,0,1,0,0,0,2,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0,0] + [BINS(s->c)..: 0,0,1,6,1,0,0,0,1,0,0,1,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0] + new: [.....5] [ip4][..udp] [..192.168.10.10][12380] -> [...192.168.10.9][.5247] + detected: [.....5] [ip4][..udp] [..192.168.10.10][12380] -> [...192.168.10.9][.5247] [CAPWAP][Network][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.10.10][49259] -> [255.255.255.255][...53] + ERROR-EVENT: Unknown packet type + analyse: [.....5] [ip4][..udp] [..192.168.10.10][12380] -> [...192.168.10.9][.5247] [CAPWAP][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.500| 4.000| 1.016| 0.875] + [IAT(c->s)...: 0.500| 4.000| 1.016| 0.875][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 122.000| 325.000| 195.400| 58.400][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,6,7,2,9,2,5,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....3] [ip4][..udp] [..192.168.10.10][12380] -> [255.255.255.255][.5246] [CAPWAP][Network][Acceptable] + update: [.....1] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12379] [CAPWAP][Network][Acceptable] + update: [.....4] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12380] [CAPWAP][Network][Acceptable] + update: [.....5] [ip4][..udp] [..192.168.10.10][12380] -> [...192.168.10.9][.5247] [CAPWAP][Network][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.10.10][49259] -> [255.255.255.255][...53] + ERROR-EVENT: Unknown packet type + update: [.....3] [ip4][..udp] [..192.168.10.10][12380] -> [255.255.255.255][.5246] [CAPWAP][Network][Acceptable] + update: [.....1] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12379] [CAPWAP][Network][Acceptable] + update: [.....4] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12380] [CAPWAP][Network][Acceptable] + update: [.....5] [ip4][..udp] [..192.168.10.10][12380] -> [...192.168.10.9][.5247] [CAPWAP][Network][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.10.10][49259] -> [255.255.255.255][...53] + ERROR-EVENT: Unknown packet type + idle: [.....1] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12379] [CAPWAP][Network][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.10.10][49259] -> [255.255.255.255][...53] + update: [.....3] [ip4][..udp] [..192.168.10.10][12380] -> [255.255.255.255][.5246] [CAPWAP][Network][Acceptable] + update: [.....4] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12380] [CAPWAP][Network][Acceptable] + update: [.....5] [ip4][..udp] [..192.168.10.10][12380] -> [...192.168.10.9][.5247] [CAPWAP][Network][Acceptable] + idle: [.....3] [ip4][..udp] [..192.168.10.10][12380] -> [255.255.255.255][.5246] [CAPWAP][Network][Acceptable] + idle: [.....4] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12380] [CAPWAP][Network][Acceptable] + idle: [.....5] [ip4][..udp] [..192.168.10.10][12380] -> [...192.168.10.9][.5247] [CAPWAP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/cassandra.pcap.out b/test/results/flow-info/cassandra.pcap.out new file mode 100644 index 000000000..fa95c5094 --- /dev/null +++ b/test/results/flow-info/cassandra.pcap.out @@ -0,0 +1,24 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......127.0.0.1][46536] -> [......127.0.0.1][.9042] + detected: [.....1] [ip4][..tcp] [......127.0.0.1][46536] -> [......127.0.0.1][.9042] [Cassandra][Database][Acceptable] + new: [.....2] [ip4][..tcp] [......127.0.0.1][46537] -> [......127.0.0.1][.9042] + detected: [.....2] [ip4][..tcp] [......127.0.0.1][46537] -> [......127.0.0.1][.9042] [Cassandra][Database][Acceptable] + analyse: [.....1] [ip4][..tcp] [......127.0.0.1][46536] -> [......127.0.0.1][.9042] [Cassandra][Database][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 26.002| 1.755| 6.369] + [IAT(c->s)...: 0.000| 26.002| 1.700| 6.281][IAT(s->c)...: 0.000| 25.963| 1.813| 6.461] + [PKTLEN(c->s): 66.000| 387.000| 121.600| 77.900][PKTLEN(s->c): 66.000|25214.000|4025.500|8138.300] + [BINS(c->s)..: 9,2,3,2,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,2,2,1,0,1,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3] + analyse: [.....2] [ip4][..tcp] [......127.0.0.1][46537] -> [......127.0.0.1][.9042] [Cassandra][Database][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 25.937| 2.293| 6.507] + [IAT(c->s)...: 0.000| 25.897| 2.200| 6.235][IAT(s->c)...: 0.000| 25.937| 2.407| 6.821] + [PKTLEN(c->s): 66.000| 291.000| 110.600| 58.800][PKTLEN(s->c): 66.000|11512.000| 923.800|2937.200] + [BINS(c->s)..: 10,2,4,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,2,2,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1] + end: [.....1] [ip4][..tcp] [......127.0.0.1][46536] -> [......127.0.0.1][.9042] [Cassandra][Database][Acceptable] + end: [.....2] [ip4][..tcp] [......127.0.0.1][46537] -> [......127.0.0.1][.9042] [Cassandra][Database][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/check_mk_new.pcap.out b/test/results/flow-info/check_mk_new.pcap.out new file mode 100644 index 000000000..b6d0a92a4 --- /dev/null +++ b/test/results/flow-info/check_mk_new.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.192.168.100.22][58998] -> [.192.168.100.50][.6556] + detected: [.....1] [ip4][..tcp] [.192.168.100.22][58998] -> [.192.168.100.50][.6556] [CHECKMK][DataTransfer][Acceptable] + analyse: [.....1] [ip4][..tcp] [.192.168.100.22][58998] -> [.192.168.100.50][.6556] [CHECKMK][DataTransfer][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.002| 0.001| 0.001] + [IAT(c->s)...: 0.000| 0.002| 0.001| 0.001][IAT(s->c)...: 0.000| 0.002| 0.001| 0.001] + [PKTLEN(c->s): 66.000| 74.000| 66.500| 1.900][PKTLEN(s->c): 67.000| 568.000| 152.500| 153.600] + [BINS(c->s)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,1,0,0,0,0,0,1,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....1] [ip4][..tcp] [.192.168.100.22][58998] -> [.192.168.100.50][.6556] [CHECKMK][DataTransfer][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/chrome.pcap.out b/test/results/flow-info/chrome.pcap.out new file mode 100644 index 000000000..476ceb9b0 --- /dev/null +++ b/test/results/flow-info/chrome.pcap.out @@ -0,0 +1,75 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.178][64393] -> [...146.48.58.18][..443] + detected: [.....1] [ip4][..tcp] [..192.168.1.178][64393] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.178][64393] -> [...146.48.58.18][..443] [TLS][Web][Safe] + new: [.....2] [ip4][..tcp] [..192.168.1.178][64394] -> [...146.48.58.18][..443] + detected: [.....2] [ip4][..tcp] [..192.168.1.178][64394] -> [...146.48.58.18][..443] [TLS][Web][Safe] + analyse: [.....1] [ip4][..tcp] [..192.168.1.178][64393] -> [...146.48.58.18][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.629| 0.057| 0.154] + [IAT(c->s)...: 0.000| 0.629| 0.067| 0.166][IAT(s->c)...: 0.000| 0.628| 0.050| 0.145] + [PKTLEN(c->s): 66.000| 816.000| 209.600| 263.400][PKTLEN(s->c): 66.000|1506.000| 938.200| 652.600] + [BINS(c->s)..: 10,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0,0] + detection-update: [.....2] [ip4][..tcp] [..192.168.1.178][64394] -> [...146.48.58.18][..443] [TLS][Web][Safe] + new: [.....3] [ip4][..tcp] [..192.168.1.178][64408] -> [...146.48.58.18][..443] + new: [.....4] [ip4][..tcp] [..192.168.1.178][64409] -> [...146.48.58.18][..443] + new: [.....5] [ip4][..tcp] [..192.168.1.178][64410] -> [...146.48.58.18][..443] + new: [.....6] [ip4][..tcp] [..192.168.1.178][64411] -> [...146.48.58.18][..443] + detected: [.....4] [ip4][..tcp] [..192.168.1.178][64409] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detected: [.....3] [ip4][..tcp] [..192.168.1.178][64408] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detected: [.....5] [ip4][..tcp] [..192.168.1.178][64410] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detected: [.....6] [ip4][..tcp] [..192.168.1.178][64411] -> [...146.48.58.18][..443] [TLS][Web][Safe] + analyse: [.....2] [ip4][..tcp] [..192.168.1.178][64394] -> [...146.48.58.18][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.469| 0.038| 0.110] + [IAT(c->s)...: 0.000| 0.442| 0.042| 0.112][IAT(s->c)...: 0.000| 0.469| 0.035| 0.109] + [PKTLEN(c->s): 66.000| 783.000| 209.200| 272.300][PKTLEN(s->c): 66.000|1506.000|1003.300| 636.500] + [BINS(c->s)..: 11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0] + detection-update: [.....2] [ip4][..tcp] [..192.168.1.178][64394] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....4] [ip4][..tcp] [..192.168.1.178][64409] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....3] [ip4][..tcp] [..192.168.1.178][64408] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....6] [ip4][..tcp] [..192.168.1.178][64411] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....5] [ip4][..tcp] [..192.168.1.178][64410] -> [...146.48.58.18][..443] [TLS][Web][Safe] + analyse: [.....6] [ip4][..tcp] [..192.168.1.178][64411] -> [...146.48.58.18][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.035| 0.006| 0.011] + [IAT(c->s)...: 0.000| 0.035| 0.006| 0.012][IAT(s->c)...: 0.000| 0.028| 0.006| 0.011] + [PKTLEN(c->s): 66.000| 820.000| 195.300| 259.000][PKTLEN(s->c): 66.000|1506.000| 890.100| 638.500] + [BINS(c->s)..: 12,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0] + detection-update: [.....6] [ip4][..tcp] [..192.168.1.178][64411] -> [...146.48.58.18][..443] [TLS][Web][Safe] + analyse: [.....4] [ip4][..tcp] [..192.168.1.178][64409] -> [...146.48.58.18][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.031| 0.008| 0.012] + [IAT(c->s)...: 0.000| 0.031| 0.010| 0.013][IAT(s->c)...: 0.000| 0.029| 0.006| 0.011] + [PKTLEN(c->s): 66.000| 772.000| 176.200| 240.200][PKTLEN(s->c): 66.000|1506.000|1081.300| 629.500] + [BINS(c->s)..: 10,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,0,0] + detection-update: [.....4] [ip4][..tcp] [..192.168.1.178][64409] -> [...146.48.58.18][..443] [TLS][Web][Safe] + analyse: [.....5] [ip4][..tcp] [..192.168.1.178][64410] -> [...146.48.58.18][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.038| 0.007| 0.012] + [IAT(c->s)...: 0.000| 0.038| 0.008| 0.013][IAT(s->c)...: 0.000| 0.030| 0.007| 0.011] + [PKTLEN(c->s): 66.000| 772.000| 159.900| 215.300][PKTLEN(s->c): 66.000|1506.000|1019.300| 629.500] + [BINS(c->s)..: 11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0] + detection-update: [.....5] [ip4][..tcp] [..192.168.1.178][64410] -> [...146.48.58.18][..443] [TLS][Web][Safe] + analyse: [.....3] [ip4][..tcp] [..192.168.1.178][64408] -> [...146.48.58.18][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.032| 0.008| 0.013] + [IAT(c->s)...: 0.000| 0.031| 0.009| 0.013][IAT(s->c)...: 0.000| 0.032| 0.007| 0.013] + [PKTLEN(c->s): 66.000| 775.000| 208.800| 271.400][PKTLEN(s->c): 66.000|1506.000| 989.800| 638.300] + [BINS(c->s)..: 11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0] + detection-update: [.....3] [ip4][..tcp] [..192.168.1.178][64408] -> [...146.48.58.18][..443] [TLS][Web][Safe] + end: [.....1] [ip4][..tcp] [..192.168.1.178][64393] -> [...146.48.58.18][..443] [TLS][Web][Safe] + end: [.....2] [ip4][..tcp] [..192.168.1.178][64394] -> [...146.48.58.18][..443] [TLS][Web][Safe] + end: [.....3] [ip4][..tcp] [..192.168.1.178][64408] -> [...146.48.58.18][..443] [TLS][Web][Safe] + end: [.....4] [ip4][..tcp] [..192.168.1.178][64409] -> [...146.48.58.18][..443] [TLS][Web][Safe] + end: [.....5] [ip4][..tcp] [..192.168.1.178][64410] -> [...146.48.58.18][..443] [TLS][Web][Safe] + end: [.....6] [ip4][..tcp] [..192.168.1.178][64411] -> [...146.48.58.18][..443] [TLS][Web][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/citrix.pcap.out b/test/results/flow-info/citrix.pcap.out new file mode 100644 index 000000000..509734341 --- /dev/null +++ b/test/results/flow-info/citrix.pcap.out @@ -0,0 +1,12 @@ + DAEMON-EVENT: init + new: [.....1] [ip4][..tcp] [.......21.0.0.8][45225] -> [.......22.0.0.7][.1494] + detected: [.....1] [ip4][..tcp] [.......21.0.0.8][45225] -> [.......22.0.0.7][.1494] [Citrix][Network][Acceptable] + analyse: [.....1] [ip4][..tcp] [.......21.0.0.8][45225] -> [.......22.0.0.7][.1494] [Citrix][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.056| 0.005| 0.012] + [IAT(c->s)...: 0.000| 0.046| 0.003| 0.009][IAT(s->c)...: 0.002| 0.056| 0.015| 0.021] + [PKTLEN(c->s): 64.000| 401.000| 120.300| 66.300][PKTLEN(s->c): 64.000| 142.000| 82.000| 30.400] + [BINS(c->s)..: 5,18,1,0,1,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..tcp] [.......21.0.0.8][45225] -> [.......22.0.0.7][.1494] [Citrix][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/cloudflare-warp.pcap.out b/test/results/flow-info/cloudflare-warp.pcap.out new file mode 100644 index 000000000..642e4eacb --- /dev/null +++ b/test/results/flow-info/cloudflare-warp.pcap.out @@ -0,0 +1,33 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..10.158.134.93][55512] -> [.142.251.42.106][..443] [MIDSTREAM] + new: [.....2] [ip4][..tcp] [.......10.8.0.1][42344] -> [..159.138.85.48][.5223] + detected: [.....2] [ip4][..tcp] [.......10.8.0.1][42344] -> [..159.138.85.48][.5223] [Jabber][Web][Acceptable] + new: [.....3] [ip4][..tcp] [.......10.8.0.1][40214] -> [..157.240.16.32][..443] + detected: [.....3] [ip4][..tcp] [.......10.8.0.1][40214] -> [..157.240.16.32][..443] [TLS.Messenger][Chat][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....3] [ip4][..tcp] [.......10.8.0.1][40214] -> [..157.240.16.32][..443] [TLS.Messenger][Chat][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [.....4] [ip4][..tcp] [..10.158.134.93][40454] -> [..216.58.196.68][..443] [MIDSTREAM] + new: [.....5] [ip4][..tcp] [.......10.8.0.1][45606] -> [..104.18.47.234][..443] + detected: [.....5] [ip4][..tcp] [.......10.8.0.1][45606] -> [..104.18.47.234][..443] [TLS.CloudflareWarp][VPN][Acceptable] + new: [.....6] [ip4][..tcp] [.......10.8.0.1][45610] -> [..104.18.47.234][..443] + detected: [.....6] [ip4][..tcp] [.......10.8.0.1][45610] -> [..104.18.47.234][..443] [TLS.CloudflareWarp][VPN][Acceptable] + detection-update: [.....5] [ip4][..tcp] [.......10.8.0.1][45606] -> [..104.18.47.234][..443] [TLS.CloudflareWarp][VPN][Acceptable] + new: [.....7] [ip4][..tcp] [.......10.8.0.1][51296] -> [142.250.183.163][..443] + detected: [.....7] [ip4][..tcp] [.......10.8.0.1][51296] -> [142.250.183.163][..443] [TLS.GoogleServices][Web][Acceptable] + detection-update: [.....6] [ip4][..tcp] [.......10.8.0.1][45610] -> [..104.18.47.234][..443] [TLS.CloudflareWarp][VPN][Acceptable] + new: [.....8] [ip4][..tcp] [.......10.8.0.1][43600] -> [172.217.194.188][.5228] + guessed: [.....8] [ip4][..tcp] [.......10.8.0.1][43600] -> [172.217.194.188][.5228] [Google][Web][Acceptable] + idle: [.....8] [ip4][..tcp] [.......10.8.0.1][43600] -> [172.217.194.188][.5228] + guessed: [.....4] [ip4][..tcp] [..10.158.134.93][40454] -> [..216.58.196.68][..443] [TLS.Google][Web][Acceptable] + end: [.....4] [ip4][..tcp] [..10.158.134.93][40454] -> [..216.58.196.68][..443] + guessed: [.....1] [ip4][..tcp] [..10.158.134.93][55512] -> [.142.251.42.106][..443] [TLS.Google][Web][Acceptable] + end: [.....1] [ip4][..tcp] [..10.158.134.93][55512] -> [.142.251.42.106][..443] + idle: [.....2] [ip4][..tcp] [.......10.8.0.1][42344] -> [..159.138.85.48][.5223] [Jabber][Web][Acceptable] + idle: [.....7] [ip4][..tcp] [.......10.8.0.1][51296] -> [142.250.183.163][..443] + idle: [.....5] [ip4][..tcp] [.......10.8.0.1][45606] -> [..104.18.47.234][..443] + idle: [.....6] [ip4][..tcp] [.......10.8.0.1][45610] -> [..104.18.47.234][..443] + idle: [.....3] [ip4][..tcp] [.......10.8.0.1][40214] -> [..157.240.16.32][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/coap_mqtt.pcap.out b/test/results/flow-info/coap_mqtt.pcap.out new file mode 100644 index 000000000..d375ccad0 --- /dev/null +++ b/test/results/flow-info/coap_mqtt.pcap.out @@ -0,0 +1,122 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61043] -> [....................2001:620:8:35d9::10][.5683] + detected: [.....1] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61043] -> [....................2001:620:8:35d9::10][.5683] [COAP][RPC][Safe] + new: [.....2] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61044] -> [....................2001:620:8:35d9::10][.5683] + detected: [.....2] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61044] -> [....................2001:620:8:35d9::10][.5683] [COAP][RPC][Safe] + new: [.....3] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61045] -> [....................2001:620:8:35d9::10][.5683] + detected: [.....3] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61045] -> [....................2001:620:8:35d9::10][.5683] [COAP][RPC][Safe] + new: [.....4] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61046] -> [....................2001:620:8:35d9::10][.5683] + detected: [.....4] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61046] -> [....................2001:620:8:35d9::10][.5683] [COAP][RPC][Safe] + new: [.....5] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61047] -> [....................2001:620:8:35d9::10][.5683] + detected: [.....5] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61047] -> [....................2001:620:8:35d9::10][.5683] [COAP][RPC][Safe] + DAEMON-EVENT: [Processed: 5 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....6] [ip6][..udp] [................................bbbb::1][33499] -> [................................bbbb::3][.5683] + detected: [.....6] [ip6][..udp] [................................bbbb::1][33499] -> [................................bbbb::3][.5683] [COAP][RPC][Safe] + idle: [.....1] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61043] -> [....................2001:620:8:35d9::10][.5683] [COAP][RPC][Safe] + idle: [.....2] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61044] -> [....................2001:620:8:35d9::10][.5683] [COAP][RPC][Safe] + idle: [.....3] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61045] -> [....................2001:620:8:35d9::10][.5683] [COAP][RPC][Safe] + idle: [.....4] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61046] -> [....................2001:620:8:35d9::10][.5683] [COAP][RPC][Safe] + idle: [.....5] [ip6][..udp] [..2001:da8:215:1171:a10b:cb48:8f83:57f6][61047] -> [....................2001:620:8:35d9::10][.5683] [COAP][RPC][Safe] + new: [.....7] [ip6][..udp] [................................bbbb::1][50250] -> [................................bbbb::3][.5683] + detected: [.....7] [ip6][..udp] [................................bbbb::1][50250] -> [................................bbbb::3][.5683] [COAP][RPC][Safe] + new: [.....8] [ip6][..udp] [................................bbbb::1][46819] -> [................................bbbb::3][.5683] + detected: [.....8] [ip6][..udp] [................................bbbb::1][46819] -> [................................bbbb::3][.5683] [COAP][RPC][Safe] + idle: [.....6] [ip6][..udp] [................................bbbb::1][33499] -> [................................bbbb::3][.5683] [COAP][RPC][Safe] + update: [.....7] [ip6][..udp] [................................bbbb::1][50250] -> [................................bbbb::3][.5683] [COAP][RPC][Safe] + update: [.....8] [ip6][..udp] [................................bbbb::1][46819] -> [................................bbbb::3][.5683] [COAP][RPC][Safe] + DAEMON-EVENT: [Processed: 19 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 2] + new: [.....9] [ip4][..tcp] [...192.168.56.1][53522] -> [.192.168.56.101][17501] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [...192.168.56.1][53522] -> [.192.168.56.101][17501] [MQTT][RPC][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....7] [ip6][..udp] [................................bbbb::1][50250] -> [................................bbbb::3][.5683] [COAP][RPC][Safe] + idle: [.....8] [ip6][..udp] [................................bbbb::1][46819] -> [................................bbbb::3][.5683] [COAP][RPC][Safe] + new: [....10] [ip4][..tcp] [...192.168.56.1][53523] -> [.192.168.56.101][17501] [MIDSTREAM] + detected: [....10] [ip4][..tcp] [...192.168.56.1][53523] -> [.192.168.56.101][17501] [MQTT][RPC][Acceptable] + RISK: Known Proto on Non Std Port + new: [....11] [ip4][..tcp] [...192.168.56.1][53528] -> [.192.168.56.101][17501] + detected: [....11] [ip4][..tcp] [...192.168.56.1][53528] -> [.192.168.56.101][17501] [MQTT][RPC][Acceptable] + RISK: Known Proto on Non Std Port + new: [....12] [ip4][..udp] [...192.168.56.1][50311] -> [.192.168.56.101][17500] + detected: [....12] [ip4][..udp] [...192.168.56.1][50311] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + new: [....13] [ip4][..tcp] [.192.168.56.101][17501] -> [...192.168.56.1][53524] [MIDSTREAM] + detected: [....13] [ip4][..tcp] [.192.168.56.101][17501] -> [...192.168.56.1][53524] [MQTT][RPC][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [....11] [ip4][..tcp] [...192.168.56.1][53528] -> [.192.168.56.101][17501] [MQTT][RPC][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.439| 0.304| 1.061] + [IAT(c->s)...: 0.000| 4.242| 0.335| 1.085][IAT(s->c)...: 0.000| 4.439| 0.278| 1.040] + [PKTLEN(c->s): 60.000| 114.000| 76.300| 23.100][PKTLEN(s->c): 54.000| 140.000| 76.300| 35.200] + [BINS(c->s)..: 11,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 13,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....9] [ip4][..tcp] [...192.168.56.1][53522] -> [.192.168.56.101][17501] [MQTT][RPC][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 27.506| 1.802| 6.725] + [IAT(c->s)...: 0.001| 27.310| 2.149| 7.264][IAT(s->c)...: 0.000| 27.506| 1.552| 6.295] + [PKTLEN(c->s): 60.000| 114.000| 75.400| 24.400][PKTLEN(s->c): 54.000| 140.000| 78.900| 37.900] + [BINS(c->s)..: 10,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 13,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....10] [ip4][..tcp] [...192.168.56.1][53523] -> [.192.168.56.101][17501] [MQTT][RPC][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 13.151| 0.876| 3.198] + [IAT(c->s)...: 0.001| 12.952| 1.045| 3.438][IAT(s->c)...: 0.000| 13.151| 0.755| 3.007] + [PKTLEN(c->s): 60.000| 114.000| 75.400| 24.400][PKTLEN(s->c): 54.000| 140.000| 78.900| 37.900] + [BINS(c->s)..: 10,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 13,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....13] [ip4][..tcp] [.192.168.56.101][17501] -> [...192.168.56.1][53524] [MQTT][RPC][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.074| 0.031| 0.027] + [IAT(c->s)...: 0.000| 0.067| 0.028| 0.026][IAT(s->c)...: 0.001| 0.074| 0.034| 0.027] + [PKTLEN(c->s): 54.000| 140.000| 78.800| 38.000][PKTLEN(s->c): 60.000| 114.000| 79.300| 25.900] + [BINS(c->s)..: 13,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....14] [ip4][..udp] [...192.168.56.1][50318] -> [.192.168.56.101][17500] + detected: [....14] [ip4][..udp] [...192.168.56.1][50318] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + analyse: [....12] [ip4][..udp] [...192.168.56.1][50311] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.002| 0.118| 0.106| 0.019] + [IAT(c->s)...: 0.104| 0.118| 0.110| 0.003][IAT(s->c)...: 0.002| 0.116| 0.103| 0.026] + [PKTLEN(c->s): 136.000| 143.000| 138.100| 2.100][PKTLEN(s->c): 59.000| 66.000| 61.100| 2.100] + [BINS(c->s)..: 0,0,8,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....15] [ip4][..udp] [...192.168.56.1][50312] -> [.192.168.56.101][17500] + detected: [....15] [ip4][..udp] [...192.168.56.1][50312] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + analyse: [....14] [ip4][..udp] [...192.168.56.1][50318] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.002| 0.128| 0.112| 0.021] + [IAT(c->s)...: 0.106| 0.128| 0.115| 0.006][IAT(s->c)...: 0.002| 0.126| 0.108| 0.028] + [PKTLEN(c->s): 137.000| 142.000| 139.000| 1.800][PKTLEN(s->c): 60.000| 65.000| 62.000| 1.800] + [BINS(c->s)..: 0,0,6,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....16] [ip4][..udp] [...192.168.56.1][50319] -> [.192.168.56.101][17500] + detected: [....16] [ip4][..udp] [...192.168.56.1][50319] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + analyse: [....15] [ip4][..udp] [...192.168.56.1][50312] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 0.131| 0.117| 0.022] + [IAT(c->s)...: 0.105| 0.131| 0.121| 0.008][IAT(s->c)...: 0.001| 0.131| 0.113| 0.030] + [PKTLEN(c->s): 137.000| 143.000| 139.800| 1.800][PKTLEN(s->c): 60.000| 66.000| 62.800| 1.800] + [BINS(c->s)..: 0,0,3,13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....16] [ip4][..udp] [...192.168.56.1][50319] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.005| 0.172| 0.127| 0.026] + [IAT(c->s)...: 0.107| 0.172| 0.131| 0.015][IAT(s->c)...: 0.005| 0.165| 0.123| 0.033] + [PKTLEN(c->s): 136.000| 143.000| 139.600| 2.200][PKTLEN(s->c): 59.000| 66.000| 62.600| 2.200] + [BINS(c->s)..: 0,0,4,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [....12] [ip4][..udp] [...192.168.56.1][50311] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + idle: [....15] [ip4][..udp] [...192.168.56.1][50312] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + idle: [....14] [ip4][..udp] [...192.168.56.1][50318] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + idle: [....16] [ip4][..udp] [...192.168.56.1][50319] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + idle: [.....9] [ip4][..tcp] [...192.168.56.1][53522] -> [.192.168.56.101][17501] [MQTT][RPC][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....10] [ip4][..tcp] [...192.168.56.1][53523] -> [.192.168.56.101][17501] [MQTT][RPC][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....13] [ip4][..tcp] [.192.168.56.101][17501] -> [...192.168.56.1][53524] [MQTT][RPC][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....11] [ip4][..tcp] [...192.168.56.1][53528] -> [.192.168.56.101][17501] [MQTT][RPC][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/collectd.pcap.out b/test/results/flow-info/collectd.pcap.out new file mode 100644 index 000000000..e25df5830 --- /dev/null +++ b/test/results/flow-info/collectd.pcap.out @@ -0,0 +1,59 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [......127.0.0.1][36576] -> [......127.0.0.1][25826] + detected: [.....1] [ip4][..udp] [......127.0.0.1][36576] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + new: [.....2] [ip4][..udp] [......127.0.0.1][36320] -> [......127.0.0.1][25826] + new: [.....3] [ip4][..udp] [......127.0.0.1][36064] -> [......127.0.0.1][25826] + detected: [.....3] [ip4][..udp] [......127.0.0.1][36064] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + DAEMON-EVENT: [Processed: 3 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....4] [ip4][..udp] [.192.168.178.35][39576] -> [..239.192.74.66][25826] + new: [.....5] [ip4][..udp] [.192.168.178.35][39577] -> [..239.192.74.66][25826] + idle: [.....3] [ip4][..udp] [......127.0.0.1][36064] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + guessed: [.....2] [ip4][..udp] [......127.0.0.1][36320] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + idle: [.....2] [ip4][..udp] [......127.0.0.1][36320] -> [......127.0.0.1][25826] + idle: [.....1] [ip4][..udp] [......127.0.0.1][36576] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + DAEMON-EVENT: [Processed: 5 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 5|skipped: 0|!detected: 0|guessed: 1|detection-updates: 0|updates: 0] + new: [.....6] [ip4][..udp] [......127.0.0.1][54138] -> [......127.0.0.1][25826] + detected: [.....6] [ip4][..udp] [......127.0.0.1][54138] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + guessed: [.....4] [ip4][..udp] [.192.168.178.35][39576] -> [..239.192.74.66][25826] [collectd][System][Acceptable] + idle: [.....4] [ip4][..udp] [.192.168.178.35][39576] -> [..239.192.74.66][25826] + guessed: [.....5] [ip4][..udp] [.192.168.178.35][39577] -> [..239.192.74.66][25826] [collectd][System][Acceptable] + idle: [.....5] [ip4][..udp] [.192.168.178.35][39577] -> [..239.192.74.66][25826] + new: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] + detected: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....6] [ip4][..udp] [......127.0.0.1][54138] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....6] [ip4][..udp] [......127.0.0.1][54138] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....6] [ip4][..udp] [......127.0.0.1][54138] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + idle: [.....6] [ip4][..udp] [......127.0.0.1][54138] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + analyse: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 10.000| 8.710| 3.352] + [IAT(c->s)...: 0.000| 10.000| 8.710| 3.352][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 1353.000|1388.000|1371.600| 10.800][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,26,4,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + new: [.....8] [ip4][..udp] [......127.0.0.1][36832] -> [......127.0.0.1][25826] + detected: [.....8] [ip4][..udp] [......127.0.0.1][36832] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....8] [ip4][..udp] [......127.0.0.1][36832] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + DAEMON-EVENT: [Processed: 69 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 8|skipped: 0|!detected: 0|guessed: 3|detection-updates: 0|updates: 13] + update: [.....8] [ip4][..udp] [......127.0.0.1][36832] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + update: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + new: [.....9] [ip4][..udp] [.192.168.178.35][39576] -> [..239.192.74.66][25826] + detected: [.....9] [ip4][..udp] [.192.168.178.35][39576] -> [..239.192.74.66][25826] [collectd][System][Acceptable] + idle: [.....7] [ip4][..udp] [......127.0.0.1][35988] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + idle: [.....8] [ip4][..udp] [......127.0.0.1][36832] -> [......127.0.0.1][25826] [collectd][System][Acceptable] + idle: [.....9] [ip4][..udp] [.192.168.178.35][39576] -> [..239.192.74.66][25826] [collectd][System][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/corba.pcap.out b/test/results/flow-info/corba.pcap.out new file mode 100644 index 000000000..c66c57117 --- /dev/null +++ b/test/results/flow-info/corba.pcap.out @@ -0,0 +1,13 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.101.0.2][.8726] -> [.....10.102.0.2][..900] + detected: [.....1] [ip4][..tcp] [.....10.101.0.2][.8726] -> [.....10.102.0.2][..900] [Corba][RPC][Acceptable] + new: [.....2] [ip4][..tcp] [.....10.101.0.2][.8727] -> [.....10.102.0.2][.1049] + detected: [.....2] [ip4][..tcp] [.....10.101.0.2][.8727] -> [.....10.102.0.2][.1049] [Corba][RPC][Acceptable] + new: [.....3] [ip4][..tcp] [.....10.101.0.2][.8728] -> [.....10.102.0.2][61191] + detected: [.....3] [ip4][..tcp] [.....10.101.0.2][.8728] -> [.....10.102.0.2][61191] [Corba][RPC][Acceptable] + end: [.....1] [ip4][..tcp] [.....10.101.0.2][.8726] -> [.....10.102.0.2][..900] [Corba][RPC][Acceptable] + end: [.....2] [ip4][..tcp] [.....10.101.0.2][.8727] -> [.....10.102.0.2][.1049] [Corba][RPC][Acceptable] + end: [.....3] [ip4][..tcp] [.....10.101.0.2][.8728] -> [.....10.102.0.2][61191] [Corba][RPC][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/cpha.pcap.out b/test/results/flow-info/cpha.pcap.out new file mode 100644 index 000000000..e705da609 --- /dev/null +++ b/test/results/flow-info/cpha.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [........0.0.0.0][.8116] -> [.....172.21.3.0][.8116] + detected: [.....1] [ip4][..udp] [........0.0.0.0][.8116] -> [.....172.21.3.0][.8116] [CPHA][Network][Fun] + idle: [.....1] [ip4][..udp] [........0.0.0.0][.8116] -> [.....172.21.3.0][.8116] [CPHA][Network][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/crynet.pcap.out b/test/results/flow-info/crynet.pcap.out new file mode 100644 index 000000000..df5f65272 --- /dev/null +++ b/test/results/flow-info/crynet.pcap.out @@ -0,0 +1,22 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][61837] -> [..78.159.118.97][25383] + detected: [.....1] [ip4][..udp] [..192.168.2.100][61837] -> [..78.159.118.97][25383] [CryNetwork][Game][Safe] + DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..udp] [..192.168.2.100][56333] -> [...37.58.56.245][20250] + detected: [.....2] [ip4][..udp] [..192.168.2.100][56333] -> [...37.58.56.245][20250] [CryNetwork][Game][Safe] + idle: [.....1] [ip4][..udp] [..192.168.2.100][61837] -> [..78.159.118.97][25383] [CryNetwork][Game][Safe] + DAEMON-EVENT: [Processed: 30 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..udp] [..192.168.2.100][56970] -> [..84.16.230.222][28665] + detected: [.....3] [ip4][..udp] [..192.168.2.100][56970] -> [..84.16.230.222][28665] [CryNetwork][Game][Safe] + idle: [.....2] [ip4][..udp] [..192.168.2.100][56333] -> [...37.58.56.245][20250] [CryNetwork][Game][Safe] + DAEMON-EVENT: [Processed: 45 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....4] [ip4][..udp] [..192.168.2.100][55645] -> [...78.159.98.94][28375] + detected: [.....4] [ip4][..udp] [..192.168.2.100][55645] -> [...78.159.98.94][28375] [CryNetwork][Game][Safe] + idle: [.....4] [ip4][..udp] [..192.168.2.100][55645] -> [...78.159.98.94][28375] [CryNetwork][Game][Safe] + idle: [.....3] [ip4][..udp] [..192.168.2.100][56970] -> [..84.16.230.222][28665] [CryNetwork][Game][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dazn.pcapng.out b/test/results/flow-info/dazn.pcapng.out new file mode 100644 index 000000000..7e8f3d20d --- /dev/null +++ b/test/results/flow-info/dazn.pcapng.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.128][54020] -> [...52.84.223.58][..443] + detected: [.....1] [ip4][..tcp] [..192.168.1.128][54020] -> [...52.84.223.58][..443] [TLS.Dazn][Streaming][Fun] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.128][54020] -> [...52.84.223.58][..443] [TLS.Dazn][Streaming][Fun] + new: [.....2] [ip4][..tcp] [..192.168.1.128][46036] -> [..13.226.244.27][..443] + detected: [.....2] [ip4][..tcp] [..192.168.1.128][46036] -> [..13.226.244.27][..443] [TLS.Dazn][Streaming][Fun] + detection-update: [.....2] [ip4][..tcp] [..192.168.1.128][46036] -> [..13.226.244.27][..443] [TLS.Dazn][Streaming][Fun] + new: [.....3] [ip4][..tcp] [..192.168.1.128][40882] -> [..13.226.244.30][..443] + detected: [.....3] [ip4][..tcp] [..192.168.1.128][40882] -> [..13.226.244.30][..443] [TLS.Dazn][Streaming][Fun] + detection-update: [.....3] [ip4][..tcp] [..192.168.1.128][40882] -> [..13.226.244.30][..443] [TLS.Dazn][Streaming][Fun] + idle: [.....2] [ip4][..tcp] [..192.168.1.128][46036] -> [..13.226.244.27][..443] + idle: [.....1] [ip4][..tcp] [..192.168.1.128][54020] -> [...52.84.223.58][..443] + idle: [.....3] [ip4][..tcp] [..192.168.1.128][40882] -> [..13.226.244.30][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dcerpc.pcap.out b/test/results/flow-info/dcerpc.pcap.out new file mode 100644 index 000000000..c685f9ead --- /dev/null +++ b/test/results/flow-info/dcerpc.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...192.168.1.11][49155] -> [...192.168.1.20][34964] + detected: [.....1] [ip4][..udp] [...192.168.1.11][49155] -> [...192.168.1.20][34964] [RPC][RPC][Acceptable] + new: [.....2] [ip4][..udp] [...192.168.1.20][49161] -> [...192.168.1.11][49155] + detected: [.....2] [ip4][..udp] [...192.168.1.20][49161] -> [...192.168.1.11][49155] [RPC][RPC][Acceptable] + new: [.....3] [ip4][..udp] [...192.168.1.20][49162] -> [...192.168.1.11][34964] + detected: [.....3] [ip4][..udp] [...192.168.1.20][49162] -> [...192.168.1.11][34964] [RPC][RPC][Acceptable] + new: [.....4] [ip4][..udp] [...192.168.1.11][49154] -> [...192.168.1.20][49162] + detected: [.....4] [ip4][..udp] [...192.168.1.11][49154] -> [...192.168.1.20][49162] [RPC][RPC][Acceptable] + idle: [.....4] [ip4][..udp] [...192.168.1.11][49154] -> [...192.168.1.20][49162] [RPC][RPC][Acceptable] + idle: [.....2] [ip4][..udp] [...192.168.1.20][49161] -> [...192.168.1.11][49155] [RPC][RPC][Acceptable] + idle: [.....1] [ip4][..udp] [...192.168.1.11][49155] -> [...192.168.1.20][34964] [RPC][RPC][Acceptable] + idle: [.....3] [ip4][..udp] [...192.168.1.20][49162] -> [...192.168.1.11][34964] [RPC][RPC][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dhcp-fuzz.pcapng.out b/test/results/flow-info/dhcp-fuzz.pcapng.out new file mode 100644 index 000000000..6f255c5ba --- /dev/null +++ b/test/results/flow-info/dhcp-fuzz.pcapng.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [192.168.155.104][...68] -> [255.255.255.255][...67] + guessed: [.....1] [ip4][..udp] [192.168.155.104][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [.....1] [ip4][..udp] [192.168.155.104][...68] -> [255.255.255.255][...67] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/diameter.pcap.out b/test/results/flow-info/diameter.pcap.out new file mode 100644 index 000000000..8c5161c39 --- /dev/null +++ b/test/results/flow-info/diameter.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...10.201.9.245][50957] -> [....10.201.9.11][.3868] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [...10.201.9.245][50957] -> [....10.201.9.11][.3868] [Diameter][Network][Acceptable] + idle: [.....1] [ip4][..tcp] [...10.201.9.245][50957] -> [....10.201.9.11][.3868] [Diameter][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/discord.pcap.out b/test/results/flow-info/discord.pcap.out new file mode 100644 index 000000000..5887d91fc --- /dev/null +++ b/test/results/flow-info/discord.pcap.out @@ -0,0 +1,172 @@ + DAEMON-EVENT: init + new: [.....1] [ip4][..tcp] [......10.0.2.15][42834] -> [162.159.128.233][..443] + detected: [.....1] [ip4][..tcp] [......10.0.2.15][42834] -> [162.159.128.233][..443] [TLS.Discord][Collaborative][Fun] + detection-update: [.....1] [ip4][..tcp] [......10.0.2.15][42834] -> [162.159.128.233][..443] [TLS.Discord][Collaborative][Fun] + detection-update: [.....1] [ip4][..tcp] [......10.0.2.15][42834] -> [162.159.128.233][..443] [TLS.Discord][Collaborative][Fun] + RISK: TLS Cert Expired + DAEMON-EVENT: [Processed: 7 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 2|updates: 0] + new: [.....2] [ip4][..udp] [..192.168.2.100][56271] -> [..66.22.244.154][50004] + detected: [.....2] [ip4][..udp] [..192.168.2.100][56271] -> [..66.22.244.154][50004] [Discord][Collaborative][Fun] + new: [.....3] [ip4][..udp] [..192.168.2.100][56271] -> [..66.22.244.139][50004] + detected: [.....3] [ip4][..udp] [..192.168.2.100][56271] -> [..66.22.244.139][50004] [Discord][Collaborative][Fun] + new: [.....4] [ip4][..udp] [..192.168.2.100][56271] -> [..66.22.237.138][50004] + detected: [.....4] [ip4][..udp] [..192.168.2.100][56271] -> [..66.22.237.138][50004] [Discord][Collaborative][Fun] + new: [.....5] [ip4][..udp] [..192.168.2.100][56271] -> [....66.22.241.7][50004] + detected: [.....5] [ip4][..udp] [..192.168.2.100][56271] -> [....66.22.241.7][50004] [Discord][Collaborative][Fun] + new: [.....6] [ip4][..udp] [..192.168.2.100][56271] -> [....66.22.241.5][50004] + detected: [.....6] [ip4][..udp] [..192.168.2.100][56271] -> [....66.22.241.5][50004] [Discord][Collaborative][Fun] + new: [.....7] [ip4][..udp] [..192.168.2.100][56271] -> [...66.22.237.11][50004] + detected: [.....7] [ip4][..udp] [..192.168.2.100][56271] -> [...66.22.237.11][50004] [Discord][Collaborative][Fun] + idle: [.....1] [ip4][..tcp] [......10.0.2.15][42834] -> [162.159.128.233][..443] + DAEMON-EVENT: [Processed: 19 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 6 / 7|skipped: 0|!detected: 0|guessed: 0|detection-updates: 2|updates: 0] + new: [.....8] [ip4][..udp] [..192.168.2.100][57955] -> [..66.22.196.173][50004] + detected: [.....8] [ip4][..udp] [..192.168.2.100][57955] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [.....7] [ip4][..udp] [..192.168.2.100][56271] -> [...66.22.237.11][50004] [Discord][Collaborative][Fun] + idle: [.....6] [ip4][..udp] [..192.168.2.100][56271] -> [....66.22.241.5][50004] [Discord][Collaborative][Fun] + idle: [.....5] [ip4][..udp] [..192.168.2.100][56271] -> [....66.22.241.7][50004] [Discord][Collaborative][Fun] + idle: [.....4] [ip4][..udp] [..192.168.2.100][56271] -> [..66.22.237.138][50004] [Discord][Collaborative][Fun] + idle: [.....3] [ip4][..udp] [..192.168.2.100][56271] -> [..66.22.244.139][50004] [Discord][Collaborative][Fun] + idle: [.....2] [ip4][..udp] [..192.168.2.100][56271] -> [..66.22.244.154][50004] [Discord][Collaborative][Fun] + new: [.....9] [ip4][..udp] [..192.168.2.100][64837] -> [.35.214.238.161][50001] + detected: [.....9] [ip4][..udp] [..192.168.2.100][64837] -> [.35.214.238.161][50001] [Discord][Collaborative][Fun] + new: [....10] [ip4][..udp] [..192.168.2.100][55085] -> [..66.22.196.173][50004] + detected: [....10] [ip4][..udp] [..192.168.2.100][55085] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [.....8] [ip4][..udp] [..192.168.2.100][57955] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....11] [ip4][..udp] [..192.168.2.100][52283] -> [..66.22.196.173][50004] + detected: [....11] [ip4][..udp] [..192.168.2.100][52283] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....10] [ip4][..udp] [..192.168.2.100][55085] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [.....8] [ip4][..udp] [..192.168.2.100][57955] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [.....9] [ip4][..udp] [..192.168.2.100][64837] -> [.35.214.238.161][50001] [Discord][Collaborative][Fun] + new: [....12] [ip4][..udp] [..192.168.2.100][50199] -> [..66.22.196.173][50004] + detected: [....12] [ip4][..udp] [..192.168.2.100][50199] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....13] [ip4][..udp] [..192.168.2.100][57956] -> [..66.22.196.173][50004] + detected: [....13] [ip4][..udp] [..192.168.2.100][57956] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....10] [ip4][..udp] [..192.168.2.100][55085] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [.....8] [ip4][..udp] [..192.168.2.100][57955] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....11] [ip4][..udp] [..192.168.2.100][52283] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [.....9] [ip4][..udp] [..192.168.2.100][64837] -> [.35.214.238.161][50001] [Discord][Collaborative][Fun] + new: [....14] [ip4][..udp] [..192.168.2.100][53459] -> [..66.22.196.173][50004] + detected: [....14] [ip4][..udp] [..192.168.2.100][53459] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....10] [ip4][..udp] [..192.168.2.100][55085] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [.....8] [ip4][..udp] [..192.168.2.100][57955] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [.....9] [ip4][..udp] [..192.168.2.100][64837] -> [.35.214.238.161][50001] [Discord][Collaborative][Fun] + update: [....13] [ip4][..udp] [..192.168.2.100][57956] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....12] [ip4][..udp] [..192.168.2.100][50199] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....11] [ip4][..udp] [..192.168.2.100][52283] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....15] [ip4][..udp] [..192.168.2.100][61435] -> [..66.22.196.173][50004] + detected: [....15] [ip4][..udp] [..192.168.2.100][61435] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....11] [ip4][..udp] [..192.168.2.100][52283] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....14] [ip4][..udp] [..192.168.2.100][53459] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....13] [ip4][..udp] [..192.168.2.100][57956] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....12] [ip4][..udp] [..192.168.2.100][50199] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....16] [ip4][..udp] [..192.168.2.100][58322] -> [..66.22.196.173][50004] + detected: [....16] [ip4][..udp] [..192.168.2.100][58322] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....13] [ip4][..udp] [..192.168.2.100][57956] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....12] [ip4][..udp] [..192.168.2.100][50199] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....15] [ip4][..udp] [..192.168.2.100][61435] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....14] [ip4][..udp] [..192.168.2.100][53459] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....17] [ip4][..udp] [..192.168.2.100][61392] -> [..66.22.196.173][50004] + detected: [....17] [ip4][..udp] [..192.168.2.100][61392] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....15] [ip4][..udp] [..192.168.2.100][61435] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....14] [ip4][..udp] [..192.168.2.100][53459] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....16] [ip4][..udp] [..192.168.2.100][58322] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....18] [ip4][..udp] [..192.168.2.100][63362] -> [..66.22.196.173][50004] + detected: [....18] [ip4][..udp] [..192.168.2.100][63362] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....14] [ip4][..udp] [..192.168.2.100][53459] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....17] [ip4][..udp] [..192.168.2.100][61392] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....15] [ip4][..udp] [..192.168.2.100][61435] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....16] [ip4][..udp] [..192.168.2.100][58322] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....19] [ip4][..udp] [..192.168.2.100][50335] -> [..66.22.196.173][50004] + detected: [....19] [ip4][..udp] [..192.168.2.100][50335] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....15] [ip4][..udp] [..192.168.2.100][61435] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....18] [ip4][..udp] [..192.168.2.100][63362] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....17] [ip4][..udp] [..192.168.2.100][61392] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....16] [ip4][..udp] [..192.168.2.100][58322] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + DAEMON-EVENT: [Processed: 186 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 19|skipped: 0|!detected: 0|guessed: 0|detection-updates: 2|updates: 25] + new: [....20] [ip4][..udp] [..192.168.2.100][62379] -> [..66.22.196.173][50004] + detected: [....20] [ip4][..udp] [..192.168.2.100][62379] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....17] [ip4][..udp] [..192.168.2.100][61392] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....16] [ip4][..udp] [..192.168.2.100][58322] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....18] [ip4][..udp] [..192.168.2.100][63362] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....19] [ip4][..udp] [..192.168.2.100][50335] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....21] [ip4][..udp] [..192.168.2.100][62844] -> [..66.22.196.173][50004] + detected: [....21] [ip4][..udp] [..192.168.2.100][62844] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....18] [ip4][..udp] [..192.168.2.100][63362] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....20] [ip4][..udp] [..192.168.2.100][62379] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....19] [ip4][..udp] [..192.168.2.100][50335] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....22] [ip4][..udp] [..192.168.2.100][59891] -> [..66.22.196.173][50004] + detected: [....22] [ip4][..udp] [..192.168.2.100][59891] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....19] [ip4][..udp] [..192.168.2.100][50335] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....20] [ip4][..udp] [..192.168.2.100][62379] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....21] [ip4][..udp] [..192.168.2.100][62844] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....23] [ip4][..udp] [..192.168.2.100][61985] -> [..66.22.196.173][50004] + detected: [....23] [ip4][..udp] [..192.168.2.100][61985] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....22] [ip4][..udp] [..192.168.2.100][59891] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....20] [ip4][..udp] [..192.168.2.100][62379] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....21] [ip4][..udp] [..192.168.2.100][62844] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....24] [ip4][..udp] [..192.168.2.100][57764] -> [..66.22.196.173][50004] + detected: [....24] [ip4][..udp] [..192.168.2.100][57764] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....20] [ip4][..udp] [..192.168.2.100][62379] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....21] [ip4][..udp] [..192.168.2.100][62844] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....22] [ip4][..udp] [..192.168.2.100][59891] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....23] [ip4][..udp] [..192.168.2.100][61985] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....25] [ip4][..udp] [..192.168.2.100][55432] -> [..66.22.196.173][50004] + detected: [....25] [ip4][..udp] [..192.168.2.100][55432] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....24] [ip4][..udp] [..192.168.2.100][57764] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....22] [ip4][..udp] [..192.168.2.100][59891] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....23] [ip4][..udp] [..192.168.2.100][61985] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....26] [ip4][..udp] [..192.168.2.100][61060] -> [..66.22.196.173][50004] + detected: [....26] [ip4][..udp] [..192.168.2.100][61060] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....22] [ip4][..udp] [..192.168.2.100][59891] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....23] [ip4][..udp] [..192.168.2.100][61985] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....25] [ip4][..udp] [..192.168.2.100][55432] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....24] [ip4][..udp] [..192.168.2.100][57764] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....27] [ip4][..udp] [..192.168.2.100][63893] -> [..66.22.196.173][50004] + detected: [....27] [ip4][..udp] [..192.168.2.100][63893] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....26] [ip4][..udp] [..192.168.2.100][61060] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....25] [ip4][..udp] [..192.168.2.100][55432] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....24] [ip4][..udp] [..192.168.2.100][57764] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....28] [ip4][..udp] [..192.168.2.100][52323] -> [..66.22.196.173][50004] + detected: [....28] [ip4][..udp] [..192.168.2.100][52323] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....25] [ip4][..udp] [..192.168.2.100][55432] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....24] [ip4][..udp] [..192.168.2.100][57764] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....26] [ip4][..udp] [..192.168.2.100][61060] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....27] [ip4][..udp] [..192.168.2.100][63893] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....29] [ip4][..udp] [..192.168.2.100][58753] -> [..66.22.196.173][50004] + detected: [....29] [ip4][..udp] [..192.168.2.100][58753] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....26] [ip4][..udp] [..192.168.2.100][61060] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....27] [ip4][..udp] [..192.168.2.100][63893] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....28] [ip4][..udp] [..192.168.2.100][52323] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + DAEMON-EVENT: [Processed: 336 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 29|skipped: 0|!detected: 0|guessed: 0|detection-updates: 2|updates: 48] + new: [....30] [ip4][..udp] [..192.168.2.100][65053] -> [..66.22.196.173][50004] + detected: [....30] [ip4][..udp] [..192.168.2.100][65053] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....27] [ip4][..udp] [..192.168.2.100][63893] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....28] [ip4][..udp] [..192.168.2.100][52323] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....29] [ip4][..udp] [..192.168.2.100][58753] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....31] [ip4][..udp] [..192.168.2.100][49648] -> [..66.22.196.173][50004] + detected: [....31] [ip4][..udp] [..192.168.2.100][49648] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....30] [ip4][..udp] [..192.168.2.100][65053] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....28] [ip4][..udp] [..192.168.2.100][52323] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....29] [ip4][..udp] [..192.168.2.100][58753] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....32] [ip4][..udp] [..192.168.2.100][54950] -> [..66.22.196.173][50004] + detected: [....32] [ip4][..udp] [..192.168.2.100][54950] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....28] [ip4][..udp] [..192.168.2.100][52323] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....29] [ip4][..udp] [..192.168.2.100][58753] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....30] [ip4][..udp] [..192.168.2.100][65053] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....31] [ip4][..udp] [..192.168.2.100][49648] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....33] [ip4][..udp] [..192.168.2.100][59240] -> [..66.22.196.173][50004] + detected: [....33] [ip4][..udp] [..192.168.2.100][59240] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....30] [ip4][..udp] [..192.168.2.100][65053] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....32] [ip4][..udp] [..192.168.2.100][54950] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + update: [....31] [ip4][..udp] [..192.168.2.100][49648] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + new: [....34] [ip4][..udp] [..192.168.2.100][62481] -> [..66.22.196.173][50004] + detected: [....34] [ip4][..udp] [..192.168.2.100][62481] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....32] [ip4][..udp] [..192.168.2.100][54950] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....33] [ip4][..udp] [..192.168.2.100][59240] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....31] [ip4][..udp] [..192.168.2.100][49648] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + idle: [....34] [ip4][..udp] [..192.168.2.100][62481] -> [..66.22.196.173][50004] [Discord][Collaborative][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dlt_ppp.pcap.out b/test/results/flow-info/dlt_ppp.pcap.out new file mode 100644 index 000000000..25f53d21b --- /dev/null +++ b/test/results/flow-info/dlt_ppp.pcap.out @@ -0,0 +1,3 @@ + DAEMON-EVENT: init + ERROR-EVENT: Unknown L3 protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dnp3.pcap.out b/test/results/flow-info/dnp3.pcap.out new file mode 100644 index 000000000..b55172708 --- /dev/null +++ b/test/results/flow-info/dnp3.pcap.out @@ -0,0 +1,92 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.......10.0.0.8][.2789] -> [.......10.0.0.3][20000] + detected: [.....1] [ip4][..tcp] [.......10.0.0.8][.2789] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + analyse: [.....1] [ip4][..tcp] [.......10.0.0.8][.2789] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 120.146| 12.647| 35.851] + [IAT(c->s)...: 0.000| 120.146| 20.567| 44.545][IAT(s->c)...: 0.000| 3.043| 0.767| 1.314] + [PKTLEN(c->s): 60.000| 79.000| 66.300| 7.700][PKTLEN(s->c): 60.000| 71.000| 66.000| 5.000] + [BINS(c->s)..: 20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 39 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [.......10.0.0.8][.2803] -> [.......10.0.0.3][20000] + detected: [.....2] [ip4][..tcp] [.......10.0.0.8][.2803] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + analyse: [.....2] [ip4][..tcp] [.......10.0.0.8][.2803] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 17.487| 5.095| 6.400] + [IAT(c->s)...: 0.000| 17.203| 5.095| 6.326][IAT(s->c)...: 0.000| 17.487| 5.095| 6.474] + [PKTLEN(c->s): 60.000| 78.000| 66.300| 8.300][PKTLEN(s->c): 60.000| 71.000| 62.800| 4.400] + [BINS(c->s)..: 18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 78 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..tcp] [.......10.0.0.8][.2828] -> [.......10.0.0.3][20000] + detected: [.....3] [ip4][..tcp] [.......10.0.0.8][.2828] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + end: [.....2] [ip4][..tcp] [.......10.0.0.8][.2803] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + analyse: [.....3] [ip4][..tcp] [.......10.0.0.8][.2828] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 82.989| 8.549| 24.817] + [IAT(c->s)...: 0.000| 82.989| 14.056| 30.830][IAT(s->c)...: 0.000| 1.141| 0.288| 0.493] + [PKTLEN(c->s): 60.000| 79.000| 66.300| 7.700][PKTLEN(s->c): 60.000| 71.000| 66.000| 5.000] + [BINS(c->s)..: 20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 216 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....4] [ip4][..tcp] [.......10.0.0.9][.1080] -> [.......10.0.0.3][20000] + idle: [.....1] [ip4][..tcp] [.......10.0.0.8][.2789] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + detected: [.....4] [ip4][..tcp] [.......10.0.0.9][.1080] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + analyse: [.....4] [ip4][..tcp] [.......10.0.0.9][.1080] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 75.076| 22.122| 29.810] + [IAT(c->s)...: 0.000| 75.029| 22.114| 29.776][IAT(s->c)...: 0.000| 75.076| 22.129| 29.843] + [PKTLEN(c->s): 60.000| 72.000| 63.800| 4.800][PKTLEN(s->c): 62.000| 77.000| 70.400| 5.000] + [BINS(c->s)..: 18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 351 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..tcp] [.......10.0.0.8][.1086] -> [.......10.0.0.3][20000] + detected: [.....5] [ip4][..tcp] [.......10.0.0.8][.1086] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + analyse: [.....5] [ip4][..tcp] [.......10.0.0.8][.1086] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.639| 0.563| 1.000] + [IAT(c->s)...: 0.000| 2.471| 0.481| 0.894][IAT(s->c)...: 0.000| 2.639| 0.685| 1.129] + [PKTLEN(c->s): 60.000| 79.000| 66.200| 7.600][PKTLEN(s->c): 60.000| 71.000| 66.000| 5.000] + [BINS(c->s)..: 20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....3] [ip4][..tcp] [.......10.0.0.8][.2828] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + DAEMON-EVENT: [Processed: 444 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....6] [ip4][..tcp] [.......10.0.0.8][.1159] -> [.......10.0.0.3][20000] + detected: [.....6] [ip4][..tcp] [.......10.0.0.8][.1159] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + idle: [.....4] [ip4][..tcp] [.......10.0.0.9][.1080] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + update: [.....5] [ip4][..tcp] [.......10.0.0.8][.1086] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + DAEMON-EVENT: [Processed: 471 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 1] + new: [.....7] [ip4][..tcp] [.......10.0.0.8][.1184] -> [.......10.0.0.3][20000] + detected: [.....7] [ip4][..tcp] [.......10.0.0.8][.1184] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + idle: [.....5] [ip4][..tcp] [.......10.0.0.8][.1086] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + analyse: [.....7] [ip4][..tcp] [.......10.0.0.8][.1184] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 9.488| 2.471| 3.592] + [IAT(c->s)...: 0.000| 9.227| 2.069| 3.330][IAT(s->c)...: 0.000| 9.488| 3.076| 3.876] + [PKTLEN(c->s): 60.000| 78.000| 65.700| 8.100][PKTLEN(s->c): 62.000| 71.000| 68.800| 3.900] + [BINS(c->s)..: 20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 504 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 7|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 1] + new: [.....8] [ip4][..tcp] [.......10.0.0.9][.1084] -> [.......10.0.0.3][20000] + detected: [.....8] [ip4][..tcp] [.......10.0.0.9][.1084] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + analyse: [.....8] [ip4][..tcp] [.......10.0.0.9][.1084] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.963| 1.541| 1.422] + [IAT(c->s)...: 0.000| 3.672| 1.541| 1.367][IAT(s->c)...: 0.000| 3.963| 1.541| 1.475] + [PKTLEN(c->s): 60.000| 78.000| 66.300| 8.300][PKTLEN(s->c): 60.000| 71.000| 62.800| 4.400] + [BINS(c->s)..: 18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....8] [ip4][..tcp] [.......10.0.0.9][.1084] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + idle: [.....6] [ip4][..tcp] [.......10.0.0.8][.1159] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + idle: [.....7] [ip4][..tcp] [.......10.0.0.8][.1184] -> [.......10.0.0.3][20000] [DNP3][IoT-Scada][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dns-invalid-chars.pcap.out b/test/results/flow-info/dns-invalid-chars.pcap.out new file mode 100644 index 000000000..69c116067 --- /dev/null +++ b/test/results/flow-info/dns-invalid-chars.pcap.out @@ -0,0 +1,8 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [......127.0.0.1][35980] -> [......127.0.0.1][...53] + detected: [.....1] [ip4][..udp] [......127.0.0.1][35980] -> [......127.0.0.1][...53] [DNS][Network][Acceptable] + detection-update: [.....1] [ip4][..udp] [......127.0.0.1][35980] -> [......127.0.0.1][...53] [DNS][Network][Acceptable] + idle: [.....1] [ip4][..udp] [......127.0.0.1][35980] -> [......127.0.0.1][...53] [DNS][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dns-tunnel-iodine.pcap.out b/test/results/flow-info/dns-tunnel-iodine.pcap.out new file mode 100644 index 000000000..6751191d3 --- /dev/null +++ b/test/results/flow-info/dns-tunnel-iodine.pcap.out @@ -0,0 +1,17 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [......10.0.2.30][44639] -> [......10.0.2.20][...53] + detected: [.....1] [ip4][..udp] [......10.0.2.30][44639] -> [......10.0.2.20][...53] [DNS][Network][Acceptable] + detection-update: [.....1] [ip4][..udp] [......10.0.2.30][44639] -> [......10.0.2.20][...53] [DNS][Network][Acceptable] + RISK: Suspicious DNS Traffic + analyse: [.....1] [ip4][..udp] [......10.0.2.30][44639] -> [......10.0.2.20][...53] [DNS][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.003| 0.162| 0.368] + [IAT(c->s)...: 0.000| 1.003| 0.279| 0.449][IAT(s->c)...: 0.000| 0.006| 0.001| 0.001] + [PKTLEN(c->s): 82.000| 323.000| 198.200| 107.600][PKTLEN(s->c): 93.000|1476.000| 317.400| 420.400] + [BINS(c->s)..: 0,6,4,1,0,0,0,0,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,4,1,3,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0] + idle: [.....1] [ip4][..udp] [......10.0.2.30][44639] -> [......10.0.2.20][...53] [DNS][Network][Acceptable] + RISK: Suspicious DNS Traffic + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dns_ambiguous_names.pcap.out b/test/results/flow-info/dns_ambiguous_names.pcap.out new file mode 100644 index 000000000..6a168bf05 --- /dev/null +++ b/test/results/flow-info/dns_ambiguous_names.pcap.out @@ -0,0 +1,44 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....10.200.2.11][48375] -> [........8.8.8.8][...53] + detected: [.....1] [ip4][..udp] [....10.200.2.11][48375] -> [........8.8.8.8][...53] [DNS.ApplePush][Cloud][Acceptable] + detection-update: [.....1] [ip4][..udp] [....10.200.2.11][48375] -> [........8.8.8.8][...53] [DNS.ApplePush][Cloud][Acceptable] + new: [.....2] [ip4][..udp] [....10.200.2.11][57290] -> [........8.8.8.8][...53] + detected: [.....2] [ip4][..udp] [....10.200.2.11][57290] -> [........8.8.8.8][...53] [DNS.Teams][Collaborative][Safe] + detection-update: [.....2] [ip4][..udp] [....10.200.2.11][57290] -> [........8.8.8.8][...53] [DNS.Teams][Collaborative][Safe] + new: [.....3] [ip4][..udp] [....10.200.2.11][57051] -> [........8.8.8.8][...53] + detected: [.....3] [ip4][..udp] [....10.200.2.11][57051] -> [........8.8.8.8][...53] [DNS.Teams][Collaborative][Safe] + detection-update: [.....3] [ip4][..udp] [....10.200.2.11][57051] -> [........8.8.8.8][...53] [DNS.Teams][Collaborative][Safe] + new: [.....4] [ip4][..udp] [....10.200.2.11][46134] -> [........8.8.8.8][...53] + detected: [.....4] [ip4][..udp] [....10.200.2.11][46134] -> [........8.8.8.8][...53] [DNS.GoogleServices][Web][Acceptable] + detection-update: [.....4] [ip4][..udp] [....10.200.2.11][46134] -> [........8.8.8.8][...53] [DNS.GoogleServices][Web][Acceptable] + new: [.....5] [ip4][..udp] [....10.200.2.11][57632] -> [........8.8.8.8][...53] + detected: [.....5] [ip4][..udp] [....10.200.2.11][57632] -> [........8.8.8.8][...53] [DNS.PlayStore][SoftwareUpdate][Safe] + detection-update: [.....5] [ip4][..udp] [....10.200.2.11][57632] -> [........8.8.8.8][...53] [DNS.PlayStore][SoftwareUpdate][Safe] + new: [.....6] [ip4][..udp] [....10.200.2.11][42790] -> [........8.8.8.8][...53] + detected: [.....6] [ip4][..udp] [....10.200.2.11][42790] -> [........8.8.8.8][...53] [DNS.Teams][Collaborative][Safe] + detection-update: [.....6] [ip4][..udp] [....10.200.2.11][42790] -> [........8.8.8.8][...53] [DNS.Teams][Collaborative][Safe] + new: [.....7] [ip4][..udp] [....10.200.2.11][44198] -> [........8.8.8.8][...53] + detected: [.....7] [ip4][..udp] [....10.200.2.11][44198] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....7] [ip4][..udp] [....10.200.2.11][44198] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + new: [.....8] [ip4][..udp] [....10.200.2.11][52541] -> [........8.8.8.8][...53] + detected: [.....8] [ip4][..udp] [....10.200.2.11][52541] -> [........8.8.8.8][...53] [DNS.AppleSiri][VirtAssistant][Acceptable] + detection-update: [.....8] [ip4][..udp] [....10.200.2.11][52541] -> [........8.8.8.8][...53] [DNS.AppleSiri][VirtAssistant][Acceptable] + new: [.....9] [ip4][..udp] [....10.200.2.11][53951] -> [........8.8.8.8][...53] + detected: [.....9] [ip4][..udp] [....10.200.2.11][53951] -> [........8.8.8.8][...53] [DNS.QQ][Chat][Fun] + detection-update: [.....9] [ip4][..udp] [....10.200.2.11][53951] -> [........8.8.8.8][...53] [DNS.QQ][Chat][Fun] + new: [....10] [ip4][..udp] [....10.200.2.11][44883] -> [........8.8.8.8][...53] + detected: [....10] [ip4][..udp] [....10.200.2.11][44883] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + detection-update: [....10] [ip4][..udp] [....10.200.2.11][44883] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + idle: [.....2] [ip4][..udp] [....10.200.2.11][57290] -> [........8.8.8.8][...53] [DNS.Teams][Collaborative][Safe] + idle: [.....5] [ip4][..udp] [....10.200.2.11][57632] -> [........8.8.8.8][...53] [DNS.PlayStore][SoftwareUpdate][Safe] + idle: [.....9] [ip4][..udp] [....10.200.2.11][53951] -> [........8.8.8.8][...53] [DNS.QQ][Chat][Fun] + idle: [.....4] [ip4][..udp] [....10.200.2.11][46134] -> [........8.8.8.8][...53] [DNS.GoogleServices][Web][Acceptable] + idle: [.....7] [ip4][..udp] [....10.200.2.11][44198] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + idle: [.....1] [ip4][..udp] [....10.200.2.11][48375] -> [........8.8.8.8][...53] [DNS.ApplePush][Cloud][Acceptable] + idle: [.....8] [ip4][..udp] [....10.200.2.11][52541] -> [........8.8.8.8][...53] [DNS.AppleSiri][VirtAssistant][Acceptable] + idle: [.....3] [ip4][..udp] [....10.200.2.11][57051] -> [........8.8.8.8][...53] [DNS.Teams][Collaborative][Safe] + idle: [.....6] [ip4][..udp] [....10.200.2.11][42790] -> [........8.8.8.8][...53] [DNS.Teams][Collaborative][Safe] + idle: [....10] [ip4][..udp] [....10.200.2.11][44883] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dns_doh.pcap.out b/test/results/flow-info/dns_doh.pcap.out new file mode 100644 index 000000000..8dbb3a682 --- /dev/null +++ b/test/results/flow-info/dns_doh.pcap.out @@ -0,0 +1,15 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....172.20.10.4][49877] -> [.104.16.248.249][..443] + detected: [.....1] [ip4][..tcp] [....172.20.10.4][49877] -> [.104.16.248.249][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [.....1] [ip4][..tcp] [....172.20.10.4][49877] -> [.104.16.248.249][..443] [TLS.DoH_DoT][Network][Fun] + analyse: [.....1] [ip4][..tcp] [....172.20.10.4][49877] -> [.104.16.248.249][..443] [TLS.DoH_DoT][Network][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.535| 0.064| 0.132] + [IAT(c->s)...: 0.000| 0.535| 0.058| 0.128][IAT(s->c)...: 0.000| 0.525| 0.070| 0.135] + [PKTLEN(c->s): 54.000| 571.000| 134.400| 124.200][PKTLEN(s->c): 54.000|1354.000| 355.000| 444.600] + [BINS(c->s)..: 9,2,3,1,0,1,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,0,0,0,0,0,1,0,0,0,1,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..tcp] [....172.20.10.4][49877] -> [.104.16.248.249][..443] [TLS.DoH_DoT][Network][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dns_dot.pcap.out b/test/results/flow-info/dns_dot.pcap.out new file mode 100644 index 000000000..322e51ce7 --- /dev/null +++ b/test/results/flow-info/dns_dot.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.185][58290] -> [........8.8.8.8][..853] + detected: [.....1] [ip4][..tcp] [..192.168.1.185][58290] -> [........8.8.8.8][..853] [TLS.Google][Web][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....1] [ip4][..tcp] [..192.168.1.185][58290] -> [........8.8.8.8][..853] [TLS.DoH_DoT][Network][Fun] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + idle: [.....1] [ip4][..tcp] [..192.168.1.185][58290] -> [........8.8.8.8][..853] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dns_exfiltration.pcap.out b/test/results/flow-info/dns_exfiltration.pcap.out new file mode 100644 index 000000000..ddb3916a7 --- /dev/null +++ b/test/results/flow-info/dns_exfiltration.pcap.out @@ -0,0 +1,20 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.192.168.220.56][56373] -> [192.168.203.167][...53] + detected: [.....1] [ip4][..udp] [.192.168.220.56][56373] -> [192.168.203.167][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name + detection-update: [.....1] [ip4][..udp] [.192.168.220.56][56373] -> [192.168.203.167][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + analyse: [.....1] [ip4][..udp] [.192.168.220.56][56373] -> [192.168.203.167][...53] [DNS][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.004| 1.036| 0.914| 0.282] + [IAT(c->s)...: 0.005| 1.036| 0.944| 0.251][IAT(s->c)...: 0.004| 1.016| 0.885| 0.305] + [PKTLEN(c->s): 101.000| 215.000| 114.400| 31.200][PKTLEN(s->c): 148.000| 386.000| 178.400| 63.000] + [BINS(c->s)..: 0,13,1,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,13,1,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....1] [ip4][..udp] [.192.168.220.56][56373] -> [192.168.203.167][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + idle: [.....1] [ip4][..udp] [.192.168.220.56][56373] -> [192.168.203.167][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dns_fragmented.pcap.out b/test/results/flow-info/dns_fragmented.pcap.out new file mode 100644 index 000000000..e340b04f8 --- /dev/null +++ b/test/results/flow-info/dns_fragmented.pcap.out @@ -0,0 +1,99 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..172.217.40.76][56680] -> [.193.24.227.238][...53] + detected: [.....1] [ip4][..udp] [..172.217.40.76][56680] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....1] [ip4][..udp] [..172.217.40.76][56680] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [.....2] [ip6][..udp] [................2a00:1450:4013:c03::10a][46433] -> [..................2001:470:765b::a25:53][...53] + detected: [.....2] [ip6][..udp] [................2a00:1450:4013:c03::10a][46433] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + detection-update: [.....2] [ip6][..udp] [................2a00:1450:4013:c03::10a][46433] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv6/L4 payload detection failed + new: [.....3] [ip6][..udp] [................2a00:1450:4013:c06::105][63369] -> [..................2001:470:765b::a25:53][...53] + detected: [.....3] [ip6][..udp] [................2a00:1450:4013:c06::105][63369] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + detection-update: [.....3] [ip6][..udp] [................2a00:1450:4013:c06::105][63369] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv6/L4 payload detection failed + new: [.....4] [ip4][..udp] [173.194.169.104][59464] -> [.193.24.227.238][...53] + detected: [.....4] [ip4][..udp] [173.194.169.104][59464] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....4] [ip4][..udp] [173.194.169.104][59464] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [.....5] [ip6][..udp] [................2a00:1450:400c:c00::106][54430] -> [..................2001:470:765b::a25:53][...53] + detected: [.....5] [ip6][..udp] [................2a00:1450:400c:c00::106][54430] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + detection-update: [.....5] [ip6][..udp] [................2a00:1450:400c:c00::106][54430] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + new: [.....6] [ip4][..udp] [..74.125.47.136][59330] -> [.193.24.227.238][...53] + detected: [.....6] [ip4][..udp] [..74.125.47.136][59330] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....6] [ip4][..udp] [..74.125.47.136][59330] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [.....7] [ip6][..udp] [................2a00:1450:4013:c05::10e][34944] -> [..................2001:470:765b::a25:53][...53] + detected: [.....7] [ip6][..udp] [................2a00:1450:4013:c05::10e][34944] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + detection-update: [.....7] [ip6][..udp] [................2a00:1450:4013:c05::10e][34944] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + DAEMON-EVENT: [Processed: 14 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 7 / 7|skipped: 0|!detected: 0|guessed: 0|detection-updates: 7|updates: 0] + new: [.....8] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][47634] -> [..................2001:470:765b::a25:53][...53] + detected: [.....8] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][47634] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + detection-update: [.....8] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][47634] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + new: [.....9] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][33592] -> [..................2001:470:765b::a25:53][...53] + detected: [.....9] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][33592] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + detection-update: [.....9] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][33592] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + new: [....10] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][46316] -> [..................2001:470:765b::a25:53][...53] + detected: [....10] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][46316] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + detection-update: [....10] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][46316] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + new: [....11] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][46440] -> [..................2001:470:765b::a25:53][...53] + detected: [....11] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][46440] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + detection-update: [....11] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][46440] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + idle: [.....1] [ip4][..udp] [..172.217.40.76][56680] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable] + idle: [.....3] [ip6][..udp] [................2a00:1450:4013:c06::105][63369] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + idle: [.....7] [ip6][..udp] [................2a00:1450:4013:c05::10e][34944] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + idle: [.....4] [ip4][..udp] [173.194.169.104][59464] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable] + idle: [.....6] [ip4][..udp] [..74.125.47.136][59330] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable] + idle: [.....5] [ip6][..udp] [................2a00:1450:400c:c00::106][54430] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + idle: [.....2] [ip6][..udp] [................2a00:1450:4013:c03::10a][46433] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + DAEMON-EVENT: [Processed: 22 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 11|skipped: 0|!detected: 0|guessed: 0|detection-updates: 11|updates: 0] + new: [....12] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][48758] -> [...................2606:4700:4700::1111][...53] + detected: [....12] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][48758] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable] + detection-update: [....12] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][48758] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable] + new: [....13] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][52814] -> [...................2606:4700:4700::1111][...53] + detected: [....13] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][52814] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable] + detection-update: [....13] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][52814] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable] + new: [....14] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][42344] -> [............................2620:fe::fe][...53] + detected: [....14] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][42344] -> [............................2620:fe::fe][...53] [DNS][Network][Acceptable] + detection-update: [....14] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][42344] -> [............................2620:fe::fe][...53] [DNS][Network][Acceptable] + idle: [.....8] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][47634] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + idle: [.....9] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][33592] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + idle: [....10] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][46316] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + idle: [....11] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][46440] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + new: [....15] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][46709] -> [............................2620:fe::fe][...53] + detected: [....15] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][46709] -> [............................2620:fe::fe][...53] [DNS][Network][Acceptable] + detection-update: [....15] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][46709] -> [............................2620:fe::fe][...53] [DNS][Network][Acceptable] + new: [....16] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][55729] -> [..................2001:470:765b::a25:53][...53] + detected: [....16] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][55729] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + detection-update: [....16] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][55729] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv6/L4 payload detection failed + new: [....17] [ip4][..udp] [....194.247.5.6][51791] -> [.193.24.227.238][...53] + detected: [....17] [ip4][..udp] [....194.247.5.6][51791] -> [.193.24.227.238][...53] [DNS][Network][Acceptable] + detection-update: [....17] [ip4][..udp] [....194.247.5.6][51791] -> [.193.24.227.238][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....18] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][60550] -> [...................2606:4700:4700::1111][...53] + detected: [....18] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][60550] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable] + detection-update: [....18] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][60550] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable] + new: [....19] [ip6][..tcp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][57089] -> [.............2001:470:1f0b:16b0::a26:53][...53] + detected: [....19] [ip6][..tcp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][57089] -> [.............2001:470:1f0b:16b0::a26:53][...53] [DNS][Network][Acceptable] + detection-update: [....19] [ip6][..tcp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][57089] -> [.............2001:470:1f0b:16b0::a26:53][...53] [DNS][Network][Acceptable] + new: [....20] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][54590] -> [...................2606:4700:4700::1111][...53] + detected: [....20] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][54590] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable] + detection-update: [....20] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][54590] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable] + new: [....21] [ip4][..tcp] [....194.247.5.6][39005] -> [...194.247.5.14][...53] + detected: [....21] [ip4][..tcp] [....194.247.5.6][39005] -> [...194.247.5.14][...53] [DNS][Network][Acceptable] + detection-update: [....21] [ip4][..tcp] [....194.247.5.6][39005] -> [...194.247.5.14][...53] [DNS][Network][Acceptable] + idle: [....18] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][60550] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable] + end: [....21] [ip4][..tcp] [....194.247.5.6][39005] -> [...194.247.5.14][...53] [DNS][Network][Acceptable] + idle: [....16] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][55729] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable] + idle: [....20] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][54590] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable] + idle: [....13] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][52814] -> [...................2606:4700:4700::1111][...53] + idle: [....12] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][48758] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable] + idle: [....14] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][42344] -> [............................2620:fe::fe][...53] [DNS][Network][Acceptable] + idle: [....17] [ip4][..udp] [....194.247.5.6][51791] -> [.193.24.227.238][...53] [DNS][Network][Acceptable] + idle: [....15] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][46709] -> [............................2620:fe::fe][...53] [DNS][Network][Acceptable] + end: [....19] [ip6][..tcp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][57089] -> [.............2001:470:1f0b:16b0::a26:53][...53] [DNS][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dns_invert_query.pcapng.out b/test/results/flow-info/dns_invert_query.pcapng.out new file mode 100644 index 000000000..2d00bf896 --- /dev/null +++ b/test/results/flow-info/dns_invert_query.pcapng.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [173.147.108.174][18427] -> [...244.187.95.1][...53] + detected: [.....1] [ip4][..udp] [173.147.108.174][18427] -> [...244.187.95.1][...53] [DNS][Network][Acceptable] + idle: [.....1] [ip4][..udp] [173.147.108.174][18427] -> [...244.187.95.1][...53] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dns_long_domainname.pcap.out b/test/results/flow-info/dns_long_domainname.pcap.out new file mode 100644 index 000000000..5ca786129 --- /dev/null +++ b/test/results/flow-info/dns_long_domainname.pcap.out @@ -0,0 +1,8 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.1.168][65311] -> [........8.8.8.8][...53] + detected: [.....1] [ip4][..udp] [..192.168.1.168][65311] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....1] [ip4][..udp] [..192.168.1.168][65311] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + idle: [.....1] [ip4][..udp] [..192.168.1.168][65311] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dnscrypt-v1-and-resolver-pings.pcap.out b/test/results/flow-info/dnscrypt-v1-and-resolver-pings.pcap.out new file mode 100644 index 000000000..4d2de9a8a --- /dev/null +++ b/test/results/flow-info/dnscrypt-v1-and-resolver-pings.pcap.out @@ -0,0 +1,1061 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.......10.0.0.1][38388] -> [..149.56.228.45][..443] + detected: [.....1] [ip4][..udp] [.......10.0.0.1][38388] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + new: [.....2] [ip4][..udp] [.......10.0.0.1][45722] -> [..149.56.228.45][..443] + detected: [.....2] [ip4][..udp] [.......10.0.0.1][45722] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [.....3] [ip4][..udp] [.......10.0.0.1][35495] -> [..149.56.228.45][..443] + detected: [.....3] [ip4][..udp] [.......10.0.0.1][35495] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [.....4] [ip4][..udp] [.......10.0.0.1][33565] -> [..149.56.228.45][..443] + detected: [.....4] [ip4][..udp] [.......10.0.0.1][33565] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + new: [.....5] [ip4][..udp] [.......10.0.0.1][35228] -> [..149.56.228.45][..443] + detected: [.....5] [ip4][..udp] [.......10.0.0.1][35228] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [.....6] [ip4][..udp] [.......10.0.0.1][60301] -> [..149.56.228.45][..443] + detected: [.....6] [ip4][..udp] [.......10.0.0.1][60301] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + DAEMON-EVENT: [Processed: 12 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 6 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....7] [ip4][..udp] [.......10.0.0.1][51004] -> [..62.210.180.71][.1053] + detected: [.....7] [ip4][..udp] [.......10.0.0.1][51004] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + new: [.....8] [ip4][..udp] [.......10.0.0.1][52636] -> [..62.210.180.71][.1053] + detected: [.....8] [ip4][..udp] [.......10.0.0.1][52636] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + new: [.....9] [ip4][..udp] [.......10.0.0.1][49518] -> [..62.210.180.71][.1053] + detected: [.....9] [ip4][..udp] [.......10.0.0.1][49518] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + new: [....10] [ip4][..udp] [.......10.0.0.1][43748] -> [..62.210.180.71][.1053] + detected: [....10] [ip4][..udp] [.......10.0.0.1][43748] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....11] [ip4][..udp] [.......10.0.0.1][57395] -> [..62.210.180.71][.1053] + detected: [....11] [ip4][..udp] [.......10.0.0.1][57395] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....12] [ip4][..udp] [.......10.0.0.1][53299] -> [..62.210.180.71][.1053] + detected: [....12] [ip4][..udp] [.......10.0.0.1][53299] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....13] [ip4][..udp] [.......10.0.0.1][53697] -> [.185.134.196.55][.8443] + detected: [....13] [ip4][..udp] [.......10.0.0.1][53697] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + new: [....14] [ip4][..udp] [.......10.0.0.1][37413] -> [.185.134.196.55][.8443] + detected: [....14] [ip4][..udp] [.......10.0.0.1][37413] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....15] [ip4][..udp] [.......10.0.0.1][35005] -> [.185.134.196.55][.8443] + detected: [....15] [ip4][..udp] [.......10.0.0.1][35005] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....16] [ip4][..udp] [.......10.0.0.1][59405] -> [.185.134.196.55][.8443] + detected: [....16] [ip4][..udp] [.......10.0.0.1][59405] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + new: [....17] [ip4][..udp] [.......10.0.0.1][50435] -> [.185.134.196.55][.8443] + detected: [....17] [ip4][..udp] [.......10.0.0.1][50435] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + new: [....18] [ip4][..udp] [.......10.0.0.1][55123] -> [.185.134.196.55][.8443] + detected: [....18] [ip4][..udp] [.......10.0.0.1][55123] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....19] [ip4][..udp] [.......10.0.0.1][44712] -> [104.238.186.192][..443] + detected: [....19] [ip4][..udp] [.......10.0.0.1][44712] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + new: [....20] [ip4][..udp] [.......10.0.0.1][56997] -> [104.238.186.192][..443] + detected: [....20] [ip4][..udp] [.......10.0.0.1][56997] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....21] [ip4][..udp] [.......10.0.0.1][39655] -> [104.238.186.192][..443] + detected: [....21] [ip4][..udp] [.......10.0.0.1][39655] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + new: [....22] [ip4][..udp] [.......10.0.0.1][59261] -> [104.238.186.192][..443] + detected: [....22] [ip4][..udp] [.......10.0.0.1][59261] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + new: [....23] [ip4][..udp] [.......10.0.0.1][59641] -> [104.238.186.192][..443] + detected: [....23] [ip4][..udp] [.......10.0.0.1][59641] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + new: [....24] [ip4][..udp] [.......10.0.0.1][44491] -> [104.238.186.192][..443] + detected: [....24] [ip4][..udp] [.......10.0.0.1][44491] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....25] [ip4][..udp] [.......10.0.0.1][32793] -> [.209.250.241.25][..443] + detected: [....25] [ip4][..udp] [.......10.0.0.1][32793] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + new: [....26] [ip4][..udp] [.......10.0.0.1][56035] -> [.209.250.241.25][..443] + detected: [....26] [ip4][..udp] [.......10.0.0.1][56035] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....27] [ip4][..udp] [.......10.0.0.1][37123] -> [.209.250.241.25][..443] + detected: [....27] [ip4][..udp] [.......10.0.0.1][37123] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....28] [ip4][..udp] [.......10.0.0.1][37950] -> [.209.250.241.25][..443] + detected: [....28] [ip4][..udp] [.......10.0.0.1][37950] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + new: [....29] [ip4][..udp] [.......10.0.0.1][34324] -> [.209.250.241.25][..443] + detected: [....29] [ip4][..udp] [.......10.0.0.1][34324] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + new: [....30] [ip4][..udp] [.......10.0.0.1][59367] -> [.209.250.241.25][..443] + detected: [....30] [ip4][..udp] [.......10.0.0.1][59367] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....31] [ip4][..udp] [.......10.0.0.1][43609] -> [....41.79.69.13][..443] + detected: [....31] [ip4][..udp] [.......10.0.0.1][43609] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + new: [....32] [ip4][..udp] [.......10.0.0.1][46229] -> [....41.79.69.13][..443] + detected: [....32] [ip4][..udp] [.......10.0.0.1][46229] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....33] [ip4][..udp] [.......10.0.0.1][56043] -> [....41.79.69.13][..443] + detected: [....33] [ip4][..udp] [.......10.0.0.1][56043] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + new: [....34] [ip4][..udp] [.......10.0.0.1][38136] -> [....41.79.69.13][..443] + detected: [....34] [ip4][..udp] [.......10.0.0.1][38136] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....35] [ip4][..udp] [.......10.0.0.1][56177] -> [....41.79.69.13][..443] + detected: [....35] [ip4][..udp] [.......10.0.0.1][56177] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + new: [....36] [ip4][..udp] [.......10.0.0.1][43365] -> [....41.79.69.13][..443] + detected: [....36] [ip4][..udp] [.......10.0.0.1][43365] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + new: [....37] [ip4][..udp] [.......10.0.0.1][45767] -> [..51.15.122.250][..443] + detected: [....37] [ip4][..udp] [.......10.0.0.1][45767] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + new: [....38] [ip4][..udp] [.......10.0.0.1][38867] -> [..51.15.122.250][..443] + detected: [....38] [ip4][..udp] [.......10.0.0.1][38867] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....39] [ip4][..udp] [.......10.0.0.1][59709] -> [..51.15.122.250][..443] + detected: [....39] [ip4][..udp] [.......10.0.0.1][59709] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....40] [ip4][..udp] [.......10.0.0.1][36668] -> [..51.15.122.250][..443] + detected: [....40] [ip4][..udp] [.......10.0.0.1][36668] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + new: [....41] [ip4][..udp] [.......10.0.0.1][39007] -> [..51.15.122.250][..443] + detected: [....41] [ip4][..udp] [.......10.0.0.1][39007] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....42] [ip4][..udp] [.......10.0.0.1][38362] -> [..51.15.122.250][..443] + detected: [....42] [ip4][..udp] [.......10.0.0.1][38362] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + new: [....43] [ip4][..udp] [.......10.0.0.1][59476] -> [.139.59.200.116][..443] + detected: [....43] [ip4][..udp] [.......10.0.0.1][59476] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + new: [....44] [ip4][..udp] [.......10.0.0.1][47341] -> [.139.59.200.116][..443] + detected: [....44] [ip4][..udp] [.......10.0.0.1][47341] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + new: [....45] [ip4][..udp] [.......10.0.0.1][50335] -> [.139.59.200.116][..443] + detected: [....45] [ip4][..udp] [.......10.0.0.1][50335] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + new: [....46] [ip4][..udp] [.......10.0.0.1][43633] -> [.139.59.200.116][..443] + detected: [....46] [ip4][..udp] [.......10.0.0.1][43633] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....47] [ip4][..udp] [.......10.0.0.1][37595] -> [.139.59.200.116][..443] + detected: [....47] [ip4][..udp] [.......10.0.0.1][37595] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....48] [ip4][..udp] [.......10.0.0.1][59194] -> [.139.59.200.116][..443] + detected: [....48] [ip4][..udp] [.......10.0.0.1][59194] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....49] [ip4][..udp] [.......10.0.0.1][47865] -> [...195.30.94.28][.8443] + detected: [....49] [ip4][..udp] [.......10.0.0.1][47865] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + new: [....50] [ip4][..udp] [.......10.0.0.1][33369] -> [...195.30.94.28][.8443] + detected: [....50] [ip4][..udp] [.......10.0.0.1][33369] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + new: [....51] [ip4][..udp] [.......10.0.0.1][34885] -> [...195.30.94.28][.8443] + detected: [....51] [ip4][..udp] [.......10.0.0.1][34885] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....52] [ip4][..udp] [.......10.0.0.1][44093] -> [...195.30.94.28][.8443] + detected: [....52] [ip4][..udp] [.......10.0.0.1][44093] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + new: [....53] [ip4][..udp] [.......10.0.0.1][53811] -> [...195.30.94.28][.8443] + detected: [....53] [ip4][..udp] [.......10.0.0.1][53811] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....54] [ip4][..udp] [.......10.0.0.1][44282] -> [...195.30.94.28][.8443] + detected: [....54] [ip4][..udp] [.......10.0.0.1][44282] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....55] [ip4][..udp] [.......10.0.0.1][32970] -> [..142.4.204.111][..443] + detected: [....55] [ip4][..udp] [.......10.0.0.1][32970] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + new: [....56] [ip4][..udp] [.......10.0.0.1][60962] -> [..142.4.204.111][..443] + detected: [....56] [ip4][..udp] [.......10.0.0.1][60962] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + new: [....57] [ip4][..udp] [.......10.0.0.1][33071] -> [..142.4.204.111][..443] + detected: [....57] [ip4][..udp] [.......10.0.0.1][33071] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....58] [ip4][..udp] [.......10.0.0.1][43505] -> [..142.4.204.111][..443] + detected: [....58] [ip4][..udp] [.......10.0.0.1][43505] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + new: [....59] [ip4][..udp] [.......10.0.0.1][52284] -> [..142.4.204.111][..443] + detected: [....59] [ip4][..udp] [.......10.0.0.1][52284] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + new: [....60] [ip4][..udp] [.......10.0.0.1][46856] -> [..142.4.204.111][..443] + detected: [....60] [ip4][..udp] [.......10.0.0.1][46856] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....61] [ip4][..udp] [.......10.0.0.1][50035] -> [.149.112.112.10][.8443] + detected: [....61] [ip4][..udp] [.......10.0.0.1][50035] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + new: [....62] [ip4][..udp] [.......10.0.0.1][40009] -> [.149.112.112.10][.8443] + detected: [....62] [ip4][..udp] [.......10.0.0.1][40009] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....63] [ip4][..udp] [.......10.0.0.1][56022] -> [.149.112.112.10][.8443] + detected: [....63] [ip4][..udp] [.......10.0.0.1][56022] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....64] [ip4][..udp] [.......10.0.0.1][42570] -> [.149.112.112.10][.8443] + detected: [....64] [ip4][..udp] [.......10.0.0.1][42570] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + new: [....65] [ip4][..udp] [.......10.0.0.1][57465] -> [.149.112.112.10][.8443] + detected: [....65] [ip4][..udp] [.......10.0.0.1][57465] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....66] [ip4][..udp] [.......10.0.0.1][55482] -> [.149.112.112.10][.8443] + detected: [....66] [ip4][..udp] [.......10.0.0.1][55482] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....67] [ip4][..udp] [.......10.0.0.1][49512] -> [..172.104.93.80][.1443] + detected: [....67] [ip4][..udp] [.......10.0.0.1][49512] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + new: [....68] [ip4][..udp] [.......10.0.0.1][50913] -> [..172.104.93.80][.1443] + detected: [....68] [ip4][..udp] [.......10.0.0.1][50913] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....69] [ip4][..udp] [.......10.0.0.1][41800] -> [..172.104.93.80][.1443] + detected: [....69] [ip4][..udp] [.......10.0.0.1][41800] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....70] [ip4][..udp] [.......10.0.0.1][38283] -> [..172.104.93.80][.1443] + detected: [....70] [ip4][..udp] [.......10.0.0.1][38283] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + new: [....71] [ip4][..udp] [.......10.0.0.1][59489] -> [..172.104.93.80][.1443] + detected: [....71] [ip4][..udp] [.......10.0.0.1][59489] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + new: [....72] [ip4][..udp] [.......10.0.0.1][56902] -> [..172.104.93.80][.1443] + detected: [....72] [ip4][..udp] [.......10.0.0.1][56902] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + update: [.....1] [ip4][..udp] [.......10.0.0.1][38388] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + update: [.....5] [ip4][..udp] [.......10.0.0.1][35228] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + update: [.....2] [ip4][..udp] [.......10.0.0.1][45722] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + update: [.....3] [ip4][..udp] [.......10.0.0.1][35495] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + update: [.....4] [ip4][..udp] [.......10.0.0.1][33565] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + update: [.....6] [ip4][..udp] [.......10.0.0.1][60301] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + new: [....73] [ip4][..udp] [.......10.0.0.1][38349] -> [205.185.116.116][..553] + detected: [....73] [ip4][..udp] [.......10.0.0.1][38349] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + new: [....74] [ip4][..udp] [.......10.0.0.1][38879] -> [205.185.116.116][..553] + detected: [....74] [ip4][..udp] [.......10.0.0.1][38879] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + new: [....75] [ip4][..udp] [.......10.0.0.1][43528] -> [205.185.116.116][..553] + detected: [....75] [ip4][..udp] [.......10.0.0.1][43528] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + new: [....76] [ip4][..udp] [.......10.0.0.1][51770] -> [205.185.116.116][..553] + detected: [....76] [ip4][..udp] [.......10.0.0.1][51770] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + new: [....77] [ip4][..udp] [.......10.0.0.1][38278] -> [205.185.116.116][..553] + detected: [....77] [ip4][..udp] [.......10.0.0.1][38278] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....78] [ip4][..udp] [.......10.0.0.1][55822] -> [205.185.116.116][..553] + detected: [....78] [ip4][..udp] [.......10.0.0.1][55822] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....79] [ip4][..udp] [.......10.0.0.1][55834] -> [..52.65.235.129][..443] + detected: [....79] [ip4][..udp] [.......10.0.0.1][55834] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + new: [....80] [ip4][..udp] [.......10.0.0.1][46313] -> [..52.65.235.129][..443] + detected: [....80] [ip4][..udp] [.......10.0.0.1][46313] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + new: [....81] [ip4][..udp] [.......10.0.0.1][52911] -> [..52.65.235.129][..443] + detected: [....81] [ip4][..udp] [.......10.0.0.1][52911] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....82] [ip4][..udp] [.......10.0.0.1][47685] -> [..52.65.235.129][..443] + detected: [....82] [ip4][..udp] [.......10.0.0.1][47685] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + new: [....83] [ip4][..udp] [.......10.0.0.1][55979] -> [..52.65.235.129][..443] + detected: [....83] [ip4][..udp] [.......10.0.0.1][55979] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....84] [ip4][..udp] [.......10.0.0.1][55409] -> [..52.65.235.129][..443] + detected: [....84] [ip4][..udp] [.......10.0.0.1][55409] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....85] [ip4][..udp] [.......10.0.0.1][38812] -> [....51.15.62.65][..443] + detected: [....85] [ip4][..udp] [.......10.0.0.1][38812] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....86] [ip4][..udp] [.......10.0.0.1][45993] -> [....51.15.62.65][..443] + detected: [....86] [ip4][..udp] [.......10.0.0.1][45993] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + new: [....87] [ip4][..udp] [.......10.0.0.1][56688] -> [....51.15.62.65][..443] + detected: [....87] [ip4][..udp] [.......10.0.0.1][56688] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....88] [ip4][..udp] [.......10.0.0.1][33521] -> [....51.15.62.65][..443] + detected: [....88] [ip4][..udp] [.......10.0.0.1][33521] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....89] [ip4][..udp] [.......10.0.0.1][43714] -> [....51.15.62.65][..443] + detected: [....89] [ip4][..udp] [.......10.0.0.1][43714] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + new: [....90] [ip4][..udp] [.......10.0.0.1][60735] -> [....51.15.62.65][..443] + detected: [....90] [ip4][..udp] [.......10.0.0.1][60735] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + new: [....91] [ip4][..udp] [.......10.0.0.1][41913] -> [..45.153.187.96][.4343] + detected: [....91] [ip4][..udp] [.......10.0.0.1][41913] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + new: [....92] [ip4][..udp] [.......10.0.0.1][37890] -> [..45.153.187.96][.4343] + detected: [....92] [ip4][..udp] [.......10.0.0.1][37890] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....93] [ip4][..udp] [.......10.0.0.1][45987] -> [..45.153.187.96][.4343] + detected: [....93] [ip4][..udp] [.......10.0.0.1][45987] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....94] [ip4][..udp] [.......10.0.0.1][46063] -> [..45.153.187.96][.4343] + detected: [....94] [ip4][..udp] [.......10.0.0.1][46063] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + new: [....95] [ip4][..udp] [.......10.0.0.1][43129] -> [..45.153.187.96][.4343] + detected: [....95] [ip4][..udp] [.......10.0.0.1][43129] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + new: [....96] [ip4][..udp] [.......10.0.0.1][40451] -> [..45.153.187.96][.4343] + detected: [....96] [ip4][..udp] [.......10.0.0.1][40451] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....97] [ip4][..udp] [.......10.0.0.1][55896] -> [...66.85.30.115][..443] + detected: [....97] [ip4][..udp] [.......10.0.0.1][55896] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + new: [....98] [ip4][..udp] [.......10.0.0.1][48448] -> [...66.85.30.115][..443] + detected: [....98] [ip4][..udp] [.......10.0.0.1][48448] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....99] [ip4][..udp] [.......10.0.0.1][40099] -> [...66.85.30.115][..443] + detected: [....99] [ip4][..udp] [.......10.0.0.1][40099] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + new: [...100] [ip4][..udp] [.......10.0.0.1][47432] -> [...66.85.30.115][..443] + detected: [...100] [ip4][..udp] [.......10.0.0.1][47432] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...101] [ip4][..udp] [.......10.0.0.1][54112] -> [...66.85.30.115][..443] + detected: [...101] [ip4][..udp] [.......10.0.0.1][54112] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + new: [...102] [ip4][..udp] [.......10.0.0.1][35634] -> [...66.85.30.115][..443] + detected: [...102] [ip4][..udp] [.......10.0.0.1][35634] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...103] [ip4][..udp] [.......10.0.0.1][46255] -> [..93.95.226.165][..443] + detected: [...103] [ip4][..udp] [.......10.0.0.1][46255] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + new: [...104] [ip4][..udp] [.......10.0.0.1][49186] -> [..93.95.226.165][..443] + detected: [...104] [ip4][..udp] [.......10.0.0.1][49186] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...105] [ip4][..udp] [.......10.0.0.1][58113] -> [..93.95.226.165][..443] + detected: [...105] [ip4][..udp] [.......10.0.0.1][58113] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + new: [...106] [ip4][..udp] [.......10.0.0.1][42156] -> [..93.95.226.165][..443] + detected: [...106] [ip4][..udp] [.......10.0.0.1][42156] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...107] [ip4][..udp] [.......10.0.0.1][58936] -> [..93.95.226.165][..443] + detected: [...107] [ip4][..udp] [.......10.0.0.1][58936] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + new: [...108] [ip4][..udp] [.......10.0.0.1][40595] -> [..93.95.226.165][..443] + detected: [...108] [ip4][..udp] [.......10.0.0.1][40595] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...109] [ip4][..udp] [.......10.0.0.1][37035] -> [..51.158.166.97][..443] + detected: [...109] [ip4][..udp] [.......10.0.0.1][37035] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + new: [...110] [ip4][..udp] [.......10.0.0.1][47257] -> [..51.158.166.97][..443] + detected: [...110] [ip4][..udp] [.......10.0.0.1][47257] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...111] [ip4][..udp] [.......10.0.0.1][46066] -> [..51.158.166.97][..443] + detected: [...111] [ip4][..udp] [.......10.0.0.1][46066] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...112] [ip4][..udp] [.......10.0.0.1][56494] -> [..51.158.166.97][..443] + detected: [...112] [ip4][..udp] [.......10.0.0.1][56494] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + new: [...113] [ip4][..udp] [.......10.0.0.1][60334] -> [..51.158.166.97][..443] + detected: [...113] [ip4][..udp] [.......10.0.0.1][60334] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + new: [...114] [ip4][..udp] [.......10.0.0.1][48065] -> [..51.158.166.97][..443] + detected: [...114] [ip4][..udp] [.......10.0.0.1][48065] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...115] [ip4][..udp] [.......10.0.0.1][41717] -> [.176.56.237.171][..443] + detected: [...115] [ip4][..udp] [.......10.0.0.1][41717] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + new: [...116] [ip4][..udp] [.......10.0.0.1][55046] -> [.176.56.237.171][..443] + detected: [...116] [ip4][..udp] [.......10.0.0.1][55046] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...117] [ip4][..udp] [.......10.0.0.1][51363] -> [.176.56.237.171][..443] + detected: [...117] [ip4][..udp] [.......10.0.0.1][51363] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + new: [...118] [ip4][..udp] [.......10.0.0.1][36676] -> [.176.56.237.171][..443] + detected: [...118] [ip4][..udp] [.......10.0.0.1][36676] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...119] [ip4][..udp] [.......10.0.0.1][49008] -> [.176.56.237.171][..443] + detected: [...119] [ip4][..udp] [.......10.0.0.1][49008] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + new: [...120] [ip4][..udp] [.......10.0.0.1][48325] -> [.176.56.237.171][..443] + detected: [...120] [ip4][..udp] [.......10.0.0.1][48325] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...121] [ip4][..udp] [.......10.0.0.1][60091] -> [178.216.201.222][.2053] + detected: [...121] [ip4][..udp] [.......10.0.0.1][60091] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + new: [...122] [ip4][..udp] [.......10.0.0.1][52356] -> [178.216.201.222][.2053] + detected: [...122] [ip4][..udp] [.......10.0.0.1][52356] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + new: [...123] [ip4][..udp] [.......10.0.0.1][53117] -> [178.216.201.222][.2053] + detected: [...123] [ip4][..udp] [.......10.0.0.1][53117] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...124] [ip4][..udp] [.......10.0.0.1][52221] -> [178.216.201.222][.2053] + detected: [...124] [ip4][..udp] [.......10.0.0.1][52221] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + new: [...125] [ip4][..udp] [.......10.0.0.1][38594] -> [178.216.201.222][.2053] + detected: [...125] [ip4][..udp] [.......10.0.0.1][38594] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...126] [ip4][..udp] [.......10.0.0.1][58740] -> [178.216.201.222][.2053] + detected: [...126] [ip4][..udp] [.......10.0.0.1][58740] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + new: [...127] [ip4][..udp] [.......10.0.0.1][43224] -> [...45.76.113.31][..443] + detected: [...127] [ip4][..udp] [.......10.0.0.1][43224] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + new: [...128] [ip4][..udp] [.......10.0.0.1][55267] -> [...45.76.113.31][..443] + detected: [...128] [ip4][..udp] [.......10.0.0.1][55267] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...129] [ip4][..udp] [.......10.0.0.1][51589] -> [...45.76.113.31][..443] + detected: [...129] [ip4][..udp] [.......10.0.0.1][51589] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + new: [...130] [ip4][..udp] [.......10.0.0.1][43776] -> [...45.76.113.31][..443] + detected: [...130] [ip4][..udp] [.......10.0.0.1][43776] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + new: [...131] [ip4][..udp] [.......10.0.0.1][59707] -> [...45.76.113.31][..443] + detected: [...131] [ip4][..udp] [.......10.0.0.1][59707] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + new: [...132] [ip4][..udp] [.......10.0.0.1][52069] -> [...45.76.113.31][..443] + detected: [...132] [ip4][..udp] [.......10.0.0.1][52069] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...133] [ip4][..udp] [.......10.0.0.1][53876] -> [..151.80.222.79][..443] + detected: [...133] [ip4][..udp] [.......10.0.0.1][53876] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + new: [...134] [ip4][..udp] [.......10.0.0.1][45497] -> [..151.80.222.79][..443] + detected: [...134] [ip4][..udp] [.......10.0.0.1][45497] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + new: [...135] [ip4][..udp] [.......10.0.0.1][47729] -> [..151.80.222.79][..443] + detected: [...135] [ip4][..udp] [.......10.0.0.1][47729] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...136] [ip4][..udp] [.......10.0.0.1][52040] -> [..151.80.222.79][..443] + detected: [...136] [ip4][..udp] [.......10.0.0.1][52040] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + new: [...137] [ip4][..udp] [.......10.0.0.1][57636] -> [..151.80.222.79][..443] + detected: [...137] [ip4][..udp] [.......10.0.0.1][57636] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...138] [ip4][..udp] [.......10.0.0.1][38511] -> [..151.80.222.79][..443] + detected: [...138] [ip4][..udp] [.......10.0.0.1][38511] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + new: [...139] [ip4][..udp] [.......10.0.0.1][59011] -> [...142.4.205.47][..443] + detected: [...139] [ip4][..udp] [.......10.0.0.1][59011] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + new: [...140] [ip4][..udp] [.......10.0.0.1][50387] -> [...142.4.205.47][..443] + detected: [...140] [ip4][..udp] [.......10.0.0.1][50387] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + new: [...141] [ip4][..udp] [.......10.0.0.1][40138] -> [...142.4.205.47][..443] + detected: [...141] [ip4][..udp] [.......10.0.0.1][40138] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...142] [ip4][..udp] [.......10.0.0.1][51935] -> [...142.4.205.47][..443] + detected: [...142] [ip4][..udp] [.......10.0.0.1][51935] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...143] [ip4][..udp] [.......10.0.0.1][54096] -> [...142.4.205.47][..443] + detected: [...143] [ip4][..udp] [.......10.0.0.1][54096] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...144] [ip4][..udp] [.......10.0.0.1][35903] -> [...142.4.205.47][..443] + detected: [...144] [ip4][..udp] [.......10.0.0.1][35903] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + new: [...145] [ip4][..udp] [.......10.0.0.1][37328] -> [193.191.187.107][..443] + detected: [...145] [ip4][..udp] [.......10.0.0.1][37328] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + new: [...146] [ip4][..udp] [.......10.0.0.1][35885] -> [193.191.187.107][..443] + detected: [...146] [ip4][..udp] [.......10.0.0.1][35885] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + new: [...147] [ip4][..udp] [.......10.0.0.1][33279] -> [193.191.187.107][..443] + detected: [...147] [ip4][..udp] [.......10.0.0.1][33279] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...148] [ip4][..udp] [.......10.0.0.1][54215] -> [193.191.187.107][..443] + detected: [...148] [ip4][..udp] [.......10.0.0.1][54215] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + new: [...149] [ip4][..udp] [.......10.0.0.1][49040] -> [193.191.187.107][..443] + detected: [...149] [ip4][..udp] [.......10.0.0.1][49040] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...150] [ip4][..udp] [.......10.0.0.1][49115] -> [193.191.187.107][..443] + detected: [...150] [ip4][..udp] [.......10.0.0.1][49115] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + new: [...151] [ip4][..udp] [.......10.0.0.1][45375] -> [..51.15.124.208][.4343] + detected: [...151] [ip4][..udp] [.......10.0.0.1][45375] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + new: [...152] [ip4][..udp] [.......10.0.0.1][49975] -> [..51.15.124.208][.4343] + detected: [...152] [ip4][..udp] [.......10.0.0.1][49975] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...153] [ip4][..udp] [.......10.0.0.1][38310] -> [..51.15.124.208][.4343] + detected: [...153] [ip4][..udp] [.......10.0.0.1][38310] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + new: [...154] [ip4][..udp] [.......10.0.0.1][55768] -> [..51.15.124.208][.4343] + detected: [...154] [ip4][..udp] [.......10.0.0.1][55768] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...155] [ip4][..udp] [.......10.0.0.1][39910] -> [..51.15.124.208][.4343] + detected: [...155] [ip4][..udp] [.......10.0.0.1][39910] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...156] [ip4][..udp] [.......10.0.0.1][53887] -> [..51.15.124.208][.4343] + detected: [...156] [ip4][..udp] [.......10.0.0.1][53887] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + new: [...157] [ip4][..udp] [.......10.0.0.1][36930] -> [167.114.220.125][..443] + detected: [...157] [ip4][..udp] [.......10.0.0.1][36930] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + new: [...158] [ip4][..udp] [.......10.0.0.1][38508] -> [167.114.220.125][..443] + detected: [...158] [ip4][..udp] [.......10.0.0.1][38508] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...159] [ip4][..udp] [.......10.0.0.1][39816] -> [167.114.220.125][..443] + detected: [...159] [ip4][..udp] [.......10.0.0.1][39816] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + new: [...160] [ip4][..udp] [.......10.0.0.1][45613] -> [167.114.220.125][..443] + detected: [...160] [ip4][..udp] [.......10.0.0.1][45613] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...161] [ip4][..udp] [.......10.0.0.1][59589] -> [167.114.220.125][..443] + detected: [...161] [ip4][..udp] [.......10.0.0.1][59589] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...162] [ip4][..udp] [.......10.0.0.1][45747] -> [167.114.220.125][..443] + detected: [...162] [ip4][..udp] [.......10.0.0.1][45747] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + new: [...163] [ip4][..udp] [.......10.0.0.1][35734] -> [..5.189.170.196][..465] + detected: [...163] [ip4][..udp] [.......10.0.0.1][35734] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + new: [...164] [ip4][..udp] [.......10.0.0.1][44496] -> [..5.189.170.196][..465] + detected: [...164] [ip4][..udp] [.......10.0.0.1][44496] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + new: [...165] [ip4][..udp] [.......10.0.0.1][58104] -> [..5.189.170.196][..465] + detected: [...165] [ip4][..udp] [.......10.0.0.1][58104] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...166] [ip4][..udp] [.......10.0.0.1][40748] -> [..5.189.170.196][..465] + detected: [...166] [ip4][..udp] [.......10.0.0.1][40748] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + new: [...167] [ip4][..udp] [.......10.0.0.1][58650] -> [..5.189.170.196][..465] + detected: [...167] [ip4][..udp] [.......10.0.0.1][58650] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + new: [...168] [ip4][..udp] [.......10.0.0.1][59749] -> [..5.189.170.196][..465] + detected: [...168] [ip4][..udp] [.......10.0.0.1][59749] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...169] [ip4][..udp] [.......10.0.0.1][38709] -> [.185.253.154.66][.4343] + detected: [...169] [ip4][..udp] [.......10.0.0.1][38709] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + new: [...170] [ip4][..udp] [.......10.0.0.1][44469] -> [.185.253.154.66][.4343] + detected: [...170] [ip4][..udp] [.......10.0.0.1][44469] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + new: [...171] [ip4][..udp] [.......10.0.0.1][45815] -> [.185.253.154.66][.4343] + detected: [...171] [ip4][..udp] [.......10.0.0.1][45815] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...172] [ip4][..udp] [.......10.0.0.1][43540] -> [.185.253.154.66][.4343] + detected: [...172] [ip4][..udp] [.......10.0.0.1][43540] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + new: [...173] [ip4][..udp] [.......10.0.0.1][48159] -> [.185.253.154.66][.4343] + detected: [...173] [ip4][..udp] [.......10.0.0.1][48159] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...174] [ip4][..udp] [.......10.0.0.1][38482] -> [.185.253.154.66][.4343] + detected: [...174] [ip4][..udp] [.......10.0.0.1][38482] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...175] [ip4][..udp] [.......10.0.0.1][51647] -> [..142.4.204.111][..443] + detected: [...175] [ip4][..udp] [.......10.0.0.1][51647] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + new: [...176] [ip4][..udp] [.......10.0.0.1][59224] -> [..142.4.204.111][..443] + detected: [...176] [ip4][..udp] [.......10.0.0.1][59224] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + new: [...177] [ip4][..udp] [.......10.0.0.1][41895] -> [..142.4.204.111][..443] + detected: [...177] [ip4][..udp] [.......10.0.0.1][41895] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...178] [ip4][..udp] [.......10.0.0.1][46363] -> [..142.4.204.111][..443] + detected: [...178] [ip4][..udp] [.......10.0.0.1][46363] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + new: [...179] [ip4][..udp] [.......10.0.0.1][57180] -> [..142.4.204.111][..443] + detected: [...179] [ip4][..udp] [.......10.0.0.1][57180] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...180] [ip4][..udp] [.......10.0.0.1][47621] -> [..142.4.204.111][..443] + detected: [...180] [ip4][..udp] [.......10.0.0.1][47621] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + update: [....10] [ip4][..udp] [.......10.0.0.1][43748] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + update: [.....8] [ip4][..udp] [.......10.0.0.1][52636] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + update: [.....7] [ip4][..udp] [.......10.0.0.1][51004] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + update: [....11] [ip4][..udp] [.......10.0.0.1][57395] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + update: [....12] [ip4][..udp] [.......10.0.0.1][53299] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + update: [.....9] [ip4][..udp] [.......10.0.0.1][49518] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + new: [...181] [ip4][..udp] [.......10.0.0.1][38371] -> [.212.47.228.136][..443] + detected: [...181] [ip4][..udp] [.......10.0.0.1][38371] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + new: [...182] [ip4][..udp] [.......10.0.0.1][34228] -> [.212.47.228.136][..443] + detected: [...182] [ip4][..udp] [.......10.0.0.1][34228] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + new: [...183] [ip4][..udp] [.......10.0.0.1][52056] -> [.212.47.228.136][..443] + detected: [...183] [ip4][..udp] [.......10.0.0.1][52056] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...184] [ip4][..udp] [.......10.0.0.1][40775] -> [.212.47.228.136][..443] + detected: [...184] [ip4][..udp] [.......10.0.0.1][40775] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + new: [...185] [ip4][..udp] [.......10.0.0.1][56335] -> [.212.47.228.136][..443] + detected: [...185] [ip4][..udp] [.......10.0.0.1][56335] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...186] [ip4][..udp] [.......10.0.0.1][60885] -> [.212.47.228.136][..443] + detected: [...186] [ip4][..udp] [.......10.0.0.1][60885] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...187] [ip4][..udp] [.......10.0.0.1][58948] -> [....85.5.93.230][.8443] + detected: [...187] [ip4][..udp] [.......10.0.0.1][58948] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] + new: [...188] [ip4][..udp] [.......10.0.0.1][50403] -> [....85.5.93.230][.8443] + detected: [...188] [ip4][..udp] [.......10.0.0.1][50403] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] + new: [...189] [ip4][..udp] [.......10.0.0.1][46646] -> [....85.5.93.230][.8443] + detected: [...189] [ip4][..udp] [.......10.0.0.1][46646] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] + new: [...190] [ip4][..udp] [.......10.0.0.1][57090] -> [....85.5.93.230][.8443] + detected: [...190] [ip4][..udp] [.......10.0.0.1][57090] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...191] [ip4][..udp] [.......10.0.0.1][51826] -> [....85.5.93.230][.8443] + detected: [...191] [ip4][..udp] [.......10.0.0.1][51826] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] + new: [...192] [ip4][..udp] [.......10.0.0.1][39259] -> [....85.5.93.230][.8443] + detected: [...192] [ip4][..udp] [.......10.0.0.1][39259] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + update: [....51] [ip4][..udp] [.......10.0.0.1][34885] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + update: [....47] [ip4][..udp] [.......10.0.0.1][37595] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + update: [....96] [ip4][..udp] [.......10.0.0.1][40451] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + update: [....40] [ip4][..udp] [.......10.0.0.1][36668] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + update: [...123] [ip4][..udp] [.......10.0.0.1][53117] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + update: [....58] [ip4][..udp] [.......10.0.0.1][43505] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + update: [.....1] [ip4][..udp] [.......10.0.0.1][38388] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + update: [...100] [ip4][..udp] [.......10.0.0.1][47432] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + update: [....15] [ip4][..udp] [.......10.0.0.1][35005] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + update: [...110] [ip4][..udp] [.......10.0.0.1][47257] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + update: [....85] [ip4][..udp] [.......10.0.0.1][38812] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + update: [...109] [ip4][..udp] [.......10.0.0.1][37035] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + update: [....38] [ip4][..udp] [.......10.0.0.1][38867] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + update: [...138] [ip4][..udp] [.......10.0.0.1][38511] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + update: [....28] [ip4][..udp] [.......10.0.0.1][37950] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + update: [...130] [ip4][..udp] [.......10.0.0.1][43776] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + update: [...149] [ip4][..udp] [.......10.0.0.1][49040] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + update: [....23] [ip4][..udp] [.......10.0.0.1][59641] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + update: [...142] [ip4][..udp] [.......10.0.0.1][51935] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + update: [...104] [ip4][..udp] [.......10.0.0.1][49186] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + update: [....41] [ip4][..udp] [.......10.0.0.1][39007] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + update: [...132] [ip4][..udp] [.......10.0.0.1][52069] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + update: [....97] [ip4][..udp] [.......10.0.0.1][55896] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + update: [...150] [ip4][..udp] [.......10.0.0.1][49115] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + update: [...116] [ip4][..udp] [.......10.0.0.1][55046] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + update: [....13] [ip4][..udp] [.......10.0.0.1][53697] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + update: [....77] [ip4][..udp] [.......10.0.0.1][38278] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + update: [....69] [ip4][..udp] [.......10.0.0.1][41800] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + update: [...143] [ip4][..udp] [.......10.0.0.1][54096] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + update: [....81] [ip4][..udp] [.......10.0.0.1][52911] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + update: [...118] [ip4][..udp] [.......10.0.0.1][36676] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + update: [....73] [ip4][..udp] [.......10.0.0.1][38349] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + update: [....14] [ip4][..udp] [.......10.0.0.1][37413] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + update: [...119] [ip4][..udp] [.......10.0.0.1][49008] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + update: [....45] [ip4][..udp] [.......10.0.0.1][50335] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + update: [....53] [ip4][..udp] [.......10.0.0.1][53811] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + update: [....65] [ip4][..udp] [.......10.0.0.1][57465] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + update: [....50] [ip4][..udp] [.......10.0.0.1][33369] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + update: [....39] [ip4][..udp] [.......10.0.0.1][59709] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + update: [...102] [ip4][..udp] [.......10.0.0.1][35634] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + update: [....36] [ip4][..udp] [.......10.0.0.1][43365] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + update: [....66] [ip4][..udp] [.......10.0.0.1][55482] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + update: [...101] [ip4][..udp] [.......10.0.0.1][54112] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + update: [....59] [ip4][..udp] [.......10.0.0.1][52284] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + update: [...144] [ip4][..udp] [.......10.0.0.1][35903] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + update: [....95] [ip4][..udp] [.......10.0.0.1][43129] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + update: [....29] [ip4][..udp] [.......10.0.0.1][34324] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + update: [....49] [ip4][..udp] [.......10.0.0.1][47865] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + update: [....21] [ip4][..udp] [.......10.0.0.1][39655] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + update: [...117] [ip4][..udp] [.......10.0.0.1][51363] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + update: [...141] [ip4][..udp] [.......10.0.0.1][40138] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + update: [...140] [ip4][..udp] [.......10.0.0.1][50387] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + update: [....31] [ip4][..udp] [.......10.0.0.1][43609] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + update: [...145] [ip4][..udp] [.......10.0.0.1][37328] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + update: [....84] [ip4][..udp] [.......10.0.0.1][55409] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + update: [...121] [ip4][..udp] [.......10.0.0.1][60091] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + update: [...137] [ip4][..udp] [.......10.0.0.1][57636] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + update: [...147] [ip4][..udp] [.......10.0.0.1][33279] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + update: [...113] [ip4][..udp] [.......10.0.0.1][60334] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + update: [....99] [ip4][..udp] [.......10.0.0.1][40099] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + update: [...114] [ip4][..udp] [.......10.0.0.1][48065] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + update: [....89] [ip4][..udp] [.......10.0.0.1][43714] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + update: [....37] [ip4][..udp] [.......10.0.0.1][45767] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + update: [....33] [ip4][..udp] [.......10.0.0.1][56043] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + update: [....74] [ip4][..udp] [.......10.0.0.1][38879] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + update: [....70] [ip4][..udp] [.......10.0.0.1][38283] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + update: [....88] [ip4][..udp] [.......10.0.0.1][33521] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + update: [...111] [ip4][..udp] [.......10.0.0.1][46066] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + update: [.....5] [ip4][..udp] [.......10.0.0.1][35228] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + update: [....52] [ip4][..udp] [.......10.0.0.1][44093] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + update: [...134] [ip4][..udp] [.......10.0.0.1][45497] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + update: [...105] [ip4][..udp] [.......10.0.0.1][58113] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + update: [....98] [ip4][..udp] [.......10.0.0.1][48448] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + update: [....35] [ip4][..udp] [.......10.0.0.1][56177] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + update: [....63] [ip4][..udp] [.......10.0.0.1][56022] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + update: [....56] [ip4][..udp] [.......10.0.0.1][60962] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + update: [....30] [ip4][..udp] [.......10.0.0.1][59367] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + update: [....48] [ip4][..udp] [.......10.0.0.1][59194] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + update: [....72] [ip4][..udp] [.......10.0.0.1][56902] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + update: [....86] [ip4][..udp] [.......10.0.0.1][45993] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + update: [...112] [ip4][..udp] [.......10.0.0.1][56494] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + update: [....25] [ip4][..udp] [.......10.0.0.1][32793] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + update: [...124] [ip4][..udp] [.......10.0.0.1][52221] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + update: [....17] [ip4][..udp] [.......10.0.0.1][50435] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + update: [....54] [ip4][..udp] [.......10.0.0.1][44282] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + update: [...135] [ip4][..udp] [.......10.0.0.1][47729] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + update: [...133] [ip4][..udp] [.......10.0.0.1][53876] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + update: [...139] [ip4][..udp] [.......10.0.0.1][59011] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + update: [.....2] [ip4][..udp] [.......10.0.0.1][45722] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + update: [.....3] [ip4][..udp] [.......10.0.0.1][35495] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + update: [....61] [ip4][..udp] [.......10.0.0.1][50035] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + update: [....79] [ip4][..udp] [.......10.0.0.1][55834] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + update: [....68] [ip4][..udp] [.......10.0.0.1][50913] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + update: [....82] [ip4][..udp] [.......10.0.0.1][47685] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + update: [...122] [ip4][..udp] [.......10.0.0.1][52356] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + update: [...148] [ip4][..udp] [.......10.0.0.1][54215] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + update: [....60] [ip4][..udp] [.......10.0.0.1][46856] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + update: [...115] [ip4][..udp] [.......10.0.0.1][41717] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + update: [.....4] [ip4][..udp] [.......10.0.0.1][33565] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + update: [....32] [ip4][..udp] [.......10.0.0.1][46229] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + update: [....27] [ip4][..udp] [.......10.0.0.1][37123] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + update: [....43] [ip4][..udp] [.......10.0.0.1][59476] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + update: [...136] [ip4][..udp] [.......10.0.0.1][52040] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + update: [....83] [ip4][..udp] [.......10.0.0.1][55979] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + update: [...146] [ip4][..udp] [.......10.0.0.1][35885] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + update: [...106] [ip4][..udp] [.......10.0.0.1][42156] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + update: [....93] [ip4][..udp] [.......10.0.0.1][45987] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + update: [...103] [ip4][..udp] [.......10.0.0.1][46255] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + update: [...128] [ip4][..udp] [.......10.0.0.1][55267] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + update: [....62] [ip4][..udp] [.......10.0.0.1][40009] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + update: [....34] [ip4][..udp] [.......10.0.0.1][38136] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + update: [.....6] [ip4][..udp] [.......10.0.0.1][60301] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + update: [....91] [ip4][..udp] [.......10.0.0.1][41913] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + update: [....24] [ip4][..udp] [.......10.0.0.1][44491] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + update: [....75] [ip4][..udp] [.......10.0.0.1][43528] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + update: [....78] [ip4][..udp] [.......10.0.0.1][55822] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + update: [....94] [ip4][..udp] [.......10.0.0.1][46063] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + update: [....92] [ip4][..udp] [.......10.0.0.1][37890] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + update: [...126] [ip4][..udp] [.......10.0.0.1][58740] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + update: [....90] [ip4][..udp] [.......10.0.0.1][60735] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + update: [....76] [ip4][..udp] [.......10.0.0.1][51770] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + update: [....44] [ip4][..udp] [.......10.0.0.1][47341] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + update: [....87] [ip4][..udp] [.......10.0.0.1][56688] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + update: [....71] [ip4][..udp] [.......10.0.0.1][59489] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + update: [...127] [ip4][..udp] [.......10.0.0.1][43224] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + update: [....20] [ip4][..udp] [.......10.0.0.1][56997] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + update: [....42] [ip4][..udp] [.......10.0.0.1][38362] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + update: [....19] [ip4][..udp] [.......10.0.0.1][44712] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + update: [....18] [ip4][..udp] [.......10.0.0.1][55123] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + update: [....55] [ip4][..udp] [.......10.0.0.1][32970] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + update: [...131] [ip4][..udp] [.......10.0.0.1][59707] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + update: [...120] [ip4][..udp] [.......10.0.0.1][48325] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + update: [...107] [ip4][..udp] [.......10.0.0.1][58936] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + update: [...129] [ip4][..udp] [.......10.0.0.1][51589] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + update: [....26] [ip4][..udp] [.......10.0.0.1][56035] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + update: [....57] [ip4][..udp] [.......10.0.0.1][33071] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + update: [...125] [ip4][..udp] [.......10.0.0.1][38594] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + update: [....22] [ip4][..udp] [.......10.0.0.1][59261] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + update: [...108] [ip4][..udp] [.......10.0.0.1][40595] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + update: [....46] [ip4][..udp] [.......10.0.0.1][43633] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + update: [....67] [ip4][..udp] [.......10.0.0.1][49512] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + update: [....16] [ip4][..udp] [.......10.0.0.1][59405] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + update: [....80] [ip4][..udp] [.......10.0.0.1][46313] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + update: [....64] [ip4][..udp] [.......10.0.0.1][42570] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + new: [...193] [ip4][..udp] [.......10.0.0.1][50601] -> [..139.99.222.72][.8443] + detected: [...193] [ip4][..udp] [.......10.0.0.1][50601] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] + new: [...194] [ip4][..udp] [.......10.0.0.1][40374] -> [..139.99.222.72][.8443] + detected: [...194] [ip4][..udp] [.......10.0.0.1][40374] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] + new: [...195] [ip4][..udp] [.......10.0.0.1][51509] -> [..139.99.222.72][.8443] + detected: [...195] [ip4][..udp] [.......10.0.0.1][51509] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...196] [ip4][..udp] [.......10.0.0.1][45682] -> [..139.99.222.72][.8443] + detected: [...196] [ip4][..udp] [.......10.0.0.1][45682] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...197] [ip4][..udp] [.......10.0.0.1][59400] -> [..139.99.222.72][.8443] + detected: [...197] [ip4][..udp] [.......10.0.0.1][59400] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] + new: [...198] [ip4][..udp] [.......10.0.0.1][49796] -> [..139.99.222.72][.8443] + detected: [...198] [ip4][..udp] [.......10.0.0.1][49796] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...199] [ip4][..udp] [.......10.0.0.1][48300] -> [.144.91.106.227][..443] + detected: [...199] [ip4][..udp] [.......10.0.0.1][48300] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + new: [...200] [ip4][..udp] [.......10.0.0.1][41108] -> [.144.91.106.227][..443] + detected: [...200] [ip4][..udp] [.......10.0.0.1][41108] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...201] [ip4][..udp] [.......10.0.0.1][48237] -> [.144.91.106.227][..443] + detected: [...201] [ip4][..udp] [.......10.0.0.1][48237] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...202] [ip4][..udp] [.......10.0.0.1][54305] -> [.144.91.106.227][..443] + detected: [...202] [ip4][..udp] [.......10.0.0.1][54305] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + new: [...203] [ip4][..udp] [.......10.0.0.1][55469] -> [.144.91.106.227][..443] + detected: [...203] [ip4][..udp] [.......10.0.0.1][55469] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + new: [...204] [ip4][..udp] [.......10.0.0.1][54204] -> [.144.91.106.227][..443] + detected: [...204] [ip4][..udp] [.......10.0.0.1][54204] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...205] [ip4][..udp] [.......10.0.0.1][33293] -> [..46.227.200.55][.8443] + detected: [...205] [ip4][..udp] [.......10.0.0.1][33293] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] + new: [...206] [ip4][..udp] [.......10.0.0.1][38242] -> [..46.227.200.55][.8443] + detected: [...206] [ip4][..udp] [.......10.0.0.1][38242] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] + new: [...207] [ip4][..udp] [.......10.0.0.1][33246] -> [..46.227.200.55][.8443] + detected: [...207] [ip4][..udp] [.......10.0.0.1][33246] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...208] [ip4][..udp] [.......10.0.0.1][50277] -> [..46.227.200.55][.8443] + detected: [...208] [ip4][..udp] [.......10.0.0.1][50277] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] + new: [...209] [ip4][..udp] [.......10.0.0.1][44161] -> [..46.227.200.55][.8443] + detected: [...209] [ip4][..udp] [.......10.0.0.1][44161] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...210] [ip4][..udp] [.......10.0.0.1][49177] -> [..46.227.200.55][.8443] + detected: [...210] [ip4][..udp] [.......10.0.0.1][49177] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] + new: [...211] [ip4][..udp] [.......10.0.0.1][54375] -> [..107.170.57.34][..443] + detected: [...211] [ip4][..udp] [.......10.0.0.1][54375] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] + new: [...212] [ip4][..udp] [.......10.0.0.1][55185] -> [..107.170.57.34][..443] + detected: [...212] [ip4][..udp] [.......10.0.0.1][55185] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...213] [ip4][..udp] [.......10.0.0.1][36335] -> [..107.170.57.34][..443] + detected: [...213] [ip4][..udp] [.......10.0.0.1][36335] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] + new: [...214] [ip4][..udp] [.......10.0.0.1][37287] -> [..107.170.57.34][..443] + detected: [...214] [ip4][..udp] [.......10.0.0.1][37287] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] + new: [...215] [ip4][..udp] [.......10.0.0.1][33143] -> [..107.170.57.34][..443] + detected: [...215] [ip4][..udp] [.......10.0.0.1][33143] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] + new: [...216] [ip4][..udp] [.......10.0.0.1][42141] -> [..107.170.57.34][..443] + detected: [...216] [ip4][..udp] [.......10.0.0.1][42141] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...217] [ip4][..udp] [.......10.0.0.1][56988] -> [185.193.127.244][..443] + detected: [...217] [ip4][..udp] [.......10.0.0.1][56988] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] + new: [...218] [ip4][..udp] [.......10.0.0.1][50062] -> [185.193.127.244][..443] + detected: [...218] [ip4][..udp] [.......10.0.0.1][50062] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] + new: [...219] [ip4][..udp] [.......10.0.0.1][59354] -> [185.193.127.244][..443] + detected: [...219] [ip4][..udp] [.......10.0.0.1][59354] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] + new: [...220] [ip4][..udp] [.......10.0.0.1][54920] -> [185.193.127.244][..443] + detected: [...220] [ip4][..udp] [.......10.0.0.1][54920] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...221] [ip4][..udp] [.......10.0.0.1][46314] -> [185.193.127.244][..443] + detected: [...221] [ip4][..udp] [.......10.0.0.1][46314] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] + new: [...222] [ip4][..udp] [.......10.0.0.1][47971] -> [185.193.127.244][..443] + detected: [...222] [ip4][..udp] [.......10.0.0.1][47971] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...223] [ip4][..udp] [.......10.0.0.1][49568] -> [...77.66.84.233][..443] + detected: [...223] [ip4][..udp] [.......10.0.0.1][49568] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] + new: [...224] [ip4][..udp] [.......10.0.0.1][46140] -> [...77.66.84.233][..443] + detected: [...224] [ip4][..udp] [.......10.0.0.1][46140] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] + new: [...225] [ip4][..udp] [.......10.0.0.1][40209] -> [...77.66.84.233][..443] + detected: [...225] [ip4][..udp] [.......10.0.0.1][40209] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] + new: [...226] [ip4][..udp] [.......10.0.0.1][49732] -> [...77.66.84.233][..443] + detected: [...226] [ip4][..udp] [.......10.0.0.1][49732] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...227] [ip4][..udp] [.......10.0.0.1][50757] -> [...77.66.84.233][..443] + detected: [...227] [ip4][..udp] [.......10.0.0.1][50757] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...228] [ip4][..udp] [.......10.0.0.1][57109] -> [...77.66.84.233][..443] + detected: [...228] [ip4][..udp] [.......10.0.0.1][57109] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + update: [...159] [ip4][..udp] [.......10.0.0.1][39816] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + update: [...175] [ip4][..udp] [.......10.0.0.1][51647] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + update: [...168] [ip4][..udp] [.......10.0.0.1][59749] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + update: [...180] [ip4][..udp] [.......10.0.0.1][47621] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + update: [...172] [ip4][..udp] [.......10.0.0.1][43540] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + update: [....10] [ip4][..udp] [.......10.0.0.1][43748] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + update: [...151] [ip4][..udp] [.......10.0.0.1][45375] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + update: [...171] [ip4][..udp] [.......10.0.0.1][45815] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + update: [...165] [ip4][..udp] [.......10.0.0.1][58104] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + update: [...177] [ip4][..udp] [.......10.0.0.1][41895] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + update: [...154] [ip4][..udp] [.......10.0.0.1][55768] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + update: [...163] [ip4][..udp] [.......10.0.0.1][35734] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + update: [...156] [ip4][..udp] [.......10.0.0.1][53887] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + update: [...158] [ip4][..udp] [.......10.0.0.1][38508] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + update: [...173] [ip4][..udp] [.......10.0.0.1][48159] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + update: [...152] [ip4][..udp] [.......10.0.0.1][49975] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + update: [...178] [ip4][..udp] [.......10.0.0.1][46363] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + update: [...167] [ip4][..udp] [.......10.0.0.1][58650] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + update: [.....8] [ip4][..udp] [.......10.0.0.1][52636] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + update: [...155] [ip4][..udp] [.......10.0.0.1][39910] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + update: [...170] [ip4][..udp] [.......10.0.0.1][44469] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + update: [...157] [ip4][..udp] [.......10.0.0.1][36930] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + update: [...164] [ip4][..udp] [.......10.0.0.1][44496] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + update: [...174] [ip4][..udp] [.......10.0.0.1][38482] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + update: [...161] [ip4][..udp] [.......10.0.0.1][59589] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + update: [.....7] [ip4][..udp] [.......10.0.0.1][51004] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + update: [...176] [ip4][..udp] [.......10.0.0.1][59224] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + update: [...179] [ip4][..udp] [.......10.0.0.1][57180] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + update: [...153] [ip4][..udp] [.......10.0.0.1][38310] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + update: [...169] [ip4][..udp] [.......10.0.0.1][38709] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + update: [...166] [ip4][..udp] [.......10.0.0.1][40748] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + update: [....11] [ip4][..udp] [.......10.0.0.1][57395] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + update: [....12] [ip4][..udp] [.......10.0.0.1][53299] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + update: [...160] [ip4][..udp] [.......10.0.0.1][45613] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + update: [...162] [ip4][..udp] [.......10.0.0.1][45747] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + update: [.....9] [ip4][..udp] [.......10.0.0.1][49518] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + new: [...229] [ip4][..udp] [.......10.0.0.1][59587] -> [..23.111.74.205][..443] + detected: [...229] [ip4][..udp] [.......10.0.0.1][59587] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] + new: [...230] [ip4][..udp] [.......10.0.0.1][60852] -> [..23.111.74.205][..443] + detected: [...230] [ip4][..udp] [.......10.0.0.1][60852] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] + new: [...231] [ip4][..udp] [.......10.0.0.1][44793] -> [..23.111.74.205][..443] + detected: [...231] [ip4][..udp] [.......10.0.0.1][44793] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] + new: [...232] [ip4][..udp] [.......10.0.0.1][53045] -> [..23.111.74.205][..443] + detected: [...232] [ip4][..udp] [.......10.0.0.1][53045] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] + new: [...233] [ip4][..udp] [.......10.0.0.1][34024] -> [..23.111.74.205][..443] + detected: [...233] [ip4][..udp] [.......10.0.0.1][34024] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...234] [ip4][..udp] [.......10.0.0.1][60113] -> [..23.111.74.205][..443] + detected: [...234] [ip4][..udp] [.......10.0.0.1][60113] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...235] [ip4][..udp] [.......10.0.0.1][47545] -> [..151.80.222.79][..443] + detected: [...235] [ip4][..udp] [.......10.0.0.1][47545] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + new: [...236] [ip4][..udp] [.......10.0.0.1][38660] -> [.144.91.106.227][..443] + detected: [...236] [ip4][..udp] [.......10.0.0.1][38660] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + new: [...237] [ip4][..udp] [.......10.0.0.1][60393] -> [.144.91.106.227][..443] + detected: [...237] [ip4][..udp] [.......10.0.0.1][60393] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + new: [...238] [ip4][..udp] [.......10.0.0.1][50443] -> [.144.91.106.227][..443] + detected: [...238] [ip4][..udp] [.......10.0.0.1][50443] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + new: [...239] [ip4][..udp] [.......10.0.0.1][37711] -> [.144.91.106.227][..443] + detected: [...239] [ip4][..udp] [.......10.0.0.1][37711] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + idle: [...159] [ip4][..udp] [.......10.0.0.1][39816] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + idle: [....51] [ip4][..udp] [.......10.0.0.1][34885] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + idle: [...232] [ip4][..udp] [.......10.0.0.1][53045] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] + idle: [...175] [ip4][..udp] [.......10.0.0.1][51647] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + idle: [....47] [ip4][..udp] [.......10.0.0.1][37595] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + idle: [....96] [ip4][..udp] [.......10.0.0.1][40451] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + idle: [....40] [ip4][..udp] [.......10.0.0.1][36668] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + idle: [...123] [ip4][..udp] [.......10.0.0.1][53117] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + idle: [....58] [ip4][..udp] [.......10.0.0.1][43505] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + idle: [...168] [ip4][..udp] [.......10.0.0.1][59749] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + idle: [...224] [ip4][..udp] [.......10.0.0.1][46140] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] + idle: [.....1] [ip4][..udp] [.......10.0.0.1][38388] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + idle: [...100] [ip4][..udp] [.......10.0.0.1][47432] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + idle: [...180] [ip4][..udp] [.......10.0.0.1][47621] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + idle: [...221] [ip4][..udp] [.......10.0.0.1][46314] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] + idle: [....15] [ip4][..udp] [.......10.0.0.1][35005] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + idle: [...110] [ip4][..udp] [.......10.0.0.1][47257] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + idle: [....85] [ip4][..udp] [.......10.0.0.1][38812] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + idle: [...211] [ip4][..udp] [.......10.0.0.1][54375] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] + idle: [...208] [ip4][..udp] [.......10.0.0.1][50277] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] + idle: [...109] [ip4][..udp] [.......10.0.0.1][37035] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + idle: [...209] [ip4][..udp] [.......10.0.0.1][44161] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] + idle: [...138] [ip4][..udp] [.......10.0.0.1][38511] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + idle: [....38] [ip4][..udp] [.......10.0.0.1][38867] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + idle: [...191] [ip4][..udp] [.......10.0.0.1][51826] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] + idle: [...216] [ip4][..udp] [.......10.0.0.1][42141] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] + idle: [...172] [ip4][..udp] [.......10.0.0.1][43540] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + idle: [....28] [ip4][..udp] [.......10.0.0.1][37950] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + idle: [...184] [ip4][..udp] [.......10.0.0.1][40775] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + idle: [...130] [ip4][..udp] [.......10.0.0.1][43776] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + idle: [...204] [ip4][..udp] [.......10.0.0.1][54204] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + idle: [...149] [ip4][..udp] [.......10.0.0.1][49040] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + idle: [...225] [ip4][..udp] [.......10.0.0.1][40209] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] + idle: [....23] [ip4][..udp] [.......10.0.0.1][59641] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + idle: [...142] [ip4][..udp] [.......10.0.0.1][51935] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + idle: [...104] [ip4][..udp] [.......10.0.0.1][49186] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + idle: [....10] [ip4][..udp] [.......10.0.0.1][43748] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + idle: [...132] [ip4][..udp] [.......10.0.0.1][52069] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + idle: [....41] [ip4][..udp] [.......10.0.0.1][39007] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + idle: [....97] [ip4][..udp] [.......10.0.0.1][55896] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + idle: [...150] [ip4][..udp] [.......10.0.0.1][49115] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + idle: [...151] [ip4][..udp] [.......10.0.0.1][45375] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + idle: [...202] [ip4][..udp] [.......10.0.0.1][54305] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + idle: [...116] [ip4][..udp] [.......10.0.0.1][55046] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + idle: [....13] [ip4][..udp] [.......10.0.0.1][53697] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + idle: [....77] [ip4][..udp] [.......10.0.0.1][38278] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + idle: [...206] [ip4][..udp] [.......10.0.0.1][38242] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] + idle: [...229] [ip4][..udp] [.......10.0.0.1][59587] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] + idle: [....69] [ip4][..udp] [.......10.0.0.1][41800] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + idle: [...143] [ip4][..udp] [.......10.0.0.1][54096] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + idle: [....81] [ip4][..udp] [.......10.0.0.1][52911] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + idle: [...171] [ip4][..udp] [.......10.0.0.1][45815] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + idle: [...118] [ip4][..udp] [.......10.0.0.1][36676] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + idle: [...201] [ip4][..udp] [.......10.0.0.1][48237] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + idle: [....73] [ip4][..udp] [.......10.0.0.1][38349] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + idle: [...165] [ip4][..udp] [.......10.0.0.1][58104] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + idle: [....14] [ip4][..udp] [.......10.0.0.1][37413] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + idle: [...119] [ip4][..udp] [.......10.0.0.1][49008] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + idle: [....45] [ip4][..udp] [.......10.0.0.1][50335] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + idle: [...177] [ip4][..udp] [.......10.0.0.1][41895] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + idle: [....53] [ip4][..udp] [.......10.0.0.1][53811] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + idle: [...199] [ip4][..udp] [.......10.0.0.1][48300] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + idle: [...220] [ip4][..udp] [.......10.0.0.1][54920] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] + idle: [...154] [ip4][..udp] [.......10.0.0.1][55768] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + idle: [....65] [ip4][..udp] [.......10.0.0.1][57465] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + idle: [...217] [ip4][..udp] [.......10.0.0.1][56988] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] + idle: [...213] [ip4][..udp] [.......10.0.0.1][36335] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] + idle: [....50] [ip4][..udp] [.......10.0.0.1][33369] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + idle: [....39] [ip4][..udp] [.......10.0.0.1][59709] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + idle: [...193] [ip4][..udp] [.......10.0.0.1][50601] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] + idle: [...102] [ip4][..udp] [.......10.0.0.1][35634] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + idle: [...194] [ip4][..udp] [.......10.0.0.1][40374] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] + idle: [....36] [ip4][..udp] [.......10.0.0.1][43365] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + idle: [....66] [ip4][..udp] [.......10.0.0.1][55482] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + idle: [...227] [ip4][..udp] [.......10.0.0.1][50757] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] + idle: [...101] [ip4][..udp] [.......10.0.0.1][54112] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + idle: [...163] [ip4][..udp] [.......10.0.0.1][35734] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + idle: [....59] [ip4][..udp] [.......10.0.0.1][52284] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + idle: [...144] [ip4][..udp] [.......10.0.0.1][35903] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + idle: [....95] [ip4][..udp] [.......10.0.0.1][43129] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + idle: [....29] [ip4][..udp] [.......10.0.0.1][34324] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + idle: [...156] [ip4][..udp] [.......10.0.0.1][53887] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + idle: [....49] [ip4][..udp] [.......10.0.0.1][47865] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + idle: [...158] [ip4][..udp] [.......10.0.0.1][38508] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + idle: [...173] [ip4][..udp] [.......10.0.0.1][48159] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + idle: [....21] [ip4][..udp] [.......10.0.0.1][39655] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + idle: [...117] [ip4][..udp] [.......10.0.0.1][51363] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + idle: [...141] [ip4][..udp] [.......10.0.0.1][40138] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + idle: [...140] [ip4][..udp] [.......10.0.0.1][50387] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + idle: [...228] [ip4][..udp] [.......10.0.0.1][57109] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] + idle: [...188] [ip4][..udp] [.......10.0.0.1][50403] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] + idle: [....31] [ip4][..udp] [.......10.0.0.1][43609] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + idle: [...145] [ip4][..udp] [.......10.0.0.1][37328] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + idle: [...219] [ip4][..udp] [.......10.0.0.1][59354] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] + idle: [....84] [ip4][..udp] [.......10.0.0.1][55409] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + idle: [...152] [ip4][..udp] [.......10.0.0.1][49975] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + idle: [...178] [ip4][..udp] [.......10.0.0.1][46363] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + idle: [...121] [ip4][..udp] [.......10.0.0.1][60091] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + idle: [...137] [ip4][..udp] [.......10.0.0.1][57636] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + idle: [...147] [ip4][..udp] [.......10.0.0.1][33279] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + idle: [...113] [ip4][..udp] [.......10.0.0.1][60334] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + idle: [....99] [ip4][..udp] [.......10.0.0.1][40099] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + idle: [...234] [ip4][..udp] [.......10.0.0.1][60113] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] + idle: [...114] [ip4][..udp] [.......10.0.0.1][48065] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + idle: [....89] [ip4][..udp] [.......10.0.0.1][43714] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + idle: [....37] [ip4][..udp] [.......10.0.0.1][45767] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + idle: [...212] [ip4][..udp] [.......10.0.0.1][55185] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] + idle: [....33] [ip4][..udp] [.......10.0.0.1][56043] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + idle: [....74] [ip4][..udp] [.......10.0.0.1][38879] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + idle: [....70] [ip4][..udp] [.......10.0.0.1][38283] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + idle: [....88] [ip4][..udp] [.......10.0.0.1][33521] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + idle: [...111] [ip4][..udp] [.......10.0.0.1][46066] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + idle: [.....5] [ip4][..udp] [.......10.0.0.1][35228] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + idle: [...167] [ip4][..udp] [.......10.0.0.1][58650] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + idle: [.....8] [ip4][..udp] [.......10.0.0.1][52636] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + idle: [....52] [ip4][..udp] [.......10.0.0.1][44093] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + idle: [...134] [ip4][..udp] [.......10.0.0.1][45497] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + idle: [...155] [ip4][..udp] [.......10.0.0.1][39910] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + idle: [...105] [ip4][..udp] [.......10.0.0.1][58113] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + idle: [....98] [ip4][..udp] [.......10.0.0.1][48448] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] + idle: [...210] [ip4][..udp] [.......10.0.0.1][49177] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] + idle: [....35] [ip4][..udp] [.......10.0.0.1][56177] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + idle: [...170] [ip4][..udp] [.......10.0.0.1][44469] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + idle: [....63] [ip4][..udp] [.......10.0.0.1][56022] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + idle: [....56] [ip4][..udp] [.......10.0.0.1][60962] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + idle: [....30] [ip4][..udp] [.......10.0.0.1][59367] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + idle: [....48] [ip4][..udp] [.......10.0.0.1][59194] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + idle: [...189] [ip4][..udp] [.......10.0.0.1][46646] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] + idle: [...197] [ip4][..udp] [.......10.0.0.1][59400] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] + idle: [...187] [ip4][..udp] [.......10.0.0.1][58948] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] + idle: [....72] [ip4][..udp] [.......10.0.0.1][56902] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + idle: [....86] [ip4][..udp] [.......10.0.0.1][45993] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + idle: [...112] [ip4][..udp] [.......10.0.0.1][56494] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] + idle: [...157] [ip4][..udp] [.......10.0.0.1][36930] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + idle: [....25] [ip4][..udp] [.......10.0.0.1][32793] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + idle: [...164] [ip4][..udp] [.......10.0.0.1][44496] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + idle: [...124] [ip4][..udp] [.......10.0.0.1][52221] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + idle: [....17] [ip4][..udp] [.......10.0.0.1][50435] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + idle: [....54] [ip4][..udp] [.......10.0.0.1][44282] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + idle: [...135] [ip4][..udp] [.......10.0.0.1][47729] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + idle: [...133] [ip4][..udp] [.......10.0.0.1][53876] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + idle: [...139] [ip4][..udp] [.......10.0.0.1][59011] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] + idle: [...183] [ip4][..udp] [.......10.0.0.1][52056] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + idle: [.....2] [ip4][..udp] [.......10.0.0.1][45722] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + idle: [.....3] [ip4][..udp] [.......10.0.0.1][35495] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + idle: [...174] [ip4][..udp] [.......10.0.0.1][38482] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + idle: [....61] [ip4][..udp] [.......10.0.0.1][50035] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + idle: [....79] [ip4][..udp] [.......10.0.0.1][55834] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + idle: [...161] [ip4][..udp] [.......10.0.0.1][59589] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + idle: [....68] [ip4][..udp] [.......10.0.0.1][50913] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + idle: [....82] [ip4][..udp] [.......10.0.0.1][47685] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + idle: [...122] [ip4][..udp] [.......10.0.0.1][52356] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + idle: [...148] [ip4][..udp] [.......10.0.0.1][54215] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + idle: [....60] [ip4][..udp] [.......10.0.0.1][46856] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + idle: [...190] [ip4][..udp] [.......10.0.0.1][57090] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] + idle: [...115] [ip4][..udp] [.......10.0.0.1][41717] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + idle: [.....4] [ip4][..udp] [.......10.0.0.1][33565] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + idle: [....32] [ip4][..udp] [.......10.0.0.1][46229] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + idle: [....27] [ip4][..udp] [.......10.0.0.1][37123] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + idle: [.....7] [ip4][..udp] [.......10.0.0.1][51004] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + idle: [....83] [ip4][..udp] [.......10.0.0.1][55979] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + idle: [...136] [ip4][..udp] [.......10.0.0.1][52040] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + idle: [....43] [ip4][..udp] [.......10.0.0.1][59476] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + idle: [...215] [ip4][..udp] [.......10.0.0.1][33143] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] + idle: [...185] [ip4][..udp] [.......10.0.0.1][56335] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + idle: [...176] [ip4][..udp] [.......10.0.0.1][59224] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + idle: [...179] [ip4][..udp] [.......10.0.0.1][57180] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + idle: [...223] [ip4][..udp] [.......10.0.0.1][49568] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] + idle: [...146] [ip4][..udp] [.......10.0.0.1][35885] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] + idle: [...233] [ip4][..udp] [.......10.0.0.1][34024] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] + idle: [...195] [ip4][..udp] [.......10.0.0.1][51509] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] + idle: [...106] [ip4][..udp] [.......10.0.0.1][42156] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + idle: [...103] [ip4][..udp] [.......10.0.0.1][46255] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + idle: [....93] [ip4][..udp] [.......10.0.0.1][45987] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + idle: [...128] [ip4][..udp] [.......10.0.0.1][55267] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + idle: [...214] [ip4][..udp] [.......10.0.0.1][37287] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] + idle: [...153] [ip4][..udp] [.......10.0.0.1][38310] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] + idle: [....62] [ip4][..udp] [.......10.0.0.1][40009] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + idle: [....34] [ip4][..udp] [.......10.0.0.1][38136] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] + idle: [....91] [ip4][..udp] [.......10.0.0.1][41913] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + idle: [.....6] [ip4][..udp] [.......10.0.0.1][60301] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] + idle: [...200] [ip4][..udp] [.......10.0.0.1][41108] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + idle: [...169] [ip4][..udp] [.......10.0.0.1][38709] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] + idle: [....24] [ip4][..udp] [.......10.0.0.1][44491] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + idle: [...203] [ip4][..udp] [.......10.0.0.1][55469] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + idle: [....75] [ip4][..udp] [.......10.0.0.1][43528] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + idle: [...166] [ip4][..udp] [.......10.0.0.1][40748] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] + idle: [....78] [ip4][..udp] [.......10.0.0.1][55822] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + idle: [...207] [ip4][..udp] [.......10.0.0.1][33246] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] + idle: [....94] [ip4][..udp] [.......10.0.0.1][46063] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + idle: [....92] [ip4][..udp] [.......10.0.0.1][37890] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] + idle: [...126] [ip4][..udp] [.......10.0.0.1][58740] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + idle: [....90] [ip4][..udp] [.......10.0.0.1][60735] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + idle: [....76] [ip4][..udp] [.......10.0.0.1][51770] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] + idle: [....44] [ip4][..udp] [.......10.0.0.1][47341] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + idle: [...205] [ip4][..udp] [.......10.0.0.1][33293] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] + idle: [...226] [ip4][..udp] [.......10.0.0.1][49732] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] + idle: [....87] [ip4][..udp] [.......10.0.0.1][56688] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + idle: [...230] [ip4][..udp] [.......10.0.0.1][60852] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] + idle: [....12] [ip4][..udp] [.......10.0.0.1][53299] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + idle: [....11] [ip4][..udp] [.......10.0.0.1][57395] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + idle: [...160] [ip4][..udp] [.......10.0.0.1][45613] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + idle: [....71] [ip4][..udp] [.......10.0.0.1][59489] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + idle: [...127] [ip4][..udp] [.......10.0.0.1][43224] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + idle: [....42] [ip4][..udp] [.......10.0.0.1][38362] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] + idle: [....20] [ip4][..udp] [.......10.0.0.1][56997] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + idle: [....19] [ip4][..udp] [.......10.0.0.1][44712] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + idle: [...222] [ip4][..udp] [.......10.0.0.1][47971] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] + idle: [...196] [ip4][..udp] [.......10.0.0.1][45682] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] + idle: [...218] [ip4][..udp] [.......10.0.0.1][50062] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] + idle: [....18] [ip4][..udp] [.......10.0.0.1][55123] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + idle: [...198] [ip4][..udp] [.......10.0.0.1][49796] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] + idle: [....55] [ip4][..udp] [.......10.0.0.1][32970] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + idle: [...162] [ip4][..udp] [.......10.0.0.1][45747] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] + idle: [...131] [ip4][..udp] [.......10.0.0.1][59707] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + idle: [...120] [ip4][..udp] [.......10.0.0.1][48325] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] + idle: [...182] [ip4][..udp] [.......10.0.0.1][34228] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + idle: [...107] [ip4][..udp] [.......10.0.0.1][58936] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + idle: [...186] [ip4][..udp] [.......10.0.0.1][60885] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + idle: [...129] [ip4][..udp] [.......10.0.0.1][51589] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] + idle: [....26] [ip4][..udp] [.......10.0.0.1][56035] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] + idle: [...181] [ip4][..udp] [.......10.0.0.1][38371] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + idle: [....57] [ip4][..udp] [.......10.0.0.1][33071] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] + idle: [...125] [ip4][..udp] [.......10.0.0.1][38594] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] + idle: [....22] [ip4][..udp] [.......10.0.0.1][59261] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] + idle: [...192] [ip4][..udp] [.......10.0.0.1][39259] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] + idle: [...108] [ip4][..udp] [.......10.0.0.1][40595] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] + idle: [....67] [ip4][..udp] [.......10.0.0.1][49512] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] + idle: [....46] [ip4][..udp] [.......10.0.0.1][43633] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] + idle: [....16] [ip4][..udp] [.......10.0.0.1][59405] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] + idle: [.....9] [ip4][..udp] [.......10.0.0.1][49518] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] + idle: [...231] [ip4][..udp] [.......10.0.0.1][44793] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] + idle: [....80] [ip4][..udp] [.......10.0.0.1][46313] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] + idle: [....64] [ip4][..udp] [.......10.0.0.1][42570] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] + new: [...240] [ip4][..udp] [.......10.0.0.1][40958] -> [...195.30.94.28][.8443] + detected: [...240] [ip4][..udp] [.......10.0.0.1][40958] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + update: [...235] [ip4][..udp] [.......10.0.0.1][47545] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + update: [...236] [ip4][..udp] [.......10.0.0.1][38660] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + new: [...241] [ip4][..udp] [.......10.0.0.1][59812] -> [...195.30.94.28][.8443] + detected: [...241] [ip4][..udp] [.......10.0.0.1][59812] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + new: [...242] [ip4][..udp] [.......10.0.0.1][45234] -> [....51.15.62.65][..443] + detected: [...242] [ip4][..udp] [.......10.0.0.1][45234] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + new: [...243] [ip4][..udp] [.......10.0.0.1][36746] -> [....51.15.62.65][..443] + detected: [...243] [ip4][..udp] [.......10.0.0.1][36746] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + new: [...244] [ip4][..udp] [.......10.0.0.1][33089] -> [....51.15.62.65][..443] + detected: [...244] [ip4][..udp] [.......10.0.0.1][33089] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + update: [...239] [ip4][..udp] [.......10.0.0.1][37711] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + update: [...237] [ip4][..udp] [.......10.0.0.1][60393] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + update: [...238] [ip4][..udp] [.......10.0.0.1][50443] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + update: [...235] [ip4][..udp] [.......10.0.0.1][47545] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + update: [...236] [ip4][..udp] [.......10.0.0.1][38660] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + update: [...240] [ip4][..udp] [.......10.0.0.1][40958] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + new: [...245] [ip4][..udp] [.......10.0.0.1][40675] -> [....51.15.62.65][..443] + detected: [...245] [ip4][..udp] [.......10.0.0.1][40675] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + idle: [...243] [ip4][..udp] [.......10.0.0.1][36746] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + idle: [...239] [ip4][..udp] [.......10.0.0.1][37711] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + idle: [...237] [ip4][..udp] [.......10.0.0.1][60393] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + idle: [...241] [ip4][..udp] [.......10.0.0.1][59812] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + idle: [...242] [ip4][..udp] [.......10.0.0.1][45234] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + idle: [...244] [ip4][..udp] [.......10.0.0.1][33089] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + idle: [...238] [ip4][..udp] [.......10.0.0.1][50443] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + idle: [...235] [ip4][..udp] [.......10.0.0.1][47545] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] + idle: [...236] [ip4][..udp] [.......10.0.0.1][38660] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] + idle: [...240] [ip4][..udp] [.......10.0.0.1][40958] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] + idle: [...245] [ip4][..udp] [.......10.0.0.1][40675] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dnscrypt-v2-doh.pcap.out b/test/results/flow-info/dnscrypt-v2-doh.pcap.out new file mode 100644 index 000000000..aed3b318d --- /dev/null +++ b/test/results/flow-info/dnscrypt-v2-doh.pcap.out @@ -0,0 +1,157 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.......10.0.0.1][53674] -> [..139.99.222.72][..443] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [.......10.0.0.1][53674] -> [..139.99.222.72][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [.....1] [ip4][..tcp] [.......10.0.0.1][53674] -> [..139.99.222.72][..443] [TLS.DoH_DoT][Network][Fun] + new: [.....2] [ip4][..tcp] [.......10.0.0.1][53676] -> [..139.99.222.72][..443] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [.......10.0.0.1][53676] -> [..139.99.222.72][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [.....2] [ip4][..tcp] [.......10.0.0.1][53676] -> [..139.99.222.72][..443] [TLS.DoH_DoT][Network][Fun] + new: [.....3] [ip4][..tcp] [.......10.0.0.1][50614] -> [..185.95.218.42][..443] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [.......10.0.0.1][50614] -> [..185.95.218.42][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [.....3] [ip4][..tcp] [.......10.0.0.1][50614] -> [..185.95.218.42][..443] [TLS.DoH_DoT][Network][Fun] + new: [.....4] [ip4][..tcp] [.......10.0.0.1][55962] -> [..51.158.147.50][..443] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [.......10.0.0.1][55962] -> [..51.158.147.50][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [.....4] [ip4][..tcp] [.......10.0.0.1][55962] -> [..51.158.147.50][..443] [TLS.DoH_DoT][Network][Fun] + new: [.....5] [ip4][..tcp] [.......10.0.0.1][59404] -> [.185.253.154.66][..443] [MIDSTREAM] + detected: [.....5] [ip4][..tcp] [.......10.0.0.1][59404] -> [.185.253.154.66][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [.....5] [ip4][..tcp] [.......10.0.0.1][59404] -> [.185.253.154.66][..443] [TLS.DoH_DoT][Network][Fun] + new: [.....6] [ip4][..tcp] [.......10.0.0.1][40938] -> [..172.104.93.80][..443] [MIDSTREAM] + detected: [.....6] [ip4][..tcp] [.......10.0.0.1][40938] -> [..172.104.93.80][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [.....6] [ip4][..tcp] [.......10.0.0.1][40938] -> [..172.104.93.80][..443] [TLS.DoH_DoT][Network][Fun] + new: [.....7] [ip4][..tcp] [.......10.0.0.1][37530] -> [167.114.220.125][..453] [MIDSTREAM] + detected: [.....7] [ip4][..tcp] [.......10.0.0.1][37530] -> [167.114.220.125][..453] [TLS.DoH_DoT][Network][Fun] + RISK: Known Proto on Non Std Port + detection-update: [.....7] [ip4][..tcp] [.......10.0.0.1][37530] -> [167.114.220.125][..453] [TLS.DoH_DoT][Network][Fun] + RISK: Known Proto on Non Std Port + new: [.....8] [ip4][..tcp] [.......10.0.0.1][38186] -> [...185.43.135.1][..443] [MIDSTREAM] + detected: [.....8] [ip4][..tcp] [.......10.0.0.1][38186] -> [...185.43.135.1][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [.....8] [ip4][..tcp] [.......10.0.0.1][38186] -> [...185.43.135.1][..443] [TLS.DoH_DoT][Network][Fun] + RISK: TLS Cert Expired + new: [.....9] [ip4][..tcp] [.......10.0.0.1][51770] -> [.......9.9.9.10][..443] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [.......10.0.0.1][51770] -> [.......9.9.9.10][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [.....9] [ip4][..tcp] [.......10.0.0.1][51770] -> [.......9.9.9.10][..443] [TLS.DoH_DoT][Network][Fun] + new: [....10] [ip4][..tcp] [.......10.0.0.1][55322] -> [.185.134.196.55][..443] [MIDSTREAM] + detected: [....10] [ip4][..tcp] [.......10.0.0.1][55322] -> [.185.134.196.55][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....10] [ip4][..tcp] [.......10.0.0.1][55322] -> [.185.134.196.55][..443] [TLS.DoH_DoT][Network][Fun] + new: [....11] [ip4][..tcp] [.......10.0.0.1][52386] -> [..51.15.124.208][..443] [MIDSTREAM] + detected: [....11] [ip4][..tcp] [.......10.0.0.1][52386] -> [..51.15.124.208][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....11] [ip4][..tcp] [.......10.0.0.1][52386] -> [..51.15.124.208][..443] [TLS.DoH_DoT][Network][Fun] + new: [....12] [ip4][..tcp] [.......10.0.0.1][41720] -> [116.203.179.248][..443] [MIDSTREAM] + detected: [....12] [ip4][..tcp] [.......10.0.0.1][41720] -> [116.203.179.248][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....12] [ip4][..tcp] [.......10.0.0.1][41720] -> [116.203.179.248][..443] [TLS.DoH_DoT][Network][Fun] + new: [....13] [ip4][..tcp] [.......10.0.0.1][60026] -> [...195.30.94.28][..443] [MIDSTREAM] + detected: [....13] [ip4][..tcp] [.......10.0.0.1][60026] -> [...195.30.94.28][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....13] [ip4][..tcp] [.......10.0.0.1][60026] -> [...195.30.94.28][..443] [TLS.DoH_DoT][Network][Fun] + new: [....14] [ip4][..tcp] [.......10.0.0.1][46658] -> [185.233.106.232][..443] [MIDSTREAM] + detected: [....14] [ip4][..tcp] [.......10.0.0.1][46658] -> [185.233.106.232][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....14] [ip4][..tcp] [.......10.0.0.1][46658] -> [185.233.106.232][..443] [TLS.DoH_DoT][Network][Fun] + new: [....15] [ip4][..tcp] [.......10.0.0.1][36012] -> [..149.56.228.45][..453] [MIDSTREAM] + detected: [....15] [ip4][..tcp] [.......10.0.0.1][36012] -> [..149.56.228.45][..453] [TLS.DoH_DoT][Network][Fun] + RISK: Known Proto on Non Std Port + detection-update: [....15] [ip4][..tcp] [.......10.0.0.1][36012] -> [..149.56.228.45][..453] [TLS.DoH_DoT][Network][Fun] + RISK: Known Proto on Non Std Port + new: [....16] [ip4][..tcp] [.......10.0.0.1][38018] -> [..45.153.187.96][..443] [MIDSTREAM] + detected: [....16] [ip4][..tcp] [.......10.0.0.1][38018] -> [..45.153.187.96][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....16] [ip4][..tcp] [.......10.0.0.1][38018] -> [..45.153.187.96][..443] [TLS.DoH_DoT][Network][Fun] + new: [....17] [ip4][..tcp] [.......10.0.0.1][44640] -> [...185.235.81.1][..443] [MIDSTREAM] + detected: [....17] [ip4][..tcp] [.......10.0.0.1][44640] -> [...185.235.81.1][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....17] [ip4][..tcp] [.......10.0.0.1][44640] -> [...185.235.81.1][..443] [TLS.DoH_DoT][Network][Fun] + new: [....18] [ip4][..tcp] [.......10.0.0.1][43106] -> [.116.202.176.26][..443] [MIDSTREAM] + detected: [....18] [ip4][..tcp] [.......10.0.0.1][43106] -> [.116.202.176.26][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....18] [ip4][..tcp] [.......10.0.0.1][43106] -> [.116.202.176.26][..443] [TLS.DoH_DoT][Network][Fun] + new: [....19] [ip4][..tcp] [.......10.0.0.1][59026] -> [....85.5.93.230][..443] [MIDSTREAM] + detected: [....19] [ip4][..tcp] [.......10.0.0.1][59026] -> [....85.5.93.230][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....19] [ip4][..tcp] [.......10.0.0.1][59026] -> [....85.5.93.230][..443] [TLS.DoH_DoT][Network][Fun] + new: [....20] [ip4][..tcp] [.......10.0.0.1][33724] -> [...104.28.28.34][..443] [MIDSTREAM] + detected: [....20] [ip4][..tcp] [.......10.0.0.1][33724] -> [...104.28.28.34][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....20] [ip4][..tcp] [.......10.0.0.1][33724] -> [...104.28.28.34][..443] [TLS.DoH_DoT][Network][Fun] + new: [....21] [ip4][..tcp] [.......10.0.0.1][53802] -> [........1.0.0.1][..443] [MIDSTREAM] + detected: [....21] [ip4][..tcp] [.......10.0.0.1][53802] -> [........1.0.0.1][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....21] [ip4][..tcp] [.......10.0.0.1][53802] -> [........1.0.0.1][..443] [TLS.DoH_DoT][Network][Fun] + new: [....22] [ip4][..tcp] [.......10.0.0.1][33338] -> [.....45.90.28.0][..443] [MIDSTREAM] + detected: [....22] [ip4][..tcp] [.......10.0.0.1][33338] -> [.....45.90.28.0][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....22] [ip4][..tcp] [.......10.0.0.1][33338] -> [.....45.90.28.0][..443] [TLS.DoH_DoT][Network][Fun] + new: [....23] [ip4][..tcp] [.......10.0.0.1][52176] -> [136.144.215.158][..443] [MIDSTREAM] + detected: [....23] [ip4][..tcp] [.......10.0.0.1][52176] -> [136.144.215.158][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....23] [ip4][..tcp] [.......10.0.0.1][52176] -> [136.144.215.158][..443] [TLS.DoH_DoT][Network][Fun] + new: [....24] [ip4][..tcp] [.......10.0.0.1][39214] -> [...104.28.0.106][..443] [MIDSTREAM] + detected: [....24] [ip4][..tcp] [.......10.0.0.1][39214] -> [...104.28.0.106][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....24] [ip4][..tcp] [.......10.0.0.1][39214] -> [...104.28.0.106][..443] [TLS.DoH_DoT][Network][Fun] + new: [....25] [ip4][..tcp] [.......10.0.0.1][52028] -> [...45.76.113.31][.8443] [MIDSTREAM] + detected: [....25] [ip4][..tcp] [.......10.0.0.1][52028] -> [...45.76.113.31][.8443] [TLS.DoH_DoT][Network][Fun] + RISK: Known Proto on Non Std Port + detection-update: [....25] [ip4][..tcp] [.......10.0.0.1][52028] -> [...45.76.113.31][.8443] [TLS.DoH_DoT][Network][Fun] + RISK: Known Proto on Non Std Port + new: [....26] [ip4][..tcp] [.......10.0.0.1][34036] -> [..217.169.20.23][..443] [MIDSTREAM] + detected: [....26] [ip4][..tcp] [.......10.0.0.1][34036] -> [..217.169.20.23][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....26] [ip4][..tcp] [.......10.0.0.1][34036] -> [..217.169.20.23][..443] [TLS.DoH_DoT][Network][Fun] + new: [....27] [ip4][..tcp] [.......10.0.0.1][43718] -> [..146.255.56.98][..443] [MIDSTREAM] + detected: [....27] [ip4][..tcp] [.......10.0.0.1][43718] -> [..146.255.56.98][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....27] [ip4][..tcp] [.......10.0.0.1][43718] -> [..146.255.56.98][..443] [TLS.DoH_DoT][Network][Fun] + new: [....28] [ip4][..tcp] [.......10.0.0.1][54164] -> [...193.70.85.11][..443] [MIDSTREAM] + detected: [....28] [ip4][..tcp] [.......10.0.0.1][54164] -> [...193.70.85.11][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....28] [ip4][..tcp] [.......10.0.0.1][54164] -> [...193.70.85.11][..443] [TLS.DoH_DoT][Network][Fun] + new: [....29] [ip4][..tcp] [.......10.0.0.1][35714] -> [.209.250.241.25][..443] [MIDSTREAM] + detected: [....29] [ip4][..tcp] [.......10.0.0.1][35714] -> [.209.250.241.25][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....29] [ip4][..tcp] [.......10.0.0.1][35714] -> [.209.250.241.25][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....29] [ip4][..tcp] [.......10.0.0.1][35714] -> [.209.250.241.25][..443] [TLS.DoH_DoT][Network][Fun] + RISK: TLS Cert Expired + new: [....30] [ip4][..tcp] [.......10.0.0.1][43888] -> [.95.216.229.153][..443] [MIDSTREAM] + detected: [....30] [ip4][..tcp] [.......10.0.0.1][43888] -> [.95.216.229.153][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....30] [ip4][..tcp] [.......10.0.0.1][43888] -> [.95.216.229.153][..443] [TLS.DoH_DoT][Network][Fun] + new: [....31] [ip4][..tcp] [.......10.0.0.1][57058] -> [..46.227.200.54][..443] [MIDSTREAM] + detected: [....31] [ip4][..tcp] [.......10.0.0.1][57058] -> [..46.227.200.54][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....31] [ip4][..tcp] [.......10.0.0.1][57058] -> [..46.227.200.54][..443] [TLS.DoH_DoT][Network][Fun] + new: [....32] [ip4][..tcp] [.......10.0.0.1][51846] -> [.......9.9.9.10][..443] [MIDSTREAM] + detected: [....32] [ip4][..tcp] [.......10.0.0.1][51846] -> [.......9.9.9.10][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....32] [ip4][..tcp] [.......10.0.0.1][51846] -> [.......9.9.9.10][..443] [TLS.DoH_DoT][Network][Fun] + new: [....33] [ip4][..tcp] [.......10.0.0.1][44704] -> [...185.235.81.1][..443] [MIDSTREAM] + detected: [....33] [ip4][..tcp] [.......10.0.0.1][44704] -> [...185.235.81.1][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....33] [ip4][..tcp] [.......10.0.0.1][44704] -> [...185.235.81.1][..443] [TLS.DoH_DoT][Network][Fun] + new: [....34] [ip4][..tcp] [.......10.0.0.1][35742] -> [.209.250.241.25][..443] [MIDSTREAM] + detected: [....34] [ip4][..tcp] [.......10.0.0.1][35742] -> [.209.250.241.25][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....34] [ip4][..tcp] [.......10.0.0.1][35742] -> [.209.250.241.25][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [....34] [ip4][..tcp] [.......10.0.0.1][35742] -> [.209.250.241.25][..443] [TLS.DoH_DoT][Network][Fun] + RISK: TLS Cert Expired + idle: [....29] [ip4][..tcp] [.......10.0.0.1][35714] -> [.209.250.241.25][..443] [TLS.DoH_DoT][Network][Fun] + RISK: TLS Cert Expired + idle: [....12] [ip4][..tcp] [.......10.0.0.1][41720] -> [116.203.179.248][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....34] [ip4][..tcp] [.......10.0.0.1][35742] -> [.209.250.241.25][..443] [TLS.DoH_DoT][Network][Fun] + RISK: TLS Cert Expired + idle: [....25] [ip4][..tcp] [.......10.0.0.1][52028] -> [...45.76.113.31][.8443] [TLS.DoH_DoT][Network][Fun] + RISK: Known Proto on Non Std Port + idle: [....26] [ip4][..tcp] [.......10.0.0.1][34036] -> [..217.169.20.23][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....10] [ip4][..tcp] [.......10.0.0.1][55322] -> [.185.134.196.55][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....14] [ip4][..tcp] [.......10.0.0.1][46658] -> [185.233.106.232][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....20] [ip4][..tcp] [.......10.0.0.1][33724] -> [...104.28.28.34][..443] [TLS.DoH_DoT][Network][Fun] + idle: [.....6] [ip4][..tcp] [.......10.0.0.1][40938] -> [..172.104.93.80][..443] [TLS.DoH_DoT][Network][Fun] + idle: [.....4] [ip4][..tcp] [.......10.0.0.1][55962] -> [..51.158.147.50][..443] [TLS.DoH_DoT][Network][Fun] + idle: [.....8] [ip4][..tcp] [.......10.0.0.1][38186] -> [...185.43.135.1][..443] [TLS.DoH_DoT][Network][Fun] + RISK: TLS Cert Expired + idle: [....13] [ip4][..tcp] [.......10.0.0.1][60026] -> [...195.30.94.28][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....31] [ip4][..tcp] [.......10.0.0.1][57058] -> [..46.227.200.54][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....17] [ip4][..tcp] [.......10.0.0.1][44640] -> [...185.235.81.1][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....21] [ip4][..tcp] [.......10.0.0.1][53802] -> [........1.0.0.1][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....28] [ip4][..tcp] [.......10.0.0.1][54164] -> [...193.70.85.11][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....27] [ip4][..tcp] [.......10.0.0.1][43718] -> [..146.255.56.98][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....33] [ip4][..tcp] [.......10.0.0.1][44704] -> [...185.235.81.1][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....18] [ip4][..tcp] [.......10.0.0.1][43106] -> [.116.202.176.26][..443] [TLS.DoH_DoT][Network][Fun] + idle: [.....9] [ip4][..tcp] [.......10.0.0.1][51770] -> [.......9.9.9.10][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....32] [ip4][..tcp] [.......10.0.0.1][51846] -> [.......9.9.9.10][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....30] [ip4][..tcp] [.......10.0.0.1][43888] -> [.95.216.229.153][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....11] [ip4][..tcp] [.......10.0.0.1][52386] -> [..51.15.124.208][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....19] [ip4][..tcp] [.......10.0.0.1][59026] -> [....85.5.93.230][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....23] [ip4][..tcp] [.......10.0.0.1][52176] -> [136.144.215.158][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....22] [ip4][..tcp] [.......10.0.0.1][33338] -> [.....45.90.28.0][..443] [TLS.DoH_DoT][Network][Fun] + idle: [.....1] [ip4][..tcp] [.......10.0.0.1][53674] -> [..139.99.222.72][..443] + idle: [.....2] [ip4][..tcp] [.......10.0.0.1][53676] -> [..139.99.222.72][..443] + idle: [....15] [ip4][..tcp] [.......10.0.0.1][36012] -> [..149.56.228.45][..453] [TLS.DoH_DoT][Network][Fun] + RISK: Known Proto on Non Std Port + idle: [.....7] [ip4][..tcp] [.......10.0.0.1][37530] -> [167.114.220.125][..453] [TLS.DoH_DoT][Network][Fun] + RISK: Known Proto on Non Std Port + idle: [.....3] [ip4][..tcp] [.......10.0.0.1][50614] -> [..185.95.218.42][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....24] [ip4][..tcp] [.......10.0.0.1][39214] -> [...104.28.0.106][..443] [TLS.DoH_DoT][Network][Fun] + idle: [....16] [ip4][..tcp] [.......10.0.0.1][38018] -> [..45.153.187.96][..443] [TLS.DoH_DoT][Network][Fun] + idle: [.....5] [ip4][..tcp] [.......10.0.0.1][59404] -> [.185.253.154.66][..443] [TLS.DoH_DoT][Network][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dnscrypt-v2.pcap.out b/test/results/flow-info/dnscrypt-v2.pcap.out new file mode 100644 index 000000000..d54bbda10 --- /dev/null +++ b/test/results/flow-info/dnscrypt-v2.pcap.out @@ -0,0 +1,13 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [......127.0.0.1][38650] -> [......127.0.0.2][.5353] + detected: [.....1] [ip4][..udp] [......127.0.0.1][38650] -> [......127.0.0.2][.5353] [DNScrypt][Network][Safe] + new: [.....2] [ip4][..udp] [......127.0.0.1][42883] -> [......127.0.0.2][.5353] + detected: [.....2] [ip4][..udp] [......127.0.0.1][42883] -> [......127.0.0.2][.5353] [DNScrypt][Network][Safe] + new: [.....3] [ip4][..udp] [......127.0.0.1][50893] -> [......127.0.0.2][.5353] + detected: [.....3] [ip4][..udp] [......127.0.0.1][50893] -> [......127.0.0.2][.5353] [DNScrypt][Network][Safe] + idle: [.....3] [ip4][..udp] [......127.0.0.1][50893] -> [......127.0.0.2][.5353] [DNScrypt][Network][Safe] + idle: [.....1] [ip4][..udp] [......127.0.0.1][38650] -> [......127.0.0.2][.5353] [DNScrypt][Network][Safe] + idle: [.....2] [ip4][..udp] [......127.0.0.1][42883] -> [......127.0.0.2][.5353] [DNScrypt][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dnscrypt_skype_false_positive.pcapng.out b/test/results/flow-info/dnscrypt_skype_false_positive.pcapng.out new file mode 100644 index 000000000..21a5bafdc --- /dev/null +++ b/test/results/flow-info/dnscrypt_skype_false_positive.pcapng.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][46858] -> [.212.47.228.136][..443] + detected: [.....1] [ip4][..udp] [..192.168.2.100][46858] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + DAEMON-EVENT: [Processed: 2 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + update: [.....1] [ip4][..udp] [..192.168.2.100][46858] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + idle: [.....1] [ip4][..udp] [..192.168.2.100][46858] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/doq.pcapng.out b/test/results/flow-info/doq.pcapng.out new file mode 100644 index 000000000..9168bed8a --- /dev/null +++ b/test/results/flow-info/doq.pcapng.out @@ -0,0 +1,12 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [....................................::1][47826] -> [....................................::1][..784] + detected: [.....1] [ip6][..udp] [....................................::1][47826] -> [....................................::1][..784] [QUIC.DoH_DoT][Network][Fun] + RISK: Missing SNI TLS Extn + new: [.....2] [ip6][icmp6] [....................................::1] -> [....................................::1] + detected: [.....2] [ip6][icmp6] [....................................::1] -> [....................................::1] [ICMPV6][Network][Acceptable] + idle: [.....2] [ip6][icmp6] [....................................::1] -> [....................................::1] [ICMPV6][Network][Acceptable] + idle: [.....1] [ip6][..udp] [....................................::1][47826] -> [....................................::1][..784] [QUIC.DoH_DoT][Network][Fun] + RISK: Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/doq_adguard.pcapng.out b/test/results/flow-info/doq_adguard.pcapng.out new file mode 100644 index 000000000..25ff51f94 --- /dev/null +++ b/test/results/flow-info/doq_adguard.pcapng.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.192.168.12.169][41070] -> [...94.140.14.14][..784] + detected: [.....1] [ip4][..udp] [.192.168.12.169][41070] -> [...94.140.14.14][..784] [QUIC.DoH_DoT][Network][Fun] + analyse: [.....1] [ip4][..udp] [.192.168.12.169][41070] -> [...94.140.14.14][..784] [QUIC.DoH_DoT][Network][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.885| 0.161| 0.453] + [IAT(c->s)...: 0.000| 1.830| 0.165| 0.456][IAT(s->c)...: 0.000| 1.885| 0.157| 0.450] + [PKTLEN(c->s): 73.000|1274.000| 253.800| 388.300][PKTLEN(s->c): 83.000|1294.000| 659.900| 560.000] + [BINS(c->s)..: 4,8,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,5,0,0,2,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,2,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..udp] [.192.168.12.169][41070] -> [...94.140.14.14][..784] [QUIC.DoH_DoT][Network][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dos_win98_smb_netbeui.pcap.out b/test/results/flow-info/dos_win98_smb_netbeui.pcap.out new file mode 100644 index 000000000..02f024712 --- /dev/null +++ b/test/results/flow-info/dos_win98_smb_netbeui.pcap.out @@ -0,0 +1,193 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [.....1] [ip4][..udp] [192.168.239.129][..137] -> [..192.168.239.2][..137] + detected: [.....1] [ip4][..udp] [192.168.239.129][..137] -> [..192.168.239.2][..137] [NetBIOS][System][Acceptable] + new: [.....2] [ip4][.icmp] [192.168.239.129] -> [......224.0.0.2] + detected: [.....2] [ip4][.icmp] [192.168.239.129] -> [......224.0.0.2] [ICMP][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [.....3] [ip4][..udp] [192.168.239.129][..137] -> [192.168.239.255][..137] + detected: [.....3] [ip4][..udp] [192.168.239.129][..137] -> [192.168.239.255][..137] [NetBIOS][System][Acceptable] + ERROR-EVENT: Unknown packet type + new: [.....4] [ip4][..udp] [192.168.239.129][..138] -> [192.168.239.255][..138] + detected: [.....4] [ip4][..udp] [192.168.239.129][..138] -> [192.168.239.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + update: [.....2] [ip4][.icmp] [192.168.239.129] -> [......224.0.0.2] [ICMP][Network][Acceptable] + update: [.....1] [ip4][..udp] [192.168.239.129][..137] -> [..192.168.239.2][..137] [NetBIOS][System][Acceptable] + update: [.....3] [ip4][..udp] [192.168.239.129][..137] -> [192.168.239.255][..137] [NetBIOS][System][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + update: [.....4] [ip4][..udp] [192.168.239.129][..138] -> [192.168.239.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + update: [.....2] [ip4][.icmp] [192.168.239.129] -> [......224.0.0.2] [ICMP][Network][Acceptable] + update: [.....1] [ip4][..udp] [192.168.239.129][..137] -> [..192.168.239.2][..137] [NetBIOS][System][Acceptable] + update: [.....3] [ip4][..udp] [192.168.239.129][..137] -> [192.168.239.255][..137] [NetBIOS][System][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + update: [.....4] [ip4][..udp] [192.168.239.129][..138] -> [192.168.239.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + analyse: [.....3] [ip4][..udp] [192.168.239.129][..137] -> [192.168.239.255][..137] [NetBIOS][System][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 96.434| 4.235| 17.262] + [IAT(c->s)...: 0.000| 96.434| 4.235| 17.262][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 110.000| 110.000| 110.000| 0.000][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....2] [ip4][.icmp] [192.168.239.129] -> [......224.0.0.2] [ICMP][Network][Acceptable] + idle: [.....3] [ip4][..udp] [192.168.239.129][..137] -> [192.168.239.255][..137] [NetBIOS][System][Acceptable] + idle: [.....1] [ip4][..udp] [192.168.239.129][..137] -> [..192.168.239.2][..137] [NetBIOS][System][Acceptable] + idle: [.....4] [ip4][..udp] [192.168.239.129][..138] -> [192.168.239.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/drda_db2.pcap.out b/test/results/flow-info/drda_db2.pcap.out new file mode 100644 index 000000000..99e95f498 --- /dev/null +++ b/test/results/flow-info/drda_db2.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.106.1][.4847] -> [192.168.106.128][50000] + detected: [.....1] [ip4][..tcp] [..192.168.106.1][.4847] -> [192.168.106.128][50000] [DRDA][Database][Acceptable] + analyse: [.....1] [ip4][..tcp] [..192.168.106.1][.4847] -> [192.168.106.128][50000] [DRDA][Database][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 17.986| 1.315| 4.366] + [IAT(c->s)...: 0.001| 17.828| 1.279| 4.282][IAT(s->c)...: 0.000| 17.986| 1.354| 4.454] + [PKTLEN(c->s): 54.000| 717.000| 176.300| 177.000][PKTLEN(s->c): 54.000| 684.000| 220.400| 202.400] + [BINS(c->s)..: 10,0,1,0,0,1,0,1,2,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,4,0,1,0,0,0,1,0,0,0,0,2,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....1] [ip4][..tcp] [..192.168.106.1][.4847] -> [192.168.106.128][50000] [DRDA][Database][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dropbox.pcap.out b/test/results/flow-info/dropbox.pcap.out new file mode 100644 index 000000000..11d4b8f6e --- /dev/null +++ b/test/results/flow-info/dropbox.pcap.out @@ -0,0 +1,91 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...192.168.56.1][50311] -> [.192.168.56.101][17500] + detected: [.....1] [ip4][..udp] [...192.168.56.1][50311] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + new: [.....2] [ip4][..udp] [...192.168.56.1][50318] -> [.192.168.56.101][17500] + detected: [.....2] [ip4][..udp] [...192.168.56.1][50318] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + analyse: [.....1] [ip4][..udp] [...192.168.56.1][50311] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.002| 0.118| 0.106| 0.019] + [IAT(c->s)...: 0.104| 0.118| 0.110| 0.003][IAT(s->c)...: 0.002| 0.116| 0.103| 0.026] + [PKTLEN(c->s): 136.000| 143.000| 138.100| 2.100][PKTLEN(s->c): 59.000| 66.000| 61.100| 2.100] + [BINS(c->s)..: 0,0,8,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....3] [ip4][..udp] [...192.168.56.1][50312] -> [.192.168.56.101][17500] + detected: [.....3] [ip4][..udp] [...192.168.56.1][50312] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + analyse: [.....2] [ip4][..udp] [...192.168.56.1][50318] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.002| 0.128| 0.112| 0.021] + [IAT(c->s)...: 0.106| 0.128| 0.115| 0.006][IAT(s->c)...: 0.002| 0.126| 0.108| 0.028] + [PKTLEN(c->s): 137.000| 142.000| 139.000| 1.800][PKTLEN(s->c): 60.000| 65.000| 62.000| 1.800] + [BINS(c->s)..: 0,0,6,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....4] [ip4][..udp] [...192.168.56.1][50319] -> [.192.168.56.101][17500] + detected: [.....4] [ip4][..udp] [...192.168.56.1][50319] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + analyse: [.....3] [ip4][..udp] [...192.168.56.1][50312] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 0.131| 0.117| 0.022] + [IAT(c->s)...: 0.105| 0.131| 0.121| 0.008][IAT(s->c)...: 0.001| 0.131| 0.113| 0.030] + [PKTLEN(c->s): 137.000| 143.000| 139.800| 1.800][PKTLEN(s->c): 60.000| 66.000| 62.800| 1.800] + [BINS(c->s)..: 0,0,3,13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....4] [ip4][..udp] [...192.168.56.1][50319] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.005| 0.172| 0.127| 0.026] + [IAT(c->s)...: 0.107| 0.172| 0.131| 0.015][IAT(s->c)...: 0.005| 0.165| 0.123| 0.033] + [PKTLEN(c->s): 136.000| 143.000| 139.600| 2.200][PKTLEN(s->c): 59.000| 66.000| 62.600| 2.200] + [BINS(c->s)..: 0,0,4,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 800 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..udp] [..192.168.1.105][55407] -> [..192.168.1.254][...53] + detected: [.....5] [ip4][..udp] [..192.168.1.105][55407] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + detection-update: [.....5] [ip4][..udp] [..192.168.1.105][55407] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + new: [.....6] [ip4][..udp] [..192.168.1.105][49112] -> [..192.168.1.254][...53] + detected: [.....6] [ip4][..udp] [..192.168.1.105][49112] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + new: [.....7] [ip4][..udp] [..192.168.1.105][50789] -> [..192.168.1.254][...53] + detected: [.....7] [ip4][..udp] [..192.168.1.105][50789] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + detection-update: [.....6] [ip4][..udp] [..192.168.1.105][49112] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + detection-update: [.....7] [ip4][..udp] [..192.168.1.105][50789] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + idle: [.....1] [ip4][..udp] [...192.168.56.1][50311] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + idle: [.....3] [ip4][..udp] [...192.168.56.1][50312] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + idle: [.....2] [ip4][..udp] [...192.168.56.1][50318] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + idle: [.....4] [ip4][..udp] [...192.168.56.1][50319] -> [.192.168.56.101][17500] [Dropbox][Cloud][Acceptable] + new: [.....8] [ip4][..udp] [..192.168.1.105][36173] -> [..192.168.1.254][...53] + detected: [.....8] [ip4][..udp] [..192.168.1.105][36173] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + detection-update: [.....8] [ip4][..udp] [..192.168.1.105][36173] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + detection-update: [.....8] [ip4][..udp] [..192.168.1.105][36173] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + new: [.....9] [ip4][..udp] [..192.168.1.105][17500] -> [255.255.255.255][17500] + detected: [.....9] [ip4][..udp] [..192.168.1.105][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + new: [....10] [ip4][..udp] [..192.168.1.105][17500] -> [..192.168.1.255][17500] + detected: [....10] [ip4][..udp] [..192.168.1.105][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + new: [....11] [ip4][..udp] [..192.168.1.105][33189] -> [..192.168.1.254][...53] + detected: [....11] [ip4][..udp] [..192.168.1.105][33189] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + detection-update: [....11] [ip4][..udp] [..192.168.1.105][33189] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 836 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 7 / 11|skipped: 0|!detected: 0|guessed: 0|detection-updates: 6|updates: 0] + new: [....12] [ip4][..udp] [....192.168.1.6][17500] -> [255.255.255.255][17500] + detected: [....12] [ip4][..udp] [....192.168.1.6][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + new: [....13] [ip4][..udp] [....192.168.1.6][17500] -> [..192.168.1.255][17500] + detected: [....13] [ip4][..udp] [....192.168.1.6][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + idle: [.....7] [ip4][..udp] [..192.168.1.105][50789] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + idle: [.....9] [ip4][..udp] [..192.168.1.105][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + idle: [.....6] [ip4][..udp] [..192.168.1.105][49112] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + idle: [.....5] [ip4][..udp] [..192.168.1.105][55407] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + idle: [....10] [ip4][..udp] [..192.168.1.105][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....11] [ip4][..udp] [..192.168.1.105][33189] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + idle: [.....8] [ip4][..udp] [..192.168.1.105][36173] -> [..192.168.1.254][...53] [DNS.Dropbox][Cloud][Acceptable] + update: [....12] [ip4][..udp] [....192.168.1.6][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + update: [....13] [ip4][..udp] [....192.168.1.6][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + new: [....14] [ip4][..udp] [...192.168.1.64][17500] -> [255.255.255.255][17500] + detected: [....14] [ip4][..udp] [...192.168.1.64][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + new: [....15] [ip4][..udp] [...192.168.1.64][17500] -> [..192.168.1.255][17500] + detected: [....15] [ip4][..udp] [...192.168.1.64][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + update: [....12] [ip4][..udp] [....192.168.1.6][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + update: [....13] [ip4][..udp] [....192.168.1.6][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....14] [ip4][..udp] [...192.168.1.64][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....12] [ip4][..udp] [....192.168.1.6][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....15] [ip4][..udp] [...192.168.1.64][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....13] [ip4][..udp] [....192.168.1.6][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dtls.pcap.out b/test/results/flow-info/dtls.pcap.out new file mode 100644 index 000000000..14ca7fceb --- /dev/null +++ b/test/results/flow-info/dtls.pcap.out @@ -0,0 +1,8 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.192.168.13.203][40739] -> [..192.168.13.57][56515] + detected: [.....1] [ip4][..udp] [.192.168.13.203][40739] -> [..192.168.13.57][56515] [DTLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + idle: [.....1] [ip4][..udp] [.192.168.13.203][40739] -> [..192.168.13.57][56515] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dtls2.pcap.out b/test/results/flow-info/dtls2.pcap.out new file mode 100644 index 000000000..2f4bbaf7c --- /dev/null +++ b/test/results/flow-info/dtls2.pcap.out @@ -0,0 +1,21 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..61.68.110.153][53045] -> [..212.32.214.39][61457] + detected: [.....1] [ip4][..udp] [..61.68.110.153][53045] -> [..212.32.214.39][61457] [DTLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....1] [ip4][..udp] [..61.68.110.153][53045] -> [..212.32.214.39][61457] [DTLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + update: [.....1] [ip4][..udp] [..61.68.110.153][53045] -> [..212.32.214.39][61457] [DTLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + update: [.....1] [ip4][..udp] [..61.68.110.153][53045] -> [..212.32.214.39][61457] [DTLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + update: [.....1] [ip4][..udp] [..61.68.110.153][53045] -> [..212.32.214.39][61457] [DTLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + update: [.....1] [ip4][..udp] [..61.68.110.153][53045] -> [..212.32.214.39][61457] [DTLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + update: [.....1] [ip4][..udp] [..61.68.110.153][53045] -> [..212.32.214.39][61457] [DTLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + idle: [.....1] [ip4][..udp] [..61.68.110.153][53045] -> [..212.32.214.39][61457] [DTLS][Web][Safe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dtls_certificate.pcapng.out b/test/results/flow-info/dtls_certificate.pcapng.out new file mode 100644 index 000000000..a13a636f5 --- /dev/null +++ b/test/results/flow-info/dtls_certificate.pcapng.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..191.62.60.190][..443] -> [.163.205.15.180][38876] + detected: [.....1] [ip4][..udp] [..191.62.60.190][..443] -> [.163.205.15.180][38876] [DTLS.WindowsUpdate][SoftwareUpdate][Safe] + RISK: TLS Cert Expired + idle: [.....1] [ip4][..udp] [..191.62.60.190][..443] -> [.163.205.15.180][38876] [DTLS.WindowsUpdate][SoftwareUpdate][Safe] + RISK: TLS Cert Expired + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dtls_certificate_fragments.pcap.out b/test/results/flow-info/dtls_certificate_fragments.pcap.out new file mode 100644 index 000000000..1aec9dae4 --- /dev/null +++ b/test/results/flow-info/dtls_certificate_fragments.pcap.out @@ -0,0 +1,11 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.10.186.198.149][39347] -> [..35.210.59.134][44443] + detected: [.....1] [ip4][..udp] [.10.186.198.149][39347] -> [..35.210.59.134][44443] [DTLS.GoogleCloud][Cloud][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....1] [ip4][..udp] [.10.186.198.149][39347] -> [..35.210.59.134][44443] [DTLS.GoogleCloud][Cloud][Acceptable] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + idle: [.....1] [ip4][..udp] [.10.186.198.149][39347] -> [..35.210.59.134][44443] [DTLS.GoogleCloud][Cloud][Acceptable] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dtls_mid_sessions.pcapng.out b/test/results/flow-info/dtls_mid_sessions.pcapng.out new file mode 100644 index 000000000..85cab54a4 --- /dev/null +++ b/test/results/flow-info/dtls_mid_sessions.pcapng.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..53.214.238.65][53558] -> [199.186.151.155][..443] + detected: [.....1] [ip4][..udp] [..53.214.238.65][53558] -> [199.186.151.155][..443] [DTLS][Web][Safe] + new: [.....2] [ip4][..udp] [.135.215.56.198][..443] -> [..124.73.140.89][61189] + detected: [.....2] [ip4][..udp] [.135.215.56.198][..443] -> [..124.73.140.89][61189] [DTLS][Web][Safe] + new: [.....3] [ip4][..udp] [170.151.105.215][..443] -> [121.152.255.238][.8460] + detected: [.....3] [ip4][..udp] [170.151.105.215][..443] -> [121.152.255.238][.8460] [DTLS][Web][Safe] + new: [.....4] [ip4][..udp] [170.151.105.215][..443] -> [.72.102.179.218][62811] + detected: [.....4] [ip4][..udp] [170.151.105.215][..443] -> [.72.102.179.218][62811] [DTLS][Web][Safe] + idle: [.....2] [ip4][..udp] [.135.215.56.198][..443] -> [..124.73.140.89][61189] [DTLS][Web][Safe] + idle: [.....3] [ip4][..udp] [170.151.105.215][..443] -> [121.152.255.238][.8460] [DTLS][Web][Safe] + idle: [.....1] [ip4][..udp] [..53.214.238.65][53558] -> [199.186.151.155][..443] [DTLS][Web][Safe] + idle: [.....4] [ip4][..udp] [170.151.105.215][..443] -> [.72.102.179.218][62811] [DTLS][Web][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dtls_old_version.pcapng.out b/test/results/flow-info/dtls_old_version.pcapng.out new file mode 100644 index 000000000..f342d8c30 --- /dev/null +++ b/test/results/flow-info/dtls_old_version.pcapng.out @@ -0,0 +1,11 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...37.188.4.115][56453] -> [....70.66.6.128][..443] + detected: [.....1] [ip4][..udp] [...37.188.4.115][56453] -> [....70.66.6.128][..443] [DTLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....1] [ip4][..udp] [...37.188.4.115][56453] -> [....70.66.6.128][..443] [DTLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + idle: [.....1] [ip4][..udp] [...37.188.4.115][56453] -> [....70.66.6.128][..443] [DTLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dtls_session_id_and_coockie_both.pcap.out b/test/results/flow-info/dtls_session_id_and_coockie_both.pcap.out new file mode 100644 index 000000000..3c2458477 --- /dev/null +++ b/test/results/flow-info/dtls_session_id_and_coockie_both.pcap.out @@ -0,0 +1,11 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [185.196.113.239][50257] -> [223.116.105.247][44443] + detected: [.....1] [ip4][..udp] [185.196.113.239][50257] -> [223.116.105.247][44443] [DTLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....1] [ip4][..udp] [185.196.113.239][50257] -> [223.116.105.247][44443] [DTLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + idle: [.....1] [ip4][..udp] [185.196.113.239][50257] -> [223.116.105.247][44443] [DTLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/emotet.pcap.out b/test/results/flow-info/emotet.pcap.out new file mode 100644 index 000000000..c206017cf --- /dev/null +++ b/test/results/flow-info/emotet.pcap.out @@ -0,0 +1,80 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....10.2.25.102][57309] -> [..193.252.22.84][..587] + detected: [.....1] [ip4][..tcp] [....10.2.25.102][57309] -> [..193.252.22.84][..587] [SMTP][Email][Acceptable] + analyse: [.....1] [ip4][..tcp] [....10.2.25.102][57309] -> [..193.252.22.84][..587] [SMTP][Email][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.056| 0.539| 0.774] + [IAT(c->s)...: 0.000| 3.056| 0.696| 0.816][IAT(s->c)...: 0.000| 3.055| 0.439| 0.729] + [PKTLEN(c->s): 54.000| 752.000| 124.000| 181.800][PKTLEN(s->c): 54.000| 214.000| 74.800| 37.700] + [BINS(c->s)..: 8,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 14,4,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 626 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [....10.3.29.101][56309] -> [.104.161.127.22][...80] + detected: [.....2] [ip4][..tcp] [....10.3.29.101][56309] -> [.104.161.127.22][...80] [HTTP][Web][Acceptable] + analyse: [.....2] [ip4][..tcp] [....10.3.29.101][56309] -> [.104.161.127.22][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.204| 0.029| 0.060] + [IAT(c->s)...: 0.000| 0.204| 0.041| 0.068][IAT(s->c)...: 0.000| 0.204| 0.022| 0.054] + [PKTLEN(c->s): 54.000| 500.000| 92.200| 123.000][PKTLEN(s->c): 54.000|1415.000|1279.100| 407.700] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,0,0,0,0,0] + end: [.....1] [ip4][..tcp] [....10.2.25.102][57309] -> [..193.252.22.84][..587] [SMTP][Email][Acceptable] + DAEMON-EVENT: [Processed: 834 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..tcp] [....10.4.20.102][54319] -> [107.161.178.210][...80] + detected: [.....3] [ip4][..tcp] [....10.4.20.102][54319] -> [107.161.178.210][...80] [HTTP][Web][Acceptable] + detection-update: [.....3] [ip4][..tcp] [....10.4.20.102][54319] -> [107.161.178.210][...80] [HTTP][Web][Acceptable] + RISK: Binary App Transfer + analyse: [.....3] [ip4][..tcp] [....10.4.20.102][54319] -> [107.161.178.210][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.261| 0.031| 0.066] + [IAT(c->s)...: 0.000| 0.260| 0.030| 0.065][IAT(s->c)...: 0.000| 0.261| 0.032| 0.067] + [PKTLEN(c->s): 60.000| 279.000| 73.200| 51.500][PKTLEN(s->c): 62.000|1442.000|1350.000| 344.200] + [BINS(c->s)..: 16,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,0,0,0,0] + end: [.....2] [ip4][..tcp] [....10.3.29.101][56309] -> [.104.161.127.22][...80] [HTTP][Web][Acceptable] + DAEMON-EVENT: [Processed: 1663 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 1|updates: 0] + new: [.....4] [ip4][..tcp] [....10.4.25.101][49797] -> [..77.105.36.156][...80] + detected: [.....4] [ip4][..tcp] [....10.4.25.101][49797] -> [..77.105.36.156][...80] [HTTP][Web][Acceptable] + RISK: HTTP Suspicious User-Agent + detection-update: [.....4] [ip4][..tcp] [....10.4.25.101][49797] -> [..77.105.36.156][...80] [HTTP][Download][Acceptable] + RISK: Binary App Transfer, HTTP Suspicious User-Agent + analyse: [.....4] [ip4][..tcp] [....10.4.25.101][49797] -> [..77.105.36.156][...80] [HTTP][Download][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.292| 0.042| 0.080] + [IAT(c->s)...: 0.000| 0.292| 0.073| 0.105][IAT(s->c)...: 0.000| 0.184| 0.030| 0.062] + [PKTLEN(c->s): 60.000| 206.000| 75.200| 43.600][PKTLEN(s->c): 60.000|1442.000|1264.600| 420.200] + [BINS(c->s)..: 9,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,18,0,0,0,0] + end: [.....3] [ip4][..tcp] [....10.4.20.102][54319] -> [107.161.178.210][...80] [HTTP][Web][Acceptable] + RISK: Binary App Transfer + new: [.....5] [ip4][..tcp] [....10.4.25.101][49803] -> [138.197.147.101][..443] + detected: [.....5] [ip4][..tcp] [....10.4.25.101][49803] -> [138.197.147.101][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....5] [ip4][..tcp] [....10.4.25.101][49803] -> [138.197.147.101][..443] [TLS][Web][Safe] + RISK: Self-signed Cert, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + analyse: [.....5] [ip4][..tcp] [....10.4.25.101][49803] -> [138.197.147.101][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.263| 0.117| 0.292] + [IAT(c->s)...: 0.000| 1.263| 0.146| 0.340][IAT(s->c)...: 0.000| 1.117| 0.097| 0.253] + [PKTLEN(c->s): 60.000| 534.000| 115.100| 122.800][PKTLEN(s->c): 60.000|1442.000|1147.800| 551.200] + [BINS(c->s)..: 11,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,0,0,0,0] + detection-update: [.....5] [ip4][..tcp] [....10.4.25.101][49803] -> [138.197.147.101][..443] [TLS][Web][Safe] + RISK: Self-signed Cert, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + new: [.....6] [ip4][..tcp] [....10.4.25.101][49804] -> [138.197.147.101][..443] + detected: [.....6] [ip4][..tcp] [....10.4.25.101][49804] -> [138.197.147.101][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....6] [ip4][..tcp] [....10.4.25.101][49804] -> [138.197.147.101][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + end: [.....4] [ip4][..tcp] [....10.4.25.101][49797] -> [..77.105.36.156][...80] [HTTP][Download][Acceptable] + RISK: Binary App Transfer, HTTP Suspicious User-Agent + end: [.....5] [ip4][..tcp] [....10.4.25.101][49803] -> [138.197.147.101][..443] [TLS][Web][Safe] + RISK: Self-signed Cert, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + end: [.....6] [ip4][..tcp] [....10.4.25.101][49804] -> [138.197.147.101][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/encrypted_sni.pcap.out b/test/results/flow-info/encrypted_sni.pcap.out new file mode 100644 index 000000000..05ce4f637 --- /dev/null +++ b/test/results/flow-info/encrypted_sni.pcap.out @@ -0,0 +1,13 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.1.12][49886] -> [..104.27.129.77][..443] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [...192.168.1.12][49886] -> [..104.27.129.77][..443] [TLS.Cloudflare][Web][Acceptable] + new: [.....2] [ip4][..tcp] [...192.168.1.12][49887] -> [.104.16.125.175][..443] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [...192.168.1.12][49887] -> [.104.16.125.175][..443] [TLS.Cloudflare][Web][Acceptable] + new: [.....3] [ip4][..tcp] [...192.168.1.12][49897] -> [..104.22.71.197][..443] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [...192.168.1.12][49897] -> [..104.22.71.197][..443] [TLS.Cloudflare][Web][Acceptable] + idle: [.....1] [ip4][..tcp] [...192.168.1.12][49886] -> [..104.27.129.77][..443] + idle: [.....3] [ip4][..tcp] [...192.168.1.12][49897] -> [..104.22.71.197][..443] + idle: [.....2] [ip4][..tcp] [...192.168.1.12][49887] -> [.104.16.125.175][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/esp.pcapng.out b/test/results/flow-info/esp.pcapng.out new file mode 100644 index 000000000..898a8448a --- /dev/null +++ b/test/results/flow-info/esp.pcapng.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.......10.2.3.2][..500] -> [.......10.3.4.4][..500] + detected: [.....1] [ip4][..udp] [.......10.2.3.2][..500] -> [.......10.3.4.4][..500] [IPSec][VPN][Safe] + new: [.....2] [ip4][...50] [.......10.2.3.2] -> [.......10.3.4.4] + detected: [.....2] [ip4][...50] [.......10.2.3.2] -> [.......10.3.4.4] [IPSec][VPN][Safe] + idle: [.....1] [ip4][..udp] [.......10.2.3.2][..500] -> [.......10.3.4.4][..500] [IPSec][VPN][Safe] + idle: [.....2] [ip4][...50] [.......10.2.3.2] -> [.......10.3.4.4] [IPSec][VPN][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ethereum.pcap.out b/test/results/flow-info/ethereum.pcap.out new file mode 100644 index 000000000..da49d9cab --- /dev/null +++ b/test/results/flow-info/ethereum.pcap.out @@ -0,0 +1,600 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...87.14.222.25][56693] -> [..192.168.1.184][30303] + detected: [.....1] [ip4][..udp] [...87.14.222.25][56693] -> [..192.168.1.184][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [.....2] [ip4][..udp] [...60.191.32.71][30303] -> [..192.168.1.184][30303] + detected: [.....2] [ip4][..udp] [...60.191.32.71][30303] -> [..192.168.1.184][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [.....3] [ip4][..udp] [...3.112.138.57][25516] -> [..192.168.1.184][30303] + detected: [.....3] [ip4][..udp] [...3.112.138.57][25516] -> [..192.168.1.184][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [.....4] [ip4][..udp] [..192.168.1.184][30303] -> [....3.209.45.79][30303] + detected: [.....4] [ip4][..udp] [..192.168.1.184][30303] -> [....3.209.45.79][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [.....5] [ip4][..udp] [..192.168.1.184][30303] -> [.52.231.165.108][30303] + detected: [.....5] [ip4][..udp] [..192.168.1.184][30303] -> [.52.231.165.108][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [.....6] [ip4][..udp] [..192.168.1.184][30303] -> [..18.138.108.67][30303] + detected: [.....6] [ip4][..udp] [..192.168.1.184][30303] -> [..18.138.108.67][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [.....7] [ip4][..udp] [..192.168.1.184][30303] -> [...34.97.172.22][30303] + detected: [.....7] [ip4][..udp] [..192.168.1.184][30303] -> [...34.97.172.22][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [.....8] [ip4][..udp] [..192.168.1.184][30303] -> [...66.42.82.246][30303] + detected: [.....8] [ip4][..udp] [..192.168.1.184][30303] -> [...66.42.82.246][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [.....9] [ip4][..tcp] [..192.168.1.184][56612] -> [...66.42.82.246][30303] + new: [....10] [ip4][..tcp] [..192.168.1.184][56610] -> [..165.22.107.33][30303] + new: [....11] [ip4][..tcp] [..192.168.1.184][56611] -> [..104.42.217.25][30303] + new: [....12] [ip4][..tcp] [..192.168.1.184][56613] -> [.162.243.160.83][30303] + new: [....13] [ip4][..tcp] [..192.168.1.184][56615] -> [.35.158.244.151][30303] + new: [....14] [ip4][..tcp] [..192.168.1.184][56617] -> [...34.97.172.22][30303] + new: [....15] [ip4][..tcp] [..192.168.1.184][56618] -> [.52.231.165.108][30303] + new: [....16] [ip4][..tcp] [..192.168.1.184][56620] -> [191.234.162.198][30303] + new: [....17] [ip4][..tcp] [..192.168.1.184][56621] -> [..52.187.207.27][30303] + new: [....18] [ip4][..tcp] [..192.168.1.184][56622] -> [..18.138.108.67][30303] + new: [....19] [ip4][..tcp] [..192.168.1.184][56623] -> [...18.138.81.28][30303] + new: [....20] [ip4][..tcp] [..192.168.1.184][56624] -> [....89.38.99.34][30303] + new: [....21] [ip4][..tcp] [..192.168.1.184][56625] -> [.....5.1.83.226][30303] + new: [....22] [ip4][..tcp] [..192.168.1.184][56626] -> [178.128.195.220][30303] + new: [....23] [ip4][..tcp] [..192.168.1.184][56627] -> [..34.255.23.113][30303] + new: [....24] [ip4][..tcp] [..192.168.1.184][56628] -> [....3.209.45.79][30303] + detected: [....13] [ip4][..tcp] [..192.168.1.184][56615] -> [.35.158.244.151][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....22] [ip4][..tcp] [..192.168.1.184][56626] -> [178.128.195.220][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....20] [ip4][..tcp] [..192.168.1.184][56624] -> [....89.38.99.34][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....23] [ip4][..tcp] [..192.168.1.184][56627] -> [..34.255.23.113][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....25] [ip4][..tcp] [..192.168.1.184][56629] -> [....51.38.60.79][30303] + detected: [....12] [ip4][..tcp] [..192.168.1.184][56613] -> [.162.243.160.83][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....26] [ip4][..udp] [..192.168.1.184][30303] -> [...128.0.51.140][30303] + detected: [....26] [ip4][..udp] [..192.168.1.184][30303] -> [...128.0.51.140][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....13] [ip4][..tcp] [..192.168.1.184][56615] -> [.35.158.244.151][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.063| 0.008| 0.018] + [IAT(c->s)...: 0.000| 0.062| 0.005| 0.016][IAT(s->c)...: 0.000| 0.063| 0.012| 0.021] + [PKTLEN(c->s): 66.000| 561.000| 101.600| 106.200][PKTLEN(s->c): 60.000| 514.000| 112.200| 127.500] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....27] [ip4][..tcp] [..192.168.1.184][56630] -> [..40.67.144.128][30303] + detected: [....24] [ip4][..tcp] [..192.168.1.184][56628] -> [....3.209.45.79][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....22] [ip4][..tcp] [..192.168.1.184][56626] -> [178.128.195.220][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.063| 0.009| 0.019] + [IAT(c->s)...: 0.000| 0.063| 0.007| 0.017][IAT(s->c)...: 0.000| 0.063| 0.012| 0.021] + [PKTLEN(c->s): 66.000| 612.000| 121.900| 128.500][PKTLEN(s->c): 66.000| 470.000| 121.700| 112.700] + [BINS(c->s)..: 14,3,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detected: [.....9] [ip4][..tcp] [..192.168.1.184][56612] -> [...66.42.82.246][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....25] [ip4][..tcp] [..192.168.1.184][56629] -> [....51.38.60.79][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....28] [ip4][..tcp] [..192.168.1.184][56632] -> [...51.38.81.180][30303] + new: [....29] [ip4][..udp] [..192.168.1.184][30303] -> [..54.36.160.211][30303] + detected: [....29] [ip4][..udp] [..192.168.1.184][30303] -> [..54.36.160.211][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....30] [ip4][..tcp] [..192.168.1.184][56633] -> [.82.145.220.249][30303] + detected: [....11] [ip4][..tcp] [..192.168.1.184][56611] -> [..104.42.217.25][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....23] [ip4][..tcp] [..192.168.1.184][56627] -> [..34.255.23.113][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.070| 0.011| 0.024] + [IAT(c->s)...: 0.000| 0.070| 0.007| 0.020][IAT(s->c)...: 0.000| 0.070| 0.018| 0.029] + [PKTLEN(c->s): 66.000| 578.000| 102.400| 109.700][PKTLEN(s->c): 60.000| 468.000| 108.000| 114.300] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....31] [ip4][..udp] [..192.168.1.184][30303] -> [..111.229.0.180][20182] + detected: [....31] [ip4][..udp] [..192.168.1.184][30303] -> [..111.229.0.180][20182] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....28] [ip4][..tcp] [..192.168.1.184][56632] -> [...51.38.81.180][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....32] [ip4][..udp] [..192.168.1.184][30303] -> [...209.97.143.1][50000] + detected: [....32] [ip4][..udp] [..192.168.1.184][30303] -> [...209.97.143.1][50000] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....15] [ip4][..tcp] [..192.168.1.184][56618] -> [.52.231.165.108][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....25] [ip4][..tcp] [..192.168.1.184][56629] -> [....51.38.60.79][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.073| 0.008| 0.018] + [IAT(c->s)...: 0.000| 0.043| 0.005| 0.013][IAT(s->c)...: 0.000| 0.073| 0.012| 0.023] + [PKTLEN(c->s): 66.000| 487.000| 101.400| 95.100][PKTLEN(s->c): 60.000| 406.000| 95.400| 90.500] + [BINS(c->s)..: 15,2,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 11,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detected: [....16] [ip4][..tcp] [..192.168.1.184][56620] -> [191.234.162.198][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....30] [ip4][..tcp] [..192.168.1.184][56633] -> [.82.145.220.249][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....27] [ip4][..tcp] [..192.168.1.184][56630] -> [..40.67.144.128][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....33] [ip4][..tcp] [..192.168.1.184][56634] -> [..159.203.84.31][30303] + detected: [....18] [ip4][..tcp] [..192.168.1.184][56622] -> [..18.138.108.67][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....34] [ip4][..tcp] [..192.168.1.184][56635] -> [.162.228.29.160][30303] + detected: [....19] [ip4][..tcp] [..192.168.1.184][56623] -> [...18.138.81.28][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....14] [ip4][..tcp] [..192.168.1.184][56617] -> [...34.97.172.22][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....10] [ip4][..tcp] [..192.168.1.184][56610] -> [..165.22.107.33][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....17] [ip4][..tcp] [..192.168.1.184][56621] -> [..52.187.207.27][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....28] [ip4][..tcp] [..192.168.1.184][56632] -> [...51.38.81.180][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.079| 0.012| 0.027] + [IAT(c->s)...: 0.000| 0.079| 0.007| 0.022][IAT(s->c)...: 0.000| 0.078| 0.020| 0.032] + [PKTLEN(c->s): 66.000| 545.000| 100.800| 102.900][PKTLEN(s->c): 60.000| 505.000| 111.400| 124.900] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....30] [ip4][..tcp] [..192.168.1.184][56633] -> [.82.145.220.249][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.077| 0.012| 0.026] + [IAT(c->s)...: 0.000| 0.076| 0.010| 0.025][IAT(s->c)...: 0.000| 0.077| 0.014| 0.028] + [PKTLEN(c->s): 66.000| 508.000| 106.800| 104.400][PKTLEN(s->c): 60.000| 488.000| 94.500| 105.900] + [BINS(c->s)..: 13,2,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,2,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....35] [ip4][..tcp] [..192.168.1.184][56637] -> [.35.233.197.131][30303] + new: [....36] [ip4][..tcp] [..192.168.1.184][56638] -> [209.250.240.205][30303] + new: [....37] [ip4][..udp] [..192.168.1.184][30303] -> [.35.180.246.169][30301] + detected: [....37] [ip4][..udp] [..192.168.1.184][30303] -> [.35.180.246.169][30301] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....38] [ip4][..tcp] [..192.168.1.184][56639] -> [.18.219.167.159][30303] + detected: [....33] [ip4][..tcp] [..192.168.1.184][56634] -> [..159.203.84.31][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....24] [ip4][..tcp] [..192.168.1.184][56628] -> [....3.209.45.79][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.164| 0.023| 0.053] + [IAT(c->s)...: 0.000| 0.163| 0.015| 0.045][IAT(s->c)...: 0.000| 0.164| 0.038| 0.062] + [PKTLEN(c->s): 66.000| 461.000| 96.800| 85.700][PKTLEN(s->c): 60.000| 536.000| 114.700| 133.600] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detected: [....36] [ip4][..tcp] [..192.168.1.184][56638] -> [209.250.240.205][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....34] [ip4][..tcp] [..192.168.1.184][56635] -> [.162.228.29.160][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....39] [ip4][..tcp] [..192.168.1.184][56641] -> [.144.91.120.135][30303] + new: [....40] [ip4][..tcp] [..192.168.1.184][56642] -> [..178.62.10.218][30303] + new: [....41] [ip4][..tcp] [..192.168.1.184][56643] -> [..178.62.29.183][30303] + analyse: [....36] [ip4][..tcp] [..192.168.1.184][56638] -> [209.250.240.205][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.043| 0.007| 0.014] + [IAT(c->s)...: 0.000| 0.043| 0.006| 0.013][IAT(s->c)...: 0.000| 0.041| 0.009| 0.015] + [PKTLEN(c->s): 66.000| 481.000| 115.300| 95.500][PKTLEN(s->c): 66.000| 560.000| 127.800| 135.600] + [BINS(c->s)..: 13,3,0,2,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....42] [ip4][..tcp] [..192.168.1.184][56644] -> [..13.230.108.42][30303] + detected: [....39] [ip4][..tcp] [..192.168.1.184][56641] -> [.144.91.120.135][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....27] [ip4][..tcp] [..192.168.1.184][56630] -> [..40.67.144.128][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.158| 0.021| 0.049] + [IAT(c->s)...: 0.000| 0.158| 0.016| 0.044][IAT(s->c)...: 0.000| 0.158| 0.027| 0.053] + [PKTLEN(c->s): 66.000| 497.000| 103.900| 99.500][PKTLEN(s->c): 60.000| 489.000| 97.900| 109.100] + [BINS(c->s)..: 14,2,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....43] [ip4][..tcp] [..192.168.1.184][56645] -> [.185.219.133.62][30303] + detected: [....38] [ip4][..tcp] [..192.168.1.184][56639] -> [.18.219.167.159][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....40] [ip4][..tcp] [..192.168.1.184][56642] -> [..178.62.10.218][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....41] [ip4][..tcp] [..192.168.1.184][56643] -> [..178.62.29.183][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....44] [ip4][..tcp] [..192.168.1.184][56646] -> [..172.105.94.62][30303] + detected: [....43] [ip4][..tcp] [..192.168.1.184][56645] -> [.185.219.133.62][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....45] [ip4][..tcp] [..192.168.1.184][56647] -> [.182.162.161.61][30303] + analyse: [....11] [ip4][..tcp] [..192.168.1.184][56611] -> [..104.42.217.25][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.202| 0.031| 0.071] + [IAT(c->s)...: 0.000| 0.201| 0.020| 0.059][IAT(s->c)...: 0.000| 0.202| 0.052| 0.085] + [PKTLEN(c->s): 66.000| 556.000| 101.300| 105.100][PKTLEN(s->c): 60.000| 533.000| 114.500| 132.700] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detected: [....44] [ip4][..tcp] [..192.168.1.184][56646] -> [..172.105.94.62][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....33] [ip4][..tcp] [..192.168.1.184][56634] -> [..159.203.84.31][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.109| 0.018| 0.040] + [IAT(c->s)...: 0.000| 0.109| 0.011| 0.033][IAT(s->c)...: 0.000| 0.109| 0.030| 0.048] + [PKTLEN(c->s): 66.000| 637.000| 105.200| 121.900][PKTLEN(s->c): 60.000| 579.000| 118.100| 146.100] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....46] [ip4][..tcp] [..192.168.1.184][56650] -> [.35.228.250.140][30303] + new: [....47] [ip4][..tcp] [..192.168.1.184][56651] -> [..138.201.12.87][30303] + analyse: [....41] [ip4][..tcp] [..192.168.1.184][56643] -> [..178.62.29.183][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.049| 0.009| 0.018] + [IAT(c->s)...: 0.000| 0.049| 0.007| 0.017][IAT(s->c)...: 0.000| 0.047| 0.012| 0.019] + [PKTLEN(c->s): 66.000| 535.000| 104.400| 102.700][PKTLEN(s->c): 66.000| 384.000| 110.900| 88.900] + [BINS(c->s)..: 15,3,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,2,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....48] [ip4][..tcp] [..192.168.1.184][56652] -> [..176.9.136.209][30303] + detected: [....47] [ip4][..tcp] [..192.168.1.184][56651] -> [..138.201.12.87][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....49] [ip4][..tcp] [..192.168.1.184][56654] -> [..85.214.108.52][30303] + new: [....50] [ip4][..udp] [..192.168.1.184][30303] -> [.18.219.167.159][30303] + detected: [....50] [ip4][..udp] [..192.168.1.184][30303] -> [.18.219.167.159][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....43] [ip4][..tcp] [..192.168.1.184][56645] -> [.185.219.133.62][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.052| 0.010| 0.019] + [IAT(c->s)...: 0.000| 0.052| 0.008| 0.018][IAT(s->c)...: 0.000| 0.050| 0.012| 0.020] + [PKTLEN(c->s): 66.000| 476.000| 101.500| 90.400][PKTLEN(s->c): 66.000| 448.000| 118.600| 107.800] + [BINS(c->s)..: 15,3,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,2,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....51] [ip4][..tcp] [..192.168.1.184][56655] -> [.202.112.28.106][30303] + detected: [....48] [ip4][..tcp] [..192.168.1.184][56652] -> [..176.9.136.209][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....46] [ip4][..tcp] [..192.168.1.184][56650] -> [.35.228.250.140][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....15] [ip4][..tcp] [..192.168.1.184][56618] -> [.52.231.165.108][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.262| 0.038| 0.087] + [IAT(c->s)...: 0.000| 0.262| 0.024| 0.073][IAT(s->c)...: 0.000| 0.262| 0.063| 0.104] + [PKTLEN(c->s): 66.000| 516.000| 99.400| 96.900][PKTLEN(s->c): 60.000| 519.000| 113.200| 128.700] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....16] [ip4][..tcp] [..192.168.1.184][56620] -> [191.234.162.198][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.263| 0.038| 0.087] + [IAT(c->s)...: 0.000| 0.263| 0.024| 0.073][IAT(s->c)...: 0.000| 0.263| 0.063| 0.104] + [PKTLEN(c->s): 66.000| 578.000| 102.400| 109.700][PKTLEN(s->c): 60.000| 525.000| 113.200| 130.700] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detected: [....49] [ip4][..tcp] [..192.168.1.184][56654] -> [..85.214.108.52][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....52] [ip4][..tcp] [..192.168.1.184][56657] -> [.138.75.171.190][30303] + new: [....53] [ip4][..tcp] [..192.168.1.184][56658] -> [.157.230.152.87][30303] + analyse: [....47] [ip4][..tcp] [..192.168.1.184][56651] -> [..138.201.12.87][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.037| 0.006| 0.012] + [IAT(c->s)...: 0.000| 0.037| 0.004| 0.011][IAT(s->c)...: 0.000| 0.034| 0.007| 0.013] + [PKTLEN(c->s): 66.000| 483.000| 103.200| 96.400][PKTLEN(s->c): 60.000| 393.000| 91.500| 84.400] + [BINS(c->s)..: 14,2,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....44] [ip4][..tcp] [..192.168.1.184][56646] -> [..172.105.94.62][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.116| 0.012| 0.026] + [IAT(c->s)...: 0.000| 0.116| 0.010| 0.026][IAT(s->c)...: 0.000| 0.091| 0.016| 0.025] + [PKTLEN(c->s): 66.000| 540.000| 107.100| 103.100][PKTLEN(s->c): 66.000| 398.000| 131.700| 115.300] + [BINS(c->s)..: 14,4,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,0,0,0,0,0,1,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....48] [ip4][..tcp] [..192.168.1.184][56652] -> [..176.9.136.209][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.035| 0.006| 0.012] + [IAT(c->s)...: 0.000| 0.035| 0.004| 0.011][IAT(s->c)...: 0.000| 0.034| 0.007| 0.013] + [PKTLEN(c->s): 66.000| 597.000| 109.500| 121.600][PKTLEN(s->c): 60.000| 494.000| 98.300| 110.300] + [BINS(c->s)..: 14,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....54] [ip4][..tcp] [..192.168.1.184][56660] -> [...51.161.23.12][30303] + new: [....55] [ip4][..tcp] [..192.168.1.184][56661] -> [....52.9.128.68][30303] + new: [....56] [ip4][..tcp] [..192.168.1.184][56662] -> [..35.229.232.19][30303] + new: [....57] [ip4][..tcp] [..192.168.1.184][56663] -> [124.217.235.180][30303] + analyse: [....34] [ip4][..tcp] [..192.168.1.184][56635] -> [.162.228.29.160][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.159| 0.026| 0.057] + [IAT(c->s)...: 0.000| 0.159| 0.016| 0.048][IAT(s->c)...: 0.000| 0.158| 0.043| 0.068] + [PKTLEN(c->s): 66.000| 479.000| 97.700| 89.400][PKTLEN(s->c): 60.000| 471.000| 108.800| 115.000] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....38] [ip4][..tcp] [..192.168.1.184][56639] -> [.18.219.167.159][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.131| 0.020| 0.046] + [IAT(c->s)...: 0.000| 0.131| 0.013| 0.039][IAT(s->c)...: 0.000| 0.131| 0.031| 0.054] + [PKTLEN(c->s): 66.000| 587.000| 104.700| 114.000][PKTLEN(s->c): 60.000| 556.000| 110.800| 134.700] + [BINS(c->s)..: 16,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 10,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....46] [ip4][..tcp] [..192.168.1.184][56650] -> [.35.228.250.140][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.057| 0.011| 0.022] + [IAT(c->s)...: 0.000| 0.057| 0.009| 0.021][IAT(s->c)...: 0.000| 0.057| 0.015| 0.024] + [PKTLEN(c->s): 66.000| 528.000| 104.100| 101.300][PKTLEN(s->c): 66.000| 508.000| 131.500| 120.500] + [BINS(c->s)..: 15,3,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,2,1,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....18] [ip4][..tcp] [..192.168.1.184][56622] -> [..18.138.108.67][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.300| 0.044| 0.100] + [IAT(c->s)...: 0.000| 0.300| 0.028| 0.083][IAT(s->c)...: 0.000| 0.300| 0.073| 0.120] + [PKTLEN(c->s): 66.000| 597.000| 103.300| 113.600][PKTLEN(s->c): 60.000| 384.000| 100.400| 90.300] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....19] [ip4][..tcp] [..192.168.1.184][56623] -> [...18.138.81.28][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.308| 0.045| 0.103] + [IAT(c->s)...: 0.000| 0.308| 0.029| 0.085][IAT(s->c)...: 0.000| 0.308| 0.075| 0.123] + [PKTLEN(c->s): 66.000| 537.000| 100.400| 101.200][PKTLEN(s->c): 60.000| 488.000| 110.400| 119.800] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....58] [ip4][..udp] [183.129.242.164][.1024] -> [..192.168.1.184][30303] + detected: [....58] [ip4][..udp] [183.129.242.164][.1024] -> [..192.168.1.184][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....54] [ip4][..tcp] [..192.168.1.184][56660] -> [...51.161.23.12][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....53] [ip4][..tcp] [..192.168.1.184][56658] -> [.157.230.152.87][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....10] [ip4][..tcp] [..192.168.1.184][56610] -> [..165.22.107.33][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.339| 0.050| 0.114] + [IAT(c->s)...: 0.000| 0.339| 0.032| 0.094][IAT(s->c)...: 0.000| 0.339| 0.083| 0.136] + [PKTLEN(c->s): 66.000| 640.000| 105.300| 122.500][PKTLEN(s->c): 60.000| 462.000| 107.500| 112.600] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detected: [....55] [ip4][..tcp] [..192.168.1.184][56661] -> [....52.9.128.68][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....59] [ip4][..udp] [..192.168.1.184][30303] -> [.202.112.28.106][30303] + detected: [....59] [ip4][..udp] [..192.168.1.184][30303] -> [.202.112.28.106][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....45] [ip4][..tcp] [..192.168.1.184][56647] -> [.182.162.161.61][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....52] [ip4][..tcp] [..192.168.1.184][56657] -> [.138.75.171.190][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....17] [ip4][..tcp] [..192.168.1.184][56621] -> [..52.187.207.27][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.355| 0.054| 0.122] + [IAT(c->s)...: 0.000| 0.355| 0.034| 0.101][IAT(s->c)...: 0.000| 0.355| 0.090| 0.146] + [PKTLEN(c->s): 66.000| 591.000| 103.000| 112.400][PKTLEN(s->c): 60.000| 517.000| 113.000| 128.200] + [BINS(c->s)..: 17,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....60] [ip4][..udp] [..192.168.1.184][30303] -> [..106.12.39.168][30333] + detected: [....60] [ip4][..udp] [..192.168.1.184][30303] -> [..106.12.39.168][30333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....61] [ip4][..tcp] [..192.168.1.184][56670] -> [..167.86.122.50][30303] + new: [....62] [ip4][..tcp] [..192.168.1.184][56671] -> [..86.107.243.62][30303] + detected: [....56] [ip4][..tcp] [..192.168.1.184][56662] -> [..35.229.232.19][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....51] [ip4][..tcp] [..192.168.1.184][56655] -> [.202.112.28.106][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....62] [ip4][..tcp] [..192.168.1.184][56671] -> [..86.107.243.62][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....61] [ip4][..tcp] [..192.168.1.184][56670] -> [..167.86.122.50][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....57] [ip4][..tcp] [..192.168.1.184][56663] -> [124.217.235.180][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....54] [ip4][..tcp] [..192.168.1.184][56660] -> [...51.161.23.12][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.147| 0.028| 0.054] + [IAT(c->s)...: 0.000| 0.147| 0.022| 0.051][IAT(s->c)...: 0.000| 0.142| 0.036| 0.059] + [PKTLEN(c->s): 66.000| 639.000| 109.700| 124.700][PKTLEN(s->c): 66.000| 487.000| 121.800| 117.200] + [BINS(c->s)..: 15,3,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,2,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....63] [ip4][..tcp] [..192.168.1.184][56672] -> [139.162.255.210][30303] + new: [....64] [ip4][..tcp] [..192.168.1.184][56673] -> [..78.47.147.155][30303] + analyse: [....62] [ip4][..tcp] [..192.168.1.184][56671] -> [..86.107.243.62][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.039| 0.010| 0.016] + [IAT(c->s)...: 0.000| 0.039| 0.006| 0.014][IAT(s->c)...: 0.000| 0.039| 0.019| 0.018] + [PKTLEN(c->s): 66.000| 606.000| 105.200| 107.600][PKTLEN(s->c): 66.000| 430.000| 168.500| 136.600] + [BINS(c->s)..: 17,5,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,0,0,0,1,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....65] [ip4][..tcp] [..192.168.1.184][56674] -> [...94.68.55.162][30303] + detected: [....63] [ip4][..tcp] [..192.168.1.184][56672] -> [139.162.255.210][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....66] [ip4][..tcp] [..192.168.1.184][56675] -> [..35.235.37.216][30303] + detected: [....64] [ip4][..tcp] [..192.168.1.184][56673] -> [..78.47.147.155][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....66] [ip4][..tcp] [..192.168.1.184][56675] -> [..35.235.37.216][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....53] [ip4][..tcp] [..192.168.1.184][56658] -> [.157.230.152.87][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.184| 0.035| 0.071] + [IAT(c->s)...: 0.000| 0.183| 0.029| 0.066][IAT(s->c)...: 0.000| 0.184| 0.045| 0.078] + [PKTLEN(c->s): 66.000| 649.000| 110.200| 127.000][PKTLEN(s->c): 66.000| 457.000| 120.700| 110.100] + [BINS(c->s)..: 15,3,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,2,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detected: [....65] [ip4][..tcp] [..192.168.1.184][56674] -> [...94.68.55.162][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....67] [ip4][..tcp] [..192.168.1.184][56678] -> [..13.251.14.199][30303] + analyse: [....63] [ip4][..tcp] [..192.168.1.184][56672] -> [139.162.255.210][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.042| 0.007| 0.015] + [IAT(c->s)...: 0.000| 0.042| 0.005| 0.013][IAT(s->c)...: 0.000| 0.042| 0.009| 0.017] + [PKTLEN(c->s): 66.000| 452.000| 101.400| 89.600][PKTLEN(s->c): 60.000| 422.000| 93.600| 91.800] + [BINS(c->s)..: 14,2,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....68] [ip4][..tcp] [..192.168.1.184][56679] -> [..35.228.158.52][30303] + analyse: [....55] [ip4][..tcp] [..192.168.1.184][56661] -> [....52.9.128.68][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.194| 0.037| 0.074] + [IAT(c->s)...: 0.000| 0.194| 0.030| 0.069][IAT(s->c)...: 0.000| 0.194| 0.048| 0.082] + [PKTLEN(c->s): 66.000| 538.000| 104.600| 103.300][PKTLEN(s->c): 66.000| 494.000| 130.300| 116.000] + [BINS(c->s)..: 15,3,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,2,1,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....69] [ip4][..tcp] [..192.168.1.184][56680] -> [...138.59.17.58][30303] + new: [....70] [ip4][..tcp] [..192.168.1.184][56681] -> [207.180.206.216][30303] + detected: [....68] [ip4][..tcp] [..192.168.1.184][56679] -> [..35.228.158.52][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....71] [ip4][..udp] [..192.168.1.184][30303] -> [..167.86.122.50][30303] + detected: [....71] [ip4][..udp] [..192.168.1.184][30303] -> [..167.86.122.50][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....70] [ip4][..tcp] [..192.168.1.184][56681] -> [207.180.206.216][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....65] [ip4][..tcp] [..192.168.1.184][56674] -> [...94.68.55.162][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.075| 0.014| 0.028] + [IAT(c->s)...: 0.000| 0.075| 0.012| 0.026][IAT(s->c)...: 0.000| 0.075| 0.018| 0.031] + [PKTLEN(c->s): 66.000| 613.000| 108.300| 119.200][PKTLEN(s->c): 66.000| 570.000| 136.700| 136.800] + [BINS(c->s)..: 15,3,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,2,1,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....72] [ip4][..tcp] [..192.168.1.184][56684] -> [...51.83.237.44][30303] + analyse: [....52] [ip4][..tcp] [..192.168.1.184][56657] -> [.138.75.171.190][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.263| 0.042| 0.096] + [IAT(c->s)...: 0.000| 0.263| 0.033| 0.086][IAT(s->c)...: 0.000| 0.261| 0.052| 0.104] + [PKTLEN(c->s): 66.000| 605.000| 112.500| 126.500][PKTLEN(s->c): 60.000| 525.000| 97.400| 115.000] + [BINS(c->s)..: 13,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,2,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....73] [ip4][..tcp] [..192.168.1.184][56685] -> [...88.99.93.219][30303] + detected: [....72] [ip4][..tcp] [..192.168.1.184][56684] -> [...51.83.237.44][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....69] [ip4][..tcp] [..192.168.1.184][56680] -> [...138.59.17.58][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....73] [ip4][..tcp] [..192.168.1.184][56685] -> [...88.99.93.219][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + new: [....74] [ip4][..tcp] [..192.168.1.184][56686] -> [.206.189.107.35][30303] + detected: [....67] [ip4][..tcp] [..192.168.1.184][56678] -> [..13.251.14.199][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + detected: [....74] [ip4][..tcp] [..192.168.1.184][56686] -> [.206.189.107.35][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + analyse: [....64] [ip4][..tcp] [..192.168.1.184][56673] -> [..78.47.147.155][30303] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.286| 0.027| 0.065] + [IAT(c->s)...: 0.000| 0.286| 0.019| 0.060][IAT(s->c)...: 0.000| 0.247| 0.046| 0.073] + [PKTLEN(c->s): 66.000| 633.000| 108.400| 114.800][PKTLEN(s->c): 66.000| 413.000| 162.300| 125.600] + [BINS(c->s)..: 16,5,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,1,0,0,0,1,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [....52] [ip4][..tcp] [..192.168.1.184][56657] -> [.138.75.171.190][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....69] [ip4][..tcp] [..192.168.1.184][56680] -> [...138.59.17.58][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....43] [ip4][..tcp] [..192.168.1.184][56645] -> [.185.219.133.62][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....46] [ip4][..tcp] [..192.168.1.184][56650] -> [.35.228.250.140][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....50] [ip4][..udp] [..192.168.1.184][30303] -> [.18.219.167.159][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....68] [ip4][..tcp] [..192.168.1.184][56679] -> [..35.228.158.52][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....65] [ip4][..tcp] [..192.168.1.184][56674] -> [...94.68.55.162][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....34] [ip4][..tcp] [..192.168.1.184][56635] -> [.162.228.29.160][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....70] [ip4][..tcp] [..192.168.1.184][56681] -> [207.180.206.216][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....56] [ip4][..tcp] [..192.168.1.184][56662] -> [..35.229.232.19][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....37] [ip4][..udp] [..192.168.1.184][30303] -> [.35.180.246.169][30301] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....29] [ip4][..udp] [..192.168.1.184][30303] -> [..54.36.160.211][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....60] [ip4][..udp] [..192.168.1.184][30303] -> [..106.12.39.168][30333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....74] [ip4][..tcp] [..192.168.1.184][56686] -> [.206.189.107.35][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....13] [ip4][..tcp] [..192.168.1.184][56615] -> [.35.158.244.151][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + guessed: [....42] [ip4][..tcp] [..192.168.1.184][56644] -> [..13.230.108.42][30303] [Mining.AmazonAWS][Cloud][Acceptable] + idle: [....42] [ip4][..tcp] [..192.168.1.184][56644] -> [..13.230.108.42][30303] + end: [....25] [ip4][..tcp] [..192.168.1.184][56629] -> [....51.38.60.79][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....28] [ip4][..tcp] [..192.168.1.184][56632] -> [...51.38.81.180][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....20] [ip4][..tcp] [..192.168.1.184][56624] -> [....89.38.99.34][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....49] [ip4][..tcp] [..192.168.1.184][56654] -> [..85.214.108.52][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....3] [ip4][..udp] [...3.112.138.57][25516] -> [..192.168.1.184][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....10] [ip4][..tcp] [..192.168.1.184][56610] -> [..165.22.107.33][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....1] [ip4][..udp] [...87.14.222.25][56693] -> [..192.168.1.184][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....53] [ip4][..tcp] [..192.168.1.184][56658] -> [.157.230.152.87][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....40] [ip4][..tcp] [..192.168.1.184][56642] -> [..178.62.10.218][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....41] [ip4][..tcp] [..192.168.1.184][56643] -> [..178.62.29.183][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....61] [ip4][..tcp] [..192.168.1.184][56670] -> [..167.86.122.50][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....31] [ip4][..udp] [..192.168.1.184][30303] -> [..111.229.0.180][20182] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....23] [ip4][..tcp] [..192.168.1.184][56627] -> [..34.255.23.113][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....15] [ip4][..tcp] [..192.168.1.184][56618] -> [.52.231.165.108][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....64] [ip4][..tcp] [..192.168.1.184][56673] -> [..78.47.147.155][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....71] [ip4][..udp] [..192.168.1.184][30303] -> [..167.86.122.50][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....32] [ip4][..udp] [..192.168.1.184][30303] -> [...209.97.143.1][50000] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....5] [ip4][..udp] [..192.168.1.184][30303] -> [.52.231.165.108][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....2] [ip4][..udp] [...60.191.32.71][30303] -> [..192.168.1.184][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....58] [ip4][..udp] [183.129.242.164][.1024] -> [..192.168.1.184][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....22] [ip4][..tcp] [..192.168.1.184][56626] -> [178.128.195.220][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....51] [ip4][..tcp] [..192.168.1.184][56655] -> [.202.112.28.106][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + guessed: [....21] [ip4][..tcp] [..192.168.1.184][56625] -> [.....5.1.83.226][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....21] [ip4][..tcp] [..192.168.1.184][56625] -> [.....5.1.83.226][30303] + end: [....24] [ip4][..tcp] [..192.168.1.184][56628] -> [....3.209.45.79][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....14] [ip4][..tcp] [..192.168.1.184][56617] -> [...34.97.172.22][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + guessed: [....35] [ip4][..tcp] [..192.168.1.184][56637] -> [.35.233.197.131][30303] [Mining.GoogleCloud][Cloud][Acceptable] + idle: [....35] [ip4][..tcp] [..192.168.1.184][56637] -> [.35.233.197.131][30303] + end: [....54] [ip4][..tcp] [..192.168.1.184][56660] -> [...51.161.23.12][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....55] [ip4][..tcp] [..192.168.1.184][56661] -> [....52.9.128.68][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....30] [ip4][..tcp] [..192.168.1.184][56633] -> [.82.145.220.249][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....57] [ip4][..tcp] [..192.168.1.184][56663] -> [124.217.235.180][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....47] [ip4][..tcp] [..192.168.1.184][56651] -> [..138.201.12.87][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....26] [ip4][..udp] [..192.168.1.184][30303] -> [...128.0.51.140][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....44] [ip4][..tcp] [..192.168.1.184][56646] -> [..172.105.94.62][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....48] [ip4][..tcp] [..192.168.1.184][56652] -> [..176.9.136.209][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....59] [ip4][..udp] [..192.168.1.184][30303] -> [.202.112.28.106][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....18] [ip4][..tcp] [..192.168.1.184][56622] -> [..18.138.108.67][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....19] [ip4][..tcp] [..192.168.1.184][56623] -> [...18.138.81.28][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....9] [ip4][..tcp] [..192.168.1.184][56612] -> [...66.42.82.246][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....4] [ip4][..udp] [..192.168.1.184][30303] -> [....3.209.45.79][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....11] [ip4][..tcp] [..192.168.1.184][56611] -> [..104.42.217.25][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....7] [ip4][..udp] [..192.168.1.184][30303] -> [...34.97.172.22][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....63] [ip4][..tcp] [..192.168.1.184][56672] -> [139.162.255.210][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....16] [ip4][..tcp] [..192.168.1.184][56620] -> [191.234.162.198][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....45] [ip4][..tcp] [..192.168.1.184][56647] -> [.182.162.161.61][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....36] [ip4][..tcp] [..192.168.1.184][56638] -> [209.250.240.205][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....38] [ip4][..tcp] [..192.168.1.184][56639] -> [.18.219.167.159][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....27] [ip4][..tcp] [..192.168.1.184][56630] -> [..40.67.144.128][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....17] [ip4][..tcp] [..192.168.1.184][56621] -> [..52.187.207.27][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....67] [ip4][..tcp] [..192.168.1.184][56678] -> [..13.251.14.199][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....6] [ip4][..udp] [..192.168.1.184][30303] -> [..18.138.108.67][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....66] [ip4][..tcp] [..192.168.1.184][56675] -> [..35.235.37.216][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....72] [ip4][..tcp] [..192.168.1.184][56684] -> [...51.83.237.44][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [.....8] [ip4][..udp] [..192.168.1.184][30303] -> [...66.42.82.246][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....62] [ip4][..tcp] [..192.168.1.184][56671] -> [..86.107.243.62][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [....73] [ip4][..tcp] [..192.168.1.184][56685] -> [...88.99.93.219][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....12] [ip4][..tcp] [..192.168.1.184][56613] -> [.162.243.160.83][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....39] [ip4][..tcp] [..192.168.1.184][56641] -> [.144.91.120.135][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + end: [....33] [ip4][..tcp] [..192.168.1.184][56634] -> [..159.203.84.31][30303] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ethernetIP.pcap.out b/test/results/flow-info/ethernetIP.pcap.out new file mode 100644 index 000000000..4378555f6 --- /dev/null +++ b/test/results/flow-info/ethernetIP.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....141.81.0.10][50275] -> [....141.81.0.83][44818] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [....141.81.0.10][50275] -> [....141.81.0.83][44818] [EthernetIP][Network][Acceptable] + new: [.....2] [ip4][..tcp] [....141.81.0.63][44818] -> [....141.81.0.10][52593] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [....141.81.0.63][44818] -> [....141.81.0.10][52593] [EthernetIP][Network][Acceptable] + new: [.....3] [ip4][..tcp] [....141.81.0.10][52594] -> [....141.81.0.43][44818] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [....141.81.0.10][52594] -> [....141.81.0.43][44818] [EthernetIP][Network][Acceptable] + new: [.....4] [ip4][..tcp] [....141.81.0.10][62717] -> [....141.81.0.23][44818] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [....141.81.0.10][62717] -> [....141.81.0.23][44818] [EthernetIP][Network][Acceptable] + idle: [.....1] [ip4][..tcp] [....141.81.0.10][50275] -> [....141.81.0.83][44818] [EthernetIP][Network][Acceptable] + idle: [.....4] [ip4][..tcp] [....141.81.0.10][62717] -> [....141.81.0.23][44818] [EthernetIP][Network][Acceptable] + idle: [.....2] [ip4][..tcp] [....141.81.0.63][44818] -> [....141.81.0.10][52593] [EthernetIP][Network][Acceptable] + idle: [.....3] [ip4][..tcp] [....141.81.0.10][52594] -> [....141.81.0.43][44818] [EthernetIP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/exe_download.pcap.out b/test/results/flow-info/exe_download.pcap.out new file mode 100644 index 000000000..84fa06cfd --- /dev/null +++ b/test/results/flow-info/exe_download.pcap.out @@ -0,0 +1,18 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....10.9.25.101][49165] -> [..144.91.69.195][...80] + detected: [.....1] [ip4][..tcp] [....10.9.25.101][49165] -> [..144.91.69.195][...80] [HTTP][Web][Acceptable] + RISK: HTTP Suspicious User-Agent, HTTP Numeric IP Address + detection-update: [.....1] [ip4][..tcp] [....10.9.25.101][49165] -> [..144.91.69.195][...80] [HTTP][Download][Acceptable] + RISK: Binary App Transfer, HTTP Suspicious User-Agent, HTTP Numeric IP Address + analyse: [.....1] [ip4][..tcp] [....10.9.25.101][49165] -> [..144.91.69.195][...80] [HTTP][Download][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.320| 0.062| 0.115] + [IAT(c->s)...: 0.000| 0.320| 0.096| 0.123][IAT(s->c)...: 0.000| 0.319| 0.046| 0.107] + [PKTLEN(c->s): 54.000| 207.000| 69.000| 43.800][PKTLEN(s->c): 54.000|1514.000|1287.300| 411.600] + [BINS(c->s)..: 10,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,2,0,0,8,0,0,7,0,0] + end: [.....1] [ip4][..tcp] [....10.9.25.101][49165] -> [..144.91.69.195][...80] [HTTP][Download][Acceptable] + RISK: Binary App Transfer, HTTP Suspicious User-Agent, HTTP Numeric IP Address + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/exe_download_as_png.pcap.out b/test/results/flow-info/exe_download_as_png.pcap.out new file mode 100644 index 000000000..827a01790 --- /dev/null +++ b/test/results/flow-info/exe_download_as_png.pcap.out @@ -0,0 +1,18 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....10.9.25.101][49197] -> [..185.98.87.185][...80] + detected: [.....1] [ip4][..tcp] [....10.9.25.101][49197] -> [..185.98.87.185][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + detection-update: [.....1] [ip4][..tcp] [....10.9.25.101][49197] -> [..185.98.87.185][...80] [HTTP][Web][Acceptable] + RISK: Binary App Transfer, HTTP Numeric IP Address + analyse: [.....1] [ip4][..tcp] [....10.9.25.101][49197] -> [..185.98.87.185][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.613| 0.094| 0.193] + [IAT(c->s)...: 0.000| 0.613| 0.144| 0.225][IAT(s->c)...: 0.000| 0.613| 0.070| 0.170] + [PKTLEN(c->s): 54.000| 203.000| 68.600| 42.600][PKTLEN(s->c): 54.000|1514.000|1288.300| 400.900] + [BINS(c->s)..: 10,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,17,0,0,1,0,0] + end: [.....1] [ip4][..tcp] [....10.9.25.101][49197] -> [..185.98.87.185][...80] [HTTP][Web][Acceptable] + RISK: Binary App Transfer, HTTP Numeric IP Address + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/facebook.pcap.out b/test/results/flow-info/facebook.pcap.out new file mode 100644 index 000000000..2720141ad --- /dev/null +++ b/test/results/flow-info/facebook.pcap.out @@ -0,0 +1,20 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.43.18][52066] -> [..66.220.156.68][..443] + detected: [.....1] [ip4][..tcp] [..192.168.43.18][52066] -> [..66.220.156.68][..443] [TLS.Facebook][SocialNetwork][Fun] + detection-update: [.....1] [ip4][..tcp] [..192.168.43.18][52066] -> [..66.220.156.68][..443] [TLS.Facebook][SocialNetwork][Fun] + detection-update: [.....1] [ip4][..tcp] [..192.168.43.18][52066] -> [..66.220.156.68][..443] [TLS.Facebook][SocialNetwork][Fun] + new: [.....2] [ip4][..tcp] [..192.168.43.18][44614] -> [....31.13.86.36][..443] + detected: [.....2] [ip4][..tcp] [..192.168.43.18][44614] -> [....31.13.86.36][..443] [TLS.Facebook][SocialNetwork][Fun] + detection-update: [.....2] [ip4][..tcp] [..192.168.43.18][44614] -> [....31.13.86.36][..443] [TLS.Facebook][SocialNetwork][Fun] + analyse: [.....2] [ip4][..tcp] [..192.168.43.18][44614] -> [....31.13.86.36][..443] [TLS.Facebook][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.155| 0.037| 0.058] + [IAT(c->s)...: 0.000| 0.155| 0.044| 0.061][IAT(s->c)...: 0.000| 0.155| 0.032| 0.055] + [PKTLEN(c->s): 66.000| 583.000| 137.400| 157.900][PKTLEN(s->c): 66.000|1454.000| 904.800| 625.900] + [BINS(c->s)..: 10,2,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,2,1,0,1,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0,0,0] + idle: [.....1] [ip4][..tcp] [..192.168.43.18][52066] -> [..66.220.156.68][..443] + idle: [.....2] [ip4][..tcp] [..192.168.43.18][44614] -> [....31.13.86.36][..443] [TLS.Facebook][SocialNetwork][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/fastcgi.pcap.out b/test/results/flow-info/fastcgi.pcap.out new file mode 100644 index 000000000..97b96369c --- /dev/null +++ b/test/results/flow-info/fastcgi.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.......10.0.0.9][38254] -> [......10.0.0.11][.9000] + detected: [.....1] [ip4][..tcp] [.......10.0.0.9][38254] -> [......10.0.0.11][.9000] [FastCGI][Network][Safe] + analyse: [.....1] [ip4][..tcp] [.......10.0.0.9][38254] -> [......10.0.0.11][.9000] [FastCGI][Network][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.020| 0.130| 0.496] + [IAT(c->s)...: 0.000| 2.020| 0.135| 0.504][IAT(s->c)...: 0.000| 2.020| 0.126| 0.489] + [PKTLEN(c->s): 66.000|1121.000| 134.900| 254.600][PKTLEN(s->c): 66.000|1514.000| 971.500| 700.400] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0] + end: [.....1] [ip4][..tcp] [.......10.0.0.9][38254] -> [......10.0.0.11][.9000] [FastCGI][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/firefox.pcap.out b/test/results/flow-info/firefox.pcap.out new file mode 100644 index 000000000..2595a52ba --- /dev/null +++ b/test/results/flow-info/firefox.pcap.out @@ -0,0 +1,74 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.178][51577] -> [...146.48.58.18][..443] + detected: [.....1] [ip4][..tcp] [..192.168.1.178][51577] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.178][51577] -> [...146.48.58.18][..443] [TLS][Web][Safe] + new: [.....2] [ip4][..tcp] [..192.168.1.178][51583] -> [...146.48.58.18][..443] + analyse: [.....1] [ip4][..tcp] [..192.168.1.178][51577] -> [...146.48.58.18][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.577| 0.067| 0.148] + [IAT(c->s)...: 0.000| 0.577| 0.079| 0.157][IAT(s->c)...: 0.000| 0.575| 0.058| 0.141] + [PKTLEN(c->s): 66.000| 583.000| 163.100| 174.000][PKTLEN(s->c): 66.000|1506.000| 938.200| 652.600] + [BINS(c->s)..: 10,0,1,0,0,0,0,0,0,0,0,1,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,9,0,0] + new: [.....3] [ip4][..tcp] [..192.168.1.178][51588] -> [...146.48.58.18][..443] + detected: [.....2] [ip4][..tcp] [..192.168.1.178][51583] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detected: [.....3] [ip4][..tcp] [..192.168.1.178][51588] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....2] [ip4][..tcp] [..192.168.1.178][51583] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....3] [ip4][..tcp] [..192.168.1.178][51588] -> [...146.48.58.18][..443] [TLS][Web][Safe] + new: [.....4] [ip4][..tcp] [..192.168.1.178][51599] -> [...146.48.58.18][..443] + new: [.....5] [ip4][..tcp] [..192.168.1.178][51600] -> [...146.48.58.18][..443] + new: [.....6] [ip4][..tcp] [..192.168.1.178][51601] -> [...146.48.58.18][..443] + analyse: [.....2] [ip4][..tcp] [..192.168.1.178][51583] -> [...146.48.58.18][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.231| 0.023| 0.053] + [IAT(c->s)...: 0.000| 0.204| 0.030| 0.054][IAT(s->c)...: 0.000| 0.231| 0.019| 0.051] + [PKTLEN(c->s): 66.000| 746.000| 181.600| 208.100][PKTLEN(s->c): 66.000|1506.000| 981.100| 649.300] + [BINS(c->s)..: 9,0,1,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0] + detected: [.....5] [ip4][..tcp] [..192.168.1.178][51600] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detected: [.....4] [ip4][..tcp] [..192.168.1.178][51599] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detected: [.....6] [ip4][..tcp] [..192.168.1.178][51601] -> [...146.48.58.18][..443] [TLS][Web][Safe] + analyse: [.....3] [ip4][..tcp] [..192.168.1.178][51588] -> [...146.48.58.18][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.221| 0.023| 0.050] + [IAT(c->s)...: 0.000| 0.196| 0.028| 0.050][IAT(s->c)...: 0.000| 0.221| 0.020| 0.051] + [PKTLEN(c->s): 66.000| 746.000| 173.800| 203.200][PKTLEN(s->c): 66.000|1506.000| 972.200| 662.900] + [BINS(c->s)..: 10,0,1,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,10,0,0] + detection-update: [.....3] [ip4][..tcp] [..192.168.1.178][51588] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....5] [ip4][..tcp] [..192.168.1.178][51600] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....4] [ip4][..tcp] [..192.168.1.178][51599] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....6] [ip4][..tcp] [..192.168.1.178][51601] -> [...146.48.58.18][..443] [TLS][Web][Safe] + analyse: [.....5] [ip4][..tcp] [..192.168.1.178][51600] -> [...146.48.58.18][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.030| 0.007| 0.010] + [IAT(c->s)...: 0.000| 0.028| 0.008| 0.010][IAT(s->c)...: 0.000| 0.030| 0.007| 0.011] + [PKTLEN(c->s): 66.000| 746.000| 142.100| 186.000][PKTLEN(s->c): 66.000|1506.000|1031.400| 647.500] + [BINS(c->s)..: 12,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0] + detection-update: [.....5] [ip4][..tcp] [..192.168.1.178][51600] -> [...146.48.58.18][..443] [TLS][Web][Safe] + analyse: [.....4] [ip4][..tcp] [..192.168.1.178][51599] -> [...146.48.58.18][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.046| 0.009| 0.012] + [IAT(c->s)...: 0.000| 0.028| 0.010| 0.011][IAT(s->c)...: 0.000| 0.046| 0.008| 0.014] + [PKTLEN(c->s): 66.000| 746.000| 142.100| 186.000][PKTLEN(s->c): 66.000|1506.000| 989.800| 638.300] + [BINS(c->s)..: 12,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0] + detection-update: [.....4] [ip4][..tcp] [..192.168.1.178][51599] -> [...146.48.58.18][..443] [TLS][Web][Safe] + analyse: [.....6] [ip4][..tcp] [..192.168.1.178][51601] -> [...146.48.58.18][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.037| 0.010| 0.013] + [IAT(c->s)...: 0.000| 0.036| 0.011| 0.012][IAT(s->c)...: 0.000| 0.037| 0.009| 0.014] + [PKTLEN(c->s): 66.000| 746.000| 167.400| 199.200][PKTLEN(s->c): 66.000|1506.000| 882.300| 669.200] + [BINS(c->s)..: 11,0,1,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,0,0] + detection-update: [.....6] [ip4][..tcp] [..192.168.1.178][51601] -> [...146.48.58.18][..443] [TLS][Web][Safe] + idle: [.....1] [ip4][..tcp] [..192.168.1.178][51577] -> [...146.48.58.18][..443] [TLS][Web][Safe] + idle: [.....2] [ip4][..tcp] [..192.168.1.178][51583] -> [...146.48.58.18][..443] [TLS][Web][Safe] + idle: [.....3] [ip4][..tcp] [..192.168.1.178][51588] -> [...146.48.58.18][..443] [TLS][Web][Safe] + idle: [.....4] [ip4][..tcp] [..192.168.1.178][51599] -> [...146.48.58.18][..443] [TLS][Web][Safe] + idle: [.....5] [ip4][..tcp] [..192.168.1.178][51600] -> [...146.48.58.18][..443] [TLS][Web][Safe] + idle: [.....6] [ip4][..tcp] [..192.168.1.178][51601] -> [...146.48.58.18][..443] [TLS][Web][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/fix.pcap.out b/test/results/flow-info/fix.pcap.out new file mode 100644 index 000000000..e41f3ca79 --- /dev/null +++ b/test/results/flow-info/fix.pcap.out @@ -0,0 +1,75 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][43594] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][43594] [FIX][RPC][Safe] + new: [.....2] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][47968] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][47968] [FIX][RPC][Safe] + new: [.....3] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][45578] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][45578] [FIX][RPC][Safe] + new: [.....4] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][47952] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][47952] [FIX][RPC][Safe] + new: [.....5] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][45584] [MIDSTREAM] + detected: [.....5] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][45584] [FIX][RPC][Safe] + new: [.....6] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][47962] [MIDSTREAM] + detected: [.....6] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][47962] [FIX][RPC][Safe] + analyse: [.....3] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][45578] [FIX][RPC][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.315| 0.065| 0.068] + [IAT(c->s)...: 0.004| 0.315| 0.067| 0.068][IAT(s->c)...: 0.000| 0.315| 0.063| 0.068] + [PKTLEN(c->s): 54.000| 511.000| 149.100| 106.800][PKTLEN(s->c): 60.000| 140.000| 65.000| 19.400] + [BINS(c->s)..: 4,6,1,1,1,2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 15,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....7] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][38652] [MIDSTREAM] + detected: [.....7] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][38652] [FIX][RPC][Safe] + new: [.....8] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][40918] [MIDSTREAM] + detected: [.....8] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][40918] [FIX][RPC][Safe] + analyse: [.....2] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][47968] [FIX][RPC][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.300| 0.091| 0.084] + [IAT(c->s)...: 0.000| 0.300| 0.094| 0.084][IAT(s->c)...: 0.000| 0.300| 0.088| 0.084] + [PKTLEN(c->s): 66.000| 135.000| 100.600| 15.800][PKTLEN(s->c): 66.000| 153.000| 71.400| 21.100] + [BINS(c->s)..: 6,8,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 15,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....9] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][38646] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][38646] [FIX][RPC][Safe] + analyse: [.....1] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][43594] [FIX][RPC][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.291| 0.178| 0.113] + [IAT(c->s)...: 0.000| 0.251| 0.184| 0.108][IAT(s->c)...: 0.000| 0.291| 0.172| 0.117] + [PKTLEN(c->s): 66.000| 254.000| 148.100| 45.100][PKTLEN(s->c): 66.000| 151.000| 71.300| 20.600] + [BINS(c->s)..: 2,4,3,5,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 15,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....10] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][39094] [MIDSTREAM] + detected: [....10] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][39094] [FIX][RPC][Safe] + new: [....11] [ip4][..tcp] [..217.192.86.32][.4000] -> [...192.168.0.20][53330] [MIDSTREAM] + detected: [....11] [ip4][..tcp] [..217.192.86.32][.4000] -> [...192.168.0.20][53330] [FIX][RPC][Safe] + new: [....12] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][40928] [MIDSTREAM] + detected: [....12] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][40928] [FIX][RPC][Safe] + analyse: [.....5] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][45584] [FIX][RPC][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 5.507| 0.699| 1.281] + [IAT(c->s)...: 0.046| 5.507| 0.721| 1.296][IAT(s->c)...: 0.000| 5.507| 0.678| 1.266] + [PKTLEN(c->s): 54.000| 93.000| 85.100| 11.800][PKTLEN(s->c): 60.000| 141.000| 70.100| 26.600] + [BINS(c->s)..: 2,14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 14,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....8] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][40918] [FIX][RPC][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.175| 1.332| 1.132] + [IAT(c->s)...: 0.022| 4.175| 1.376| 1.120][IAT(s->c)...: 0.000| 4.175| 1.290| 1.143] + [PKTLEN(c->s): 66.000| 147.000| 106.700| 19.500][PKTLEN(s->c): 66.000| 151.000| 76.600| 28.100] + [BINS(c->s)..: 2,13,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 14,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....3] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][45578] [FIX][RPC][Safe] + idle: [.....5] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][45584] [FIX][RPC][Safe] + idle: [.....8] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][40918] [FIX][RPC][Safe] + idle: [....12] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][40928] [FIX][RPC][Safe] + idle: [....11] [ip4][..tcp] [..217.192.86.32][.4000] -> [...192.168.0.20][53330] [FIX][RPC][Safe] + idle: [.....1] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][43594] [FIX][RPC][Safe] + idle: [.....4] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][47952] [FIX][RPC][Safe] + idle: [.....6] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][47962] [FIX][RPC][Safe] + idle: [.....2] [ip4][..tcp] [.....8.17.22.31][.4000] -> [...192.168.0.20][47968] [FIX][RPC][Safe] + idle: [.....9] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][38646] [FIX][RPC][Safe] + idle: [.....7] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][38652] [FIX][RPC][Safe] + idle: [....10] [ip4][..tcp] [..208.245.107.3][.4000] -> [...192.168.0.20][39094] [FIX][RPC][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/fix2.pcap.out b/test/results/flow-info/fix2.pcap.out new file mode 100644 index 000000000..b8b071d5b --- /dev/null +++ b/test/results/flow-info/fix2.pcap.out @@ -0,0 +1,24 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.101.0.2][34962] -> [.....10.102.0.2][.1024] + new: [.....2] [ip4][..tcp] [.....10.101.0.2][34963] -> [.....10.102.0.9][.1024] + detected: [.....1] [ip4][..tcp] [.....10.101.0.2][34962] -> [.....10.102.0.2][.1024] [FIX][RPC][Safe] + detected: [.....2] [ip4][..tcp] [.....10.101.0.2][34963] -> [.....10.102.0.9][.1024] [FIX][RPC][Safe] + analyse: [.....1] [ip4][..tcp] [.....10.101.0.2][34962] -> [.....10.102.0.2][.1024] [FIX][RPC][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.001| 0.000| 0.000] + [IAT(c->s)...: 0.000| 0.001| 0.000| 0.000][IAT(s->c)...: 0.000| 0.001| 0.000| 0.000] + [PKTLEN(c->s): 60.000| 160.000| 104.900| 45.000][PKTLEN(s->c): 60.000| 174.000| 107.800| 47.900] + [BINS(c->s)..: 7,0,4,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,0,3,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....2] [ip4][..tcp] [.....10.101.0.2][34963] -> [.....10.102.0.9][.1024] [FIX][RPC][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.001| 0.000| 0.000] + [IAT(c->s)...: 0.000| 0.001| 0.000| 0.000][IAT(s->c)...: 0.000| 0.001| 0.000| 0.000] + [PKTLEN(c->s): 60.000| 160.000| 111.100| 44.400][PKTLEN(s->c): 60.000| 174.000| 102.100| 46.900] + [BINS(c->s)..: 6,0,5,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 10,0,3,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....1] [ip4][..tcp] [.....10.101.0.2][34962] -> [.....10.102.0.2][.1024] [FIX][RPC][Safe] + end: [.....2] [ip4][..tcp] [.....10.101.0.2][34963] -> [.....10.102.0.9][.1024] [FIX][RPC][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/forticlient.pcap.out b/test/results/flow-info/forticlient.pcap.out new file mode 100644 index 000000000..0615cfa17 --- /dev/null +++ b/test/results/flow-info/forticlient.pcap.out @@ -0,0 +1,52 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.178][61805] -> [....82.81.46.13][10443] + detected: [.....1] [ip4][..tcp] [..192.168.1.178][61805] -> [....82.81.46.13][10443] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + detection-update: [.....1] [ip4][..tcp] [..192.168.1.178][61805] -> [....82.81.46.13][10443] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + detection-update: [.....1] [ip4][..tcp] [..192.168.1.178][61805] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + new: [.....2] [ip4][..tcp] [..192.168.1.178][61806] -> [....82.81.46.13][10443] + detected: [.....2] [ip4][..tcp] [..192.168.1.178][61806] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + detection-update: [.....2] [ip4][..tcp] [..192.168.1.178][61806] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + detection-update: [.....2] [ip4][..tcp] [..192.168.1.178][61806] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + new: [.....3] [ip4][..tcp] [..192.168.1.178][61811] -> [....82.81.46.13][10443] + detected: [.....3] [ip4][..tcp] [..192.168.1.178][61811] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + detection-update: [.....3] [ip4][..tcp] [..192.168.1.178][61811] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + detection-update: [.....3] [ip4][..tcp] [..192.168.1.178][61811] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + new: [.....4] [ip4][..tcp] [..192.168.1.178][61812] -> [....82.81.46.13][10443] + detected: [.....4] [ip4][..tcp] [..192.168.1.178][61812] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + detection-update: [.....4] [ip4][..tcp] [..192.168.1.178][61812] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + detection-update: [.....4] [ip4][..tcp] [..192.168.1.178][61812] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + new: [.....5] [ip4][..tcp] [..192.168.1.178][61820] -> [....82.81.46.13][10443] + detected: [.....5] [ip4][..tcp] [..192.168.1.178][61820] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + detection-update: [.....5] [ip4][..tcp] [..192.168.1.178][61820] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + detection-update: [.....5] [ip4][..tcp] [..192.168.1.178][61820] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + analyse: [.....5] [ip4][..tcp] [..192.168.1.178][61820] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.495| 0.071| 0.112] + [IAT(c->s)...: 0.000| 0.430| 0.061| 0.095][IAT(s->c)...: 0.000| 0.495| 0.085| 0.129] + [PKTLEN(c->s): 66.000| 596.000| 163.700| 146.600][PKTLEN(s->c): 66.000|1506.000| 418.000| 468.800] + [BINS(c->s)..: 9,4,1,0,1,0,0,0,0,3,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,5,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + end: [.....1] [ip4][..tcp] [..192.168.1.178][61805] -> [....82.81.46.13][10443] + end: [.....2] [ip4][..tcp] [..192.168.1.178][61806] -> [....82.81.46.13][10443] + end: [.....3] [ip4][..tcp] [..192.168.1.178][61811] -> [....82.81.46.13][10443] + end: [.....4] [ip4][..tcp] [..192.168.1.178][61812] -> [....82.81.46.13][10443] + idle: [.....5] [ip4][..tcp] [..192.168.1.178][61820] -> [....82.81.46.13][10443] [TLS.FortiClient][VPN][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ftp-start-tls.pcap.out b/test/results/flow-info/ftp-start-tls.pcap.out new file mode 100644 index 000000000..8dd6da2a5 --- /dev/null +++ b/test/results/flow-info/ftp-start-tls.pcap.out @@ -0,0 +1,24 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...10.238.26.36][62092] -> [...10.220.50.76][...21] + detected: [.....1] [ip4][..tcp] [...10.238.26.36][62092] -> [...10.220.50.76][...21] [FTPS][Download][Unsafe] + RISK: Unsafe Protocol + detection-update: [.....1] [ip4][..tcp] [...10.238.26.36][62092] -> [...10.220.50.76][...21] [FTPS][Download][Unsafe] + RISK: TLS (probably) Not Carrying HTTPS, Unsafe Protocol, Missing SNI TLS Extn + detection-update: [.....1] [ip4][..tcp] [...10.238.26.36][62092] -> [...10.220.50.76][...21] [FTPS][Download][Unsafe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Unsafe Protocol, Missing SNI TLS Extn + detection-update: [.....1] [ip4][..tcp] [...10.238.26.36][62092] -> [...10.220.50.76][...21] [FTPS][Download][Unsafe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Unsafe Protocol, Missing SNI TLS Extn + analyse: [.....1] [ip4][..tcp] [...10.238.26.36][62092] -> [...10.220.50.76][...21] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.040| 0.005| 0.010] + [IAT(c->s)...: 0.001| 0.035| 0.009| 0.011][IAT(s->c)...: 0.000| 0.040| 0.003| 0.009] + [PKTLEN(c->s): 60.000| 384.000| 123.700| 101.500][PKTLEN(s->c): 60.000| 566.000| 195.000| 179.000] + [BINS(c->s)..: 4,3,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,2,7,0,0,0,2,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [.....1] [ip4][..tcp] [...10.238.26.36][62092] -> [...10.220.50.76][...21] [FTPS][Download][Unsafe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Unsafe Protocol, Missing SNI TLS Extn + idle: [.....1] [ip4][..tcp] [...10.238.26.36][62092] -> [...10.220.50.76][...21] [FTPS][Download][Unsafe] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS, Unsafe Protocol, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ftp.pcap.out b/test/results/flow-info/ftp.pcap.out new file mode 100644 index 000000000..27db56659 --- /dev/null +++ b/test/results/flow-info/ftp.pcap.out @@ -0,0 +1,31 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.212][50694] -> [...90.130.70.73][...21] + detected: [.....1] [ip4][..tcp] [..192.168.1.212][50694] -> [...90.130.70.73][...21] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + analyse: [.....1] [ip4][..tcp] [..192.168.1.212][50694] -> [...90.130.70.73][...21] [FTP_CONTROL][Download][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.090| 0.019| 0.021] + [IAT(c->s)...: 0.000| 0.090| 0.017| 0.023][IAT(s->c)...: 0.000| 0.069| 0.022| 0.018] + [PKTLEN(c->s): 66.000| 96.000| 71.400| 8.000][PKTLEN(s->c): 66.000| 307.000| 104.600| 58.900] + [BINS(c->s)..: 18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,4,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....2] [ip4][..tcp] [..192.168.1.212][50695] -> [...90.130.70.73][25685] + detected: [.....2] [ip4][..tcp] [..192.168.1.212][50695] -> [...90.130.70.73][25685] [FTP_DATA][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....3] [ip4][..tcp] [..192.168.1.212][50696] -> [...90.130.70.73][24523] + analyse: [.....3] [ip4][..tcp] [..192.168.1.212][50696] -> [...90.130.70.73][24523] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.030| 0.006| 0.011] + [IAT(c->s)...: 0.000| 0.030| 0.008| 0.012][IAT(s->c)...: 0.000| 0.030| 0.005| 0.010] + [PKTLEN(c->s): 66.000| 78.000| 67.800| 4.300][PKTLEN(s->c): 66.000|1506.000|1354.800| 440.700] + [BINS(c->s)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,0,0] + not-detected: [.....3] [ip4][..tcp] [..192.168.1.212][50696] -> [...90.130.70.73][24523] [Unknown][Unrated] + end: [.....3] [ip4][..tcp] [..192.168.1.212][50696] -> [...90.130.70.73][24523] [Unknown][Unrated] + end: [.....1] [ip4][..tcp] [..192.168.1.212][50694] -> [...90.130.70.73][...21] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + end: [.....2] [ip4][..tcp] [..192.168.1.212][50695] -> [...90.130.70.73][25685] [FTP_DATA][Download][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ftp_failed.pcap.out b/test/results/flow-info/ftp_failed.pcap.out new file mode 100644 index 000000000..d72b3a91d --- /dev/null +++ b/test/results/flow-info/ftp_failed.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..tcp] [.............2a00:d40:1:3:192:12:193:11][44724] -> [.......................2a00:800:1010::1][...21] + detected: [.....1] [ip6][..tcp] [.............2a00:d40:1:3:192:12:193:11][44724] -> [.......................2a00:800:1010::1][...21] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + end: [.....1] [ip6][..tcp] [.............2a00:d40:1:3:192:12:193:11][44724] -> [.......................2a00:800:1010::1][...21] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/fuzz-2006-06-26-2594.pcap.out b/test/results/flow-info/fuzz-2006-06-26-2594.pcap.out new file mode 100644 index 000000000..d0919265e --- /dev/null +++ b/test/results/flow-info/fuzz-2006-06-26-2594.pcap.out @@ -0,0 +1,1756 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] + detected: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + new: [.....2] [ip4][..udp] [....217.168.1.2][..137] -> [..192.168.1.255][..137] + new: [.....3] [ip4][..udp] [....192.168.1.2][.2712] -> [....192.168.1.1][...53] + detected: [.....3] [ip4][..udp] [....192.168.1.2][.2712] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [.....4] [ip4][..udp] [....192.168.1.2][.2712] -> [...192.37.115.0][...53] + detected: [.....4] [ip4][..udp] [....192.168.1.2][.2712] -> [...192.37.115.0][...53] [DNS][Network][Acceptable] + new: [.....5] [ip4][..udp] [....192.168.1.2][.2712] -> [....192.168.1.1][49973] + new: [.....6] [ip4][..udp] [....192.168.1.3][...53] -> [....192.168.1.2][.2712] + detected: [.....6] [ip4][..udp] [....192.168.1.3][...53] -> [....192.168.1.2][.2712] [DNS][Network][Acceptable] + new: [.....7] [ip4][..udp] [....192.168.1.2][.2713] -> [....192.168.1.1][...53] + detected: [.....7] [ip4][..udp] [....192.168.1.2][.2713] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [.....8] [ip4][..udp] [..192.168.1.110][.2713] -> [....192.168.1.1][...53] + detected: [.....8] [ip4][..udp] [..192.168.1.110][.2713] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + ERROR-EVENT: Unknown packet type + new: [.....9] [ip4][..udp] [....192.168.1.2][.2597] -> [....192.168.1.1][29440] + detection-update: [.....7] [ip4][..udp] [....192.168.1.2][.2713] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....10] [ip4][..udp] [....192.168.1.2][.2714] -> [....192.168.1.1][...53] + detected: [....10] [ip4][..udp] [....192.168.1.2][.2714] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....10] [ip4][..udp] [....192.168.1.2][.2714] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....11] [ip4][..udp] [...192.168.1.52][.5060] -> [..212.242.33.35][.5060] + detected: [....11] [ip4][..udp] [...192.168.1.52][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + new: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] + detected: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + new: [....13] [ip4][..udp] [....192.168.1.2][.2715] -> [....192.168.1.1][...53] + detected: [....13] [ip4][..udp] [....192.168.1.2][.2715] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....13] [ip4][..udp] [....192.168.1.2][.2715] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + detection-update: [....13] [ip4][..udp] [....192.168.1.2][.2715] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....14] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] + detected: [....14] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....15] [ip4][..udp] [....192.168.1.1][.9587] -> [....192.168.1.2][..156] + ERROR-EVENT: Unknown packet type + new: [....16] [ip4][..udp] [..208.242.33.35][.5060] -> [....192.168.1.2][.5060] + detected: [....16] [ip4][..udp] [..208.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + new: [....17] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.251][..138] + detected: [....17] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.251][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [.....2] [ip4][..udp] [....217.168.1.2][..137] -> [..192.168.1.255][..137] + new: [....18] [ip4][..tcp] [....192.168.1.2][.2717] -> [..147.137.21.94][..445] + new: [....19] [ip4][..tcp] [....192.168.1.2][.2718] -> [..147.137.21.94][..139] + new: [....20] [ip4][..tcp] [...192.168.1.71][.2718] -> [.147.137.21.122][..139] + update: [.....4] [ip4][..udp] [....192.168.1.2][.2712] -> [...192.37.115.0][...53] + update: [....11] [ip4][..udp] [...192.168.1.52][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [.....3] [ip4][..udp] [....192.168.1.2][.2712] -> [....192.168.1.1][...53] + update: [.....6] [ip4][..udp] [....192.168.1.3][...53] -> [....192.168.1.2][.2712] [DNS][Network][Acceptable] + update: [.....7] [ip4][..udp] [....192.168.1.2][.2713] -> [....192.168.1.1][...53] + update: [.....8] [ip4][..udp] [..192.168.1.110][.2713] -> [....192.168.1.1][...53] + update: [....10] [ip4][..udp] [....192.168.1.2][.2714] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....13] [ip4][..udp] [....192.168.1.2][.2715] -> [....192.168.1.1][...53] + update: [.....9] [ip4][..udp] [....192.168.1.2][.2597] -> [....192.168.1.1][29440] + update: [.....5] [ip4][..udp] [....192.168.1.2][.2712] -> [....192.168.1.1][49973] + new: [....21] [ip4][..udp] [....192.114.1.2][.2719] -> [....192.168.1.1][...53] + detected: [....21] [ip4][..udp] [....192.114.1.2][.2719] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....22] [ip4][..udp] [....192.168.1.2][.2719] -> [....192.168.1.1][...53] + detected: [....22] [ip4][..udp] [....192.168.1.2][.2719] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....22] [ip4][..udp] [....192.168.1.2][.2719] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [....23] [ip4][..tcp] [....192.168.1.2][.2720] -> [..147.234.1.253][...21] + ERROR-EVENT: Unknown L3 protocol + new: [....24] [ip4][..tcp] [..147.234.1.253][...21] -> [....192.169.1.2][.2720] [MIDSTREAM] + new: [....25] [ip4][..tcp] [....192.168.1.2][.2679] -> [..147.234.1.253][...21] [MIDSTREAM] + ERROR-EVENT: Unknown L3 protocol + new: [....26] [ip4][..tcp] [..147.234.1.253][...21] -> [......192.2.1.2][.2720] [MIDSTREAM] + new: [....27] [ip4][..tcp] [..147.234.1.253][...21] -> [...192.168.1.66][.2720] [MIDSTREAM] + new: [....28] [ip4][..tcp] [..147.234.1.253][..120] -> [....192.168.1.2][.2720] [MIDSTREAM] + new: [....29] [ip4][..tcp] [..147.234.1.170][43690] -> [170.170.170.170][43690] + new: [....30] [ip4][..tcp] [..147.234.1.249][.2069] -> [....192.168.1.2][.2720] [MIDSTREAM] + new: [....31] [ip4][..tcp] [..147.234.1.253][...21] -> [....192.168.1.2][.2208] [MIDSTREAM] + new: [....32] [ip4][..tcp] [..147.234.1.253][...21] -> [....192.168.1.2][.2732] [MIDSTREAM] + new: [....33] [ip4][..tcp] [..147.234.1.253][.1045] -> [....192.168.1.2][.2720] [MIDSTREAM] + new: [....34] [ip4][..tcp] [..147.234.1.253][...21] -> [...192.168.65.2][.2720] [MIDSTREAM] + ERROR-EVENT: Unknown L3 protocol + new: [....35] [ip4][..tcp] [..147.234.1.253][...21] -> [.....84.168.1.2][.2720] [MIDSTREAM] + new: [....36] [ip4][..tcp] [....192.112.1.2][.2720] -> [..147.234.1.253][...21] [MIDSTREAM] + new: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + new: [....38] [ip4][..tcp] [....192.168.1.2][.2720] -> [..147.117.1.253][...21] [MIDSTREAM] + new: [....39] [ip4][..tcp] [....192.168.1.6][.2721] -> [..147.234.1.253][58999] + ERROR-EVENT: Unknown packet type + new: [....40] [ip4][..tcp] [...37.115.0.253][58999] -> [....192.168.1.2][.2721] + ERROR-EVENT: TCP packet smaller than expected + new: [....41] [ip4][..tcp] [....192.168.1.2][.2721] -> [..147.234.1.253][58999] [MIDSTREAM] + new: [....42] [ip4][..tcp] [..147.234.1.253][58999] -> [....192.232.1.2][.2721] [MIDSTREAM] + new: [....43] [ip4][..tcp] [.....37.115.0.2][.2639] -> [..147.234.1.253][...21] [MIDSTREAM] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + update: [....16] [ip4][..udp] [..208.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [....14] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] + update: [....15] [ip4][..udp] [....192.168.1.1][.9587] -> [....192.168.1.2][..156] + new: [....44] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.136.1.1][...53] + detected: [....44] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.136.1.1][...53] [DNS][Network][Acceptable] + new: [....45] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.168.1.1][...53] + detected: [....45] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + update: [.....4] [ip4][..udp] [....192.168.1.2][.2712] -> [...192.37.115.0][...53] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....17] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.251][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [.....2] [ip4][..udp] [....217.168.1.2][..137] -> [..192.168.1.255][..137] + update: [....11] [ip4][..udp] [...192.168.1.52][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [.....3] [ip4][..udp] [....192.168.1.2][.2712] -> [....192.168.1.1][...53] + update: [.....6] [ip4][..udp] [....192.168.1.3][...53] -> [....192.168.1.2][.2712] [DNS][Network][Acceptable] + update: [.....7] [ip4][..udp] [....192.168.1.2][.2713] -> [....192.168.1.1][...53] + update: [.....8] [ip4][..udp] [..192.168.1.110][.2713] -> [....192.168.1.1][...53] + update: [....10] [ip4][..udp] [....192.168.1.2][.2714] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....13] [ip4][..udp] [....192.168.1.2][.2715] -> [....192.168.1.1][...53] + update: [.....9] [ip4][..udp] [....192.168.1.2][.2597] -> [....192.168.1.1][29440] + update: [.....5] [ip4][..udp] [....192.168.1.2][.2712] -> [....192.168.1.1][49973] + detection-update: [....45] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....46] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2723] + detected: [....46] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2723] [DNS][Network][Acceptable] + new: [....47] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][.9587] + new: [....48] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][...53] + detected: [....48] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....48] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [....49] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][25481] + new: [....50] [ip4][..udp] [....192.168.1.2][.2724] -> [...192.168.17.1][...53] + detected: [....50] [ip4][..udp] [....192.168.1.2][.2724] -> [...192.168.17.1][...53] [DNS][Network][Acceptable] + update: [....16] [ip4][..udp] [..208.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [....14] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] + update: [....22] [ip4][..udp] [....192.168.1.2][.2719] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [....21] [ip4][..udp] [....192.114.1.2][.2719] -> [....192.168.1.1][...53] + update: [....15] [ip4][..udp] [....192.168.1.1][.9587] -> [....192.168.1.2][..156] + new: [....51] [ip4][..udp] [....192.168.1.2][.2725] -> [....192.168.1.1][...53] + detected: [....51] [ip4][..udp] [....192.168.1.2][.2725] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....51] [ip4][..udp] [....192.168.1.2][.2725] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....52] [ip4][..udp] [...192.168.1.46][...53] -> [....192.168.1.2][.2726] + detected: [....52] [ip4][..udp] [...192.168.1.46][...53] -> [....192.168.1.2][.2726] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + idle: [.....4] [ip4][..udp] [....192.168.1.2][.2712] -> [...192.37.115.0][...53] + guessed: [.....2] [ip4][..udp] [....217.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [.....2] [ip4][..udp] [....217.168.1.2][..137] -> [..192.168.1.255][..137] + idle: [.....3] [ip4][..udp] [....192.168.1.2][.2712] -> [....192.168.1.1][...53] + update: [....47] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][.9587] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....17] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.251][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [....11] [ip4][..udp] [...192.168.1.52][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [.....6] [ip4][..udp] [....192.168.1.3][...53] -> [....192.168.1.2][.2712] [DNS][Network][Acceptable] + update: [.....7] [ip4][..udp] [....192.168.1.2][.2713] -> [....192.168.1.1][...53] + update: [.....8] [ip4][..udp] [..192.168.1.110][.2713] -> [....192.168.1.1][...53] + update: [....10] [ip4][..udp] [....192.168.1.2][.2714] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....13] [ip4][..udp] [....192.168.1.2][.2715] -> [....192.168.1.1][...53] + update: [....44] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.136.1.1][...53] + update: [....45] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.168.1.1][...53] + update: [....46] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2723] [DNS][Network][Acceptable] + update: [....48] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][...53] + update: [....50] [ip4][..udp] [....192.168.1.2][.2724] -> [...192.168.17.1][...53] + update: [....49] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][25481] + update: [.....9] [ip4][..udp] [....192.168.1.2][.2597] -> [....192.168.1.1][29440] + update: [.....5] [ip4][..udp] [....192.168.1.2][.2712] -> [....192.168.1.1][49973] + idle: [....17] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.251][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [....16] [ip4][..udp] [..208.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + idle: [....11] [ip4][..udp] [...192.168.1.52][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + idle: [.....6] [ip4][..udp] [....192.168.1.3][...53] -> [....192.168.1.2][.2712] [DNS][Network][Acceptable] + idle: [.....8] [ip4][..udp] [..192.168.1.110][.2713] -> [....192.168.1.1][...53] + idle: [.....7] [ip4][..udp] [....192.168.1.2][.2713] -> [....192.168.1.1][...53] + idle: [....10] [ip4][..udp] [....192.168.1.2][.2714] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....13] [ip4][..udp] [....192.168.1.2][.2715] -> [....192.168.1.1][...53] + idle: [....14] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] + not-detected: [....41] [ip4][..tcp] [....192.168.1.2][.2721] -> [..147.234.1.253][58999] [Unknown][Unrated] + end: [....41] [ip4][..tcp] [....192.168.1.2][.2721] -> [..147.234.1.253][58999] + guessed: [....23] [ip4][..tcp] [....192.168.1.2][.2720] -> [..147.234.1.253][...21] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + end: [....23] [ip4][..tcp] [....192.168.1.2][.2720] -> [..147.234.1.253][...21] + not-detected: [.....9] [ip4][..udp] [....192.168.1.2][.2597] -> [....192.168.1.1][29440] [Unknown][Unrated] + idle: [.....9] [ip4][..udp] [....192.168.1.2][.2597] -> [....192.168.1.1][29440] + not-detected: [.....5] [ip4][..udp] [....192.168.1.2][.2712] -> [....192.168.1.1][49973] [Unknown][Unrated] + idle: [.....5] [ip4][..udp] [....192.168.1.2][.2712] -> [....192.168.1.1][49973] + not-detected: [....15] [ip4][..udp] [....192.168.1.1][.9587] -> [....192.168.1.2][..156] [Unknown][Unrated] + idle: [....15] [ip4][..udp] [....192.168.1.1][.9587] -> [....192.168.1.2][..156] + update: [....47] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][.9587] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [....22] [ip4][..udp] [....192.168.1.2][.2719] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [....44] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.136.1.1][...53] + update: [....45] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.168.1.1][...53] + update: [....46] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2723] [DNS][Network][Acceptable] + update: [....48] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][...53] + update: [....50] [ip4][..udp] [....192.168.1.2][.2724] -> [...192.168.17.1][...53] + update: [....51] [ip4][..udp] [....192.168.1.2][.2725] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....52] [ip4][..udp] [...192.168.1.46][...53] -> [....192.168.1.2][.2726] [DNS][Network][Acceptable] + update: [....49] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][25481] + update: [....21] [ip4][..udp] [....192.114.1.2][.2719] -> [....192.168.1.1][...53] + new: [....53] [ip4][..udp] [..192.168.1.202][..137] -> [..192.168.1.255][..137] + detected: [....53] [ip4][..udp] [..192.168.1.202][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....54] [ip4][..udp] [....192.168.1.2][.2732] -> [....192.168.1.1][...53] + detected: [....54] [ip4][..udp] [....192.168.1.2][.2732] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + idle: [....22] [ip4][..udp] [....192.168.1.2][.2719] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [....21] [ip4][..udp] [....192.114.1.2][.2719] -> [....192.168.1.1][...53] + update: [....47] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][.9587] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [....44] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.136.1.1][...53] + update: [....45] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.168.1.1][...53] + update: [....46] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2723] [DNS][Network][Acceptable] + update: [....48] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][...53] + update: [....50] [ip4][..udp] [....192.168.1.2][.2724] -> [...192.168.17.1][...53] + update: [....51] [ip4][..udp] [....192.168.1.2][.2725] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....52] [ip4][..udp] [...192.168.1.46][...53] -> [....192.168.1.2][.2726] [DNS][Network][Acceptable] + update: [....49] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][25481] + update: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + new: [....55] [ip4][..udp] [....192.168.1.2][43690] -> [192.170.170.170][43690] + new: [....56] [ip4][..udp] [....192.168.1.2][.2733] -> [..192.168.115.1][...53] + detected: [....56] [ip4][..udp] [....192.168.1.2][.2733] -> [..192.168.115.1][...53] [DNS][Network][Acceptable] + new: [....57] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] + detected: [....57] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] [DNS][Network][Acceptable] + new: [....58] [ip4][..120] [....192.168.1.2] -> [..212.242.33.35] + new: [....59] [ip4][..udp] [....192.168.1.2][.2734] -> [....192.168.1.1][...53] + detected: [....59] [ip4][..udp] [....192.168.1.2][.2734] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....60] [ip4][..udp] [....172.168.1.2][.2734] -> [....192.168.1.1][...53] + detected: [....60] [ip4][..udp] [....172.168.1.2][.2734] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....44] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.136.1.1][...53] + detection-update: [....59] [ip4][..udp] [....192.168.1.2][.2734] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....59] [ip4][..udp] [....192.168.1.2][.2734] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....61] [ip4][..udp] [....200.168.1.2][.2735] -> [....192.168.1.1][...53] + detected: [....61] [ip4][..udp] [....200.168.1.2][.2735] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....62] [ip4][..udp] [....253.168.1.1][...53] -> [....192.168.1.2][.2735] + detected: [....62] [ip4][..udp] [....253.168.1.1][...53] -> [....192.168.1.2][.2735] [DNS][Network][Acceptable] + not-detected: [....47] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][.9587] [Unknown][Unrated] + idle: [....47] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][.9587] + idle: [....45] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.168.1.1][...53] + idle: [....46] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2723] [DNS][Network][Acceptable] + guessed: [....49] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][25481] [NetBIOS][System][Acceptable] + idle: [....49] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][25481] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....63] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..169] + idle: [....50] [ip4][..udp] [....192.168.1.2][.2724] -> [...192.168.17.1][...53] + idle: [....48] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][...53] + update: [....53] [ip4][..udp] [..192.168.1.202][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....54] [ip4][..udp] [....192.168.1.2][.2732] -> [....192.168.1.1][...53] + new: [....64] [ip4][..udp] [....192.168.1.2][.2736] -> [....192.168.1.1][...53] + detected: [....64] [ip4][..udp] [....192.168.1.2][.2736] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....65] [ip4][..udp] [....192.168.1.2][.2684] -> [....192.168.1.1][...53] + detected: [....65] [ip4][..udp] [....192.168.1.2][.2684] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + new: [....66] [ip4][..udp] [....192.168.1.2][.2736] -> [...192.168.1.17][...53] + detected: [....66] [ip4][..udp] [....192.168.1.2][.2736] -> [...192.168.1.17][...53] [DNS][Network][Acceptable] + detection-update: [....64] [ip4][..udp] [....192.168.1.2][.2736] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [....51] [ip4][..udp] [....192.168.1.2][.2725] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....52] [ip4][..udp] [...192.168.1.46][...53] -> [....192.168.1.2][.2726] [DNS][Network][Acceptable] + update: [....55] [ip4][..udp] [....192.168.1.2][43690] -> [192.170.170.170][43690] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....53] [ip4][..udp] [..192.168.1.202][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....63] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..169] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [....60] [ip4][..udp] [....172.168.1.2][.2734] -> [....192.168.1.1][...53] + update: [....54] [ip4][..udp] [....192.168.1.2][.2732] -> [....192.168.1.1][...53] + update: [....56] [ip4][..udp] [....192.168.1.2][.2733] -> [..192.168.115.1][...53] + update: [....57] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] [DNS][Network][Acceptable] + update: [....59] [ip4][..udp] [....192.168.1.2][.2734] -> [....192.168.1.1][...53] + update: [....61] [ip4][..udp] [....200.168.1.2][.2735] -> [....192.168.1.1][...53] + update: [....62] [ip4][..udp] [....253.168.1.1][...53] -> [....192.168.1.2][.2735] [DNS][Network][Acceptable] + new: [....67] [ip4][..udp] [....192.168.1.2][.2737] -> [....192.168.1.1][...53] + detected: [....67] [ip4][..udp] [....192.168.1.2][.2737] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....67] [ip4][..udp] [....192.168.1.2][.2737] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....68] [ip4][..udp] [....192.168.1.2][20932] -> [..212.242.33.35][.5060] + detected: [....68] [ip4][..udp] [....192.168.1.2][20932] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + new: [....69] [ip4][..udp] [....192.168.1.2][.2738] -> [...192.168.84.1][...53] + detected: [....69] [ip4][..udp] [....192.168.1.2][.2738] -> [...192.168.84.1][...53] [DNS][Network][Acceptable] + new: [....70] [ip4][..udp] [....192.168.1.2][.2738] -> [....192.168.1.1][...53] + detected: [....70] [ip4][..udp] [....192.168.1.2][.2738] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....71] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] + detected: [....71] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....72] [ip4][..udp] [....192.168.1.2][.2739] -> [....192.168.1.1][...53] + detected: [....72] [ip4][..udp] [....192.168.1.2][.2739] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....72] [ip4][..udp] [....192.168.1.2][.2739] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....73] [ip4][..udp] [....192.168.1.2][.2740] -> [....192.168.1.1][...53] + detected: [....73] [ip4][..udp] [....192.168.1.2][.2740] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....73] [ip4][..udp] [....192.168.1.2][.2740] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + detection-update: [....73] [ip4][..udp] [....192.168.1.2][.2740] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [....74] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][.8329] + new: [....75] [ip4][..udp] [....192.168.1.2][.2741] -> [....192.168.1.1][...53] + detected: [....75] [ip4][..udp] [....192.168.1.2][.2741] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....76] [ip4][..udp] [..192.168.130.1][...53] -> [....192.168.1.2][.2741] + detected: [....76] [ip4][..udp] [..192.168.130.1][...53] -> [....192.168.1.2][.2741] [DNS][Network][Acceptable] + update: [....65] [ip4][..udp] [....192.168.1.2][.2684] -> [....192.168.1.1][...53] + update: [....64] [ip4][..udp] [....192.168.1.2][.2736] -> [....192.168.1.1][...53] + update: [....66] [ip4][..udp] [....192.168.1.2][.2736] -> [...192.168.1.17][...53] + new: [....77] [ip4][..udp] [....192.168.1.2][.2742] -> [....192.168.1.1][...53] + detected: [....77] [ip4][..udp] [....192.168.1.2][.2742] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....78] [ip4][..udp] [....192.168.1.2][.2730] -> [....192.168.1.1][43690] + detection-update: [....77] [ip4][..udp] [....192.168.1.2][.2742] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....77] [ip4][..udp] [....192.168.1.2][.2742] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....55] [ip4][..udp] [....192.168.1.2][43690] -> [192.170.170.170][43690] + update: [....68] [ip4][..udp] [....192.168.1.2][20932] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....53] [ip4][..udp] [..192.168.1.202][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....63] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..169] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [....60] [ip4][..udp] [....172.168.1.2][.2734] -> [....192.168.1.1][...53] + update: [....71] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] + update: [....54] [ip4][..udp] [....192.168.1.2][.2732] -> [....192.168.1.1][...53] + update: [....56] [ip4][..udp] [....192.168.1.2][.2733] -> [..192.168.115.1][...53] + update: [....57] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] [DNS][Network][Acceptable] + update: [....59] [ip4][..udp] [....192.168.1.2][.2734] -> [....192.168.1.1][...53] + update: [....67] [ip4][..udp] [....192.168.1.2][.2737] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....69] [ip4][..udp] [....192.168.1.2][.2738] -> [...192.168.84.1][...53] + update: [....70] [ip4][..udp] [....192.168.1.2][.2738] -> [....192.168.1.1][...53] + update: [....61] [ip4][..udp] [....200.168.1.2][.2735] -> [....192.168.1.1][...53] + update: [....62] [ip4][..udp] [....253.168.1.1][...53] -> [....192.168.1.2][.2735] [DNS][Network][Acceptable] + update: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + ERROR-EVENT: Unknown packet type + new: [....79] [ip4][..udp] [....192.168.1.2][.2743] -> [....192.168.1.1][...53] + detected: [....79] [ip4][..udp] [....192.168.1.2][.2743] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....79] [ip4][..udp] [....192.168.1.2][.2743] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....58] [ip4][..120] [....192.168.1.2] -> [..212.242.33.35] + update: [....72] [ip4][..udp] [....192.168.1.2][.2739] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....73] [ip4][..udp] [....192.168.1.2][.2740] -> [....192.168.1.1][...53] + new: [....80] [ip4][..udp] [....192.168.1.2][.2744] -> [....192.168.1.1][...53] + detected: [....80] [ip4][..udp] [....192.168.1.2][.2744] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....81] [ip4][..udp] [....192.168.1.2][...88] -> [..192.168.1.255][..137] + detected: [....81] [ip4][..udp] [....192.168.1.2][...88] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + not-detected: [....55] [ip4][..udp] [....192.168.1.2][43690] -> [192.170.170.170][43690] [Unknown][Unrated] + idle: [....55] [ip4][..udp] [....192.168.1.2][43690] -> [192.170.170.170][43690] + idle: [....53] [ip4][..udp] [..192.168.1.202][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [....54] [ip4][..udp] [....192.168.1.2][.2732] -> [....192.168.1.1][...53] + update: [....74] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][.8329] + update: [....65] [ip4][..udp] [....192.168.1.2][.2684] -> [....192.168.1.1][...53] + update: [....64] [ip4][..udp] [....192.168.1.2][.2736] -> [....192.168.1.1][...53] + update: [....66] [ip4][..udp] [....192.168.1.2][.2736] -> [...192.168.1.17][...53] + update: [....75] [ip4][..udp] [....192.168.1.2][.2741] -> [....192.168.1.1][...53] + update: [....76] [ip4][..udp] [..192.168.130.1][...53] -> [....192.168.1.2][.2741] [DNS][Network][Acceptable] + new: [....82] [ip4][..udp] [..192.168.1.170][43690] -> [170.170.170.170][43690] + new: [....83] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2745] + detected: [....83] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2745] [DNS][Network][Acceptable] + new: [....84] [ip4][..udp] [....192.168.1.2][.2746] -> [....192.168.1.1][...53] + detected: [....84] [ip4][..udp] [....192.168.1.2][.2746] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....85] [ip4][..240] [....192.168.1.2] -> [....192.168.1.1] + new: [....86] [ip4][..udp] [...192.168.1.34][.2746] -> [....192.168.1.1][...53] + detected: [....86] [ip4][..udp] [...192.168.1.34][.2746] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....60] [ip4][..udp] [....172.168.1.2][.2734] -> [....192.168.1.1][...53] + idle: [....57] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] [DNS][Network][Acceptable] + idle: [....56] [ip4][..udp] [....192.168.1.2][.2733] -> [..192.168.115.1][...53] + idle: [....59] [ip4][..udp] [....192.168.1.2][.2734] -> [....192.168.1.1][...53] + update: [....68] [ip4][..udp] [....192.168.1.2][20932] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....63] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..169] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [....71] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] + update: [....67] [ip4][..udp] [....192.168.1.2][.2737] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....69] [ip4][..udp] [....192.168.1.2][.2738] -> [...192.168.84.1][...53] + update: [....70] [ip4][..udp] [....192.168.1.2][.2738] -> [....192.168.1.1][...53] + update: [....77] [ip4][..udp] [....192.168.1.2][.2742] -> [....192.168.1.1][...53] + update: [....61] [ip4][..udp] [....200.168.1.2][.2735] -> [....192.168.1.1][...53] + update: [....62] [ip4][..udp] [....253.168.1.1][...53] -> [....192.168.1.2][.2735] [DNS][Network][Acceptable] + update: [....78] [ip4][..udp] [....192.168.1.2][.2730] -> [....192.168.1.1][43690] + new: [....87] [ip4][..udp] [....192.168.1.2][.2747] -> [.....67.168.1.1][...53] + detected: [....87] [ip4][..udp] [....192.168.1.2][.2747] -> [.....67.168.1.1][...53] [DNS][Network][Acceptable] + new: [....88] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2747] + detected: [....88] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2747] [DNS][Network][Acceptable] + new: [....89] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.4932] + detected: [....89] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.4932] [SIP][VoIP][Acceptable] + new: [....90] [ip4][..udp] [....192.168.1.2][.2748] -> [....192.168.1.1][...53] + detected: [....90] [ip4][..udp] [....192.168.1.2][.2748] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....91] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] + detection-update: [....90] [ip4][..udp] [....192.168.1.2][.2748] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detected: [....91] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + detection-update: [....90] [ip4][..udp] [....192.168.1.2][.2748] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....90] [ip4][..udp] [....192.168.1.2][.2748] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + guessed: [....63] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..169] [NetBIOS][System][Acceptable] + idle: [....63] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..169] + idle: [....61] [ip4][..udp] [....200.168.1.2][.2735] -> [....192.168.1.1][...53] + idle: [....62] [ip4][..udp] [....253.168.1.1][...53] -> [....192.168.1.2][.2735] [DNS][Network][Acceptable] + update: [....72] [ip4][..udp] [....192.168.1.2][.2739] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....73] [ip4][..udp] [....192.168.1.2][.2740] -> [....192.168.1.1][...53] + update: [....79] [ip4][..udp] [....192.168.1.2][.2743] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....92] [ip4][..udp] [....192.168.1.2][.2749] -> [....192.168.1.1][...53] + detected: [....92] [ip4][..udp] [....192.168.1.2][.2749] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [....93] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] + detected: [....93] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + new: [....94] [ip4][..udp] [....192.168.1.2][.2750] -> [....192.168.1.1][...53] + detected: [....94] [ip4][..udp] [....192.168.1.2][.2750] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....95] [ip4][..udp] [....192.168.1.2][10942] -> [....192.168.1.1][...53] + detected: [....95] [ip4][..udp] [....192.168.1.2][10942] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....94] [ip4][..udp] [....192.168.1.2][.2750] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + detection-update: [....94] [ip4][..udp] [....192.168.1.2][.2750] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [....81] [ip4][..udp] [....192.168.1.2][...88] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....74] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][.8329] + update: [....65] [ip4][..udp] [....192.168.1.2][.2684] -> [....192.168.1.1][...53] + update: [....64] [ip4][..udp] [....192.168.1.2][.2736] -> [....192.168.1.1][...53] + update: [....66] [ip4][..udp] [....192.168.1.2][.2736] -> [...192.168.1.17][...53] + update: [....75] [ip4][..udp] [....192.168.1.2][.2741] -> [....192.168.1.1][...53] + update: [....76] [ip4][..udp] [..192.168.130.1][...53] -> [....192.168.1.2][.2741] [DNS][Network][Acceptable] + update: [....80] [ip4][..udp] [....192.168.1.2][.2744] -> [....192.168.1.1][...53] + new: [....96] [ip4][..udp] [...192.168.1.18][.2751] -> [....192.168.1.1][...53] + detected: [....96] [ip4][..udp] [...192.168.1.18][.2751] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [....97] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2751] + detected: [....97] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2751] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [....98] [ip4][..udp] [....192.168.1.2][.2752] -> [....192.168.1.1][...53] + detected: [....98] [ip4][..udp] [....192.168.1.2][.2752] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....99] [ip4][..udp] [....192.168.1.2][.4292] -> [..200.68.37.115][.5060] + detected: [....99] [ip4][..udp] [....192.168.1.2][.4292] -> [..200.68.37.115][.5060] [SIP][VoIP][Acceptable] + new: [...100] [ip4][..udp] [....192.168.1.2][.4901] -> [..200.68.120.81][29440] + detected: [...100] [ip4][..udp] [....192.168.1.2][.4901] -> [..200.68.120.81][29440] [SIP][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + new: [...101] [ip4][..udp] [....192.168.1.2][.2752] -> [....102.168.1.1][...53] + detected: [...101] [ip4][..udp] [....192.168.1.2][.2752] -> [....102.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...102] [ip4][..udp] [.....192.98.1.2][.2752] -> [.....25.168.1.1][...53] + detected: [...102] [ip4][..udp] [.....192.98.1.2][.2752] -> [.....25.168.1.1][...53] [DNS][Network][Acceptable] + update: [....82] [ip4][..udp] [..192.168.1.170][43690] -> [170.170.170.170][43690] + update: [....68] [ip4][..udp] [....192.168.1.2][20932] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [....71] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] + update: [....67] [ip4][..udp] [....192.168.1.2][.2737] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....69] [ip4][..udp] [....192.168.1.2][.2738] -> [...192.168.84.1][...53] + update: [....70] [ip4][..udp] [....192.168.1.2][.2738] -> [....192.168.1.1][...53] + update: [....77] [ip4][..udp] [....192.168.1.2][.2742] -> [....192.168.1.1][...53] + update: [....83] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2745] [DNS][Network][Acceptable] + update: [....84] [ip4][..udp] [....192.168.1.2][.2746] -> [....192.168.1.1][...53] + update: [....86] [ip4][..udp] [...192.168.1.34][.2746] -> [....192.168.1.1][...53] + update: [....78] [ip4][..udp] [....192.168.1.2][.2730] -> [....192.168.1.1][43690] + new: [...103] [ip4][..udp] [....192.169.1.2][.5060] -> [..200.68.120.81][.5060] + detected: [...103] [ip4][..udp] [....192.169.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + new: [...104] [ip4][..udp] [....192.168.1.2][.2753] -> [....192.168.1.1][...53] + detected: [...104] [ip4][..udp] [....192.168.1.2][.2753] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...104] [ip4][..udp] [....192.168.1.2][.2753] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...105] [ip4][..udp] [.....192.86.1.2][.5060] -> [..200.68.120.99][.5060] + update: [....87] [ip4][..udp] [....192.168.1.2][.2747] -> [.....67.168.1.1][...53] + update: [....88] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2747] [DNS][Network][Acceptable] + update: [....90] [ip4][..udp] [....192.168.1.2][.2748] -> [....192.168.1.1][...53] + update: [....89] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.4932] [SIP][VoIP][Acceptable] + update: [....91] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + ERROR-EVENT: Unknown packet type + new: [...106] [ip4][..udp] [....192.168.1.2][.2754] -> [....192.168.1.1][...53] + new: [...107] [ip4][..118] [....192.168.1.2] -> [..200.68.120.81] + detected: [...106] [ip4][..udp] [....192.168.1.2][.2754] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....65] [ip4][..udp] [....192.168.1.2][.2684] -> [....192.168.1.1][...53] + idle: [....66] [ip4][..udp] [....192.168.1.2][.2736] -> [...192.168.1.17][...53] + idle: [....64] [ip4][..udp] [....192.168.1.2][.2736] -> [....192.168.1.1][...53] + update: [....93] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] [DNS][Network][Acceptable] + update: [....72] [ip4][..udp] [....192.168.1.2][.2739] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....73] [ip4][..udp] [....192.168.1.2][.2740] -> [....192.168.1.1][...53] + update: [....79] [ip4][..udp] [....192.168.1.2][.2743] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....92] [ip4][..udp] [....192.168.1.2][.2749] -> [....192.168.1.1][...53] + update: [....94] [ip4][..udp] [....192.168.1.2][.2750] -> [....192.168.1.1][...53] + update: [....95] [ip4][..udp] [....192.168.1.2][10942] -> [....192.168.1.1][...53] + new: [...108] [ip4][..udp] [.....14.168.1.2][.2754] -> [....192.168.1.1][...53] + detected: [...108] [ip4][..udp] [.....14.168.1.2][.2754] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...106] [ip4][..udp] [....192.168.1.2][.2754] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....68] [ip4][..udp] [....192.168.1.2][20932] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + idle: [....67] [ip4][..udp] [....192.168.1.2][.2737] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....69] [ip4][..udp] [....192.168.1.2][.2738] -> [...192.168.84.1][...53] + update: [....81] [ip4][..udp] [....192.168.1.2][...88] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....74] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][.8329] + update: [....75] [ip4][..udp] [....192.168.1.2][.2741] -> [....192.168.1.1][...53] + update: [....76] [ip4][..udp] [..192.168.130.1][...53] -> [....192.168.1.2][.2741] [DNS][Network][Acceptable] + update: [....80] [ip4][..udp] [....192.168.1.2][.2744] -> [....192.168.1.1][...53] + new: [...109] [ip4][..udp] [....192.168.1.2][.2755] -> [....192.168.1.1][...53] + detected: [...109] [ip4][..udp] [....192.168.1.2][.2755] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...109] [ip4][..udp] [....192.168.1.2][.2755] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....71] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] + idle: [....70] [ip4][..udp] [....192.168.1.2][.2738] -> [....192.168.1.1][...53] + update: [....96] [ip4][..udp] [...192.168.1.18][.2751] -> [....192.168.1.1][...53] + update: [....97] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2751] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [....98] [ip4][..udp] [....192.168.1.2][.2752] -> [....192.168.1.1][...53] + DAEMON-EVENT: [Processed: 241 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 63 / 109|skipped: 0|!detected: 6|guessed: 4|detection-updates: 26|updates: 178] + new: [...110] [ip4][..udp] [....192.168.1.2][.2756] -> [....192.168.1.1][...53] + detected: [...110] [ip4][..udp] [....192.168.1.2][.2756] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...110] [ip4][..udp] [....192.168.1.2][.2756] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...110] [ip4][..udp] [....192.168.1.2][.2756] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + guessed: [....74] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][.8329] [NetBIOS][System][Acceptable] + idle: [....74] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][.8329] + idle: [....72] [ip4][..udp] [....192.168.1.2][.2739] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....73] [ip4][..udp] [....192.168.1.2][.2740] -> [....192.168.1.1][...53] + update: [....82] [ip4][..udp] [..192.168.1.170][43690] -> [170.170.170.170][43690] + update: [....99] [ip4][..udp] [....192.168.1.2][.4292] -> [..200.68.37.115][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...105] [ip4][..udp] [.....192.86.1.2][.5060] -> [..200.68.120.99][.5060] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...100] [ip4][..udp] [....192.168.1.2][.4901] -> [..200.68.120.81][29440] [SIP][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + update: [....87] [ip4][..udp] [....192.168.1.2][.2747] -> [.....67.168.1.1][...53] + update: [...101] [ip4][..udp] [....192.168.1.2][.2752] -> [....102.168.1.1][...53] + update: [....77] [ip4][..udp] [....192.168.1.2][.2742] -> [....192.168.1.1][...53] + update: [....83] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2745] [DNS][Network][Acceptable] + update: [....84] [ip4][..udp] [....192.168.1.2][.2746] -> [....192.168.1.1][...53] + update: [....86] [ip4][..udp] [...192.168.1.34][.2746] -> [....192.168.1.1][...53] + update: [....88] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2747] [DNS][Network][Acceptable] + update: [....90] [ip4][..udp] [....192.168.1.2][.2748] -> [....192.168.1.1][...53] + update: [...104] [ip4][..udp] [....192.168.1.2][.2753] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....89] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.4932] [SIP][VoIP][Acceptable] + update: [....91] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + update: [...102] [ip4][..udp] [.....192.98.1.2][.2752] -> [.....25.168.1.1][...53] + update: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + update: [...103] [ip4][..udp] [....192.169.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + update: [....78] [ip4][..udp] [....192.168.1.2][.2730] -> [....192.168.1.1][43690] + new: [...111] [ip4][..udp] [....192.168.1.2][.2757] -> [....192.168.1.1][...53] + detected: [...111] [ip4][..udp] [....192.168.1.2][.2757] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...111] [ip4][..udp] [....192.168.1.2][.2757] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + analyse: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.742| 47.495| 20.018| 22.628] + [IAT(c->s)...: 0.742| 47.495| 20.018| 22.628][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 92.000| 92.000| 92.000| 0.000][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [....76] [ip4][..udp] [..192.168.130.1][...53] -> [....192.168.1.2][.2741] [DNS][Network][Acceptable] + idle: [....75] [ip4][..udp] [....192.168.1.2][.2741] -> [....192.168.1.1][...53] + update: [....58] [ip4][..120] [....192.168.1.2] -> [..212.242.33.35] + update: [....93] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] [DNS][Network][Acceptable] + update: [....79] [ip4][..udp] [....192.168.1.2][.2743] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....92] [ip4][..udp] [....192.168.1.2][.2749] -> [....192.168.1.1][...53] + update: [....94] [ip4][..udp] [....192.168.1.2][.2750] -> [....192.168.1.1][...53] + update: [....95] [ip4][..udp] [....192.168.1.2][10942] -> [....192.168.1.1][...53] + update: [...106] [ip4][..udp] [....192.168.1.2][.2754] -> [....192.168.1.1][...53] + new: [...112] [ip4][..udp] [....192.168.1.2][.2640] -> [....192.168.1.1][...53] + detected: [...112] [ip4][..udp] [....192.168.1.2][.2640] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...113] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] + detected: [...113] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...114] [ip4][..udp] [.192.168.37.115][.2758] -> [....128.168.1.1][...53] + new: [...115] [ip4][..udp] [....192.168.1.2][.2758] -> [....192.168.1.1][...53] + detected: [...115] [ip4][..udp] [....192.168.1.2][.2758] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...115] [ip4][..udp] [....192.168.1.2][.2758] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....77] [ip4][..udp] [....192.168.1.2][.2742] -> [....192.168.1.1][...53] + not-detected: [....78] [ip4][..udp] [....192.168.1.2][.2730] -> [....192.168.1.1][43690] [Unknown][Unrated] + idle: [....78] [ip4][..udp] [....192.168.1.2][.2730] -> [....192.168.1.1][43690] + update: [....81] [ip4][..udp] [....192.168.1.2][...88] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...108] [ip4][..udp] [.....14.168.1.2][.2754] -> [....192.168.1.1][...53] + update: [....80] [ip4][..udp] [....192.168.1.2][.2744] -> [....192.168.1.1][...53] + update: [....96] [ip4][..udp] [...192.168.1.18][.2751] -> [....192.168.1.1][...53] + update: [....97] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2751] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [....98] [ip4][..udp] [....192.168.1.2][.2752] -> [....192.168.1.1][...53] + update: [...109] [ip4][..udp] [....192.168.1.2][.2755] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...116] [ip4][..udp] [....192.168.1.2][.2759] -> [....192.168.1.1][...53] + detected: [...116] [ip4][..udp] [....192.168.1.2][.2759] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...117] [ip4][...37] [....192.168.1.1] -> [....192.168.1.2] + idle: [....79] [ip4][..udp] [....192.168.1.2][.2743] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....85] [ip4][..240] [....192.168.1.2] -> [....192.168.1.1] + update: [...110] [ip4][..udp] [....192.168.1.2][.2756] -> [....192.168.1.1][...53] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...118] [ip4][..udp] [.....192.22.1.2][.2760] -> [....192.168.1.1][...53] + new: [...119] [ip4][..udp] [....192.168.1.2][.2760] -> [....192.168.1.1][...53] + detected: [...119] [ip4][..udp] [....192.168.1.2][.2760] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown packet type + detection-update: [...119] [ip4][..udp] [....192.168.1.2][.2760] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....81] [ip4][..udp] [....192.168.1.2][...88] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [....80] [ip4][..udp] [....192.168.1.2][.2744] -> [....192.168.1.1][...53] + update: [....82] [ip4][..udp] [..192.168.1.170][43690] -> [170.170.170.170][43690] + update: [....99] [ip4][..udp] [....192.168.1.2][.4292] -> [..200.68.37.115][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...105] [ip4][..udp] [.....192.86.1.2][.5060] -> [..200.68.120.99][.5060] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...100] [ip4][..udp] [....192.168.1.2][.4901] -> [..200.68.120.81][29440] [SIP][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + update: [....87] [ip4][..udp] [....192.168.1.2][.2747] -> [.....67.168.1.1][...53] + update: [...101] [ip4][..udp] [....192.168.1.2][.2752] -> [....102.168.1.1][...53] + update: [....93] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] [DNS][Network][Acceptable] + update: [....83] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2745] [DNS][Network][Acceptable] + update: [....84] [ip4][..udp] [....192.168.1.2][.2746] -> [....192.168.1.1][...53] + update: [....86] [ip4][..udp] [...192.168.1.34][.2746] -> [....192.168.1.1][...53] + update: [....88] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2747] [DNS][Network][Acceptable] + update: [....90] [ip4][..udp] [....192.168.1.2][.2748] -> [....192.168.1.1][...53] + update: [....92] [ip4][..udp] [....192.168.1.2][.2749] -> [....192.168.1.1][...53] + update: [....94] [ip4][..udp] [....192.168.1.2][.2750] -> [....192.168.1.1][...53] + update: [....95] [ip4][..udp] [....192.168.1.2][10942] -> [....192.168.1.1][...53] + update: [...104] [ip4][..udp] [....192.168.1.2][.2753] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...106] [ip4][..udp] [....192.168.1.2][.2754] -> [....192.168.1.1][...53] + update: [...111] [ip4][..udp] [....192.168.1.2][.2757] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [....89] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.4932] [SIP][VoIP][Acceptable] + update: [....91] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + update: [...102] [ip4][..udp] [.....192.98.1.2][.2752] -> [.....25.168.1.1][...53] + update: [...103] [ip4][..udp] [....192.169.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + new: [...120] [ip4][..udp] [....192.168.1.2][.2761] -> [....192.168.1.1][...53] + detected: [...120] [ip4][..udp] [....192.168.1.2][.2761] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...121] [ip4][..udp] [....192.168.1.2][.2762] -> [....192.168.1.1][...53] + detected: [...121] [ip4][..udp] [....192.168.1.2][.2762] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...121] [ip4][..udp] [....192.168.1.2][.2762] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + detection-update: [...121] [ip4][..udp] [....192.168.1.2][.2762] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown L3 protocol + not-detected: [....82] [ip4][..udp] [..192.168.1.170][43690] -> [170.170.170.170][43690] [Unknown][Unrated] + idle: [....82] [ip4][..udp] [..192.168.1.170][43690] -> [170.170.170.170][43690] + idle: [....83] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2745] [DNS][Network][Acceptable] + idle: [....86] [ip4][..udp] [...192.168.1.34][.2746] -> [....192.168.1.1][...53] + update: [...112] [ip4][..udp] [....192.168.1.2][.2640] -> [....192.168.1.1][...53] + update: [...114] [ip4][..udp] [.192.168.37.115][.2758] -> [....128.168.1.1][...53] + update: [...113] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] + ERROR-EVENT: Unknown packet type + new: [...122] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2763] + detected: [...122] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2763] [DNS][Network][Acceptable] + RISK: Malformed Packet + ERROR-EVENT: Unknown packet type + new: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] + detected: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + new: [...124] [ip4][..udp] [....192.168.1.2][43690] -> [170.170.170.170][43690] + detection-update: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [....87] [ip4][..udp] [....192.168.1.2][.2747] -> [.....67.168.1.1][...53] + idle: [....84] [ip4][..udp] [....192.168.1.2][.2746] -> [....192.168.1.1][...53] + idle: [....88] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2747] [DNS][Network][Acceptable] + idle: [....90] [ip4][..udp] [....192.168.1.2][.2748] -> [....192.168.1.1][...53] + idle: [....89] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.4932] [SIP][VoIP][Acceptable] + update: [...108] [ip4][..udp] [.....14.168.1.2][.2754] -> [....192.168.1.1][...53] + update: [....96] [ip4][..udp] [...192.168.1.18][.2751] -> [....192.168.1.1][...53] + update: [....97] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2751] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [....98] [ip4][..udp] [....192.168.1.2][.2752] -> [....192.168.1.1][...53] + update: [...109] [ip4][..udp] [....192.168.1.2][.2755] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...110] [ip4][..udp] [....192.168.1.2][.2756] -> [....192.168.1.1][...53] + update: [...115] [ip4][..udp] [....192.168.1.2][.2758] -> [....192.168.1.1][...53] + update: [...116] [ip4][..udp] [....192.168.1.2][.2759] -> [....192.168.1.1][...53] + new: [...125] [ip4][..udp] [..192.168.1.110][.2765] -> [....192.168.1.1][...53] + detected: [...125] [ip4][..udp] [..192.168.1.110][.2765] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...126] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2765] + detected: [...126] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2765] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...127] [ip4][..udp] [..192.168.1.172][.2766] -> [....192.168.1.1][...53] + detected: [...127] [ip4][..udp] [..192.168.1.172][.2766] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...128] [ip4][..udp] [....192.168.1.2][.2766] -> [....192.168.1.1][...53] + detected: [...128] [ip4][..udp] [....192.168.1.2][.2766] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...128] [ip4][..udp] [....192.168.1.2][.2766] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + new: [...129] [ip4][..udp] [....192.168.1.2][14798] -> [....192.168.1.1][...53] + detected: [...129] [ip4][..udp] [....192.168.1.2][14798] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....93] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] [DNS][Network][Acceptable] + idle: [....92] [ip4][..udp] [....192.168.1.2][.2749] -> [....192.168.1.1][...53] + idle: [....95] [ip4][..udp] [....192.168.1.2][10942] -> [....192.168.1.1][...53] + idle: [....94] [ip4][..udp] [....192.168.1.2][.2750] -> [....192.168.1.1][...53] + update: [....99] [ip4][..udp] [....192.168.1.2][.4292] -> [..200.68.37.115][.5060] [SIP][VoIP][Acceptable] + update: [...118] [ip4][..udp] [.....192.22.1.2][.2760] -> [....192.168.1.1][...53] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...105] [ip4][..udp] [.....192.86.1.2][.5060] -> [..200.68.120.99][.5060] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...100] [ip4][..udp] [....192.168.1.2][.4901] -> [..200.68.120.81][29440] [SIP][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + update: [...101] [ip4][..udp] [....192.168.1.2][.2752] -> [....102.168.1.1][...53] + update: [...104] [ip4][..udp] [....192.168.1.2][.2753] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...106] [ip4][..udp] [....192.168.1.2][.2754] -> [....192.168.1.1][...53] + update: [...111] [ip4][..udp] [....192.168.1.2][.2757] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...119] [ip4][..udp] [....192.168.1.2][.2760] -> [....192.168.1.1][...53] + update: [....91] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + update: [...102] [ip4][..udp] [.....192.98.1.2][.2752] -> [.....25.168.1.1][...53] + update: [...103] [ip4][..udp] [....192.169.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + new: [...130] [ip4][..udp] [....192.168.1.2][.2767] -> [....192.168.1.1][...53] + detected: [...130] [ip4][..udp] [....192.168.1.2][.2767] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...130] [ip4][..udp] [....192.168.1.2][.2767] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...131] [ip4][..udp] [....192.168.1.2][.2768] -> [....192.168.1.1][...53] + detected: [...131] [ip4][..udp] [....192.168.1.2][.2768] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...132] [ip4][..udp] [....192.168.1.2][35536] -> [....192.168.1.1][...53] + detected: [...132] [ip4][..udp] [....192.168.1.2][35536] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...133] [ip4][..udp] [.....94.168.1.2][.2768] -> [....192.168.1.1][....4] + detection-update: [...131] [ip4][..udp] [....192.168.1.2][.2768] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [....99] [ip4][..udp] [....192.168.1.2][.4292] -> [..200.68.37.115][.5060] [SIP][VoIP][Acceptable] + idle: [...100] [ip4][..udp] [....192.168.1.2][.4901] -> [..200.68.120.81][29440] [SIP][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [...101] [ip4][..udp] [....192.168.1.2][.2752] -> [....102.168.1.1][...53] + idle: [....97] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2751] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [....96] [ip4][..udp] [...192.168.1.18][.2751] -> [....192.168.1.1][...53] + idle: [....98] [ip4][..udp] [....192.168.1.2][.2752] -> [....192.168.1.1][...53] + idle: [...102] [ip4][..udp] [.....192.98.1.2][.2752] -> [.....25.168.1.1][...53] + update: [...112] [ip4][..udp] [....192.168.1.2][.2640] -> [....192.168.1.1][...53] + update: [...114] [ip4][..udp] [.192.168.37.115][.2758] -> [....128.168.1.1][...53] + update: [...120] [ip4][..udp] [....192.168.1.2][.2761] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...121] [ip4][..udp] [....192.168.1.2][.2762] -> [....192.168.1.1][...53] + update: [...113] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] + update: [...107] [ip4][..118] [....192.168.1.2] -> [..200.68.120.81] + new: [...134] [ip4][..udp] [....192.168.1.2][.2769] -> [....192.168.1.1][...53] + detected: [...134] [ip4][..udp] [....192.168.1.2][.2769] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...135] [ip4][..udp] [....192.168.1.1][..117] -> [....192.168.1.2][.2769] + guessed: [...105] [ip4][..udp] [.....192.86.1.2][.5060] -> [..200.68.120.99][.5060] [SIP][VoIP][Acceptable] + idle: [...105] [ip4][..udp] [.....192.86.1.2][.5060] -> [..200.68.120.99][.5060] + idle: [...104] [ip4][..udp] [....192.168.1.2][.2753] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...103] [ip4][..udp] [....192.169.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + update: [...124] [ip4][..udp] [....192.168.1.2][43690] -> [170.170.170.170][43690] + update: [...122] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2763] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [...136] [ip4][..127] [....192.168.1.2] -> [....192.168.1.1] + new: [...137] [ip4][..udp] [....192.168.1.2][.2770] -> [....192.168.1.1][...53] + detected: [...137] [ip4][..udp] [....192.168.1.2][.2770] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...138] [ip4][..udp] [....192.168.1.2][..137] -> [..120.168.1.255][..137] + detected: [...138] [ip4][..udp] [....192.168.1.2][..137] -> [..120.168.1.255][..137] [NetBIOS][System][Acceptable] + ERROR-EVENT: Unknown packet type + detection-update: [...137] [ip4][..udp] [....192.168.1.2][.2770] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [...108] [ip4][..udp] [.....14.168.1.2][.2754] -> [....192.168.1.1][...53] + idle: [...106] [ip4][..udp] [....192.168.1.2][.2754] -> [....192.168.1.1][...53] + idle: [....91] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + update: [...118] [ip4][..udp] [.....192.22.1.2][.2760] -> [....192.168.1.1][...53] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...129] [ip4][..udp] [....192.168.1.2][14798] -> [....192.168.1.1][...53] + update: [...109] [ip4][..udp] [....192.168.1.2][.2755] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...110] [ip4][..udp] [....192.168.1.2][.2756] -> [....192.168.1.1][...53] + update: [...111] [ip4][..udp] [....192.168.1.2][.2757] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...115] [ip4][..udp] [....192.168.1.2][.2758] -> [....192.168.1.1][...53] + update: [...116] [ip4][..udp] [....192.168.1.2][.2759] -> [....192.168.1.1][...53] + update: [...119] [ip4][..udp] [....192.168.1.2][.2760] -> [....192.168.1.1][...53] + update: [...125] [ip4][..udp] [..192.168.1.110][.2765] -> [....192.168.1.1][...53] + update: [...126] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2765] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...127] [ip4][..udp] [..192.168.1.172][.2766] -> [....192.168.1.1][...53] + update: [...128] [ip4][..udp] [....192.168.1.2][.2766] -> [....192.168.1.1][...53] + update: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + new: [...139] [ip4][..udp] [...192.168.1.57][.2771] -> [....192.168.1.1][...53] + detected: [...139] [ip4][..udp] [...192.168.1.57][.2771] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...140] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2771] + detected: [...140] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2771] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...141] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.255][..138] + detected: [...141] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [...109] [ip4][..udp] [....192.168.1.2][.2755] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....58] [ip4][..120] [....192.168.1.2] -> [..212.242.33.35] + update: [...130] [ip4][..udp] [....192.168.1.2][.2767] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...131] [ip4][..udp] [....192.168.1.2][.2768] -> [....192.168.1.1][...53] + new: [...142] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.168.1.1][...53] + detected: [...142] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + detection-update: [...142] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + detection-update: [...142] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...143] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.184.1.1][...53] + detected: [...143] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.184.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...142] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [...110] [ip4][..udp] [....192.168.1.2][.2756] -> [....192.168.1.1][...53] + update: [...124] [ip4][..udp] [....192.168.1.2][43690] -> [170.170.170.170][43690] + update: [...133] [ip4][..udp] [.....94.168.1.2][.2768] -> [....192.168.1.1][....4] + update: [...112] [ip4][..udp] [....192.168.1.2][.2640] -> [....192.168.1.1][...53] + update: [...114] [ip4][..udp] [.192.168.37.115][.2758] -> [....128.168.1.1][...53] + update: [...120] [ip4][..udp] [....192.168.1.2][.2761] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...121] [ip4][..udp] [....192.168.1.2][.2762] -> [....192.168.1.1][...53] + update: [...122] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2763] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...132] [ip4][..udp] [....192.168.1.2][35536] -> [....192.168.1.1][...53] + update: [...134] [ip4][..udp] [....192.168.1.2][.2769] -> [....192.168.1.1][...53] + update: [...113] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] + update: [...135] [ip4][..udp] [....192.168.1.1][..117] -> [....192.168.1.2][.2769] + new: [...144] [ip4][..udp] [....192.168.1.2][.2773] -> [....192.168.1.1][...53] + detected: [...144] [ip4][..udp] [....192.168.1.2][.2773] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + idle: [...112] [ip4][..udp] [....192.168.1.2][.2640] -> [....192.168.1.1][...53] + idle: [...111] [ip4][..udp] [....192.168.1.2][.2757] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [...113] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] + update: [...117] [ip4][...37] [....192.168.1.1] -> [....192.168.1.2] + update: [...138] [ip4][..udp] [....192.168.1.2][..137] -> [..120.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....85] [ip4][..240] [....192.168.1.2] -> [....192.168.1.1] + update: [...118] [ip4][..udp] [.....192.22.1.2][.2760] -> [....192.168.1.1][...53] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...129] [ip4][..udp] [....192.168.1.2][14798] -> [....192.168.1.1][...53] + update: [...115] [ip4][..udp] [....192.168.1.2][.2758] -> [....192.168.1.1][...53] + update: [...116] [ip4][..udp] [....192.168.1.2][.2759] -> [....192.168.1.1][...53] + update: [...119] [ip4][..udp] [....192.168.1.2][.2760] -> [....192.168.1.1][...53] + update: [...125] [ip4][..udp] [..192.168.1.110][.2765] -> [....192.168.1.1][...53] + update: [...126] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2765] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...127] [ip4][..udp] [..192.168.1.172][.2766] -> [....192.168.1.1][...53] + update: [...128] [ip4][..udp] [....192.168.1.2][.2766] -> [....192.168.1.1][...53] + update: [...137] [ip4][..udp] [....192.168.1.2][.2770] -> [....192.168.1.1][...53] + new: [...145] [ip4][..udp] [....192.168.1.2][.2774] -> [....192.168.1.1][...53] + detected: [...145] [ip4][..udp] [....192.168.1.2][.2774] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + detection-update: [...145] [ip4][..udp] [....192.168.1.2][.2774] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + detection-update: [...145] [ip4][..udp] [....192.168.1.2][.2774] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...146] [ip4][..udp] [....192.168.9.2][.2774] -> [....192.168.1.1][...53] + detected: [...146] [ip4][..udp] [....192.168.9.2][.2774] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...145] [ip4][..udp] [....192.168.1.2][.2774] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + guessed: [...114] [ip4][..udp] [.192.168.37.115][.2758] -> [....128.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [...114] [ip4][..udp] [.192.168.37.115][.2758] -> [....128.168.1.1][...53] + idle: [...115] [ip4][..udp] [....192.168.1.2][.2758] -> [....192.168.1.1][...53] + update: [...141] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [...130] [ip4][..udp] [....192.168.1.2][.2767] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...131] [ip4][..udp] [....192.168.1.2][.2768] -> [....192.168.1.1][...53] + update: [...139] [ip4][..udp] [...192.168.1.57][.2771] -> [....192.168.1.1][...53] + update: [...140] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2771] [DNS][Network][Acceptable] + new: [...147] [ip4][..udp] [....192.168.1.2][.2775] -> [....192.168.1.1][...53] + detected: [...147] [ip4][..udp] [....192.168.1.2][.2775] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...147] [ip4][..udp] [....192.168.1.2][.2775] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...116] [ip4][..udp] [....192.168.1.2][.2759] -> [....192.168.1.1][...53] + update: [...142] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.168.1.1][...53] + new: [...148] [ip4][..udp] [....192.168.1.2][.2776] -> [....192.168.1.1][...53] + detected: [...148] [ip4][..udp] [....192.168.1.2][.2776] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...148] [ip4][..udp] [....192.168.1.2][.2776] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + ERROR-EVENT: Unknown packet type + detection-update: [...148] [ip4][..udp] [....192.168.1.2][.2776] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + guessed: [...118] [ip4][..udp] [.....192.22.1.2][.2760] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [...118] [ip4][..udp] [.....192.22.1.2][.2760] -> [....192.168.1.1][...53] + idle: [...119] [ip4][..udp] [....192.168.1.2][.2760] -> [....192.168.1.1][...53] + update: [...124] [ip4][..udp] [....192.168.1.2][43690] -> [170.170.170.170][43690] + update: [...133] [ip4][..udp] [.....94.168.1.2][.2768] -> [....192.168.1.1][....4] + update: [...120] [ip4][..udp] [....192.168.1.2][.2761] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...121] [ip4][..udp] [....192.168.1.2][.2762] -> [....192.168.1.1][...53] + update: [...122] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2763] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...132] [ip4][..udp] [....192.168.1.2][35536] -> [....192.168.1.1][...53] + update: [...134] [ip4][..udp] [....192.168.1.2][.2769] -> [....192.168.1.1][...53] + update: [...143] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.184.1.1][...53] + update: [...144] [ip4][..udp] [....192.168.1.2][.2773] -> [....192.168.1.1][...53] + update: [...135] [ip4][..udp] [....192.168.1.1][..117] -> [....192.168.1.2][.2769] + new: [...149] [ip4][....0] [....192.168.1.2] -> [..192.168.1.255] + new: [...150] [ip4][..udp] [...192.168.33.2][.2782] -> [....192.168.1.1][...53] + detected: [...150] [ip4][..udp] [...192.168.33.2][.2782] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...151] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2782] + detected: [...151] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2782] [DNS][Network][Acceptable] + new: [...152] [ip4][..udp] [....192.168.1.6][.5060] -> [..212.242.33.35][.5060] + ERROR-EVENT: Unknown packet type + idle: [...120] [ip4][..udp] [....192.168.1.2][.2761] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...121] [ip4][..udp] [....192.168.1.2][.2762] -> [....192.168.1.1][...53] + update: [...138] [ip4][..udp] [....192.168.1.2][..137] -> [..120.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...129] [ip4][..udp] [....192.168.1.2][14798] -> [....192.168.1.1][...53] + update: [...125] [ip4][..udp] [..192.168.1.110][.2765] -> [....192.168.1.1][...53] + update: [...126] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2765] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...127] [ip4][..udp] [..192.168.1.172][.2766] -> [....192.168.1.1][...53] + update: [...128] [ip4][..udp] [....192.168.1.2][.2766] -> [....192.168.1.1][...53] + update: [...137] [ip4][..udp] [....192.168.1.2][.2770] -> [....192.168.1.1][...53] + update: [...145] [ip4][..udp] [....192.168.1.2][.2774] -> [....192.168.1.1][...53] + new: [...153] [ip4][..udp] [....192.168.1.2][.2783] -> [....192.168.1.1][...53] + detected: [...153] [ip4][..udp] [....192.168.1.2][.2783] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...153] [ip4][..udp] [....192.168.1.2][.2783] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + new: [...154] [ip4][..udp] [......0.168.1.2][.2783] -> [....192.168.1.1][...53] + detected: [...154] [ip4][..udp] [......0.168.1.2][.2783] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...153] [ip4][..udp] [....192.168.1.2][.2783] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + not-detected: [...124] [ip4][..udp] [....192.168.1.2][43690] -> [170.170.170.170][43690] [Unknown][Unrated] + idle: [...124] [ip4][..udp] [....192.168.1.2][43690] -> [170.170.170.170][43690] + idle: [...122] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2763] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...141] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [...130] [ip4][..udp] [....192.168.1.2][.2767] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...131] [ip4][..udp] [....192.168.1.2][.2768] -> [....192.168.1.1][...53] + update: [...139] [ip4][..udp] [...192.168.1.57][.2771] -> [....192.168.1.1][...53] + update: [...140] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2771] [DNS][Network][Acceptable] + update: [...142] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.168.1.1][...53] + update: [...146] [ip4][..udp] [....192.168.9.2][.2774] -> [....192.168.1.1][...53] + update: [...147] [ip4][..udp] [....192.168.1.2][.2775] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...155] [ip4][..udp] [....192.168.1.2][.2784] -> [....192.168.1.1][...53] + detected: [...155] [ip4][..udp] [....192.168.1.2][.2784] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...156] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.5.2][.2784] + detected: [...156] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.5.2][.2784] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + idle: [...129] [ip4][..udp] [....192.168.1.2][14798] -> [....192.168.1.1][...53] + idle: [...126] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2765] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [...125] [ip4][..udp] [..192.168.1.110][.2765] -> [....192.168.1.1][...53] + idle: [...128] [ip4][..udp] [....192.168.1.2][.2766] -> [....192.168.1.1][...53] + idle: [...127] [ip4][..udp] [..192.168.1.172][.2766] -> [....192.168.1.1][...53] + update: [...133] [ip4][..udp] [.....94.168.1.2][.2768] -> [....192.168.1.1][....4] + update: [...132] [ip4][..udp] [....192.168.1.2][35536] -> [....192.168.1.1][...53] + update: [...134] [ip4][..udp] [....192.168.1.2][.2769] -> [....192.168.1.1][...53] + update: [...143] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.184.1.1][...53] + update: [...144] [ip4][..udp] [....192.168.1.2][.2773] -> [....192.168.1.1][...53] + update: [...148] [ip4][..udp] [....192.168.1.2][.2776] -> [....192.168.1.1][...53] + update: [...135] [ip4][..udp] [....192.168.1.1][..117] -> [....192.168.1.2][.2769] + update: [...107] [ip4][..118] [....192.168.1.2] -> [..200.68.120.81] + new: [...157] [ip4][...19] [....192.168.1.2] -> [....192.168.1.1] + new: [...158] [ip4][..udp] [....200.168.1.2][.2785] -> [....192.168.1.1][...53] + detected: [...158] [ip4][..udp] [....200.168.1.2][.2785] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...159] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][35721] + new: [...160] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] + detected: [...160] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + not-detected: [....58] [ip4][..120] [....192.168.1.2] -> [..212.242.33.35] [Unknown][Unrated] + idle: [....58] [ip4][..120] [....192.168.1.2] -> [..212.242.33.35] + idle: [...130] [ip4][..udp] [....192.168.1.2][.2767] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...138] [ip4][..udp] [....192.168.1.2][..137] -> [..120.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...152] [ip4][..udp] [....192.168.1.6][.5060] -> [..212.242.33.35][.5060] + update: [...137] [ip4][..udp] [....192.168.1.2][.2770] -> [....192.168.1.1][...53] + update: [...145] [ip4][..udp] [....192.168.1.2][.2774] -> [....192.168.1.1][...53] + update: [...150] [ip4][..udp] [...192.168.33.2][.2782] -> [....192.168.1.1][...53] + update: [...151] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2782] [DNS][Network][Acceptable] + new: [...161] [ip4][..udp] [....192.168.1.2][.2786] -> [....192.168.1.3][...53] + detected: [...161] [ip4][..udp] [....192.168.1.2][.2786] -> [....192.168.1.3][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...162] [ip4][..udp] [..212.242.33.35][.9587] -> [....192.168.1.2][..196] + new: [...163] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.3.1][...53] + detected: [...163] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.3.1][...53] [DNS][Network][Acceptable] + new: [...164] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.1.1][...53] + detected: [...164] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...164] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...164] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + not-detected: [...133] [ip4][..udp] [.....94.168.1.2][.2768] -> [....192.168.1.1][....4] [Unknown][Unrated] + idle: [...133] [ip4][..udp] [.....94.168.1.2][.2768] -> [....192.168.1.1][....4] + idle: [...132] [ip4][..udp] [....192.168.1.2][35536] -> [....192.168.1.1][...53] + idle: [...131] [ip4][..udp] [....192.168.1.2][.2768] -> [....192.168.1.1][...53] + idle: [...134] [ip4][..udp] [....192.168.1.2][.2769] -> [....192.168.1.1][...53] + not-detected: [...135] [ip4][..udp] [....192.168.1.1][..117] -> [....192.168.1.2][.2769] [Unknown][Unrated] + idle: [...135] [ip4][..udp] [....192.168.1.1][..117] -> [....192.168.1.2][.2769] + update: [...136] [ip4][..127] [....192.168.1.2] -> [....192.168.1.1] + update: [...154] [ip4][..udp] [......0.168.1.2][.2783] -> [....192.168.1.1][...53] + update: [...153] [ip4][..udp] [....192.168.1.2][.2783] -> [....192.168.1.1][...53] + update: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + new: [...165] [ip4][..udp] [....192.168.1.2][.2788] -> [....192.168.1.1][...53] + detected: [...165] [ip4][..udp] [....192.168.1.2][.2788] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...166] [ip4][....0] [....192.168.1.1] -> [....192.168.1.2] + analyse: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.026| 279.042| 51.474| 59.389] + [IAT(c->s)...: 0.026| 279.042| 77.239| 86.753][IAT(s->c)...: 0.227| 167.525| 40.934| 38.839] + [PKTLEN(c->s): 348.000| 635.000| 501.500| 76.400][PKTLEN(s->c): 47.000|1118.000| 326.300| 339.700] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,1,1,0,0,1,1,5,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,0,0,0,0,0,0,0,2,0,0,1,1,0,0,0,0,0,0,4,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] + detected: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + detection-update: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + detection-update: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...141] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [...139] [ip4][..udp] [...192.168.1.57][.2771] -> [....192.168.1.1][...53] + update: [...140] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2771] [DNS][Network][Acceptable] + update: [...142] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.168.1.1][...53] + update: [...146] [ip4][..udp] [....192.168.9.2][.2774] -> [....192.168.1.1][...53] + update: [...147] [ip4][..udp] [....192.168.1.2][.2775] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...155] [ip4][..udp] [....192.168.1.2][.2784] -> [....192.168.1.1][...53] + update: [...156] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.5.2][.2784] [DNS][Network][Acceptable] + new: [...168] [ip4][..udp] [....192.168.1.2][.2790] -> [....192.168.1.1][...53] + detected: [...168] [ip4][..udp] [....192.168.1.2][.2790] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...169] [ip4][..udp] [..212.242.33.35][.5060] -> [...192.37.115.0][.5060] + detected: [...169] [ip4][..udp] [..212.242.33.35][.5060] -> [...192.37.115.0][.5060] [SIP][VoIP][Acceptable] + new: [...170] [ip4][..udp] [...192.168.79.2][.2791] -> [....192.168.1.1][...53] + detected: [...170] [ip4][..udp] [...192.168.79.2][.2791] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...171] [ip4][..udp] [...192.168.1.53][.2791] -> [....192.168.1.1][...53] + detected: [...171] [ip4][..udp] [...192.168.1.53][.2791] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...172] [ip4][..udp] [....192.168.1.2][..137] -> [..192.194.1.255][..137] + detected: [...172] [ip4][..udp] [....192.168.1.2][..137] -> [..192.194.1.255][..137] [NetBIOS][System][Acceptable] + new: [...173] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] + new: [...174] [ip4][..udp] [....192.168.1.2][.2791] -> [....192.168.1.1][...53] + detected: [...174] [ip4][..udp] [....192.168.1.2][.2791] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...138] [ip4][..udp] [....192.168.1.2][..137] -> [..120.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [...141] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [...137] [ip4][..udp] [....192.168.1.2][.2770] -> [....192.168.1.1][...53] + idle: [...140] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2771] [DNS][Network][Acceptable] + idle: [...139] [ip4][..udp] [...192.168.1.57][.2771] -> [....192.168.1.1][...53] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...152] [ip4][..udp] [....192.168.1.6][.5060] -> [..212.242.33.35][.5060] + update: [...143] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.184.1.1][...53] + update: [...144] [ip4][..udp] [....192.168.1.2][.2773] -> [....192.168.1.1][...53] + update: [...145] [ip4][..udp] [....192.168.1.2][.2774] -> [....192.168.1.1][...53] + update: [...148] [ip4][..udp] [....192.168.1.2][.2776] -> [....192.168.1.1][...53] + update: [...150] [ip4][..udp] [...192.168.33.2][.2782] -> [....192.168.1.1][...53] + update: [...151] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2782] [DNS][Network][Acceptable] + update: [...160] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] + update: [...158] [ip4][..udp] [....200.168.1.2][.2785] -> [....192.168.1.1][...53] + update: [...159] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][35721] + new: [...175] [ip4][..udp] [....192.168.1.2][.2791] -> [...192.168.67.1][...53] + detected: [...175] [ip4][..udp] [....192.168.1.2][.2791] -> [...192.168.67.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...176] [ip4][..udp] [....192.168.1.2][.2792] -> [....192.168.1.1][...53] + detected: [...176] [ip4][..udp] [....192.168.1.2][.2792] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...177] [ip4][..udp] [....192.168.1.1][...53] -> [....240.168.1.2][.2792] + detected: [...177] [ip4][..udp] [....192.168.1.1][...53] -> [....240.168.1.2][.2792] [DNS][Network][Acceptable] + RISK: Malformed Packet + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + update: [...117] [ip4][...37] [....192.168.1.1] -> [....192.168.1.2] + update: [...162] [ip4][..udp] [..212.242.33.35][.9587] -> [....192.168.1.2][..196] + update: [....85] [ip4][..240] [....192.168.1.2] -> [....192.168.1.1] + update: [...161] [ip4][..udp] [....192.168.1.2][.2786] -> [....192.168.1.3][...53] + update: [...163] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.3.1][...53] + update: [...164] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.1.1][...53] + idle: [...143] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.184.1.1][...53] + idle: [...142] [ip4][..udp] [....192.168.1.2][.2772] -> [....192.168.1.1][...53] + idle: [...144] [ip4][..udp] [....192.168.1.2][.2773] -> [....192.168.1.1][...53] + idle: [...146] [ip4][..udp] [....192.168.9.2][.2774] -> [....192.168.1.1][...53] + update: [...169] [ip4][..udp] [..212.242.33.35][.5060] -> [...192.37.115.0][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...173] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...152] [ip4][..udp] [....192.168.1.6][.5060] -> [..212.242.33.35][.5060] + update: [...154] [ip4][..udp] [......0.168.1.2][.2783] -> [....192.168.1.1][...53] + update: [...145] [ip4][..udp] [....192.168.1.2][.2774] -> [....192.168.1.1][...53] + update: [...147] [ip4][..udp] [....192.168.1.2][.2775] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...148] [ip4][..udp] [....192.168.1.2][.2776] -> [....192.168.1.1][...53] + update: [...172] [ip4][..udp] [....192.168.1.2][..137] -> [..192.194.1.255][..137] [NetBIOS][System][Acceptable] + update: [...150] [ip4][..udp] [...192.168.33.2][.2782] -> [....192.168.1.1][...53] + update: [...151] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2782] [DNS][Network][Acceptable] + update: [...153] [ip4][..udp] [....192.168.1.2][.2783] -> [....192.168.1.1][...53] + update: [...155] [ip4][..udp] [....192.168.1.2][.2784] -> [....192.168.1.1][...53] + update: [...156] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.5.2][.2784] [DNS][Network][Acceptable] + update: [...160] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] + update: [...165] [ip4][..udp] [....192.168.1.2][.2788] -> [....192.168.1.1][...53] + update: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] + update: [...168] [ip4][..udp] [....192.168.1.2][.2790] -> [....192.168.1.1][...53] + update: [...170] [ip4][..udp] [...192.168.79.2][.2791] -> [....192.168.1.1][...53] + update: [...174] [ip4][..udp] [....192.168.1.2][.2791] -> [....192.168.1.1][...53] + update: [...171] [ip4][..udp] [...192.168.1.53][.2791] -> [....192.168.1.1][...53] + update: [...158] [ip4][..udp] [....200.168.1.2][.2785] -> [....192.168.1.1][...53] + update: [...159] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][35721] + new: [...178] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.112][..137] + detected: [...178] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.112][..137] [NetBIOS][System][Acceptable] + new: [...179] [ip4][..udp] [....192.136.1.2][..137] -> [..192.168.1.255][..137] + detected: [...179] [ip4][..udp] [....192.136.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + guessed: [...152] [ip4][..udp] [....192.168.1.6][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + idle: [...152] [ip4][..udp] [....192.168.1.6][.5060] -> [..212.242.33.35][.5060] + idle: [...145] [ip4][..udp] [....192.168.1.2][.2774] -> [....192.168.1.1][...53] + idle: [...147] [ip4][..udp] [....192.168.1.2][.2775] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...148] [ip4][..udp] [....192.168.1.2][.2776] -> [....192.168.1.1][...53] + idle: [...151] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2782] [DNS][Network][Acceptable] + idle: [...150] [ip4][..udp] [...192.168.33.2][.2782] -> [....192.168.1.1][...53] + update: [...169] [ip4][..udp] [..212.242.33.35][.5060] -> [...192.37.115.0][.5060] [SIP][VoIP][Acceptable] + update: [...149] [ip4][....0] [....192.168.1.2] -> [..192.168.1.255] + update: [...162] [ip4][..udp] [..212.242.33.35][.9587] -> [....192.168.1.2][..196] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...173] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...154] [ip4][..udp] [......0.168.1.2][.2783] -> [....192.168.1.1][...53] + update: [...172] [ip4][..udp] [....192.168.1.2][..137] -> [..192.194.1.255][..137] [NetBIOS][System][Acceptable] + update: [...153] [ip4][..udp] [....192.168.1.2][.2783] -> [....192.168.1.1][...53] + update: [...155] [ip4][..udp] [....192.168.1.2][.2784] -> [....192.168.1.1][...53] + update: [...156] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.5.2][.2784] [DNS][Network][Acceptable] + update: [...160] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] + update: [...161] [ip4][..udp] [....192.168.1.2][.2786] -> [....192.168.1.3][...53] + update: [...163] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.3.1][...53] + update: [...164] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.1.1][...53] + update: [...165] [ip4][..udp] [....192.168.1.2][.2788] -> [....192.168.1.1][...53] + update: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] + update: [...168] [ip4][..udp] [....192.168.1.2][.2790] -> [....192.168.1.1][...53] + update: [...170] [ip4][..udp] [...192.168.79.2][.2791] -> [....192.168.1.1][...53] + update: [...174] [ip4][..udp] [....192.168.1.2][.2791] -> [....192.168.1.1][...53] + update: [...175] [ip4][..udp] [....192.168.1.2][.2791] -> [...192.168.67.1][...53] + update: [...171] [ip4][..udp] [...192.168.1.53][.2791] -> [....192.168.1.1][...53] + update: [...176] [ip4][..udp] [....192.168.1.2][.2792] -> [....192.168.1.1][...53] + update: [...158] [ip4][..udp] [....200.168.1.2][.2785] -> [....192.168.1.1][...53] + update: [...177] [ip4][..udp] [....192.168.1.1][...53] -> [....240.168.1.2][.2792] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...159] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][35721] + update: [...107] [ip4][..118] [....192.168.1.2] -> [..200.68.120.81] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + not-detected: [...162] [ip4][..udp] [..212.242.33.35][.9587] -> [....192.168.1.2][..196] [Unknown][Unrated] + idle: [...162] [ip4][..udp] [..212.242.33.35][.9587] -> [....192.168.1.2][..196] + not-detected: [....85] [ip4][..240] [....192.168.1.2] -> [....192.168.1.1] [Unknown][Unrated] + idle: [....85] [ip4][..240] [....192.168.1.2] -> [....192.168.1.1] + idle: [...154] [ip4][..udp] [......0.168.1.2][.2783] -> [....192.168.1.1][...53] + idle: [...153] [ip4][..udp] [....192.168.1.2][.2783] -> [....192.168.1.1][...53] + idle: [...156] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.5.2][.2784] [DNS][Network][Acceptable] + idle: [...155] [ip4][..udp] [....192.168.1.2][.2784] -> [....192.168.1.1][...53] + idle: [...160] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] + idle: [...161] [ip4][..udp] [....192.168.1.2][.2786] -> [....192.168.1.3][...53] + idle: [...163] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.3.1][...53] + idle: [...158] [ip4][..udp] [....200.168.1.2][.2785] -> [....192.168.1.1][...53] + guessed: [...159] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][35721] [NetBIOS][System][Acceptable] + idle: [...159] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][35721] + update: [...169] [ip4][..udp] [..212.242.33.35][.5060] -> [...192.37.115.0][.5060] [SIP][VoIP][Acceptable] + update: [...166] [ip4][....0] [....192.168.1.1] -> [....192.168.1.2] + update: [...157] [ip4][...19] [....192.168.1.2] -> [....192.168.1.1] + update: [...136] [ip4][..127] [....192.168.1.2] -> [....192.168.1.1] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...179] [ip4][..udp] [....192.136.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...178] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.112][..137] [NetBIOS][System][Acceptable] + update: [...173] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...172] [ip4][..udp] [....192.168.1.2][..137] -> [..192.194.1.255][..137] [NetBIOS][System][Acceptable] + update: [...164] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.1.1][...53] + update: [...165] [ip4][..udp] [....192.168.1.2][.2788] -> [....192.168.1.1][...53] + update: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] + update: [...168] [ip4][..udp] [....192.168.1.2][.2790] -> [....192.168.1.1][...53] + update: [...170] [ip4][..udp] [...192.168.79.2][.2791] -> [....192.168.1.1][...53] + update: [...174] [ip4][..udp] [....192.168.1.2][.2791] -> [....192.168.1.1][...53] + update: [...175] [ip4][..udp] [....192.168.1.2][.2791] -> [...192.168.67.1][...53] + update: [...171] [ip4][..udp] [...192.168.1.53][.2791] -> [....192.168.1.1][...53] + update: [...176] [ip4][..udp] [....192.168.1.2][.2792] -> [....192.168.1.1][...53] + update: [...177] [ip4][..udp] [....192.168.1.1][...53] -> [....240.168.1.2][.2792] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + new: [...180] [ip4][..udp] [...192.168.1.41][..138] -> [..192.168.1.255][..138] + detected: [...180] [ip4][..udp] [...192.168.1.41][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [...181] [ip4][..udp] [.192.184.189.41][..137] -> [..192.168.1.255][..137] + detected: [...181] [ip4][..udp] [.192.184.189.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + new: [...182] [ip4][..udp] [...192.168.1.41][..137] -> [..192.168.1.255][..137] + detected: [...182] [ip4][..udp] [...192.168.1.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + new: [...183] [ip4][..udp] [...192.168.1.41][..137] -> [..107.168.1.255][..137] + detected: [...183] [ip4][..udp] [...192.168.1.41][..137] -> [..107.168.1.255][..137] [NetBIOS][System][Acceptable] + new: [...184] [ip4][..udp] [.....115.0.1.41][..137] -> [..192.168.1.255][..137] + detected: [...184] [ip4][..udp] [.....115.0.1.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + idle: [...164] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.1.1][...53] + idle: [...165] [ip4][..udp] [....192.168.1.2][.2788] -> [....192.168.1.1][...53] + idle: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] + update: [...117] [ip4][...37] [....192.168.1.1] -> [....192.168.1.2] + new: [...185] [ip4][..udp] [...192.168.1.41][..137] -> [.192.168.37.115][..137] + detected: [...185] [ip4][..udp] [...192.168.1.41][..137] -> [.192.168.37.115][..137] [NetBIOS][System][Acceptable] + idle: [...169] [ip4][..udp] [..212.242.33.35][.5060] -> [...192.37.115.0][.5060] [SIP][VoIP][Acceptable] + idle: [...168] [ip4][..udp] [....192.168.1.2][.2790] -> [....192.168.1.1][...53] + idle: [...171] [ip4][..udp] [...192.168.1.53][.2791] -> [....192.168.1.1][...53] + idle: [...170] [ip4][..udp] [...192.168.79.2][.2791] -> [....192.168.1.1][...53] + new: [...186] [ip4][..udp] [....192.168.1.2][43690] -> [192.168.170.170][43690] + new: [...187] [ip4][..udp] [....192.168.1.2][..137] -> [..200.168.1.255][..137] + detected: [...187] [ip4][..udp] [....192.168.1.2][..137] -> [..200.168.1.255][..137] [NetBIOS][System][Acceptable] + not-detected: [...173] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] [Unknown][Unrated] + idle: [...173] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] + idle: [...172] [ip4][..udp] [....192.168.1.2][..137] -> [..192.194.1.255][..137] [NetBIOS][System][Acceptable] + idle: [...175] [ip4][..udp] [....192.168.1.2][.2791] -> [...192.168.67.1][...53] + idle: [...174] [ip4][..udp] [....192.168.1.2][.2791] -> [....192.168.1.1][...53] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...179] [ip4][..udp] [....192.136.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...178] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.112][..137] [NetBIOS][System][Acceptable] + update: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...176] [ip4][..udp] [....192.168.1.2][.2792] -> [....192.168.1.1][...53] + update: [...177] [ip4][..udp] [....192.168.1.1][...53] -> [....240.168.1.2][.2792] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...188] [ip4][..udp] [....192.168.1.2][...68] -> [....192.168.1.1][...67] + detected: [...188] [ip4][..udp] [....192.168.1.2][...68] -> [....192.168.1.1][...67] [DHCP][Network][Acceptable] + new: [...189] [ip4][..udp] [...192.168.1.41][..138] -> [..192.168.1.255][..394] + idle: [....12] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + idle: [...176] [ip4][..udp] [....192.168.1.2][.2792] -> [....192.168.1.1][...53] + idle: [...177] [ip4][..udp] [....192.168.1.1][...53] -> [....240.168.1.2][.2792] [DNS][Network][Acceptable] + RISK: Malformed Packet + not-detected: [...107] [ip4][..118] [....192.168.1.2] -> [..200.68.120.81] [Unknown][Unrated] + idle: [...107] [ip4][..118] [....192.168.1.2] -> [..200.68.120.81] + update: [...183] [ip4][..udp] [...192.168.1.41][..137] -> [..107.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...184] [ip4][..udp] [.....115.0.1.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...181] [ip4][..udp] [.192.184.189.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...182] [ip4][..udp] [...192.168.1.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...185] [ip4][..udp] [...192.168.1.41][..137] -> [.192.168.37.115][..137] [NetBIOS][System][Acceptable] + update: [...180] [ip4][..udp] [...192.168.1.41][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...179] [ip4][..udp] [....192.136.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...178] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.112][..137] [NetBIOS][System][Acceptable] + update: [...187] [ip4][..udp] [....192.168.1.2][..137] -> [..200.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...186] [ip4][..udp] [....192.168.1.2][43690] -> [192.168.170.170][43690] + DAEMON-EVENT: [Processed: 409 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 40 / 189|skipped: 0|!detected: 16|guessed: 10|detection-updates: 55|updates: 489] + new: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] + detected: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + detection-update: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...191] [ip4][..udp] [....192.168.1.2][.2794] -> [..192.168.108.1][...53] + detected: [...191] [ip4][..udp] [....192.168.1.2][.2794] -> [..192.168.108.1][...53] [DNS][Network][Acceptable] + idle: [...178] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.112][..137] [NetBIOS][System][Acceptable] + idle: [...179] [ip4][..udp] [....192.136.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...149] [ip4][....0] [....192.168.1.2] -> [..192.168.1.255] + update: [...188] [ip4][..udp] [....192.168.1.2][...68] -> [....192.168.1.1][...67] [DHCP][Network][Acceptable] + update: [...183] [ip4][..udp] [...192.168.1.41][..137] -> [..107.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...184] [ip4][..udp] [.....115.0.1.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...185] [ip4][..udp] [...192.168.1.41][..137] -> [.192.168.37.115][..137] [NetBIOS][System][Acceptable] + update: [...181] [ip4][..udp] [.192.184.189.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...182] [ip4][..udp] [...192.168.1.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...180] [ip4][..udp] [...192.168.1.41][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [...189] [ip4][..udp] [...192.168.1.41][..138] -> [..192.168.1.255][..394] + new: [...192] [ip4][..udp] [....192.168.1.2][.2795] -> [....192.168.1.1][...53] + detected: [...192] [ip4][..udp] [....192.168.1.2][.2795] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...193] [ip4][..udp] [....192.168.1.2][.2794] -> [....192.168.1.1][...53] + detected: [...193] [ip4][..udp] [....192.168.1.2][.2794] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + detection-update: [...192] [ip4][..udp] [....192.168.1.2][.2795] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...193] [ip4][..udp] [....192.168.1.2][.2794] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...194] [ip4][..udp] [....192.168.1.2][.2796] -> [....192.168.1.1][...53] + detected: [...194] [ip4][..udp] [....192.168.1.2][.2796] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...194] [ip4][..udp] [....192.168.1.2][.2796] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...195] [ip4][..udp] [192.168.170.170][43690] -> [170.170.170.170][43690] + detection-update: [...194] [ip4][..udp] [....192.168.1.2][.2796] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...187] [ip4][..udp] [....192.168.1.2][..137] -> [..200.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...186] [ip4][..udp] [....192.168.1.2][43690] -> [192.168.170.170][43690] + new: [...196] [ip4][..udp] [....192.168.1.2][.2796] -> [..192.168.1.129][...53] + detected: [...196] [ip4][..udp] [....192.168.1.2][.2796] -> [..192.168.1.129][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...197] [ip4][..udp] [....192.168.1.2][.2797] -> [....192.168.1.1][...53] + detected: [...197] [ip4][..udp] [....192.168.1.2][.2797] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...197] [ip4][..udp] [....192.168.1.2][.2797] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...198] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] + detected: [...198] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...199] [ip4][..udp] [....192.168.1.2][.2798] -> [....192.168.1.1][...53] + detected: [...199] [ip4][..udp] [....192.168.1.2][.2798] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...166] [ip4][....0] [....192.168.1.1] -> [....192.168.1.2] + update: [...157] [ip4][...19] [....192.168.1.2] -> [....192.168.1.1] + update: [...136] [ip4][..127] [....192.168.1.2] -> [....192.168.1.1] + update: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + ERROR-EVENT: Unknown packet type + new: [...200] [ip4][..udp] [....192.168.1.2][.2799] -> [....192.168.1.1][...53] + detected: [...200] [ip4][..udp] [....192.168.1.2][.2799] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...201] [ip4][..udp] [....192.168.1.1][...53] -> [..192.168.119.2][.2799] + detected: [...201] [ip4][..udp] [....192.168.1.1][...53] -> [..192.168.119.2][.2799] [DNS][Network][Acceptable] + new: [...202] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...53] + detected: [...202] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...202] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...203] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...21] + ERROR-EVENT: Unknown packet type + update: [...117] [ip4][...37] [....192.168.1.1] -> [....192.168.1.2] + update: [...188] [ip4][..udp] [....192.168.1.2][...68] -> [....192.168.1.1][...67] [DHCP][Network][Acceptable] + update: [...183] [ip4][..udp] [...192.168.1.41][..137] -> [..107.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...184] [ip4][..udp] [.....115.0.1.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...185] [ip4][..udp] [...192.168.1.41][..137] -> [.192.168.37.115][..137] [NetBIOS][System][Acceptable] + update: [...181] [ip4][..udp] [.192.184.189.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...182] [ip4][..udp] [...192.168.1.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...180] [ip4][..udp] [...192.168.1.41][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [...189] [ip4][..udp] [...192.168.1.41][..138] -> [..192.168.1.255][..394] + update: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...191] [ip4][..udp] [....192.168.1.2][.2794] -> [..192.168.108.1][...53] + new: [...204] [ip4][..udp] [....192.168.1.2][.2801] -> [....192.168.1.1][...53] + detected: [...204] [ip4][..udp] [....192.168.1.2][.2801] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...204] [ip4][..udp] [....192.168.1.2][.2801] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...205] [ip4][....0] [....192.168.1.2] -> [..212.242.33.35] + new: [...206] [ip4][..udp] [....192.168.1.2][.2568] -> [....192.168.1.1][...53] + detected: [...206] [ip4][..udp] [....192.168.1.2][.2568] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...207] [ip4][..udp] [....192.168.1.2][.2802] -> [....192.168.1.1][...53] + detected: [...207] [ip4][..udp] [....192.168.1.2][.2802] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...208] [ip4][..udp] [....192.168.1.2][18162] -> [....192.168.1.1][...53] + detected: [...208] [ip4][..udp] [....192.168.1.2][18162] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...195] [ip4][..udp] [192.168.170.170][43690] -> [170.170.170.170][43690] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...187] [ip4][..udp] [....192.168.1.2][..137] -> [..200.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...193] [ip4][..udp] [....192.168.1.2][.2794] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...192] [ip4][..udp] [....192.168.1.2][.2795] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...194] [ip4][..udp] [....192.168.1.2][.2796] -> [....192.168.1.1][...53] + update: [...196] [ip4][..udp] [....192.168.1.2][.2796] -> [..192.168.1.129][...53] + update: [...186] [ip4][..udp] [....192.168.1.2][43690] -> [192.168.170.170][43690] + new: [...209] [ip4][..udp] [....192.168.1.2][.2803] -> [....192.168.1.1][...53] + detected: [...209] [ip4][..udp] [....192.168.1.2][.2803] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...209] [ip4][..udp] [....192.168.1.2][.2803] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...210] [ip4][..udp] [....192.168.1.2][.2804] -> [....192.168.1.1][...53] + detected: [...210] [ip4][..udp] [....192.168.1.2][.2804] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown L3 protocol + detection-update: [...210] [ip4][..udp] [....192.168.1.2][.2804] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...183] [ip4][..udp] [...192.168.1.41][..137] -> [..107.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [...184] [ip4][..udp] [.....115.0.1.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [...181] [ip4][..udp] [.192.184.189.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [...180] [ip4][..udp] [...192.168.1.41][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [...198] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...197] [ip4][..udp] [....192.168.1.2][.2797] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...199] [ip4][..udp] [....192.168.1.2][.2798] -> [....192.168.1.1][...53] + detection-update: [...210] [ip4][..udp] [....192.168.1.2][.2804] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + idle: [...185] [ip4][..udp] [...192.168.1.41][..137] -> [.192.168.37.115][..137] [NetBIOS][System][Acceptable] + new: [...211] [ip4][..udp] [....192.168.1.2][.2805] -> [....192.168.1.1][...51] + new: [...212] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2805] + detected: [...212] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2805] [DNS][Network][Acceptable] + new: [...213] [ip4][..udp] [....192.168.1.2][.2806] -> [....192.168.1.1][...53] + detected: [...213] [ip4][..udp] [....192.168.1.2][.2806] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...213] [ip4][..udp] [....192.168.1.2][.2806] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...213] [ip4][..udp] [....192.168.1.2][.2806] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...213] [ip4][..udp] [....192.168.1.2][.2806] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...213] [ip4][..udp] [....192.168.1.2][.2806] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...182] [ip4][..udp] [...192.168.1.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [...187] [ip4][..udp] [....192.168.1.2][..137] -> [..200.168.1.255][..137] [NetBIOS][System][Acceptable] + not-detected: [...186] [ip4][..udp] [....192.168.1.2][43690] -> [192.168.170.170][43690] [Unknown][Unrated] + idle: [...186] [ip4][..udp] [....192.168.1.2][43690] -> [192.168.170.170][43690] + update: [...188] [ip4][..udp] [....192.168.1.2][...68] -> [....192.168.1.1][...67] [DHCP][Network][Acceptable] + update: [...189] [ip4][..udp] [...192.168.1.41][..138] -> [..192.168.1.255][..394] + update: [...203] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...21] + update: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...191] [ip4][..udp] [....192.168.1.2][.2794] -> [..192.168.108.1][...53] + update: [...200] [ip4][..udp] [....192.168.1.2][.2799] -> [....192.168.1.1][...53] + update: [...201] [ip4][..udp] [....192.168.1.1][...53] -> [..192.168.119.2][.2799] [DNS][Network][Acceptable] + update: [...202] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...53] + ERROR-EVENT: Unknown packet type + new: [...214] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2807] + detected: [...214] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2807] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...215] [ip4][..udp] [....192.168.1.2][.2808] -> [....192.168.1.1][38709] + new: [...216] [ip4][..udp] [....192.168.1.2][.2808] -> [....192.168.1.1][...53] + detected: [...216] [ip4][..udp] [....192.168.1.2][.2808] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...216] [ip4][..udp] [....192.168.1.2][.2808] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...208] [ip4][..udp] [....192.168.1.2][18162] -> [....192.168.1.1][...53] + update: [...195] [ip4][..udp] [192.168.170.170][43690] -> [170.170.170.170][43690] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...206] [ip4][..udp] [....192.168.1.2][.2568] -> [....192.168.1.1][...53] + update: [...193] [ip4][..udp] [....192.168.1.2][.2794] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...192] [ip4][..udp] [....192.168.1.2][.2795] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...194] [ip4][..udp] [....192.168.1.2][.2796] -> [....192.168.1.1][...53] + update: [...196] [ip4][..udp] [....192.168.1.2][.2796] -> [..192.168.1.129][...53] + update: [...204] [ip4][..udp] [....192.168.1.2][.2801] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...207] [ip4][..udp] [....192.168.1.2][.2802] -> [....192.168.1.1][...53] + ERROR-EVENT: Unknown packet type + new: [...217] [ip4][..udp] [....192.168.1.2][19192] -> [....192.168.1.1][...53] + detected: [...217] [ip4][..udp] [....192.168.1.2][19192] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...218] [ip4][..udp] [....192.168.1.2][.2809] -> [....192.168.1.1][...53] + detected: [...218] [ip4][..udp] [....192.168.1.2][.2809] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...218] [ip4][..udp] [....192.168.1.2][.2809] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...219] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][17860] + new: [...220] [ip4][..udp] [....192.170.1.2][.2810] -> [....192.168.1.1][...53] + detected: [...220] [ip4][..udp] [....192.170.1.2][.2810] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...221] [ip4][..udp] [....192.168.1.2][.2810] -> [....192.168.1.1][...53] + detected: [...221] [ip4][..udp] [....192.168.1.2][.2810] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...221] [ip4][..udp] [....192.168.1.2][.2810] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...221] [ip4][..udp] [....192.168.1.2][.2810] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...222] [ip4][..udp] [....128.168.1.2][.2810] -> [....192.168.1.1][...53] + not-detected: [...136] [ip4][..127] [....192.168.1.2] -> [....192.168.1.1] [Unknown][Unrated] + idle: [...136] [ip4][..127] [....192.168.1.2] -> [....192.168.1.1] + idle: [...188] [ip4][..udp] [....192.168.1.2][...68] -> [....192.168.1.1][...67] [DHCP][Network][Acceptable] + guessed: [...189] [ip4][..udp] [...192.168.1.41][..138] -> [..192.168.1.255][..394] [NetBIOS][System][Acceptable] + idle: [...189] [ip4][..udp] [...192.168.1.41][..138] -> [..192.168.1.255][..394] + update: [...198] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...197] [ip4][..udp] [....192.168.1.2][.2797] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...199] [ip4][..udp] [....192.168.1.2][.2798] -> [....192.168.1.1][...53] + update: [...209] [ip4][..udp] [....192.168.1.2][.2803] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...210] [ip4][..udp] [....192.168.1.2][.2804] -> [....192.168.1.1][...53] + new: [...223] [ip4][..udp] [....192.168.1.2][.2811] -> [....192.168.1.1][...53] + detected: [...223] [ip4][..udp] [....192.168.1.2][.2811] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...224] [ip4][..udp] [..192.168.233.1][...53] -> [....192.168.1.2][.2811] + detected: [...224] [ip4][..udp] [..192.168.233.1][...53] -> [....192.168.1.2][.2811] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [...225] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..905] + update: [...149] [ip4][....0] [....192.168.1.2] -> [..192.168.1.255] + update: [...203] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...21] + update: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...191] [ip4][..udp] [....192.168.1.2][.2794] -> [..192.168.108.1][...53] + update: [...200] [ip4][..udp] [....192.168.1.2][.2799] -> [....192.168.1.1][...53] + update: [...201] [ip4][..udp] [....192.168.1.1][...53] -> [..192.168.119.2][.2799] [DNS][Network][Acceptable] + update: [...202] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...53] + update: [...211] [ip4][..udp] [....192.168.1.2][.2805] -> [....192.168.1.1][...51] + update: [...212] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2805] [DNS][Network][Acceptable] + update: [...213] [ip4][..udp] [....192.168.1.2][.2806] -> [....192.168.1.1][...53] + new: [...226] [ip4][..udp] [....192.168.1.2][.2812] -> [....192.168.1.1][...53] + detected: [...226] [ip4][..udp] [....192.168.1.2][.2812] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...226] [ip4][..udp] [....192.168.1.2][.2812] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + idle: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...191] [ip4][..udp] [....192.168.1.2][.2794] -> [..192.168.108.1][...53] + update: [...208] [ip4][..udp] [....192.168.1.2][18162] -> [....192.168.1.1][...53] + update: [...195] [ip4][..udp] [192.168.170.170][43690] -> [170.170.170.170][43690] + update: [...166] [ip4][....0] [....192.168.1.1] -> [....192.168.1.2] + update: [...157] [ip4][...19] [....192.168.1.2] -> [....192.168.1.1] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...198] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...215] [ip4][..udp] [....192.168.1.2][.2808] -> [....192.168.1.1][38709] + update: [...206] [ip4][..udp] [....192.168.1.2][.2568] -> [....192.168.1.1][...53] + update: [...222] [ip4][..udp] [....128.168.1.2][.2810] -> [....192.168.1.1][...53] + update: [...193] [ip4][..udp] [....192.168.1.2][.2794] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...192] [ip4][..udp] [....192.168.1.2][.2795] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...194] [ip4][..udp] [....192.168.1.2][.2796] -> [....192.168.1.1][...53] + update: [...196] [ip4][..udp] [....192.168.1.2][.2796] -> [..192.168.1.129][...53] + update: [...197] [ip4][..udp] [....192.168.1.2][.2797] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...199] [ip4][..udp] [....192.168.1.2][.2798] -> [....192.168.1.1][...53] + update: [...204] [ip4][..udp] [....192.168.1.2][.2801] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...207] [ip4][..udp] [....192.168.1.2][.2802] -> [....192.168.1.1][...53] + update: [...209] [ip4][..udp] [....192.168.1.2][.2803] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...210] [ip4][..udp] [....192.168.1.2][.2804] -> [....192.168.1.1][...53] + update: [...214] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2807] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...216] [ip4][..udp] [....192.168.1.2][.2808] -> [....192.168.1.1][...53] + update: [...217] [ip4][..udp] [....192.168.1.2][19192] -> [....192.168.1.1][...53] + update: [...218] [ip4][..udp] [....192.168.1.2][.2809] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...221] [ip4][..udp] [....192.168.1.2][.2810] -> [....192.168.1.1][...53] + update: [...219] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][17860] + update: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + update: [...220] [ip4][..udp] [....192.170.1.2][.2810] -> [....192.168.1.1][...53] + new: [...227] [ip4][..udp] [....192.168.1.2][.2813] -> [....192.168.1.1][...53] + detected: [...227] [ip4][..udp] [....192.168.1.2][.2813] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...228] [ip4][..udp] [....192.168.1.2][.2814] -> [....192.168.1.1][...53] + detected: [...228] [ip4][..udp] [....192.168.1.2][.2814] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [...229] [ip4][..udp] [....192.168.1.2][29440] -> [...192.168.1.37][..137] + detected: [...229] [ip4][..udp] [....192.168.1.2][29440] -> [...192.168.1.37][..137] [NetBIOS][System][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + detection-update: [...228] [ip4][..udp] [....192.168.1.2][.2814] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + not-detected: [...195] [ip4][..udp] [192.168.170.170][43690] -> [170.170.170.170][43690] [Unknown][Unrated] + idle: [...195] [ip4][..udp] [192.168.170.170][43690] -> [170.170.170.170][43690] + idle: [...193] [ip4][..udp] [....192.168.1.2][.2794] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...192] [ip4][..udp] [....192.168.1.2][.2795] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...196] [ip4][..udp] [....192.168.1.2][.2796] -> [..192.168.1.129][...53] + idle: [...194] [ip4][..udp] [....192.168.1.2][.2796] -> [....192.168.1.1][...53] + update: [...117] [ip4][...37] [....192.168.1.1] -> [....192.168.1.2] + update: [...203] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...21] + update: [...200] [ip4][..udp] [....192.168.1.2][.2799] -> [....192.168.1.1][...53] + update: [...201] [ip4][..udp] [....192.168.1.1][...53] -> [..192.168.119.2][.2799] [DNS][Network][Acceptable] + update: [...202] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...53] + update: [...211] [ip4][..udp] [....192.168.1.2][.2805] -> [....192.168.1.1][...51] + update: [...212] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2805] [DNS][Network][Acceptable] + update: [...213] [ip4][..udp] [....192.168.1.2][.2806] -> [....192.168.1.1][...53] + update: [...223] [ip4][..udp] [....192.168.1.2][.2811] -> [....192.168.1.1][...53] + update: [...224] [ip4][..udp] [..192.168.233.1][...53] -> [....192.168.1.2][.2811] [DNS][Network][Acceptable] + update: [...225] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..905] + new: [...230] [ip4][..udp] [....192.168.1.2][.2815] -> [....192.168.1.1][...53] + detected: [...230] [ip4][..udp] [....192.168.1.2][.2815] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...231] [ip4][..udp] [....192.168.1.2][.2816] -> [....192.168.1.1][...53] + detected: [...231] [ip4][..udp] [....192.168.1.2][.2816] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...232] [ip4][..udp] [....192.168.1.2][.5060] -> [.212.242.33.201][.5060] + detected: [...232] [ip4][..udp] [....192.168.1.2][.5060] -> [.212.242.33.201][.5060] [SIP][VoIP][Acceptable] + detection-update: [...231] [ip4][..udp] [....192.168.1.2][.2816] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...233] [ip4][..udp] [....192.168.1.3][30000] -> [..212.242.33.36][40392] + detected: [...233] [ip4][..udp] [....192.168.1.3][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + new: [...234] [ip4][..udp] [....192.168.1.2][30000] -> [....37.115.0.36][40392] + detected: [...234] [ip4][..udp] [....192.168.1.2][30000] -> [....37.115.0.36][40392] [RTP][Media][Acceptable] + new: [...235] [ip4][..udp] [....192.168.1.2][30000] -> [..212.242.33.36][40392] + detected: [...235] [ip4][..udp] [....192.168.1.2][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + new: [...236] [ip4][..udp] [....192.168.1.2][30000] -> [..214.242.33.36][40392] + detected: [...236] [ip4][..udp] [....192.168.1.2][30000] -> [..214.242.33.36][40392] [RTP][Media][Acceptable] + new: [...237] [ip4][..udp] [.....81.168.1.2][30000] -> [..212.242.33.36][40392] + detected: [...237] [ip4][..udp] [.....81.168.1.2][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + ERROR-EVENT: Unknown packet type + detection-update: [...231] [ip4][..udp] [....192.168.1.2][.2816] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + idle: [...197] [ip4][..udp] [....192.168.1.2][.2797] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...199] [ip4][..udp] [....192.168.1.2][.2798] -> [....192.168.1.1][...53] + update: [...205] [ip4][....0] [....192.168.1.2] -> [..212.242.33.35] + new: [...238] [ip4][..udp] [....192.168.1.2][.2822] -> [....192.168.1.1][...53] + detected: [...238] [ip4][..udp] [....192.168.1.2][.2822] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...239] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.234.33.35][.5060] + detected: [...239] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.234.33.35][.5060] [SIP][VoIP][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...240] [ip4][..udp] [....192.168.1.2][.2823] -> [....192.168.1.1][...53] + detected: [...240] [ip4][..udp] [....192.168.1.2][.2823] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + detection-update: [...240] [ip4][..udp] [....192.168.1.2][.2823] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...240] [ip4][..udp] [....192.168.1.2][.2823] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + not-detected: [...149] [ip4][....0] [....192.168.1.2] -> [..192.168.1.255] [Unknown][Unrated] + idle: [...149] [ip4][....0] [....192.168.1.2] -> [..192.168.1.255] + not-detected: [...203] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...21] [Unknown][Unrated] + idle: [...203] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...21] + idle: [...201] [ip4][..udp] [....192.168.1.1][...53] -> [..192.168.119.2][.2799] [DNS][Network][Acceptable] + idle: [...200] [ip4][..udp] [....192.168.1.2][.2799] -> [....192.168.1.1][...53] + idle: [...202] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...53] + update: [...208] [ip4][..udp] [....192.168.1.2][18162] -> [....192.168.1.1][...53] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...198] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...215] [ip4][..udp] [....192.168.1.2][.2808] -> [....192.168.1.1][38709] + update: [...206] [ip4][..udp] [....192.168.1.2][.2568] -> [....192.168.1.1][...53] + update: [...222] [ip4][..udp] [....128.168.1.2][.2810] -> [....192.168.1.1][...53] + update: [...204] [ip4][..udp] [....192.168.1.2][.2801] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...207] [ip4][..udp] [....192.168.1.2][.2802] -> [....192.168.1.1][...53] + update: [...209] [ip4][..udp] [....192.168.1.2][.2803] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...210] [ip4][..udp] [....192.168.1.2][.2804] -> [....192.168.1.1][...53] + update: [...214] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2807] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...216] [ip4][..udp] [....192.168.1.2][.2808] -> [....192.168.1.1][...53] + update: [...217] [ip4][..udp] [....192.168.1.2][19192] -> [....192.168.1.1][...53] + update: [...218] [ip4][..udp] [....192.168.1.2][.2809] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...221] [ip4][..udp] [....192.168.1.2][.2810] -> [....192.168.1.1][...53] + update: [...226] [ip4][..udp] [....192.168.1.2][.2812] -> [....192.168.1.1][...53] + update: [...219] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][17860] + update: [...220] [ip4][..udp] [....192.170.1.2][.2810] -> [....192.168.1.1][...53] + new: [...241] [ip4][..udp] [....192.168.1.2][.2824] -> [....192.168.1.1][...53] + detected: [...241] [ip4][..udp] [....192.168.1.2][.2824] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...241] [ip4][..udp] [....192.168.1.2][.2824] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...242] [ip4][..udp] [....192.168.1.2][.2825] -> [....192.168.1.1][...53] + detected: [...242] [ip4][..udp] [....192.168.1.2][.2825] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...242] [ip4][..udp] [....192.168.1.2][.2825] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + detection-update: [...242] [ip4][..udp] [....192.168.1.2][.2825] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [...208] [ip4][..udp] [....192.168.1.2][18162] -> [....192.168.1.1][...53] + idle: [...206] [ip4][..udp] [....192.168.1.2][.2568] -> [....192.168.1.1][...53] + idle: [...204] [ip4][..udp] [....192.168.1.2][.2801] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [...207] [ip4][..udp] [....192.168.1.2][.2802] -> [....192.168.1.1][...53] + update: [...211] [ip4][..udp] [....192.168.1.2][.2805] -> [....192.168.1.1][...51] + update: [...212] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2805] [DNS][Network][Acceptable] + update: [...213] [ip4][..udp] [....192.168.1.2][.2806] -> [....192.168.1.1][...53] + update: [...223] [ip4][..udp] [....192.168.1.2][.2811] -> [....192.168.1.1][...53] + update: [...224] [ip4][..udp] [..192.168.233.1][...53] -> [....192.168.1.2][.2811] [DNS][Network][Acceptable] + update: [...227] [ip4][..udp] [....192.168.1.2][.2813] -> [....192.168.1.1][...53] + update: [...228] [ip4][..udp] [....192.168.1.2][.2814] -> [....192.168.1.1][...53] + update: [...229] [ip4][..udp] [....192.168.1.2][29440] -> [...192.168.1.37][..137] [NetBIOS][System][Acceptable] + update: [...225] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..905] + new: [...243] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.255][..138] + detected: [...243] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [...244] [ip4][..udp] [....192.168.1.2][.2826] -> [....192.168.1.1][...53] + detected: [...244] [ip4][..udp] [....192.168.1.2][.2826] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...244] [ip4][..udp] [....192.168.1.2][.2826] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...209] [ip4][..udp] [....192.168.1.2][.2803] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...210] [ip4][..udp] [....192.168.1.2][.2804] -> [....192.168.1.1][...53] + update: [...232] [ip4][..udp] [....192.168.1.2][.5060] -> [.212.242.33.201][.5060] [SIP][VoIP][Acceptable] + update: [...230] [ip4][..udp] [....192.168.1.2][.2815] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...231] [ip4][..udp] [....192.168.1.2][.2816] -> [....192.168.1.1][...53] + update: [...237] [ip4][..udp] [.....81.168.1.2][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + update: [...233] [ip4][..udp] [....192.168.1.3][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + update: [...235] [ip4][..udp] [....192.168.1.2][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + update: [...236] [ip4][..udp] [....192.168.1.2][30000] -> [..214.242.33.36][40392] [RTP][Media][Acceptable] + update: [...234] [ip4][..udp] [....192.168.1.2][30000] -> [....37.115.0.36][40392] [RTP][Media][Acceptable] + new: [...245] [ip4][..udp] [....192.168.1.2][.2827] -> [..192.168.1.114][...53] + detected: [...245] [ip4][..udp] [....192.168.1.2][.2827] -> [..192.168.1.114][...53] [DNS][Network][Acceptable] + new: [...246] [ip4][..udp] [....192.168.1.2][.2827] -> [....192.168.1.1][...53] + detected: [...246] [ip4][..udp] [....192.168.1.2][.2827] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + new: [...247] [ip4][..udp] [....192.168.1.2][.2827] -> [....192.170.1.1][...53] + detected: [...247] [ip4][..udp] [....192.168.1.2][.2827] -> [....192.170.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown L3 protocol + not-detected: [...157] [ip4][...19] [....192.168.1.2] -> [....192.168.1.1] [Unknown][Unrated] + idle: [...157] [ip4][...19] [....192.168.1.2] -> [....192.168.1.1] + not-detected: [...117] [ip4][...37] [....192.168.1.1] -> [....192.168.1.2] [Unknown][Unrated] + idle: [...117] [ip4][...37] [....192.168.1.1] -> [....192.168.1.2] + not-detected: [...211] [ip4][..udp] [....192.168.1.2][.2805] -> [....192.168.1.1][...51] [Unknown][Unrated] + idle: [...211] [ip4][..udp] [....192.168.1.2][.2805] -> [....192.168.1.1][...51] + idle: [...212] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2805] [DNS][Network][Acceptable] + update: [...239] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.234.33.35][.5060] [SIP][VoIP][Acceptable] + update: [...238] [ip4][..udp] [....192.168.1.2][.2822] -> [....192.168.1.1][...53] + update: [...240] [ip4][..udp] [....192.168.1.2][.2823] -> [....192.168.1.1][...53] + new: [...248] [ip4][..udp] [....192.168.1.2][.2828] -> [....192.168.1.1][...53] + detected: [...248] [ip4][..udp] [....192.168.1.2][.2828] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...249] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2572] + detected: [...249] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2572] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...250] [ip4][..udp] [....192.168.1.2][...11] -> [..192.168.1.255][..137] + detected: [...250] [ip4][..udp] [....192.168.1.2][...11] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + new: [...251] [ip4][..udp] [.....62.168.1.2][..137] -> [..192.168.1.255][..137] + detected: [...251] [ip4][..udp] [.....62.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + not-detected: [...215] [ip4][..udp] [....192.168.1.2][.2808] -> [....192.168.1.1][38709] [Unknown][Unrated] + idle: [...215] [ip4][..udp] [....192.168.1.2][.2808] -> [....192.168.1.1][38709] + idle: [...213] [ip4][..udp] [....192.168.1.2][.2806] -> [....192.168.1.1][...53] + idle: [...214] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2807] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [...216] [ip4][..udp] [....192.168.1.2][.2808] -> [....192.168.1.1][...53] + update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [...198] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + update: [...222] [ip4][..udp] [....128.168.1.2][.2810] -> [....192.168.1.1][...53] + update: [...217] [ip4][..udp] [....192.168.1.2][19192] -> [....192.168.1.1][...53] + update: [...218] [ip4][..udp] [....192.168.1.2][.2809] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...221] [ip4][..udp] [....192.168.1.2][.2810] -> [....192.168.1.1][...53] + update: [...226] [ip4][..udp] [....192.168.1.2][.2812] -> [....192.168.1.1][...53] + update: [...241] [ip4][..udp] [....192.168.1.2][.2824] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...242] [ip4][..udp] [....192.168.1.2][.2825] -> [....192.168.1.1][...53] + update: [...219] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][17860] + update: [...220] [ip4][..udp] [....192.170.1.2][.2810] -> [....192.168.1.1][...53] + new: [...252] [ip4][..udp] [....192.168.1.2][.2829] -> [....192.168.1.1][...53] + detected: [...252] [ip4][..udp] [....192.168.1.2][.2829] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...253] [ip4][..udp] [...192.168.54.2][.2829] -> [....192.168.1.1][...53] + detected: [...253] [ip4][..udp] [...192.168.54.2][.2829] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + new: [...254] [ip4][..udp] [....192.168.1.2][.2830] -> [....192.168.1.1][...53] + detected: [...254] [ip4][..udp] [....192.168.1.2][.2830] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...254] [ip4][..udp] [....192.168.1.2][.2830] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...255] [ip4][..udp] [....116.168.1.2][.2829] -> [....192.168.1.1][...53] + detected: [...255] [ip4][..udp] [....116.168.1.2][.2829] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + not-detected: [...166] [ip4][....0] [....192.168.1.1] -> [....192.168.1.2] [Unknown][Unrated] + idle: [...166] [ip4][....0] [....192.168.1.1] -> [....192.168.1.2] + idle: [...217] [ip4][..udp] [....192.168.1.2][19192] -> [....192.168.1.1][...53] + idle: [...218] [ip4][..udp] [....192.168.1.2][.2809] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...221] [ip4][..udp] [....192.168.1.2][.2810] -> [....192.168.1.1][...53] + guessed: [...219] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][17860] [SIP][VoIP][Acceptable] + idle: [...219] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][17860] + idle: [...220] [ip4][..udp] [....192.170.1.2][.2810] -> [....192.168.1.1][...53] + update: [...243] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [...232] [ip4][..udp] [....192.168.1.2][.5060] -> [.212.242.33.201][.5060] [SIP][VoIP][Acceptable] + update: [...223] [ip4][..udp] [....192.168.1.2][.2811] -> [....192.168.1.1][...53] + update: [...224] [ip4][..udp] [..192.168.233.1][...53] -> [....192.168.1.2][.2811] [DNS][Network][Acceptable] + update: [...227] [ip4][..udp] [....192.168.1.2][.2813] -> [....192.168.1.1][...53] + update: [...228] [ip4][..udp] [....192.168.1.2][.2814] -> [....192.168.1.1][...53] + update: [...230] [ip4][..udp] [....192.168.1.2][.2815] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + update: [...231] [ip4][..udp] [....192.168.1.2][.2816] -> [....192.168.1.1][...53] + update: [...244] [ip4][..udp] [....192.168.1.2][.2826] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...229] [ip4][..udp] [....192.168.1.2][29440] -> [...192.168.1.37][..137] [NetBIOS][System][Acceptable] + update: [...225] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..905] + update: [...237] [ip4][..udp] [.....81.168.1.2][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + update: [...233] [ip4][..udp] [....192.168.1.3][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + update: [...235] [ip4][..udp] [....192.168.1.2][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + update: [...236] [ip4][..udp] [....192.168.1.2][30000] -> [..214.242.33.36][40392] [RTP][Media][Acceptable] + update: [...234] [ip4][..udp] [....192.168.1.2][30000] -> [....37.115.0.36][40392] [RTP][Media][Acceptable] + detection-update: [...254] [ip4][..udp] [....192.168.1.2][.2830] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [...256] [ip4][..udp] [....192.168.1.2][.2831] -> [....192.168.1.1][...53] + detected: [...256] [ip4][..udp] [....192.168.1.2][.2831] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [...256] [ip4][..udp] [....192.168.1.2][.2831] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + guessed: [...222] [ip4][..udp] [....128.168.1.2][.2810] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [...222] [ip4][..udp] [....128.168.1.2][.2810] -> [....192.168.1.1][...53] + update: [...245] [ip4][..udp] [....192.168.1.2][.2827] -> [..192.168.1.114][...53] + update: [...246] [ip4][..udp] [....192.168.1.2][.2827] -> [....192.168.1.1][...53] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [...257] [ip4][..udp] [....192.168.1.2][.2832] -> [....192.168.1.1][...53] + detected: [...257] [ip4][..udp] [....192.168.1.2][.2832] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + guessed: [....26] [ip4][..tcp] [..147.234.1.253][...21] -> [......192.2.1.2][.2720] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....26] [ip4][..tcp] [..147.234.1.253][...21] -> [......192.2.1.2][.2720] + guessed: [....43] [ip4][..tcp] [.....37.115.0.2][.2639] -> [..147.234.1.253][...21] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....43] [ip4][..tcp] [.....37.115.0.2][.2639] -> [..147.234.1.253][...21] + guessed: [....38] [ip4][..tcp] [....192.168.1.2][.2720] -> [..147.117.1.253][...21] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....38] [ip4][..tcp] [....192.168.1.2][.2720] -> [..147.117.1.253][...21] + not-detected: [....33] [ip4][..tcp] [..147.234.1.253][.1045] -> [....192.168.1.2][.2720] [Unknown][Unrated] + idle: [....33] [ip4][..tcp] [..147.234.1.253][.1045] -> [....192.168.1.2][.2720] + idle: [...251] [ip4][..udp] [.....62.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [...250] [ip4][..udp] [....192.168.1.2][...11] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + not-detected: [....29] [ip4][..tcp] [..147.234.1.170][43690] -> [170.170.170.170][43690] [Unknown][Unrated] + idle: [....29] [ip4][..tcp] [..147.234.1.170][43690] -> [170.170.170.170][43690] + idle: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [...243] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [...232] [ip4][..udp] [....192.168.1.2][.5060] -> [.212.242.33.201][.5060] [SIP][VoIP][Acceptable] + idle: [...239] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.234.33.35][.5060] [SIP][VoIP][Acceptable] + idle: [...198] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] + not-detected: [...205] [ip4][....0] [....192.168.1.2] -> [..212.242.33.35] [Unknown][Unrated] + idle: [...205] [ip4][....0] [....192.168.1.2] -> [..212.242.33.35] + idle: [...249] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2572] [DNS][Network][Acceptable] + RISK: Malformed Packet + guessed: [....31] [ip4][..tcp] [..147.234.1.253][...21] -> [....192.168.1.2][.2208] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....31] [ip4][..tcp] [..147.234.1.253][...21] -> [....192.168.1.2][.2208] + not-detected: [....42] [ip4][..tcp] [..147.234.1.253][58999] -> [....192.232.1.2][.2721] [Unknown][Unrated] + idle: [....42] [ip4][..tcp] [..147.234.1.253][58999] -> [....192.232.1.2][.2721] + not-detected: [....39] [ip4][..tcp] [....192.168.1.6][.2721] -> [..147.234.1.253][58999] [Unknown][Unrated] + idle: [....39] [ip4][..tcp] [....192.168.1.6][.2721] -> [..147.234.1.253][58999] + idle: [...255] [ip4][..udp] [....116.168.1.2][.2829] -> [....192.168.1.1][...53] + idle: [...224] [ip4][..udp] [..192.168.233.1][...53] -> [....192.168.1.2][.2811] [DNS][Network][Acceptable] + idle: [...223] [ip4][..udp] [....192.168.1.2][.2811] -> [....192.168.1.1][...53] + idle: [...226] [ip4][..udp] [....192.168.1.2][.2812] -> [....192.168.1.1][...53] + idle: [...227] [ip4][..udp] [....192.168.1.2][.2813] -> [....192.168.1.1][...53] + idle: [...228] [ip4][..udp] [....192.168.1.2][.2814] -> [....192.168.1.1][...53] + idle: [...230] [ip4][..udp] [....192.168.1.2][.2815] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [...231] [ip4][..udp] [....192.168.1.2][.2816] -> [....192.168.1.1][...53] + idle: [...238] [ip4][..udp] [....192.168.1.2][.2822] -> [....192.168.1.1][...53] + idle: [...240] [ip4][..udp] [....192.168.1.2][.2823] -> [....192.168.1.1][...53] + idle: [...241] [ip4][..udp] [....192.168.1.2][.2824] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...242] [ip4][..udp] [....192.168.1.2][.2825] -> [....192.168.1.1][...53] + idle: [...244] [ip4][..udp] [....192.168.1.2][.2826] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...246] [ip4][..udp] [....192.168.1.2][.2827] -> [....192.168.1.1][...53] + idle: [...245] [ip4][..udp] [....192.168.1.2][.2827] -> [..192.168.1.114][...53] + idle: [...248] [ip4][..udp] [....192.168.1.2][.2828] -> [....192.168.1.1][...53] + idle: [...253] [ip4][..udp] [...192.168.54.2][.2829] -> [....192.168.1.1][...53] + idle: [...252] [ip4][..udp] [....192.168.1.2][.2829] -> [....192.168.1.1][...53] + idle: [...254] [ip4][..udp] [....192.168.1.2][.2830] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...256] [ip4][..udp] [....192.168.1.2][.2831] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [...257] [ip4][..udp] [....192.168.1.2][.2832] -> [....192.168.1.1][...53] + not-detected: [....40] [ip4][..tcp] [...37.115.0.253][58999] -> [....192.168.1.2][.2721] [Unknown][Unrated] + idle: [....40] [ip4][..tcp] [...37.115.0.253][58999] -> [....192.168.1.2][.2721] + idle: [...229] [ip4][..udp] [....192.168.1.2][29440] -> [...192.168.1.37][..137] [NetBIOS][System][Acceptable] + guessed: [....20] [ip4][..tcp] [...192.168.1.71][.2718] -> [.147.137.21.122][..139] [NetBIOS][System][Acceptable] + idle: [....20] [ip4][..tcp] [...192.168.1.71][.2718] -> [.147.137.21.122][..139] + guessed: [....19] [ip4][..tcp] [....192.168.1.2][.2718] -> [..147.137.21.94][..139] [NetBIOS][System][Acceptable] + idle: [....19] [ip4][..tcp] [....192.168.1.2][.2718] -> [..147.137.21.94][..139] + guessed: [....35] [ip4][..tcp] [..147.234.1.253][...21] -> [.....84.168.1.2][.2720] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....35] [ip4][..tcp] [..147.234.1.253][...21] -> [.....84.168.1.2][.2720] + guessed: [...225] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..905] [NetBIOS][System][Acceptable] + idle: [...225] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..905] + guessed: [....25] [ip4][..tcp] [....192.168.1.2][.2679] -> [..147.234.1.253][...21] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....25] [ip4][..tcp] [....192.168.1.2][.2679] -> [..147.234.1.253][...21] + not-detected: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] [Unknown][Unrated] + idle: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + guessed: [....36] [ip4][..tcp] [....192.112.1.2][.2720] -> [..147.234.1.253][...21] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....36] [ip4][..tcp] [....192.112.1.2][.2720] -> [..147.234.1.253][...21] + not-detected: [....30] [ip4][..tcp] [..147.234.1.249][.2069] -> [....192.168.1.2][.2720] [Unknown][Unrated] + idle: [....30] [ip4][..tcp] [..147.234.1.249][.2069] -> [....192.168.1.2][.2720] + guessed: [....27] [ip4][..tcp] [..147.234.1.253][...21] -> [...192.168.1.66][.2720] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....27] [ip4][..tcp] [..147.234.1.253][...21] -> [...192.168.1.66][.2720] + guessed: [....34] [ip4][..tcp] [..147.234.1.253][...21] -> [...192.168.65.2][.2720] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....34] [ip4][..tcp] [..147.234.1.253][...21] -> [...192.168.65.2][.2720] + guessed: [....32] [ip4][..tcp] [..147.234.1.253][...21] -> [....192.168.1.2][.2732] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....32] [ip4][..tcp] [..147.234.1.253][...21] -> [....192.168.1.2][.2732] + idle: [...237] [ip4][..udp] [.....81.168.1.2][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + not-detected: [....28] [ip4][..tcp] [..147.234.1.253][..120] -> [....192.168.1.2][.2720] [Unknown][Unrated] + idle: [....28] [ip4][..tcp] [..147.234.1.253][..120] -> [....192.168.1.2][.2720] + idle: [...235] [ip4][..udp] [....192.168.1.2][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + idle: [...233] [ip4][..udp] [....192.168.1.3][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + idle: [...236] [ip4][..udp] [....192.168.1.2][30000] -> [..214.242.33.36][40392] [RTP][Media][Acceptable] + guessed: [....18] [ip4][..tcp] [....192.168.1.2][.2717] -> [..147.137.21.94][..445] [SMBv23][System][Acceptable] + idle: [....18] [ip4][..tcp] [....192.168.1.2][.2717] -> [..147.137.21.94][..445] + idle: [...247] [ip4][..udp] [....192.168.1.2][.2827] -> [....192.170.1.1][...53] + idle: [...234] [ip4][..udp] [....192.168.1.2][30000] -> [....37.115.0.36][40392] [RTP][Media][Acceptable] + guessed: [....24] [ip4][..tcp] [..147.234.1.253][...21] -> [....192.169.1.2][.2720] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....24] [ip4][..tcp] [..147.234.1.253][...21] -> [....192.169.1.2][.2720] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/fuzz-2006-09-29-28586.pcap.out b/test/results/flow-info/fuzz-2006-09-29-28586.pcap.out new file mode 100644 index 000000000..d09679cfd --- /dev/null +++ b/test/results/flow-info/fuzz-2006-09-29-28586.pcap.out @@ -0,0 +1,138 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + new: [.....1] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2600] [MIDSTREAM] + ERROR-EVENT: Unknown packet type + new: [.....2] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2601] + detected: [.....2] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2601] [HTTP][Web][Acceptable] + new: [.....3] [ip4][..tcp] [....172.20.3.13][...81] -> [.....172.20.3.5][.2601] [MIDSTREAM] + new: [.....4] [ip4][..tcp] [......0.20.3.13][...80] -> [.....172.20.3.5][.2601] [MIDSTREAM] + ERROR-EVENT: Unknown packet type + new: [.....5] [ip4][..tcp] [....172.20.3.13][53132] -> [.....172.20.3.5][...80] + new: [.....6] [ip4][..tcp] [.....172.20.3.1][...80] -> [....172.20.3.13][53132] [MIDSTREAM] + detected: [.....6] [ip4][..tcp] [.....172.20.3.1][...80] -> [....172.20.3.13][53132] [HTTP][Web][Acceptable] + new: [.....7] [ip4][..tcp] [.....172.20.3.5][...80] -> [....172.57.3.13][53132] [MIDSTREAM] + new: [.....8] [ip4][..tcp] [......172.6.3.5][...80] -> [....172.20.3.13][53132] [MIDSTREAM] + new: [.....9] [ip4][..tcp] [.....172.20.3.5][.2602] -> [....172.21.3.13][...80] + ERROR-EVENT: Unknown packet type + new: [....10] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + new: [....11] [ip4][..tcp] [.....172.20.3.5][.2602] -> [....172.20.3.13][...80] [MIDSTREAM] + detected: [....11] [ip4][..tcp] [.....172.20.3.5][.2602] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [....12] [ip4][..tcp] [....172.20.3.88][...80] -> [....172.20.3.82][.2601] [MIDSTREAM] + new: [....13] [ip4][..tcp] [.....172.20.3.5][.2603] -> [....172.20.3.13][...80] + new: [....14] [ip4][..tcp] [.....172.20.3.5][.2603] -> [....172.20.3.77][...80] [MIDSTREAM] + new: [....15] [ip4][..tcp] [.....172.20.3.5][.2603] -> [.....72.20.3.13][...80] [MIDSTREAM] + new: [....16] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.82.5][.2603] [MIDSTREAM] + new: [....17] [ip4][..tcp] [.....172.20.3.5][.2603] -> [....68.37.115.0][...80] [MIDSTREAM] + new: [....18] [ip4][..tcp] [.....172.20.3.5][.2604] -> [....172.20.3.13][...80] + detected: [....18] [ip4][..tcp] [.....172.20.3.5][.2604] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + ERROR-EVENT: Unknown packet type + new: [....19] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.68.5][.2604] [MIDSTREAM] + new: [....20] [ip4][..tcp] [.....172.20.3.5][.2605] -> [....172.20.3.13][...80] + detected: [....20] [ip4][..tcp] [.....172.20.3.5][.2605] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [....21] [ip4][..tcp] [......51.20.3.5][.2605] -> [....172.20.3.13][...80] [MIDSTREAM] + new: [....22] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.76.5][65069] [MIDSTREAM] + new: [....23] [ip4][..tcp] [....172.20.3.13][...80] -> [......44.20.3.5][.2605] [MIDSTREAM] + detected: [....23] [ip4][..tcp] [....172.20.3.13][...80] -> [......44.20.3.5][.2605] [HTTP][Web][Acceptable] + ERROR-EVENT: Unknown L3 protocol + new: [....24] [ip4][..tcp] [170.170.170.170][43690] -> [170.170.170.170][43690] + new: [....25] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2639] [MIDSTREAM] + new: [....26] [ip4][..tcp] [....172.52.3.13][...80] -> [.....172.20.3.5][.2093] [MIDSTREAM] + new: [....27] [ip4][..tcp] [.....172.20.3.5][.2606] -> [....172.20.3.13][...80] + detected: [....27] [ip4][..tcp] [.....172.20.3.5][.2606] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + ERROR-EVENT: Unknown L3 protocol + new: [....28] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.72.5][.2606] [MIDSTREAM] + detected: [....28] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.72.5][.2606] [HTTP][Web][Acceptable] + detection-update: [....27] [ip4][..tcp] [.....172.20.3.5][.2606] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [....29] [ip4][..tcp] [.....172.20.3.5][.2607] -> [....172.20.3.13][...80] + new: [....30] [ip4][..tcp] [.....172.20.3.5][.9587] -> [....172.20.3.13][...80] [MIDSTREAM] + detected: [....30] [ip4][..tcp] [.....172.20.3.5][.9587] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable] + new: [....31] [ip4][..tcp] [....172.20.2.13][...80] -> [.....172.20.3.5][.2607] [MIDSTREAM] + detected: [....31] [ip4][..tcp] [....172.20.2.13][...80] -> [.....172.20.3.5][.2607] [HTTP][Web][Acceptable] + new: [....32] [ip4][..tcp] [....172.20.3.13][53193] -> [.....172.20.3.5][...80] + new: [....33] [ip4][..tcp] [.....172.20.3.5][...80] -> [...172.20.35.13][53136] + new: [....34] [ip4][..tcp] [....172.20.3.13][53136] -> [.....172.20.3.5][...80] [MIDSTREAM] + detected: [....34] [ip4][..tcp] [....172.20.3.13][53136] -> [.....172.20.3.5][...80] [HTTP][Web][Acceptable] + new: [....35] [ip4][..tcp] [....172.20.3.13][53136] -> [.....172.70.3.5][...80] [MIDSTREAM] + new: [....36] [ip4][..tcp] [...172.20.67.13][53136] -> [.....172.20.3.5][...80] [MIDSTREAM] + ERROR-EVENT: Unknown packet type + new: [....37] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2608] + detected: [....37] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2608] [HTTP][Web][Acceptable] + new: [....38] [ip4][..tcp] [....172.20.3.13][...80] -> [...172.20.148.5][.2608] [MIDSTREAM] + new: [....39] [ip4][..115] [....172.20.3.13] -> [.....172.20.3.5] + idle: [.....6] [ip4][..tcp] [.....172.20.3.1][...80] -> [....172.20.3.13][53132] + guessed: [.....5] [ip4][..tcp] [....172.20.3.13][53132] -> [.....172.20.3.5][...80] [HTTP][Web][Acceptable] + end: [.....5] [ip4][..tcp] [....172.20.3.13][53132] -> [.....172.20.3.5][...80] + guessed: [....36] [ip4][..tcp] [...172.20.67.13][53136] -> [.....172.20.3.5][...80] [HTTP][Web][Acceptable] + idle: [....36] [ip4][..tcp] [...172.20.67.13][53136] -> [.....172.20.3.5][...80] + end: [....34] [ip4][..tcp] [....172.20.3.13][53136] -> [.....172.20.3.5][...80] [HTTP][Web][Acceptable] + guessed: [....33] [ip4][..tcp] [.....172.20.3.5][...80] -> [...172.20.35.13][53136] [HTTP][Web][Acceptable] + idle: [....33] [ip4][..tcp] [.....172.20.3.5][...80] -> [...172.20.35.13][53136] + guessed: [....32] [ip4][..tcp] [....172.20.3.13][53193] -> [.....172.20.3.5][...80] [HTTP][Web][Acceptable] + idle: [....32] [ip4][..tcp] [....172.20.3.13][53193] -> [.....172.20.3.5][...80] + not-detected: [....39] [ip4][..115] [....172.20.3.13] -> [.....172.20.3.5] [Unknown][Unrated] + idle: [....39] [ip4][..115] [....172.20.3.13] -> [.....172.20.3.5] + guessed: [....26] [ip4][..tcp] [....172.52.3.13][...80] -> [.....172.20.3.5][.2093] [HTTP][Web][Acceptable] + end: [....26] [ip4][..tcp] [....172.52.3.13][...80] -> [.....172.20.3.5][.2093] + not-detected: [....24] [ip4][..tcp] [170.170.170.170][43690] -> [170.170.170.170][43690] [Unknown][Unrated] + idle: [....24] [ip4][..tcp] [170.170.170.170][43690] -> [170.170.170.170][43690] + guessed: [.....4] [ip4][..tcp] [......0.20.3.13][...80] -> [.....172.20.3.5][.2601] [HTTP][Web][Acceptable] + idle: [.....4] [ip4][..tcp] [......0.20.3.13][...80] -> [.....172.20.3.5][.2601] + guessed: [.....8] [ip4][..tcp] [......172.6.3.5][...80] -> [....172.20.3.13][53132] [HTTP][Web][Acceptable] + idle: [.....8] [ip4][..tcp] [......172.6.3.5][...80] -> [....172.20.3.13][53132] + guessed: [....35] [ip4][..tcp] [....172.20.3.13][53136] -> [.....172.70.3.5][...80] [HTTP.Cloudflare][Web][Acceptable] + idle: [....35] [ip4][..tcp] [....172.20.3.13][53136] -> [.....172.70.3.5][...80] + idle: [....23] [ip4][..tcp] [....172.20.3.13][...80] -> [......44.20.3.5][.2605] + guessed: [....21] [ip4][..tcp] [......51.20.3.5][.2605] -> [....172.20.3.13][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [....21] [ip4][..tcp] [......51.20.3.5][.2605] -> [....172.20.3.13][...80] + guessed: [....15] [ip4][..tcp] [.....172.20.3.5][.2603] -> [.....72.20.3.13][...80] [HTTP][Web][Acceptable] + end: [....15] [ip4][..tcp] [.....172.20.3.5][.2603] -> [.....72.20.3.13][...80] + guessed: [.....1] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2600] [HTTP][Web][Acceptable] + end: [.....1] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2600] + guessed: [....12] [ip4][..tcp] [....172.20.3.88][...80] -> [....172.20.3.82][.2601] [HTTP][Web][Acceptable] + idle: [....12] [ip4][..tcp] [....172.20.3.88][...80] -> [....172.20.3.82][.2601] + end: [.....2] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2601] + end: [....11] [ip4][..tcp] [.....172.20.3.5][.2602] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + not-detected: [.....3] [ip4][..tcp] [....172.20.3.13][...81] -> [.....172.20.3.5][.2601] [Unknown][Unrated] + idle: [.....3] [ip4][..tcp] [....172.20.3.13][...81] -> [.....172.20.3.5][.2601] + guessed: [....16] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.82.5][.2603] [HTTP][Web][Acceptable] + idle: [....16] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.82.5][.2603] + guessed: [....14] [ip4][..tcp] [.....172.20.3.5][.2603] -> [....172.20.3.77][...80] [HTTP][Web][Acceptable] + idle: [....14] [ip4][..tcp] [.....172.20.3.5][.2603] -> [....172.20.3.77][...80] + guessed: [....13] [ip4][..tcp] [.....172.20.3.5][.2603] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable] + end: [....13] [ip4][..tcp] [.....172.20.3.5][.2603] -> [....172.20.3.13][...80] + guessed: [....19] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.68.5][.2604] [HTTP][Web][Acceptable] + end: [....19] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.68.5][.2604] + end: [....18] [ip4][..tcp] [.....172.20.3.5][.2604] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + end: [....20] [ip4][..tcp] [.....172.20.3.5][.2605] -> [....172.20.3.13][...80] + idle: [....28] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.72.5][.2606] + end: [....27] [ip4][..tcp] [.....172.20.3.5][.2606] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + idle: [....31] [ip4][..tcp] [....172.20.2.13][...80] -> [.....172.20.3.5][.2607] + guessed: [....29] [ip4][..tcp] [.....172.20.3.5][.2607] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable] + idle: [....29] [ip4][..tcp] [.....172.20.3.5][.2607] -> [....172.20.3.13][...80] + guessed: [....38] [ip4][..tcp] [....172.20.3.13][...80] -> [...172.20.148.5][.2608] [HTTP][Web][Acceptable] + idle: [....38] [ip4][..tcp] [....172.20.3.13][...80] -> [...172.20.148.5][.2608] + idle: [....37] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2608] + guessed: [....25] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2639] [HTTP][Web][Acceptable] + idle: [....25] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2639] + guessed: [....17] [ip4][..tcp] [.....172.20.3.5][.2603] -> [....68.37.115.0][...80] [HTTP][Web][Acceptable] + idle: [....17] [ip4][..tcp] [.....172.20.3.5][.2603] -> [....68.37.115.0][...80] + guessed: [.....9] [ip4][..tcp] [.....172.20.3.5][.2602] -> [....172.21.3.13][...80] [HTTP][Web][Acceptable] + idle: [.....9] [ip4][..tcp] [.....172.20.3.5][.2602] -> [....172.21.3.13][...80] + not-detected: [....10] [ip4][..170] [170.170.170.170] -> [170.170.170.170] [Unknown][Unrated] + idle: [....10] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + guessed: [.....7] [ip4][..tcp] [.....172.20.3.5][...80] -> [....172.57.3.13][53132] [HTTP][Web][Acceptable] + idle: [.....7] [ip4][..tcp] [.....172.20.3.5][...80] -> [....172.57.3.13][53132] + idle: [....30] [ip4][..tcp] [.....172.20.3.5][.9587] -> [....172.20.3.13][...80] + guessed: [....22] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.76.5][65069] [HTTP][Web][Acceptable] + idle: [....22] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.76.5][65069] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/fuzz-2020-02-16-11740.pcap.out b/test/results/flow-info/fuzz-2020-02-16-11740.pcap.out new file mode 100644 index 000000000..0aa90ad6e --- /dev/null +++ b/test/results/flow-info/fuzz-2020-02-16-11740.pcap.out @@ -0,0 +1,454 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....10.12.64.30][29200] -> [..108.226.25.53][.1812] + detected: [.....1] [ip4][..udp] [....10.12.64.30][29200] -> [..108.226.25.53][.1812] [Radius][Network][Acceptable] + new: [.....2] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.102.64.30][29200] + detected: [.....2] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.102.64.30][29200] [Radius][Network][Acceptable] + new: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] + detected: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown packet type + new: [.....4] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1796] + idle: [.....2] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.102.64.30][29200] [Radius][Network][Acceptable] + idle: [.....1] [ip4][..udp] [....10.12.64.30][29200] -> [..108.226.25.53][.1812] [Radius][Network][Acceptable] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [.....5] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] + detected: [.....5] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown packet type + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [.....4] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1796] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown L3 protocol + new: [.....6] [ip4][..udp] [..198.226.25.53][30764] -> [....10.12.64.30][12344] + DAEMON-EVENT: [Processed: 12 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 3] + new: [.....7] [ip4][..udp] [198.226.170.170][43690] -> [170.170.170.170][43690] + new: [.....8] [ip4][..udp] [.....10.4.64.30][29200] -> [..198.226.25.53][.1812] + detected: [.....8] [ip4][..udp] [.....10.4.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [.....9] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29270] + detected: [.....9] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29270] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [.....5] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] + update: [.....6] [ip4][..udp] [..198.226.25.53][30764] -> [....10.12.64.30][12344] + update: [.....4] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1796] + new: [....10] [ip4][..udp] [..198.226.25.53][..309] -> [....10.12.64.30][12339] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + not-detected: [.....4] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1796] [Unknown][Unrated] + idle: [.....4] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1796] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [.....8] [ip4][..udp] [.....10.4.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [.....5] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] + update: [.....9] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29270] [Radius][Network][Acceptable] + update: [.....7] [ip4][..udp] [198.226.170.170][43690] -> [170.170.170.170][43690] + update: [.....6] [ip4][..udp] [..198.226.25.53][30764] -> [....10.12.64.30][12344] + not-detected: [.....6] [ip4][..udp] [..198.226.25.53][30764] -> [....10.12.64.30][12344] [Unknown][Unrated] + idle: [.....6] [ip4][..udp] [..198.226.25.53][30764] -> [....10.12.64.30][12344] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [.....8] [ip4][..udp] [.....10.4.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [.....5] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] + update: [....10] [ip4][..udp] [..198.226.25.53][..309] -> [....10.12.64.30][12339] + update: [.....9] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29270] [Radius][Network][Acceptable] + update: [.....7] [ip4][..udp] [198.226.170.170][43690] -> [170.170.170.170][43690] + new: [....11] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] + new: [....12] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29264] + detected: [....12] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29264] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown packet type + idle: [.....8] [ip4][..udp] [.....10.4.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + not-detected: [....10] [ip4][..udp] [..198.226.25.53][..309] -> [....10.12.64.30][12339] [Unknown][Unrated] + idle: [....10] [ip4][..udp] [..198.226.25.53][..309] -> [....10.12.64.30][12339] + idle: [.....9] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29270] [Radius][Network][Acceptable] + not-detected: [.....7] [ip4][..udp] [198.226.170.170][43690] -> [170.170.170.170][43690] [Unknown][Unrated] + idle: [.....7] [ip4][..udp] [198.226.170.170][43690] -> [170.170.170.170][43690] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [.....5] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + idle: [.....5] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] + analyse: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.155| 612.411| 61.128| 140.850] + [IAT(c->s)...: 0.187| 612.411| 55.957| 151.358][IAT(s->c)...: 0.155| 452.628| 67.407| 126.643] + [PKTLEN(c->s): 697.000| 745.000| 723.000| 21.900][PKTLEN(s->c): 179.000| 318.000| 227.400| 45.200] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,4,3,5,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + ERROR-EVENT: Unknown L3 protocol + new: [....13] [ip4][..udp] [..198.162.25.53][.1810] -> [....10.12.64.30][29200] + ERROR-EVENT: Unknown packet type + update: [....12] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29264] [Radius][Network][Acceptable] + update: [....11] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] + new: [....14] [ip4][..udp] [..198.226.25.53][.1812] -> [....74.12.64.30][29200] + detected: [....14] [ip4][..udp] [..198.226.25.53][.1812] -> [....74.12.64.30][29200] [Radius][Network][Acceptable] + new: [....15] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.77.53][.1812] + detected: [....15] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.77.53][.1812] [Radius][Network][Acceptable] + new: [....16] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] + detected: [....16] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....17] [ip4][...88] [..198.226.25.53] -> [....10.12.64.30] + new: [....18] [ip4][..254] [....10.12.64.30] -> [..198.226.25.53] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + update: [....13] [ip4][..udp] [..198.162.25.53][.1810] -> [....10.12.64.30][29200] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....15] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.77.53][.1812] [Radius][Network][Acceptable] + update: [....16] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + update: [....14] [ip4][..udp] [..198.226.25.53][.1812] -> [....74.12.64.30][29200] [Radius][Network][Acceptable] + update: [....12] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29264] [Radius][Network][Acceptable] + update: [....11] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] + ERROR-EVENT: Unknown packet type + new: [....19] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.120.30][29200] + new: [....20] [ip4][..udp] [....10.12.64.30][29200] -> [..206.226.25.53][.1812] + detected: [....20] [ip4][..udp] [....10.12.64.30][29200] -> [..206.226.25.53][.1812] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown packet type + new: [....21] [ip4][..udp] [..198.157.25.53][.1812] -> [....10.12.64.30][29200] + detected: [....21] [ip4][..udp] [..198.157.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + not-detected: [....13] [ip4][..udp] [..198.162.25.53][.1810] -> [....10.12.64.30][29200] [Unknown][Unrated] + idle: [....13] [ip4][..udp] [..198.162.25.53][.1810] -> [....10.12.64.30][29200] + idle: [....12] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29264] [Radius][Network][Acceptable] + not-detected: [....11] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] [Unknown][Unrated] + idle: [....11] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....15] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.77.53][.1812] [Radius][Network][Acceptable] + update: [....16] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + update: [....19] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.120.30][29200] + update: [....14] [ip4][..udp] [..198.226.25.53][.1812] -> [....74.12.64.30][29200] [Radius][Network][Acceptable] + new: [....22] [ip4][..udp] [..198.230.25.62][.1812] -> [....10.12.64.30][29200] + detected: [....22] [ip4][..udp] [..198.230.25.62][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + new: [....23] [ip4][...85] [..198.226.25.62] -> [....10.12.64.30] + new: [....24] [ip4][..udp] [..198.226.82.53][.1812] -> [....10.12.64.30][29200] + detected: [....24] [ip4][..udp] [..198.226.82.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....25] [ip4][..udp] [..198.226.25.53][.1895] -> [....10.12.64.30][29200] + new: [....26] [ip4][..udp] [....10.12.64.30][30224] -> [..198.226.25.53][.1812] + detected: [....26] [ip4][..udp] [....10.12.64.30][30224] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....27] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.56.64.30][.9472] + detected: [....27] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.56.64.30][.9472] [Radius][Network][Acceptable] + idle: [....15] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.77.53][.1812] [Radius][Network][Acceptable] + idle: [....14] [ip4][..udp] [..198.226.25.53][.1812] -> [....74.12.64.30][29200] [Radius][Network][Acceptable] + update: [....20] [ip4][..udp] [....10.12.64.30][29200] -> [..206.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....17] [ip4][...88] [..198.226.25.53] -> [....10.12.64.30] + update: [....18] [ip4][..254] [....10.12.64.30] -> [..198.226.25.53] + DAEMON-EVENT: [Processed: 104 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 13 / 27|skipped: 0|!detected: 6|guessed: 0|detection-updates: 0|updates: 39] + new: [....28] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.28.64.30][29200] + detected: [....28] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.28.64.30][29200] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....16] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + update: [....19] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.120.30][29200] + update: [....21] [ip4][..udp] [..198.157.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....29] [ip4][..udp] [....10.12.64.30][29200] -> [..198.224.25.53][.1812] + detected: [....29] [ip4][..udp] [....10.12.64.30][29200] -> [..198.224.25.53][.1812] [Radius][Network][Acceptable] + update: [....24] [ip4][..udp] [..198.226.82.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [....20] [ip4][..udp] [....10.12.64.30][29200] -> [..206.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....25] [ip4][..udp] [..198.226.25.53][.1895] -> [....10.12.64.30][29200] + update: [....22] [ip4][..udp] [..198.230.25.62][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [....26] [ip4][..udp] [....10.12.64.30][30224] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....27] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.56.64.30][.9472] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown packet type + new: [....30] [ip4][..udp] [..198.226.25.53][.1812] -> [.....10.12.37.0][29200] + detected: [....30] [ip4][..udp] [..198.226.25.53][.1812] -> [.....10.12.37.0][29200] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown L3 protocol + new: [....31] [ip4][..udp] [...10.12.64.110][29200] -> [..198.226.25.53][.1812] + detected: [....31] [ip4][..udp] [...10.12.64.110][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....32] [ip4][..udp] [...72.226.25.53][.1812] -> [....10.12.64.30][29200] + detected: [....32] [ip4][..udp] [...72.226.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + guessed: [....19] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.120.30][29200] [Radius][Network][Acceptable] + idle: [....19] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.120.30][29200] + idle: [....20] [ip4][..udp] [....10.12.64.30][29200] -> [..206.226.25.53][.1812] [Radius][Network][Acceptable] + idle: [....21] [ip4][..udp] [..198.157.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....16] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + update: [....24] [ip4][..udp] [..198.226.82.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [....28] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.28.64.30][29200] [Radius][Network][Acceptable] + update: [....25] [ip4][..udp] [..198.226.25.53][.1895] -> [....10.12.64.30][29200] + update: [....22] [ip4][..udp] [..198.230.25.62][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [....26] [ip4][..udp] [....10.12.64.30][30224] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....29] [ip4][..udp] [....10.12.64.30][29200] -> [..198.224.25.53][.1812] [Radius][Network][Acceptable] + update: [....27] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.56.64.30][.9472] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [....33] [ip4][..udp] [....10.12.64.30][29200] -> [...198.226.37.0][.1812] + detected: [....33] [ip4][..udp] [....10.12.64.30][29200] -> [...198.226.37.0][.1812] [Radius][Network][Acceptable] + idle: [....28] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.28.64.30][29200] [Radius][Network][Acceptable] + idle: [....24] [ip4][..udp] [..198.226.82.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + idle: [....16] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + not-detected: [....25] [ip4][..udp] [..198.226.25.53][.1895] -> [....10.12.64.30][29200] [Unknown][Unrated] + idle: [....25] [ip4][..udp] [..198.226.25.53][.1895] -> [....10.12.64.30][29200] + idle: [....26] [ip4][..udp] [....10.12.64.30][30224] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + idle: [....22] [ip4][..udp] [..198.230.25.62][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + idle: [....27] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.56.64.30][.9472] [Radius][Network][Acceptable] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....30] [ip4][..udp] [..198.226.25.53][.1812] -> [.....10.12.37.0][29200] [Radius][Network][Acceptable] + update: [....31] [ip4][..udp] [...10.12.64.110][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....29] [ip4][..udp] [....10.12.64.30][29200] -> [..198.224.25.53][.1812] [Radius][Network][Acceptable] + update: [....23] [ip4][...85] [..198.226.25.62] -> [....10.12.64.30] + update: [....17] [ip4][...88] [..198.226.25.53] -> [....10.12.64.30] + update: [....32] [ip4][..udp] [...72.226.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [....18] [ip4][..254] [....10.12.64.30] -> [..198.226.25.53] + new: [....34] [ip4][..112] [....10.12.64.30] -> [..198.226.25.53] + detected: [....34] [ip4][..112] [....10.12.64.30] -> [..198.226.25.53] [VRRP][Network][Acceptable] + ERROR-EVENT: Unknown packet type + idle: [....31] [ip4][..udp] [...10.12.64.110][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + idle: [....30] [ip4][..udp] [..198.226.25.53][.1812] -> [.....10.12.37.0][29200] [Radius][Network][Acceptable] + idle: [....29] [ip4][..udp] [....10.12.64.30][29200] -> [..198.224.25.53][.1812] [Radius][Network][Acceptable] + idle: [....32] [ip4][..udp] [...72.226.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....33] [ip4][..udp] [....10.12.64.30][29200] -> [...198.226.37.0][.1812] [Radius][Network][Acceptable] + update: [....23] [ip4][...85] [..198.226.25.62] -> [....10.12.64.30] + update: [....17] [ip4][...88] [..198.226.25.53] -> [....10.12.64.30] + update: [....18] [ip4][..254] [....10.12.64.30] -> [..198.226.25.53] + new: [....35] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] + detected: [....35] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + new: [....36] [ip4][..udp] [.....37.0.25.62][.1812] -> [....10.12.64.30][29200] + detected: [....36] [ip4][..udp] [.....37.0.25.62][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....37] [ip4][..udp] [..198.226.25.62][.1812] -> [.....10.12.37.0][29200] + detected: [....37] [ip4][..udp] [..198.226.25.62][.1812] -> [.....10.12.37.0][29200] [Radius][Network][Acceptable] + new: [....38] [ip4][..udp] [..198.226.25.62][.1812] -> [....10.12.64.30][29295] + detected: [....38] [ip4][..udp] [..198.226.25.62][.1812] -> [....10.12.64.30][29295] [Radius][Network][Acceptable] + new: [....39] [ip4][..udp] [....10.12.64.30][29304] -> [..198.226.25.53][.1812] + detected: [....39] [ip4][..udp] [....10.12.64.30][29304] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....40] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + idle: [....33] [ip4][..udp] [....10.12.64.30][29200] -> [...198.226.37.0][.1812] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown L3 protocol + new: [....41] [ip4][..udp] [..198.226.25.53][.1812] -> [..10.12.172.158][29200] + detected: [....41] [ip4][..udp] [..198.226.25.53][.1812] -> [..10.12.172.158][29200] [Radius][Network][Acceptable] + new: [....42] [ip4][..udp] [....10.12.64.30][29200] -> [..198.119.25.53][.1812] + new: [....43] [ip4][..udp] [..198.226.25.53][.1965] -> [....10.12.64.30][29200] + ERROR-EVENT: Unknown packet type + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....44] [ip4][....0] [....10.12.64.30] -> [..198.226.25.53] + new: [....45] [ip4][..udp] [..198.234.25.53][.1812] -> [....10.12.64.30][29200] + detected: [....45] [ip4][..udp] [..198.234.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + not-detected: [....17] [ip4][...88] [..198.226.25.53] -> [....10.12.64.30] [Unknown][Unrated] + idle: [....17] [ip4][...88] [..198.226.25.53] -> [....10.12.64.30] + not-detected: [....18] [ip4][..254] [....10.12.64.30] -> [..198.226.25.53] [Unknown][Unrated] + idle: [....18] [ip4][..254] [....10.12.64.30] -> [..198.226.25.53] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....37] [ip4][..udp] [..198.226.25.62][.1812] -> [.....10.12.37.0][29200] [Radius][Network][Acceptable] + update: [....35] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + update: [....41] [ip4][..udp] [..198.226.25.53][.1812] -> [..10.12.172.158][29200] [Radius][Network][Acceptable] + update: [....38] [ip4][..udp] [..198.226.25.62][.1812] -> [....10.12.64.30][29295] [Radius][Network][Acceptable] + update: [....39] [ip4][..udp] [....10.12.64.30][29304] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....43] [ip4][..udp] [..198.226.25.53][.1965] -> [....10.12.64.30][29200] + update: [....42] [ip4][..udp] [....10.12.64.30][29200] -> [..198.119.25.53][.1812] + update: [....36] [ip4][..udp] [.....37.0.25.62][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + new: [....46] [ip4][..udp] [....10.76.64.30][29200] -> [..198.226.25.53][.1812] + detected: [....46] [ip4][..udp] [....10.76.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....47] [ip4][..udp] [..198.226.25.53][43690] -> [..10.12.170.170][43690] + new: [....48] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.112.30][29200] + detected: [....48] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.112.30][29200] [Radius][Network][Acceptable] + new: [....49] [ip4][..udp] [.....10.84.37.0][29200] -> [..198.226.25.53][.1812] + detected: [....49] [ip4][..udp] [.....10.84.37.0][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol + new: [....50] [ip4][..udp] [....10.12.64.37][29200] -> [....0.226.25.53][.1812] + detected: [....50] [ip4][..udp] [....10.12.64.37][29200] -> [....0.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....51] [ip4][..udp] [....10.12.64.30][29200] -> [...198.48.25.53][.1812] + detected: [....51] [ip4][..udp] [....10.12.64.30][29200] -> [...198.48.25.53][.1812] [Radius][Network][Acceptable] + new: [....52] [ip4][..udp] [...198.52.25.53][.1812] -> [....10.12.64.30][29200] + detected: [....52] [ip4][..udp] [...198.52.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....37] [ip4][..udp] [..198.226.25.62][.1812] -> [.....10.12.37.0][29200] [Radius][Network][Acceptable] + update: [....49] [ip4][..udp] [.....10.84.37.0][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....35] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + update: [....45] [ip4][..udp] [..198.234.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [....46] [ip4][..udp] [....10.76.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....48] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.112.30][29200] [Radius][Network][Acceptable] + update: [....41] [ip4][..udp] [..198.226.25.53][.1812] -> [..10.12.172.158][29200] [Radius][Network][Acceptable] + update: [....38] [ip4][..udp] [..198.226.25.62][.1812] -> [....10.12.64.30][29295] [Radius][Network][Acceptable] + update: [....39] [ip4][..udp] [....10.12.64.30][29304] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....43] [ip4][..udp] [..198.226.25.53][.1965] -> [....10.12.64.30][29200] + update: [....47] [ip4][..udp] [..198.226.25.53][43690] -> [..10.12.170.170][43690] + update: [....42] [ip4][..udp] [....10.12.64.30][29200] -> [..198.119.25.53][.1812] + update: [....36] [ip4][..udp] [.....37.0.25.62][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [....40] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + update: [....23] [ip4][...85] [..198.226.25.62] -> [....10.12.64.30] + update: [....34] [ip4][..112] [....10.12.64.30] -> [..198.226.25.53] [VRRP][Network][Acceptable] + new: [....53] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29200] + detected: [....53] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown L3 protocol + idle: [....37] [ip4][..udp] [..198.226.25.62][.1812] -> [.....10.12.37.0][29200] [Radius][Network][Acceptable] + idle: [....36] [ip4][..udp] [.....37.0.25.62][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + new: [....54] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29204] + detected: [....54] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29204] [Radius][Network][Acceptable] + idle: [....41] [ip4][..udp] [..198.226.25.53][.1812] -> [..10.12.172.158][29200] [Radius][Network][Acceptable] + idle: [....35] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + idle: [....38] [ip4][..udp] [..198.226.25.62][.1812] -> [....10.12.64.30][29295] [Radius][Network][Acceptable] + idle: [....39] [ip4][..udp] [....10.12.64.30][29304] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + guessed: [....42] [ip4][..udp] [....10.12.64.30][29200] -> [..198.119.25.53][.1812] [Radius][Network][Acceptable] + idle: [....42] [ip4][..udp] [....10.12.64.30][29200] -> [..198.119.25.53][.1812] + not-detected: [....23] [ip4][...85] [..198.226.25.62] -> [....10.12.64.30] [Unknown][Unrated] + idle: [....23] [ip4][...85] [..198.226.25.62] -> [....10.12.64.30] + DAEMON-EVENT: [Processed: 200 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 15 / 54|skipped: 0|!detected: 10|guessed: 2|detection-updates: 0|updates: 98] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + idle: [....48] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.112.30][29200] [Radius][Network][Acceptable] + idle: [....46] [ip4][..udp] [....10.76.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + idle: [....45] [ip4][..udp] [..198.234.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + idle: [....49] [ip4][..udp] [.....10.84.37.0][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + not-detected: [....43] [ip4][..udp] [..198.226.25.53][.1965] -> [....10.12.64.30][29200] [Unknown][Unrated] + idle: [....43] [ip4][..udp] [..198.226.25.53][.1965] -> [....10.12.64.30][29200] + not-detected: [....47] [ip4][..udp] [..198.226.25.53][43690] -> [..10.12.170.170][43690] [Unknown][Unrated] + idle: [....47] [ip4][..udp] [..198.226.25.53][43690] -> [..10.12.170.170][43690] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....53] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [....54] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29204] [Radius][Network][Acceptable] + update: [....52] [ip4][..udp] [...198.52.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [....40] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + update: [....51] [ip4][..udp] [....10.12.64.30][29200] -> [...198.48.25.53][.1812] [Radius][Network][Acceptable] + update: [....44] [ip4][....0] [....10.12.64.30] -> [..198.226.25.53] + update: [....50] [ip4][..udp] [....10.12.64.37][29200] -> [....0.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....34] [ip4][..112] [....10.12.64.30] -> [..198.226.25.53] [VRRP][Network][Acceptable] + new: [....55] [ip4][..udp] [..198.226.25.53][.1812] -> [....65.12.64.30][29200] + detected: [....55] [ip4][..udp] [..198.226.25.53][.1812] -> [....65.12.64.30][29200] [Radius][Network][Acceptable] + new: [....56] [ip4][..udp] [....10.12.69.30][29200] -> [..198.226.25.53][.1813] + detected: [....56] [ip4][..udp] [....10.12.69.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] + idle: [....50] [ip4][..udp] [....10.12.64.37][29200] -> [....0.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....57] [ip4][..udp] [....10.12.82.30][29200] -> [..198.226.25.53][.1812] + detected: [....57] [ip4][..udp] [....10.12.82.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....58] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.66][29200] + idle: [....56] [ip4][..udp] [....10.12.69.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] + idle: [....53] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + idle: [....54] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29204] [Radius][Network][Acceptable] + idle: [....55] [ip4][..udp] [..198.226.25.53][.1812] -> [....65.12.64.30][29200] [Radius][Network][Acceptable] + idle: [....52] [ip4][..udp] [...198.52.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + idle: [....51] [ip4][..udp] [....10.12.64.30][29200] -> [...198.48.25.53][.1812] [Radius][Network][Acceptable] + idle: [....34] [ip4][..112] [....10.12.64.30] -> [..198.226.25.53] [VRRP][Network][Acceptable] + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....40] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + update: [....44] [ip4][....0] [....10.12.64.30] -> [..198.226.25.53] + new: [....59] [ip4][..udp] [....88.12.80.30][29200] -> [..198.226.25.53][.1812] + detected: [....59] [ip4][..udp] [....88.12.80.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....60] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] + detected: [....60] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....61] [ip4][..udp] [.....10.6.64.30][29200] -> [..198.226.25.53][.1812] + detected: [....61] [ip4][..udp] [.....10.6.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....62] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.82.64.30][29200] + detected: [....62] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.82.64.30][29200] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....63] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.80.53][.1812] + detected: [....63] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.80.53][.1812] [Radius][Network][Acceptable] + new: [....64] [ip4][..udp] [..198.226.25.53][.3860] -> [....14.12.64.30][29200] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....57] [ip4][..udp] [....10.12.82.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....58] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.66][29200] + update: [....59] [ip4][..udp] [....88.12.80.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....65] [ip4][..udp] [.....198.7.9.53][.1812] -> [....10.12.64.30][29200] + detected: [....65] [ip4][..udp] [.....198.7.9.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + new: [....66] [ip4][..udp] [....10.12.64.30][29232] -> [..198.226.25.53][.1812] + detected: [....66] [ip4][..udp] [....10.12.64.30][29232] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown L3 protocol + new: [....67] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.81.64.30][29200] + detected: [....67] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.81.64.30][29200] [Radius][Network][Acceptable] + new: [....68] [ip4][..udp] [..198.226.25.53][43028] -> [....10.12.64.30][29200] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown packet type + update: [....60] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + update: [....61] [ip4][..udp] [.....10.6.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....62] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.82.64.30][29200] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....69] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.73][29200] + detected: [....69] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.73][29200] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....70] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29208] + detected: [....70] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29208] [Radius][Network][Acceptable] + new: [....71] [ip4][..udp] [....10.12.64.30][29289] -> [..198.226.25.53][.1812] + detected: [....71] [ip4][..udp] [....10.12.64.30][29289] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown packet type + update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....57] [ip4][..udp] [....10.12.82.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....58] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.66][29200] + update: [....63] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.80.53][.1812] [Radius][Network][Acceptable] + update: [....64] [ip4][..udp] [..198.226.25.53][.3860] -> [....14.12.64.30][29200] + update: [....59] [ip4][..udp] [....88.12.80.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....72] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.21][.1812] + detected: [....72] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.21][.1812] [Radius][Network][Acceptable] + not-detected: [....44] [ip4][....0] [....10.12.64.30] -> [..198.226.25.53] [Unknown][Unrated] + idle: [....44] [ip4][....0] [....10.12.64.30] -> [..198.226.25.53] + update: [....60] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + update: [....66] [ip4][..udp] [....10.12.64.30][29232] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....68] [ip4][..udp] [..198.226.25.53][43028] -> [....10.12.64.30][29200] + update: [....61] [ip4][..udp] [.....10.6.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + update: [....65] [ip4][..udp] [.....198.7.9.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + update: [....67] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.81.64.30][29200] [Radius][Network][Acceptable] + update: [....62] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.82.64.30][29200] [Radius][Network][Acceptable] + ERROR-EVENT: Unknown L3 protocol + idle: [....69] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.73][29200] [Radius][Network][Acceptable] + idle: [....63] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.80.53][.1812] [Radius][Network][Acceptable] + guessed: [....58] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.66][29200] [Radius][Network][Acceptable] + idle: [....58] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.66][29200] + idle: [....57] [ip4][..udp] [....10.12.82.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + idle: [....72] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.21][.1812] [Radius][Network][Acceptable] + idle: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + not-detected: [....64] [ip4][..udp] [..198.226.25.53][.3860] -> [....14.12.64.30][29200] [Unknown][Unrated] + idle: [....64] [ip4][..udp] [..198.226.25.53][.3860] -> [....14.12.64.30][29200] + idle: [....70] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29208] [Radius][Network][Acceptable] + idle: [....66] [ip4][..udp] [....10.12.64.30][29232] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + idle: [....59] [ip4][..udp] [....88.12.80.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + idle: [....71] [ip4][..udp] [....10.12.64.30][29289] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + not-detected: [....68] [ip4][..udp] [..198.226.25.53][43028] -> [....10.12.64.30][29200] [Unknown][Unrated] + idle: [....68] [ip4][..udp] [..198.226.25.53][43028] -> [....10.12.64.30][29200] + idle: [....61] [ip4][..udp] [.....10.6.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + idle: [....67] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.81.64.30][29200] [Radius][Network][Acceptable] + idle: [....65] [ip4][..udp] [.....198.7.9.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] + idle: [....62] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.82.64.30][29200] [Radius][Network][Acceptable] + update: [....60] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + update: [....40] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + new: [....73] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] + detected: [....73] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + new: [....74] [ip4][..udp] [..198.226.25.53][.1814] -> [....10.12.64.30][29200] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + new: [....75] [ip4][..udp] [....57.12.64.30][29200] -> [..198.226.25.53][28948] + new: [....76] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][22544] + detected: [....76] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][22544] [Radius][Network][Acceptable] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + DAEMON-EVENT: [Processed: 285 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 6 / 76|skipped: 0|!detected: 15|guessed: 3|detection-updates: 0|updates: 132] + new: [....77] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] + detected: [....77] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] + new: [....78] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][21008] + detected: [....78] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][21008] [Radius][Network][Acceptable] + not-detected: [....40] [ip4][..170] [170.170.170.170] -> [170.170.170.170] [Unknown][Unrated] + idle: [....40] [ip4][..170] [170.170.170.170] -> [170.170.170.170] + update: [....60] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + new: [....79] [ip4][...37] [..198.226.25.53] -> [....10.12.64.30] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + idle: [....73] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] + idle: [....60] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] + idle: [....78] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][21008] [Radius][Network][Acceptable] + idle: [....77] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] + not-detected: [....74] [ip4][..udp] [..198.226.25.53][.1814] -> [....10.12.64.30][29200] [Unknown][Unrated] + idle: [....74] [ip4][..udp] [..198.226.25.53][.1814] -> [....10.12.64.30][29200] + not-detected: [....75] [ip4][..udp] [....57.12.64.30][29200] -> [..198.226.25.53][28948] [Unknown][Unrated] + idle: [....75] [ip4][..udp] [....57.12.64.30][29200] -> [..198.226.25.53][28948] + idle: [....76] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][22544] [Radius][Network][Acceptable] + not-detected: [....79] [ip4][...37] [..198.226.25.53] -> [....10.12.64.30] [Unknown][Unrated] + idle: [....79] [ip4][...37] [..198.226.25.53] -> [....10.12.64.30] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/fuzz-2021-06-07-c6c72a0a56.pcap.out b/test/results/flow-info/fuzz-2021-06-07-c6c72a0a56.pcap.out new file mode 100644 index 000000000..3a7d43e57 --- /dev/null +++ b/test/results/flow-info/fuzz-2021-06-07-c6c72a0a56.pcap.out @@ -0,0 +1,6 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: nDPI IPv4/L4 payload detection failed + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/fuzz-2021-10-13.pcap.out b/test/results/flow-info/fuzz-2021-10-13.pcap.out new file mode 100644 index 000000000..bbd5afb3b --- /dev/null +++ b/test/results/flow-info/fuzz-2021-10-13.pcap.out @@ -0,0 +1,5 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown datalink layer packet + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/genshin-impact.pcap.out b/test/results/flow-info/genshin-impact.pcap.out new file mode 100644 index 000000000..1af01374f --- /dev/null +++ b/test/results/flow-info/genshin-impact.pcap.out @@ -0,0 +1,36 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][58766] -> [..47.245.143.85][22101] + detected: [.....1] [ip4][..udp] [..192.168.2.100][58766] -> [..47.245.143.85][22101] [GenshinImpact][Game][Fun] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..udp] [..192.168.2.100][59145] -> [.47.254.169.109][22102] + detected: [.....2] [ip4][..udp] [..192.168.2.100][59145] -> [.47.254.169.109][22102] [GenshinImpact][Game][Fun] + idle: [.....1] [ip4][..udp] [..192.168.2.100][58766] -> [..47.245.143.85][22101] [GenshinImpact][Game][Fun] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: [Processed: 30 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..udp] [..192.168.2.100][52575] -> [...8.209.69.191][22101] + detected: [.....3] [ip4][..udp] [..192.168.2.100][52575] -> [...8.209.69.191][22101] [GenshinImpact][Game][Fun] + RISK: Known Proto on Non Std Port + idle: [.....2] [ip4][..udp] [..192.168.2.100][59145] -> [.47.254.169.109][22102] [GenshinImpact][Game][Fun] + DAEMON-EVENT: [Processed: 45 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....4] [ip4][..tcp] [..192.168.2.100][39822] -> [..49.51.190.178][...80] + detected: [.....4] [ip4][..tcp] [..192.168.2.100][39822] -> [..49.51.190.178][...80] [GenshinImpact][Game][Fun] + idle: [.....3] [ip4][..udp] [..192.168.2.100][52575] -> [...8.209.69.191][22101] [GenshinImpact][Game][Fun] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: [Processed: 60 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..tcp] [..192.168.2.100][39686] -> [..49.51.181.168][...80] + detected: [.....5] [ip4][..tcp] [..192.168.2.100][39686] -> [..49.51.181.168][...80] [GenshinImpact][Game][Fun] + idle: [.....4] [ip4][..tcp] [..192.168.2.100][39822] -> [..49.51.190.178][...80] [GenshinImpact][Game][Fun] + DAEMON-EVENT: [Processed: 75 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....6] [ip4][..tcp] [..192.168.2.100][45246] -> [..49.51.181.168][10012] + detected: [.....6] [ip4][..tcp] [..192.168.2.100][45246] -> [..49.51.181.168][10012] [GenshinImpact][Game][Fun] + idle: [.....6] [ip4][..tcp] [..192.168.2.100][45246] -> [..49.51.181.168][10012] [GenshinImpact][Game][Fun] + idle: [.....5] [ip4][..tcp] [..192.168.2.100][39686] -> [..49.51.181.168][...80] [GenshinImpact][Game][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/git.pcap.out b/test/results/flow-info/git.pcap.out new file mode 100644 index 000000000..ed5b3f85b --- /dev/null +++ b/test/results/flow-info/git.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.0.77][47991] -> [...5.153.231.21][.9418] + detected: [.....1] [ip4][..tcp] [...192.168.0.77][47991] -> [...5.153.231.21][.9418] [Git][Collaborative][Safe] + analyse: [.....1] [ip4][..tcp] [...192.168.0.77][47991] -> [...5.153.231.21][.9418] [Git][Collaborative][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.100| 0.025| 0.029] + [IAT(c->s)...: 0.000| 0.100| 0.032| 0.033][IAT(s->c)...: 0.000| 0.058| 0.020| 0.024] + [PKTLEN(c->s): 66.000| 593.000| 113.200| 139.700][PKTLEN(s->c): 66.000|2946.000|1109.800| 769.300] + [BINS(c->s)..: 11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,1] + end: [.....1] [ip4][..tcp] [...192.168.0.77][47991] -> [...5.153.231.21][.9418] [Git][Collaborative][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/gnutella.pcap.out b/test/results/flow-info/gnutella.pcap.out new file mode 100644 index 000000000..4970fd9cc --- /dev/null +++ b/test/results/flow-info/gnutella.pcap.out @@ -0,0 +1,5656 @@ + DAEMON-EVENT: init + ERROR-EVENT: Packet too short + new: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffa4:e108] + detected: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffa4:e108] [ICMPV6][Network][Acceptable] + new: [.....2] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::2] + detected: [.....2] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + new: [.....3] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [...............................ff02::16] + detected: [.....3] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + new: [.....4] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::1] + detected: [.....4] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::1] [ICMPV6][Network][Acceptable] + new: [.....5] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [.....5] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [.....6] [ip4][..udp] [.......10.0.2.2][...67] -> [......10.0.2.15][...68] + detected: [.....6] [ip4][..udp] [.......10.0.2.2][...67] -> [......10.0.2.15][...68] [DHCP][Network][Acceptable] + new: [.....7] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][..546] -> [..............................ff02::1:2][..547] + detected: [.....7] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + new: [.....8] [ip4][....2] [......10.0.2.15] -> [.....224.0.0.22] + detected: [.....8] [ip4][....2] [......10.0.2.15] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + new: [.....9] [ip4][..udp] [......10.0.2.15][.5353] -> [....224.0.0.251][.5353] + detected: [.....9] [ip4][..udp] [......10.0.2.15][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....10] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][.5353] -> [...............................ff02::fb][.5353] + detected: [....10] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....11] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63717] -> [..............................ff02::1:3][.5355] + detected: [....11] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63717] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + detection-update: [.....9] [ip4][..udp] [......10.0.2.15][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....12] [ip4][..udp] [......10.0.2.15][63717] -> [....224.0.0.252][.5355] + detected: [....12] [ip4][..udp] [......10.0.2.15][63717] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + detection-update: [....10] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....13] [ip4][..udp] [......10.0.2.15][..137] -> [.....10.0.2.255][..137] + detected: [....13] [ip4][..udp] [......10.0.2.15][..137] -> [.....10.0.2.255][..137] [NetBIOS][System][Acceptable] + new: [....14] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63958] -> [................................ff02::c][.3702] + detected: [....14] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63958] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + new: [....15] [ip4][..udp] [......10.0.2.15][63957] -> [239.255.255.250][.3702] + detected: [....15] [ip4][..udp] [......10.0.2.15][63957] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + new: [....16] [ip4][..udp] [......10.0.2.15][63962] -> [239.255.255.250][.1900] + detected: [....16] [ip4][..udp] [......10.0.2.15][63962] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....17] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63960] -> [................................ff02::c][.1900] + detected: [....17] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63960] -> [................................ff02::c][.1900] [SSDP][System][Acceptable] + new: [....18] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63965] -> [................................ff02::c][.3702] + detected: [....18] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63965] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + new: [....19] [ip4][..udp] [......10.0.2.15][63964] -> [239.255.255.250][.3702] + detected: [....19] [ip4][..udp] [......10.0.2.15][63964] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + new: [....20] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] + detected: [....20] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [....21] [ip4][..udp] [......10.0.2.15][55708] -> [239.255.255.250][.1900] + detected: [....21] [ip4][..udp] [......10.0.2.15][55708] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....22] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][62539] -> [..............................ff02::1:3][.5355] + detected: [....22] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][62539] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....23] [ip4][..udp] [......10.0.2.15][62539] -> [....224.0.0.252][.5355] + detected: [....23] [ip4][..udp] [......10.0.2.15][62539] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....24] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][50435] -> [..............................ff02::1:3][.5355] + detected: [....24] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][50435] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....25] [ip4][..udp] [......10.0.2.15][50435] -> [....224.0.0.252][.5355] + detected: [....25] [ip4][..udp] [......10.0.2.15][50435] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [.....2] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + update: [.....4] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::1] [ICMPV6][Network][Acceptable] + update: [.....3] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + update: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffa4:e108] [ICMPV6][Network][Acceptable] + new: [....26] [ip4][..udp] [......10.0.2.15][57619] -> [.......10.0.2.2][.5351] + new: [....27] [ip4][..udp] [......10.0.2.15][57620] -> [.......10.0.2.2][.5351] + new: [....28] [ip4][..tcp] [......10.0.2.15][50190] -> [..80.140.63.147][29545] + new: [....29] [ip4][..tcp] [......10.0.2.15][50191] -> [.207.38.163.228][.6778] + new: [....30] [ip4][..tcp] [......10.0.2.15][50192] -> [....45.65.87.24][16201] + new: [....31] [ip4][..tcp] [......10.0.2.15][50193] -> [....89.75.52.19][46010] + new: [....32] [ip4][..tcp] [......10.0.2.15][50194] -> [..92.152.66.153][43771] + new: [....33] [ip4][..tcp] [......10.0.2.15][50195] -> [162.157.143.201][29762] + new: [....34] [ip4][..udp] [......10.0.2.15][57621] -> [.......10.0.2.2][.5351] + new: [....35] [ip4][..tcp] [......10.0.2.15][50196] -> [...218.250.6.59][12556] + new: [....36] [ip4][..tcp] [......10.0.2.15][50197] -> [..118.168.15.71][.3931] + new: [....37] [ip4][..tcp] [......10.0.2.15][50198] -> [..86.129.196.84][.9915] + new: [....38] [ip4][..tcp] [......10.0.2.15][50199] -> [...47.147.52.21][36728] + new: [....39] [ip4][..tcp] [......10.0.2.15][50200] -> [176.128.217.128][45194] + new: [....40] [ip4][..tcp] [......10.0.2.15][50201] -> [..78.122.93.185][.6346] + new: [....41] [ip4][..udp] [......10.0.2.15][57622] -> [.......10.0.2.2][.5351] + detected: [....38] [ip4][..tcp] [......10.0.2.15][50199] -> [...47.147.52.21][36728] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [....35] [ip4][..tcp] [......10.0.2.15][50196] -> [...218.250.6.59][12556] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [....36] [ip4][..tcp] [......10.0.2.15][50197] -> [..118.168.15.71][.3931] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [....42] [ip4][..tcp] [......10.0.2.15][50202] -> [.61.238.173.128][57648] + new: [....43] [ip4][..tcp] [......10.0.2.15][50203] -> [..61.222.160.99][18994] + new: [....44] [ip4][..tcp] [......10.0.2.15][50204] -> [..124.218.26.16][.9728] + new: [....45] [ip4][..tcp] [......10.0.2.15][50205] -> [.114.46.139.171][52120] + new: [....46] [ip4][..tcp] [......10.0.2.15][50206] -> [175.181.156.244][.8255] + new: [....47] [ip4][..tcp] [......10.0.2.15][50207] -> [..90.78.171.204][.6346] + detected: [....43] [ip4][..tcp] [......10.0.2.15][50203] -> [..61.222.160.99][18994] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [....46] [ip4][..tcp] [......10.0.2.15][50206] -> [175.181.156.244][.8255] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [....48] [ip4][..tcp] [......10.0.2.15][50208] -> [.119.237.116.22][.8683] + new: [....49] [ip4][..tcp] [......10.0.2.15][50209] -> [113.252.206.254][49587] + new: [....50] [ip4][..tcp] [......10.0.2.15][50210] -> [..36.234.18.166][61404] + new: [....51] [ip4][..tcp] [......10.0.2.15][50211] -> [...14.199.10.60][23458] + new: [....52] [ip4][..tcp] [......10.0.2.15][50212] -> [...95.17.124.40][.6776] + new: [....53] [ip4][..tcp] [......10.0.2.15][50213] -> [...85.117.153.7][50138] + new: [....54] [ip4][..udp] [......10.0.2.15][57623] -> [239.255.255.250][.1900] + detected: [....54] [ip4][..udp] [......10.0.2.15][57623] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + detected: [....51] [ip4][..tcp] [......10.0.2.15][50211] -> [...14.199.10.60][23458] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [....55] [ip4][..tcp] [......10.0.2.15][50214] -> [.80.193.171.146][53808] + new: [....56] [ip4][..tcp] [......10.0.2.15][50215] -> [.124.244.64.237][.4704] + new: [....57] [ip4][..tcp] [......10.0.2.15][50216] -> [182.155.128.228][.3256] + new: [....58] [ip4][..tcp] [......10.0.2.15][50217] -> [.113.252.86.162][54958] + new: [....59] [ip4][..tcp] [......10.0.2.15][50218] -> [..90.103.247.94][59045] + new: [....60] [ip4][..tcp] [......10.0.2.15][50219] -> [.193.121.165.12][55376] + new: [....61] [ip4][..tcp] [......10.0.2.15][50220] -> [.36.233.196.226][.3820] + new: [....62] [ip4][..tcp] [......10.0.2.15][50221] -> [...59.104.173.5][49956] + new: [....63] [ip4][..tcp] [......10.0.2.15][50222] -> [.119.14.143.237][.6523] + new: [....64] [ip4][..tcp] [......10.0.2.15][50223] -> [118.167.248.220][63108] + new: [....65] [ip4][..tcp] [......10.0.2.15][50224] -> [...78.125.63.97][.6346] + new: [....66] [ip4][..tcp] [......10.0.2.15][50225] -> [.109.210.81.147][24800] + new: [....67] [ip4][..tcp] [......10.0.2.15][50226] -> [116.241.162.162][15677] + new: [....68] [ip4][..tcp] [......10.0.2.15][50227] -> [.111.246.157.94][51175] + new: [....69] [ip4][..tcp] [......10.0.2.15][50228] -> [..111.241.31.96][14384] + new: [....70] [ip4][..tcp] [......10.0.2.15][50229] -> [....1.36.249.91][64920] + new: [....71] [ip4][..tcp] [......10.0.2.15][50230] -> [....73.3.103.37][17296] + new: [....72] [ip4][..tcp] [......10.0.2.15][50231] -> [..76.68.138.207][45079] + detected: [....67] [ip4][..tcp] [......10.0.2.15][50226] -> [116.241.162.162][15677] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [....73] [ip4][..tcp] [......10.0.2.15][50232] -> [182.155.242.225][15068] + new: [....74] [ip4][..tcp] [......10.0.2.15][50233] -> [...1.163.14.246][12854] + new: [....75] [ip4][..tcp] [......10.0.2.15][50234] -> [...66.189.28.17][16269] + new: [....76] [ip4][..tcp] [......10.0.2.15][50235] -> [...45.88.118.70][.6906] + new: [....77] [ip4][..tcp] [......10.0.2.15][50236] -> [..93.29.135.209][.6346] + new: [....78] [ip4][..tcp] [......10.0.2.15][50237] -> [.88.123.202.175][37910] + detected: [....77] [ip4][..tcp] [......10.0.2.15][50236] -> [..93.29.135.209][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [....76] [ip4][..tcp] [......10.0.2.15][50235] -> [...45.88.118.70][.6906] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [....73] [ip4][..tcp] [......10.0.2.15][50232] -> [182.155.242.225][15068] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [....79] [ip4][..tcp] [......10.0.2.15][50238] -> [.124.218.41.253][59144] + new: [....80] [ip4][..tcp] [......10.0.2.15][50239] -> [...112.105.52.2][.6384] + new: [....81] [ip4][..tcp] [......10.0.2.15][50240] -> [..36.237.10.152][21293] + new: [....82] [ip4][..tcp] [......10.0.2.15][50241] -> [..98.18.172.208][63172] + new: [....83] [ip4][..tcp] [......10.0.2.15][50242] -> [109.210.203.131][.6346] + new: [....84] [ip4][..tcp] [......10.0.2.15][50243] -> [176.138.129.252][27962] + new: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] + new: [....86] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + new: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] + new: [....88] [ip4][..udp] [......10.0.2.15][28681] -> [.....81.50.24.2][17874] + update: [....15] [ip4][..udp] [......10.0.2.15][63957] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + update: [....19] [ip4][..udp] [......10.0.2.15][63964] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + update: [.....5] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + update: [.....6] [ip4][..udp] [.......10.0.2.2][...67] -> [......10.0.2.15][...68] [DHCP][Network][Acceptable] + update: [....13] [ip4][..udp] [......10.0.2.15][..137] -> [.....10.0.2.255][..137] [NetBIOS][System][Acceptable] + update: [....20] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [....16] [ip4][..udp] [......10.0.2.15][63962] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....14] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63958] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + update: [....18] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63965] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + update: [.....9] [ip4][..udp] [......10.0.2.15][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [....17] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63960] -> [................................ff02::c][.1900] [SSDP][System][Acceptable] + update: [....10] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [.....7] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + update: [....12] [ip4][..udp] [......10.0.2.15][63717] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....11] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63717] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....89] [ip4][..tcp] [......10.0.2.15][50244] -> [..188.61.52.183][63978] + new: [....90] [ip4][..tcp] [......10.0.2.15][50245] -> [..73.62.225.181][46843] + new: [....91] [ip4][..tcp] [......10.0.2.15][50246] -> [...80.7.252.192][45685] + new: [....92] [ip4][..tcp] [......10.0.2.15][50247] -> [..66.30.221.181][51560] + new: [....93] [ip4][..tcp] [......10.0.2.15][50248] -> [109.214.154.216][.6346] + new: [....94] [ip4][..tcp] [......10.0.2.15][50249] -> [.86.208.180.181][45883] + new: [....95] [ip4][.icmp] [.......10.0.2.2] -> [......10.0.2.15] + detected: [....95] [ip4][.icmp] [.......10.0.2.2] -> [......10.0.2.15] [ICMP][Network][Acceptable] + detected: [....94] [ip4][..tcp] [......10.0.2.15][50249] -> [.86.208.180.181][45883] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [....96] [ip4][..udp] [......10.0.2.15][28681] -> [.88.160.214.137][.6346] + new: [....97] [ip4][..udp] [......10.0.2.15][28681] -> [..24.78.134.188][49046] + new: [....98] [ip4][..udp] [......10.0.2.15][28681] -> [.203.222.14.170][23332] + new: [....99] [ip4][..udp] [......10.0.2.15][28681] -> [....114.38.9.82][24223] + new: [...100] [ip4][..udp] [......10.0.2.15][28681] -> [220.133.122.217][23458] + new: [...101] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + new: [...102] [ip4][..udp] [......10.0.2.15][28681] -> [.218.164.39.233][20855] + new: [...103] [ip4][..udp] [......10.0.2.15][28681] -> [.220.134.167.82][.5820] + new: [...104] [ip4][..udp] [......10.0.2.15][28681] -> [..42.98.115.128][23458] + new: [...105] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + new: [...106] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.154.69][.4832] + new: [...107] [ip4][..udp] [......10.0.2.15][28681] -> [..202.151.63.59][.7624] + new: [...108] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][.7922] + new: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] + new: [...110] [ip4][..udp] [......10.0.2.15][28681] -> [..195.132.75.56][56009] + new: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] + new: [...112] [ip4][..udp] [......10.0.2.15][28681] -> [.36.239.213.146][21750] + new: [...113] [ip4][..udp] [......10.0.2.15][28681] -> [105.101.132.146][57746] + new: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] + new: [...115] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.104][11804] + new: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] + new: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] + new: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] + detected: [....93] [ip4][..tcp] [......10.0.2.15][50248] -> [109.214.154.216][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...119] [ip4][..tcp] [......10.0.2.15][50250] -> [...27.94.154.53][.6346] + new: [...120] [ip4][..tcp] [......10.0.2.15][50251] -> [...24.127.1.235][37814] + new: [...121] [ip4][..tcp] [......10.0.2.15][50252] -> [.123.202.31.113][19768] + new: [...122] [ip4][..tcp] [......10.0.2.15][50253] -> [103.232.107.100][43508] + new: [...123] [ip4][..tcp] [......10.0.2.15][50254] -> [..24.78.134.188][49046] + detected: [...119] [ip4][..tcp] [......10.0.2.15][50250] -> [...27.94.154.53][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...121] [ip4][..tcp] [......10.0.2.15][50252] -> [.123.202.31.113][19768] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...122] [ip4][..tcp] [......10.0.2.15][50253] -> [103.232.107.100][43508] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...124] [ip4][..udp] [......10.0.2.15][28681] -> [...170.254.19.6][24180] + new: [...125] [ip4][..udp] [......10.0.2.15][28681] -> [..83.92.178.182][57302] + new: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] + new: [...127] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.1024] + new: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] + new: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] + new: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] + new: [...131] [ip4][..udp] [......10.0.2.15][28681] -> [.86.225.140.186][.6346] + new: [...132] [ip4][..udp] [......10.0.2.15][28681] -> [...79.86.173.45][.6346] + new: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] + new: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] + new: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] + new: [...136] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][16047] + new: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] + new: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] + new: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] + new: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] + new: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] + new: [...142] [ip4][..tcp] [......10.0.2.15][50255] -> [..36.236.203.37][52165] + new: [...143] [ip4][..tcp] [......10.0.2.15][50256] -> [.36.233.201.161][.2886] + new: [...144] [ip4][..tcp] [......10.0.2.15][50257] -> [...219.70.48.23][.3054] + new: [...145] [ip4][..tcp] [......10.0.2.15][50258] -> [122.100.216.210][.7097] + new: [...146] [ip4][..tcp] [......10.0.2.15][50259] -> [.183.179.90.112][.9852] + new: [...147] [ip4][..tcp] [......10.0.2.15][50260] -> [113.255.200.161][51394] + new: [...148] [ip4][..tcp] [......10.0.2.15][50261] -> [....156.57.42.2][33476] + new: [...149] [ip4][..tcp] [......10.0.2.15][50262] -> [..80.61.221.246][30577] + detected: [...149] [ip4][..tcp] [......10.0.2.15][50262] -> [..80.61.221.246][30577] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...146] [ip4][..tcp] [......10.0.2.15][50259] -> [.183.179.90.112][.9852] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...150] [ip4][..tcp] [......10.0.2.15][50263] -> [..73.182.136.42][27873] + new: [...151] [ip4][..tcp] [......10.0.2.15][50264] -> [...95.10.205.67][48380] + new: [...152] [ip4][..tcp] [......10.0.2.15][50265] -> [.113.255.250.32][52647] + new: [...153] [ip4][..tcp] [......10.0.2.15][50266] -> [.219.70.175.103][.4315] + detected: [...148] [ip4][..tcp] [......10.0.2.15][50261] -> [....156.57.42.2][33476] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [....37] [ip4][..tcp] [......10.0.2.15][50198] -> [..86.129.196.84][.9915] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [.....2] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + update: [.....4] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::1] [ICMPV6][Network][Acceptable] + update: [.....3] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + update: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffa4:e108] [ICMPV6][Network][Acceptable] + new: [...154] [ip4][..udp] [......10.0.2.15][28681] -> [174.115.111.224][51984] + new: [...155] [ip4][..udp] [......10.0.2.15][28681] -> [.88.168.182.103][.6346] + new: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] + new: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] + new: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] + new: [...159] [ip4][..udp] [......10.0.2.15][28681] -> [176.163.231.160][.6346] + new: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] + new: [...161] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] + new: [...162] [ip4][..udp] [......10.0.2.15][28681] -> [.88.123.159.111][44729] + new: [...163] [ip4][..udp] [......10.0.2.15][28681] -> [.88.126.160.158][.6346] + new: [...164] [ip4][..udp] [......10.0.2.15][28681] -> [.142.197.219.85][26234] + new: [...165] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] + new: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] + new: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] + new: [...168] [ip4][..udp] [......10.0.2.15][28681] -> [...89.157.59.43][56919] + new: [...169] [ip4][..udp] [......10.0.2.15][28681] -> [...91.162.52.93][34799] + new: [...170] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] + new: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] + new: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] + new: [...173] [ip4][..udp] [......10.0.2.15][28681] -> [..121.99.222.36][44988] + new: [...174] [ip4][..udp] [......10.0.2.15][28681] -> [..196.74.159.56][29271] + new: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] + new: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] + new: [...177] [ip4][..udp] [......10.0.2.15][28681] -> [.69.157.183.106][.6346] + new: [...178] [ip4][..udp] [......10.0.2.15][28681] -> [....83.46.253.7][.6346] + new: [...179] [ip4][..udp] [......10.0.2.15][28681] -> [.178.51.146.115][.6346] + new: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] + new: [...181] [ip4][..udp] [......10.0.2.15][28681] -> [...66.177.5.135][.6346] + new: [...182] [ip4][..udp] [......10.0.2.15][28681] -> [....73.3.103.37][35589] + new: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] + new: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] + new: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] + new: [...186] [ip4][..udp] [......10.0.2.15][28681] -> [..91.182.44.202][30277] + new: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] + new: [...188] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] + new: [...189] [ip4][..udp] [......10.0.2.15][28681] -> [115.195.105.243][.6346] + new: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] + new: [...191] [ip4][..udp] [......10.0.2.15][28681] -> [.190.153.143.54][65535] + new: [...192] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] + new: [...193] [ip4][..udp] [......10.0.2.15][28681] -> [..188.44.126.74][54633] + new: [...194] [ip4][..udp] [......10.0.2.15][28681] -> [176.150.126.156][16471] + new: [...195] [ip4][..udp] [......10.0.2.15][28681] -> [.177.231.151.16][.6346] + new: [...196] [ip4][..udp] [......10.0.2.15][28681] -> [..88.127.72.106][.6346] + new: [...197] [ip4][..udp] [......10.0.2.15][28681] -> [.208.92.106.151][32476] + new: [...198] [ip4][..udp] [......10.0.2.15][28681] -> [..58.182.171.50][15180] + new: [...199] [ip4][..udp] [......10.0.2.15][28681] -> [..114.73.129.26][53585] + new: [...200] [ip4][..udp] [......10.0.2.15][28681] -> [.138.199.16.123][52993] + new: [...201] [ip4][..udp] [......10.0.2.15][28681] -> [.85.170.209.214][46210] + new: [...202] [ip4][..udp] [......10.0.2.15][28681] -> [.176.134.139.39][.6346] + new: [...203] [ip4][..udp] [......10.0.2.15][28681] -> [.120.156.204.38][54832] + new: [...204] [ip4][..udp] [......10.0.2.15][28681] -> [..84.126.240.32][45313] + new: [...205] [ip4][..udp] [......10.0.2.15][28681] -> [..96.29.197.138][.6346] + new: [...206] [ip4][..udp] [......10.0.2.15][28681] -> [213.166.132.204][11194] + new: [...207] [ip4][..udp] [......10.0.2.15][28681] -> [.81.242.191.215][.6346] + new: [...208] [ip4][..udp] [......10.0.2.15][28681] -> [..81.249.64.215][25058] + new: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] + new: [...210] [ip4][..udp] [......10.0.2.15][28681] -> [.41.100.120.146][12838] + new: [...211] [ip4][..udp] [......10.0.2.15][28681] -> [..186.93.139.92][.6346] + new: [...212] [ip4][..udp] [......10.0.2.15][28681] -> [...36.233.3.223][12848] + new: [...213] [ip4][..udp] [......10.0.2.15][28681] -> [....5.180.62.37][.6346] + new: [...214] [ip4][..udp] [......10.0.2.15][28681] -> [.91.169.215.227][26820] + new: [...215] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] + new: [...216] [ip4][..udp] [......10.0.2.15][28681] -> [.212.68.248.153][27223] + new: [...217] [ip4][..udp] [......10.0.2.15][28681] -> [.126.117.45.151][19323] + new: [...218] [ip4][..udp] [......10.0.2.15][28681] -> [.176.155.52.115][53956] + new: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] + new: [...220] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][.9239] + new: [...221] [ip4][..tcp] [......10.0.2.15][50267] -> [.113.252.86.162][.9239] + detected: [...221] [ip4][..tcp] [......10.0.2.15][50267] -> [.113.252.86.162][.9239] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...222] [ip4][..tcp] [......10.0.2.15][50268] -> [.210.209.249.84][24751] + new: [...223] [ip4][..tcp] [......10.0.2.15][50269] -> [..218.103.139.2][.3186] + new: [...224] [ip4][..tcp] [......10.0.2.15][50270] -> [...114.27.24.95][11427] + new: [...225] [ip4][..tcp] [......10.0.2.15][50271] -> [.218.164.198.27][60202] + detected: [...222] [ip4][..tcp] [......10.0.2.15][50268] -> [.210.209.249.84][24751] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...223] [ip4][..tcp] [......10.0.2.15][50269] -> [..218.103.139.2][.3186] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...226] [ip4][..tcp] [......10.0.2.15][50272] -> [...1.172.184.48][13298] + new: [...227] [ip4][..tcp] [......10.0.2.15][50273] -> [..24.179.18.242][47329] + new: [...228] [ip4][..tcp] [......10.0.2.15][50274] -> [..68.174.18.115][50679] + new: [...229] [ip4][..tcp] [......10.0.2.15][50275] -> [.122.117.100.78][.9010] + new: [...230] [ip4][..tcp] [......10.0.2.15][50276] -> [.96.246.156.126][56070] + new: [...231] [ip4][..tcp] [......10.0.2.15][50277] -> [.82.181.251.218][36368] + new: [...232] [ip4][..tcp] [......10.0.2.15][50278] -> [..36.231.59.187][62234] + new: [...233] [ip4][..tcp] [......10.0.2.15][50279] -> [.113.252.91.201][.4297] + new: [...234] [ip4][..tcp] [......10.0.2.15][50280] -> [...99.199.148.6][.4338] + new: [...235] [ip4][..tcp] [......10.0.2.15][50281] -> [.94.134.154.158][54130] + new: [...236] [ip4][..tcp] [......10.0.2.15][50282] -> [..221.124.66.33][13060] + new: [...237] [ip4][..tcp] [......10.0.2.15][50283] -> [..51.68.153.214][35004] + new: [...238] [ip4][..tcp] [......10.0.2.15][50284] -> [.104.156.226.72][53258] + new: [...239] [ip4][..tcp] [......10.0.2.15][50285] -> [..75.133.101.93][52367] + new: [...240] [ip4][..tcp] [......10.0.2.15][50286] -> [.84.118.116.198][44616] + new: [...241] [ip4][..tcp] [......10.0.2.15][50287] -> [.98.215.130.156][12405] + detected: [...239] [ip4][..tcp] [......10.0.2.15][50285] -> [..75.133.101.93][52367] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...238] [ip4][..tcp] [......10.0.2.15][50284] -> [.104.156.226.72][53258] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...242] [ip4][..udp] [......10.0.2.15][28681] -> [..75.133.101.93][52367] + new: [...243] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] + new: [...244] [ip4][..tcp] [......10.0.2.15][50288] -> [...76.119.55.28][20347] + new: [...245] [ip4][..tcp] [......10.0.2.15][50289] -> [.74.195.236.249][18557] + new: [...246] [ip4][..udp] [......10.0.2.15][28681] -> [...96.65.68.194][35481] + detected: [...246] [ip4][..udp] [......10.0.2.15][28681] -> [...96.65.68.194][35481] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...247] [ip4][..udp] [......10.0.2.15][28681] -> [..181.84.178.16][60262] + detected: [...247] [ip4][..udp] [......10.0.2.15][28681] -> [..181.84.178.16][60262] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...248] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][12012] + detected: [...248] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][12012] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...249] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.218][.6909] + detected: [...249] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.218][.6909] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...250] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][26253] + detected: [...250] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][26253] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...251] [ip4][..udp] [......10.0.2.15][28681] -> [.185.203.218.92][56962] + detected: [...251] [ip4][..udp] [......10.0.2.15][28681] -> [.185.203.218.92][56962] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...252] [ip4][..udp] [......10.0.2.15][28681] -> [..72.140.120.41][47739] + detected: [...252] [ip4][..udp] [......10.0.2.15][28681] -> [..72.140.120.41][47739] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...253] [ip4][..udp] [......10.0.2.15][28681] -> [.193.37.255.130][61616] + detected: [...253] [ip4][..udp] [......10.0.2.15][28681] -> [.193.37.255.130][61616] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...254] [ip4][..udp] [......10.0.2.15][28681] -> [..88.120.73.215][24562] + detected: [...254] [ip4][..udp] [......10.0.2.15][28681] -> [..88.120.73.215][24562] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...255] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][30577] + detected: [...255] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][30577] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...256] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][50297] + detected: [...256] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][50297] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...257] [ip4][..udp] [......10.0.2.15][28681] -> [.82.181.251.218][36368] + detected: [...257] [ip4][..udp] [......10.0.2.15][28681] -> [.82.181.251.218][36368] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...258] [ip4][..udp] [......10.0.2.15][28681] -> [...24.26.216.95][13889] + detected: [...258] [ip4][..udp] [......10.0.2.15][28681] -> [...24.26.216.95][13889] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...259] [ip4][..udp] [......10.0.2.15][28681] -> [103.232.107.100][43508] + detected: [...259] [ip4][..udp] [......10.0.2.15][28681] -> [103.232.107.100][43508] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...260] [ip4][..udp] [......10.0.2.15][28681] -> [.46.128.114.107][.6578] + detected: [...260] [ip4][..udp] [......10.0.2.15][28681] -> [.46.128.114.107][.6578] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...261] [ip4][..udp] [......10.0.2.15][28681] -> [..60.241.48.194][21301] + detected: [...261] [ip4][..udp] [......10.0.2.15][28681] -> [..60.241.48.194][21301] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...262] [ip4][..udp] [......10.0.2.15][28681] -> [....89.75.52.19][46010] + detected: [...262] [ip4][..udp] [......10.0.2.15][28681] -> [....89.75.52.19][46010] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...263] [ip4][..udp] [......10.0.2.15][28681] -> [..82.217.176.52][.7446] + detected: [...263] [ip4][..udp] [......10.0.2.15][28681] -> [..82.217.176.52][.7446] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...264] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][11603] + detected: [...264] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][11603] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...265] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][.1194] + detected: [...265] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][.1194] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...266] [ip4][..tcp] [......10.0.2.15][50290] -> [....73.89.249.8][50649] + new: [...267] [ip4][..tcp] [......10.0.2.15][50291] -> [..200.7.155.210][28365] + new: [...268] [ip4][..tcp] [......10.0.2.15][50292] -> [...95.10.205.67][11603] + new: [...269] [ip4][..tcp] [......10.0.2.15][50293] -> [..97.83.183.148][.8890] + new: [...270] [ip4][..tcp] [......10.0.2.15][50294] -> [.14.200.255.229][37058] + new: [...271] [ip4][..tcp] [......10.0.2.15][50295] -> [.38.142.119.234][49732] + new: [...272] [ip4][..tcp] [......10.0.2.15][50296] -> [...77.58.211.52][.3806] + new: [...273] [ip4][..tcp] [......10.0.2.15][50297] -> [.14.200.255.229][45710] + new: [...274] [ip4][..tcp] [......10.0.2.15][50298] -> [.46.128.114.107][.6578] + new: [...275] [ip4][..tcp] [......10.0.2.15][50299] -> [203.220.198.244][.1194] + new: [...276] [ip4][..tcp] [......10.0.2.15][50300] -> [..188.61.52.183][11852] + new: [...277] [ip4][..tcp] [......10.0.2.15][50301] -> [..87.123.54.234][54130] + new: [...278] [ip4][..tcp] [......10.0.2.15][50302] -> [....75.64.6.175][.4743] + new: [...279] [ip4][..tcp] [......10.0.2.15][50303] -> [..88.120.73.215][24562] + new: [...280] [ip4][..tcp] [......10.0.2.15][50304] -> [..85.168.34.105][39908] + new: [...281] [ip4][..tcp] [......10.0.2.15][50305] -> [....94.54.66.82][63637] + new: [...282] [ip4][..tcp] [......10.0.2.15][50306] -> [.220.238.145.82][33527] + new: [...283] [ip4][..tcp] [......10.0.2.15][50307] -> [..176.99.176.20][.6346] + new: [...284] [ip4][..tcp] [......10.0.2.15][50308] -> [.193.37.255.130][61616] + new: [...285] [ip4][..tcp] [......10.0.2.15][50309] -> [..60.241.48.194][21301] + new: [...286] [ip4][..tcp] [......10.0.2.15][50310] -> [.76.110.153.177][40022] + new: [...287] [ip4][..tcp] [......10.0.2.15][50311] -> [.149.28.163.175][49956] + new: [...288] [ip4][..tcp] [......10.0.2.15][50312] -> [104.238.172.250][23548] + new: [...289] [ip4][..tcp] [......10.0.2.15][50313] -> [...96.65.68.194][35481] + new: [...290] [ip4][..tcp] [......10.0.2.15][50314] -> [...80.7.252.192][.6888] + new: [...291] [ip4][..tcp] [......10.0.2.15][50315] -> [..45.31.152.112][26851] + new: [...292] [ip4][..tcp] [......10.0.2.15][50316] -> [.142.132.165.13][30566] + new: [...293] [ip4][..tcp] [......10.0.2.15][50317] -> [188.165.203.190][21995] + new: [...294] [ip4][..tcp] [......10.0.2.15][50318] -> [.193.32.126.214][59596] + new: [...295] [ip4][..tcp] [......10.0.2.15][50319] -> [.185.187.74.173][53489] + new: [...296] [ip4][..tcp] [......10.0.2.15][50320] -> [194.163.180.126][10825] + new: [...297] [ip4][..tcp] [......10.0.2.15][50321] -> [213.229.111.224][.4876] + new: [...298] [ip4][..tcp] [......10.0.2.15][50322] -> [..164.132.10.25][55302] + new: [...299] [ip4][..tcp] [......10.0.2.15][50323] -> [..51.68.153.214][26253] + detected: [...276] [ip4][..tcp] [......10.0.2.15][50300] -> [..188.61.52.183][11852] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...292] [ip4][..tcp] [......10.0.2.15][50316] -> [.142.132.165.13][30566] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...272] [ip4][..tcp] [......10.0.2.15][50296] -> [...77.58.211.52][.3806] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...296] [ip4][..tcp] [......10.0.2.15][50320] -> [194.163.180.126][10825] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...295] [ip4][..tcp] [......10.0.2.15][50319] -> [.185.187.74.173][53489] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...293] [ip4][..tcp] [......10.0.2.15][50317] -> [188.165.203.190][21995] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...279] [ip4][..tcp] [......10.0.2.15][50303] -> [..88.120.73.215][24562] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...294] [ip4][..tcp] [......10.0.2.15][50318] -> [.193.32.126.214][59596] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...288] [ip4][..tcp] [......10.0.2.15][50312] -> [104.238.172.250][23548] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...280] [ip4][..tcp] [......10.0.2.15][50304] -> [..85.168.34.105][39908] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...299] [ip4][..tcp] [......10.0.2.15][50323] -> [..51.68.153.214][26253] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...277] [ip4][..tcp] [......10.0.2.15][50301] -> [..87.123.54.234][54130] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...290] [ip4][..tcp] [......10.0.2.15][50314] -> [...80.7.252.192][.6888] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detected: [...274] [ip4][..tcp] [......10.0.2.15][50298] -> [.46.128.114.107][.6578] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...298] [ip4][..tcp] [......10.0.2.15][50322] -> [..164.132.10.25][55302] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...283] [ip4][..tcp] [......10.0.2.15][50307] -> [..176.99.176.20][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...300] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] + new: [...301] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][11852] + detected: [...271] [ip4][..tcp] [......10.0.2.15][50295] -> [.38.142.119.234][49732] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detection-update: [...290] [ip4][..tcp] [......10.0.2.15][50314] -> [...80.7.252.192][.6888] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Self-signed Cert, TLS Cert Expired, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + new: [...302] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][53489] + new: [...303] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][30566] + detected: [...284] [ip4][..tcp] [......10.0.2.15][50308] -> [.193.37.255.130][61616] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...304] [ip4][..udp] [......10.0.2.15][28681] -> [.193.32.126.214][59596] + detected: [...289] [ip4][..tcp] [......10.0.2.15][50313] -> [...96.65.68.194][35481] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...291] [ip4][..tcp] [......10.0.2.15][50315] -> [..45.31.152.112][26851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...278] [ip4][..tcp] [......10.0.2.15][50302] -> [....75.64.6.175][.4743] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...269] [ip4][..tcp] [......10.0.2.15][50293] -> [..97.83.183.148][.8890] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...287] [ip4][..tcp] [......10.0.2.15][50311] -> [.149.28.163.175][49956] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...282] [ip4][..tcp] [......10.0.2.15][50306] -> [.220.238.145.82][33527] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...275] [ip4][..tcp] [......10.0.2.15][50299] -> [203.220.198.244][.1194] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...285] [ip4][..tcp] [......10.0.2.15][50309] -> [..60.241.48.194][21301] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...270] [ip4][..tcp] [......10.0.2.15][50294] -> [.14.200.255.229][37058] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...273] [ip4][..tcp] [......10.0.2.15][50297] -> [.14.200.255.229][45710] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....21] [ip4][..udp] [......10.0.2.15][55708] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....23] [ip4][..udp] [......10.0.2.15][62539] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....25] [ip4][..udp] [......10.0.2.15][50435] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....22] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][62539] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [....24] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][50435] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [...305] [ip4][..udp] [......10.0.2.15][28681] -> [..88.168.175.31][.6346] + new: [...306] [ip4][..udp] [......10.0.2.15][28681] -> [..41.249.63.200][22582] + new: [...307] [ip4][..udp] [......10.0.2.15][28681] -> [..72.201.208.57][38617] + detected: [...307] [ip4][..udp] [......10.0.2.15][28681] -> [..72.201.208.57][38617] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...308] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][40137] + detected: [...308] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][40137] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...309] [ip4][..udp] [......10.0.2.15][28681] -> [.47.220.186.140][27641] + detected: [...309] [ip4][..udp] [......10.0.2.15][28681] -> [.47.220.186.140][27641] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...310] [ip4][..udp] [......10.0.2.15][28681] -> [.118.240.69.199][.6348] + detected: [...310] [ip4][..udp] [......10.0.2.15][28681] -> [.118.240.69.199][.6348] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...311] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.188.98][62851] + detected: [...311] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.188.98][62851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] + detected: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...313] [ip4][..udp] [......10.0.2.15][28681] -> [..176.99.176.20][.6346] + detected: [...313] [ip4][..udp] [......10.0.2.15][28681] -> [..176.99.176.20][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...314] [ip4][..udp] [......10.0.2.15][28681] -> [..71.237.202.91][16117] + detected: [...314] [ip4][..udp] [......10.0.2.15][28681] -> [..71.237.202.91][16117] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...315] [ip4][..udp] [......10.0.2.15][28681] -> [...92.217.84.16][20223] + detected: [...315] [ip4][..udp] [......10.0.2.15][28681] -> [...92.217.84.16][20223] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...316] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][63637] + detected: [...316] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][63637] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...317] [ip4][..udp] [......10.0.2.15][28681] -> [...96.236.205.7][34794] + detected: [...317] [ip4][..udp] [......10.0.2.15][28681] -> [...96.236.205.7][34794] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...318] [ip4][..udp] [......10.0.2.15][28681] -> [173.183.183.110][59920] + detected: [...318] [ip4][..udp] [......10.0.2.15][28681] -> [173.183.183.110][59920] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...319] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][55302] + detected: [...319] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][55302] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...320] [ip4][..udp] [......10.0.2.15][28681] -> [185.236.200.137][48142] + detected: [...320] [ip4][..udp] [......10.0.2.15][28681] -> [185.236.200.137][48142] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...321] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][21995] + detected: [...321] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][21995] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...322] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.219][.6909] + detected: [...322] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.219][.6909] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...323] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][56070] + detected: [...323] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][56070] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...324] [ip4][..udp] [......10.0.2.15][28681] -> [.73.250.179.237][20848] + detected: [...324] [ip4][..udp] [......10.0.2.15][28681] -> [.73.250.179.237][20848] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...325] [ip4][..udp] [......10.0.2.15][28681] -> [..83.160.143.48][37036] + detected: [...325] [ip4][..udp] [......10.0.2.15][28681] -> [..83.160.143.48][37036] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...326] [ip4][..udp] [......10.0.2.15][28681] -> [..100.1.231.138][56558] + detected: [...326] [ip4][..udp] [......10.0.2.15][28681] -> [..100.1.231.138][56558] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...327] [ip4][..udp] [......10.0.2.15][28681] -> [...84.28.53.225][44859] + detected: [...327] [ip4][..udp] [......10.0.2.15][28681] -> [...84.28.53.225][44859] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + analyse: [...239] [ip4][..tcp] [......10.0.2.15][50285] -> [..75.133.101.93][52367] [Gnutella][Download][Potentially Dangerous] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 8.796| 0.767| 2.113] + [IAT(c->s)...: 0.000| 8.738| 0.986| 2.349][IAT(s->c)...: 0.000| 8.796| 0.629| 1.937] + [PKTLEN(c->s): 54.000| 653.000| 134.600| 170.500][PKTLEN(s->c): 54.000|1514.000| 620.600| 539.800] + [BINS(c->s)..: 9,2,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,1,0,0,0,0,0,0,1,1,0,0,0,0,0,4,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0] + analyse: [...238] [ip4][..tcp] [......10.0.2.15][50284] -> [.104.156.226.72][53258] [Gnutella][Download][Potentially Dangerous] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 8.218| 0.797| 1.971] + [IAT(c->s)...: 0.000| 8.176| 0.824| 1.993][IAT(s->c)...: 0.000| 8.218| 0.772| 1.949] + [PKTLEN(c->s): 54.000| 654.000| 121.100| 156.500][PKTLEN(s->c): 54.000|1078.000| 472.000| 453.400] + [BINS(c->s)..: 12,2,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [...288] [ip4][..tcp] [......10.0.2.15][50312] -> [104.238.172.250][23548] [Gnutella][Download][Potentially Dangerous] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 8.692| 0.666| 2.111] + [IAT(c->s)...: 0.000| 8.644| 0.688| 2.136][IAT(s->c)...: 0.000| 8.692| 0.645| 2.087] + [PKTLEN(c->s): 54.000| 655.000| 124.400| 155.500][PKTLEN(s->c): 54.000| 682.000| 147.200| 182.700] + [BINS(c->s)..: 12,2,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,0,1,0,0,0,0,0,1,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [...328] [ip4][..udp] [......10.0.2.15][28681] -> [.203.220.105.27][19260] + detected: [...328] [ip4][..udp] [......10.0.2.15][28681] -> [.203.220.105.27][19260] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...329] [ip4][..udp] [......10.0.2.15][28681] -> [..92.117.249.98][.6815] + detected: [...329] [ip4][..udp] [......10.0.2.15][28681] -> [..92.117.249.98][.6815] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...330] [ip4][..udp] [......10.0.2.15][28681] -> [....82.64.44.11][.1352] + detected: [...330] [ip4][..udp] [......10.0.2.15][28681] -> [....82.64.44.11][.1352] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...331] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][26851] + detected: [...331] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][26851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....95] [ip4][.icmp] [.......10.0.2.2] -> [......10.0.2.15] [ICMP][Network][Acceptable] + new: [...332] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] + detected: [...332] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detected: [...267] [ip4][..tcp] [......10.0.2.15][50291] -> [..200.7.155.210][28365] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....54] [ip4][..udp] [......10.0.2.15][57623] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [.....2] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + update: [.....4] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::1] [ICMPV6][Network][Acceptable] + update: [.....3] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + update: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffa4:e108] [ICMPV6][Network][Acceptable] + update: [....26] [ip4][..udp] [......10.0.2.15][57619] -> [.......10.0.2.2][.5351] + update: [....27] [ip4][..udp] [......10.0.2.15][57620] -> [.......10.0.2.2][.5351] + update: [....34] [ip4][..udp] [......10.0.2.15][57621] -> [.......10.0.2.2][.5351] + update: [....41] [ip4][..udp] [......10.0.2.15][57622] -> [.......10.0.2.2][.5351] + new: [...333] [ip4][..tcp] [......10.0.2.15][50327] -> [.69.118.162.229][46906] + new: [...334] [ip4][..tcp] [......10.0.2.15][50328] -> [..189.147.72.83][26108] + detected: [...333] [ip4][..tcp] [......10.0.2.15][50327] -> [.69.118.162.229][46906] [HTTP.Gnutella][Download][Potentially Dangerous] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address, Unsafe Protocol + detected: [...334] [ip4][..tcp] [......10.0.2.15][50328] -> [..189.147.72.83][26108] [HTTP.Gnutella][Download][Potentially Dangerous] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address, Unsafe Protocol + new: [...335] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + detection-update: [...333] [ip4][..tcp] [......10.0.2.15][50327] -> [.69.118.162.229][46906] [HTTP.Gnutella][Media][Potentially Dangerous] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address, Unsafe Protocol + detection-update: [...334] [ip4][..tcp] [......10.0.2.15][50328] -> [..189.147.72.83][26108] [HTTP.Gnutella][Media][Potentially Dangerous] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address, Unsafe Protocol + new: [...336] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][.6888] + detected: [...336] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][.6888] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + analyse: [...333] [ip4][..tcp] [......10.0.2.15][50327] -> [.69.118.162.229][46906] [HTTP.Gnutella][Media][Potentially Dangerous] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.139| 0.307| 0.464] + [IAT(c->s)...: 0.000| 1.139| 0.472| 0.503][IAT(s->c)...: 0.000| 1.123| 0.240| 0.428] + [PKTLEN(c->s): 54.000| 587.000| 108.500| 159.500][PKTLEN(s->c): 54.000|1514.000|1205.600| 506.300] + [BINS(c->s)..: 9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,0,0] + analyse: [...276] [ip4][..tcp] [......10.0.2.15][50300] -> [..188.61.52.183][11852] [Gnutella][Download][Potentially Dangerous] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 13.802| 1.828| 3.934] + [IAT(c->s)...: 0.003| 13.802| 2.027| 3.989][IAT(s->c)...: 0.000| 13.761| 1.641| 3.873] + [PKTLEN(c->s): 54.000| 653.000| 160.800| 163.500][PKTLEN(s->c): 54.000|1514.000| 265.100| 375.000] + [BINS(c->s)..: 8,1,2,1,1,0,0,0,1,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,1,1,0,1,1,0,0,0,0,1,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + update: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] + update: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] + update: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] + update: [....88] [ip4][..udp] [......10.0.2.15][28681] -> [.....81.50.24.2][17874] + update: [....15] [ip4][..udp] [......10.0.2.15][63957] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + update: [....19] [ip4][..udp] [......10.0.2.15][63964] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + update: [.....5] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + update: [.....6] [ip4][..udp] [.......10.0.2.2][...67] -> [......10.0.2.15][...68] [DHCP][Network][Acceptable] + update: [....13] [ip4][..udp] [......10.0.2.15][..137] -> [.....10.0.2.255][..137] [NetBIOS][System][Acceptable] + update: [....20] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [....96] [ip4][..udp] [......10.0.2.15][28681] -> [.88.160.214.137][.6346] + update: [....16] [ip4][..udp] [......10.0.2.15][63962] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] + update: [...100] [ip4][..udp] [......10.0.2.15][28681] -> [220.133.122.217][23458] + update: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] + update: [...115] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.104][11804] + update: [...101] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + update: [....98] [ip4][..udp] [......10.0.2.15][28681] -> [.203.222.14.170][23332] + update: [....14] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63958] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + update: [....18] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63965] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + update: [...131] [ip4][..udp] [......10.0.2.15][28681] -> [.86.225.140.186][.6346] + update: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] + update: [...106] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.154.69][.4832] + update: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] + update: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] + update: [.....9] [ip4][..udp] [......10.0.2.15][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] + update: [....17] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63960] -> [................................ff02::c][.1900] [SSDP][System][Acceptable] + update: [...136] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][16047] + update: [....86] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + update: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] + update: [....10] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] + update: [...127] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.1024] + update: [...112] [ip4][..udp] [......10.0.2.15][28681] -> [.36.239.213.146][21750] + update: [...125] [ip4][..udp] [......10.0.2.15][28681] -> [..83.92.178.182][57302] + update: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] + update: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] + update: [....99] [ip4][..udp] [......10.0.2.15][28681] -> [....114.38.9.82][24223] + update: [...124] [ip4][..udp] [......10.0.2.15][28681] -> [...170.254.19.6][24180] + update: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] + update: [...107] [ip4][..udp] [......10.0.2.15][28681] -> [..202.151.63.59][.7624] + update: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] + update: [...103] [ip4][..udp] [......10.0.2.15][28681] -> [.220.134.167.82][.5820] + update: [....97] [ip4][..udp] [......10.0.2.15][28681] -> [..24.78.134.188][49046] + update: [...104] [ip4][..udp] [......10.0.2.15][28681] -> [..42.98.115.128][23458] + update: [.....7] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + update: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] + update: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] + update: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] + update: [...102] [ip4][..udp] [......10.0.2.15][28681] -> [.218.164.39.233][20855] + update: [...108] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][.7922] + update: [....12] [ip4][..udp] [......10.0.2.15][63717] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [...113] [ip4][..udp] [......10.0.2.15][28681] -> [105.101.132.146][57746] + update: [...132] [ip4][..udp] [......10.0.2.15][28681] -> [...79.86.173.45][.6346] + update: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] + update: [....11] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63717] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [...110] [ip4][..udp] [......10.0.2.15][28681] -> [..195.132.75.56][56009] + update: [...105] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + update: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] + new: [...337] [ip4][..udp] [......10.0.2.15][28681] -> [..24.116.64.132][51227] + detected: [...337] [ip4][..udp] [......10.0.2.15][28681] -> [..24.116.64.132][51227] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...338] [ip4][..udp] [......10.0.2.15][28681] -> [221.198.205.196][20778] + detected: [...338] [ip4][..udp] [......10.0.2.15][28681] -> [221.198.205.196][20778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...339] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][54130] + detected: [...339] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][54130] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...340] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49732] + detected: [...340] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49732] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...341] [ip4][..udp] [......10.0.2.15][28681] -> [..24.129.233.60][19990] + detected: [...341] [ip4][..udp] [......10.0.2.15][28681] -> [..24.129.233.60][19990] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...342] [ip4][..udp] [......10.0.2.15][28681] -> [..98.208.26.154][.4994] + detected: [...342] [ip4][..udp] [......10.0.2.15][28681] -> [..98.208.26.154][.4994] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...343] [ip4][..udp] [......10.0.2.15][28681] -> [..89.212.91.155][.5195] + detected: [...343] [ip4][..udp] [......10.0.2.15][28681] -> [..89.212.91.155][.5195] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...344] [ip4][..udp] [......10.0.2.15][28681] -> [.207.38.163.228][.6778] + detected: [...344] [ip4][..udp] [......10.0.2.15][28681] -> [.207.38.163.228][.6778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + analyse: [...334] [ip4][..tcp] [......10.0.2.15][50328] -> [..189.147.72.83][26108] [HTTP.Gnutella][Media][Potentially Dangerous] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.215| 0.581| 0.506] + [IAT(c->s)...: 0.002| 1.215| 0.850| 0.383][IAT(s->c)...: 0.000| 1.209| 0.453| 0.507] + [PKTLEN(c->s): 54.000| 592.000| 104.000| 154.400][PKTLEN(s->c): 54.000|1514.000|1147.900| 453.900] + [BINS(c->s)..: 10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,8,0,0,0,0,0,0,0,0,0,0,9,0,0] + new: [...345] [ip4][..tcp] [......10.0.2.15][50330] -> [.69.118.162.229][46906] + detected: [...345] [ip4][..tcp] [......10.0.2.15][50330] -> [.69.118.162.229][46906] [HTTP.Gnutella][Download][Potentially Dangerous] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address, Unsafe Protocol + new: [...346] [ip4][..udp] [......10.0.2.15][28681] -> [..76.226.85.105][.6346] + detected: [...346] [ip4][..udp] [......10.0.2.15][28681] -> [..76.226.85.105][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...347] [ip4][..udp] [......10.0.2.15][28681] -> [..176.10.169.10][12799] + detected: [...347] [ip4][..udp] [......10.0.2.15][28681] -> [..176.10.169.10][12799] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...348] [ip4][..udp] [......10.0.2.15][28681] -> [...84.197.97.94][.1360] + detected: [...348] [ip4][..udp] [......10.0.2.15][28681] -> [...84.197.97.94][.1360] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...349] [ip4][.icmp] [...84.197.97.94] -> [......10.0.2.15] + detected: [...349] [ip4][.icmp] [...84.197.97.94] -> [......10.0.2.15] [ICMP][Network][Acceptable] + new: [...350] [ip4][..udp] [......10.0.2.15][28681] -> [..99.250.253.99][11819] + detected: [...350] [ip4][..udp] [......10.0.2.15][28681] -> [..99.250.253.99][11819] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [.....4] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::1] [ICMPV6][Network][Acceptable] + idle: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffa4:e108] [ICMPV6][Network][Acceptable] + update: [...170] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] + update: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] + update: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] + update: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] + update: [...196] [ip4][..udp] [......10.0.2.15][28681] -> [..88.127.72.106][.6346] + update: [...195] [ip4][..udp] [......10.0.2.15][28681] -> [.177.231.151.16][.6346] + update: [...220] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][.9239] + update: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] + update: [...217] [ip4][..udp] [......10.0.2.15][28681] -> [.126.117.45.151][19323] + update: [...155] [ip4][..udp] [......10.0.2.15][28681] -> [.88.168.182.103][.6346] + update: [...198] [ip4][..udp] [......10.0.2.15][28681] -> [..58.182.171.50][15180] + update: [...191] [ip4][..udp] [......10.0.2.15][28681] -> [.190.153.143.54][65535] + update: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] + update: [...192] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] + update: [...181] [ip4][..udp] [......10.0.2.15][28681] -> [...66.177.5.135][.6346] + update: [...162] [ip4][..udp] [......10.0.2.15][28681] -> [.88.123.159.111][44729] + update: [...214] [ip4][..udp] [......10.0.2.15][28681] -> [.91.169.215.227][26820] + update: [...193] [ip4][..udp] [......10.0.2.15][28681] -> [..188.44.126.74][54633] + update: [...169] [ip4][..udp] [......10.0.2.15][28681] -> [...91.162.52.93][34799] + update: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] + update: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] + update: [...206] [ip4][..udp] [......10.0.2.15][28681] -> [213.166.132.204][11194] + update: [...203] [ip4][..udp] [......10.0.2.15][28681] -> [.120.156.204.38][54832] + update: [...199] [ip4][..udp] [......10.0.2.15][28681] -> [..114.73.129.26][53585] + update: [...207] [ip4][..udp] [......10.0.2.15][28681] -> [.81.242.191.215][.6346] + update: [...208] [ip4][..udp] [......10.0.2.15][28681] -> [..81.249.64.215][25058] + update: [...173] [ip4][..udp] [......10.0.2.15][28681] -> [..121.99.222.36][44988] + update: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] + update: [...212] [ip4][..udp] [......10.0.2.15][28681] -> [...36.233.3.223][12848] + update: [...197] [ip4][..udp] [......10.0.2.15][28681] -> [.208.92.106.151][32476] + update: [...168] [ip4][..udp] [......10.0.2.15][28681] -> [...89.157.59.43][56919] + update: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] + update: [...215] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] + update: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] + update: [...164] [ip4][..udp] [......10.0.2.15][28681] -> [.142.197.219.85][26234] + update: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] + update: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] + update: [...189] [ip4][..udp] [......10.0.2.15][28681] -> [115.195.105.243][.6346] + update: [...159] [ip4][..udp] [......10.0.2.15][28681] -> [176.163.231.160][.6346] + update: [...179] [ip4][..udp] [......10.0.2.15][28681] -> [.178.51.146.115][.6346] + update: [...186] [ip4][..udp] [......10.0.2.15][28681] -> [..91.182.44.202][30277] + update: [...213] [ip4][..udp] [......10.0.2.15][28681] -> [....5.180.62.37][.6346] + update: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] + update: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] + update: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] + update: [...174] [ip4][..udp] [......10.0.2.15][28681] -> [..196.74.159.56][29271] + update: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] + update: [...165] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] + update: [...161] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] + update: [...188] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] + update: [...177] [ip4][..udp] [......10.0.2.15][28681] -> [.69.157.183.106][.6346] + update: [...205] [ip4][..udp] [......10.0.2.15][28681] -> [..96.29.197.138][.6346] + update: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] + update: [...182] [ip4][..udp] [......10.0.2.15][28681] -> [....73.3.103.37][35589] + update: [...210] [ip4][..udp] [......10.0.2.15][28681] -> [.41.100.120.146][12838] + update: [...218] [ip4][..udp] [......10.0.2.15][28681] -> [.176.155.52.115][53956] + update: [...211] [ip4][..udp] [......10.0.2.15][28681] -> [..186.93.139.92][.6346] + update: [...200] [ip4][..udp] [......10.0.2.15][28681] -> [.138.199.16.123][52993] + update: [...154] [ip4][..udp] [......10.0.2.15][28681] -> [174.115.111.224][51984] + update: [...201] [ip4][..udp] [......10.0.2.15][28681] -> [.85.170.209.214][46210] + update: [...194] [ip4][..udp] [......10.0.2.15][28681] -> [176.150.126.156][16471] + update: [...178] [ip4][..udp] [......10.0.2.15][28681] -> [....83.46.253.7][.6346] + update: [...163] [ip4][..udp] [......10.0.2.15][28681] -> [.88.126.160.158][.6346] + update: [...216] [ip4][..udp] [......10.0.2.15][28681] -> [.212.68.248.153][27223] + update: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] + update: [...204] [ip4][..udp] [......10.0.2.15][28681] -> [..84.126.240.32][45313] + update: [...202] [ip4][..udp] [......10.0.2.15][28681] -> [.176.134.139.39][.6346] + new: [...351] [ip4][..udp] [......10.0.2.15][28681] -> [..187.37.87.189][.6346] + new: [...352] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.6346] + analyse: [....93] [ip4][..tcp] [......10.0.2.15][50248] -> [109.214.154.216][.6346] [Gnutella][Download][Potentially Dangerous] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 22.685| 3.465| 6.256] + [IAT(c->s)...: 0.003| 22.634| 3.523| 6.232][IAT(s->c)...: 0.001| 22.685| 3.423| 6.272] + [PKTLEN(c->s): 54.000| 358.000| 105.200| 80.300][PKTLEN(s->c): 54.000|1078.000| 188.700| 275.600] + [BINS(c->s)..: 9,0,2,2,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,2,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [...353] [ip4][..udp] [......10.0.2.15][28681] -> [195.181.151.217][25282] + new: [...354] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][.1032] + new: [...355] [ip4][..udp] [......10.0.2.15][28681] -> [.181.118.53.212][29998] + detected: [...355] [ip4][..udp] [......10.0.2.15][28681] -> [.181.118.53.212][29998] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...356] [ip4][..udp] [......10.0.2.15][28681] -> [.63.228.175.169][.1936] + detected: [...356] [ip4][..udp] [......10.0.2.15][28681] -> [.63.228.175.169][.1936] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...357] [ip4][..udp] [......10.0.2.15][28681] -> [...98.35.85.238][32173] + detected: [...357] [ip4][..udp] [......10.0.2.15][28681] -> [...98.35.85.238][32173] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...358] [ip4][..udp] [......10.0.2.15][28681] -> [.47.224.174.174][.6346] + detected: [...358] [ip4][..udp] [......10.0.2.15][28681] -> [.47.224.174.174][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [.....3] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + idle: [.....2] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + update: [....95] [ip4][.icmp] [.......10.0.2.2] -> [......10.0.2.15] [ICMP][Network][Acceptable] + update: [...247] [ip4][..udp] [......10.0.2.15][28681] -> [..181.84.178.16][60262] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...307] [ip4][..udp] [......10.0.2.15][28681] -> [..72.201.208.57][38617] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...309] [ip4][..udp] [......10.0.2.15][28681] -> [.47.220.186.140][27641] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...254] [ip4][..udp] [......10.0.2.15][28681] -> [..88.120.73.215][24562] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...258] [ip4][..udp] [......10.0.2.15][28681] -> [...24.26.216.95][13889] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...315] [ip4][..udp] [......10.0.2.15][28681] -> [...92.217.84.16][20223] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....21] [ip4][..udp] [......10.0.2.15][55708] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...305] [ip4][..udp] [......10.0.2.15][28681] -> [..88.168.175.31][.6346] + update: [...310] [ip4][..udp] [......10.0.2.15][28681] -> [.118.240.69.199][.6348] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...306] [ip4][..udp] [......10.0.2.15][28681] -> [..41.249.63.200][22582] + update: [...265] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][.1194] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...304] [ip4][..udp] [......10.0.2.15][28681] -> [.193.32.126.214][59596] + update: [...318] [ip4][..udp] [......10.0.2.15][28681] -> [173.183.183.110][59920] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...242] [ip4][..udp] [......10.0.2.15][28681] -> [..75.133.101.93][52367] + update: [...260] [ip4][..udp] [......10.0.2.15][28681] -> [.46.128.114.107][.6578] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...311] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.188.98][62851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....23] [ip4][..udp] [......10.0.2.15][62539] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [...308] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][40137] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...251] [ip4][..udp] [......10.0.2.15][28681] -> [.185.203.218.92][56962] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...259] [ip4][..udp] [......10.0.2.15][28681] -> [103.232.107.100][43508] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...300] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] + update: [...250] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][26253] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....25] [ip4][..udp] [......10.0.2.15][50435] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [...256] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][50297] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....22] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][62539] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [...249] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.218][.6909] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...257] [ip4][..udp] [......10.0.2.15][28681] -> [.82.181.251.218][36368] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....24] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][50435] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [...303] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][30566] + update: [...246] [ip4][..udp] [......10.0.2.15][28681] -> [...96.65.68.194][35481] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...301] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][11852] + update: [...314] [ip4][..udp] [......10.0.2.15][28681] -> [..71.237.202.91][16117] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...317] [ip4][..udp] [......10.0.2.15][28681] -> [...96.236.205.7][34794] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...261] [ip4][..udp] [......10.0.2.15][28681] -> [..60.241.48.194][21301] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...243] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] + update: [...313] [ip4][..udp] [......10.0.2.15][28681] -> [..176.99.176.20][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...302] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][53489] + update: [...255] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][30577] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...248] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][12012] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...263] [ip4][..udp] [......10.0.2.15][28681] -> [..82.217.176.52][.7446] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...253] [ip4][..udp] [......10.0.2.15][28681] -> [.193.37.255.130][61616] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...252] [ip4][..udp] [......10.0.2.15][28681] -> [..72.140.120.41][47739] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...316] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][63637] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...262] [ip4][..udp] [......10.0.2.15][28681] -> [....89.75.52.19][46010] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...264] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][11603] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...329] [ip4][..udp] [......10.0.2.15][28681] -> [..92.117.249.98][.6815] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...328] [ip4][..udp] [......10.0.2.15][28681] -> [.203.220.105.27][19260] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...331] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][26851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...320] [ip4][..udp] [......10.0.2.15][28681] -> [185.236.200.137][48142] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...332] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...325] [ip4][..udp] [......10.0.2.15][28681] -> [..83.160.143.48][37036] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...323] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][56070] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...322] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.219][.6909] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...327] [ip4][..udp] [......10.0.2.15][28681] -> [...84.28.53.225][44859] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...321] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][21995] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...324] [ip4][..udp] [......10.0.2.15][28681] -> [.73.250.179.237][20848] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...319] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][55302] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...330] [ip4][..udp] [......10.0.2.15][28681] -> [....82.64.44.11][.1352] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...326] [ip4][..udp] [......10.0.2.15][28681] -> [..100.1.231.138][56558] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...359] [ip4][..udp] [......10.0.2.15][51685] -> [239.255.255.250][.1900] + detected: [...359] [ip4][..udp] [......10.0.2.15][51685] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....54] [ip4][..udp] [......10.0.2.15][57623] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...335] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + update: [...349] [ip4][.icmp] [...84.197.97.94] -> [......10.0.2.15] [ICMP][Network][Acceptable] + update: [....26] [ip4][..udp] [......10.0.2.15][57619] -> [.......10.0.2.2][.5351] + update: [....27] [ip4][..udp] [......10.0.2.15][57620] -> [.......10.0.2.2][.5351] + update: [....34] [ip4][..udp] [......10.0.2.15][57621] -> [.......10.0.2.2][.5351] + update: [....41] [ip4][..udp] [......10.0.2.15][57622] -> [.......10.0.2.2][.5351] + new: [...360] [ip4][..udp] [......10.0.2.15][28681] -> [..198.58.218.12][47912] + detected: [...360] [ip4][..udp] [......10.0.2.15][28681] -> [..198.58.218.12][47912] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...361] [ip4][..udp] [......10.0.2.15][28681] -> [..86.129.196.84][.9915] + detected: [...361] [ip4][..udp] [......10.0.2.15][28681] -> [..86.129.196.84][.9915] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...362] [ip4][..udp] [......10.0.2.15][28681] -> [190.192.210.182][.6754] + detected: [...362] [ip4][..udp] [......10.0.2.15][28681] -> [190.192.210.182][.6754] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...363] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][38297] + detected: [...363] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][38297] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....95] [ip4][.icmp] [.......10.0.2.2] -> [......10.0.2.15] [ICMP][Network][Acceptable] + update: [...338] [ip4][..udp] [......10.0.2.15][28681] -> [221.198.205.196][20778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] + update: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] + update: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] + update: [....88] [ip4][..udp] [......10.0.2.15][28681] -> [.....81.50.24.2][17874] + update: [....15] [ip4][..udp] [......10.0.2.15][63957] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + update: [....19] [ip4][..udp] [......10.0.2.15][63964] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + update: [...340] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49732] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [.....5] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + update: [.....6] [ip4][..udp] [.......10.0.2.2][...67] -> [......10.0.2.15][...68] [DHCP][Network][Acceptable] + update: [...343] [ip4][..udp] [......10.0.2.15][28681] -> [..89.212.91.155][.5195] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [.....8] [ip4][....2] [......10.0.2.15] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + update: [....13] [ip4][..udp] [......10.0.2.15][..137] -> [.....10.0.2.255][..137] [NetBIOS][System][Acceptable] + update: [....20] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [....96] [ip4][..udp] [......10.0.2.15][28681] -> [.88.160.214.137][.6346] + update: [....16] [ip4][..udp] [......10.0.2.15][63962] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] + update: [...344] [ip4][..udp] [......10.0.2.15][28681] -> [.207.38.163.228][.6778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...100] [ip4][..udp] [......10.0.2.15][28681] -> [220.133.122.217][23458] + update: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] + update: [...115] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.104][11804] + update: [...101] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + update: [....98] [ip4][..udp] [......10.0.2.15][28681] -> [.203.222.14.170][23332] + update: [....14] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63958] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + update: [....18] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63965] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + update: [...131] [ip4][..udp] [......10.0.2.15][28681] -> [.86.225.140.186][.6346] + update: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] + update: [...336] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][.6888] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...106] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.154.69][.4832] + update: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] + update: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] + update: [.....9] [ip4][..udp] [......10.0.2.15][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] + update: [....17] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63960] -> [................................ff02::c][.1900] [SSDP][System][Acceptable] + update: [...136] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][16047] + update: [....86] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + update: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] + update: [....10] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] + update: [...127] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.1024] + update: [...342] [ip4][..udp] [......10.0.2.15][28681] -> [..98.208.26.154][.4994] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...112] [ip4][..udp] [......10.0.2.15][28681] -> [.36.239.213.146][21750] + update: [...125] [ip4][..udp] [......10.0.2.15][28681] -> [..83.92.178.182][57302] + update: [...337] [ip4][..udp] [......10.0.2.15][28681] -> [..24.116.64.132][51227] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] + update: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] + update: [....99] [ip4][..udp] [......10.0.2.15][28681] -> [....114.38.9.82][24223] + update: [...124] [ip4][..udp] [......10.0.2.15][28681] -> [...170.254.19.6][24180] + update: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] + update: [...107] [ip4][..udp] [......10.0.2.15][28681] -> [..202.151.63.59][.7624] + update: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] + update: [...103] [ip4][..udp] [......10.0.2.15][28681] -> [.220.134.167.82][.5820] + update: [....97] [ip4][..udp] [......10.0.2.15][28681] -> [..24.78.134.188][49046] + update: [...104] [ip4][..udp] [......10.0.2.15][28681] -> [..42.98.115.128][23458] + update: [.....7] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + update: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] + update: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] + update: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] + update: [...102] [ip4][..udp] [......10.0.2.15][28681] -> [.218.164.39.233][20855] + update: [...108] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][.7922] + update: [....12] [ip4][..udp] [......10.0.2.15][63717] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [...339] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][54130] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...113] [ip4][..udp] [......10.0.2.15][28681] -> [105.101.132.146][57746] + update: [...132] [ip4][..udp] [......10.0.2.15][28681] -> [...79.86.173.45][.6346] + update: [...341] [ip4][..udp] [......10.0.2.15][28681] -> [..24.129.233.60][19990] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] + update: [....11] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63717] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [...110] [ip4][..udp] [......10.0.2.15][28681] -> [..195.132.75.56][56009] + update: [...105] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + update: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] + new: [...364] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][10825] + detected: [...364] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][10825] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...365] [ip4][..udp] [......10.0.2.15][28681] -> [..188.23.24.213][18561] + detected: [...365] [ip4][..udp] [......10.0.2.15][28681] -> [..188.23.24.213][18561] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...366] [ip4][..udp] [......10.0.2.15][28681] -> [....94.8.55.158][51140] + detected: [...366] [ip4][..udp] [......10.0.2.15][28681] -> [....94.8.55.158][51140] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...367] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][49956] + detected: [...367] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][49956] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...368] [ip4][..udp] [......10.0.2.15][28681] -> [...47.147.52.21][36728] + detected: [...368] [ip4][..udp] [......10.0.2.15][28681] -> [...47.147.52.21][36728] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...170] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] + update: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] + update: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] + update: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] + update: [...196] [ip4][..udp] [......10.0.2.15][28681] -> [..88.127.72.106][.6346] + update: [...354] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][.1032] + update: [...352] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.6346] + update: [...195] [ip4][..udp] [......10.0.2.15][28681] -> [.177.231.151.16][.6346] + update: [...353] [ip4][..udp] [......10.0.2.15][28681] -> [195.181.151.217][25282] + update: [...220] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][.9239] + update: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] + update: [...350] [ip4][..udp] [......10.0.2.15][28681] -> [..99.250.253.99][11819] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...217] [ip4][..udp] [......10.0.2.15][28681] -> [.126.117.45.151][19323] + update: [...155] [ip4][..udp] [......10.0.2.15][28681] -> [.88.168.182.103][.6346] + update: [...198] [ip4][..udp] [......10.0.2.15][28681] -> [..58.182.171.50][15180] + update: [...191] [ip4][..udp] [......10.0.2.15][28681] -> [.190.153.143.54][65535] + update: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] + update: [...192] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] + update: [...181] [ip4][..udp] [......10.0.2.15][28681] -> [...66.177.5.135][.6346] + update: [...162] [ip4][..udp] [......10.0.2.15][28681] -> [.88.123.159.111][44729] + update: [...214] [ip4][..udp] [......10.0.2.15][28681] -> [.91.169.215.227][26820] + update: [...193] [ip4][..udp] [......10.0.2.15][28681] -> [..188.44.126.74][54633] + update: [...169] [ip4][..udp] [......10.0.2.15][28681] -> [...91.162.52.93][34799] + update: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] + update: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] + update: [...206] [ip4][..udp] [......10.0.2.15][28681] -> [213.166.132.204][11194] + update: [...348] [ip4][..udp] [......10.0.2.15][28681] -> [...84.197.97.94][.1360] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...203] [ip4][..udp] [......10.0.2.15][28681] -> [.120.156.204.38][54832] + update: [...199] [ip4][..udp] [......10.0.2.15][28681] -> [..114.73.129.26][53585] + update: [...346] [ip4][..udp] [......10.0.2.15][28681] -> [..76.226.85.105][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...207] [ip4][..udp] [......10.0.2.15][28681] -> [.81.242.191.215][.6346] + update: [...208] [ip4][..udp] [......10.0.2.15][28681] -> [..81.249.64.215][25058] + update: [...173] [ip4][..udp] [......10.0.2.15][28681] -> [..121.99.222.36][44988] + update: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] + update: [...212] [ip4][..udp] [......10.0.2.15][28681] -> [...36.233.3.223][12848] + update: [...197] [ip4][..udp] [......10.0.2.15][28681] -> [.208.92.106.151][32476] + update: [...168] [ip4][..udp] [......10.0.2.15][28681] -> [...89.157.59.43][56919] + update: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] + update: [...215] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] + update: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] + update: [...164] [ip4][..udp] [......10.0.2.15][28681] -> [.142.197.219.85][26234] + update: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] + update: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] + update: [...189] [ip4][..udp] [......10.0.2.15][28681] -> [115.195.105.243][.6346] + update: [...159] [ip4][..udp] [......10.0.2.15][28681] -> [176.163.231.160][.6346] + update: [...179] [ip4][..udp] [......10.0.2.15][28681] -> [.178.51.146.115][.6346] + update: [...186] [ip4][..udp] [......10.0.2.15][28681] -> [..91.182.44.202][30277] + update: [...347] [ip4][..udp] [......10.0.2.15][28681] -> [..176.10.169.10][12799] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...213] [ip4][..udp] [......10.0.2.15][28681] -> [....5.180.62.37][.6346] + update: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] + update: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] + update: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] + update: [...174] [ip4][..udp] [......10.0.2.15][28681] -> [..196.74.159.56][29271] + update: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] + update: [...165] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] + update: [...161] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] + update: [...188] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] + update: [...177] [ip4][..udp] [......10.0.2.15][28681] -> [.69.157.183.106][.6346] + update: [...205] [ip4][..udp] [......10.0.2.15][28681] -> [..96.29.197.138][.6346] + update: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] + update: [...182] [ip4][..udp] [......10.0.2.15][28681] -> [....73.3.103.37][35589] + update: [...210] [ip4][..udp] [......10.0.2.15][28681] -> [.41.100.120.146][12838] + update: [...218] [ip4][..udp] [......10.0.2.15][28681] -> [.176.155.52.115][53956] + update: [...211] [ip4][..udp] [......10.0.2.15][28681] -> [..186.93.139.92][.6346] + update: [...351] [ip4][..udp] [......10.0.2.15][28681] -> [..187.37.87.189][.6346] + update: [...200] [ip4][..udp] [......10.0.2.15][28681] -> [.138.199.16.123][52993] + update: [...154] [ip4][..udp] [......10.0.2.15][28681] -> [174.115.111.224][51984] + update: [...201] [ip4][..udp] [......10.0.2.15][28681] -> [.85.170.209.214][46210] + update: [...194] [ip4][..udp] [......10.0.2.15][28681] -> [176.150.126.156][16471] + update: [...178] [ip4][..udp] [......10.0.2.15][28681] -> [....83.46.253.7][.6346] + update: [...163] [ip4][..udp] [......10.0.2.15][28681] -> [.88.126.160.158][.6346] + update: [...216] [ip4][..udp] [......10.0.2.15][28681] -> [.212.68.248.153][27223] + update: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] + update: [...204] [ip4][..udp] [......10.0.2.15][28681] -> [..84.126.240.32][45313] + update: [...202] [ip4][..udp] [......10.0.2.15][28681] -> [.176.134.139.39][.6346] + analyse: [....94] [ip4][..tcp] [......10.0.2.15][50249] -> [.86.208.180.181][45883] [Gnutella][Download][Potentially Dangerous] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 55.455| 7.491| 14.262] + [IAT(c->s)...: 0.000| 55.455| 7.758| 14.427][IAT(s->c)...: 0.001| 55.397| 7.241| 14.101] + [PKTLEN(c->s): 54.000| 357.000| 99.300| 76.500][PKTLEN(s->c): 54.000|1119.000| 242.500| 321.700] + [BINS(c->s)..: 11,0,2,2,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 10,0,0,0,1,1,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [....35] [ip4][..tcp] [......10.0.2.15][50196] -> [...218.250.6.59][12556] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [....46] [ip4][..tcp] [......10.0.2.15][50206] -> [175.181.156.244][.8255] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [....77] [ip4][..tcp] [......10.0.2.15][50236] -> [..93.29.135.209][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [....73] [ip4][..tcp] [......10.0.2.15][50232] -> [182.155.242.225][15068] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [....67] [ip4][..tcp] [......10.0.2.15][50226] -> [116.241.162.162][15677] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [....42] [ip4][..tcp] [......10.0.2.15][50202] -> [.61.238.173.128][57648] [Unknown][Unrated] + end: [....42] [ip4][..tcp] [......10.0.2.15][50202] -> [.61.238.173.128][57648] + end: [....36] [ip4][..tcp] [......10.0.2.15][50197] -> [..118.168.15.71][.3931] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [....63] [ip4][..tcp] [......10.0.2.15][50222] -> [.119.14.143.237][.6523] [Unknown][Unrated] + end: [....63] [ip4][..tcp] [......10.0.2.15][50222] -> [.119.14.143.237][.6523] + not-detected: [....61] [ip4][..tcp] [......10.0.2.15][50220] -> [.36.233.196.226][.3820] [Unknown][Unrated] + end: [....61] [ip4][..tcp] [......10.0.2.15][50220] -> [.36.233.196.226][.3820] + end: [....43] [ip4][..tcp] [......10.0.2.15][50203] -> [..61.222.160.99][18994] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [....69] [ip4][..tcp] [......10.0.2.15][50228] -> [..111.241.31.96][14384] [Unknown][Unrated] + end: [....69] [ip4][..tcp] [......10.0.2.15][50228] -> [..111.241.31.96][14384] + end: [....38] [ip4][..tcp] [......10.0.2.15][50199] -> [...47.147.52.21][36728] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [....51] [ip4][..tcp] [......10.0.2.15][50211] -> [...14.199.10.60][23458] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [....76] [ip4][..tcp] [......10.0.2.15][50235] -> [...45.88.118.70][.6906] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...247] [ip4][..udp] [......10.0.2.15][28681] -> [..181.84.178.16][60262] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...307] [ip4][..udp] [......10.0.2.15][28681] -> [..72.201.208.57][38617] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...309] [ip4][..udp] [......10.0.2.15][28681] -> [.47.220.186.140][27641] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...254] [ip4][..udp] [......10.0.2.15][28681] -> [..88.120.73.215][24562] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...258] [ip4][..udp] [......10.0.2.15][28681] -> [...24.26.216.95][13889] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...315] [ip4][..udp] [......10.0.2.15][28681] -> [...92.217.84.16][20223] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....21] [ip4][..udp] [......10.0.2.15][55708] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...358] [ip4][..udp] [......10.0.2.15][28681] -> [.47.224.174.174][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...357] [ip4][..udp] [......10.0.2.15][28681] -> [...98.35.85.238][32173] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...305] [ip4][..udp] [......10.0.2.15][28681] -> [..88.168.175.31][.6346] + update: [...310] [ip4][..udp] [......10.0.2.15][28681] -> [.118.240.69.199][.6348] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...306] [ip4][..udp] [......10.0.2.15][28681] -> [..41.249.63.200][22582] + update: [...265] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][.1194] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...304] [ip4][..udp] [......10.0.2.15][28681] -> [.193.32.126.214][59596] + update: [...318] [ip4][..udp] [......10.0.2.15][28681] -> [173.183.183.110][59920] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...242] [ip4][..udp] [......10.0.2.15][28681] -> [..75.133.101.93][52367] + update: [...260] [ip4][..udp] [......10.0.2.15][28681] -> [.46.128.114.107][.6578] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...311] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.188.98][62851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....23] [ip4][..udp] [......10.0.2.15][62539] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [...308] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][40137] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...251] [ip4][..udp] [......10.0.2.15][28681] -> [.185.203.218.92][56962] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...259] [ip4][..udp] [......10.0.2.15][28681] -> [103.232.107.100][43508] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...300] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] + update: [...250] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][26253] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....25] [ip4][..udp] [......10.0.2.15][50435] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [...256] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][50297] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....22] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][62539] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [...249] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.218][.6909] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...257] [ip4][..udp] [......10.0.2.15][28681] -> [.82.181.251.218][36368] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....24] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][50435] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [...356] [ip4][..udp] [......10.0.2.15][28681] -> [.63.228.175.169][.1936] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...355] [ip4][..udp] [......10.0.2.15][28681] -> [.181.118.53.212][29998] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...303] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][30566] + update: [...246] [ip4][..udp] [......10.0.2.15][28681] -> [...96.65.68.194][35481] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...301] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][11852] + update: [...314] [ip4][..udp] [......10.0.2.15][28681] -> [..71.237.202.91][16117] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...317] [ip4][..udp] [......10.0.2.15][28681] -> [...96.236.205.7][34794] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...261] [ip4][..udp] [......10.0.2.15][28681] -> [..60.241.48.194][21301] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...243] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] + update: [...313] [ip4][..udp] [......10.0.2.15][28681] -> [..176.99.176.20][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...302] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][53489] + update: [...255] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][30577] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...248] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][12012] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...349] [ip4][.icmp] [...84.197.97.94] -> [......10.0.2.15] [ICMP][Network][Acceptable] + update: [...263] [ip4][..udp] [......10.0.2.15][28681] -> [..82.217.176.52][.7446] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...253] [ip4][..udp] [......10.0.2.15][28681] -> [.193.37.255.130][61616] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...252] [ip4][..udp] [......10.0.2.15][28681] -> [..72.140.120.41][47739] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...316] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][63637] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...262] [ip4][..udp] [......10.0.2.15][28681] -> [....89.75.52.19][46010] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...264] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][11603] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [....15] [ip4][..udp] [......10.0.2.15][63957] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + idle: [.....5] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [.....6] [ip4][..udp] [.......10.0.2.2][...67] -> [......10.0.2.15][...68] [DHCP][Network][Acceptable] + not-detected: [...143] [ip4][..tcp] [......10.0.2.15][50256] -> [.36.233.201.161][.2886] [Unknown][Unrated] + end: [...143] [ip4][..tcp] [......10.0.2.15][50256] -> [.36.233.201.161][.2886] + end: [...149] [ip4][..tcp] [......10.0.2.15][50262] -> [..80.61.221.246][30577] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [....14] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63958] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + idle: [....17] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63960] -> [................................ff02::c][.1900] [SSDP][System][Acceptable] + end: [...119] [ip4][..tcp] [......10.0.2.15][50250] -> [...27.94.154.53][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...121] [ip4][..tcp] [......10.0.2.15][50252] -> [.123.202.31.113][19768] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...153] [ip4][..tcp] [......10.0.2.15][50266] -> [.219.70.175.103][.4315] [Unknown][Unrated] + end: [...153] [ip4][..tcp] [......10.0.2.15][50266] -> [.219.70.175.103][.4315] + end: [....37] [ip4][..tcp] [......10.0.2.15][50198] -> [..86.129.196.84][.9915] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...146] [ip4][..tcp] [......10.0.2.15][50259] -> [.183.179.90.112][.9852] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...122] [ip4][..tcp] [......10.0.2.15][50253] -> [103.232.107.100][43508] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [....12] [ip4][..udp] [......10.0.2.15][63717] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....11] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63717] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [...329] [ip4][..udp] [......10.0.2.15][28681] -> [..92.117.249.98][.6815] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...328] [ip4][..udp] [......10.0.2.15][28681] -> [.203.220.105.27][19260] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...331] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][26851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...320] [ip4][..udp] [......10.0.2.15][28681] -> [185.236.200.137][48142] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...332] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...325] [ip4][..udp] [......10.0.2.15][28681] -> [..83.160.143.48][37036] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...323] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][56070] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...322] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.219][.6909] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...327] [ip4][..udp] [......10.0.2.15][28681] -> [...84.28.53.225][44859] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...321] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][21995] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...324] [ip4][..udp] [......10.0.2.15][28681] -> [.73.250.179.237][20848] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...319] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][55302] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...330] [ip4][..udp] [......10.0.2.15][28681] -> [....82.64.44.11][.1352] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...326] [ip4][..udp] [......10.0.2.15][28681] -> [..100.1.231.138][56558] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...293] [ip4][..tcp] [......10.0.2.15][50317] -> [188.165.203.190][21995] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [....19] [ip4][..udp] [......10.0.2.15][63964] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + end: [...292] [ip4][..tcp] [......10.0.2.15][50316] -> [.142.132.165.13][30566] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...289] [ip4][..tcp] [......10.0.2.15][50313] -> [...96.65.68.194][35481] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...223] [ip4][..tcp] [......10.0.2.15][50269] -> [..218.103.139.2][.3186] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...148] [ip4][..tcp] [......10.0.2.15][50261] -> [....156.57.42.2][33476] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...280] [ip4][..tcp] [......10.0.2.15][50304] -> [..85.168.34.105][39908] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...285] [ip4][..tcp] [......10.0.2.15][50309] -> [..60.241.48.194][21301] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...283] [ip4][..tcp] [......10.0.2.15][50307] -> [..176.99.176.20][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...295] [ip4][..tcp] [......10.0.2.15][50319] -> [.185.187.74.173][53489] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...298] [ip4][..tcp] [......10.0.2.15][50322] -> [..164.132.10.25][55302] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [....16] [ip4][..udp] [......10.0.2.15][63962] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + not-detected: [...237] [ip4][..tcp] [......10.0.2.15][50283] -> [..51.68.153.214][35004] [Unknown][Unrated] + end: [...237] [ip4][..tcp] [......10.0.2.15][50283] -> [..51.68.153.214][35004] + idle: [....18] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63965] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + end: [...269] [ip4][..tcp] [......10.0.2.15][50293] -> [..97.83.183.148][.8890] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...296] [ip4][..tcp] [......10.0.2.15][50320] -> [194.163.180.126][10825] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...284] [ip4][..tcp] [......10.0.2.15][50308] -> [.193.37.255.130][61616] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...291] [ip4][..tcp] [......10.0.2.15][50315] -> [..45.31.152.112][26851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...279] [ip4][..tcp] [......10.0.2.15][50303] -> [..88.120.73.215][24562] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...271] [ip4][..tcp] [......10.0.2.15][50295] -> [.38.142.119.234][49732] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...221] [ip4][..tcp] [......10.0.2.15][50267] -> [.113.252.86.162][.9239] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...270] [ip4][..tcp] [......10.0.2.15][50294] -> [.14.200.255.229][37058] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...272] [ip4][..tcp] [......10.0.2.15][50296] -> [...77.58.211.52][.3806] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...275] [ip4][..tcp] [......10.0.2.15][50299] -> [203.220.198.244][.1194] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...294] [ip4][..tcp] [......10.0.2.15][50318] -> [.193.32.126.214][59596] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...274] [ip4][..tcp] [......10.0.2.15][50298] -> [.46.128.114.107][.6578] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...290] [ip4][..tcp] [......10.0.2.15][50314] -> [...80.7.252.192][.6888] + end: [...222] [ip4][..tcp] [......10.0.2.15][50268] -> [.210.209.249.84][24751] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...273] [ip4][..tcp] [......10.0.2.15][50297] -> [.14.200.255.229][45710] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...299] [ip4][..tcp] [......10.0.2.15][50323] -> [..51.68.153.214][26253] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....95] [ip4][.icmp] [.......10.0.2.2] -> [......10.0.2.15] [ICMP][Network][Acceptable] + update: [....54] [ip4][..udp] [......10.0.2.15][57623] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...335] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + update: [...359] [ip4][..udp] [......10.0.2.15][51685] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....26] [ip4][..udp] [......10.0.2.15][57619] -> [.......10.0.2.2][.5351] + update: [....27] [ip4][..udp] [......10.0.2.15][57620] -> [.......10.0.2.2][.5351] + update: [....34] [ip4][..udp] [......10.0.2.15][57621] -> [.......10.0.2.2][.5351] + update: [....41] [ip4][..udp] [......10.0.2.15][57622] -> [.......10.0.2.2][.5351] + new: [...369] [ip4][..udp] [......10.0.2.15][28681] -> [.89.187.171.240][.6346] + idle: [....95] [ip4][.icmp] [.......10.0.2.2] -> [......10.0.2.15] [ICMP][Network][Acceptable] + idle: [....13] [ip4][..udp] [......10.0.2.15][..137] -> [.....10.0.2.255][..137] [NetBIOS][System][Acceptable] + idle: [....23] [ip4][..udp] [......10.0.2.15][62539] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....25] [ip4][..udp] [......10.0.2.15][50435] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....22] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][62539] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + end: [...277] [ip4][..tcp] [......10.0.2.15][50301] -> [..87.123.54.234][54130] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [....24] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][50435] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + end: [...287] [ip4][..tcp] [......10.0.2.15][50311] -> [.149.28.163.175][49956] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...282] [ip4][..tcp] [......10.0.2.15][50306] -> [.220.238.145.82][33527] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...278] [ip4][..tcp] [......10.0.2.15][50302] -> [....75.64.6.175][.4743] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...338] [ip4][..udp] [......10.0.2.15][28681] -> [221.198.205.196][20778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...361] [ip4][..udp] [......10.0.2.15][28681] -> [..86.129.196.84][.9915] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] + update: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] + update: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] + update: [...366] [ip4][..udp] [......10.0.2.15][28681] -> [....94.8.55.158][51140] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....88] [ip4][..udp] [......10.0.2.15][28681] -> [.....81.50.24.2][17874] + update: [...365] [ip4][..udp] [......10.0.2.15][28681] -> [..188.23.24.213][18561] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...340] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49732] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...343] [ip4][..udp] [......10.0.2.15][28681] -> [..89.212.91.155][.5195] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....20] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [....96] [ip4][..udp] [......10.0.2.15][28681] -> [.88.160.214.137][.6346] + update: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] + update: [...344] [ip4][..udp] [......10.0.2.15][28681] -> [.207.38.163.228][.6778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...100] [ip4][..udp] [......10.0.2.15][28681] -> [220.133.122.217][23458] + update: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] + update: [...115] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.104][11804] + update: [...101] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + update: [....98] [ip4][..udp] [......10.0.2.15][28681] -> [.203.222.14.170][23332] + update: [...131] [ip4][..udp] [......10.0.2.15][28681] -> [.86.225.140.186][.6346] + update: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] + update: [...336] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][.6888] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...106] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.154.69][.4832] + update: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] + update: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] + update: [...368] [ip4][..udp] [......10.0.2.15][28681] -> [...47.147.52.21][36728] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [.....9] [ip4][..udp] [......10.0.2.15][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] + update: [...363] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][38297] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...136] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][16047] + update: [....86] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + update: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] + update: [...362] [ip4][..udp] [......10.0.2.15][28681] -> [190.192.210.182][.6754] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....10] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] + update: [...127] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.1024] + update: [...342] [ip4][..udp] [......10.0.2.15][28681] -> [..98.208.26.154][.4994] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...112] [ip4][..udp] [......10.0.2.15][28681] -> [.36.239.213.146][21750] + update: [...125] [ip4][..udp] [......10.0.2.15][28681] -> [..83.92.178.182][57302] + update: [...337] [ip4][..udp] [......10.0.2.15][28681] -> [..24.116.64.132][51227] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] + update: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] + update: [....99] [ip4][..udp] [......10.0.2.15][28681] -> [....114.38.9.82][24223] + update: [...124] [ip4][..udp] [......10.0.2.15][28681] -> [...170.254.19.6][24180] + update: [...349] [ip4][.icmp] [...84.197.97.94] -> [......10.0.2.15] [ICMP][Network][Acceptable] + update: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] + update: [...107] [ip4][..udp] [......10.0.2.15][28681] -> [..202.151.63.59][.7624] + update: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] + update: [...103] [ip4][..udp] [......10.0.2.15][28681] -> [.220.134.167.82][.5820] + update: [....97] [ip4][..udp] [......10.0.2.15][28681] -> [..24.78.134.188][49046] + update: [...104] [ip4][..udp] [......10.0.2.15][28681] -> [..42.98.115.128][23458] + update: [...360] [ip4][..udp] [......10.0.2.15][28681] -> [..198.58.218.12][47912] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [.....7] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + update: [...364] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][10825] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] + update: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] + update: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] + update: [...102] [ip4][..udp] [......10.0.2.15][28681] -> [.218.164.39.233][20855] + update: [...108] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][.7922] + update: [...339] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][54130] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...113] [ip4][..udp] [......10.0.2.15][28681] -> [105.101.132.146][57746] + update: [...132] [ip4][..udp] [......10.0.2.15][28681] -> [...79.86.173.45][.6346] + update: [...341] [ip4][..udp] [......10.0.2.15][28681] -> [..24.129.233.60][19990] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] + update: [...110] [ip4][..udp] [......10.0.2.15][28681] -> [..195.132.75.56][56009] + update: [...367] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][49956] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...105] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + update: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] + new: [...370] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.56.198][11984] + new: [...371] [ip4][..udp] [......10.0.2.15][28681] -> [.109.131.202.24][44748] + new: [...372] [ip4][..udp] [......10.0.2.15][28681] -> [.91.179.185.126][.6346] + new: [...373] [ip4][..udp] [......10.0.2.15][28681] -> [..88.122.233.15][11488] + new: [...374] [ip4][..udp] [......10.0.2.15][28681] -> [....62.35.190.5][18604] + idle: [....21] [ip4][..udp] [......10.0.2.15][55708] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [.....9] [ip4][..udp] [......10.0.2.15][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + idle: [....10] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [...170] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] + update: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] + update: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] + update: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] + update: [...196] [ip4][..udp] [......10.0.2.15][28681] -> [..88.127.72.106][.6346] + update: [...354] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][.1032] + update: [...352] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.6346] + update: [...195] [ip4][..udp] [......10.0.2.15][28681] -> [.177.231.151.16][.6346] + update: [...353] [ip4][..udp] [......10.0.2.15][28681] -> [195.181.151.217][25282] + update: [...220] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][.9239] + update: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] + update: [...350] [ip4][..udp] [......10.0.2.15][28681] -> [..99.250.253.99][11819] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...217] [ip4][..udp] [......10.0.2.15][28681] -> [.126.117.45.151][19323] + update: [...155] [ip4][..udp] [......10.0.2.15][28681] -> [.88.168.182.103][.6346] + update: [...198] [ip4][..udp] [......10.0.2.15][28681] -> [..58.182.171.50][15180] + update: [...191] [ip4][..udp] [......10.0.2.15][28681] -> [.190.153.143.54][65535] + update: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] + update: [...192] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] + update: [...181] [ip4][..udp] [......10.0.2.15][28681] -> [...66.177.5.135][.6346] + update: [...162] [ip4][..udp] [......10.0.2.15][28681] -> [.88.123.159.111][44729] + update: [...214] [ip4][..udp] [......10.0.2.15][28681] -> [.91.169.215.227][26820] + update: [...193] [ip4][..udp] [......10.0.2.15][28681] -> [..188.44.126.74][54633] + update: [...169] [ip4][..udp] [......10.0.2.15][28681] -> [...91.162.52.93][34799] + update: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] + update: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] + update: [...206] [ip4][..udp] [......10.0.2.15][28681] -> [213.166.132.204][11194] + update: [...348] [ip4][..udp] [......10.0.2.15][28681] -> [...84.197.97.94][.1360] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...203] [ip4][..udp] [......10.0.2.15][28681] -> [.120.156.204.38][54832] + update: [...199] [ip4][..udp] [......10.0.2.15][28681] -> [..114.73.129.26][53585] + update: [...346] [ip4][..udp] [......10.0.2.15][28681] -> [..76.226.85.105][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...207] [ip4][..udp] [......10.0.2.15][28681] -> [.81.242.191.215][.6346] + update: [...208] [ip4][..udp] [......10.0.2.15][28681] -> [..81.249.64.215][25058] + update: [...173] [ip4][..udp] [......10.0.2.15][28681] -> [..121.99.222.36][44988] + update: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] + update: [...212] [ip4][..udp] [......10.0.2.15][28681] -> [...36.233.3.223][12848] + update: [...197] [ip4][..udp] [......10.0.2.15][28681] -> [.208.92.106.151][32476] + update: [...168] [ip4][..udp] [......10.0.2.15][28681] -> [...89.157.59.43][56919] + update: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] + update: [...215] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] + update: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] + update: [...164] [ip4][..udp] [......10.0.2.15][28681] -> [.142.197.219.85][26234] + update: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] + update: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] + update: [...189] [ip4][..udp] [......10.0.2.15][28681] -> [115.195.105.243][.6346] + update: [...159] [ip4][..udp] [......10.0.2.15][28681] -> [176.163.231.160][.6346] + update: [...179] [ip4][..udp] [......10.0.2.15][28681] -> [.178.51.146.115][.6346] + update: [...186] [ip4][..udp] [......10.0.2.15][28681] -> [..91.182.44.202][30277] + update: [...347] [ip4][..udp] [......10.0.2.15][28681] -> [..176.10.169.10][12799] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...213] [ip4][..udp] [......10.0.2.15][28681] -> [....5.180.62.37][.6346] + update: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] + update: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] + update: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] + update: [...174] [ip4][..udp] [......10.0.2.15][28681] -> [..196.74.159.56][29271] + update: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] + update: [...165] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] + update: [...161] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] + update: [...188] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] + update: [...177] [ip4][..udp] [......10.0.2.15][28681] -> [.69.157.183.106][.6346] + update: [...205] [ip4][..udp] [......10.0.2.15][28681] -> [..96.29.197.138][.6346] + update: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] + update: [...182] [ip4][..udp] [......10.0.2.15][28681] -> [....73.3.103.37][35589] + update: [...210] [ip4][..udp] [......10.0.2.15][28681] -> [.41.100.120.146][12838] + update: [...218] [ip4][..udp] [......10.0.2.15][28681] -> [.176.155.52.115][53956] + update: [...211] [ip4][..udp] [......10.0.2.15][28681] -> [..186.93.139.92][.6346] + update: [...351] [ip4][..udp] [......10.0.2.15][28681] -> [..187.37.87.189][.6346] + update: [...200] [ip4][..udp] [......10.0.2.15][28681] -> [.138.199.16.123][52993] + update: [...154] [ip4][..udp] [......10.0.2.15][28681] -> [174.115.111.224][51984] + update: [...201] [ip4][..udp] [......10.0.2.15][28681] -> [.85.170.209.214][46210] + update: [...194] [ip4][..udp] [......10.0.2.15][28681] -> [176.150.126.156][16471] + update: [...178] [ip4][..udp] [......10.0.2.15][28681] -> [....83.46.253.7][.6346] + update: [...163] [ip4][..udp] [......10.0.2.15][28681] -> [.88.126.160.158][.6346] + update: [...216] [ip4][..udp] [......10.0.2.15][28681] -> [.212.68.248.153][27223] + update: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] + update: [...204] [ip4][..udp] [......10.0.2.15][28681] -> [..84.126.240.32][45313] + update: [...202] [ip4][..udp] [......10.0.2.15][28681] -> [.176.134.139.39][.6346] + end: [...267] [ip4][..tcp] [......10.0.2.15][50291] -> [..200.7.155.210][28365] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + guessed: [....26] [ip4][..udp] [......10.0.2.15][57619] -> [.......10.0.2.2][.5351] [NAT-PMP][Network][Acceptable] + idle: [....26] [ip4][..udp] [......10.0.2.15][57619] -> [.......10.0.2.2][.5351] + guessed: [....27] [ip4][..udp] [......10.0.2.15][57620] -> [.......10.0.2.2][.5351] [NAT-PMP][Network][Acceptable] + idle: [....27] [ip4][..udp] [......10.0.2.15][57620] -> [.......10.0.2.2][.5351] + guessed: [....34] [ip4][..udp] [......10.0.2.15][57621] -> [.......10.0.2.2][.5351] [NAT-PMP][Network][Acceptable] + idle: [....34] [ip4][..udp] [......10.0.2.15][57621] -> [.......10.0.2.2][.5351] + update: [...247] [ip4][..udp] [......10.0.2.15][28681] -> [..181.84.178.16][60262] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...307] [ip4][..udp] [......10.0.2.15][28681] -> [..72.201.208.57][38617] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...309] [ip4][..udp] [......10.0.2.15][28681] -> [.47.220.186.140][27641] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...254] [ip4][..udp] [......10.0.2.15][28681] -> [..88.120.73.215][24562] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...258] [ip4][..udp] [......10.0.2.15][28681] -> [...24.26.216.95][13889] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...315] [ip4][..udp] [......10.0.2.15][28681] -> [...92.217.84.16][20223] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...358] [ip4][..udp] [......10.0.2.15][28681] -> [.47.224.174.174][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...357] [ip4][..udp] [......10.0.2.15][28681] -> [...98.35.85.238][32173] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...305] [ip4][..udp] [......10.0.2.15][28681] -> [..88.168.175.31][.6346] + update: [...310] [ip4][..udp] [......10.0.2.15][28681] -> [.118.240.69.199][.6348] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...306] [ip4][..udp] [......10.0.2.15][28681] -> [..41.249.63.200][22582] + update: [...265] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][.1194] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...304] [ip4][..udp] [......10.0.2.15][28681] -> [.193.32.126.214][59596] + update: [...318] [ip4][..udp] [......10.0.2.15][28681] -> [173.183.183.110][59920] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...242] [ip4][..udp] [......10.0.2.15][28681] -> [..75.133.101.93][52367] + update: [...260] [ip4][..udp] [......10.0.2.15][28681] -> [.46.128.114.107][.6578] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...311] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.188.98][62851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...308] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][40137] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...251] [ip4][..udp] [......10.0.2.15][28681] -> [.185.203.218.92][56962] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...259] [ip4][..udp] [......10.0.2.15][28681] -> [103.232.107.100][43508] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...300] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] + update: [...250] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][26253] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...256] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][50297] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...249] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.218][.6909] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...257] [ip4][..udp] [......10.0.2.15][28681] -> [.82.181.251.218][36368] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...356] [ip4][..udp] [......10.0.2.15][28681] -> [.63.228.175.169][.1936] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...355] [ip4][..udp] [......10.0.2.15][28681] -> [.181.118.53.212][29998] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...303] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][30566] + update: [...246] [ip4][..udp] [......10.0.2.15][28681] -> [...96.65.68.194][35481] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...301] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][11852] + update: [...314] [ip4][..udp] [......10.0.2.15][28681] -> [..71.237.202.91][16117] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...317] [ip4][..udp] [......10.0.2.15][28681] -> [...96.236.205.7][34794] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...261] [ip4][..udp] [......10.0.2.15][28681] -> [..60.241.48.194][21301] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...243] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] + update: [...313] [ip4][..udp] [......10.0.2.15][28681] -> [..176.99.176.20][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...302] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][53489] + update: [...255] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][30577] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...248] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][12012] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...263] [ip4][..udp] [......10.0.2.15][28681] -> [..82.217.176.52][.7446] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...253] [ip4][..udp] [......10.0.2.15][28681] -> [.193.37.255.130][61616] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...252] [ip4][..udp] [......10.0.2.15][28681] -> [..72.140.120.41][47739] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...316] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][63637] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...262] [ip4][..udp] [......10.0.2.15][28681] -> [....89.75.52.19][46010] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...264] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][11603] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...375] [ip4][..udp] [......10.0.2.15][28681] -> [..73.182.136.42][27873] + new: [...376] [ip4][..udp] [......10.0.2.15][28681] -> [....156.57.42.2][33476] + new: [...377] [ip4][..udp] [......10.0.2.15][28681] -> [.180.200.236.13][12082] + new: [...378] [ip4][..udp] [......10.0.2.15][28681] -> [.118.241.204.61][43366] + new: [...379] [ip4][..udp] [......10.0.2.15][28681] -> [..80.140.63.147][29545] + new: [...380] [ip4][..udp] [......10.0.2.15][28681] -> [...83.86.49.195][12019] + new: [...381] [ip4][..udp] [......10.0.2.15][28681] -> [...77.58.211.52][.3806] + new: [...382] [ip4][..udp] [......10.0.2.15][28681] -> [..76.175.11.126][40958] + new: [...383] [ip4][..udp] [......10.0.2.15][28681] -> [...84.71.243.60][34498] + new: [...384] [ip4][..udp] [......10.0.2.15][28681] -> [....75.64.6.175][.4743] + new: [...385] [ip4][..udp] [......10.0.2.15][28681] -> [..66.223.143.31][47978] + new: [...386] [ip4][..udp] [......10.0.2.15][28681] -> [...85.172.10.90][40162] + new: [...387] [ip4][..udp] [......10.0.2.15][28681] -> [....220.135.8.7][.1219] + new: [...388] [ip4][..udp] [......10.0.2.15][28681] -> [...121.7.145.36][33905] + new: [...389] [ip4][..udp] [......10.0.2.15][28681] -> [..94.215.183.71][31310] + new: [...390] [ip4][..udp] [......10.0.2.15][28681] -> [144.134.132.206][16401] + new: [...391] [ip4][..udp] [......10.0.2.15][28681] -> [...161.81.38.67][.9539] + new: [...392] [ip4][..udp] [......10.0.2.15][28681] -> [....42.0.69.215][12608] + new: [...393] [ip4][..udp] [......10.0.2.15][28681] -> [.58.115.158.103][.5110] + new: [...394] [ip4][..udp] [......10.0.2.15][28681] -> [.165.84.134.136][21407] + new: [...395] [ip4][..udp] [......10.0.2.15][28681] -> [..191.114.88.39][18751] + new: [...396] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.59.24][28755] + new: [...397] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][24634] + new: [...398] [ip4][..udp] [......10.0.2.15][28681] -> [.62.102.148.166][31332] + new: [...399] [ip4][..udp] [......10.0.2.15][28681] -> [.175.39.219.223][31728] + new: [...400] [ip4][..udp] [......10.0.2.15][28681] -> [..129.45.47.167][.6346] + new: [...401] [ip4][..udp] [......10.0.2.15][28681] -> [.173.178.192.76][.6346] + new: [...402] [ip4][..udp] [......10.0.2.15][28681] -> [...78.219.202.2][.6346] + new: [...403] [ip4][..udp] [......10.0.2.15][28681] -> [197.244.171.132][.6346] + new: [...404] [ip4][..udp] [......10.0.2.15][28681] -> [.86.234.216.251][17845] + new: [...405] [ip4][..udp] [......10.0.2.15][28681] -> [.176.155.31.118][.6346] + new: [...406] [ip4][..udp] [......10.0.2.15][28681] -> [....109.27.3.68][57380] + new: [...407] [ip4][..udp] [......10.0.2.15][28681] -> [195.181.151.217][.6346] + new: [...408] [ip4][..udp] [......10.0.2.15][28681] -> [...90.103.2.245][.6346] + new: [...409] [ip4][..udp] [......10.0.2.15][28681] -> [...86.194.53.68][33770] + new: [...410] [ip4][..udp] [......10.0.2.15][28681] -> [..93.28.130.131][.6346] + new: [...411] [ip4][..udp] [......10.0.2.15][28681] -> [...89.143.28.64][.6346] + new: [...412] [ip4][..udp] [......10.0.2.15][28681] -> [...58.177.52.73][.6346] + new: [...413] [ip4][..udp] [......10.0.2.15][28681] -> [...87.65.188.29][24676] + new: [...414] [ip4][..udp] [......10.0.2.15][28681] -> [175.181.156.244][.8255] + new: [...415] [ip4][..udp] [......10.0.2.15][28681] -> [..90.247.160.96][17817] + new: [...416] [ip4][..udp] [......10.0.2.15][28681] -> [..92.139.61.103][24096] + new: [...417] [ip4][..udp] [......10.0.2.15][28681] -> [.94.187.236.179][.6346] + new: [...418] [ip4][..udp] [......10.0.2.15][28681] -> [.75.129.149.103][.6346] + new: [...419] [ip4][..udp] [......10.0.2.15][28681] -> [...78.193.236.8][46557] + new: [...420] [ip4][..udp] [......10.0.2.15][28681] -> [..86.227.127.34][.6346] + new: [...421] [ip4][..udp] [......10.0.2.15][28681] -> [..175.182.39.11][12977] + new: [...422] [ip4][..udp] [......10.0.2.15][28681] -> [..88.123.35.219][42211] + new: [...423] [ip4][..udp] [......10.0.2.15][28681] -> [..119.247.6.226][.9713] + new: [...424] [ip4][..udp] [......10.0.2.15][28681] -> [..93.15.216.216][.6346] + new: [...425] [ip4][..udp] [......10.0.2.15][28681] -> [..145.82.53.165][.6346] + new: [...426] [ip4][..udp] [......10.0.2.15][28681] -> [..219.71.44.121][14398] + new: [...427] [ip4][..udp] [......10.0.2.15][28681] -> [...81.249.13.30][15138] + new: [...428] [ip4][..udp] [......10.0.2.15][28681] -> [....86.162.97.8][.6346] + new: [...429] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.215.213][23576] + new: [...430] [ip4][..udp] [......10.0.2.15][28681] -> [....90.8.95.165][40763] + new: [...431] [ip4][..udp] [......10.0.2.15][28681] -> [..88.124.71.246][49035] + new: [...432] [ip4][..udp] [......10.0.2.15][28681] -> [...104.6.118.53][.6346] + new: [...433] [ip4][..udp] [......10.0.2.15][28681] -> [.99.255.145.191][47264] + new: [...434] [ip4][..udp] [......10.0.2.15][28681] -> [.114.24.182.130][22232] + new: [...435] [ip4][..udp] [......10.0.2.15][28681] -> [.109.24.146.101][.6346] + new: [...436] [ip4][..udp] [......10.0.2.15][28681] -> [.219.68.179.137][.6406] + new: [...437] [ip4][..udp] [......10.0.2.15][28681] -> [....31.38.163.2][.6346] + new: [...438] [ip4][..udp] [......10.0.2.15][28681] -> [..71.86.190.163][14142] + new: [...439] [ip4][..udp] [......10.0.2.15][28681] -> [..176.135.15.86][.6346] + new: [...440] [ip4][..udp] [......10.0.2.15][28681] -> [203.165.170.112][37087] + new: [...441] [ip4][..udp] [......10.0.2.15][28681] -> [.36.237.199.108][56040] + new: [...442] [ip4][..udp] [......10.0.2.15][28681] -> [..89.204.130.55][29545] + new: [...443] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][54754] + new: [...444] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][.9010] + new: [...445] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.153.100][.4509] + new: [...446] [ip4][..udp] [......10.0.2.15][28681] -> [..61.70.199.107][60475] + new: [...447] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][23458] + new: [...448] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][15677] + new: [...449] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][.8826] + new: [...450] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][23458] + new: [...451] [ip4][..udp] [......10.0.2.15][28681] -> [...218.35.66.21][22234] + new: [...452] [ip4][..udp] [......10.0.2.15][28681] -> [..68.227.193.37][27481] + new: [...453] [ip4][..udp] [......10.0.2.15][28681] -> [..74.127.26.138][.3083] + new: [...454] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][23183] + new: [...455] [ip4][..udp] [......10.0.2.15][28681] -> [.58.153.206.183][16919] + new: [...456] [ip4][..udp] [......10.0.2.15][28681] -> [.89.241.112.255][14766] + new: [...457] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.240.113][13867] + new: [...458] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.228.167][12201] + new: [...459] [ip4][..udp] [......10.0.2.15][28681] -> [...100.89.84.59][11603] + new: [...460] [ip4][..udp] [......10.0.2.15][28681] -> [.210.194.116.78][.8342] + new: [...461] [ip4][..udp] [......10.0.2.15][28681] -> [..69.27.193.124][50555] + new: [...462] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][47808] + new: [...463] [ip4][..udp] [......10.0.2.15][28681] -> [..200.7.155.210][28365] + new: [...464] [ip4][..udp] [......10.0.2.15][28681] -> [...101.128.66.8][34512] + new: [...465] [ip4][..udp] [......10.0.2.15][28681] -> [.....2.28.39.18][15672] + new: [...466] [ip4][..udp] [......10.0.2.15][28681] -> [...70.119.248.5][49929] + new: [...467] [ip4][..udp] [......10.0.2.15][28681] -> [...61.64.177.53][23458] + new: [...468] [ip4][..udp] [......10.0.2.15][28681] -> [..94.214.12.247][44001] + new: [...469] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][47184] + new: [...470] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][46790] + new: [...471] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][43457] + new: [...472] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45744] + new: [...473] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][33564] + new: [...474] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][45880] + new: [...475] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][63978] + new: [...476] [ip4][..udp] [......10.0.2.15][28681] -> [..98.18.172.208][63172] + new: [...477] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45640] + new: [...478] [ip4][..udp] [......10.0.2.15][28681] -> [...36.235.85.44][64914] + new: [...479] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.13.148][51896] + new: [...480] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.74.26][65498] + new: [...481] [ip4][..udp] [......10.0.2.15][28681] -> [..82.120.219.74][.6346] + new: [...482] [ip4][..udp] [......10.0.2.15][28681] -> [..86.193.23.172][42227] + new: [...483] [ip4][..udp] [.......10.0.2.2][.1026] -> [......10.0.2.15][28681] + idle: [....54] [ip4][..udp] [......10.0.2.15][57623] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + not-detected: [....96] [ip4][..udp] [......10.0.2.15][28681] -> [.88.160.214.137][.6346] [Unknown][Unrated] + idle: [....96] [ip4][..udp] [......10.0.2.15][28681] -> [.88.160.214.137][.6346] + not-detected: [...100] [ip4][..udp] [......10.0.2.15][28681] -> [220.133.122.217][23458] [Unknown][Unrated] + idle: [...100] [ip4][..udp] [......10.0.2.15][28681] -> [220.133.122.217][23458] + not-detected: [...115] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.104][11804] [Unknown][Unrated] + idle: [...115] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.104][11804] + not-detected: [...101] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] [Unknown][Unrated] + idle: [...101] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + end: [...345] [ip4][..tcp] [......10.0.2.15][50330] -> [.69.118.162.229][46906] [HTTP.Gnutella][Download][Potentially Dangerous] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address, Unsafe Protocol + not-detected: [...106] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.154.69][.4832] [Unknown][Unrated] + idle: [...106] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.154.69][.4832] + not-detected: [....86] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] [Unknown][Unrated] + idle: [....86] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + not-detected: [...112] [ip4][..udp] [......10.0.2.15][28681] -> [.36.239.213.146][21750] [Unknown][Unrated] + idle: [...112] [ip4][..udp] [......10.0.2.15][28681] -> [.36.239.213.146][21750] + not-detected: [....99] [ip4][..udp] [......10.0.2.15][28681] -> [....114.38.9.82][24223] [Unknown][Unrated] + idle: [....99] [ip4][..udp] [......10.0.2.15][28681] -> [....114.38.9.82][24223] + idle: [...349] [ip4][.icmp] [...84.197.97.94] -> [......10.0.2.15] [ICMP][Network][Acceptable] + not-detected: [...107] [ip4][..udp] [......10.0.2.15][28681] -> [..202.151.63.59][.7624] [Unknown][Unrated] + idle: [...107] [ip4][..udp] [......10.0.2.15][28681] -> [..202.151.63.59][.7624] + not-detected: [...103] [ip4][..udp] [......10.0.2.15][28681] -> [.220.134.167.82][.5820] [Unknown][Unrated] + idle: [...103] [ip4][..udp] [......10.0.2.15][28681] -> [.220.134.167.82][.5820] + not-detected: [....97] [ip4][..udp] [......10.0.2.15][28681] -> [..24.78.134.188][49046] [Unknown][Unrated] + idle: [....97] [ip4][..udp] [......10.0.2.15][28681] -> [..24.78.134.188][49046] + not-detected: [...104] [ip4][..udp] [......10.0.2.15][28681] -> [..42.98.115.128][23458] [Unknown][Unrated] + idle: [...104] [ip4][..udp] [......10.0.2.15][28681] -> [..42.98.115.128][23458] + guessed: [....41] [ip4][..udp] [......10.0.2.15][57622] -> [.......10.0.2.2][.5351] [NAT-PMP][Network][Acceptable] + idle: [....41] [ip4][..udp] [......10.0.2.15][57622] -> [.......10.0.2.2][.5351] + not-detected: [...102] [ip4][..udp] [......10.0.2.15][28681] -> [.218.164.39.233][20855] [Unknown][Unrated] + idle: [...102] [ip4][..udp] [......10.0.2.15][28681] -> [.218.164.39.233][20855] + not-detected: [...110] [ip4][..udp] [......10.0.2.15][28681] -> [..195.132.75.56][56009] [Unknown][Unrated] + idle: [...110] [ip4][..udp] [......10.0.2.15][28681] -> [..195.132.75.56][56009] + not-detected: [...105] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] [Unknown][Unrated] + idle: [...105] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + update: [...329] [ip4][..udp] [......10.0.2.15][28681] -> [..92.117.249.98][.6815] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...328] [ip4][..udp] [......10.0.2.15][28681] -> [.203.220.105.27][19260] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...331] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][26851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...320] [ip4][..udp] [......10.0.2.15][28681] -> [185.236.200.137][48142] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...332] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...325] [ip4][..udp] [......10.0.2.15][28681] -> [..83.160.143.48][37036] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...323] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][56070] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...322] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.219][.6909] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...327] [ip4][..udp] [......10.0.2.15][28681] -> [...84.28.53.225][44859] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...321] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][21995] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...324] [ip4][..udp] [......10.0.2.15][28681] -> [.73.250.179.237][20848] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...319] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][55302] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...330] [ip4][..udp] [......10.0.2.15][28681] -> [....82.64.44.11][.1352] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...326] [ip4][..udp] [......10.0.2.15][28681] -> [..100.1.231.138][56558] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...484] [ip4][..udp] [......10.0.2.15][28681] -> [...107.4.56.177][10000] + new: [...485] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.209][.6346] + new: [...486] [ip4][..udp] [......10.0.2.15][28681] -> [...88.68.45.203][.6346] + not-detected: [...131] [ip4][..udp] [......10.0.2.15][28681] -> [.86.225.140.186][.6346] [Unknown][Unrated] + idle: [...131] [ip4][..udp] [......10.0.2.15][28681] -> [.86.225.140.186][.6346] + not-detected: [...127] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.1024] [Unknown][Unrated] + idle: [...127] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.1024] + idle: [.....7] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + not-detected: [...132] [ip4][..udp] [......10.0.2.15][28681] -> [...79.86.173.45][.6346] [Unknown][Unrated] + idle: [...132] [ip4][..udp] [......10.0.2.15][28681] -> [...79.86.173.45][.6346] + update: [...335] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + update: [...359] [ip4][..udp] [......10.0.2.15][51685] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [...487] [ip4][..udp] [......10.0.2.15][28681] -> [..24.78.134.188][49046] + new: [...488] [ip4][..udp] [......10.0.2.15][28681] -> [.183.179.90.112][.9852] + new: [...489] [ip4][..udp] [......10.0.2.15][28681] -> [...108.44.45.25][.6346] + new: [...490] [ip4][..udp] [......10.0.2.15][28681] -> [...90.3.215.132][20356] + new: [...491] [ip4][..udp] [......10.0.2.15][28681] -> [..36.233.42.210][.5512] + new: [...492] [ip4][..udp] [......10.0.2.15][28681] -> [...172.94.41.71][.6346] + not-detected: [...170] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] [Unknown][Unrated] + idle: [...170] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] + not-detected: [...196] [ip4][..udp] [......10.0.2.15][28681] -> [..88.127.72.106][.6346] [Unknown][Unrated] + idle: [...196] [ip4][..udp] [......10.0.2.15][28681] -> [..88.127.72.106][.6346] + not-detected: [...220] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][.9239] [Unknown][Unrated] + idle: [...220] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][.9239] + not-detected: [...217] [ip4][..udp] [......10.0.2.15][28681] -> [.126.117.45.151][19323] [Unknown][Unrated] + idle: [...217] [ip4][..udp] [......10.0.2.15][28681] -> [.126.117.45.151][19323] + not-detected: [...155] [ip4][..udp] [......10.0.2.15][28681] -> [.88.168.182.103][.6346] [Unknown][Unrated] + idle: [...155] [ip4][..udp] [......10.0.2.15][28681] -> [.88.168.182.103][.6346] + not-detected: [...198] [ip4][..udp] [......10.0.2.15][28681] -> [..58.182.171.50][15180] [Unknown][Unrated] + idle: [...198] [ip4][..udp] [......10.0.2.15][28681] -> [..58.182.171.50][15180] + not-detected: [...192] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] [Unknown][Unrated] + idle: [...192] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] + not-detected: [...181] [ip4][..udp] [......10.0.2.15][28681] -> [...66.177.5.135][.6346] [Unknown][Unrated] + idle: [...181] [ip4][..udp] [......10.0.2.15][28681] -> [...66.177.5.135][.6346] + not-detected: [...162] [ip4][..udp] [......10.0.2.15][28681] -> [.88.123.159.111][44729] [Unknown][Unrated] + idle: [...162] [ip4][..udp] [......10.0.2.15][28681] -> [.88.123.159.111][44729] + not-detected: [...214] [ip4][..udp] [......10.0.2.15][28681] -> [.91.169.215.227][26820] [Unknown][Unrated] + idle: [...214] [ip4][..udp] [......10.0.2.15][28681] -> [.91.169.215.227][26820] + not-detected: [...193] [ip4][..udp] [......10.0.2.15][28681] -> [..188.44.126.74][54633] [Unknown][Unrated] + idle: [...193] [ip4][..udp] [......10.0.2.15][28681] -> [..188.44.126.74][54633] + not-detected: [...169] [ip4][..udp] [......10.0.2.15][28681] -> [...91.162.52.93][34799] [Unknown][Unrated] + idle: [...169] [ip4][..udp] [......10.0.2.15][28681] -> [...91.162.52.93][34799] + not-detected: [...206] [ip4][..udp] [......10.0.2.15][28681] -> [213.166.132.204][11194] [Unknown][Unrated] + idle: [...206] [ip4][..udp] [......10.0.2.15][28681] -> [213.166.132.204][11194] + not-detected: [...203] [ip4][..udp] [......10.0.2.15][28681] -> [.120.156.204.38][54832] [Unknown][Unrated] + idle: [...203] [ip4][..udp] [......10.0.2.15][28681] -> [.120.156.204.38][54832] + not-detected: [...199] [ip4][..udp] [......10.0.2.15][28681] -> [..114.73.129.26][53585] [Unknown][Unrated] + idle: [...199] [ip4][..udp] [......10.0.2.15][28681] -> [..114.73.129.26][53585] + not-detected: [....31] [ip4][..tcp] [......10.0.2.15][50193] -> [....89.75.52.19][46010] [Unknown][Unrated] + end: [....31] [ip4][..tcp] [......10.0.2.15][50193] -> [....89.75.52.19][46010] + not-detected: [...207] [ip4][..udp] [......10.0.2.15][28681] -> [.81.242.191.215][.6346] [Unknown][Unrated] + idle: [...207] [ip4][..udp] [......10.0.2.15][28681] -> [.81.242.191.215][.6346] + not-detected: [...208] [ip4][..udp] [......10.0.2.15][28681] -> [..81.249.64.215][25058] [Unknown][Unrated] + idle: [...208] [ip4][..udp] [......10.0.2.15][28681] -> [..81.249.64.215][25058] + not-detected: [...212] [ip4][..udp] [......10.0.2.15][28681] -> [...36.233.3.223][12848] [Unknown][Unrated] + idle: [...212] [ip4][..udp] [......10.0.2.15][28681] -> [...36.233.3.223][12848] + not-detected: [...197] [ip4][..udp] [......10.0.2.15][28681] -> [.208.92.106.151][32476] [Unknown][Unrated] + idle: [...197] [ip4][..udp] [......10.0.2.15][28681] -> [.208.92.106.151][32476] + not-detected: [...168] [ip4][..udp] [......10.0.2.15][28681] -> [...89.157.59.43][56919] [Unknown][Unrated] + idle: [...168] [ip4][..udp] [......10.0.2.15][28681] -> [...89.157.59.43][56919] + not-detected: [....28] [ip4][..tcp] [......10.0.2.15][50190] -> [..80.140.63.147][29545] [Unknown][Unrated] + end: [....28] [ip4][..tcp] [......10.0.2.15][50190] -> [..80.140.63.147][29545] + not-detected: [...215] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] [Unknown][Unrated] + idle: [...215] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] + not-detected: [...189] [ip4][..udp] [......10.0.2.15][28681] -> [115.195.105.243][.6346] [Unknown][Unrated] + idle: [...189] [ip4][..udp] [......10.0.2.15][28681] -> [115.195.105.243][.6346] + not-detected: [....30] [ip4][..tcp] [......10.0.2.15][50192] -> [....45.65.87.24][16201] [Unknown][Unrated] + end: [....30] [ip4][..tcp] [......10.0.2.15][50192] -> [....45.65.87.24][16201] + not-detected: [...179] [ip4][..udp] [......10.0.2.15][28681] -> [.178.51.146.115][.6346] [Unknown][Unrated] + idle: [...179] [ip4][..udp] [......10.0.2.15][28681] -> [.178.51.146.115][.6346] + not-detected: [...186] [ip4][..udp] [......10.0.2.15][28681] -> [..91.182.44.202][30277] [Unknown][Unrated] + idle: [...186] [ip4][..udp] [......10.0.2.15][28681] -> [..91.182.44.202][30277] + not-detected: [...174] [ip4][..udp] [......10.0.2.15][28681] -> [..196.74.159.56][29271] [Unknown][Unrated] + idle: [...174] [ip4][..udp] [......10.0.2.15][28681] -> [..196.74.159.56][29271] + not-detected: [....29] [ip4][..tcp] [......10.0.2.15][50191] -> [.207.38.163.228][.6778] [Unknown][Unrated] + end: [....29] [ip4][..tcp] [......10.0.2.15][50191] -> [.207.38.163.228][.6778] + not-detected: [...205] [ip4][..udp] [......10.0.2.15][28681] -> [..96.29.197.138][.6346] [Unknown][Unrated] + idle: [...205] [ip4][..udp] [......10.0.2.15][28681] -> [..96.29.197.138][.6346] + not-detected: [...210] [ip4][..udp] [......10.0.2.15][28681] -> [.41.100.120.146][12838] [Unknown][Unrated] + idle: [...210] [ip4][..udp] [......10.0.2.15][28681] -> [.41.100.120.146][12838] + not-detected: [...218] [ip4][..udp] [......10.0.2.15][28681] -> [.176.155.52.115][53956] [Unknown][Unrated] + idle: [...218] [ip4][..udp] [......10.0.2.15][28681] -> [.176.155.52.115][53956] + not-detected: [...211] [ip4][..udp] [......10.0.2.15][28681] -> [..186.93.139.92][.6346] [Unknown][Unrated] + idle: [...211] [ip4][..udp] [......10.0.2.15][28681] -> [..186.93.139.92][.6346] + not-detected: [...154] [ip4][..udp] [......10.0.2.15][28681] -> [174.115.111.224][51984] [Unknown][Unrated] + idle: [...154] [ip4][..udp] [......10.0.2.15][28681] -> [174.115.111.224][51984] + not-detected: [...201] [ip4][..udp] [......10.0.2.15][28681] -> [.85.170.209.214][46210] [Unknown][Unrated] + idle: [...201] [ip4][..udp] [......10.0.2.15][28681] -> [.85.170.209.214][46210] + not-detected: [...194] [ip4][..udp] [......10.0.2.15][28681] -> [176.150.126.156][16471] [Unknown][Unrated] + idle: [...194] [ip4][..udp] [......10.0.2.15][28681] -> [176.150.126.156][16471] + not-detected: [...178] [ip4][..udp] [......10.0.2.15][28681] -> [....83.46.253.7][.6346] [Unknown][Unrated] + idle: [...178] [ip4][..udp] [......10.0.2.15][28681] -> [....83.46.253.7][.6346] + not-detected: [...216] [ip4][..udp] [......10.0.2.15][28681] -> [.212.68.248.153][27223] [Unknown][Unrated] + idle: [...216] [ip4][..udp] [......10.0.2.15][28681] -> [.212.68.248.153][27223] + not-detected: [...204] [ip4][..udp] [......10.0.2.15][28681] -> [..84.126.240.32][45313] [Unknown][Unrated] + idle: [...204] [ip4][..udp] [......10.0.2.15][28681] -> [..84.126.240.32][45313] + not-detected: [...202] [ip4][..udp] [......10.0.2.15][28681] -> [.176.134.139.39][.6346] [Unknown][Unrated] + idle: [...202] [ip4][..udp] [......10.0.2.15][28681] -> [.176.134.139.39][.6346] + update: [...338] [ip4][..udp] [......10.0.2.15][28681] -> [221.198.205.196][20778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...361] [ip4][..udp] [......10.0.2.15][28681] -> [..86.129.196.84][.9915] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] + update: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] + update: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] + update: [...366] [ip4][..udp] [......10.0.2.15][28681] -> [....94.8.55.158][51140] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....88] [ip4][..udp] [......10.0.2.15][28681] -> [.....81.50.24.2][17874] + update: [...365] [ip4][..udp] [......10.0.2.15][28681] -> [..188.23.24.213][18561] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...340] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49732] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...343] [ip4][..udp] [......10.0.2.15][28681] -> [..89.212.91.155][.5195] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....20] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] + update: [...344] [ip4][..udp] [......10.0.2.15][28681] -> [.207.38.163.228][.6778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] + update: [....98] [ip4][..udp] [......10.0.2.15][28681] -> [.203.222.14.170][23332] + update: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] + update: [...336] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][.6888] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] + update: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] + update: [...368] [ip4][..udp] [......10.0.2.15][28681] -> [...47.147.52.21][36728] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] + update: [...363] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][38297] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...136] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][16047] + update: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] + update: [...362] [ip4][..udp] [......10.0.2.15][28681] -> [190.192.210.182][.6754] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] + update: [...342] [ip4][..udp] [......10.0.2.15][28681] -> [..98.208.26.154][.4994] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...369] [ip4][..udp] [......10.0.2.15][28681] -> [.89.187.171.240][.6346] + update: [...125] [ip4][..udp] [......10.0.2.15][28681] -> [..83.92.178.182][57302] + update: [...337] [ip4][..udp] [......10.0.2.15][28681] -> [..24.116.64.132][51227] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] + update: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] + update: [...124] [ip4][..udp] [......10.0.2.15][28681] -> [...170.254.19.6][24180] + update: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] + update: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] + update: [...360] [ip4][..udp] [......10.0.2.15][28681] -> [..198.58.218.12][47912] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...364] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][10825] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] + update: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] + update: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] + update: [...108] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][.7922] + update: [...339] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][54130] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...113] [ip4][..udp] [......10.0.2.15][28681] -> [105.101.132.146][57746] + update: [...341] [ip4][..udp] [......10.0.2.15][28681] -> [..24.129.233.60][19990] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] + update: [...367] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][49956] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] + new: [...493] [ip4][..udp] [......10.0.2.15][57552] -> [239.255.255.250][.1900] + detected: [...493] [ip4][..udp] [......10.0.2.15][57552] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [...320] [ip4][..udp] [......10.0.2.15][28681] -> [185.236.200.137][48142] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...325] [ip4][..udp] [......10.0.2.15][28681] -> [..83.160.143.48][37036] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...305] [ip4][..udp] [......10.0.2.15][28681] -> [..88.168.175.31][.6346] [Unknown][Unrated] + idle: [...305] [ip4][..udp] [......10.0.2.15][28681] -> [..88.168.175.31][.6346] + idle: [...323] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][56070] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...322] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.219][.6909] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...314] [ip4][..udp] [......10.0.2.15][28681] -> [..71.237.202.91][16117] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] + update: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] + update: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] + update: [...354] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][.1032] + update: [...352] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.6346] + update: [...195] [ip4][..udp] [......10.0.2.15][28681] -> [.177.231.151.16][.6346] + update: [...353] [ip4][..udp] [......10.0.2.15][28681] -> [195.181.151.217][25282] + update: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] + update: [...350] [ip4][..udp] [......10.0.2.15][28681] -> [..99.250.253.99][11819] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...191] [ip4][..udp] [......10.0.2.15][28681] -> [.190.153.143.54][65535] + update: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] + update: [...371] [ip4][..udp] [......10.0.2.15][28681] -> [.109.131.202.24][44748] + update: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] + update: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] + update: [...348] [ip4][..udp] [......10.0.2.15][28681] -> [...84.197.97.94][.1360] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...346] [ip4][..udp] [......10.0.2.15][28681] -> [..76.226.85.105][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...370] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.56.198][11984] + update: [...173] [ip4][..udp] [......10.0.2.15][28681] -> [..121.99.222.36][44988] + update: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] + update: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] + update: [...374] [ip4][..udp] [......10.0.2.15][28681] -> [....62.35.190.5][18604] + update: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] + update: [...164] [ip4][..udp] [......10.0.2.15][28681] -> [.142.197.219.85][26234] + update: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] + update: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] + update: [...372] [ip4][..udp] [......10.0.2.15][28681] -> [.91.179.185.126][.6346] + update: [...159] [ip4][..udp] [......10.0.2.15][28681] -> [176.163.231.160][.6346] + update: [...347] [ip4][..udp] [......10.0.2.15][28681] -> [..176.10.169.10][12799] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...213] [ip4][..udp] [......10.0.2.15][28681] -> [....5.180.62.37][.6346] + update: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] + update: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] + update: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] + update: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] + update: [...165] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] + update: [...161] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] + update: [...188] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] + update: [...177] [ip4][..udp] [......10.0.2.15][28681] -> [.69.157.183.106][.6346] + update: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] + update: [...182] [ip4][..udp] [......10.0.2.15][28681] -> [....73.3.103.37][35589] + update: [...351] [ip4][..udp] [......10.0.2.15][28681] -> [..187.37.87.189][.6346] + update: [...200] [ip4][..udp] [......10.0.2.15][28681] -> [.138.199.16.123][52993] + update: [...163] [ip4][..udp] [......10.0.2.15][28681] -> [.88.126.160.158][.6346] + update: [...373] [ip4][..udp] [......10.0.2.15][28681] -> [..88.122.233.15][11488] + update: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] + new: [...494] [ip4][..udp] [......10.0.2.15][28681] -> [...86.210.81.59][.6346] + new: [...495] [ip4][..udp] [......10.0.2.15][28681] -> [...81.247.89.20][.6346] + new: [...496] [ip4][..udp] [......10.0.2.15][28681] -> [.218.173.230.98][19004] + new: [...497] [ip4][..udp] [......10.0.2.15][28681] -> [..84.100.76.123][39628] + new: [...498] [ip4][..udp] [......10.0.2.15][28681] -> [...8.44.149.207][30551] + new: [...499] [ip4][..udp] [......10.0.2.15][28681] -> [....1.161.80.82][.8656] + new: [...500] [ip4][..udp] [......10.0.2.15][28681] -> [.220.143.34.225][20071] + new: [...501] [ip4][..udp] [......10.0.2.15][28681] -> [.88.160.214.137][.6346] + new: [...502] [ip4][..udp] [......10.0.2.15][28681] -> [..47.156.58.211][.6346] + new: [...503] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + new: [...504] [ip4][..udp] [......10.0.2.15][28681] -> [..85.203.45.107][.6346] + new: [...505] [ip4][..udp] [......10.0.2.15][28681] -> [.....42.2.62.28][.6387] + new: [...506] [ip4][..udp] [......10.0.2.15][28681] -> [..136.32.84.139][.6346] + new: [...507] [ip4][..udp] [......10.0.2.15][28681] -> [...50.4.204.220][.6346] + new: [...508] [ip4][..udp] [......10.0.2.15][28681] -> [...92.144.99.73][10745] + new: [...509] [ip4][..udp] [......10.0.2.15][28681] -> [.92.142.109.190][41370] + new: [...510] [ip4][..udp] [......10.0.2.15][28681] -> [...79.94.85.113][.6346] + new: [...511] [ip4][..udp] [......10.0.2.15][28681] -> [...68.47.223.27][.6346] + new: [...512] [ip4][..udp] [......10.0.2.15][28681] -> [..209.204.207.5][49256] + new: [...513] [ip4][..udp] [......10.0.2.15][28681] -> [..78.196.216.12][58910] + new: [...514] [ip4][..udp] [......10.0.2.15][28681] -> [..83.114.40.175][23552] + new: [...515] [ip4][..udp] [......10.0.2.15][28681] -> [220.137.106.173][11625] + new: [...516] [ip4][..udp] [......10.0.2.15][28681] -> [.119.246.147.72][.4572] + new: [...517] [ip4][..udp] [......10.0.2.15][28681] -> [..36.239.162.27][.7986] + new: [...518] [ip4][..udp] [......10.0.2.15][28681] -> [..202.151.63.59][.7624] + new: [...519] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.48.23][.8070] + new: [...520] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3339] + new: [...521] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][23458] + new: [...522] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.152.218][51153] + new: [...523] [ip4][..udp] [......10.0.2.15][28681] -> [..1.162.138.200][24018] + new: [...524] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][65362] + new: [...525] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][52660] + new: [...526] [ip4][..udp] [......10.0.2.15][28681] -> [..36.234.197.93][.1483] + new: [...527] [ip4][..udp] [......10.0.2.15][28681] -> [..42.72.149.140][37848] + new: [...528] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][58442] + new: [...529] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][57929] + new: [...530] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.248.220][59304] + new: [...531] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51497] + new: [...532] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10677] + new: [...533] [ip4][..udp] [......10.0.2.15][28681] -> [..36.229.185.60][.6898] + new: [...534] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54436] + new: [...535] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10655] + new: [...536] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.222.160][56121] + new: [...537] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2034] + new: [...538] [ip4][..udp] [......10.0.2.15][28681] -> [.124.218.41.253][14339] + new: [...539] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.7510] + new: [...540] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52131] + new: [...541] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][11141] + new: [...542] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51675] + new: [...543] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.159.60][56896] + new: [...544] [ip4][..udp] [......10.0.2.15][28681] -> [..111.184.29.35][30582] + new: [...545] [ip4][..udp] [......10.0.2.15][28681] -> [..116.49.159.77][55915] + new: [...546] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49867] + new: [...547] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][43316] + new: [...548] [ip4][..udp] [......10.0.2.15][28681] -> [..74.50.147.205][17735] + new: [...549] [ip4][..udp] [......10.0.2.15][28681] -> [..84.211.151.48][11105] + new: [...550] [ip4][..udp] [......10.0.2.15][28681] -> [.220.238.145.82][33527] + new: [...551] [ip4][..udp] [......10.0.2.15][28681] -> [..92.24.129.230][14766] + new: [...552] [ip4][..udp] [......10.0.2.15][28681] -> [...218.250.6.59][60012] + new: [...553] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3259] + new: [...554] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][55577] + new: [...555] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][20387] + new: [...556] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49787] + new: [...557] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53163] + new: [...558] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6466] + new: [...559] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][55080] + new: [...560] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53883] + new: [...561] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57466] + new: [...562] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][59879] + new: [...563] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6831] + new: [...564] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53144] + new: [...565] [ip4][..udp] [......10.0.2.15][28681] -> [...114.45.40.28][.2656] + new: [...566] [ip4][..udp] [......10.0.2.15][28681] -> [...58.176.62.40][52755] + new: [...567] [ip4][..udp] [......10.0.2.15][28681] -> [...58.176.62.40][52889] + new: [...568] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][56562] + new: [...569] [ip4][..udp] [......10.0.2.15][28681] -> [....73.89.249.8][50649] + new: [...570] [ip4][..udp] [......10.0.2.15][28681] -> [..97.83.183.148][.8890] + new: [...571] [ip4][..udp] [......10.0.2.15][28681] -> [.114.40.163.123][55341] + new: [...572] [ip4][..udp] [......10.0.2.15][28681] -> [...86.153.21.93][36696] + new: [...573] [ip4][..udp] [......10.0.2.15][28681] -> [..71.239.173.18][23327] + new: [...574] [ip4][..udp] [......10.0.2.15][28681] -> [..223.17.132.18][23458] + new: [...575] [ip4][..udp] [......10.0.2.15][28681] -> [.123.202.31.113][19768] + new: [...576] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][42925] + new: [...577] [ip4][..udp] [......10.0.2.15][28681] -> [.59.148.100.237][23459] + new: [...578] [ip4][..udp] [......10.0.2.15][28681] -> [..77.205.243.44][46006] + new: [...579] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.170.108][23458] + new: [...580] [ip4][..udp] [......10.0.2.15][28681] -> [...76.119.55.28][20347] + new: [...581] [ip4][..udp] [......10.0.2.15][28681] -> [..58.115.108.10][.4641] + new: [...582] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][10624] + new: [...583] [ip4][..udp] [......10.0.2.15][28681] -> [...87.75.180.80][35361] + new: [...584] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][18360] + new: [...585] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][35004] + new: [...586] [ip4][..udp] [......10.0.2.15][28681] -> [..221.124.66.33][13060] + new: [...587] [ip4][..udp] [......10.0.2.15][28681] -> [.94.134.154.158][54130] + new: [...588] [ip4][..udp] [......10.0.2.15][28681] -> [.219.70.175.103][.4315] + new: [...589] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][52647] + new: [...590] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][48380] + new: [...591] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53707] + new: [...592] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][.7190] + new: [...593] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][.9747] + new: [...594] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7375] + new: [...595] [ip4][..udp] [......10.0.2.15][28681] -> [.175.182.21.156][13732] + new: [...596] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][58954] + new: [...597] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52274] + new: [...598] [ip4][..udp] [......10.0.2.15][28681] -> [...1.172.184.48][.1512] + new: [...599] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][59875] + new: [...600] [ip4][..udp] [......10.0.2.15][28681] -> [....1.64.156.63][60092] + new: [...601] [ip4][..udp] [......10.0.2.15][28681] -> [113.255.200.161][65274] + new: [...602] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][53658] + new: [...603] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][64577] + new: [...604] [ip4][..udp] [......10.0.2.15][28681] -> [.123.202.31.113][53291] + new: [...605] [ip4][..udp] [......10.0.2.15][28681] -> [180.149.125.139][.6578] + new: [...606] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][56070] + new: [...607] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][42288] + new: [...608] [ip4][..udp] [......10.0.2.15][28681] -> [..111.241.31.96][.4814] + new: [...609] [ip4][..udp] [......10.0.2.15][28681] -> [...1.163.14.246][23461] + new: [...610] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][59016] + new: [...611] [ip4][..udp] [......10.0.2.15][28681] -> [..61.10.174.159][.4841] + new: [...612] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][59384] + new: [...613] [ip4][..udp] [......10.0.2.15][28681] -> [.106.104.88.139][.7423] + new: [...614] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.152.218][51920] + new: [...615] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][60482] + new: [...616] [ip4][..udp] [......10.0.2.15][28681] -> [.74.195.236.249][18557] + new: [...617] [ip4][..udp] [......10.0.2.15][28681] -> [220.208.167.152][30628] + new: [...618] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7380] + new: [...619] [ip4][..udp] [......10.0.2.15][28681] -> [...1.172.184.48][13281] + new: [...620] [ip4][..udp] [......10.0.2.15][28681] -> [...1.163.14.246][.1630] + new: [...621] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53516] + new: [...622] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3227] + new: [...623] [ip4][..udp] [......10.0.2.15][28681] -> [..36.234.18.166][61319] + new: [...624] [ip4][..udp] [......10.0.2.15][28681] -> [.210.209.249.84][24751] + new: [...625] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57492] + new: [...626] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][49737] + new: [...627] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49815] + new: [...628] [ip4][..udp] [......10.0.2.15][28681] -> [..73.62.225.181][46843] + new: [...629] [ip4][..udp] [......10.0.2.15][28681] -> [....45.65.87.24][16201] + new: [...630] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][45710] + new: [...631] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][.3931] + new: [...632] [ip4][..udp] [......10.0.2.15][28681] -> [..36.231.59.187][62234] + new: [...633] [ip4][..udp] [......10.0.2.15][28681] -> [...188.149.2.44][20964] + new: [...634] [ip4][..udp] [......10.0.2.15][28681] -> [..68.174.18.115][50679] + new: [...635] [ip4][..udp] [......10.0.2.15][28681] -> [..24.179.18.242][47329] + new: [...636] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.48.23][.2556] + new: [...637] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][53143] + new: [...638] [ip4][..udp] [......10.0.2.15][28681] -> [..36.233.194.73][.1995] + new: [...639] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.242.225][15068] + new: [...640] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7849] + new: [...641] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][65430] + new: [...642] [ip4][..udp] [......10.0.2.15][28681] -> [.36.233.199.103][.2625] + new: [...643] [ip4][..udp] [......10.0.2.15][28681] -> [.220.39.142.122][.6346] + new: [...644] [ip4][..udp] [......10.0.2.15][28681] -> [..31.20.248.147][30706] + new: [...645] [ip4][..udp] [......10.0.2.15][28681] -> [...173.22.22.94][34245] + new: [...646] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49803] + new: [...647] [ip4][..udp] [......10.0.2.15][28681] -> [..36.237.10.152][21293] + new: [...648] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][58290] + new: [...649] [ip4][..udp] [......10.0.2.15][28681] -> [180.218.135.222][.4548] + new: [...650] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][56128] + new: [...651] [ip4][..udp] [......10.0.2.15][28681] -> [..114.47.227.91][58856] + new: [...652] [ip4][..udp] [......10.0.2.15][28681] -> [....1.64.156.63][65023] + new: [...653] [ip4][..udp] [......10.0.2.15][28681] -> [..94.139.21.182][50110] + new: [...654] [ip4][..udp] [......10.0.2.15][28681] -> [....82.12.1.136][.6348] + new: [...655] [ip4][..udp] [......10.0.2.15][28681] -> [.84.118.116.198][44616] + new: [...656] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.2566] + new: [...657] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54914] + new: [...658] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53195] + new: [...659] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.8075] + new: [...660] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10791] + new: [...661] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6527] + new: [...662] [ip4][..udp] [......10.0.2.15][28681] -> [...24.127.1.235][37814] + new: [...663] [ip4][..udp] [......10.0.2.15][28681] -> [..96.59.117.166][33192] + new: [...664] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6594] + new: [...665] [ip4][..udp] [......10.0.2.15][28681] -> [..1.172.183.237][.4983] + new: [...666] [ip4][..udp] [......10.0.2.15][28681] -> [..82.36.106.134][.3927] + new: [...667] [ip4][..udp] [......10.0.2.15][28681] -> [.159.196.95.223][.2003] + new: [...668] [ip4][..udp] [......10.0.2.15][28681] -> [.223.18.211.177][18085] + new: [...669] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][64731] + new: [...670] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2846] + new: [...671] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52669] + new: [...672] [ip4][..udp] [......10.0.2.15][28681] -> [180.218.135.222][49867] + new: [...673] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][.4765] + new: [...674] [ip4][..udp] [......10.0.2.15][28681] -> [.125.59.215.249][14571] + new: [...675] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.1.236][.9369] + new: [...676] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][62191] + new: [...677] [ip4][..udp] [......10.0.2.15][28681] -> [...1.64.208.110][55550] + new: [...678] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][.9128] + new: [...679] [ip4][..udp] [......10.0.2.15][28681] -> [150.116.225.105][51438] + new: [...680] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.83.132][57131] + new: [...681] [ip4][..udp] [......10.0.2.15][28681] -> [.61.227.198.100][.6910] + new: [...682] [ip4][..udp] [......10.0.2.15][28681] -> [..61.220.41.241][53072] + new: [...683] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][50896] + new: [...684] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54459] + new: [...685] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][54436] + new: [...686] [ip4][..udp] [......10.0.2.15][28681] -> [..111.241.31.96][.8349] + new: [...687] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][13965] + new: [...688] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][53454] + new: [...689] [ip4][..udp] [......10.0.2.15][28681] -> [.114.36.234.196][11629] + new: [...690] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][.3688] + new: [...691] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][50637] + new: [...692] [ip4][..udp] [......10.0.2.15][28681] -> [..61.93.150.146][62507] + new: [...693] [ip4][..udp] [......10.0.2.15][28681] -> [.76.110.153.177][40022] + new: [...694] [ip4][..udp] [......10.0.2.15][28681] -> [.98.215.130.156][12405] + new: [...695] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6514] + new: [...696] [ip4][..udp] [......10.0.2.15][28681] -> [..76.189.72.230][.8161] + new: [...697] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][55050] + new: [...698] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][53906] + new: [...699] [ip4][..udp] [......10.0.2.15][28681] -> [..70.81.219.111][19210] + new: [...700] [ip4][..udp] [......10.0.2.15][28681] -> [..77.222.213.44][26536] + new: [...701] [ip4][..udp] [......10.0.2.15][28681] -> [...91.206.27.26][.6578] + new: [...702] [ip4][..udp] [......10.0.2.15][28681] -> [119.237.190.184][64163] + new: [...703] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10728] + new: [...704] [ip4][..udp] [......10.0.2.15][28681] -> [..114.40.67.191][14971] + new: [...705] [ip4][..udp] [......10.0.2.15][28681] -> [..123.192.83.59][33513] + new: [...706] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][.8658] + new: [...707] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.1968] + new: [...708] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][64871] + new: [...709] [ip4][..udp] [......10.0.2.15][28681] -> [..124.244.68.65][51967] + new: [...710] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][.3624] + new: [...711] [ip4][..udp] [......10.0.2.15][28681] -> [113.254.140.225][63637] + new: [...712] [ip4][..udp] [......10.0.2.15][28681] -> [..220.129.86.65][49723] + new: [...713] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][59978] + new: [...714] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51379] + new: [...715] [ip4][..udp] [......10.0.2.15][28681] -> [..76.174.174.69][21358] + new: [...716] [ip4][..udp] [......10.0.2.15][28681] -> [...219.71.72.88][58808] + new: [...717] [ip4][..udp] [......10.0.2.15][28681] -> [...98.249.190.8][25198] + new: [...718] [ip4][..udp] [......10.0.2.15][28681] -> [...79.191.58.38][48157] + new: [...719] [ip4][..udp] [......10.0.2.15][28681] -> [218.102.208.175][.9167] + new: [...720] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + new: [...721] [ip4][..udp] [......10.0.2.15][28681] -> [..76.26.178.132][10053] + new: [...722] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][.9897] + new: [...723] [ip4][..udp] [......10.0.2.15][28681] -> [.213.32.245.121][12333] + new: [...724] [ip4][..udp] [......10.0.2.15][28681] -> [.175.39.219.223][13482] + new: [...725] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][.9070] + new: [...726] [ip4][..udp] [......10.0.2.15][28681] -> [..219.91.30.216][61635] + new: [...727] [ip4][..udp] [......10.0.2.15][28681] -> [....1.171.82.65][50072] + new: [...728] [ip4][..udp] [......10.0.2.15][28681] -> [101.136.187.253][10914] + new: [...729] [ip4][..udp] [......10.0.2.15][28681] -> [..112.10.134.44][19739] + new: [...730] [ip4][..udp] [......10.0.2.15][28681] -> [..114.47.227.91][54463] + new: [...731] [ip4][..udp] [......10.0.2.15][28681] -> [124.217.188.105][62849] + new: [...732] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6564] + new: [...733] [ip4][..udp] [......10.0.2.15][28681] -> [..85.168.34.105][39908] + new: [...734] [ip4][..udp] [......10.0.2.15][28681] -> [...99.199.148.6][.4338] + new: [...735] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.91.201][.4297] + new: [...736] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][52420] + new: [...737] [ip4][..udp] [......10.0.2.15][28681] -> [118.166.252.163][14391] + new: [...738] [ip4][..udp] [......10.0.2.15][28681] -> [174.115.127.251][23897] + new: [...739] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3256] + new: [...740] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][19814] + new: [...741] [ip4][..udp] [......10.0.2.15][28681] -> [...36.237.25.47][21293] + new: [...742] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.4364] + new: [...743] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][36780] + new: [...744] [ip4][..udp] [......10.0.2.15][28681] -> [...27.94.154.53][.6346] + new: [...745] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][48250] + new: [...746] [ip4][.icmp] [..164.132.10.25] -> [......10.0.2.15] + detected: [...746] [ip4][.icmp] [..164.132.10.25] -> [......10.0.2.15] [ICMP][Network][Acceptable] + new: [...747] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + new: [...748] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6599] + update: [...377] [ip4][..udp] [......10.0.2.15][28681] -> [.180.200.236.13][12082] + update: [...247] [ip4][..udp] [......10.0.2.15][28681] -> [..181.84.178.16][60262] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...307] [ip4][..udp] [......10.0.2.15][28681] -> [..72.201.208.57][38617] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...309] [ip4][..udp] [......10.0.2.15][28681] -> [.47.220.186.140][27641] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...394] [ip4][..udp] [......10.0.2.15][28681] -> [.165.84.134.136][21407] + update: [...254] [ip4][..udp] [......10.0.2.15][28681] -> [..88.120.73.215][24562] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...258] [ip4][..udp] [......10.0.2.15][28681] -> [...24.26.216.95][13889] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...315] [ip4][..udp] [......10.0.2.15][28681] -> [...92.217.84.16][20223] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...398] [ip4][..udp] [......10.0.2.15][28681] -> [.62.102.148.166][31332] + update: [...358] [ip4][..udp] [......10.0.2.15][28681] -> [.47.224.174.174][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...357] [ip4][..udp] [......10.0.2.15][28681] -> [...98.35.85.238][32173] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...381] [ip4][..udp] [......10.0.2.15][28681] -> [...77.58.211.52][.3806] + update: [...386] [ip4][..udp] [......10.0.2.15][28681] -> [...85.172.10.90][40162] + update: [...310] [ip4][..udp] [......10.0.2.15][28681] -> [.118.240.69.199][.6348] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...306] [ip4][..udp] [......10.0.2.15][28681] -> [..41.249.63.200][22582] + update: [...392] [ip4][..udp] [......10.0.2.15][28681] -> [....42.0.69.215][12608] + update: [...265] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][.1194] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...304] [ip4][..udp] [......10.0.2.15][28681] -> [.193.32.126.214][59596] + update: [...389] [ip4][..udp] [......10.0.2.15][28681] -> [..94.215.183.71][31310] + update: [...318] [ip4][..udp] [......10.0.2.15][28681] -> [173.183.183.110][59920] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...242] [ip4][..udp] [......10.0.2.15][28681] -> [..75.133.101.93][52367] + update: [...260] [ip4][..udp] [......10.0.2.15][28681] -> [.46.128.114.107][.6578] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...311] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.188.98][62851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...308] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][40137] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...251] [ip4][..udp] [......10.0.2.15][28681] -> [.185.203.218.92][56962] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...259] [ip4][..udp] [......10.0.2.15][28681] -> [103.232.107.100][43508] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...300] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] + update: [...385] [ip4][..udp] [......10.0.2.15][28681] -> [..66.223.143.31][47978] + update: [...250] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][26253] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...384] [ip4][..udp] [......10.0.2.15][28681] -> [....75.64.6.175][.4743] + update: [...256] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][50297] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...378] [ip4][..udp] [......10.0.2.15][28681] -> [.118.241.204.61][43366] + update: [...249] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.218][.6909] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...375] [ip4][..udp] [......10.0.2.15][28681] -> [..73.182.136.42][27873] + update: [...257] [ip4][..udp] [......10.0.2.15][28681] -> [.82.181.251.218][36368] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...399] [ip4][..udp] [......10.0.2.15][28681] -> [.175.39.219.223][31728] + update: [...356] [ip4][..udp] [......10.0.2.15][28681] -> [.63.228.175.169][.1936] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...355] [ip4][..udp] [......10.0.2.15][28681] -> [.181.118.53.212][29998] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...388] [ip4][..udp] [......10.0.2.15][28681] -> [...121.7.145.36][33905] + update: [...303] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][30566] + update: [...246] [ip4][..udp] [......10.0.2.15][28681] -> [...96.65.68.194][35481] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...395] [ip4][..udp] [......10.0.2.15][28681] -> [..191.114.88.39][18751] + update: [...301] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][11852] + update: [...317] [ip4][..udp] [......10.0.2.15][28681] -> [...96.236.205.7][34794] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...376] [ip4][..udp] [......10.0.2.15][28681] -> [....156.57.42.2][33476] + update: [...261] [ip4][..udp] [......10.0.2.15][28681] -> [..60.241.48.194][21301] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...243] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] + update: [...313] [ip4][..udp] [......10.0.2.15][28681] -> [..176.99.176.20][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...387] [ip4][..udp] [......10.0.2.15][28681] -> [....220.135.8.7][.1219] + update: [...302] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][53489] + update: [...255] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][30577] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...248] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][12012] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...380] [ip4][..udp] [......10.0.2.15][28681] -> [...83.86.49.195][12019] + update: [...383] [ip4][..udp] [......10.0.2.15][28681] -> [...84.71.243.60][34498] + update: [...263] [ip4][..udp] [......10.0.2.15][28681] -> [..82.217.176.52][.7446] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...253] [ip4][..udp] [......10.0.2.15][28681] -> [.193.37.255.130][61616] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...390] [ip4][..udp] [......10.0.2.15][28681] -> [144.134.132.206][16401] + update: [...252] [ip4][..udp] [......10.0.2.15][28681] -> [..72.140.120.41][47739] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...391] [ip4][..udp] [......10.0.2.15][28681] -> [...161.81.38.67][.9539] + update: [...316] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][63637] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...262] [ip4][..udp] [......10.0.2.15][28681] -> [....89.75.52.19][46010] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...393] [ip4][..udp] [......10.0.2.15][28681] -> [.58.115.158.103][.5110] + update: [...382] [ip4][..udp] [......10.0.2.15][28681] -> [..76.175.11.126][40958] + update: [...397] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][24634] + update: [...264] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][11603] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...379] [ip4][..udp] [......10.0.2.15][28681] -> [..80.140.63.147][29545] + update: [...396] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.59.24][28755] + update: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...329] [ip4][..udp] [......10.0.2.15][28681] -> [..92.117.249.98][.6815] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...433] [ip4][..udp] [......10.0.2.15][28681] -> [.99.255.145.191][47264] + update: [...328] [ip4][..udp] [......10.0.2.15][28681] -> [.203.220.105.27][19260] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...404] [ip4][..udp] [......10.0.2.15][28681] -> [.86.234.216.251][17845] + update: [...441] [ip4][..udp] [......10.0.2.15][28681] -> [.36.237.199.108][56040] + update: [...331] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][26851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...450] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][23458] + update: [...426] [ip4][..udp] [......10.0.2.15][28681] -> [..219.71.44.121][14398] + update: [...411] [ip4][..udp] [......10.0.2.15][28681] -> [...89.143.28.64][.6346] + update: [...408] [ip4][..udp] [......10.0.2.15][28681] -> [...90.103.2.245][.6346] + update: [...424] [ip4][..udp] [......10.0.2.15][28681] -> [..93.15.216.216][.6346] + update: [...479] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.13.148][51896] + update: [...422] [ip4][..udp] [......10.0.2.15][28681] -> [..88.123.35.219][42211] + update: [...439] [ip4][..udp] [......10.0.2.15][28681] -> [..176.135.15.86][.6346] + update: [...474] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][45880] + update: [...477] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45640] + update: [...444] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][.9010] + update: [...478] [ip4][..udp] [......10.0.2.15][28681] -> [...36.235.85.44][64914] + update: [...449] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][.8826] + update: [...461] [ip4][..udp] [......10.0.2.15][28681] -> [..69.27.193.124][50555] + update: [...332] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...472] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45744] + update: [...471] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][43457] + update: [...481] [ip4][..udp] [......10.0.2.15][28681] -> [..82.120.219.74][.6346] + update: [...476] [ip4][..udp] [......10.0.2.15][28681] -> [..98.18.172.208][63172] + update: [...435] [ip4][..udp] [......10.0.2.15][28681] -> [.109.24.146.101][.6346] + update: [...465] [ip4][..udp] [......10.0.2.15][28681] -> [.....2.28.39.18][15672] + update: [...421] [ip4][..udp] [......10.0.2.15][28681] -> [..175.182.39.11][12977] + update: [...416] [ip4][..udp] [......10.0.2.15][28681] -> [..92.139.61.103][24096] + update: [...443] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][54754] + update: [...413] [ip4][..udp] [......10.0.2.15][28681] -> [...87.65.188.29][24676] + update: [...412] [ip4][..udp] [......10.0.2.15][28681] -> [...58.177.52.73][.6346] + update: [...418] [ip4][..udp] [......10.0.2.15][28681] -> [.75.129.149.103][.6346] + update: [...468] [ip4][..udp] [......10.0.2.15][28681] -> [..94.214.12.247][44001] + update: [...466] [ip4][..udp] [......10.0.2.15][28681] -> [...70.119.248.5][49929] + update: [...446] [ip4][..udp] [......10.0.2.15][28681] -> [..61.70.199.107][60475] + update: [...470] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][46790] + update: [...447] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][23458] + update: [...451] [ip4][..udp] [......10.0.2.15][28681] -> [...218.35.66.21][22234] + update: [...456] [ip4][..udp] [......10.0.2.15][28681] -> [.89.241.112.255][14766] + update: [...428] [ip4][..udp] [......10.0.2.15][28681] -> [....86.162.97.8][.6346] + update: [...455] [ip4][..udp] [......10.0.2.15][28681] -> [.58.153.206.183][16919] + update: [...453] [ip4][..udp] [......10.0.2.15][28681] -> [..74.127.26.138][.3083] + update: [...425] [ip4][..udp] [......10.0.2.15][28681] -> [..145.82.53.165][.6346] + update: [...460] [ip4][..udp] [......10.0.2.15][28681] -> [.210.194.116.78][.8342] + update: [...454] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][23183] + update: [...401] [ip4][..udp] [......10.0.2.15][28681] -> [.173.178.192.76][.6346] + update: [...484] [ip4][..udp] [......10.0.2.15][28681] -> [...107.4.56.177][10000] + update: [...327] [ip4][..udp] [......10.0.2.15][28681] -> [...84.28.53.225][44859] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...406] [ip4][..udp] [......10.0.2.15][28681] -> [....109.27.3.68][57380] + update: [...321] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][21995] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...469] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][47184] + update: [...324] [ip4][..udp] [......10.0.2.15][28681] -> [.73.250.179.237][20848] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...467] [ip4][..udp] [......10.0.2.15][28681] -> [...61.64.177.53][23458] + update: [...431] [ip4][..udp] [......10.0.2.15][28681] -> [..88.124.71.246][49035] + update: [...483] [ip4][..udp] [.......10.0.2.2][.1026] -> [......10.0.2.15][28681] + update: [...402] [ip4][..udp] [......10.0.2.15][28681] -> [...78.219.202.2][.6346] + update: [...420] [ip4][..udp] [......10.0.2.15][28681] -> [..86.227.127.34][.6346] + update: [...417] [ip4][..udp] [......10.0.2.15][28681] -> [.94.187.236.179][.6346] + update: [...485] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.209][.6346] + update: [...427] [ip4][..udp] [......10.0.2.15][28681] -> [...81.249.13.30][15138] + update: [...405] [ip4][..udp] [......10.0.2.15][28681] -> [.176.155.31.118][.6346] + update: [...319] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][55302] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...415] [ip4][..udp] [......10.0.2.15][28681] -> [..90.247.160.96][17817] + update: [...458] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.228.167][12201] + update: [...486] [ip4][..udp] [......10.0.2.15][28681] -> [...88.68.45.203][.6346] + update: [...410] [ip4][..udp] [......10.0.2.15][28681] -> [..93.28.130.131][.6346] + update: [...423] [ip4][..udp] [......10.0.2.15][28681] -> [..119.247.6.226][.9713] + update: [...438] [ip4][..udp] [......10.0.2.15][28681] -> [..71.86.190.163][14142] + update: [...403] [ip4][..udp] [......10.0.2.15][28681] -> [197.244.171.132][.6346] + update: [...330] [ip4][..udp] [......10.0.2.15][28681] -> [....82.64.44.11][.1352] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...457] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.240.113][13867] + update: [...429] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.215.213][23576] + update: [...436] [ip4][..udp] [......10.0.2.15][28681] -> [.219.68.179.137][.6406] + update: [...414] [ip4][..udp] [......10.0.2.15][28681] -> [175.181.156.244][.8255] + update: [...409] [ip4][..udp] [......10.0.2.15][28681] -> [...86.194.53.68][33770] + update: [...482] [ip4][..udp] [......10.0.2.15][28681] -> [..86.193.23.172][42227] + update: [...400] [ip4][..udp] [......10.0.2.15][28681] -> [..129.45.47.167][.6346] + update: [...326] [ip4][..udp] [......10.0.2.15][28681] -> [..100.1.231.138][56558] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...407] [ip4][..udp] [......10.0.2.15][28681] -> [195.181.151.217][.6346] + update: [...463] [ip4][..udp] [......10.0.2.15][28681] -> [..200.7.155.210][28365] + update: [...452] [ip4][..udp] [......10.0.2.15][28681] -> [..68.227.193.37][27481] + update: [...440] [ip4][..udp] [......10.0.2.15][28681] -> [203.165.170.112][37087] + update: [...448] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][15677] + update: [...459] [ip4][..udp] [......10.0.2.15][28681] -> [...100.89.84.59][11603] + update: [...437] [ip4][..udp] [......10.0.2.15][28681] -> [....31.38.163.2][.6346] + update: [...445] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.153.100][.4509] + update: [...419] [ip4][..udp] [......10.0.2.15][28681] -> [...78.193.236.8][46557] + update: [...432] [ip4][..udp] [......10.0.2.15][28681] -> [...104.6.118.53][.6346] + update: [...464] [ip4][..udp] [......10.0.2.15][28681] -> [...101.128.66.8][34512] + update: [...480] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.74.26][65498] + update: [...434] [ip4][..udp] [......10.0.2.15][28681] -> [.114.24.182.130][22232] + update: [...462] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][47808] + update: [...430] [ip4][..udp] [......10.0.2.15][28681] -> [....90.8.95.165][40763] + update: [...475] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][63978] + update: [...473] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][33564] + update: [...442] [ip4][..udp] [......10.0.2.15][28681] -> [..89.204.130.55][29545] + new: [...749] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] + new: [...750] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] + new: [...751] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] + new: [...752] [ip4][..udp] [......10.0.2.15][28681] -> [142.115.218.152][.5900] + new: [...753] [ip4][..udp] [......10.0.2.15][28681] -> [..165.84.140.96][14400] + idle: [...338] [ip4][..udp] [......10.0.2.15][28681] -> [221.198.205.196][20778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...354] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][.1032] [Unknown][Unrated] + idle: [...354] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][.1032] + not-detected: [...353] [ip4][..udp] [......10.0.2.15][28681] -> [195.181.151.217][25282] [Unknown][Unrated] + idle: [...353] [ip4][..udp] [......10.0.2.15][28681] -> [195.181.151.217][25282] + idle: [...350] [ip4][..udp] [......10.0.2.15][28681] -> [..99.250.253.99][11819] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...343] [ip4][..udp] [......10.0.2.15][28681] -> [..89.212.91.155][.5195] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...348] [ip4][..udp] [......10.0.2.15][28681] -> [...84.197.97.94][.1360] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...346] [ip4][..udp] [......10.0.2.15][28681] -> [..76.226.85.105][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...327] [ip4][..udp] [......10.0.2.15][28681] -> [...84.28.53.225][44859] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...164] [ip4][..udp] [......10.0.2.15][28681] -> [.142.197.219.85][26234] [Unknown][Unrated] + idle: [...164] [ip4][..udp] [......10.0.2.15][28681] -> [.142.197.219.85][26234] + idle: [...337] [ip4][..udp] [......10.0.2.15][28681] -> [..24.116.64.132][51227] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...347] [ip4][..udp] [......10.0.2.15][28681] -> [..176.10.169.10][12799] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...165] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] [Unknown][Unrated] + idle: [...165] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] + not-detected: [...188] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] [Unknown][Unrated] + idle: [...188] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] + not-detected: [...177] [ip4][..udp] [......10.0.2.15][28681] -> [.69.157.183.106][.6346] [Unknown][Unrated] + idle: [...177] [ip4][..udp] [......10.0.2.15][28681] -> [.69.157.183.106][.6346] + not-detected: [...182] [ip4][..udp] [......10.0.2.15][28681] -> [....73.3.103.37][35589] [Unknown][Unrated] + idle: [...182] [ip4][..udp] [......10.0.2.15][28681] -> [....73.3.103.37][35589] + idle: [...326] [ip4][..udp] [......10.0.2.15][28681] -> [..100.1.231.138][56558] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...351] [ip4][..udp] [......10.0.2.15][28681] -> [..187.37.87.189][.6346] [Unknown][Unrated] + idle: [...351] [ip4][..udp] [......10.0.2.15][28681] -> [..187.37.87.189][.6346] + not-detected: [...163] [ip4][..udp] [......10.0.2.15][28681] -> [.88.126.160.158][.6346] [Unknown][Unrated] + idle: [...163] [ip4][..udp] [......10.0.2.15][28681] -> [.88.126.160.158][.6346] + idle: [...341] [ip4][..udp] [......10.0.2.15][28681] -> [..24.129.233.60][19990] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...335] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + update: [...359] [ip4][..udp] [......10.0.2.15][51685] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...488] [ip4][..udp] [......10.0.2.15][28681] -> [.183.179.90.112][.9852] + update: [...490] [ip4][..udp] [......10.0.2.15][28681] -> [...90.3.215.132][20356] + update: [...489] [ip4][..udp] [......10.0.2.15][28681] -> [...108.44.45.25][.6346] + update: [...487] [ip4][..udp] [......10.0.2.15][28681] -> [..24.78.134.188][49046] + update: [...491] [ip4][..udp] [......10.0.2.15][28681] -> [..36.233.42.210][.5512] + update: [...492] [ip4][..udp] [......10.0.2.15][28681] -> [...172.94.41.71][.6346] + idle: [...329] [ip4][..udp] [......10.0.2.15][28681] -> [..92.117.249.98][.6815] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...328] [ip4][..udp] [......10.0.2.15][28681] -> [.203.220.105.27][19260] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...315] [ip4][..udp] [......10.0.2.15][28681] -> [...92.217.84.16][20223] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...358] [ip4][..udp] [......10.0.2.15][28681] -> [.47.224.174.174][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...357] [ip4][..udp] [......10.0.2.15][28681] -> [...98.35.85.238][32173] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [....90] [ip4][..tcp] [......10.0.2.15][50245] -> [..73.62.225.181][46843] [Unknown][Unrated] + end: [....90] [ip4][..tcp] [......10.0.2.15][50245] -> [..73.62.225.181][46843] + idle: [...318] [ip4][..udp] [......10.0.2.15][28681] -> [173.183.183.110][59920] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...311] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.188.98][62851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...300] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] [Unknown][Unrated] + idle: [...300] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] + idle: [...324] [ip4][..udp] [......10.0.2.15][28681] -> [.73.250.179.237][20848] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...361] [ip4][..udp] [......10.0.2.15][28681] -> [..86.129.196.84][.9915] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] + update: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] + update: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] + update: [...366] [ip4][..udp] [......10.0.2.15][28681] -> [....94.8.55.158][51140] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [....88] [ip4][..udp] [......10.0.2.15][28681] -> [.....81.50.24.2][17874] + update: [...365] [ip4][..udp] [......10.0.2.15][28681] -> [..188.23.24.213][18561] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...340] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49732] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [.....8] [ip4][....2] [......10.0.2.15] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + update: [....20] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] + update: [...344] [ip4][..udp] [......10.0.2.15][28681] -> [.207.38.163.228][.6778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] + update: [....98] [ip4][..udp] [......10.0.2.15][28681] -> [.203.222.14.170][23332] + update: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] + update: [...336] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][.6888] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] + update: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] + update: [...368] [ip4][..udp] [......10.0.2.15][28681] -> [...47.147.52.21][36728] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] + update: [...363] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][38297] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...136] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][16047] + update: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] + update: [...362] [ip4][..udp] [......10.0.2.15][28681] -> [190.192.210.182][.6754] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] + update: [...342] [ip4][..udp] [......10.0.2.15][28681] -> [..98.208.26.154][.4994] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...369] [ip4][..udp] [......10.0.2.15][28681] -> [.89.187.171.240][.6346] + update: [...125] [ip4][..udp] [......10.0.2.15][28681] -> [..83.92.178.182][57302] + update: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] + update: [...746] [ip4][.icmp] [..164.132.10.25] -> [......10.0.2.15] [ICMP][Network][Acceptable] + update: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] + update: [...124] [ip4][..udp] [......10.0.2.15][28681] -> [...170.254.19.6][24180] + update: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] + update: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] + update: [...360] [ip4][..udp] [......10.0.2.15][28681] -> [..198.58.218.12][47912] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...364] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][10825] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] + update: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] + update: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] + update: [...108] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][.7922] + update: [...339] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][54130] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...113] [ip4][..udp] [......10.0.2.15][28681] -> [105.101.132.146][57746] + update: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] + update: [...367] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][49956] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] + idle: [...251] [ip4][..udp] [......10.0.2.15][28681] -> [.185.203.218.92][56962] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...249] [ip4][..udp] [......10.0.2.15][28681] -> [..45.88.117.218][.6909] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...577] [ip4][..udp] [......10.0.2.15][28681] -> [.59.148.100.237][23459] + update: [...586] [ip4][..udp] [......10.0.2.15][28681] -> [..221.124.66.33][13060] + update: [...619] [ip4][..udp] [......10.0.2.15][28681] -> [...1.172.184.48][13281] + update: [...544] [ip4][..udp] [......10.0.2.15][28681] -> [..111.184.29.35][30582] + update: [...526] [ip4][..udp] [......10.0.2.15][28681] -> [..36.234.197.93][.1483] + update: [...509] [ip4][..udp] [......10.0.2.15][28681] -> [.92.142.109.190][41370] + update: [...670] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2846] + update: [...610] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][59016] + update: [...691] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][50637] + update: [...701] [ip4][..udp] [......10.0.2.15][28681] -> [...91.206.27.26][.6578] + update: [...511] [ip4][..udp] [......10.0.2.15][28681] -> [...68.47.223.27][.6346] + update: [...496] [ip4][..udp] [......10.0.2.15][28681] -> [.218.173.230.98][19004] + update: [...533] [ip4][..udp] [......10.0.2.15][28681] -> [..36.229.185.60][.6898] + update: [...592] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][.7190] + update: [...702] [ip4][..udp] [......10.0.2.15][28681] -> [119.237.190.184][64163] + update: [...495] [ip4][..udp] [......10.0.2.15][28681] -> [...81.247.89.20][.6346] + update: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] + update: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] + update: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] + update: [...493] [ip4][..udp] [......10.0.2.15][57552] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...603] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][64577] + update: [...622] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3227] + update: [...647] [ip4][..udp] [......10.0.2.15][28681] -> [..36.237.10.152][21293] + update: [...741] [ip4][..udp] [......10.0.2.15][28681] -> [...36.237.25.47][21293] + update: [...516] [ip4][..udp] [......10.0.2.15][28681] -> [.119.246.147.72][.4572] + update: [...734] [ip4][..udp] [......10.0.2.15][28681] -> [...99.199.148.6][.4338] + update: [...597] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52274] + update: [...676] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][62191] + update: [...739] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3256] + update: [...553] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3259] + update: [...629] [ip4][..udp] [......10.0.2.15][28681] -> [....45.65.87.24][16201] + update: [...352] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.6346] + update: [...195] [ip4][..udp] [......10.0.2.15][28681] -> [.177.231.151.16][.6346] + update: [...617] [ip4][..udp] [......10.0.2.15][28681] -> [220.208.167.152][30628] + update: [...596] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][58954] + update: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] + update: [...714] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51379] + update: [...593] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][.9747] + update: [...571] [ip4][..udp] [......10.0.2.15][28681] -> [.114.40.163.123][55341] + update: [...524] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][65362] + update: [...643] [ip4][..udp] [......10.0.2.15][28681] -> [.220.39.142.122][.6346] + update: [...572] [ip4][..udp] [......10.0.2.15][28681] -> [...86.153.21.93][36696] + update: [...650] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][56128] + update: [...520] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3339] + update: [...636] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.48.23][.2556] + update: [...637] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][53143] + update: [...638] [ip4][..udp] [......10.0.2.15][28681] -> [..36.233.194.73][.1995] + update: [...546] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49867] + update: [...677] [ip4][..udp] [......10.0.2.15][28681] -> [...1.64.208.110][55550] + update: [...723] [ip4][..udp] [......10.0.2.15][28681] -> [.213.32.245.121][12333] + update: [...531] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51497] + update: [...578] [ip4][..udp] [......10.0.2.15][28681] -> [..77.205.243.44][46006] + update: [...738] [ip4][..udp] [......10.0.2.15][28681] -> [174.115.127.251][23897] + update: [...584] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][18360] + update: [...534] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54436] + update: [...708] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][64871] + update: [...745] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][48250] + update: [...501] [ip4][..udp] [......10.0.2.15][28681] -> [.88.160.214.137][.6346] + update: [...684] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54459] + update: [...506] [ip4][..udp] [......10.0.2.15][28681] -> [..136.32.84.139][.6346] + update: [...562] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][59879] + update: [...620] [ip4][..udp] [......10.0.2.15][28681] -> [...1.163.14.246][.1630] + update: [...606] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][56070] + update: [...692] [ip4][..udp] [......10.0.2.15][28681] -> [..61.93.150.146][62507] + update: [...621] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53516] + update: [...668] [ip4][..udp] [......10.0.2.15][28681] -> [.223.18.211.177][18085] + update: [...721] [ip4][..udp] [......10.0.2.15][28681] -> [..76.26.178.132][10053] + update: [...698] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][53906] + update: [...623] [ip4][..udp] [......10.0.2.15][28681] -> [..36.234.18.166][61319] + update: [...542] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51675] + update: [...715] [ip4][..udp] [......10.0.2.15][28681] -> [..76.174.174.69][21358] + update: [...191] [ip4][..udp] [......10.0.2.15][28681] -> [.190.153.143.54][65535] + update: [...615] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][60482] + update: [...607] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][42288] + update: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] + update: [...740] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][19814] + update: [...587] [ip4][..udp] [......10.0.2.15][28681] -> [.94.134.154.158][54130] + update: [...550] [ip4][..udp] [......10.0.2.15][28681] -> [.220.238.145.82][33527] + update: [...689] [ip4][..udp] [......10.0.2.15][28681] -> [.114.36.234.196][11629] + update: [...671] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52669] + update: [...598] [ip4][..udp] [......10.0.2.15][28681] -> [...1.172.184.48][.1512] + update: [...551] [ip4][..udp] [......10.0.2.15][28681] -> [..92.24.129.230][14766] + update: [...686] [ip4][..udp] [......10.0.2.15][28681] -> [..111.241.31.96][.8349] + update: [...555] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][20387] + update: [...722] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][.9897] + update: [...371] [ip4][..udp] [......10.0.2.15][28681] -> [.109.131.202.24][44748] + update: [...632] [ip4][..udp] [......10.0.2.15][28681] -> [..36.231.59.187][62234] + update: [...591] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53707] + update: [...594] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7375] + update: [...614] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.152.218][51920] + update: [...618] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7380] + update: [...508] [ip4][..udp] [......10.0.2.15][28681] -> [...92.144.99.73][10745] + update: [...582] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][10624] + update: [...573] [ip4][..udp] [......10.0.2.15][28681] -> [..71.239.173.18][23327] + update: [...513] [ip4][..udp] [......10.0.2.15][28681] -> [..78.196.216.12][58910] + update: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] + update: [...568] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][56562] + update: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] + update: [...538] [ip4][..udp] [......10.0.2.15][28681] -> [.124.218.41.253][14339] + update: [...624] [ip4][..udp] [......10.0.2.15][28681] -> [.210.209.249.84][24751] + update: [...630] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][45710] + update: [...693] [ip4][..udp] [......10.0.2.15][28681] -> [.76.110.153.177][40022] + update: [...604] [ip4][..udp] [......10.0.2.15][28681] -> [.123.202.31.113][53291] + update: [...719] [ip4][..udp] [......10.0.2.15][28681] -> [218.102.208.175][.9167] + update: [...536] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.222.160][56121] + update: [...558] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6466] + update: [...556] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49787] + update: [...600] [ip4][..udp] [......10.0.2.15][28681] -> [....1.64.156.63][60092] + update: [...646] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49803] + update: [...662] [ip4][..udp] [......10.0.2.15][28681] -> [...24.127.1.235][37814] + update: [...499] [ip4][..udp] [......10.0.2.15][28681] -> [....1.161.80.82][.8656] + update: [...627] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49815] + update: [...704] [ip4][..udp] [......10.0.2.15][28681] -> [..114.40.67.191][14971] + update: [...560] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53883] + update: [...657] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54914] + update: [...728] [ip4][..udp] [......10.0.2.15][28681] -> [101.136.187.253][10914] + update: [...521] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][23458] + update: [...503] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + update: [...505] [ip4][..udp] [......10.0.2.15][28681] -> [.....42.2.62.28][.6387] + update: [...494] [ip4][..udp] [......10.0.2.15][28681] -> [...86.210.81.59][.6346] + update: [...370] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.56.198][11984] + update: [...173] [ip4][..udp] [......10.0.2.15][28681] -> [..121.99.222.36][44988] + update: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] + update: [...498] [ip4][..udp] [......10.0.2.15][28681] -> [...8.44.149.207][30551] + update: [...705] [ip4][..udp] [......10.0.2.15][28681] -> [..123.192.83.59][33513] + update: [...642] [ip4][..udp] [......10.0.2.15][28681] -> [.36.233.199.103][.2625] + update: [...718] [ip4][..udp] [......10.0.2.15][28681] -> [...79.191.58.38][48157] + update: [...743] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][36780] + update: [...675] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.1.236][.9369] + update: [...673] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][.4765] + update: [...682] [ip4][..udp] [......10.0.2.15][28681] -> [..61.220.41.241][53072] + update: [...641] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][65430] + update: [...559] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][55080] + update: [...683] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][50896] + update: [...680] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.83.132][57131] + update: [...695] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6514] + update: [...666] [ip4][..udp] [......10.0.2.15][28681] -> [..82.36.106.134][.3927] + update: [...661] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6527] + update: [...529] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][57929] + update: [...616] [ip4][..udp] [......10.0.2.15][28681] -> [.74.195.236.249][18557] + update: [...539] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.7510] + update: [...717] [ip4][..udp] [......10.0.2.15][28681] -> [...98.249.190.8][25198] + update: [...732] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6564] + update: [...545] [ip4][..udp] [......10.0.2.15][28681] -> [..116.49.159.77][55915] + update: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] + update: [...374] [ip4][..udp] [......10.0.2.15][28681] -> [....62.35.190.5][18604] + update: [...736] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][52420] + update: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] + update: [...664] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6594] + update: [...635] [ip4][..udp] [......10.0.2.15][28681] -> [..24.179.18.242][47329] + update: [...527] [ip4][..udp] [......10.0.2.15][28681] -> [..42.72.149.140][37848] + update: [...644] [ip4][..udp] [......10.0.2.15][28681] -> [..31.20.248.147][30706] + update: [...712] [ip4][..udp] [......10.0.2.15][28681] -> [..220.129.86.65][49723] + update: [...504] [ip4][..udp] [......10.0.2.15][28681] -> [..85.203.45.107][.6346] + update: [...563] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6831] + update: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] + update: [...640] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7849] + update: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] + update: [...372] [ip4][..udp] [......10.0.2.15][28681] -> [.91.179.185.126][.6346] + update: [...730] [ip4][..udp] [......10.0.2.15][28681] -> [..114.47.227.91][54463] + update: [...733] [ip4][..udp] [......10.0.2.15][28681] -> [..85.168.34.105][39908] + update: [...634] [ip4][..udp] [......10.0.2.15][28681] -> [..68.174.18.115][50679] + update: [...608] [ip4][..udp] [......10.0.2.15][28681] -> [..111.241.31.96][.4814] + update: [...706] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][.8658] + update: [...699] [ip4][..udp] [......10.0.2.15][28681] -> [..70.81.219.111][19210] + update: [...595] [ip4][..udp] [......10.0.2.15][28681] -> [.175.182.21.156][13732] + update: [...724] [ip4][..udp] [......10.0.2.15][28681] -> [.175.39.219.223][13482] + update: [...674] [ip4][..udp] [......10.0.2.15][28681] -> [.125.59.215.249][14571] + update: [...612] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][59384] + update: [...725] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][.9070] + update: [...645] [ip4][..udp] [......10.0.2.15][28681] -> [...173.22.22.94][34245] + update: [...667] [ip4][..udp] [......10.0.2.15][28681] -> [.159.196.95.223][.2003] + update: [...649] [ip4][..udp] [......10.0.2.15][28681] -> [180.218.135.222][.4548] + update: [...159] [ip4][..udp] [......10.0.2.15][28681] -> [176.163.231.160][.6346] + update: [...579] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.170.108][23458] + update: [...678] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][.9128] + update: [...707] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.1968] + update: [...554] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][55577] + update: [...655] [ip4][..udp] [......10.0.2.15][28681] -> [.84.118.116.198][44616] + update: [...726] [ip4][..udp] [......10.0.2.15][28681] -> [..219.91.30.216][61635] + update: [...669] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][64731] + update: [...528] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][58442] + update: [...742] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.4364] + update: [...697] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][55050] + update: [...537] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2034] + update: [...213] [ip4][..udp] [......10.0.2.15][28681] -> [....5.180.62.37][.6346] + update: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] + update: [...585] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][35004] + update: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] + update: [...502] [ip4][..udp] [......10.0.2.15][28681] -> [..47.156.58.211][.6346] + update: [...507] [ip4][..udp] [......10.0.2.15][28681] -> [...50.4.204.220][.6346] + update: [...687] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][13965] + update: [...663] [ip4][..udp] [......10.0.2.15][28681] -> [..96.59.117.166][33192] + update: [...535] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10655] + update: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] + update: [...602] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][53658] + update: [...589] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][52647] + update: [...654] [ip4][..udp] [......10.0.2.15][28681] -> [....82.12.1.136][.6348] + update: [...525] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][52660] + update: [...611] [ip4][..udp] [......10.0.2.15][28681] -> [..61.10.174.159][.4841] + update: [...532] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10677] + update: [...696] [ip4][..udp] [......10.0.2.15][28681] -> [..76.189.72.230][.8161] + update: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] + update: [...512] [ip4][..udp] [......10.0.2.15][28681] -> [..209.204.207.5][49256] + update: [...735] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.91.201][.4297] + update: [...628] [ip4][..udp] [......10.0.2.15][28681] -> [..73.62.225.181][46843] + update: [...552] [ip4][..udp] [......10.0.2.15][28681] -> [...218.250.6.59][60012] + update: [...651] [ip4][..udp] [......10.0.2.15][28681] -> [..114.47.227.91][58856] + update: [...703] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10728] + update: [...581] [ip4][..udp] [......10.0.2.15][28681] -> [..58.115.108.10][.4641] + update: [...613] [ip4][..udp] [......10.0.2.15][28681] -> [.106.104.88.139][.7423] + update: [...583] [ip4][..udp] [......10.0.2.15][28681] -> [...87.75.180.80][35361] + update: [...672] [ip4][..udp] [......10.0.2.15][28681] -> [180.218.135.222][49867] + update: [...574] [ip4][..udp] [......10.0.2.15][28681] -> [..223.17.132.18][23458] + update: [...679] [ip4][..udp] [......10.0.2.15][28681] -> [150.116.225.105][51438] + update: [...518] [ip4][..udp] [......10.0.2.15][28681] -> [..202.151.63.59][.7624] + update: [...716] [ip4][..udp] [......10.0.2.15][28681] -> [...219.71.72.88][58808] + update: [...660] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10791] + update: [...543] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.159.60][56896] + update: [...161] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] + update: [...564] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53144] + update: [...557] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53163] + update: [...648] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][58290] + update: [...700] [ip4][..udp] [......10.0.2.15][28681] -> [..77.222.213.44][26536] + update: [...652] [ip4][..udp] [......10.0.2.15][28681] -> [....1.64.156.63][65023] + update: [...659] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.8075] + update: [...713] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][59978] + update: [...658] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53195] + update: [...576] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][42925] + update: [...570] [ip4][..udp] [......10.0.2.15][28681] -> [..97.83.183.148][.8890] + update: [...681] [ip4][..udp] [......10.0.2.15][28681] -> [.61.227.198.100][.6910] + update: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] + update: [...500] [ip4][..udp] [......10.0.2.15][28681] -> [.220.143.34.225][20071] + update: [...566] [ip4][..udp] [......10.0.2.15][28681] -> [...58.176.62.40][52755] + update: [...514] [ip4][..udp] [......10.0.2.15][28681] -> [..83.114.40.175][23552] + update: [...599] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][59875] + update: [...517] [ip4][..udp] [......10.0.2.15][28681] -> [..36.239.162.27][.7986] + update: [...519] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.48.23][.8070] + update: [...601] [ip4][..udp] [......10.0.2.15][28681] -> [113.255.200.161][65274] + update: [...200] [ip4][..udp] [......10.0.2.15][28681] -> [.138.199.16.123][52993] + update: [...639] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.242.225][15068] + update: [...727] [ip4][..udp] [......10.0.2.15][28681] -> [....1.171.82.65][50072] + update: [...609] [ip4][..udp] [......10.0.2.15][28681] -> [...1.163.14.246][23461] + update: [...737] [ip4][..udp] [......10.0.2.15][28681] -> [118.166.252.163][14391] + update: [...549] [ip4][..udp] [......10.0.2.15][28681] -> [..84.211.151.48][11105] + update: [...561] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57466] + update: [...626] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][49737] + update: [...580] [ip4][..udp] [......10.0.2.15][28681] -> [...76.119.55.28][20347] + update: [...625] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57492] + update: [...567] [ip4][..udp] [......10.0.2.15][28681] -> [...58.176.62.40][52889] + update: [...685] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][54436] + update: [...744] [ip4][..udp] [......10.0.2.15][28681] -> [...27.94.154.53][.6346] + update: [...541] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][11141] + update: [...731] [ip4][..udp] [......10.0.2.15][28681] -> [124.217.188.105][62849] + update: [...711] [ip4][..udp] [......10.0.2.15][28681] -> [113.254.140.225][63637] + update: [...710] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][.3624] + update: [...547] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][43316] + update: [...688] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][53454] + update: [...510] [ip4][..udp] [......10.0.2.15][28681] -> [...79.94.85.113][.6346] + update: [...653] [ip4][..udp] [......10.0.2.15][28681] -> [..94.139.21.182][50110] + update: [...530] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.248.220][59304] + update: [...497] [ip4][..udp] [......10.0.2.15][28681] -> [..84.100.76.123][39628] + update: [...569] [ip4][..udp] [......10.0.2.15][28681] -> [....73.89.249.8][50649] + update: [...373] [ip4][..udp] [......10.0.2.15][28681] -> [..88.122.233.15][11488] + update: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] + update: [...515] [ip4][..udp] [......10.0.2.15][28681] -> [220.137.106.173][11625] + update: [...522] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.152.218][51153] + update: [...590] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][48380] + update: [...605] [ip4][..udp] [......10.0.2.15][28681] -> [180.149.125.139][.6578] + update: [...690] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][.3688] + update: [...665] [ip4][..udp] [......10.0.2.15][28681] -> [..1.172.183.237][.4983] + update: [...709] [ip4][..udp] [......10.0.2.15][28681] -> [..124.244.68.65][51967] + update: [...656] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.2566] + update: [...729] [ip4][..udp] [......10.0.2.15][28681] -> [..112.10.134.44][19739] + update: [...548] [ip4][..udp] [......10.0.2.15][28681] -> [..74.50.147.205][17735] + update: [...633] [ip4][..udp] [......10.0.2.15][28681] -> [...188.149.2.44][20964] + update: [...575] [ip4][..udp] [......10.0.2.15][28681] -> [.123.202.31.113][19768] + update: [...588] [ip4][..udp] [......10.0.2.15][28681] -> [.219.70.175.103][.4315] + update: [...720] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + update: [...540] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52131] + update: [...631] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][.3931] + update: [...565] [ip4][..udp] [......10.0.2.15][28681] -> [...114.45.40.28][.2656] + update: [...523] [ip4][..udp] [......10.0.2.15][28681] -> [..1.162.138.200][24018] + update: [...694] [ip4][..udp] [......10.0.2.15][28681] -> [.98.215.130.156][12405] + idle: [...307] [ip4][..udp] [......10.0.2.15][28681] -> [..72.201.208.57][38617] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...258] [ip4][..udp] [......10.0.2.15][28681] -> [...24.26.216.95][13889] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...359] [ip4][..udp] [......10.0.2.15][51685] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [...256] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][50297] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...252] [ip4][..udp] [......10.0.2.15][28681] -> [..72.140.120.41][47739] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...377] [ip4][..udp] [......10.0.2.15][28681] -> [.180.200.236.13][12082] + update: [...247] [ip4][..udp] [......10.0.2.15][28681] -> [..181.84.178.16][60262] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...309] [ip4][..udp] [......10.0.2.15][28681] -> [.47.220.186.140][27641] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...394] [ip4][..udp] [......10.0.2.15][28681] -> [.165.84.134.136][21407] + update: [...254] [ip4][..udp] [......10.0.2.15][28681] -> [..88.120.73.215][24562] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...398] [ip4][..udp] [......10.0.2.15][28681] -> [.62.102.148.166][31332] + update: [...381] [ip4][..udp] [......10.0.2.15][28681] -> [...77.58.211.52][.3806] + update: [...386] [ip4][..udp] [......10.0.2.15][28681] -> [...85.172.10.90][40162] + update: [...310] [ip4][..udp] [......10.0.2.15][28681] -> [.118.240.69.199][.6348] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...306] [ip4][..udp] [......10.0.2.15][28681] -> [..41.249.63.200][22582] + update: [...392] [ip4][..udp] [......10.0.2.15][28681] -> [....42.0.69.215][12608] + update: [...265] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][.1194] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...304] [ip4][..udp] [......10.0.2.15][28681] -> [.193.32.126.214][59596] + update: [...389] [ip4][..udp] [......10.0.2.15][28681] -> [..94.215.183.71][31310] + update: [...747] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + update: [...242] [ip4][..udp] [......10.0.2.15][28681] -> [..75.133.101.93][52367] + update: [...260] [ip4][..udp] [......10.0.2.15][28681] -> [.46.128.114.107][.6578] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...308] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][40137] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...259] [ip4][..udp] [......10.0.2.15][28681] -> [103.232.107.100][43508] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...385] [ip4][..udp] [......10.0.2.15][28681] -> [..66.223.143.31][47978] + update: [...250] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][26253] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...384] [ip4][..udp] [......10.0.2.15][28681] -> [....75.64.6.175][.4743] + update: [...378] [ip4][..udp] [......10.0.2.15][28681] -> [.118.241.204.61][43366] + update: [...375] [ip4][..udp] [......10.0.2.15][28681] -> [..73.182.136.42][27873] + update: [...257] [ip4][..udp] [......10.0.2.15][28681] -> [.82.181.251.218][36368] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...399] [ip4][..udp] [......10.0.2.15][28681] -> [.175.39.219.223][31728] + update: [...356] [ip4][..udp] [......10.0.2.15][28681] -> [.63.228.175.169][.1936] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...355] [ip4][..udp] [......10.0.2.15][28681] -> [.181.118.53.212][29998] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...388] [ip4][..udp] [......10.0.2.15][28681] -> [...121.7.145.36][33905] + update: [...303] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][30566] + update: [...246] [ip4][..udp] [......10.0.2.15][28681] -> [...96.65.68.194][35481] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...748] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6599] + update: [...395] [ip4][..udp] [......10.0.2.15][28681] -> [..191.114.88.39][18751] + update: [...301] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][11852] + update: [...317] [ip4][..udp] [......10.0.2.15][28681] -> [...96.236.205.7][34794] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...376] [ip4][..udp] [......10.0.2.15][28681] -> [....156.57.42.2][33476] + update: [...261] [ip4][..udp] [......10.0.2.15][28681] -> [..60.241.48.194][21301] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...243] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] + update: [...313] [ip4][..udp] [......10.0.2.15][28681] -> [..176.99.176.20][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...387] [ip4][..udp] [......10.0.2.15][28681] -> [....220.135.8.7][.1219] + update: [...302] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][53489] + update: [...255] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][30577] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...248] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][12012] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...380] [ip4][..udp] [......10.0.2.15][28681] -> [...83.86.49.195][12019] + update: [...383] [ip4][..udp] [......10.0.2.15][28681] -> [...84.71.243.60][34498] + update: [...263] [ip4][..udp] [......10.0.2.15][28681] -> [..82.217.176.52][.7446] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...253] [ip4][..udp] [......10.0.2.15][28681] -> [.193.37.255.130][61616] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...390] [ip4][..udp] [......10.0.2.15][28681] -> [144.134.132.206][16401] + update: [...391] [ip4][..udp] [......10.0.2.15][28681] -> [...161.81.38.67][.9539] + update: [...316] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][63637] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...262] [ip4][..udp] [......10.0.2.15][28681] -> [....89.75.52.19][46010] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...393] [ip4][..udp] [......10.0.2.15][28681] -> [.58.115.158.103][.5110] + update: [...382] [ip4][..udp] [......10.0.2.15][28681] -> [..76.175.11.126][40958] + update: [...397] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][24634] + update: [...264] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][11603] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...379] [ip4][..udp] [......10.0.2.15][28681] -> [..80.140.63.147][29545] + update: [...396] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.59.24][28755] + update: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...355] [ip4][..udp] [......10.0.2.15][28681] -> [.181.118.53.212][29998] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...330] [ip4][..udp] [......10.0.2.15][28681] -> [....82.64.44.11][.1352] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...433] [ip4][..udp] [......10.0.2.15][28681] -> [.99.255.145.191][47264] + update: [...404] [ip4][..udp] [......10.0.2.15][28681] -> [.86.234.216.251][17845] + update: [...441] [ip4][..udp] [......10.0.2.15][28681] -> [.36.237.199.108][56040] + update: [...331] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][26851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...450] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][23458] + update: [...426] [ip4][..udp] [......10.0.2.15][28681] -> [..219.71.44.121][14398] + update: [...411] [ip4][..udp] [......10.0.2.15][28681] -> [...89.143.28.64][.6346] + update: [...408] [ip4][..udp] [......10.0.2.15][28681] -> [...90.103.2.245][.6346] + update: [...424] [ip4][..udp] [......10.0.2.15][28681] -> [..93.15.216.216][.6346] + update: [...479] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.13.148][51896] + update: [...422] [ip4][..udp] [......10.0.2.15][28681] -> [..88.123.35.219][42211] + update: [...439] [ip4][..udp] [......10.0.2.15][28681] -> [..176.135.15.86][.6346] + update: [...474] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][45880] + update: [...477] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45640] + update: [...444] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][.9010] + update: [...478] [ip4][..udp] [......10.0.2.15][28681] -> [...36.235.85.44][64914] + update: [...449] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][.8826] + update: [...461] [ip4][..udp] [......10.0.2.15][28681] -> [..69.27.193.124][50555] + update: [...332] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...472] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45744] + update: [...471] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][43457] + update: [...481] [ip4][..udp] [......10.0.2.15][28681] -> [..82.120.219.74][.6346] + update: [...476] [ip4][..udp] [......10.0.2.15][28681] -> [..98.18.172.208][63172] + update: [...435] [ip4][..udp] [......10.0.2.15][28681] -> [.109.24.146.101][.6346] + update: [...465] [ip4][..udp] [......10.0.2.15][28681] -> [.....2.28.39.18][15672] + update: [...421] [ip4][..udp] [......10.0.2.15][28681] -> [..175.182.39.11][12977] + update: [...416] [ip4][..udp] [......10.0.2.15][28681] -> [..92.139.61.103][24096] + update: [...443] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][54754] + update: [...413] [ip4][..udp] [......10.0.2.15][28681] -> [...87.65.188.29][24676] + update: [...412] [ip4][..udp] [......10.0.2.15][28681] -> [...58.177.52.73][.6346] + update: [...418] [ip4][..udp] [......10.0.2.15][28681] -> [.75.129.149.103][.6346] + update: [...468] [ip4][..udp] [......10.0.2.15][28681] -> [..94.214.12.247][44001] + update: [...466] [ip4][..udp] [......10.0.2.15][28681] -> [...70.119.248.5][49929] + update: [...446] [ip4][..udp] [......10.0.2.15][28681] -> [..61.70.199.107][60475] + update: [...470] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][46790] + update: [...447] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][23458] + update: [...451] [ip4][..udp] [......10.0.2.15][28681] -> [...218.35.66.21][22234] + update: [...456] [ip4][..udp] [......10.0.2.15][28681] -> [.89.241.112.255][14766] + update: [...428] [ip4][..udp] [......10.0.2.15][28681] -> [....86.162.97.8][.6346] + update: [...455] [ip4][..udp] [......10.0.2.15][28681] -> [.58.153.206.183][16919] + update: [...453] [ip4][..udp] [......10.0.2.15][28681] -> [..74.127.26.138][.3083] + update: [...425] [ip4][..udp] [......10.0.2.15][28681] -> [..145.82.53.165][.6346] + update: [...460] [ip4][..udp] [......10.0.2.15][28681] -> [.210.194.116.78][.8342] + update: [...454] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][23183] + update: [...401] [ip4][..udp] [......10.0.2.15][28681] -> [.173.178.192.76][.6346] + update: [...484] [ip4][..udp] [......10.0.2.15][28681] -> [...107.4.56.177][10000] + update: [...406] [ip4][..udp] [......10.0.2.15][28681] -> [....109.27.3.68][57380] + update: [...321] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][21995] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...469] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][47184] + update: [...467] [ip4][..udp] [......10.0.2.15][28681] -> [...61.64.177.53][23458] + update: [...431] [ip4][..udp] [......10.0.2.15][28681] -> [..88.124.71.246][49035] + update: [...483] [ip4][..udp] [.......10.0.2.2][.1026] -> [......10.0.2.15][28681] + update: [...402] [ip4][..udp] [......10.0.2.15][28681] -> [...78.219.202.2][.6346] + update: [...420] [ip4][..udp] [......10.0.2.15][28681] -> [..86.227.127.34][.6346] + update: [...417] [ip4][..udp] [......10.0.2.15][28681] -> [.94.187.236.179][.6346] + update: [...485] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.209][.6346] + update: [...427] [ip4][..udp] [......10.0.2.15][28681] -> [...81.249.13.30][15138] + update: [...405] [ip4][..udp] [......10.0.2.15][28681] -> [.176.155.31.118][.6346] + update: [...746] [ip4][.icmp] [..164.132.10.25] -> [......10.0.2.15] [ICMP][Network][Acceptable] + update: [...319] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][55302] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...415] [ip4][..udp] [......10.0.2.15][28681] -> [..90.247.160.96][17817] + update: [...458] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.228.167][12201] + update: [...486] [ip4][..udp] [......10.0.2.15][28681] -> [...88.68.45.203][.6346] + update: [...410] [ip4][..udp] [......10.0.2.15][28681] -> [..93.28.130.131][.6346] + update: [...423] [ip4][..udp] [......10.0.2.15][28681] -> [..119.247.6.226][.9713] + update: [...438] [ip4][..udp] [......10.0.2.15][28681] -> [..71.86.190.163][14142] + update: [...403] [ip4][..udp] [......10.0.2.15][28681] -> [197.244.171.132][.6346] + update: [...457] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.240.113][13867] + update: [...429] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.215.213][23576] + update: [...436] [ip4][..udp] [......10.0.2.15][28681] -> [.219.68.179.137][.6406] + update: [...414] [ip4][..udp] [......10.0.2.15][28681] -> [175.181.156.244][.8255] + update: [...409] [ip4][..udp] [......10.0.2.15][28681] -> [...86.194.53.68][33770] + update: [...482] [ip4][..udp] [......10.0.2.15][28681] -> [..86.193.23.172][42227] + update: [...400] [ip4][..udp] [......10.0.2.15][28681] -> [..129.45.47.167][.6346] + update: [...407] [ip4][..udp] [......10.0.2.15][28681] -> [195.181.151.217][.6346] + update: [...463] [ip4][..udp] [......10.0.2.15][28681] -> [..200.7.155.210][28365] + update: [...452] [ip4][..udp] [......10.0.2.15][28681] -> [..68.227.193.37][27481] + update: [...440] [ip4][..udp] [......10.0.2.15][28681] -> [203.165.170.112][37087] + update: [...448] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][15677] + update: [...459] [ip4][..udp] [......10.0.2.15][28681] -> [...100.89.84.59][11603] + update: [...437] [ip4][..udp] [......10.0.2.15][28681] -> [....31.38.163.2][.6346] + update: [...445] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.153.100][.4509] + update: [...419] [ip4][..udp] [......10.0.2.15][28681] -> [...78.193.236.8][46557] + update: [...432] [ip4][..udp] [......10.0.2.15][28681] -> [...104.6.118.53][.6346] + update: [...464] [ip4][..udp] [......10.0.2.15][28681] -> [...101.128.66.8][34512] + update: [...480] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.74.26][65498] + update: [...434] [ip4][..udp] [......10.0.2.15][28681] -> [.114.24.182.130][22232] + update: [...462] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][47808] + update: [...430] [ip4][..udp] [......10.0.2.15][28681] -> [....90.8.95.165][40763] + update: [...475] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][63978] + update: [...473] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][33564] + update: [...442] [ip4][..udp] [......10.0.2.15][28681] -> [..89.204.130.55][29545] + new: [...754] [ip4][..udp] [......10.0.2.15][28681] -> [..84.125.218.84][17561] + idle: [...247] [ip4][..udp] [......10.0.2.15][28681] -> [..181.84.178.16][60262] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...366] [ip4][..udp] [......10.0.2.15][28681] -> [....94.8.55.158][51140] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...309] [ip4][..udp] [......10.0.2.15][28681] -> [.47.220.186.140][27641] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...365] [ip4][..udp] [......10.0.2.15][28681] -> [..188.23.24.213][18561] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...310] [ip4][..udp] [......10.0.2.15][28681] -> [.118.240.69.199][.6348] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...242] [ip4][..udp] [......10.0.2.15][28681] -> [..75.133.101.93][52367] [Unknown][Unrated] + idle: [...242] [ip4][..udp] [......10.0.2.15][28681] -> [..75.133.101.93][52367] + idle: [...308] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][40137] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...368] [ip4][..udp] [......10.0.2.15][28681] -> [...47.147.52.21][36728] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...363] [ip4][..udp] [......10.0.2.15][28681] -> [...81.205.91.45][38297] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...362] [ip4][..udp] [......10.0.2.15][28681] -> [190.192.210.182][.6754] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...356] [ip4][..udp] [......10.0.2.15][28681] -> [.63.228.175.169][.1936] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...301] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][11852] [Unknown][Unrated] + idle: [...301] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][11852] + not-detected: [...243] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] [Unknown][Unrated] + idle: [...243] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] + idle: [...360] [ip4][..udp] [......10.0.2.15][28681] -> [..198.58.218.12][47912] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...263] [ip4][..udp] [......10.0.2.15][28681] -> [..82.217.176.52][.7446] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...264] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][11603] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...751] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] + update: [...335] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + update: [...749] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] + update: [...488] [ip4][..udp] [......10.0.2.15][28681] -> [.183.179.90.112][.9852] + update: [...752] [ip4][..udp] [......10.0.2.15][28681] -> [142.115.218.152][.5900] + update: [...490] [ip4][..udp] [......10.0.2.15][28681] -> [...90.3.215.132][20356] + update: [...750] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] + update: [...753] [ip4][..udp] [......10.0.2.15][28681] -> [..165.84.140.96][14400] + update: [...489] [ip4][..udp] [......10.0.2.15][28681] -> [...108.44.45.25][.6346] + update: [...487] [ip4][..udp] [......10.0.2.15][28681] -> [..24.78.134.188][49046] + update: [...491] [ip4][..udp] [......10.0.2.15][28681] -> [..36.233.42.210][.5512] + update: [...492] [ip4][..udp] [......10.0.2.15][28681] -> [...172.94.41.71][.6346] + new: [...755] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] + new: [...756] [ip4][..udp] [......10.0.2.15][28681] -> [..41.100.68.255][12838] + idle: [....20] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + not-detected: [...136] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][16047] [Unknown][Unrated] + idle: [...136] [ip4][..udp] [......10.0.2.15][28681] -> [.80.236.247.120][16047] + not-detected: [...173] [ip4][..udp] [......10.0.2.15][28681] -> [..121.99.222.36][44988] [Unknown][Unrated] + idle: [...173] [ip4][..udp] [......10.0.2.15][28681] -> [..121.99.222.36][44988] + update: [...361] [ip4][..udp] [......10.0.2.15][28681] -> [..86.129.196.84][.9915] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] + update: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] + update: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] + update: [....88] [ip4][..udp] [......10.0.2.15][28681] -> [.....81.50.24.2][17874] + update: [...340] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49732] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] + update: [...344] [ip4][..udp] [......10.0.2.15][28681] -> [.207.38.163.228][.6778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] + update: [....98] [ip4][..udp] [......10.0.2.15][28681] -> [.203.222.14.170][23332] + update: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] + update: [...336] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][.6888] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] + update: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] + update: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] + update: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] + update: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] + update: [...342] [ip4][..udp] [......10.0.2.15][28681] -> [..98.208.26.154][.4994] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...369] [ip4][..udp] [......10.0.2.15][28681] -> [.89.187.171.240][.6346] + update: [...125] [ip4][..udp] [......10.0.2.15][28681] -> [..83.92.178.182][57302] + update: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] + update: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] + update: [...124] [ip4][..udp] [......10.0.2.15][28681] -> [...170.254.19.6][24180] + update: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] + update: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] + update: [...364] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][10825] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] + update: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] + update: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] + update: [...108] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][.7922] + update: [...339] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][54130] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...113] [ip4][..udp] [......10.0.2.15][28681] -> [105.101.132.146][57746] + update: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] + update: [...367] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][49956] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] + update: [...577] [ip4][..udp] [......10.0.2.15][28681] -> [.59.148.100.237][23459] + update: [...586] [ip4][..udp] [......10.0.2.15][28681] -> [..221.124.66.33][13060] + update: [...619] [ip4][..udp] [......10.0.2.15][28681] -> [...1.172.184.48][13281] + update: [...544] [ip4][..udp] [......10.0.2.15][28681] -> [..111.184.29.35][30582] + update: [...526] [ip4][..udp] [......10.0.2.15][28681] -> [..36.234.197.93][.1483] + update: [...509] [ip4][..udp] [......10.0.2.15][28681] -> [.92.142.109.190][41370] + update: [...670] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2846] + update: [...610] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][59016] + update: [...691] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][50637] + update: [...701] [ip4][..udp] [......10.0.2.15][28681] -> [...91.206.27.26][.6578] + update: [...511] [ip4][..udp] [......10.0.2.15][28681] -> [...68.47.223.27][.6346] + update: [...496] [ip4][..udp] [......10.0.2.15][28681] -> [.218.173.230.98][19004] + update: [...533] [ip4][..udp] [......10.0.2.15][28681] -> [..36.229.185.60][.6898] + update: [...592] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][.7190] + update: [...702] [ip4][..udp] [......10.0.2.15][28681] -> [119.237.190.184][64163] + update: [...495] [ip4][..udp] [......10.0.2.15][28681] -> [...81.247.89.20][.6346] + update: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] + update: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] + update: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] + update: [...493] [ip4][..udp] [......10.0.2.15][57552] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...603] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][64577] + update: [...622] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3227] + update: [...647] [ip4][..udp] [......10.0.2.15][28681] -> [..36.237.10.152][21293] + update: [...741] [ip4][..udp] [......10.0.2.15][28681] -> [...36.237.25.47][21293] + update: [...516] [ip4][..udp] [......10.0.2.15][28681] -> [.119.246.147.72][.4572] + update: [...734] [ip4][..udp] [......10.0.2.15][28681] -> [...99.199.148.6][.4338] + update: [...597] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52274] + update: [...676] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][62191] + update: [...739] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3256] + update: [...553] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3259] + update: [...629] [ip4][..udp] [......10.0.2.15][28681] -> [....45.65.87.24][16201] + update: [...352] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.6346] + update: [...195] [ip4][..udp] [......10.0.2.15][28681] -> [.177.231.151.16][.6346] + update: [...617] [ip4][..udp] [......10.0.2.15][28681] -> [220.208.167.152][30628] + update: [...596] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][58954] + update: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] + update: [...714] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51379] + update: [...593] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][.9747] + update: [...571] [ip4][..udp] [......10.0.2.15][28681] -> [.114.40.163.123][55341] + update: [...524] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][65362] + update: [...643] [ip4][..udp] [......10.0.2.15][28681] -> [.220.39.142.122][.6346] + update: [...572] [ip4][..udp] [......10.0.2.15][28681] -> [...86.153.21.93][36696] + update: [...650] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][56128] + update: [...520] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3339] + update: [...636] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.48.23][.2556] + update: [...637] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][53143] + update: [...638] [ip4][..udp] [......10.0.2.15][28681] -> [..36.233.194.73][.1995] + update: [...546] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49867] + update: [...677] [ip4][..udp] [......10.0.2.15][28681] -> [...1.64.208.110][55550] + update: [...723] [ip4][..udp] [......10.0.2.15][28681] -> [.213.32.245.121][12333] + update: [...531] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51497] + update: [...578] [ip4][..udp] [......10.0.2.15][28681] -> [..77.205.243.44][46006] + update: [...738] [ip4][..udp] [......10.0.2.15][28681] -> [174.115.127.251][23897] + update: [...584] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][18360] + update: [...534] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54436] + update: [...708] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][64871] + update: [...745] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][48250] + update: [...501] [ip4][..udp] [......10.0.2.15][28681] -> [.88.160.214.137][.6346] + update: [...684] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54459] + update: [...506] [ip4][..udp] [......10.0.2.15][28681] -> [..136.32.84.139][.6346] + update: [...562] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][59879] + update: [...620] [ip4][..udp] [......10.0.2.15][28681] -> [...1.163.14.246][.1630] + update: [...606] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][56070] + update: [...692] [ip4][..udp] [......10.0.2.15][28681] -> [..61.93.150.146][62507] + update: [...621] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53516] + update: [...668] [ip4][..udp] [......10.0.2.15][28681] -> [.223.18.211.177][18085] + update: [...721] [ip4][..udp] [......10.0.2.15][28681] -> [..76.26.178.132][10053] + update: [...698] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][53906] + update: [...623] [ip4][..udp] [......10.0.2.15][28681] -> [..36.234.18.166][61319] + update: [...542] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51675] + update: [...715] [ip4][..udp] [......10.0.2.15][28681] -> [..76.174.174.69][21358] + update: [...191] [ip4][..udp] [......10.0.2.15][28681] -> [.190.153.143.54][65535] + update: [...615] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][60482] + update: [...607] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][42288] + update: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] + update: [...740] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][19814] + update: [...587] [ip4][..udp] [......10.0.2.15][28681] -> [.94.134.154.158][54130] + update: [...550] [ip4][..udp] [......10.0.2.15][28681] -> [.220.238.145.82][33527] + update: [...689] [ip4][..udp] [......10.0.2.15][28681] -> [.114.36.234.196][11629] + update: [...671] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52669] + update: [...598] [ip4][..udp] [......10.0.2.15][28681] -> [...1.172.184.48][.1512] + update: [...551] [ip4][..udp] [......10.0.2.15][28681] -> [..92.24.129.230][14766] + update: [...686] [ip4][..udp] [......10.0.2.15][28681] -> [..111.241.31.96][.8349] + update: [...555] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][20387] + update: [...722] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][.9897] + update: [...371] [ip4][..udp] [......10.0.2.15][28681] -> [.109.131.202.24][44748] + update: [...632] [ip4][..udp] [......10.0.2.15][28681] -> [..36.231.59.187][62234] + update: [...591] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53707] + update: [...594] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7375] + update: [...614] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.152.218][51920] + update: [...618] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7380] + update: [...508] [ip4][..udp] [......10.0.2.15][28681] -> [...92.144.99.73][10745] + update: [...582] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][10624] + update: [...573] [ip4][..udp] [......10.0.2.15][28681] -> [..71.239.173.18][23327] + update: [...513] [ip4][..udp] [......10.0.2.15][28681] -> [..78.196.216.12][58910] + update: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] + update: [...568] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][56562] + update: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] + update: [...538] [ip4][..udp] [......10.0.2.15][28681] -> [.124.218.41.253][14339] + update: [...624] [ip4][..udp] [......10.0.2.15][28681] -> [.210.209.249.84][24751] + update: [...630] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][45710] + update: [...693] [ip4][..udp] [......10.0.2.15][28681] -> [.76.110.153.177][40022] + update: [...604] [ip4][..udp] [......10.0.2.15][28681] -> [.123.202.31.113][53291] + update: [...719] [ip4][..udp] [......10.0.2.15][28681] -> [218.102.208.175][.9167] + update: [...536] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.222.160][56121] + update: [...558] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6466] + update: [...556] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49787] + update: [...600] [ip4][..udp] [......10.0.2.15][28681] -> [....1.64.156.63][60092] + update: [...646] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49803] + update: [...662] [ip4][..udp] [......10.0.2.15][28681] -> [...24.127.1.235][37814] + update: [...499] [ip4][..udp] [......10.0.2.15][28681] -> [....1.161.80.82][.8656] + update: [...627] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49815] + update: [...704] [ip4][..udp] [......10.0.2.15][28681] -> [..114.40.67.191][14971] + update: [...560] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53883] + update: [...657] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54914] + update: [...728] [ip4][..udp] [......10.0.2.15][28681] -> [101.136.187.253][10914] + update: [...521] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][23458] + update: [...503] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + update: [...505] [ip4][..udp] [......10.0.2.15][28681] -> [.....42.2.62.28][.6387] + update: [...494] [ip4][..udp] [......10.0.2.15][28681] -> [...86.210.81.59][.6346] + update: [...370] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.56.198][11984] + update: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] + update: [...498] [ip4][..udp] [......10.0.2.15][28681] -> [...8.44.149.207][30551] + update: [...705] [ip4][..udp] [......10.0.2.15][28681] -> [..123.192.83.59][33513] + update: [...642] [ip4][..udp] [......10.0.2.15][28681] -> [.36.233.199.103][.2625] + update: [...718] [ip4][..udp] [......10.0.2.15][28681] -> [...79.191.58.38][48157] + update: [...743] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][36780] + update: [...675] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.1.236][.9369] + update: [...673] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][.4765] + update: [...682] [ip4][..udp] [......10.0.2.15][28681] -> [..61.220.41.241][53072] + update: [...641] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][65430] + update: [...559] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][55080] + update: [...683] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][50896] + update: [...680] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.83.132][57131] + update: [...695] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6514] + update: [...666] [ip4][..udp] [......10.0.2.15][28681] -> [..82.36.106.134][.3927] + update: [...661] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6527] + update: [...529] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][57929] + update: [...616] [ip4][..udp] [......10.0.2.15][28681] -> [.74.195.236.249][18557] + update: [...539] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.7510] + update: [...717] [ip4][..udp] [......10.0.2.15][28681] -> [...98.249.190.8][25198] + update: [...732] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6564] + update: [...545] [ip4][..udp] [......10.0.2.15][28681] -> [..116.49.159.77][55915] + update: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] + update: [...374] [ip4][..udp] [......10.0.2.15][28681] -> [....62.35.190.5][18604] + update: [...736] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][52420] + update: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] + update: [...664] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6594] + update: [...635] [ip4][..udp] [......10.0.2.15][28681] -> [..24.179.18.242][47329] + update: [...527] [ip4][..udp] [......10.0.2.15][28681] -> [..42.72.149.140][37848] + update: [...644] [ip4][..udp] [......10.0.2.15][28681] -> [..31.20.248.147][30706] + update: [...712] [ip4][..udp] [......10.0.2.15][28681] -> [..220.129.86.65][49723] + update: [...504] [ip4][..udp] [......10.0.2.15][28681] -> [..85.203.45.107][.6346] + update: [...563] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6831] + update: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] + update: [...640] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7849] + update: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] + update: [...372] [ip4][..udp] [......10.0.2.15][28681] -> [.91.179.185.126][.6346] + update: [...730] [ip4][..udp] [......10.0.2.15][28681] -> [..114.47.227.91][54463] + update: [...733] [ip4][..udp] [......10.0.2.15][28681] -> [..85.168.34.105][39908] + update: [...634] [ip4][..udp] [......10.0.2.15][28681] -> [..68.174.18.115][50679] + update: [...608] [ip4][..udp] [......10.0.2.15][28681] -> [..111.241.31.96][.4814] + update: [...706] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][.8658] + update: [...699] [ip4][..udp] [......10.0.2.15][28681] -> [..70.81.219.111][19210] + update: [...595] [ip4][..udp] [......10.0.2.15][28681] -> [.175.182.21.156][13732] + update: [...724] [ip4][..udp] [......10.0.2.15][28681] -> [.175.39.219.223][13482] + update: [...674] [ip4][..udp] [......10.0.2.15][28681] -> [.125.59.215.249][14571] + update: [...612] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][59384] + update: [...725] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][.9070] + update: [...645] [ip4][..udp] [......10.0.2.15][28681] -> [...173.22.22.94][34245] + update: [...667] [ip4][..udp] [......10.0.2.15][28681] -> [.159.196.95.223][.2003] + update: [...649] [ip4][..udp] [......10.0.2.15][28681] -> [180.218.135.222][.4548] + update: [...159] [ip4][..udp] [......10.0.2.15][28681] -> [176.163.231.160][.6346] + update: [...579] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.170.108][23458] + update: [...678] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][.9128] + update: [...707] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.1968] + update: [...746] [ip4][.icmp] [..164.132.10.25] -> [......10.0.2.15] [ICMP][Network][Acceptable] + update: [...554] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][55577] + update: [...655] [ip4][..udp] [......10.0.2.15][28681] -> [.84.118.116.198][44616] + update: [...726] [ip4][..udp] [......10.0.2.15][28681] -> [..219.91.30.216][61635] + update: [...669] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][64731] + update: [...528] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][58442] + update: [...742] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.4364] + update: [...697] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][55050] + update: [...537] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2034] + update: [...213] [ip4][..udp] [......10.0.2.15][28681] -> [....5.180.62.37][.6346] + update: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] + update: [...585] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][35004] + update: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] + update: [...502] [ip4][..udp] [......10.0.2.15][28681] -> [..47.156.58.211][.6346] + update: [...507] [ip4][..udp] [......10.0.2.15][28681] -> [...50.4.204.220][.6346] + update: [...687] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][13965] + update: [...663] [ip4][..udp] [......10.0.2.15][28681] -> [..96.59.117.166][33192] + update: [...535] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10655] + update: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] + update: [...602] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][53658] + update: [...589] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][52647] + update: [...654] [ip4][..udp] [......10.0.2.15][28681] -> [....82.12.1.136][.6348] + update: [...525] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][52660] + update: [...611] [ip4][..udp] [......10.0.2.15][28681] -> [..61.10.174.159][.4841] + update: [...532] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10677] + update: [...696] [ip4][..udp] [......10.0.2.15][28681] -> [..76.189.72.230][.8161] + update: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] + update: [...512] [ip4][..udp] [......10.0.2.15][28681] -> [..209.204.207.5][49256] + update: [...735] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.91.201][.4297] + update: [...628] [ip4][..udp] [......10.0.2.15][28681] -> [..73.62.225.181][46843] + update: [...552] [ip4][..udp] [......10.0.2.15][28681] -> [...218.250.6.59][60012] + update: [...651] [ip4][..udp] [......10.0.2.15][28681] -> [..114.47.227.91][58856] + update: [...703] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10728] + update: [...581] [ip4][..udp] [......10.0.2.15][28681] -> [..58.115.108.10][.4641] + update: [...613] [ip4][..udp] [......10.0.2.15][28681] -> [.106.104.88.139][.7423] + update: [...583] [ip4][..udp] [......10.0.2.15][28681] -> [...87.75.180.80][35361] + update: [...672] [ip4][..udp] [......10.0.2.15][28681] -> [180.218.135.222][49867] + update: [...574] [ip4][..udp] [......10.0.2.15][28681] -> [..223.17.132.18][23458] + update: [...679] [ip4][..udp] [......10.0.2.15][28681] -> [150.116.225.105][51438] + update: [...518] [ip4][..udp] [......10.0.2.15][28681] -> [..202.151.63.59][.7624] + update: [...716] [ip4][..udp] [......10.0.2.15][28681] -> [...219.71.72.88][58808] + update: [...660] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10791] + update: [...543] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.159.60][56896] + update: [...161] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] + update: [...564] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53144] + update: [...557] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53163] + update: [...648] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][58290] + update: [...700] [ip4][..udp] [......10.0.2.15][28681] -> [..77.222.213.44][26536] + update: [...652] [ip4][..udp] [......10.0.2.15][28681] -> [....1.64.156.63][65023] + update: [...659] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.8075] + update: [...713] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][59978] + update: [...658] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53195] + update: [...576] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][42925] + update: [...570] [ip4][..udp] [......10.0.2.15][28681] -> [..97.83.183.148][.8890] + update: [...681] [ip4][..udp] [......10.0.2.15][28681] -> [.61.227.198.100][.6910] + update: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] + update: [...500] [ip4][..udp] [......10.0.2.15][28681] -> [.220.143.34.225][20071] + update: [...566] [ip4][..udp] [......10.0.2.15][28681] -> [...58.176.62.40][52755] + update: [...514] [ip4][..udp] [......10.0.2.15][28681] -> [..83.114.40.175][23552] + update: [...599] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][59875] + update: [...517] [ip4][..udp] [......10.0.2.15][28681] -> [..36.239.162.27][.7986] + update: [...519] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.48.23][.8070] + update: [...601] [ip4][..udp] [......10.0.2.15][28681] -> [113.255.200.161][65274] + update: [...200] [ip4][..udp] [......10.0.2.15][28681] -> [.138.199.16.123][52993] + update: [...639] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.242.225][15068] + update: [...727] [ip4][..udp] [......10.0.2.15][28681] -> [....1.171.82.65][50072] + update: [...609] [ip4][..udp] [......10.0.2.15][28681] -> [...1.163.14.246][23461] + update: [...737] [ip4][..udp] [......10.0.2.15][28681] -> [118.166.252.163][14391] + update: [...549] [ip4][..udp] [......10.0.2.15][28681] -> [..84.211.151.48][11105] + update: [...561] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57466] + update: [...626] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][49737] + update: [...580] [ip4][..udp] [......10.0.2.15][28681] -> [...76.119.55.28][20347] + update: [...625] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57492] + update: [...567] [ip4][..udp] [......10.0.2.15][28681] -> [...58.176.62.40][52889] + update: [...685] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][54436] + update: [...744] [ip4][..udp] [......10.0.2.15][28681] -> [...27.94.154.53][.6346] + update: [...541] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][11141] + update: [...731] [ip4][..udp] [......10.0.2.15][28681] -> [124.217.188.105][62849] + update: [...711] [ip4][..udp] [......10.0.2.15][28681] -> [113.254.140.225][63637] + update: [...710] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][.3624] + update: [...547] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][43316] + update: [...688] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][53454] + update: [...510] [ip4][..udp] [......10.0.2.15][28681] -> [...79.94.85.113][.6346] + update: [...653] [ip4][..udp] [......10.0.2.15][28681] -> [..94.139.21.182][50110] + update: [...530] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.248.220][59304] + update: [...497] [ip4][..udp] [......10.0.2.15][28681] -> [..84.100.76.123][39628] + update: [...569] [ip4][..udp] [......10.0.2.15][28681] -> [....73.89.249.8][50649] + update: [...373] [ip4][..udp] [......10.0.2.15][28681] -> [..88.122.233.15][11488] + update: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] + update: [...515] [ip4][..udp] [......10.0.2.15][28681] -> [220.137.106.173][11625] + update: [...522] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.152.218][51153] + update: [...590] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][48380] + update: [...605] [ip4][..udp] [......10.0.2.15][28681] -> [180.149.125.139][.6578] + update: [...690] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][.3688] + update: [...665] [ip4][..udp] [......10.0.2.15][28681] -> [..1.172.183.237][.4983] + update: [...709] [ip4][..udp] [......10.0.2.15][28681] -> [..124.244.68.65][51967] + update: [...656] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.2566] + update: [...729] [ip4][..udp] [......10.0.2.15][28681] -> [..112.10.134.44][19739] + update: [...548] [ip4][..udp] [......10.0.2.15][28681] -> [..74.50.147.205][17735] + update: [...633] [ip4][..udp] [......10.0.2.15][28681] -> [...188.149.2.44][20964] + update: [...575] [ip4][..udp] [......10.0.2.15][28681] -> [.123.202.31.113][19768] + update: [...588] [ip4][..udp] [......10.0.2.15][28681] -> [.219.70.175.103][.4315] + update: [...720] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + update: [...540] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52131] + update: [...631] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][.3931] + update: [...565] [ip4][..udp] [......10.0.2.15][28681] -> [...114.45.40.28][.2656] + update: [...523] [ip4][..udp] [......10.0.2.15][28681] -> [..1.162.138.200][24018] + update: [...694] [ip4][..udp] [......10.0.2.15][28681] -> [.98.215.130.156][12405] + update: [...377] [ip4][..udp] [......10.0.2.15][28681] -> [.180.200.236.13][12082] + update: [...394] [ip4][..udp] [......10.0.2.15][28681] -> [.165.84.134.136][21407] + update: [...254] [ip4][..udp] [......10.0.2.15][28681] -> [..88.120.73.215][24562] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...398] [ip4][..udp] [......10.0.2.15][28681] -> [.62.102.148.166][31332] + update: [...381] [ip4][..udp] [......10.0.2.15][28681] -> [...77.58.211.52][.3806] + update: [...386] [ip4][..udp] [......10.0.2.15][28681] -> [...85.172.10.90][40162] + update: [...306] [ip4][..udp] [......10.0.2.15][28681] -> [..41.249.63.200][22582] + update: [...392] [ip4][..udp] [......10.0.2.15][28681] -> [....42.0.69.215][12608] + update: [...265] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][.1194] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...304] [ip4][..udp] [......10.0.2.15][28681] -> [.193.32.126.214][59596] + update: [...389] [ip4][..udp] [......10.0.2.15][28681] -> [..94.215.183.71][31310] + update: [...747] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + update: [...260] [ip4][..udp] [......10.0.2.15][28681] -> [.46.128.114.107][.6578] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...259] [ip4][..udp] [......10.0.2.15][28681] -> [103.232.107.100][43508] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...385] [ip4][..udp] [......10.0.2.15][28681] -> [..66.223.143.31][47978] + update: [...250] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][26253] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...384] [ip4][..udp] [......10.0.2.15][28681] -> [....75.64.6.175][.4743] + update: [...378] [ip4][..udp] [......10.0.2.15][28681] -> [.118.241.204.61][43366] + update: [...375] [ip4][..udp] [......10.0.2.15][28681] -> [..73.182.136.42][27873] + update: [...257] [ip4][..udp] [......10.0.2.15][28681] -> [.82.181.251.218][36368] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...399] [ip4][..udp] [......10.0.2.15][28681] -> [.175.39.219.223][31728] + update: [...388] [ip4][..udp] [......10.0.2.15][28681] -> [...121.7.145.36][33905] + update: [...303] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][30566] + update: [...246] [ip4][..udp] [......10.0.2.15][28681] -> [...96.65.68.194][35481] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...748] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6599] + update: [...395] [ip4][..udp] [......10.0.2.15][28681] -> [..191.114.88.39][18751] + update: [...317] [ip4][..udp] [......10.0.2.15][28681] -> [...96.236.205.7][34794] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...376] [ip4][..udp] [......10.0.2.15][28681] -> [....156.57.42.2][33476] + update: [...261] [ip4][..udp] [......10.0.2.15][28681] -> [..60.241.48.194][21301] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...313] [ip4][..udp] [......10.0.2.15][28681] -> [..176.99.176.20][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...387] [ip4][..udp] [......10.0.2.15][28681] -> [....220.135.8.7][.1219] + update: [...302] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][53489] + update: [...255] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][30577] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...248] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][12012] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...380] [ip4][..udp] [......10.0.2.15][28681] -> [...83.86.49.195][12019] + update: [...383] [ip4][..udp] [......10.0.2.15][28681] -> [...84.71.243.60][34498] + update: [...253] [ip4][..udp] [......10.0.2.15][28681] -> [.193.37.255.130][61616] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...390] [ip4][..udp] [......10.0.2.15][28681] -> [144.134.132.206][16401] + update: [...391] [ip4][..udp] [......10.0.2.15][28681] -> [...161.81.38.67][.9539] + update: [...316] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][63637] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...262] [ip4][..udp] [......10.0.2.15][28681] -> [....89.75.52.19][46010] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...393] [ip4][..udp] [......10.0.2.15][28681] -> [.58.115.158.103][.5110] + update: [...382] [ip4][..udp] [......10.0.2.15][28681] -> [..76.175.11.126][40958] + update: [...397] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][24634] + update: [...379] [ip4][..udp] [......10.0.2.15][28681] -> [..80.140.63.147][29545] + update: [...396] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.59.24][28755] + update: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...757] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] + detected: [...757] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...758] [ip4][..udp] [......10.0.2.15][50213] -> [239.255.255.250][.1900] + detected: [...758] [ip4][..udp] [......10.0.2.15][50213] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [...759] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] + detected: [...759] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...369] [ip4][..udp] [......10.0.2.15][28681] -> [.89.187.171.240][.6346] [Unknown][Unrated] + idle: [...369] [ip4][..udp] [......10.0.2.15][28681] -> [.89.187.171.240][.6346] + update: [...433] [ip4][..udp] [......10.0.2.15][28681] -> [.99.255.145.191][47264] + update: [...404] [ip4][..udp] [......10.0.2.15][28681] -> [.86.234.216.251][17845] + update: [...441] [ip4][..udp] [......10.0.2.15][28681] -> [.36.237.199.108][56040] + update: [...331] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][26851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...450] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][23458] + update: [...426] [ip4][..udp] [......10.0.2.15][28681] -> [..219.71.44.121][14398] + update: [...411] [ip4][..udp] [......10.0.2.15][28681] -> [...89.143.28.64][.6346] + update: [...408] [ip4][..udp] [......10.0.2.15][28681] -> [...90.103.2.245][.6346] + update: [...424] [ip4][..udp] [......10.0.2.15][28681] -> [..93.15.216.216][.6346] + update: [...479] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.13.148][51896] + update: [...422] [ip4][..udp] [......10.0.2.15][28681] -> [..88.123.35.219][42211] + update: [...439] [ip4][..udp] [......10.0.2.15][28681] -> [..176.135.15.86][.6346] + update: [...474] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][45880] + update: [...477] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45640] + update: [...444] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][.9010] + update: [...478] [ip4][..udp] [......10.0.2.15][28681] -> [...36.235.85.44][64914] + update: [...449] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][.8826] + update: [...461] [ip4][..udp] [......10.0.2.15][28681] -> [..69.27.193.124][50555] + update: [...332] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...472] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45744] + update: [...471] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][43457] + update: [...481] [ip4][..udp] [......10.0.2.15][28681] -> [..82.120.219.74][.6346] + update: [...476] [ip4][..udp] [......10.0.2.15][28681] -> [..98.18.172.208][63172] + update: [...435] [ip4][..udp] [......10.0.2.15][28681] -> [.109.24.146.101][.6346] + update: [...465] [ip4][..udp] [......10.0.2.15][28681] -> [.....2.28.39.18][15672] + update: [...421] [ip4][..udp] [......10.0.2.15][28681] -> [..175.182.39.11][12977] + update: [...416] [ip4][..udp] [......10.0.2.15][28681] -> [..92.139.61.103][24096] + update: [...443] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][54754] + update: [...413] [ip4][..udp] [......10.0.2.15][28681] -> [...87.65.188.29][24676] + update: [...754] [ip4][..udp] [......10.0.2.15][28681] -> [..84.125.218.84][17561] + update: [...412] [ip4][..udp] [......10.0.2.15][28681] -> [...58.177.52.73][.6346] + update: [...418] [ip4][..udp] [......10.0.2.15][28681] -> [.75.129.149.103][.6346] + update: [...468] [ip4][..udp] [......10.0.2.15][28681] -> [..94.214.12.247][44001] + update: [...466] [ip4][..udp] [......10.0.2.15][28681] -> [...70.119.248.5][49929] + update: [...446] [ip4][..udp] [......10.0.2.15][28681] -> [..61.70.199.107][60475] + update: [...470] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][46790] + update: [...447] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][23458] + update: [...451] [ip4][..udp] [......10.0.2.15][28681] -> [...218.35.66.21][22234] + update: [...456] [ip4][..udp] [......10.0.2.15][28681] -> [.89.241.112.255][14766] + update: [...428] [ip4][..udp] [......10.0.2.15][28681] -> [....86.162.97.8][.6346] + update: [...455] [ip4][..udp] [......10.0.2.15][28681] -> [.58.153.206.183][16919] + update: [...453] [ip4][..udp] [......10.0.2.15][28681] -> [..74.127.26.138][.3083] + update: [...425] [ip4][..udp] [......10.0.2.15][28681] -> [..145.82.53.165][.6346] + update: [...460] [ip4][..udp] [......10.0.2.15][28681] -> [.210.194.116.78][.8342] + update: [...454] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][23183] + update: [...401] [ip4][..udp] [......10.0.2.15][28681] -> [.173.178.192.76][.6346] + update: [...484] [ip4][..udp] [......10.0.2.15][28681] -> [...107.4.56.177][10000] + update: [...406] [ip4][..udp] [......10.0.2.15][28681] -> [....109.27.3.68][57380] + update: [...321] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][21995] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...469] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][47184] + update: [...467] [ip4][..udp] [......10.0.2.15][28681] -> [...61.64.177.53][23458] + update: [...431] [ip4][..udp] [......10.0.2.15][28681] -> [..88.124.71.246][49035] + update: [...483] [ip4][..udp] [.......10.0.2.2][.1026] -> [......10.0.2.15][28681] + update: [...402] [ip4][..udp] [......10.0.2.15][28681] -> [...78.219.202.2][.6346] + update: [...420] [ip4][..udp] [......10.0.2.15][28681] -> [..86.227.127.34][.6346] + update: [...417] [ip4][..udp] [......10.0.2.15][28681] -> [.94.187.236.179][.6346] + update: [...485] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.209][.6346] + update: [...427] [ip4][..udp] [......10.0.2.15][28681] -> [...81.249.13.30][15138] + update: [...405] [ip4][..udp] [......10.0.2.15][28681] -> [.176.155.31.118][.6346] + update: [...319] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][55302] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...415] [ip4][..udp] [......10.0.2.15][28681] -> [..90.247.160.96][17817] + update: [...458] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.228.167][12201] + update: [...486] [ip4][..udp] [......10.0.2.15][28681] -> [...88.68.45.203][.6346] + update: [...410] [ip4][..udp] [......10.0.2.15][28681] -> [..93.28.130.131][.6346] + update: [...423] [ip4][..udp] [......10.0.2.15][28681] -> [..119.247.6.226][.9713] + update: [...438] [ip4][..udp] [......10.0.2.15][28681] -> [..71.86.190.163][14142] + update: [...403] [ip4][..udp] [......10.0.2.15][28681] -> [197.244.171.132][.6346] + update: [...457] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.240.113][13867] + update: [...429] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.215.213][23576] + update: [...436] [ip4][..udp] [......10.0.2.15][28681] -> [.219.68.179.137][.6406] + update: [...414] [ip4][..udp] [......10.0.2.15][28681] -> [175.181.156.244][.8255] + update: [...409] [ip4][..udp] [......10.0.2.15][28681] -> [...86.194.53.68][33770] + update: [...482] [ip4][..udp] [......10.0.2.15][28681] -> [..86.193.23.172][42227] + update: [...400] [ip4][..udp] [......10.0.2.15][28681] -> [..129.45.47.167][.6346] + update: [...407] [ip4][..udp] [......10.0.2.15][28681] -> [195.181.151.217][.6346] + update: [...463] [ip4][..udp] [......10.0.2.15][28681] -> [..200.7.155.210][28365] + update: [...452] [ip4][..udp] [......10.0.2.15][28681] -> [..68.227.193.37][27481] + update: [...440] [ip4][..udp] [......10.0.2.15][28681] -> [203.165.170.112][37087] + update: [...448] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][15677] + update: [...459] [ip4][..udp] [......10.0.2.15][28681] -> [...100.89.84.59][11603] + update: [...437] [ip4][..udp] [......10.0.2.15][28681] -> [....31.38.163.2][.6346] + update: [...445] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.153.100][.4509] + update: [...419] [ip4][..udp] [......10.0.2.15][28681] -> [...78.193.236.8][46557] + update: [...432] [ip4][..udp] [......10.0.2.15][28681] -> [...104.6.118.53][.6346] + update: [...464] [ip4][..udp] [......10.0.2.15][28681] -> [...101.128.66.8][34512] + update: [...480] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.74.26][65498] + update: [...434] [ip4][..udp] [......10.0.2.15][28681] -> [.114.24.182.130][22232] + update: [...462] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][47808] + update: [...430] [ip4][..udp] [......10.0.2.15][28681] -> [....90.8.95.165][40763] + update: [...475] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][63978] + update: [...473] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][33564] + update: [...442] [ip4][..udp] [......10.0.2.15][28681] -> [..89.204.130.55][29545] + not-detected: [...371] [ip4][..udp] [......10.0.2.15][28681] -> [.109.131.202.24][44748] [Unknown][Unrated] + idle: [...371] [ip4][..udp] [......10.0.2.15][28681] -> [.109.131.202.24][44748] + not-detected: [...370] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.56.198][11984] [Unknown][Unrated] + idle: [...370] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.56.198][11984] + not-detected: [...374] [ip4][..udp] [......10.0.2.15][28681] -> [....62.35.190.5][18604] [Unknown][Unrated] + idle: [...374] [ip4][..udp] [......10.0.2.15][28681] -> [....62.35.190.5][18604] + not-detected: [...372] [ip4][..udp] [......10.0.2.15][28681] -> [.91.179.185.126][.6346] [Unknown][Unrated] + idle: [...372] [ip4][..udp] [......10.0.2.15][28681] -> [.91.179.185.126][.6346] + idle: [...746] [ip4][.icmp] [..164.132.10.25] -> [......10.0.2.15] [ICMP][Network][Acceptable] + not-detected: [...373] [ip4][..udp] [......10.0.2.15][28681] -> [..88.122.233.15][11488] [Unknown][Unrated] + idle: [...373] [ip4][..udp] [......10.0.2.15][28681] -> [..88.122.233.15][11488] + update: [...751] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] + update: [...335] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + update: [...749] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] + update: [...488] [ip4][..udp] [......10.0.2.15][28681] -> [.183.179.90.112][.9852] + update: [...752] [ip4][..udp] [......10.0.2.15][28681] -> [142.115.218.152][.5900] + update: [...490] [ip4][..udp] [......10.0.2.15][28681] -> [...90.3.215.132][20356] + update: [...750] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] + update: [...753] [ip4][..udp] [......10.0.2.15][28681] -> [..165.84.140.96][14400] + update: [...489] [ip4][..udp] [......10.0.2.15][28681] -> [...108.44.45.25][.6346] + update: [...487] [ip4][..udp] [......10.0.2.15][28681] -> [..24.78.134.188][49046] + update: [...491] [ip4][..udp] [......10.0.2.15][28681] -> [..36.233.42.210][.5512] + update: [...492] [ip4][..udp] [......10.0.2.15][28681] -> [...172.94.41.71][.6346] + not-detected: [...398] [ip4][..udp] [......10.0.2.15][28681] -> [.62.102.148.166][31332] [Unknown][Unrated] + idle: [...398] [ip4][..udp] [......10.0.2.15][28681] -> [.62.102.148.166][31332] + not-detected: [...392] [ip4][..udp] [......10.0.2.15][28681] -> [....42.0.69.215][12608] [Unknown][Unrated] + idle: [...392] [ip4][..udp] [......10.0.2.15][28681] -> [....42.0.69.215][12608] + not-detected: [...389] [ip4][..udp] [......10.0.2.15][28681] -> [..94.215.183.71][31310] [Unknown][Unrated] + idle: [...389] [ip4][..udp] [......10.0.2.15][28681] -> [..94.215.183.71][31310] + not-detected: [...385] [ip4][..udp] [......10.0.2.15][28681] -> [..66.223.143.31][47978] [Unknown][Unrated] + idle: [...385] [ip4][..udp] [......10.0.2.15][28681] -> [..66.223.143.31][47978] + not-detected: [...399] [ip4][..udp] [......10.0.2.15][28681] -> [.175.39.219.223][31728] [Unknown][Unrated] + idle: [...399] [ip4][..udp] [......10.0.2.15][28681] -> [.175.39.219.223][31728] + not-detected: [...395] [ip4][..udp] [......10.0.2.15][28681] -> [..191.114.88.39][18751] [Unknown][Unrated] + idle: [...395] [ip4][..udp] [......10.0.2.15][28681] -> [..191.114.88.39][18751] + not-detected: [...387] [ip4][..udp] [......10.0.2.15][28681] -> [....220.135.8.7][.1219] [Unknown][Unrated] + idle: [...387] [ip4][..udp] [......10.0.2.15][28681] -> [....220.135.8.7][.1219] + not-detected: [...390] [ip4][..udp] [......10.0.2.15][28681] -> [144.134.132.206][16401] [Unknown][Unrated] + idle: [...390] [ip4][..udp] [......10.0.2.15][28681] -> [144.134.132.206][16401] + not-detected: [...391] [ip4][..udp] [......10.0.2.15][28681] -> [...161.81.38.67][.9539] [Unknown][Unrated] + idle: [...391] [ip4][..udp] [......10.0.2.15][28681] -> [...161.81.38.67][.9539] + not-detected: [...397] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][24634] [Unknown][Unrated] + idle: [...397] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][24634] + not-detected: [...396] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.59.24][28755] [Unknown][Unrated] + idle: [...396] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.59.24][28755] + update: [...361] [ip4][..udp] [......10.0.2.15][28681] -> [..86.129.196.84][.9915] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] + update: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] + update: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] + update: [....88] [ip4][..udp] [......10.0.2.15][28681] -> [.....81.50.24.2][17874] + update: [...340] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49732] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] + update: [...344] [ip4][..udp] [......10.0.2.15][28681] -> [.207.38.163.228][.6778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] + update: [....98] [ip4][..udp] [......10.0.2.15][28681] -> [.203.222.14.170][23332] + update: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] + update: [...336] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][.6888] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] + update: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] + update: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] + update: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] + update: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] + update: [...342] [ip4][..udp] [......10.0.2.15][28681] -> [..98.208.26.154][.4994] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...125] [ip4][..udp] [......10.0.2.15][28681] -> [..83.92.178.182][57302] + update: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] + update: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] + update: [...124] [ip4][..udp] [......10.0.2.15][28681] -> [...170.254.19.6][24180] + update: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] + update: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] + update: [...755] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] + update: [...364] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][10825] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] + update: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] + update: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] + update: [...756] [ip4][..udp] [......10.0.2.15][28681] -> [..41.100.68.255][12838] + update: [...108] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][.7922] + update: [...339] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][54130] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...113] [ip4][..udp] [......10.0.2.15][28681] -> [105.101.132.146][57746] + update: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] + update: [...367] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][49956] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] + new: [...760] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] + detected: [...760] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [...761] [ip4][..udp] [......10.0.2.15][28681] -> [..195.132.75.56][56009] + new: [...762] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] + new: [...763] [ip4][..udp] [......10.0.2.15][28681] -> [.85.170.209.214][46210] + new: [...764] [ip4][..udp] [......10.0.2.15][28681] -> [.208.92.106.151][32476] + not-detected: [...433] [ip4][..udp] [......10.0.2.15][28681] -> [.99.255.145.191][47264] [Unknown][Unrated] + idle: [...433] [ip4][..udp] [......10.0.2.15][28681] -> [.99.255.145.191][47264] + not-detected: [...404] [ip4][..udp] [......10.0.2.15][28681] -> [.86.234.216.251][17845] [Unknown][Unrated] + idle: [...404] [ip4][..udp] [......10.0.2.15][28681] -> [.86.234.216.251][17845] + not-detected: [...426] [ip4][..udp] [......10.0.2.15][28681] -> [..219.71.44.121][14398] [Unknown][Unrated] + idle: [...426] [ip4][..udp] [......10.0.2.15][28681] -> [..219.71.44.121][14398] + not-detected: [...411] [ip4][..udp] [......10.0.2.15][28681] -> [...89.143.28.64][.6346] [Unknown][Unrated] + idle: [...411] [ip4][..udp] [......10.0.2.15][28681] -> [...89.143.28.64][.6346] + not-detected: [...408] [ip4][..udp] [......10.0.2.15][28681] -> [...90.103.2.245][.6346] [Unknown][Unrated] + idle: [...408] [ip4][..udp] [......10.0.2.15][28681] -> [...90.103.2.245][.6346] + not-detected: [...424] [ip4][..udp] [......10.0.2.15][28681] -> [..93.15.216.216][.6346] [Unknown][Unrated] + idle: [...424] [ip4][..udp] [......10.0.2.15][28681] -> [..93.15.216.216][.6346] + not-detected: [...422] [ip4][..udp] [......10.0.2.15][28681] -> [..88.123.35.219][42211] [Unknown][Unrated] + idle: [...422] [ip4][..udp] [......10.0.2.15][28681] -> [..88.123.35.219][42211] + not-detected: [...439] [ip4][..udp] [......10.0.2.15][28681] -> [..176.135.15.86][.6346] [Unknown][Unrated] + idle: [...439] [ip4][..udp] [......10.0.2.15][28681] -> [..176.135.15.86][.6346] + not-detected: [...481] [ip4][..udp] [......10.0.2.15][28681] -> [..82.120.219.74][.6346] [Unknown][Unrated] + idle: [...481] [ip4][..udp] [......10.0.2.15][28681] -> [..82.120.219.74][.6346] + not-detected: [...435] [ip4][..udp] [......10.0.2.15][28681] -> [.109.24.146.101][.6346] [Unknown][Unrated] + idle: [...435] [ip4][..udp] [......10.0.2.15][28681] -> [.109.24.146.101][.6346] + not-detected: [...465] [ip4][..udp] [......10.0.2.15][28681] -> [.....2.28.39.18][15672] [Unknown][Unrated] + idle: [...465] [ip4][..udp] [......10.0.2.15][28681] -> [.....2.28.39.18][15672] + not-detected: [...306] [ip4][..udp] [......10.0.2.15][28681] -> [..41.249.63.200][22582] [Unknown][Unrated] + idle: [...306] [ip4][..udp] [......10.0.2.15][28681] -> [..41.249.63.200][22582] + not-detected: [...421] [ip4][..udp] [......10.0.2.15][28681] -> [..175.182.39.11][12977] [Unknown][Unrated] + idle: [...421] [ip4][..udp] [......10.0.2.15][28681] -> [..175.182.39.11][12977] + not-detected: [...416] [ip4][..udp] [......10.0.2.15][28681] -> [..92.139.61.103][24096] [Unknown][Unrated] + idle: [...416] [ip4][..udp] [......10.0.2.15][28681] -> [..92.139.61.103][24096] + not-detected: [...304] [ip4][..udp] [......10.0.2.15][28681] -> [.193.32.126.214][59596] [Unknown][Unrated] + idle: [...304] [ip4][..udp] [......10.0.2.15][28681] -> [.193.32.126.214][59596] + not-detected: [...413] [ip4][..udp] [......10.0.2.15][28681] -> [...87.65.188.29][24676] [Unknown][Unrated] + idle: [...413] [ip4][..udp] [......10.0.2.15][28681] -> [...87.65.188.29][24676] + not-detected: [...412] [ip4][..udp] [......10.0.2.15][28681] -> [...58.177.52.73][.6346] [Unknown][Unrated] + idle: [...412] [ip4][..udp] [......10.0.2.15][28681] -> [...58.177.52.73][.6346] + not-detected: [...418] [ip4][..udp] [......10.0.2.15][28681] -> [.75.129.149.103][.6346] [Unknown][Unrated] + idle: [...418] [ip4][..udp] [......10.0.2.15][28681] -> [.75.129.149.103][.6346] + not-detected: [...468] [ip4][..udp] [......10.0.2.15][28681] -> [..94.214.12.247][44001] [Unknown][Unrated] + idle: [...468] [ip4][..udp] [......10.0.2.15][28681] -> [..94.214.12.247][44001] + not-detected: [...466] [ip4][..udp] [......10.0.2.15][28681] -> [...70.119.248.5][49929] [Unknown][Unrated] + idle: [...466] [ip4][..udp] [......10.0.2.15][28681] -> [...70.119.248.5][49929] + not-detected: [...428] [ip4][..udp] [......10.0.2.15][28681] -> [....86.162.97.8][.6346] [Unknown][Unrated] + idle: [...428] [ip4][..udp] [......10.0.2.15][28681] -> [....86.162.97.8][.6346] + not-detected: [...425] [ip4][..udp] [......10.0.2.15][28681] -> [..145.82.53.165][.6346] [Unknown][Unrated] + idle: [...425] [ip4][..udp] [......10.0.2.15][28681] -> [..145.82.53.165][.6346] + not-detected: [...401] [ip4][..udp] [......10.0.2.15][28681] -> [.173.178.192.76][.6346] [Unknown][Unrated] + idle: [...401] [ip4][..udp] [......10.0.2.15][28681] -> [.173.178.192.76][.6346] + guessed: [...484] [ip4][..udp] [......10.0.2.15][28681] -> [...107.4.56.177][10000] [CiscoVPN][VPN][Acceptable] + idle: [...484] [ip4][..udp] [......10.0.2.15][28681] -> [...107.4.56.177][10000] + not-detected: [...406] [ip4][..udp] [......10.0.2.15][28681] -> [....109.27.3.68][57380] [Unknown][Unrated] + idle: [...406] [ip4][..udp] [......10.0.2.15][28681] -> [....109.27.3.68][57380] + not-detected: [...467] [ip4][..udp] [......10.0.2.15][28681] -> [...61.64.177.53][23458] [Unknown][Unrated] + idle: [...467] [ip4][..udp] [......10.0.2.15][28681] -> [...61.64.177.53][23458] + not-detected: [...431] [ip4][..udp] [......10.0.2.15][28681] -> [..88.124.71.246][49035] [Unknown][Unrated] + idle: [...431] [ip4][..udp] [......10.0.2.15][28681] -> [..88.124.71.246][49035] + not-detected: [...303] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][30566] [Unknown][Unrated] + idle: [...303] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][30566] + not-detected: [...483] [ip4][..udp] [.......10.0.2.2][.1026] -> [......10.0.2.15][28681] [Unknown][Unrated] + idle: [...483] [ip4][..udp] [.......10.0.2.2][.1026] -> [......10.0.2.15][28681] + not-detected: [...402] [ip4][..udp] [......10.0.2.15][28681] -> [...78.219.202.2][.6346] [Unknown][Unrated] + idle: [...402] [ip4][..udp] [......10.0.2.15][28681] -> [...78.219.202.2][.6346] + not-detected: [...420] [ip4][..udp] [......10.0.2.15][28681] -> [..86.227.127.34][.6346] [Unknown][Unrated] + idle: [...420] [ip4][..udp] [......10.0.2.15][28681] -> [..86.227.127.34][.6346] + not-detected: [...417] [ip4][..udp] [......10.0.2.15][28681] -> [.94.187.236.179][.6346] [Unknown][Unrated] + idle: [...417] [ip4][..udp] [......10.0.2.15][28681] -> [.94.187.236.179][.6346] + not-detected: [...125] [ip4][..udp] [......10.0.2.15][28681] -> [..83.92.178.182][57302] [Unknown][Unrated] + idle: [...125] [ip4][..udp] [......10.0.2.15][28681] -> [..83.92.178.182][57302] + not-detected: [...427] [ip4][..udp] [......10.0.2.15][28681] -> [...81.249.13.30][15138] [Unknown][Unrated] + idle: [...427] [ip4][..udp] [......10.0.2.15][28681] -> [...81.249.13.30][15138] + not-detected: [...405] [ip4][..udp] [......10.0.2.15][28681] -> [.176.155.31.118][.6346] [Unknown][Unrated] + idle: [...405] [ip4][..udp] [......10.0.2.15][28681] -> [.176.155.31.118][.6346] + not-detected: [...213] [ip4][..udp] [......10.0.2.15][28681] -> [....5.180.62.37][.6346] [Unknown][Unrated] + idle: [...213] [ip4][..udp] [......10.0.2.15][28681] -> [....5.180.62.37][.6346] + not-detected: [...415] [ip4][..udp] [......10.0.2.15][28681] -> [..90.247.160.96][17817] [Unknown][Unrated] + idle: [...415] [ip4][..udp] [......10.0.2.15][28681] -> [..90.247.160.96][17817] + not-detected: [...410] [ip4][..udp] [......10.0.2.15][28681] -> [..93.28.130.131][.6346] [Unknown][Unrated] + idle: [...410] [ip4][..udp] [......10.0.2.15][28681] -> [..93.28.130.131][.6346] + not-detected: [...423] [ip4][..udp] [......10.0.2.15][28681] -> [..119.247.6.226][.9713] [Unknown][Unrated] + idle: [...423] [ip4][..udp] [......10.0.2.15][28681] -> [..119.247.6.226][.9713] + not-detected: [...438] [ip4][..udp] [......10.0.2.15][28681] -> [..71.86.190.163][14142] [Unknown][Unrated] + idle: [...438] [ip4][..udp] [......10.0.2.15][28681] -> [..71.86.190.163][14142] + not-detected: [...403] [ip4][..udp] [......10.0.2.15][28681] -> [197.244.171.132][.6346] [Unknown][Unrated] + idle: [...403] [ip4][..udp] [......10.0.2.15][28681] -> [197.244.171.132][.6346] + not-detected: [...429] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.215.213][23576] [Unknown][Unrated] + idle: [...429] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.215.213][23576] + not-detected: [...436] [ip4][..udp] [......10.0.2.15][28681] -> [.219.68.179.137][.6406] [Unknown][Unrated] + idle: [...436] [ip4][..udp] [......10.0.2.15][28681] -> [.219.68.179.137][.6406] + not-detected: [...414] [ip4][..udp] [......10.0.2.15][28681] -> [175.181.156.244][.8255] [Unknown][Unrated] + idle: [...414] [ip4][..udp] [......10.0.2.15][28681] -> [175.181.156.244][.8255] + not-detected: [...409] [ip4][..udp] [......10.0.2.15][28681] -> [...86.194.53.68][33770] [Unknown][Unrated] + idle: [...409] [ip4][..udp] [......10.0.2.15][28681] -> [...86.194.53.68][33770] + not-detected: [...482] [ip4][..udp] [......10.0.2.15][28681] -> [..86.193.23.172][42227] [Unknown][Unrated] + idle: [...482] [ip4][..udp] [......10.0.2.15][28681] -> [..86.193.23.172][42227] + not-detected: [...108] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][.7922] [Unknown][Unrated] + idle: [...108] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][.7922] + not-detected: [...407] [ip4][..udp] [......10.0.2.15][28681] -> [195.181.151.217][.6346] [Unknown][Unrated] + idle: [...407] [ip4][..udp] [......10.0.2.15][28681] -> [195.181.151.217][.6346] + not-detected: [...440] [ip4][..udp] [......10.0.2.15][28681] -> [203.165.170.112][37087] [Unknown][Unrated] + idle: [...440] [ip4][..udp] [......10.0.2.15][28681] -> [203.165.170.112][37087] + not-detected: [...437] [ip4][..udp] [......10.0.2.15][28681] -> [....31.38.163.2][.6346] [Unknown][Unrated] + idle: [...437] [ip4][..udp] [......10.0.2.15][28681] -> [....31.38.163.2][.6346] + not-detected: [...113] [ip4][..udp] [......10.0.2.15][28681] -> [105.101.132.146][57746] [Unknown][Unrated] + idle: [...113] [ip4][..udp] [......10.0.2.15][28681] -> [105.101.132.146][57746] + not-detected: [...419] [ip4][..udp] [......10.0.2.15][28681] -> [...78.193.236.8][46557] [Unknown][Unrated] + idle: [...419] [ip4][..udp] [......10.0.2.15][28681] -> [...78.193.236.8][46557] + not-detected: [...432] [ip4][..udp] [......10.0.2.15][28681] -> [...104.6.118.53][.6346] [Unknown][Unrated] + idle: [...432] [ip4][..udp] [......10.0.2.15][28681] -> [...104.6.118.53][.6346] + not-detected: [...434] [ip4][..udp] [......10.0.2.15][28681] -> [.114.24.182.130][22232] [Unknown][Unrated] + idle: [...434] [ip4][..udp] [......10.0.2.15][28681] -> [.114.24.182.130][22232] + not-detected: [...430] [ip4][..udp] [......10.0.2.15][28681] -> [....90.8.95.165][40763] [Unknown][Unrated] + idle: [...430] [ip4][..udp] [......10.0.2.15][28681] -> [....90.8.95.165][40763] + update: [...577] [ip4][..udp] [......10.0.2.15][28681] -> [.59.148.100.237][23459] + update: [...586] [ip4][..udp] [......10.0.2.15][28681] -> [..221.124.66.33][13060] + update: [...619] [ip4][..udp] [......10.0.2.15][28681] -> [...1.172.184.48][13281] + update: [...544] [ip4][..udp] [......10.0.2.15][28681] -> [..111.184.29.35][30582] + update: [...526] [ip4][..udp] [......10.0.2.15][28681] -> [..36.234.197.93][.1483] + update: [...509] [ip4][..udp] [......10.0.2.15][28681] -> [.92.142.109.190][41370] + update: [...670] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2846] + update: [...610] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][59016] + update: [...691] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][50637] + update: [...701] [ip4][..udp] [......10.0.2.15][28681] -> [...91.206.27.26][.6578] + update: [...511] [ip4][..udp] [......10.0.2.15][28681] -> [...68.47.223.27][.6346] + update: [...496] [ip4][..udp] [......10.0.2.15][28681] -> [.218.173.230.98][19004] + update: [...533] [ip4][..udp] [......10.0.2.15][28681] -> [..36.229.185.60][.6898] + update: [...592] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][.7190] + update: [...702] [ip4][..udp] [......10.0.2.15][28681] -> [119.237.190.184][64163] + update: [...495] [ip4][..udp] [......10.0.2.15][28681] -> [...81.247.89.20][.6346] + update: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] + update: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] + update: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] + update: [...493] [ip4][..udp] [......10.0.2.15][57552] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...603] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][64577] + update: [...622] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3227] + update: [...647] [ip4][..udp] [......10.0.2.15][28681] -> [..36.237.10.152][21293] + update: [...741] [ip4][..udp] [......10.0.2.15][28681] -> [...36.237.25.47][21293] + update: [...516] [ip4][..udp] [......10.0.2.15][28681] -> [.119.246.147.72][.4572] + update: [...734] [ip4][..udp] [......10.0.2.15][28681] -> [...99.199.148.6][.4338] + update: [...597] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52274] + update: [...676] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][62191] + update: [...739] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3256] + update: [...553] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3259] + update: [...629] [ip4][..udp] [......10.0.2.15][28681] -> [....45.65.87.24][16201] + update: [...352] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.6346] + update: [...195] [ip4][..udp] [......10.0.2.15][28681] -> [.177.231.151.16][.6346] + update: [...617] [ip4][..udp] [......10.0.2.15][28681] -> [220.208.167.152][30628] + update: [...596] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][58954] + update: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] + update: [...714] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51379] + update: [...593] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][.9747] + update: [...571] [ip4][..udp] [......10.0.2.15][28681] -> [.114.40.163.123][55341] + update: [...524] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][65362] + update: [...643] [ip4][..udp] [......10.0.2.15][28681] -> [.220.39.142.122][.6346] + update: [...572] [ip4][..udp] [......10.0.2.15][28681] -> [...86.153.21.93][36696] + update: [...650] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][56128] + update: [...520] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3339] + update: [...636] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.48.23][.2556] + update: [...637] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][53143] + update: [...638] [ip4][..udp] [......10.0.2.15][28681] -> [..36.233.194.73][.1995] + update: [...546] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49867] + update: [...677] [ip4][..udp] [......10.0.2.15][28681] -> [...1.64.208.110][55550] + update: [...723] [ip4][..udp] [......10.0.2.15][28681] -> [.213.32.245.121][12333] + update: [...531] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51497] + update: [...578] [ip4][..udp] [......10.0.2.15][28681] -> [..77.205.243.44][46006] + update: [...738] [ip4][..udp] [......10.0.2.15][28681] -> [174.115.127.251][23897] + update: [...584] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][18360] + update: [...534] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54436] + update: [...708] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][64871] + update: [...745] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][48250] + update: [...501] [ip4][..udp] [......10.0.2.15][28681] -> [.88.160.214.137][.6346] + update: [...684] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54459] + update: [...506] [ip4][..udp] [......10.0.2.15][28681] -> [..136.32.84.139][.6346] + update: [...562] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][59879] + update: [...620] [ip4][..udp] [......10.0.2.15][28681] -> [...1.163.14.246][.1630] + update: [...606] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][56070] + update: [...692] [ip4][..udp] [......10.0.2.15][28681] -> [..61.93.150.146][62507] + update: [...621] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53516] + update: [...668] [ip4][..udp] [......10.0.2.15][28681] -> [.223.18.211.177][18085] + update: [...721] [ip4][..udp] [......10.0.2.15][28681] -> [..76.26.178.132][10053] + update: [...698] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][53906] + update: [...623] [ip4][..udp] [......10.0.2.15][28681] -> [..36.234.18.166][61319] + update: [...542] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51675] + update: [...715] [ip4][..udp] [......10.0.2.15][28681] -> [..76.174.174.69][21358] + update: [...191] [ip4][..udp] [......10.0.2.15][28681] -> [.190.153.143.54][65535] + update: [...615] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][60482] + update: [...607] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][42288] + update: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] + update: [...740] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][19814] + update: [...587] [ip4][..udp] [......10.0.2.15][28681] -> [.94.134.154.158][54130] + update: [...550] [ip4][..udp] [......10.0.2.15][28681] -> [.220.238.145.82][33527] + update: [...689] [ip4][..udp] [......10.0.2.15][28681] -> [.114.36.234.196][11629] + update: [...671] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52669] + update: [...598] [ip4][..udp] [......10.0.2.15][28681] -> [...1.172.184.48][.1512] + update: [...551] [ip4][..udp] [......10.0.2.15][28681] -> [..92.24.129.230][14766] + update: [...686] [ip4][..udp] [......10.0.2.15][28681] -> [..111.241.31.96][.8349] + update: [...555] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][20387] + update: [...722] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][.9897] + update: [...632] [ip4][..udp] [......10.0.2.15][28681] -> [..36.231.59.187][62234] + update: [...591] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53707] + update: [...594] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7375] + update: [...614] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.152.218][51920] + update: [...618] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7380] + update: [...508] [ip4][..udp] [......10.0.2.15][28681] -> [...92.144.99.73][10745] + update: [...582] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][10624] + update: [...573] [ip4][..udp] [......10.0.2.15][28681] -> [..71.239.173.18][23327] + update: [...513] [ip4][..udp] [......10.0.2.15][28681] -> [..78.196.216.12][58910] + update: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] + update: [...568] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][56562] + update: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] + update: [...538] [ip4][..udp] [......10.0.2.15][28681] -> [.124.218.41.253][14339] + update: [...624] [ip4][..udp] [......10.0.2.15][28681] -> [.210.209.249.84][24751] + update: [...630] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][45710] + update: [...693] [ip4][..udp] [......10.0.2.15][28681] -> [.76.110.153.177][40022] + update: [...604] [ip4][..udp] [......10.0.2.15][28681] -> [.123.202.31.113][53291] + update: [...719] [ip4][..udp] [......10.0.2.15][28681] -> [218.102.208.175][.9167] + update: [...536] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.222.160][56121] + update: [...558] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6466] + update: [...556] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49787] + update: [...600] [ip4][..udp] [......10.0.2.15][28681] -> [....1.64.156.63][60092] + update: [...646] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49803] + update: [...662] [ip4][..udp] [......10.0.2.15][28681] -> [...24.127.1.235][37814] + update: [...499] [ip4][..udp] [......10.0.2.15][28681] -> [....1.161.80.82][.8656] + update: [...627] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49815] + update: [...704] [ip4][..udp] [......10.0.2.15][28681] -> [..114.40.67.191][14971] + update: [...560] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53883] + update: [...657] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54914] + update: [...728] [ip4][..udp] [......10.0.2.15][28681] -> [101.136.187.253][10914] + update: [...521] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][23458] + update: [...503] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + update: [...505] [ip4][..udp] [......10.0.2.15][28681] -> [.....42.2.62.28][.6387] + update: [...494] [ip4][..udp] [......10.0.2.15][28681] -> [...86.210.81.59][.6346] + update: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] + update: [...498] [ip4][..udp] [......10.0.2.15][28681] -> [...8.44.149.207][30551] + update: [...705] [ip4][..udp] [......10.0.2.15][28681] -> [..123.192.83.59][33513] + update: [...642] [ip4][..udp] [......10.0.2.15][28681] -> [.36.233.199.103][.2625] + update: [...718] [ip4][..udp] [......10.0.2.15][28681] -> [...79.191.58.38][48157] + update: [...743] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][36780] + update: [...675] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.1.236][.9369] + update: [...673] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][.4765] + update: [...682] [ip4][..udp] [......10.0.2.15][28681] -> [..61.220.41.241][53072] + update: [...641] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][65430] + update: [...559] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][55080] + update: [...683] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][50896] + update: [...680] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.83.132][57131] + update: [...695] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6514] + update: [...666] [ip4][..udp] [......10.0.2.15][28681] -> [..82.36.106.134][.3927] + update: [...661] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6527] + update: [...529] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][57929] + update: [...616] [ip4][..udp] [......10.0.2.15][28681] -> [.74.195.236.249][18557] + update: [...539] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.7510] + update: [...717] [ip4][..udp] [......10.0.2.15][28681] -> [...98.249.190.8][25198] + update: [...732] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6564] + update: [...545] [ip4][..udp] [......10.0.2.15][28681] -> [..116.49.159.77][55915] + update: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] + update: [...736] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][52420] + update: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] + update: [...664] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6594] + update: [...635] [ip4][..udp] [......10.0.2.15][28681] -> [..24.179.18.242][47329] + update: [...527] [ip4][..udp] [......10.0.2.15][28681] -> [..42.72.149.140][37848] + update: [...644] [ip4][..udp] [......10.0.2.15][28681] -> [..31.20.248.147][30706] + update: [...712] [ip4][..udp] [......10.0.2.15][28681] -> [..220.129.86.65][49723] + update: [...504] [ip4][..udp] [......10.0.2.15][28681] -> [..85.203.45.107][.6346] + update: [...563] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6831] + update: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] + update: [...640] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7849] + update: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] + update: [...730] [ip4][..udp] [......10.0.2.15][28681] -> [..114.47.227.91][54463] + update: [...733] [ip4][..udp] [......10.0.2.15][28681] -> [..85.168.34.105][39908] + update: [...634] [ip4][..udp] [......10.0.2.15][28681] -> [..68.174.18.115][50679] + update: [...608] [ip4][..udp] [......10.0.2.15][28681] -> [..111.241.31.96][.4814] + update: [...706] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][.8658] + update: [...699] [ip4][..udp] [......10.0.2.15][28681] -> [..70.81.219.111][19210] + update: [...595] [ip4][..udp] [......10.0.2.15][28681] -> [.175.182.21.156][13732] + update: [...724] [ip4][..udp] [......10.0.2.15][28681] -> [.175.39.219.223][13482] + update: [...674] [ip4][..udp] [......10.0.2.15][28681] -> [.125.59.215.249][14571] + update: [...612] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][59384] + update: [...725] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][.9070] + update: [...645] [ip4][..udp] [......10.0.2.15][28681] -> [...173.22.22.94][34245] + update: [...667] [ip4][..udp] [......10.0.2.15][28681] -> [.159.196.95.223][.2003] + update: [...649] [ip4][..udp] [......10.0.2.15][28681] -> [180.218.135.222][.4548] + update: [...159] [ip4][..udp] [......10.0.2.15][28681] -> [176.163.231.160][.6346] + update: [...579] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.170.108][23458] + update: [...678] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][.9128] + update: [...707] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.1968] + update: [...554] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][55577] + update: [...655] [ip4][..udp] [......10.0.2.15][28681] -> [.84.118.116.198][44616] + update: [...726] [ip4][..udp] [......10.0.2.15][28681] -> [..219.91.30.216][61635] + update: [...669] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][64731] + update: [...528] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][58442] + update: [...742] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.4364] + update: [...697] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][55050] + update: [...537] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2034] + update: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] + update: [...585] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][35004] + update: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] + update: [...502] [ip4][..udp] [......10.0.2.15][28681] -> [..47.156.58.211][.6346] + update: [...507] [ip4][..udp] [......10.0.2.15][28681] -> [...50.4.204.220][.6346] + update: [...687] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][13965] + update: [...663] [ip4][..udp] [......10.0.2.15][28681] -> [..96.59.117.166][33192] + update: [...535] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10655] + update: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] + update: [...602] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][53658] + update: [...589] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][52647] + update: [...654] [ip4][..udp] [......10.0.2.15][28681] -> [....82.12.1.136][.6348] + update: [...525] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][52660] + update: [...611] [ip4][..udp] [......10.0.2.15][28681] -> [..61.10.174.159][.4841] + update: [...532] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10677] + update: [...696] [ip4][..udp] [......10.0.2.15][28681] -> [..76.189.72.230][.8161] + update: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] + update: [...512] [ip4][..udp] [......10.0.2.15][28681] -> [..209.204.207.5][49256] + update: [...735] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.91.201][.4297] + update: [...628] [ip4][..udp] [......10.0.2.15][28681] -> [..73.62.225.181][46843] + update: [...552] [ip4][..udp] [......10.0.2.15][28681] -> [...218.250.6.59][60012] + update: [...651] [ip4][..udp] [......10.0.2.15][28681] -> [..114.47.227.91][58856] + update: [...703] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10728] + update: [...581] [ip4][..udp] [......10.0.2.15][28681] -> [..58.115.108.10][.4641] + update: [...613] [ip4][..udp] [......10.0.2.15][28681] -> [.106.104.88.139][.7423] + update: [...583] [ip4][..udp] [......10.0.2.15][28681] -> [...87.75.180.80][35361] + update: [...672] [ip4][..udp] [......10.0.2.15][28681] -> [180.218.135.222][49867] + update: [...574] [ip4][..udp] [......10.0.2.15][28681] -> [..223.17.132.18][23458] + update: [...679] [ip4][..udp] [......10.0.2.15][28681] -> [150.116.225.105][51438] + update: [...518] [ip4][..udp] [......10.0.2.15][28681] -> [..202.151.63.59][.7624] + update: [...716] [ip4][..udp] [......10.0.2.15][28681] -> [...219.71.72.88][58808] + update: [...660] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10791] + update: [...543] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.159.60][56896] + update: [...161] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] + update: [...564] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53144] + update: [...557] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53163] + update: [...648] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][58290] + update: [...700] [ip4][..udp] [......10.0.2.15][28681] -> [..77.222.213.44][26536] + update: [...652] [ip4][..udp] [......10.0.2.15][28681] -> [....1.64.156.63][65023] + update: [...659] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.8075] + update: [...713] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][59978] + update: [...658] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53195] + update: [...576] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][42925] + update: [...570] [ip4][..udp] [......10.0.2.15][28681] -> [..97.83.183.148][.8890] + update: [...681] [ip4][..udp] [......10.0.2.15][28681] -> [.61.227.198.100][.6910] + update: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] + update: [...500] [ip4][..udp] [......10.0.2.15][28681] -> [.220.143.34.225][20071] + update: [...566] [ip4][..udp] [......10.0.2.15][28681] -> [...58.176.62.40][52755] + update: [...514] [ip4][..udp] [......10.0.2.15][28681] -> [..83.114.40.175][23552] + update: [...599] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][59875] + update: [...517] [ip4][..udp] [......10.0.2.15][28681] -> [..36.239.162.27][.7986] + update: [...519] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.48.23][.8070] + update: [...601] [ip4][..udp] [......10.0.2.15][28681] -> [113.255.200.161][65274] + update: [...200] [ip4][..udp] [......10.0.2.15][28681] -> [.138.199.16.123][52993] + update: [...639] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.242.225][15068] + update: [...727] [ip4][..udp] [......10.0.2.15][28681] -> [....1.171.82.65][50072] + update: [...609] [ip4][..udp] [......10.0.2.15][28681] -> [...1.163.14.246][23461] + update: [...737] [ip4][..udp] [......10.0.2.15][28681] -> [118.166.252.163][14391] + update: [...549] [ip4][..udp] [......10.0.2.15][28681] -> [..84.211.151.48][11105] + update: [...561] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57466] + update: [...626] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][49737] + update: [...580] [ip4][..udp] [......10.0.2.15][28681] -> [...76.119.55.28][20347] + update: [...625] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57492] + update: [...567] [ip4][..udp] [......10.0.2.15][28681] -> [...58.176.62.40][52889] + update: [...685] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][54436] + update: [...744] [ip4][..udp] [......10.0.2.15][28681] -> [...27.94.154.53][.6346] + update: [...541] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][11141] + update: [...731] [ip4][..udp] [......10.0.2.15][28681] -> [124.217.188.105][62849] + update: [...711] [ip4][..udp] [......10.0.2.15][28681] -> [113.254.140.225][63637] + update: [...710] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][.3624] + update: [...547] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][43316] + update: [...688] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][53454] + update: [...510] [ip4][..udp] [......10.0.2.15][28681] -> [...79.94.85.113][.6346] + update: [...653] [ip4][..udp] [......10.0.2.15][28681] -> [..94.139.21.182][50110] + update: [...530] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.248.220][59304] + update: [...497] [ip4][..udp] [......10.0.2.15][28681] -> [..84.100.76.123][39628] + update: [...569] [ip4][..udp] [......10.0.2.15][28681] -> [....73.89.249.8][50649] + update: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] + update: [...515] [ip4][..udp] [......10.0.2.15][28681] -> [220.137.106.173][11625] + update: [...522] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.152.218][51153] + update: [...590] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][48380] + update: [...605] [ip4][..udp] [......10.0.2.15][28681] -> [180.149.125.139][.6578] + update: [...690] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][.3688] + update: [...665] [ip4][..udp] [......10.0.2.15][28681] -> [..1.172.183.237][.4983] + update: [...709] [ip4][..udp] [......10.0.2.15][28681] -> [..124.244.68.65][51967] + update: [...656] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.2566] + update: [...729] [ip4][..udp] [......10.0.2.15][28681] -> [..112.10.134.44][19739] + update: [...548] [ip4][..udp] [......10.0.2.15][28681] -> [..74.50.147.205][17735] + update: [...633] [ip4][..udp] [......10.0.2.15][28681] -> [...188.149.2.44][20964] + update: [...575] [ip4][..udp] [......10.0.2.15][28681] -> [.123.202.31.113][19768] + update: [...588] [ip4][..udp] [......10.0.2.15][28681] -> [.219.70.175.103][.4315] + update: [...720] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + update: [...540] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52131] + update: [...631] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][.3931] + update: [...565] [ip4][..udp] [......10.0.2.15][28681] -> [...114.45.40.28][.2656] + update: [...523] [ip4][..udp] [......10.0.2.15][28681] -> [..1.162.138.200][24018] + update: [...694] [ip4][..udp] [......10.0.2.15][28681] -> [.98.215.130.156][12405] + update: [...377] [ip4][..udp] [......10.0.2.15][28681] -> [.180.200.236.13][12082] + update: [...394] [ip4][..udp] [......10.0.2.15][28681] -> [.165.84.134.136][21407] + update: [...254] [ip4][..udp] [......10.0.2.15][28681] -> [..88.120.73.215][24562] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...381] [ip4][..udp] [......10.0.2.15][28681] -> [...77.58.211.52][.3806] + update: [...386] [ip4][..udp] [......10.0.2.15][28681] -> [...85.172.10.90][40162] + update: [...265] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][.1194] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...747] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + update: [...260] [ip4][..udp] [......10.0.2.15][28681] -> [.46.128.114.107][.6578] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...259] [ip4][..udp] [......10.0.2.15][28681] -> [103.232.107.100][43508] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...250] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][26253] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...384] [ip4][..udp] [......10.0.2.15][28681] -> [....75.64.6.175][.4743] + update: [...378] [ip4][..udp] [......10.0.2.15][28681] -> [.118.241.204.61][43366] + update: [...375] [ip4][..udp] [......10.0.2.15][28681] -> [..73.182.136.42][27873] + update: [...257] [ip4][..udp] [......10.0.2.15][28681] -> [.82.181.251.218][36368] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...388] [ip4][..udp] [......10.0.2.15][28681] -> [...121.7.145.36][33905] + update: [...246] [ip4][..udp] [......10.0.2.15][28681] -> [...96.65.68.194][35481] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...748] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6599] + update: [...317] [ip4][..udp] [......10.0.2.15][28681] -> [...96.236.205.7][34794] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...376] [ip4][..udp] [......10.0.2.15][28681] -> [....156.57.42.2][33476] + update: [...261] [ip4][..udp] [......10.0.2.15][28681] -> [..60.241.48.194][21301] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...757] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...313] [ip4][..udp] [......10.0.2.15][28681] -> [..176.99.176.20][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...302] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][53489] + update: [...255] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][30577] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...248] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][12012] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...380] [ip4][..udp] [......10.0.2.15][28681] -> [...83.86.49.195][12019] + update: [...383] [ip4][..udp] [......10.0.2.15][28681] -> [...84.71.243.60][34498] + update: [...253] [ip4][..udp] [......10.0.2.15][28681] -> [.193.37.255.130][61616] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...316] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][63637] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...262] [ip4][..udp] [......10.0.2.15][28681] -> [....89.75.52.19][46010] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...393] [ip4][..udp] [......10.0.2.15][28681] -> [.58.115.158.103][.5110] + update: [...382] [ip4][..udp] [......10.0.2.15][28681] -> [..76.175.11.126][40958] + update: [...379] [ip4][..udp] [......10.0.2.15][28681] -> [..80.140.63.147][29545] + update: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...488] [ip4][..udp] [......10.0.2.15][28681] -> [.183.179.90.112][.9852] [Unknown][Unrated] + idle: [...488] [ip4][..udp] [......10.0.2.15][28681] -> [.183.179.90.112][.9852] + not-detected: [...490] [ip4][..udp] [......10.0.2.15][28681] -> [...90.3.215.132][20356] [Unknown][Unrated] + idle: [...490] [ip4][..udp] [......10.0.2.15][28681] -> [...90.3.215.132][20356] + not-detected: [...489] [ip4][..udp] [......10.0.2.15][28681] -> [...108.44.45.25][.6346] [Unknown][Unrated] + idle: [...489] [ip4][..udp] [......10.0.2.15][28681] -> [...108.44.45.25][.6346] + not-detected: [...487] [ip4][..udp] [......10.0.2.15][28681] -> [..24.78.134.188][49046] [Unknown][Unrated] + idle: [...487] [ip4][..udp] [......10.0.2.15][28681] -> [..24.78.134.188][49046] + not-detected: [...491] [ip4][..udp] [......10.0.2.15][28681] -> [..36.233.42.210][.5512] [Unknown][Unrated] + idle: [...491] [ip4][..udp] [......10.0.2.15][28681] -> [..36.233.42.210][.5512] + not-detected: [...492] [ip4][..udp] [......10.0.2.15][28681] -> [...172.94.41.71][.6346] [Unknown][Unrated] + idle: [...492] [ip4][..udp] [......10.0.2.15][28681] -> [...172.94.41.71][.6346] + update: [...441] [ip4][..udp] [......10.0.2.15][28681] -> [.36.237.199.108][56040] + update: [...331] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][26851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...450] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][23458] + update: [...479] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.13.148][51896] + update: [...474] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][45880] + update: [...477] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45640] + update: [...444] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][.9010] + update: [...478] [ip4][..udp] [......10.0.2.15][28681] -> [...36.235.85.44][64914] + update: [...449] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][.8826] + update: [...461] [ip4][..udp] [......10.0.2.15][28681] -> [..69.27.193.124][50555] + update: [...332] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...472] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45744] + update: [...471] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][43457] + update: [...476] [ip4][..udp] [......10.0.2.15][28681] -> [..98.18.172.208][63172] + update: [...443] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][54754] + update: [...754] [ip4][..udp] [......10.0.2.15][28681] -> [..84.125.218.84][17561] + update: [...759] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...446] [ip4][..udp] [......10.0.2.15][28681] -> [..61.70.199.107][60475] + update: [...470] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][46790] + update: [...447] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][23458] + update: [...451] [ip4][..udp] [......10.0.2.15][28681] -> [...218.35.66.21][22234] + update: [...456] [ip4][..udp] [......10.0.2.15][28681] -> [.89.241.112.255][14766] + update: [...455] [ip4][..udp] [......10.0.2.15][28681] -> [.58.153.206.183][16919] + update: [...453] [ip4][..udp] [......10.0.2.15][28681] -> [..74.127.26.138][.3083] + update: [...460] [ip4][..udp] [......10.0.2.15][28681] -> [.210.194.116.78][.8342] + update: [...454] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][23183] + update: [...758] [ip4][..udp] [......10.0.2.15][50213] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...321] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][21995] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...469] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][47184] + update: [...485] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.209][.6346] + update: [...319] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][55302] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...458] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.228.167][12201] + update: [...486] [ip4][..udp] [......10.0.2.15][28681] -> [...88.68.45.203][.6346] + update: [...457] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.240.113][13867] + update: [...400] [ip4][..udp] [......10.0.2.15][28681] -> [..129.45.47.167][.6346] + update: [...463] [ip4][..udp] [......10.0.2.15][28681] -> [..200.7.155.210][28365] + update: [...452] [ip4][..udp] [......10.0.2.15][28681] -> [..68.227.193.37][27481] + update: [...448] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][15677] + update: [...459] [ip4][..udp] [......10.0.2.15][28681] -> [...100.89.84.59][11603] + update: [...445] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.153.100][.4509] + update: [...464] [ip4][..udp] [......10.0.2.15][28681] -> [...101.128.66.8][34512] + update: [...480] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.74.26][65498] + update: [...462] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][47808] + update: [...475] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][63978] + update: [...473] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][33564] + update: [...442] [ip4][..udp] [......10.0.2.15][28681] -> [..89.204.130.55][29545] + idle: [...493] [ip4][..udp] [......10.0.2.15][57552] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...751] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] + update: [...335] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + update: [...749] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] + update: [...752] [ip4][..udp] [......10.0.2.15][28681] -> [142.115.218.152][.5900] + update: [...750] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] + update: [...753] [ip4][..udp] [......10.0.2.15][28681] -> [..165.84.140.96][14400] + not-detected: [...577] [ip4][..udp] [......10.0.2.15][28681] -> [.59.148.100.237][23459] [Unknown][Unrated] + idle: [...577] [ip4][..udp] [......10.0.2.15][28681] -> [.59.148.100.237][23459] + not-detected: [...586] [ip4][..udp] [......10.0.2.15][28681] -> [..221.124.66.33][13060] [Unknown][Unrated] + idle: [...586] [ip4][..udp] [......10.0.2.15][28681] -> [..221.124.66.33][13060] + not-detected: [...619] [ip4][..udp] [......10.0.2.15][28681] -> [...1.172.184.48][13281] [Unknown][Unrated] + idle: [...619] [ip4][..udp] [......10.0.2.15][28681] -> [...1.172.184.48][13281] + not-detected: [...377] [ip4][..udp] [......10.0.2.15][28681] -> [.180.200.236.13][12082] [Unknown][Unrated] + idle: [...377] [ip4][..udp] [......10.0.2.15][28681] -> [.180.200.236.13][12082] + not-detected: [...526] [ip4][..udp] [......10.0.2.15][28681] -> [..36.234.197.93][.1483] [Unknown][Unrated] + idle: [...526] [ip4][..udp] [......10.0.2.15][28681] -> [..36.234.197.93][.1483] + not-detected: [...509] [ip4][..udp] [......10.0.2.15][28681] -> [.92.142.109.190][41370] [Unknown][Unrated] + idle: [...509] [ip4][..udp] [......10.0.2.15][28681] -> [.92.142.109.190][41370] + not-detected: [...670] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2846] [Unknown][Unrated] + idle: [...670] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2846] + not-detected: [...610] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][59016] [Unknown][Unrated] + idle: [...610] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][59016] + not-detected: [...691] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][50637] [Unknown][Unrated] + idle: [...691] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][50637] + not-detected: [...441] [ip4][..udp] [......10.0.2.15][28681] -> [.36.237.199.108][56040] [Unknown][Unrated] + idle: [...441] [ip4][..udp] [......10.0.2.15][28681] -> [.36.237.199.108][56040] + not-detected: [...701] [ip4][..udp] [......10.0.2.15][28681] -> [...91.206.27.26][.6578] [Unknown][Unrated] + idle: [...701] [ip4][..udp] [......10.0.2.15][28681] -> [...91.206.27.26][.6578] + not-detected: [...511] [ip4][..udp] [......10.0.2.15][28681] -> [...68.47.223.27][.6346] [Unknown][Unrated] + idle: [...511] [ip4][..udp] [......10.0.2.15][28681] -> [...68.47.223.27][.6346] + idle: [...331] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][26851] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...361] [ip4][..udp] [......10.0.2.15][28681] -> [..86.129.196.84][.9915] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...450] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][23458] [Unknown][Unrated] + idle: [...450] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][23458] + not-detected: [...496] [ip4][..udp] [......10.0.2.15][28681] -> [.218.173.230.98][19004] [Unknown][Unrated] + idle: [...496] [ip4][..udp] [......10.0.2.15][28681] -> [.218.173.230.98][19004] + not-detected: [...592] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][.7190] [Unknown][Unrated] + idle: [...592] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][.7190] + not-detected: [...702] [ip4][..udp] [......10.0.2.15][28681] -> [119.237.190.184][64163] [Unknown][Unrated] + idle: [...702] [ip4][..udp] [......10.0.2.15][28681] -> [119.237.190.184][64163] + not-detected: [...495] [ip4][..udp] [......10.0.2.15][28681] -> [...81.247.89.20][.6346] [Unknown][Unrated] + idle: [...495] [ip4][..udp] [......10.0.2.15][28681] -> [...81.247.89.20][.6346] + not-detected: [...479] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.13.148][51896] [Unknown][Unrated] + idle: [...479] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.13.148][51896] + not-detected: [...603] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][64577] [Unknown][Unrated] + idle: [...603] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][64577] + not-detected: [...394] [ip4][..udp] [......10.0.2.15][28681] -> [.165.84.134.136][21407] [Unknown][Unrated] + idle: [...394] [ip4][..udp] [......10.0.2.15][28681] -> [.165.84.134.136][21407] + idle: [...254] [ip4][..udp] [......10.0.2.15][28681] -> [..88.120.73.215][24562] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...741] [ip4][..udp] [......10.0.2.15][28681] -> [...36.237.25.47][21293] [Unknown][Unrated] + idle: [...741] [ip4][..udp] [......10.0.2.15][28681] -> [...36.237.25.47][21293] + not-detected: [...647] [ip4][..udp] [......10.0.2.15][28681] -> [..36.237.10.152][21293] [Unknown][Unrated] + idle: [...647] [ip4][..udp] [......10.0.2.15][28681] -> [..36.237.10.152][21293] + not-detected: [...622] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3227] [Unknown][Unrated] + idle: [...622] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3227] + not-detected: [...516] [ip4][..udp] [......10.0.2.15][28681] -> [.119.246.147.72][.4572] [Unknown][Unrated] + idle: [...516] [ip4][..udp] [......10.0.2.15][28681] -> [.119.246.147.72][.4572] + not-detected: [...734] [ip4][..udp] [......10.0.2.15][28681] -> [...99.199.148.6][.4338] [Unknown][Unrated] + idle: [...734] [ip4][..udp] [......10.0.2.15][28681] -> [...99.199.148.6][.4338] + not-detected: [...597] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52274] [Unknown][Unrated] + idle: [...597] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52274] + not-detected: [...676] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][62191] [Unknown][Unrated] + idle: [...676] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][62191] + idle: [...340] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49732] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...739] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3256] [Unknown][Unrated] + idle: [...739] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3256] + not-detected: [...629] [ip4][..udp] [......10.0.2.15][28681] -> [....45.65.87.24][16201] [Unknown][Unrated] + idle: [...629] [ip4][..udp] [......10.0.2.15][28681] -> [....45.65.87.24][16201] + not-detected: [...617] [ip4][..udp] [......10.0.2.15][28681] -> [220.208.167.152][30628] [Unknown][Unrated] + idle: [...617] [ip4][..udp] [......10.0.2.15][28681] -> [220.208.167.152][30628] + not-detected: [...596] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][58954] [Unknown][Unrated] + idle: [...596] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][58954] + not-detected: [...474] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][45880] [Unknown][Unrated] + idle: [...474] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][45880] + not-detected: [...714] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51379] [Unknown][Unrated] + idle: [...714] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51379] + not-detected: [...593] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][.9747] [Unknown][Unrated] + idle: [...593] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][.9747] + not-detected: [...571] [ip4][..udp] [......10.0.2.15][28681] -> [.114.40.163.123][55341] [Unknown][Unrated] + idle: [...571] [ip4][..udp] [......10.0.2.15][28681] -> [.114.40.163.123][55341] + not-detected: [...524] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][65362] [Unknown][Unrated] + idle: [...524] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][65362] + not-detected: [...643] [ip4][..udp] [......10.0.2.15][28681] -> [.220.39.142.122][.6346] [Unknown][Unrated] + idle: [...643] [ip4][..udp] [......10.0.2.15][28681] -> [.220.39.142.122][.6346] + not-detected: [...477] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45640] [Unknown][Unrated] + idle: [...477] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45640] + not-detected: [...444] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][.9010] [Unknown][Unrated] + idle: [...444] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][.9010] + not-detected: [...572] [ip4][..udp] [......10.0.2.15][28681] -> [...86.153.21.93][36696] [Unknown][Unrated] + idle: [...572] [ip4][..udp] [......10.0.2.15][28681] -> [...86.153.21.93][36696] + not-detected: [...478] [ip4][..udp] [......10.0.2.15][28681] -> [...36.235.85.44][64914] [Unknown][Unrated] + idle: [...478] [ip4][..udp] [......10.0.2.15][28681] -> [...36.235.85.44][64914] + not-detected: [...449] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][.8826] [Unknown][Unrated] + idle: [...449] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][.8826] + not-detected: [...650] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][56128] [Unknown][Unrated] + idle: [...650] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][56128] + not-detected: [...461] [ip4][..udp] [......10.0.2.15][28681] -> [..69.27.193.124][50555] [Unknown][Unrated] + idle: [...461] [ip4][..udp] [......10.0.2.15][28681] -> [..69.27.193.124][50555] + not-detected: [...520] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3339] [Unknown][Unrated] + idle: [...520] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3339] + not-detected: [...335] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] [Unknown][Unrated] + idle: [...335] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + not-detected: [...636] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.48.23][.2556] [Unknown][Unrated] + idle: [...636] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.48.23][.2556] + idle: [...332] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...637] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][53143] [Unknown][Unrated] + idle: [...637] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][53143] + not-detected: [...638] [ip4][..udp] [......10.0.2.15][28681] -> [..36.233.194.73][.1995] [Unknown][Unrated] + idle: [...638] [ip4][..udp] [......10.0.2.15][28681] -> [..36.233.194.73][.1995] + not-detected: [...677] [ip4][..udp] [......10.0.2.15][28681] -> [...1.64.208.110][55550] [Unknown][Unrated] + idle: [...677] [ip4][..udp] [......10.0.2.15][28681] -> [...1.64.208.110][55550] + not-detected: [...723] [ip4][..udp] [......10.0.2.15][28681] -> [.213.32.245.121][12333] [Unknown][Unrated] + idle: [...723] [ip4][..udp] [......10.0.2.15][28681] -> [.213.32.245.121][12333] + not-detected: [...578] [ip4][..udp] [......10.0.2.15][28681] -> [..77.205.243.44][46006] [Unknown][Unrated] + idle: [...578] [ip4][..udp] [......10.0.2.15][28681] -> [..77.205.243.44][46006] + not-detected: [...738] [ip4][..udp] [......10.0.2.15][28681] -> [174.115.127.251][23897] [Unknown][Unrated] + idle: [...738] [ip4][..udp] [......10.0.2.15][28681] -> [174.115.127.251][23897] + not-detected: [...584] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][18360] [Unknown][Unrated] + idle: [...584] [ip4][..udp] [......10.0.2.15][28681] -> [.80.193.171.146][18360] + not-detected: [...472] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45744] [Unknown][Unrated] + idle: [...472] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][45744] + not-detected: [...471] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][43457] [Unknown][Unrated] + idle: [...471] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][43457] + not-detected: [...745] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][48250] [Unknown][Unrated] + idle: [...745] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][48250] + not-detected: [...708] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][64871] [Unknown][Unrated] + idle: [...708] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][64871] + not-detected: [...501] [ip4][..udp] [......10.0.2.15][28681] -> [.88.160.214.137][.6346] [Unknown][Unrated] + idle: [...501] [ip4][..udp] [......10.0.2.15][28681] -> [.88.160.214.137][.6346] + not-detected: [...476] [ip4][..udp] [......10.0.2.15][28681] -> [..98.18.172.208][63172] [Unknown][Unrated] + idle: [...476] [ip4][..udp] [......10.0.2.15][28681] -> [..98.18.172.208][63172] + not-detected: [...381] [ip4][..udp] [......10.0.2.15][28681] -> [...77.58.211.52][.3806] [Unknown][Unrated] + idle: [...381] [ip4][..udp] [......10.0.2.15][28681] -> [...77.58.211.52][.3806] + not-detected: [...684] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54459] [Unknown][Unrated] + idle: [...684] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54459] + not-detected: [...386] [ip4][..udp] [......10.0.2.15][28681] -> [...85.172.10.90][40162] [Unknown][Unrated] + idle: [...386] [ip4][..udp] [......10.0.2.15][28681] -> [...85.172.10.90][40162] + idle: [...344] [ip4][..udp] [......10.0.2.15][28681] -> [.207.38.163.228][.6778] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...506] [ip4][..udp] [......10.0.2.15][28681] -> [..136.32.84.139][.6346] [Unknown][Unrated] + idle: [...506] [ip4][..udp] [......10.0.2.15][28681] -> [..136.32.84.139][.6346] + not-detected: [...620] [ip4][..udp] [......10.0.2.15][28681] -> [...1.163.14.246][.1630] [Unknown][Unrated] + idle: [...620] [ip4][..udp] [......10.0.2.15][28681] -> [...1.163.14.246][.1630] + not-detected: [...606] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][56070] [Unknown][Unrated] + idle: [...606] [ip4][..udp] [......10.0.2.15][28681] -> [.96.246.156.126][56070] + not-detected: [...692] [ip4][..udp] [......10.0.2.15][28681] -> [..61.93.150.146][62507] [Unknown][Unrated] + idle: [...692] [ip4][..udp] [......10.0.2.15][28681] -> [..61.93.150.146][62507] + idle: [...265] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][.1194] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...621] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53516] [Unknown][Unrated] + idle: [...621] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53516] + not-detected: [...668] [ip4][..udp] [......10.0.2.15][28681] -> [.223.18.211.177][18085] [Unknown][Unrated] + idle: [...668] [ip4][..udp] [......10.0.2.15][28681] -> [.223.18.211.177][18085] + not-detected: [...721] [ip4][..udp] [......10.0.2.15][28681] -> [..76.26.178.132][10053] [Unknown][Unrated] + idle: [...721] [ip4][..udp] [......10.0.2.15][28681] -> [..76.26.178.132][10053] + not-detected: [...443] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][54754] [Unknown][Unrated] + idle: [...443] [ip4][..udp] [......10.0.2.15][28681] -> [..183.179.14.31][54754] + not-detected: [...698] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][53906] [Unknown][Unrated] + idle: [...698] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][53906] + not-detected: [...623] [ip4][..udp] [......10.0.2.15][28681] -> [..36.234.18.166][61319] [Unknown][Unrated] + idle: [...623] [ip4][..udp] [......10.0.2.15][28681] -> [..36.234.18.166][61319] + not-detected: [...715] [ip4][..udp] [......10.0.2.15][28681] -> [..76.174.174.69][21358] [Unknown][Unrated] + idle: [...715] [ip4][..udp] [......10.0.2.15][28681] -> [..76.174.174.69][21358] + not-detected: [...615] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][60482] [Unknown][Unrated] + idle: [...615] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][60482] + not-detected: [...747] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] [Unknown][Unrated] + idle: [...747] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + not-detected: [...607] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][42288] [Unknown][Unrated] + idle: [...607] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][42288] + not-detected: [...740] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][19814] [Unknown][Unrated] + idle: [...740] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][19814] + not-detected: [...587] [ip4][..udp] [......10.0.2.15][28681] -> [.94.134.154.158][54130] [Unknown][Unrated] + idle: [...587] [ip4][..udp] [......10.0.2.15][28681] -> [.94.134.154.158][54130] + not-detected: [...550] [ip4][..udp] [......10.0.2.15][28681] -> [.220.238.145.82][33527] [Unknown][Unrated] + idle: [...550] [ip4][..udp] [......10.0.2.15][28681] -> [.220.238.145.82][33527] + not-detected: [...689] [ip4][..udp] [......10.0.2.15][28681] -> [.114.36.234.196][11629] [Unknown][Unrated] + idle: [...689] [ip4][..udp] [......10.0.2.15][28681] -> [.114.36.234.196][11629] + idle: [...260] [ip4][..udp] [......10.0.2.15][28681] -> [.46.128.114.107][.6578] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...671] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52669] [Unknown][Unrated] + idle: [...671] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52669] + not-detected: [...598] [ip4][..udp] [......10.0.2.15][28681] -> [...1.172.184.48][.1512] [Unknown][Unrated] + idle: [...598] [ip4][..udp] [......10.0.2.15][28681] -> [...1.172.184.48][.1512] + not-detected: [...686] [ip4][..udp] [......10.0.2.15][28681] -> [..111.241.31.96][.8349] [Unknown][Unrated] + idle: [...686] [ip4][..udp] [......10.0.2.15][28681] -> [..111.241.31.96][.8349] + not-detected: [...722] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][.9897] [Unknown][Unrated] + idle: [...722] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][.9897] + idle: [...336] [ip4][..udp] [......10.0.2.15][28681] -> [...80.7.252.192][.6888] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...632] [ip4][..udp] [......10.0.2.15][28681] -> [..36.231.59.187][62234] [Unknown][Unrated] + idle: [...632] [ip4][..udp] [......10.0.2.15][28681] -> [..36.231.59.187][62234] + not-detected: [...591] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53707] [Unknown][Unrated] + idle: [...591] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53707] + not-detected: [...594] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7375] [Unknown][Unrated] + idle: [...594] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7375] + not-detected: [...614] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.152.218][51920] [Unknown][Unrated] + idle: [...614] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.152.218][51920] + not-detected: [...618] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7380] [Unknown][Unrated] + idle: [...618] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7380] + not-detected: [...508] [ip4][..udp] [......10.0.2.15][28681] -> [...92.144.99.73][10745] [Unknown][Unrated] + idle: [...508] [ip4][..udp] [......10.0.2.15][28681] -> [...92.144.99.73][10745] + not-detected: [...582] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][10624] [Unknown][Unrated] + idle: [...582] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][10624] + not-detected: [...513] [ip4][..udp] [......10.0.2.15][28681] -> [..78.196.216.12][58910] [Unknown][Unrated] + idle: [...513] [ip4][..udp] [......10.0.2.15][28681] -> [..78.196.216.12][58910] + not-detected: [...568] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][56562] [Unknown][Unrated] + idle: [...568] [ip4][..udp] [......10.0.2.15][28681] -> [.123.205.118.77][56562] + not-detected: [...446] [ip4][..udp] [......10.0.2.15][28681] -> [..61.70.199.107][60475] [Unknown][Unrated] + idle: [...446] [ip4][..udp] [......10.0.2.15][28681] -> [..61.70.199.107][60475] + not-detected: [...470] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][46790] [Unknown][Unrated] + idle: [...470] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][46790] + not-detected: [...624] [ip4][..udp] [......10.0.2.15][28681] -> [.210.209.249.84][24751] [Unknown][Unrated] + idle: [...624] [ip4][..udp] [......10.0.2.15][28681] -> [.210.209.249.84][24751] + not-detected: [...630] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][45710] [Unknown][Unrated] + idle: [...630] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][45710] + not-detected: [...693] [ip4][..udp] [......10.0.2.15][28681] -> [.76.110.153.177][40022] [Unknown][Unrated] + idle: [...693] [ip4][..udp] [......10.0.2.15][28681] -> [.76.110.153.177][40022] + not-detected: [...604] [ip4][..udp] [......10.0.2.15][28681] -> [.123.202.31.113][53291] [Unknown][Unrated] + idle: [...604] [ip4][..udp] [......10.0.2.15][28681] -> [.123.202.31.113][53291] + not-detected: [...719] [ip4][..udp] [......10.0.2.15][28681] -> [218.102.208.175][.9167] [Unknown][Unrated] + idle: [...719] [ip4][..udp] [......10.0.2.15][28681] -> [218.102.208.175][.9167] + not-detected: [...447] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][23458] [Unknown][Unrated] + idle: [...447] [ip4][..udp] [......10.0.2.15][28681] -> [...14.199.10.60][23458] + not-detected: [...451] [ip4][..udp] [......10.0.2.15][28681] -> [...218.35.66.21][22234] [Unknown][Unrated] + idle: [...451] [ip4][..udp] [......10.0.2.15][28681] -> [...218.35.66.21][22234] + not-detected: [...600] [ip4][..udp] [......10.0.2.15][28681] -> [....1.64.156.63][60092] [Unknown][Unrated] + idle: [...600] [ip4][..udp] [......10.0.2.15][28681] -> [....1.64.156.63][60092] + idle: [...250] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][26253] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...646] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49803] [Unknown][Unrated] + idle: [...646] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49803] + not-detected: [...662] [ip4][..udp] [......10.0.2.15][28681] -> [...24.127.1.235][37814] [Unknown][Unrated] + idle: [...662] [ip4][..udp] [......10.0.2.15][28681] -> [...24.127.1.235][37814] + not-detected: [...499] [ip4][..udp] [......10.0.2.15][28681] -> [....1.161.80.82][.8656] [Unknown][Unrated] + idle: [...499] [ip4][..udp] [......10.0.2.15][28681] -> [....1.161.80.82][.8656] + not-detected: [...627] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49815] [Unknown][Unrated] + idle: [...627] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49815] + not-detected: [...384] [ip4][..udp] [......10.0.2.15][28681] -> [....75.64.6.175][.4743] [Unknown][Unrated] + idle: [...384] [ip4][..udp] [......10.0.2.15][28681] -> [....75.64.6.175][.4743] + not-detected: [...378] [ip4][..udp] [......10.0.2.15][28681] -> [.118.241.204.61][43366] [Unknown][Unrated] + idle: [...378] [ip4][..udp] [......10.0.2.15][28681] -> [.118.241.204.61][43366] + not-detected: [...704] [ip4][..udp] [......10.0.2.15][28681] -> [..114.40.67.191][14971] [Unknown][Unrated] + idle: [...704] [ip4][..udp] [......10.0.2.15][28681] -> [..114.40.67.191][14971] + not-detected: [...657] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54914] [Unknown][Unrated] + idle: [...657] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54914] + not-detected: [...728] [ip4][..udp] [......10.0.2.15][28681] -> [101.136.187.253][10914] [Unknown][Unrated] + idle: [...728] [ip4][..udp] [......10.0.2.15][28681] -> [101.136.187.253][10914] + not-detected: [...456] [ip4][..udp] [......10.0.2.15][28681] -> [.89.241.112.255][14766] [Unknown][Unrated] + idle: [...456] [ip4][..udp] [......10.0.2.15][28681] -> [.89.241.112.255][14766] + not-detected: [...521] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][23458] [Unknown][Unrated] + idle: [...521] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][23458] + not-detected: [...505] [ip4][..udp] [......10.0.2.15][28681] -> [.....42.2.62.28][.6387] [Unknown][Unrated] + idle: [...505] [ip4][..udp] [......10.0.2.15][28681] -> [.....42.2.62.28][.6387] + not-detected: [...494] [ip4][..udp] [......10.0.2.15][28681] -> [...86.210.81.59][.6346] [Unknown][Unrated] + idle: [...494] [ip4][..udp] [......10.0.2.15][28681] -> [...86.210.81.59][.6346] + not-detected: [...375] [ip4][..udp] [......10.0.2.15][28681] -> [..73.182.136.42][27873] [Unknown][Unrated] + idle: [...375] [ip4][..udp] [......10.0.2.15][28681] -> [..73.182.136.42][27873] + not-detected: [...455] [ip4][..udp] [......10.0.2.15][28681] -> [.58.153.206.183][16919] [Unknown][Unrated] + idle: [...455] [ip4][..udp] [......10.0.2.15][28681] -> [.58.153.206.183][16919] + not-detected: [...453] [ip4][..udp] [......10.0.2.15][28681] -> [..74.127.26.138][.3083] [Unknown][Unrated] + idle: [...453] [ip4][..udp] [......10.0.2.15][28681] -> [..74.127.26.138][.3083] + not-detected: [...498] [ip4][..udp] [......10.0.2.15][28681] -> [...8.44.149.207][30551] [Unknown][Unrated] + idle: [...498] [ip4][..udp] [......10.0.2.15][28681] -> [...8.44.149.207][30551] + idle: [...257] [ip4][..udp] [......10.0.2.15][28681] -> [.82.181.251.218][36368] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...705] [ip4][..udp] [......10.0.2.15][28681] -> [..123.192.83.59][33513] [Unknown][Unrated] + idle: [...705] [ip4][..udp] [......10.0.2.15][28681] -> [..123.192.83.59][33513] + not-detected: [...642] [ip4][..udp] [......10.0.2.15][28681] -> [.36.233.199.103][.2625] [Unknown][Unrated] + idle: [...642] [ip4][..udp] [......10.0.2.15][28681] -> [.36.233.199.103][.2625] + not-detected: [...460] [ip4][..udp] [......10.0.2.15][28681] -> [.210.194.116.78][.8342] [Unknown][Unrated] + idle: [...460] [ip4][..udp] [......10.0.2.15][28681] -> [.210.194.116.78][.8342] + not-detected: [...718] [ip4][..udp] [......10.0.2.15][28681] -> [...79.191.58.38][48157] [Unknown][Unrated] + idle: [...718] [ip4][..udp] [......10.0.2.15][28681] -> [...79.191.58.38][48157] + not-detected: [...743] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][36780] [Unknown][Unrated] + idle: [...743] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][36780] + not-detected: [...454] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][23183] [Unknown][Unrated] + idle: [...454] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][23183] + not-detected: [...675] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.1.236][.9369] [Unknown][Unrated] + idle: [...675] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.1.236][.9369] + not-detected: [...673] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][.4765] [Unknown][Unrated] + idle: [...673] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][.4765] + not-detected: [...682] [ip4][..udp] [......10.0.2.15][28681] -> [..61.220.41.241][53072] [Unknown][Unrated] + idle: [...682] [ip4][..udp] [......10.0.2.15][28681] -> [..61.220.41.241][53072] + not-detected: [...641] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][65430] [Unknown][Unrated] + idle: [...641] [ip4][..udp] [......10.0.2.15][28681] -> [....1.36.249.91][65430] + not-detected: [...683] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][50896] [Unknown][Unrated] + idle: [...683] [ip4][..udp] [......10.0.2.15][28681] -> [203.220.198.244][50896] + not-detected: [...680] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.83.132][57131] [Unknown][Unrated] + idle: [...680] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.83.132][57131] + not-detected: [...695] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6514] [Unknown][Unrated] + idle: [...695] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6514] + not-detected: [...469] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][47184] [Unknown][Unrated] + idle: [...469] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][47184] + idle: [...321] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][21995] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...666] [ip4][..udp] [......10.0.2.15][28681] -> [..82.36.106.134][.3927] [Unknown][Unrated] + idle: [...666] [ip4][..udp] [......10.0.2.15][28681] -> [..82.36.106.134][.3927] + not-detected: [...661] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6527] [Unknown][Unrated] + idle: [...661] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6527] + not-detected: [...616] [ip4][..udp] [......10.0.2.15][28681] -> [.74.195.236.249][18557] [Unknown][Unrated] + idle: [...616] [ip4][..udp] [......10.0.2.15][28681] -> [.74.195.236.249][18557] + not-detected: [...717] [ip4][..udp] [......10.0.2.15][28681] -> [...98.249.190.8][25198] [Unknown][Unrated] + idle: [...717] [ip4][..udp] [......10.0.2.15][28681] -> [...98.249.190.8][25198] + not-detected: [...732] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6564] [Unknown][Unrated] + idle: [...732] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6564] + idle: [...342] [ip4][..udp] [......10.0.2.15][28681] -> [..98.208.26.154][.4994] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...388] [ip4][..udp] [......10.0.2.15][28681] -> [...121.7.145.36][33905] [Unknown][Unrated] + idle: [...388] [ip4][..udp] [......10.0.2.15][28681] -> [...121.7.145.36][33905] + not-detected: [...736] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][52420] [Unknown][Unrated] + idle: [...736] [ip4][..udp] [......10.0.2.15][28681] -> [..45.31.152.112][52420] + not-detected: [...748] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6599] [Unknown][Unrated] + idle: [...748] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6599] + not-detected: [...635] [ip4][..udp] [......10.0.2.15][28681] -> [..24.179.18.242][47329] [Unknown][Unrated] + idle: [...635] [ip4][..udp] [......10.0.2.15][28681] -> [..24.179.18.242][47329] + idle: [...246] [ip4][..udp] [......10.0.2.15][28681] -> [...96.65.68.194][35481] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...527] [ip4][..udp] [......10.0.2.15][28681] -> [..42.72.149.140][37848] [Unknown][Unrated] + idle: [...527] [ip4][..udp] [......10.0.2.15][28681] -> [..42.72.149.140][37848] + not-detected: [...644] [ip4][..udp] [......10.0.2.15][28681] -> [..31.20.248.147][30706] [Unknown][Unrated] + idle: [...644] [ip4][..udp] [......10.0.2.15][28681] -> [..31.20.248.147][30706] + not-detected: [...712] [ip4][..udp] [......10.0.2.15][28681] -> [..220.129.86.65][49723] [Unknown][Unrated] + idle: [...712] [ip4][..udp] [......10.0.2.15][28681] -> [..220.129.86.65][49723] + not-detected: [...563] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6831] [Unknown][Unrated] + idle: [...563] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6831] + not-detected: [...504] [ip4][..udp] [......10.0.2.15][28681] -> [..85.203.45.107][.6346] [Unknown][Unrated] + idle: [...504] [ip4][..udp] [......10.0.2.15][28681] -> [..85.203.45.107][.6346] + not-detected: [...640] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7849] [Unknown][Unrated] + idle: [...640] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.7849] + not-detected: [...730] [ip4][..udp] [......10.0.2.15][28681] -> [..114.47.227.91][54463] [Unknown][Unrated] + idle: [...730] [ip4][..udp] [......10.0.2.15][28681] -> [..114.47.227.91][54463] + not-detected: [...733] [ip4][..udp] [......10.0.2.15][28681] -> [..85.168.34.105][39908] [Unknown][Unrated] + idle: [...733] [ip4][..udp] [......10.0.2.15][28681] -> [..85.168.34.105][39908] + not-detected: [...634] [ip4][..udp] [......10.0.2.15][28681] -> [..68.174.18.115][50679] [Unknown][Unrated] + idle: [...634] [ip4][..udp] [......10.0.2.15][28681] -> [..68.174.18.115][50679] + not-detected: [...608] [ip4][..udp] [......10.0.2.15][28681] -> [..111.241.31.96][.4814] [Unknown][Unrated] + idle: [...608] [ip4][..udp] [......10.0.2.15][28681] -> [..111.241.31.96][.4814] + idle: [...317] [ip4][..udp] [......10.0.2.15][28681] -> [...96.236.205.7][34794] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...706] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][.8658] [Unknown][Unrated] + idle: [...706] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][.8658] + not-detected: [...699] [ip4][..udp] [......10.0.2.15][28681] -> [..70.81.219.111][19210] [Unknown][Unrated] + idle: [...699] [ip4][..udp] [......10.0.2.15][28681] -> [..70.81.219.111][19210] + not-detected: [...595] [ip4][..udp] [......10.0.2.15][28681] -> [.175.182.21.156][13732] [Unknown][Unrated] + idle: [...595] [ip4][..udp] [......10.0.2.15][28681] -> [.175.182.21.156][13732] + not-detected: [...724] [ip4][..udp] [......10.0.2.15][28681] -> [.175.39.219.223][13482] [Unknown][Unrated] + idle: [...724] [ip4][..udp] [......10.0.2.15][28681] -> [.175.39.219.223][13482] + not-detected: [...376] [ip4][..udp] [......10.0.2.15][28681] -> [....156.57.42.2][33476] [Unknown][Unrated] + idle: [...376] [ip4][..udp] [......10.0.2.15][28681] -> [....156.57.42.2][33476] + not-detected: [...674] [ip4][..udp] [......10.0.2.15][28681] -> [.125.59.215.249][14571] [Unknown][Unrated] + idle: [...674] [ip4][..udp] [......10.0.2.15][28681] -> [.125.59.215.249][14571] + not-detected: [...612] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][59384] [Unknown][Unrated] + idle: [...612] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][59384] + not-detected: [...725] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][.9070] [Unknown][Unrated] + idle: [...725] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][.9070] + idle: [...261] [ip4][..udp] [......10.0.2.15][28681] -> [..60.241.48.194][21301] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...667] [ip4][..udp] [......10.0.2.15][28681] -> [.159.196.95.223][.2003] [Unknown][Unrated] + idle: [...667] [ip4][..udp] [......10.0.2.15][28681] -> [.159.196.95.223][.2003] + not-detected: [...645] [ip4][..udp] [......10.0.2.15][28681] -> [...173.22.22.94][34245] [Unknown][Unrated] + idle: [...645] [ip4][..udp] [......10.0.2.15][28681] -> [...173.22.22.94][34245] + not-detected: [...649] [ip4][..udp] [......10.0.2.15][28681] -> [180.218.135.222][.4548] [Unknown][Unrated] + idle: [...649] [ip4][..udp] [......10.0.2.15][28681] -> [180.218.135.222][.4548] + idle: [...313] [ip4][..udp] [......10.0.2.15][28681] -> [..176.99.176.20][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...579] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.170.108][23458] [Unknown][Unrated] + idle: [...579] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.170.108][23458] + not-detected: [...678] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][.9128] [Unknown][Unrated] + idle: [...678] [ip4][..udp] [......10.0.2.15][28681] -> [....223.16.83.5][.9128] + not-detected: [...707] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.1968] [Unknown][Unrated] + idle: [...707] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.1968] + not-detected: [...655] [ip4][..udp] [......10.0.2.15][28681] -> [.84.118.116.198][44616] [Unknown][Unrated] + idle: [...655] [ip4][..udp] [......10.0.2.15][28681] -> [.84.118.116.198][44616] + not-detected: [...726] [ip4][..udp] [......10.0.2.15][28681] -> [..219.91.30.216][61635] [Unknown][Unrated] + idle: [...726] [ip4][..udp] [......10.0.2.15][28681] -> [..219.91.30.216][61635] + idle: [...319] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][55302] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...302] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][53489] [Unknown][Unrated] + idle: [...302] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][53489] + not-detected: [...669] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][64731] [Unknown][Unrated] + idle: [...669] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][64731] + idle: [...255] [ip4][..udp] [......10.0.2.15][28681] -> [..80.61.221.246][30577] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...742] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.4364] [Unknown][Unrated] + idle: [...742] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.4364] + not-detected: [...697] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][55050] [Unknown][Unrated] + idle: [...697] [ip4][..udp] [......10.0.2.15][28681] -> [188.165.203.190][55050] + not-detected: [...585] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][35004] [Unknown][Unrated] + idle: [...585] [ip4][..udp] [......10.0.2.15][28681] -> [..51.68.153.214][35004] + not-detected: [...502] [ip4][..udp] [......10.0.2.15][28681] -> [..47.156.58.211][.6346] [Unknown][Unrated] + idle: [...502] [ip4][..udp] [......10.0.2.15][28681] -> [..47.156.58.211][.6346] + not-detected: [...507] [ip4][..udp] [......10.0.2.15][28681] -> [...50.4.204.220][.6346] [Unknown][Unrated] + idle: [...507] [ip4][..udp] [......10.0.2.15][28681] -> [...50.4.204.220][.6346] + not-detected: [...687] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][13965] [Unknown][Unrated] + idle: [...687] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][13965] + not-detected: [...663] [ip4][..udp] [......10.0.2.15][28681] -> [..96.59.117.166][33192] [Unknown][Unrated] + idle: [...663] [ip4][..udp] [......10.0.2.15][28681] -> [..96.59.117.166][33192] + not-detected: [...602] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][53658] [Unknown][Unrated] + idle: [...602] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][53658] + not-detected: [...589] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][52647] [Unknown][Unrated] + idle: [...589] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][52647] + not-detected: [...654] [ip4][..udp] [......10.0.2.15][28681] -> [....82.12.1.136][.6348] [Unknown][Unrated] + idle: [...654] [ip4][..udp] [......10.0.2.15][28681] -> [....82.12.1.136][.6348] + not-detected: [...458] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.228.167][12201] [Unknown][Unrated] + idle: [...458] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.228.167][12201] + not-detected: [...525] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][52660] [Unknown][Unrated] + idle: [...525] [ip4][..udp] [......10.0.2.15][28681] -> [.113.255.250.32][52660] + not-detected: [...611] [ip4][..udp] [......10.0.2.15][28681] -> [..61.10.174.159][.4841] [Unknown][Unrated] + idle: [...611] [ip4][..udp] [......10.0.2.15][28681] -> [..61.10.174.159][.4841] + idle: [...248] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][12012] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...512] [ip4][..udp] [......10.0.2.15][28681] -> [..209.204.207.5][49256] [Unknown][Unrated] + idle: [...512] [ip4][..udp] [......10.0.2.15][28681] -> [..209.204.207.5][49256] + not-detected: [...735] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.91.201][.4297] [Unknown][Unrated] + idle: [...735] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.91.201][.4297] + not-detected: [...628] [ip4][..udp] [......10.0.2.15][28681] -> [..73.62.225.181][46843] [Unknown][Unrated] + idle: [...628] [ip4][..udp] [......10.0.2.15][28681] -> [..73.62.225.181][46843] + not-detected: [...380] [ip4][..udp] [......10.0.2.15][28681] -> [...83.86.49.195][12019] [Unknown][Unrated] + idle: [...380] [ip4][..udp] [......10.0.2.15][28681] -> [...83.86.49.195][12019] + not-detected: [...703] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10728] [Unknown][Unrated] + idle: [...703] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10728] + not-detected: [...651] [ip4][..udp] [......10.0.2.15][28681] -> [..114.47.227.91][58856] [Unknown][Unrated] + idle: [...651] [ip4][..udp] [......10.0.2.15][28681] -> [..114.47.227.91][58856] + not-detected: [...581] [ip4][..udp] [......10.0.2.15][28681] -> [..58.115.108.10][.4641] [Unknown][Unrated] + idle: [...581] [ip4][..udp] [......10.0.2.15][28681] -> [..58.115.108.10][.4641] + not-detected: [...613] [ip4][..udp] [......10.0.2.15][28681] -> [.106.104.88.139][.7423] [Unknown][Unrated] + idle: [...613] [ip4][..udp] [......10.0.2.15][28681] -> [.106.104.88.139][.7423] + not-detected: [...583] [ip4][..udp] [......10.0.2.15][28681] -> [...87.75.180.80][35361] [Unknown][Unrated] + idle: [...583] [ip4][..udp] [......10.0.2.15][28681] -> [...87.75.180.80][35361] + not-detected: [...672] [ip4][..udp] [......10.0.2.15][28681] -> [180.218.135.222][49867] [Unknown][Unrated] + idle: [...672] [ip4][..udp] [......10.0.2.15][28681] -> [180.218.135.222][49867] + not-detected: [...574] [ip4][..udp] [......10.0.2.15][28681] -> [..223.17.132.18][23458] [Unknown][Unrated] + idle: [...574] [ip4][..udp] [......10.0.2.15][28681] -> [..223.17.132.18][23458] + not-detected: [...679] [ip4][..udp] [......10.0.2.15][28681] -> [150.116.225.105][51438] [Unknown][Unrated] + idle: [...679] [ip4][..udp] [......10.0.2.15][28681] -> [150.116.225.105][51438] + not-detected: [...518] [ip4][..udp] [......10.0.2.15][28681] -> [..202.151.63.59][.7624] [Unknown][Unrated] + idle: [...518] [ip4][..udp] [......10.0.2.15][28681] -> [..202.151.63.59][.7624] + not-detected: [...716] [ip4][..udp] [......10.0.2.15][28681] -> [...219.71.72.88][58808] [Unknown][Unrated] + idle: [...716] [ip4][..udp] [......10.0.2.15][28681] -> [...219.71.72.88][58808] + not-detected: [...660] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10791] [Unknown][Unrated] + idle: [...660] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10791] + not-detected: [...457] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.240.113][13867] [Unknown][Unrated] + idle: [...457] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.240.113][13867] + not-detected: [...564] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53144] [Unknown][Unrated] + idle: [...564] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53144] + not-detected: [...648] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][58290] [Unknown][Unrated] + idle: [...648] [ip4][..udp] [......10.0.2.15][28681] -> [..61.18.212.223][58290] + not-detected: [...700] [ip4][..udp] [......10.0.2.15][28681] -> [..77.222.213.44][26536] [Unknown][Unrated] + idle: [...700] [ip4][..udp] [......10.0.2.15][28681] -> [..77.222.213.44][26536] + not-detected: [...652] [ip4][..udp] [......10.0.2.15][28681] -> [....1.64.156.63][65023] [Unknown][Unrated] + idle: [...652] [ip4][..udp] [......10.0.2.15][28681] -> [....1.64.156.63][65023] + not-detected: [...659] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.8075] [Unknown][Unrated] + idle: [...659] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.8075] + not-detected: [...713] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][59978] [Unknown][Unrated] + idle: [...713] [ip4][..udp] [......10.0.2.15][28681] -> [.185.187.74.173][59978] + not-detected: [...658] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53195] [Unknown][Unrated] + idle: [...658] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53195] + idle: [...364] [ip4][..udp] [......10.0.2.15][28681] -> [194.163.180.126][10825] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...576] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][42925] [Unknown][Unrated] + idle: [...576] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][42925] + not-detected: [...570] [ip4][..udp] [......10.0.2.15][28681] -> [..97.83.183.148][.8890] [Unknown][Unrated] + idle: [...570] [ip4][..udp] [......10.0.2.15][28681] -> [..97.83.183.148][.8890] + not-detected: [...681] [ip4][..udp] [......10.0.2.15][28681] -> [.61.227.198.100][.6910] [Unknown][Unrated] + idle: [...681] [ip4][..udp] [......10.0.2.15][28681] -> [.61.227.198.100][.6910] + not-detected: [...500] [ip4][..udp] [......10.0.2.15][28681] -> [.220.143.34.225][20071] [Unknown][Unrated] + idle: [...500] [ip4][..udp] [......10.0.2.15][28681] -> [.220.143.34.225][20071] + not-detected: [...566] [ip4][..udp] [......10.0.2.15][28681] -> [...58.176.62.40][52755] [Unknown][Unrated] + idle: [...566] [ip4][..udp] [......10.0.2.15][28681] -> [...58.176.62.40][52755] + not-detected: [...514] [ip4][..udp] [......10.0.2.15][28681] -> [..83.114.40.175][23552] [Unknown][Unrated] + idle: [...514] [ip4][..udp] [......10.0.2.15][28681] -> [..83.114.40.175][23552] + not-detected: [...599] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][59875] [Unknown][Unrated] + idle: [...599] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][59875] + not-detected: [...517] [ip4][..udp] [......10.0.2.15][28681] -> [..36.239.162.27][.7986] [Unknown][Unrated] + idle: [...517] [ip4][..udp] [......10.0.2.15][28681] -> [..36.239.162.27][.7986] + not-detected: [...519] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.48.23][.8070] [Unknown][Unrated] + idle: [...519] [ip4][..udp] [......10.0.2.15][28681] -> [...219.70.48.23][.8070] + not-detected: [...601] [ip4][..udp] [......10.0.2.15][28681] -> [113.255.200.161][65274] [Unknown][Unrated] + idle: [...601] [ip4][..udp] [......10.0.2.15][28681] -> [113.255.200.161][65274] + idle: [...253] [ip4][..udp] [......10.0.2.15][28681] -> [.193.37.255.130][61616] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...639] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.242.225][15068] [Unknown][Unrated] + idle: [...639] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.242.225][15068] + not-detected: [...463] [ip4][..udp] [......10.0.2.15][28681] -> [..200.7.155.210][28365] [Unknown][Unrated] + idle: [...463] [ip4][..udp] [......10.0.2.15][28681] -> [..200.7.155.210][28365] + not-detected: [...727] [ip4][..udp] [......10.0.2.15][28681] -> [....1.171.82.65][50072] [Unknown][Unrated] + idle: [...727] [ip4][..udp] [......10.0.2.15][28681] -> [....1.171.82.65][50072] + not-detected: [...452] [ip4][..udp] [......10.0.2.15][28681] -> [..68.227.193.37][27481] [Unknown][Unrated] + idle: [...452] [ip4][..udp] [......10.0.2.15][28681] -> [..68.227.193.37][27481] + not-detected: [...609] [ip4][..udp] [......10.0.2.15][28681] -> [...1.163.14.246][23461] [Unknown][Unrated] + idle: [...609] [ip4][..udp] [......10.0.2.15][28681] -> [...1.163.14.246][23461] + not-detected: [...737] [ip4][..udp] [......10.0.2.15][28681] -> [118.166.252.163][14391] [Unknown][Unrated] + idle: [...737] [ip4][..udp] [......10.0.2.15][28681] -> [118.166.252.163][14391] + not-detected: [...448] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][15677] [Unknown][Unrated] + idle: [...448] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][15677] + not-detected: [...549] [ip4][..udp] [......10.0.2.15][28681] -> [..84.211.151.48][11105] [Unknown][Unrated] + idle: [...549] [ip4][..udp] [......10.0.2.15][28681] -> [..84.211.151.48][11105] + not-detected: [...459] [ip4][..udp] [......10.0.2.15][28681] -> [...100.89.84.59][11603] [Unknown][Unrated] + idle: [...459] [ip4][..udp] [......10.0.2.15][28681] -> [...100.89.84.59][11603] + not-detected: [...626] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][49737] [Unknown][Unrated] + idle: [...626] [ip4][..udp] [......10.0.2.15][28681] -> [113.252.206.254][49737] + not-detected: [...580] [ip4][..udp] [......10.0.2.15][28681] -> [...76.119.55.28][20347] [Unknown][Unrated] + idle: [...580] [ip4][..udp] [......10.0.2.15][28681] -> [...76.119.55.28][20347] + idle: [...339] [ip4][..udp] [......10.0.2.15][28681] -> [..87.123.54.234][54130] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...625] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57492] [Unknown][Unrated] + idle: [...625] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57492] + not-detected: [...567] [ip4][..udp] [......10.0.2.15][28681] -> [...58.176.62.40][52889] [Unknown][Unrated] + idle: [...567] [ip4][..udp] [......10.0.2.15][28681] -> [...58.176.62.40][52889] + not-detected: [...685] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][54436] [Unknown][Unrated] + idle: [...685] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][54436] + not-detected: [...744] [ip4][..udp] [......10.0.2.15][28681] -> [...27.94.154.53][.6346] [Unknown][Unrated] + idle: [...744] [ip4][..udp] [......10.0.2.15][28681] -> [...27.94.154.53][.6346] + idle: [...316] [ip4][..udp] [......10.0.2.15][28681] -> [....94.54.66.82][63637] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...731] [ip4][..udp] [......10.0.2.15][28681] -> [124.217.188.105][62849] [Unknown][Unrated] + idle: [...731] [ip4][..udp] [......10.0.2.15][28681] -> [124.217.188.105][62849] + not-detected: [...711] [ip4][..udp] [......10.0.2.15][28681] -> [113.254.140.225][63637] [Unknown][Unrated] + idle: [...711] [ip4][..udp] [......10.0.2.15][28681] -> [113.254.140.225][63637] + not-detected: [...710] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][.3624] [Unknown][Unrated] + idle: [...710] [ip4][..udp] [......10.0.2.15][28681] -> [.223.16.121.156][.3624] + not-detected: [...688] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][53454] [Unknown][Unrated] + idle: [...688] [ip4][..udp] [......10.0.2.15][28681] -> [..66.30.221.181][53454] + not-detected: [...445] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.153.100][.4509] [Unknown][Unrated] + idle: [...445] [ip4][..udp] [......10.0.2.15][28681] -> [118.165.153.100][.4509] + idle: [...262] [ip4][..udp] [......10.0.2.15][28681] -> [....89.75.52.19][46010] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...510] [ip4][..udp] [......10.0.2.15][28681] -> [...79.94.85.113][.6346] [Unknown][Unrated] + idle: [...510] [ip4][..udp] [......10.0.2.15][28681] -> [...79.94.85.113][.6346] + not-detected: [...653] [ip4][..udp] [......10.0.2.15][28681] -> [..94.139.21.182][50110] [Unknown][Unrated] + idle: [...653] [ip4][..udp] [......10.0.2.15][28681] -> [..94.139.21.182][50110] + not-detected: [...497] [ip4][..udp] [......10.0.2.15][28681] -> [..84.100.76.123][39628] [Unknown][Unrated] + idle: [...497] [ip4][..udp] [......10.0.2.15][28681] -> [..84.100.76.123][39628] + not-detected: [...569] [ip4][..udp] [......10.0.2.15][28681] -> [....73.89.249.8][50649] [Unknown][Unrated] + idle: [...569] [ip4][..udp] [......10.0.2.15][28681] -> [....73.89.249.8][50649] + not-detected: [...393] [ip4][..udp] [......10.0.2.15][28681] -> [.58.115.158.103][.5110] [Unknown][Unrated] + idle: [...393] [ip4][..udp] [......10.0.2.15][28681] -> [.58.115.158.103][.5110] + not-detected: [...464] [ip4][..udp] [......10.0.2.15][28681] -> [...101.128.66.8][34512] [Unknown][Unrated] + idle: [...464] [ip4][..udp] [......10.0.2.15][28681] -> [...101.128.66.8][34512] + not-detected: [...515] [ip4][..udp] [......10.0.2.15][28681] -> [220.137.106.173][11625] [Unknown][Unrated] + idle: [...515] [ip4][..udp] [......10.0.2.15][28681] -> [220.137.106.173][11625] + not-detected: [...522] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.152.218][51153] [Unknown][Unrated] + idle: [...522] [ip4][..udp] [......10.0.2.15][28681] -> [119.247.152.218][51153] + not-detected: [...480] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.74.26][65498] [Unknown][Unrated] + idle: [...480] [ip4][..udp] [......10.0.2.15][28681] -> [..112.119.74.26][65498] + not-detected: [...382] [ip4][..udp] [......10.0.2.15][28681] -> [..76.175.11.126][40958] [Unknown][Unrated] + idle: [...382] [ip4][..udp] [......10.0.2.15][28681] -> [..76.175.11.126][40958] + not-detected: [...590] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][48380] [Unknown][Unrated] + idle: [...590] [ip4][..udp] [......10.0.2.15][28681] -> [...95.10.205.67][48380] + not-detected: [...462] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][47808] [Unknown][Unrated] + idle: [...462] [ip4][..udp] [......10.0.2.15][28681] -> [..164.132.10.25][47808] + guessed: [...605] [ip4][..udp] [......10.0.2.15][28681] -> [180.149.125.139][.6578] [Tor][VPN][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...605] [ip4][..udp] [......10.0.2.15][28681] -> [180.149.125.139][.6578] + not-detected: [...690] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][.3688] [Unknown][Unrated] + idle: [...690] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][.3688] + not-detected: [...665] [ip4][..udp] [......10.0.2.15][28681] -> [..1.172.183.237][.4983] [Unknown][Unrated] + idle: [...665] [ip4][..udp] [......10.0.2.15][28681] -> [..1.172.183.237][.4983] + not-detected: [...709] [ip4][..udp] [......10.0.2.15][28681] -> [..124.244.68.65][51967] [Unknown][Unrated] + idle: [...709] [ip4][..udp] [......10.0.2.15][28681] -> [..124.244.68.65][51967] + not-detected: [...656] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.2566] [Unknown][Unrated] + idle: [...656] [ip4][..udp] [......10.0.2.15][28681] -> [.119.237.116.22][.2566] + not-detected: [...729] [ip4][..udp] [......10.0.2.15][28681] -> [..112.10.134.44][19739] [Unknown][Unrated] + idle: [...729] [ip4][..udp] [......10.0.2.15][28681] -> [..112.10.134.44][19739] + not-detected: [...548] [ip4][..udp] [......10.0.2.15][28681] -> [..74.50.147.205][17735] [Unknown][Unrated] + idle: [...548] [ip4][..udp] [......10.0.2.15][28681] -> [..74.50.147.205][17735] + not-detected: [...633] [ip4][..udp] [......10.0.2.15][28681] -> [...188.149.2.44][20964] [Unknown][Unrated] + idle: [...633] [ip4][..udp] [......10.0.2.15][28681] -> [...188.149.2.44][20964] + not-detected: [...475] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][63978] [Unknown][Unrated] + idle: [...475] [ip4][..udp] [......10.0.2.15][28681] -> [..188.61.52.183][63978] + not-detected: [...473] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][33564] [Unknown][Unrated] + idle: [...473] [ip4][..udp] [......10.0.2.15][28681] -> [.142.132.165.13][33564] + not-detected: [...575] [ip4][..udp] [......10.0.2.15][28681] -> [.123.202.31.113][19768] [Unknown][Unrated] + idle: [...575] [ip4][..udp] [......10.0.2.15][28681] -> [.123.202.31.113][19768] + not-detected: [...588] [ip4][..udp] [......10.0.2.15][28681] -> [.219.70.175.103][.4315] [Unknown][Unrated] + idle: [...588] [ip4][..udp] [......10.0.2.15][28681] -> [.219.70.175.103][.4315] + not-detected: [...379] [ip4][..udp] [......10.0.2.15][28681] -> [..80.140.63.147][29545] [Unknown][Unrated] + idle: [...379] [ip4][..udp] [......10.0.2.15][28681] -> [..80.140.63.147][29545] + idle: [...367] [ip4][..udp] [......10.0.2.15][28681] -> [.149.28.163.175][49956] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...720] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] [Unknown][Unrated] + idle: [...720] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + not-detected: [...442] [ip4][..udp] [......10.0.2.15][28681] -> [..89.204.130.55][29545] [Unknown][Unrated] + idle: [...442] [ip4][..udp] [......10.0.2.15][28681] -> [..89.204.130.55][29545] + not-detected: [...631] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][.3931] [Unknown][Unrated] + idle: [...631] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][.3931] + not-detected: [...565] [ip4][..udp] [......10.0.2.15][28681] -> [...114.45.40.28][.2656] [Unknown][Unrated] + idle: [...565] [ip4][..udp] [......10.0.2.15][28681] -> [...114.45.40.28][.2656] + not-detected: [...523] [ip4][..udp] [......10.0.2.15][28681] -> [..1.162.138.200][24018] [Unknown][Unrated] + idle: [...523] [ip4][..udp] [......10.0.2.15][28681] -> [..1.162.138.200][24018] + not-detected: [...694] [ip4][..udp] [......10.0.2.15][28681] -> [.98.215.130.156][12405] [Unknown][Unrated] + idle: [...694] [ip4][..udp] [......10.0.2.15][28681] -> [.98.215.130.156][12405] + update: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] + update: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] + update: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] + update: [....88] [ip4][..udp] [......10.0.2.15][28681] -> [.....81.50.24.2][17874] + update: [.....8] [ip4][....2] [......10.0.2.15] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + update: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] + update: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] + update: [....98] [ip4][..udp] [......10.0.2.15][28681] -> [.203.222.14.170][23332] + update: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] + update: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] + update: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] + update: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] + update: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] + update: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] + update: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] + update: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] + update: [...124] [ip4][..udp] [......10.0.2.15][28681] -> [...170.254.19.6][24180] + update: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] + update: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] + update: [...755] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] + update: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] + update: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] + update: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] + update: [...756] [ip4][..udp] [......10.0.2.15][28681] -> [..41.100.68.255][12838] + update: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] + update: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] + update: [...544] [ip4][..udp] [......10.0.2.15][28681] -> [..111.184.29.35][30582] + update: [...533] [ip4][..udp] [......10.0.2.15][28681] -> [..36.229.185.60][.6898] + update: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] + update: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] + update: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] + update: [...553] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3259] + update: [...352] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.6346] + update: [...195] [ip4][..udp] [......10.0.2.15][28681] -> [.177.231.151.16][.6346] + update: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] + update: [...546] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49867] + update: [...531] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51497] + update: [...534] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54436] + update: [...760] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [...562] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][59879] + update: [...542] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51675] + update: [...191] [ip4][..udp] [......10.0.2.15][28681] -> [.190.153.143.54][65535] + update: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] + update: [...551] [ip4][..udp] [......10.0.2.15][28681] -> [..92.24.129.230][14766] + update: [...555] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][20387] + update: [...573] [ip4][..udp] [......10.0.2.15][28681] -> [..71.239.173.18][23327] + update: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] + update: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] + update: [...538] [ip4][..udp] [......10.0.2.15][28681] -> [.124.218.41.253][14339] + update: [...536] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.222.160][56121] + update: [...558] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6466] + update: [...556] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49787] + update: [...560] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53883] + update: [...503] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + update: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] + update: [...559] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][55080] + update: [...764] [ip4][..udp] [......10.0.2.15][28681] -> [.208.92.106.151][32476] + update: [...529] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][57929] + update: [...539] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.7510] + update: [...545] [ip4][..udp] [......10.0.2.15][28681] -> [..116.49.159.77][55915] + update: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] + update: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] + update: [...664] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6594] + update: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] + update: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] + update: [...159] [ip4][..udp] [......10.0.2.15][28681] -> [176.163.231.160][.6346] + update: [...554] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][55577] + update: [...528] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][58442] + update: [...537] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2034] + update: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] + update: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] + update: [...535] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10655] + update: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] + update: [...532] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10677] + update: [...696] [ip4][..udp] [......10.0.2.15][28681] -> [..76.189.72.230][.8161] + update: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] + update: [...762] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] + update: [...552] [ip4][..udp] [......10.0.2.15][28681] -> [...218.250.6.59][60012] + update: [...543] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.159.60][56896] + update: [...161] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] + update: [...557] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53163] + update: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] + update: [...200] [ip4][..udp] [......10.0.2.15][28681] -> [.138.199.16.123][52993] + update: [...561] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57466] + update: [...763] [ip4][..udp] [......10.0.2.15][28681] -> [.85.170.209.214][46210] + update: [...541] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][11141] + update: [...547] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][43316] + update: [...530] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.248.220][59304] + update: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] + update: [...761] [ip4][..udp] [......10.0.2.15][28681] -> [..195.132.75.56][56009] + update: [...540] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52131] + new: [...765] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] + new: [...766] [ip4][..udp] [......10.0.2.15][28681] -> [...76.119.55.28][20347] + new: [...767] [ip4][..udp] [......10.0.2.15][28681] -> [....45.65.87.24][16201] + new: [...768] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + new: [...769] [ip4][..udp] [......10.0.2.15][28681] -> [.123.110.61.169][11973] + new: [...770] [ip4][..udp] [......10.0.2.15][28681] -> [..97.83.183.148][.8890] + new: [...771] [ip4][..udp] [......10.0.2.15][28681] -> [...202.27.193.6][.6346] + new: [...772] [ip4][..udp] [......10.0.2.15][28681] -> [.73.192.231.237][.9676] + new: [...773] [ip4][..udp] [......10.0.2.15][28681] -> [...86.153.21.93][36696] + new: [...774] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6599] + new: [...775] [ip4][..udp] [......10.0.2.15][28681] -> [..223.17.132.18][23458] + new: [...776] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.10.83][.8797] + new: [...777] [ip4][..udp] [......10.0.2.15][28681] -> [.124.244.211.43][23459] + new: [...778] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][.9010] + new: [...779] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][18381] + new: [...780] [ip4][..udp] [......10.0.2.15][28681] -> [...68.66.94.132][17735] + new: [...781] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][23458] + new: [...782] [ip4][..udp] [......10.0.2.15][28681] -> [.65.182.231.232][.7890] + new: [...783] [ip4][.icmp] [.65.182.231.232] -> [......10.0.2.15] + detected: [...783] [ip4][.icmp] [.65.182.231.232] -> [......10.0.2.15] [ICMP][Network][Acceptable] + new: [...784] [ip4][..udp] [......10.0.2.15][28681] -> [..23.19.141.110][.6346] + new: [...785] [ip4][..udp] [......10.0.2.15][28681] -> [.176.134.139.39][.6346] + new: [...786] [ip4][..udp] [......10.0.2.15][28681] -> [....114.38.9.82][24223] + new: [...787] [ip4][..udp] [......10.0.2.15][28681] -> [220.133.122.217][23458] + new: [...788] [ip4][..udp] [......10.0.2.15][28681] -> [.220.134.167.82][.5820] + new: [...789] [ip4][..udp] [......10.0.2.15][28681] -> [..42.98.115.128][23458] + new: [...790] [ip4][..udp] [......10.0.2.15][28681] -> [.218.164.39.233][20855] + new: [...791] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + new: [...792] [ip4][..udp] [......10.0.2.15][28681] -> [.36.239.213.146][21750] + new: [...793] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + not-detected: [....88] [ip4][..udp] [......10.0.2.15][28681] -> [.....81.50.24.2][17874] [Unknown][Unrated] + idle: [....88] [ip4][..udp] [......10.0.2.15][28681] -> [.....81.50.24.2][17874] + not-detected: [...159] [ip4][..udp] [......10.0.2.15][28681] -> [176.163.231.160][.6346] [Unknown][Unrated] + idle: [...159] [ip4][..udp] [......10.0.2.15][28681] -> [176.163.231.160][.6346] + not-detected: [...753] [ip4][..udp] [......10.0.2.15][28681] -> [..165.84.140.96][14400] [Unknown][Unrated] + idle: [...753] [ip4][..udp] [......10.0.2.15][28681] -> [..165.84.140.96][14400] + not-detected: [...124] [ip4][..udp] [......10.0.2.15][28681] -> [...170.254.19.6][24180] [Unknown][Unrated] + idle: [...124] [ip4][..udp] [......10.0.2.15][28681] -> [...170.254.19.6][24180] + not-detected: [...161] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] [Unknown][Unrated] + idle: [...161] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] + update: [...259] [ip4][..udp] [......10.0.2.15][28681] -> [103.232.107.100][43508] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...757] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...383] [ip4][..udp] [......10.0.2.15][28681] -> [...84.71.243.60][34498] + update: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...544] [ip4][..udp] [......10.0.2.15][28681] -> [..111.184.29.35][30582] [Unknown][Unrated] + idle: [...544] [ip4][..udp] [......10.0.2.15][28681] -> [..111.184.29.35][30582] + not-detected: [...533] [ip4][..udp] [......10.0.2.15][28681] -> [..36.229.185.60][.6898] [Unknown][Unrated] + idle: [...533] [ip4][..udp] [......10.0.2.15][28681] -> [..36.229.185.60][.6898] + not-detected: [...553] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3259] [Unknown][Unrated] + idle: [...553] [ip4][..udp] [......10.0.2.15][28681] -> [182.155.128.228][.3259] + not-detected: [...546] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49867] [Unknown][Unrated] + idle: [...546] [ip4][..udp] [......10.0.2.15][28681] -> [.38.142.119.234][49867] + not-detected: [...531] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51497] [Unknown][Unrated] + idle: [...531] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51497] + not-detected: [...534] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54436] [Unknown][Unrated] + idle: [...534] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][54436] + not-detected: [...562] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][59879] [Unknown][Unrated] + idle: [...562] [ip4][..udp] [......10.0.2.15][28681] -> [112.119.242.110][59879] + not-detected: [...542] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51675] [Unknown][Unrated] + idle: [...542] [ip4][..udp] [......10.0.2.15][28681] -> [..218.103.139.2][51675] + not-detected: [...551] [ip4][..udp] [......10.0.2.15][28681] -> [..92.24.129.230][14766] [Unknown][Unrated] + idle: [...551] [ip4][..udp] [......10.0.2.15][28681] -> [..92.24.129.230][14766] + not-detected: [...555] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][20387] [Unknown][Unrated] + idle: [...555] [ip4][..udp] [......10.0.2.15][28681] -> [..124.218.26.16][20387] + idle: [...259] [ip4][..udp] [......10.0.2.15][28681] -> [103.232.107.100][43508] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...538] [ip4][..udp] [......10.0.2.15][28681] -> [.124.218.41.253][14339] [Unknown][Unrated] + idle: [...538] [ip4][..udp] [......10.0.2.15][28681] -> [.124.218.41.253][14339] + not-detected: [...536] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.222.160][56121] [Unknown][Unrated] + idle: [...536] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.222.160][56121] + not-detected: [...558] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6466] [Unknown][Unrated] + idle: [...558] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][.6466] + not-detected: [...556] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49787] [Unknown][Unrated] + idle: [...556] [ip4][..udp] [......10.0.2.15][28681] -> [...59.104.173.5][49787] + not-detected: [...560] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53883] [Unknown][Unrated] + idle: [...560] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][53883] + not-detected: [...559] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][55080] [Unknown][Unrated] + idle: [...559] [ip4][..udp] [......10.0.2.15][28681] -> [.113.252.86.162][55080] + not-detected: [...529] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][57929] [Unknown][Unrated] + idle: [...529] [ip4][..udp] [......10.0.2.15][28681] -> [116.241.162.162][57929] + not-detected: [...539] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.7510] [Unknown][Unrated] + idle: [...539] [ip4][..udp] [......10.0.2.15][28681] -> [.119.14.143.237][.7510] + not-detected: [...545] [ip4][..udp] [......10.0.2.15][28681] -> [..116.49.159.77][55915] [Unknown][Unrated] + idle: [...545] [ip4][..udp] [......10.0.2.15][28681] -> [..116.49.159.77][55915] + not-detected: [...664] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6594] [Unknown][Unrated] + idle: [...664] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.163][.6594] + not-detected: [...554] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][55577] [Unknown][Unrated] + idle: [...554] [ip4][..udp] [......10.0.2.15][28681] -> [.123.203.72.224][55577] + not-detected: [...528] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][58442] [Unknown][Unrated] + idle: [...528] [ip4][..udp] [......10.0.2.15][28681] -> [..118.168.15.71][58442] + not-detected: [...537] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2034] [Unknown][Unrated] + idle: [...537] [ip4][..udp] [......10.0.2.15][28681] -> [218.164.200.235][.2034] + not-detected: [...535] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10655] [Unknown][Unrated] + idle: [...535] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10655] + not-detected: [...532] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10677] [Unknown][Unrated] + idle: [...532] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][10677] + not-detected: [...696] [ip4][..udp] [......10.0.2.15][28681] -> [..76.189.72.230][.8161] [Unknown][Unrated] + idle: [...696] [ip4][..udp] [......10.0.2.15][28681] -> [..76.189.72.230][.8161] + not-detected: [...552] [ip4][..udp] [......10.0.2.15][28681] -> [...218.250.6.59][60012] [Unknown][Unrated] + idle: [...552] [ip4][..udp] [......10.0.2.15][28681] -> [...218.250.6.59][60012] + not-detected: [...543] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.159.60][56896] [Unknown][Unrated] + idle: [...543] [ip4][..udp] [......10.0.2.15][28681] -> [..114.39.159.60][56896] + not-detected: [...557] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53163] [Unknown][Unrated] + idle: [...557] [ip4][..udp] [......10.0.2.15][28681] -> [..61.222.160.99][53163] + not-detected: [...561] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57466] [Unknown][Unrated] + idle: [...561] [ip4][..udp] [......10.0.2.15][28681] -> [.61.238.173.128][57466] + not-detected: [...541] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][11141] [Unknown][Unrated] + idle: [...541] [ip4][..udp] [......10.0.2.15][28681] -> [...114.27.24.95][11141] + not-detected: [...547] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][43316] [Unknown][Unrated] + idle: [...547] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][43316] + not-detected: [...530] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.248.220][59304] [Unknown][Unrated] + idle: [...530] [ip4][..udp] [......10.0.2.15][28681] -> [118.167.248.220][59304] + not-detected: [...540] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52131] [Unknown][Unrated] + idle: [...540] [ip4][..udp] [......10.0.2.15][28681] -> [..36.236.203.37][52131] + update: [...754] [ip4][..udp] [......10.0.2.15][28681] -> [..84.125.218.84][17561] + update: [...759] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...758] [ip4][..udp] [......10.0.2.15][50213] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...485] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.209][.6346] + update: [...486] [ip4][..udp] [......10.0.2.15][28681] -> [...88.68.45.203][.6346] + update: [...400] [ip4][..udp] [......10.0.2.15][28681] -> [..129.45.47.167][.6346] + update: [...751] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] + update: [...749] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] + update: [...752] [ip4][..udp] [......10.0.2.15][28681] -> [142.115.218.152][.5900] + update: [...750] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] + new: [...794] [ip4][..udp] [......10.0.2.15][50214] -> [239.255.255.250][.1900] + detected: [...794] [ip4][..udp] [......10.0.2.15][50214] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] + update: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] + update: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] + update: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] + update: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] + update: [....98] [ip4][..udp] [......10.0.2.15][28681] -> [.203.222.14.170][23332] + update: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] + update: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] + update: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] + update: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] + update: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] + update: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] + update: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] + update: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] + update: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] + update: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] + update: [...755] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] + update: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] + update: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] + update: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] + update: [...783] [ip4][.icmp] [.65.182.231.232] -> [......10.0.2.15] [ICMP][Network][Acceptable] + update: [...756] [ip4][..udp] [......10.0.2.15][28681] -> [..41.100.68.255][12838] + update: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] + update: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] + not-detected: [...754] [ip4][..udp] [......10.0.2.15][28681] -> [..84.125.218.84][17561] [Unknown][Unrated] + idle: [...754] [ip4][..udp] [......10.0.2.15][28681] -> [..84.125.218.84][17561] + not-detected: [....98] [ip4][..udp] [......10.0.2.15][28681] -> [.203.222.14.170][23332] [Unknown][Unrated] + idle: [....98] [ip4][..udp] [......10.0.2.15][28681] -> [.203.222.14.170][23332] + not-detected: [...573] [ip4][..udp] [......10.0.2.15][28681] -> [..71.239.173.18][23327] [Unknown][Unrated] + idle: [...573] [ip4][..udp] [......10.0.2.15][28681] -> [..71.239.173.18][23327] + update: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] + update: [...777] [ip4][..udp] [......10.0.2.15][28681] -> [.124.244.211.43][23459] + update: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] + update: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] + update: [...776] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.10.83][.8797] + update: [...767] [ip4][..udp] [......10.0.2.15][28681] -> [....45.65.87.24][16201] + update: [...352] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.6346] + update: [...195] [ip4][..udp] [......10.0.2.15][28681] -> [.177.231.151.16][.6346] + update: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] + update: [...778] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][.9010] + update: [...773] [ip4][..udp] [......10.0.2.15][28681] -> [...86.153.21.93][36696] + update: [...779] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][18381] + update: [...768] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + update: [...765] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] + update: [...760] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [...191] [ip4][..udp] [......10.0.2.15][28681] -> [.190.153.143.54][65535] + update: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] + update: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] + update: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] + update: [...503] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + update: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] + update: [...764] [ip4][..udp] [......10.0.2.15][28681] -> [.208.92.106.151][32476] + update: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] + update: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] + update: [...774] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6599] + update: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] + update: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] + update: [...771] [ip4][..udp] [......10.0.2.15][28681] -> [...202.27.193.6][.6346] + update: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] + update: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] + update: [...781] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][23458] + update: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] + update: [...782] [ip4][..udp] [......10.0.2.15][28681] -> [.65.182.231.232][.7890] + update: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] + update: [...769] [ip4][..udp] [......10.0.2.15][28681] -> [.123.110.61.169][11973] + update: [...762] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] + update: [...775] [ip4][..udp] [......10.0.2.15][28681] -> [..223.17.132.18][23458] + update: [...772] [ip4][..udp] [......10.0.2.15][28681] -> [.73.192.231.237][.9676] + update: [...770] [ip4][..udp] [......10.0.2.15][28681] -> [..97.83.183.148][.8890] + update: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] + update: [...200] [ip4][..udp] [......10.0.2.15][28681] -> [.138.199.16.123][52993] + update: [...766] [ip4][..udp] [......10.0.2.15][28681] -> [...76.119.55.28][20347] + update: [...763] [ip4][..udp] [......10.0.2.15][28681] -> [.85.170.209.214][46210] + update: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] + update: [...780] [ip4][..udp] [......10.0.2.15][28681] -> [...68.66.94.132][17735] + update: [...761] [ip4][..udp] [......10.0.2.15][28681] -> [..195.132.75.56][56009] + not-detected: [...383] [ip4][..udp] [......10.0.2.15][28681] -> [...84.71.243.60][34498] [Unknown][Unrated] + idle: [...383] [ip4][..udp] [......10.0.2.15][28681] -> [...84.71.243.60][34498] + update: [...787] [ip4][..udp] [......10.0.2.15][28681] -> [220.133.122.217][23458] + update: [...793] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + update: [...784] [ip4][..udp] [......10.0.2.15][28681] -> [..23.19.141.110][.6346] + update: [...792] [ip4][..udp] [......10.0.2.15][28681] -> [.36.239.213.146][21750] + update: [...757] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...786] [ip4][..udp] [......10.0.2.15][28681] -> [....114.38.9.82][24223] + update: [...788] [ip4][..udp] [......10.0.2.15][28681] -> [.220.134.167.82][.5820] + update: [...789] [ip4][..udp] [......10.0.2.15][28681] -> [..42.98.115.128][23458] + update: [...790] [ip4][..udp] [......10.0.2.15][28681] -> [.218.164.39.233][20855] + update: [...785] [ip4][..udp] [......10.0.2.15][28681] -> [.176.134.139.39][.6346] + update: [...791] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + update: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...795] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] + new: [...796] [ip4][..udp] [......10.0.2.15][28681] -> [..41.249.63.200][22582] + new: [...797] [ip4][.icmp] [...154.3.42.209] -> [......10.0.2.15] + detected: [...797] [ip4][.icmp] [...154.3.42.209] -> [......10.0.2.15] [ICMP][Network][Acceptable] + not-detected: [...195] [ip4][..udp] [......10.0.2.15][28681] -> [.177.231.151.16][.6346] [Unknown][Unrated] + idle: [...195] [ip4][..udp] [......10.0.2.15][28681] -> [.177.231.151.16][.6346] + not-detected: [...191] [ip4][..udp] [......10.0.2.15][28681] -> [.190.153.143.54][65535] [Unknown][Unrated] + idle: [...191] [ip4][..udp] [......10.0.2.15][28681] -> [.190.153.143.54][65535] + not-detected: [...200] [ip4][..udp] [......10.0.2.15][28681] -> [.138.199.16.123][52993] [Unknown][Unrated] + idle: [...200] [ip4][..udp] [......10.0.2.15][28681] -> [.138.199.16.123][52993] + update: [...759] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...758] [ip4][..udp] [......10.0.2.15][50213] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...485] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.209][.6346] + update: [...486] [ip4][..udp] [......10.0.2.15][28681] -> [...88.68.45.203][.6346] + update: [...400] [ip4][..udp] [......10.0.2.15][28681] -> [..129.45.47.167][.6346] + not-detected: [...400] [ip4][..udp] [......10.0.2.15][28681] -> [..129.45.47.167][.6346] [Unknown][Unrated] + idle: [...400] [ip4][..udp] [......10.0.2.15][28681] -> [..129.45.47.167][.6346] + update: [...751] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] + update: [...749] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] + update: [...752] [ip4][..udp] [......10.0.2.15][28681] -> [142.115.218.152][.5900] + update: [...794] [ip4][..udp] [......10.0.2.15][50214] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...750] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] + update: [...783] [ip4][.icmp] [.65.182.231.232] -> [......10.0.2.15] [ICMP][Network][Acceptable] + idle: [...759] [ip4][..udp] [......10.0.2.15][28681] -> [104.238.172.250][23548] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...757] [ip4][..udp] [......10.0.2.15][28681] -> [.104.156.226.72][53258] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + update: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] + update: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] + update: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] + update: [...777] [ip4][..udp] [......10.0.2.15][28681] -> [.124.244.211.43][23459] + update: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] + update: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] + update: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] + update: [...776] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.10.83][.8797] + update: [...767] [ip4][..udp] [......10.0.2.15][28681] -> [....45.65.87.24][16201] + update: [...352] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.6346] + update: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] + update: [...778] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][.9010] + update: [...773] [ip4][..udp] [......10.0.2.15][28681] -> [...86.153.21.93][36696] + update: [...779] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][18381] + update: [...768] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + update: [...765] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] + update: [...760] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] + update: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] + update: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] + update: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] + update: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] + update: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] + update: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] + update: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] + update: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] + update: [...503] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + update: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] + update: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] + update: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] + update: [...764] [ip4][..udp] [......10.0.2.15][28681] -> [.208.92.106.151][32476] + update: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] + update: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] + update: [...774] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6599] + update: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] + update: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] + update: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] + update: [...771] [ip4][..udp] [......10.0.2.15][28681] -> [...202.27.193.6][.6346] + update: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] + update: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] + update: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] + update: [...781] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][23458] + update: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] + update: [...782] [ip4][..udp] [......10.0.2.15][28681] -> [.65.182.231.232][.7890] + update: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] + update: [...769] [ip4][..udp] [......10.0.2.15][28681] -> [.123.110.61.169][11973] + update: [...762] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] + update: [...775] [ip4][..udp] [......10.0.2.15][28681] -> [..223.17.132.18][23458] + update: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] + update: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] + update: [...755] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] + update: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] + update: [...772] [ip4][..udp] [......10.0.2.15][28681] -> [.73.192.231.237][.9676] + update: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] + update: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] + update: [...770] [ip4][..udp] [......10.0.2.15][28681] -> [..97.83.183.148][.8890] + update: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] + update: [...756] [ip4][..udp] [......10.0.2.15][28681] -> [..41.100.68.255][12838] + update: [...766] [ip4][..udp] [......10.0.2.15][28681] -> [...76.119.55.28][20347] + update: [...763] [ip4][..udp] [......10.0.2.15][28681] -> [.85.170.209.214][46210] + update: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] + update: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] + update: [...780] [ip4][..udp] [......10.0.2.15][28681] -> [...68.66.94.132][17735] + update: [...761] [ip4][..udp] [......10.0.2.15][28681] -> [..195.132.75.56][56009] + update: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] + idle: [...758] [ip4][..udp] [......10.0.2.15][50213] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...787] [ip4][..udp] [......10.0.2.15][28681] -> [220.133.122.217][23458] + update: [...793] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + update: [...797] [ip4][.icmp] [...154.3.42.209] -> [......10.0.2.15] [ICMP][Network][Acceptable] + update: [...784] [ip4][..udp] [......10.0.2.15][28681] -> [..23.19.141.110][.6346] + update: [...792] [ip4][..udp] [......10.0.2.15][28681] -> [.36.239.213.146][21750] + update: [...786] [ip4][..udp] [......10.0.2.15][28681] -> [....114.38.9.82][24223] + update: [...788] [ip4][..udp] [......10.0.2.15][28681] -> [.220.134.167.82][.5820] + update: [...789] [ip4][..udp] [......10.0.2.15][28681] -> [..42.98.115.128][23458] + update: [...790] [ip4][..udp] [......10.0.2.15][28681] -> [.218.164.39.233][20855] + update: [...785] [ip4][..udp] [......10.0.2.15][28681] -> [.176.134.139.39][.6346] + update: [...791] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + update: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [...798] [ip4][..udp] [......10.0.2.15][63962] -> [239.255.255.250][.1900] + detected: [...798] [ip4][..udp] [......10.0.2.15][63962] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [...799] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63958] -> [................................ff02::c][.3702] + detected: [...799] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63958] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + new: [...800] [ip4][..udp] [......10.0.2.15][63957] -> [239.255.255.250][.3702] + detected: [...800] [ip4][..udp] [......10.0.2.15][63957] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + new: [...801] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [...............................ff02::16] + detected: [...801] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + DAEMON-EVENT: [Processed: 7468 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 169 / 801|skipped: 0|!detected: 474|guessed: 6|detection-updates: 5|updates: 2555] + not-detected: [....52] [ip4][..tcp] [......10.0.2.15][50212] -> [...95.17.124.40][.6776] [Unknown][Unrated] + idle: [....52] [ip4][..tcp] [......10.0.2.15][50212] -> [...95.17.124.40][.6776] + not-detected: [...751] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] [Unknown][Unrated] + idle: [...751] [ip4][..udp] [......10.0.2.15][28681] -> [....67.193.8.52][38584] + not-detected: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] [Unknown][Unrated] + idle: [...134] [ip4][..udp] [......10.0.2.15][28681] -> [...78.231.73.14][.6346] + not-detected: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] [Unknown][Unrated] + idle: [...128] [ip4][..udp] [......10.0.2.15][28681] -> [..77.141.219.27][37580] + not-detected: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] [Unknown][Unrated] + idle: [...166] [ip4][..udp] [......10.0.2.15][28681] -> [..90.59.253.186][15555] + not-detected: [...777] [ip4][..udp] [......10.0.2.15][28681] -> [.124.244.211.43][23459] [Unknown][Unrated] + idle: [...777] [ip4][..udp] [......10.0.2.15][28681] -> [.124.244.211.43][23459] + not-detected: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] [Unknown][Unrated] + idle: [...184] [ip4][..udp] [......10.0.2.15][28681] -> [..86.239.62.213][.6346] + not-detected: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] [Unknown][Unrated] + idle: [...183] [ip4][..udp] [......10.0.2.15][28681] -> [..91.172.15.182][37829] + not-detected: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] [Unknown][Unrated] + idle: [...114] [ip4][..udp] [......10.0.2.15][28681] -> [....86.23.75.69][.6346] + not-detected: [...245] [ip4][..tcp] [......10.0.2.15][50289] -> [.74.195.236.249][18557] [Unknown][Unrated] + idle: [...245] [ip4][..tcp] [......10.0.2.15][50289] -> [.74.195.236.249][18557] + idle: [...800] [ip4][..udp] [......10.0.2.15][63957] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + not-detected: [...776] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.10.83][.8797] [Unknown][Unrated] + idle: [...776] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.10.83][.8797] + not-detected: [...227] [ip4][..tcp] [......10.0.2.15][50273] -> [..24.179.18.242][47329] [Unknown][Unrated] + idle: [...227] [ip4][..tcp] [......10.0.2.15][50273] -> [..24.179.18.242][47329] + end: [...276] [ip4][..tcp] [......10.0.2.15][50300] -> [..188.61.52.183][11852] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...767] [ip4][..udp] [......10.0.2.15][28681] -> [....45.65.87.24][16201] [Unknown][Unrated] + idle: [...767] [ip4][..udp] [......10.0.2.15][28681] -> [....45.65.87.24][16201] + not-detected: [...352] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.6346] [Unknown][Unrated] + idle: [...352] [ip4][..udp] [......10.0.2.15][28681] -> [.176.191.49.159][.6346] + not-detected: [....72] [ip4][..tcp] [......10.0.2.15][50231] -> [..76.68.138.207][45079] [Unknown][Unrated] + idle: [....72] [ip4][..tcp] [......10.0.2.15][50231] -> [..76.68.138.207][45079] + not-detected: [...228] [ip4][..tcp] [......10.0.2.15][50274] -> [..68.174.18.115][50679] [Unknown][Unrated] + idle: [...228] [ip4][..tcp] [......10.0.2.15][50274] -> [..68.174.18.115][50679] + not-detected: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] [Unknown][Unrated] + idle: [...219] [ip4][..udp] [......10.0.2.15][28681] -> [...76.30.86.144][53821] + not-detected: [...778] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][.9010] [Unknown][Unrated] + idle: [...778] [ip4][..udp] [......10.0.2.15][28681] -> [.122.117.100.78][.9010] + not-detected: [...773] [ip4][..udp] [......10.0.2.15][28681] -> [...86.153.21.93][36696] [Unknown][Unrated] + idle: [...773] [ip4][..udp] [......10.0.2.15][28681] -> [...86.153.21.93][36696] + idle: [.....8] [ip4][....2] [......10.0.2.15] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + end: [...238] [ip4][..tcp] [......10.0.2.15][50284] -> [.104.156.226.72][53258] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...779] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][18381] [Unknown][Unrated] + idle: [...779] [ip4][..udp] [......10.0.2.15][28681] -> [...1.65.217.224][18381] + not-detected: [...768] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] [Unknown][Unrated] + idle: [...768] [ip4][..udp] [......10.0.2.15][28681] -> [.14.200.255.229][37058] + not-detected: [...765] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] [Unknown][Unrated] + idle: [...765] [ip4][..udp] [......10.0.2.15][28681] -> [213.229.111.224][.4876] + not-detected: [....75] [ip4][..tcp] [......10.0.2.15][50234] -> [...66.189.28.17][16269] [Unknown][Unrated] + idle: [....75] [ip4][..tcp] [......10.0.2.15][50234] -> [...66.189.28.17][16269] + not-detected: [...240] [ip4][..tcp] [......10.0.2.15][50286] -> [.84.118.116.198][44616] [Unknown][Unrated] + idle: [...240] [ip4][..tcp] [......10.0.2.15][50286] -> [.84.118.116.198][44616] + idle: [...760] [ip4][..udp] [......10.0.2.15][..138] -> [.....10.0.2.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [...798] [ip4][..udp] [......10.0.2.15][63962] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + not-detected: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] [Unknown][Unrated] + idle: [...118] [ip4][..udp] [......10.0.2.15][28681] -> [...5.180.62.100][46385] + not-detected: [....74] [ip4][..tcp] [......10.0.2.15][50233] -> [...1.163.14.246][12854] [Unknown][Unrated] + idle: [....74] [ip4][..tcp] [......10.0.2.15][50233] -> [...1.163.14.246][12854] + not-detected: [...152] [ip4][..tcp] [......10.0.2.15][50265] -> [.113.255.250.32][52647] [Unknown][Unrated] + idle: [...152] [ip4][..tcp] [......10.0.2.15][50265] -> [.113.255.250.32][52647] + not-detected: [...796] [ip4][..udp] [......10.0.2.15][28681] -> [..41.249.63.200][22582] [Unknown][Unrated] + idle: [...796] [ip4][..udp] [......10.0.2.15][28681] -> [..41.249.63.200][22582] + not-detected: [...787] [ip4][..udp] [......10.0.2.15][28681] -> [220.133.122.217][23458] [Unknown][Unrated] + idle: [...787] [ip4][..udp] [......10.0.2.15][28681] -> [220.133.122.217][23458] + not-detected: [...233] [ip4][..tcp] [......10.0.2.15][50279] -> [.113.252.91.201][.4297] [Unknown][Unrated] + idle: [...233] [ip4][..tcp] [......10.0.2.15][50279] -> [.113.252.91.201][.4297] + not-detected: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] [Unknown][Unrated] + idle: [...117] [ip4][..udp] [......10.0.2.15][28681] -> [200.120.243.143][.6346] + not-detected: [...793] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] [Unknown][Unrated] + idle: [...793] [ip4][..udp] [......10.0.2.15][28681] -> [123.205.126.102][.5193] + not-detected: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] [Unknown][Unrated] + idle: [...172] [ip4][..udp] [......10.0.2.15][28681] -> [..87.69.142.133][15471] + not-detected: [...749] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] [Unknown][Unrated] + idle: [...749] [ip4][..udp] [......10.0.2.15][28681] -> [.....92.8.59.80][35192] + idle: [...801] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + not-detected: [...123] [ip4][..tcp] [......10.0.2.15][50254] -> [..24.78.134.188][49046] [Unknown][Unrated] + idle: [...123] [ip4][..tcp] [......10.0.2.15][50254] -> [..24.78.134.188][49046] + idle: [...799] [ip6][..udp] [..............fe80::c50d:519f:96a4:e108][63958] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + end: [...333] [ip4][..tcp] [......10.0.2.15][50327] -> [.69.118.162.229][46906] [HTTP.Gnutella][Media][Potentially Dangerous] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address, Unsafe Protocol + not-detected: [....64] [ip4][..tcp] [......10.0.2.15][50223] -> [118.167.248.220][63108] [Unknown][Unrated] + idle: [....64] [ip4][..tcp] [......10.0.2.15][50223] -> [118.167.248.220][63108] + not-detected: [....59] [ip4][..tcp] [......10.0.2.15][50218] -> [..90.103.247.94][59045] [Unknown][Unrated] + idle: [....59] [ip4][..tcp] [......10.0.2.15][50218] -> [..90.103.247.94][59045] + not-detected: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] [Unknown][Unrated] + idle: [...111] [ip4][..udp] [......10.0.2.15][28681] -> [..90.65.141.157][.6346] + not-detected: [....49] [ip4][..tcp] [......10.0.2.15][50209] -> [113.252.206.254][49587] [Unknown][Unrated] + idle: [....49] [ip4][..tcp] [......10.0.2.15][50209] -> [113.252.206.254][49587] + not-detected: [....65] [ip4][..tcp] [......10.0.2.15][50224] -> [...78.125.63.97][.6346] [Unknown][Unrated] + idle: [....65] [ip4][..tcp] [......10.0.2.15][50224] -> [...78.125.63.97][.6346] + not-detected: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] [Unknown][Unrated] + idle: [...187] [ip4][..udp] [......10.0.2.15][28681] -> [....92.88.92.56][21009] + not-detected: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] [Unknown][Unrated] + idle: [...190] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.195.227][.6346] + not-detected: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] [Unknown][Unrated] + idle: [...139] [ip4][..udp] [......10.0.2.15][28681] -> [165.169.226.142][.6346] + not-detected: [....68] [ip4][..tcp] [......10.0.2.15][50227] -> [.111.246.157.94][51175] [Unknown][Unrated] + idle: [....68] [ip4][..tcp] [......10.0.2.15][50227] -> [.111.246.157.94][51175] + not-detected: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] [Unknown][Unrated] + idle: [...141] [ip4][..udp] [......10.0.2.15][28681] -> [..172.97.199.14][.6346] + not-detected: [...752] [ip4][..udp] [......10.0.2.15][28681] -> [142.115.218.152][.5900] [Unknown][Unrated] + idle: [...752] [ip4][..udp] [......10.0.2.15][28681] -> [142.115.218.152][.5900] + not-detected: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] [Unknown][Unrated] + idle: [...126] [ip4][..udp] [......10.0.2.15][28681] -> [..91.69.159.133][28000] + not-detected: [....56] [ip4][..tcp] [......10.0.2.15][50215] -> [.124.244.64.237][.4704] [Unknown][Unrated] + idle: [....56] [ip4][..tcp] [......10.0.2.15][50215] -> [.124.244.64.237][.4704] + not-detected: [....71] [ip4][..tcp] [......10.0.2.15][50230] -> [....73.3.103.37][17296] [Unknown][Unrated] + idle: [....71] [ip4][..tcp] [......10.0.2.15][50230] -> [....73.3.103.37][17296] + not-detected: [...503] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] [Unknown][Unrated] + idle: [...503] [ip4][..udp] [......10.0.2.15][28681] -> [..74.210.244.72][.6346] + not-detected: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] [Unknown][Unrated] + idle: [....85] [ip4][..udp] [......10.0.2.15][28681] -> [..85.138.20.110][.6346] + not-detected: [...244] [ip4][..tcp] [......10.0.2.15][50288] -> [...76.119.55.28][20347] [Unknown][Unrated] + idle: [...244] [ip4][..tcp] [......10.0.2.15][50288] -> [...76.119.55.28][20347] + not-detected: [....47] [ip4][..tcp] [......10.0.2.15][50207] -> [..90.78.171.204][.6346] [Unknown][Unrated] + idle: [....47] [ip4][..tcp] [......10.0.2.15][50207] -> [..90.78.171.204][.6346] + not-detected: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] [Unknown][Unrated] + idle: [...180] [ip4][..udp] [......10.0.2.15][28681] -> [...66.131.24.72][30711] + not-detected: [...281] [ip4][..tcp] [......10.0.2.15][50305] -> [....94.54.66.82][63637] [Unknown][Unrated] + idle: [...281] [ip4][..tcp] [......10.0.2.15][50305] -> [....94.54.66.82][63637] + end: [....93] [ip4][..tcp] [......10.0.2.15][50248] -> [109.214.154.216][.6346] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [....48] [ip4][..tcp] [......10.0.2.15][50208] -> [.119.237.116.22][.8683] [Unknown][Unrated] + idle: [....48] [ip4][..tcp] [......10.0.2.15][50208] -> [.119.237.116.22][.8683] + idle: [...794] [ip4][..udp] [......10.0.2.15][50214] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + not-detected: [...266] [ip4][..tcp] [......10.0.2.15][50290] -> [....73.89.249.8][50649] [Unknown][Unrated] + idle: [...266] [ip4][..tcp] [......10.0.2.15][50290] -> [....73.89.249.8][50649] + idle: [...797] [ip4][.icmp] [...154.3.42.209] -> [......10.0.2.15] [ICMP][Network][Acceptable] + not-detected: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] [Unknown][Unrated] + idle: [...135] [ip4][..udp] [......10.0.2.15][28681] -> [.193.250.99.158][.6346] + not-detected: [....78] [ip4][..tcp] [......10.0.2.15][50237] -> [.88.123.202.175][37910] [Unknown][Unrated] + idle: [....78] [ip4][..tcp] [......10.0.2.15][50237] -> [.88.123.202.175][37910] + not-detected: [...151] [ip4][..tcp] [......10.0.2.15][50264] -> [...95.10.205.67][48380] [Unknown][Unrated] + idle: [...151] [ip4][..tcp] [......10.0.2.15][50264] -> [...95.10.205.67][48380] + not-detected: [...764] [ip4][..udp] [......10.0.2.15][28681] -> [.208.92.106.151][32476] [Unknown][Unrated] + idle: [...764] [ip4][..udp] [......10.0.2.15][28681] -> [.208.92.106.151][32476] + not-detected: [....89] [ip4][..tcp] [......10.0.2.15][50244] -> [..188.61.52.183][63978] [Unknown][Unrated] + idle: [....89] [ip4][..tcp] [......10.0.2.15][50244] -> [..188.61.52.183][63978] + not-detected: [....92] [ip4][..tcp] [......10.0.2.15][50247] -> [..66.30.221.181][51560] [Unknown][Unrated] + idle: [....92] [ip4][..tcp] [......10.0.2.15][50247] -> [..66.30.221.181][51560] + not-detected: [...784] [ip4][..udp] [......10.0.2.15][28681] -> [..23.19.141.110][.6346] [Unknown][Unrated] + idle: [...784] [ip4][..udp] [......10.0.2.15][28681] -> [..23.19.141.110][.6346] + not-detected: [...750] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] [Unknown][Unrated] + idle: [...750] [ip4][..udp] [......10.0.2.15][28681] -> [...78.159.27.22][17563] + not-detected: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] [Unknown][Unrated] + idle: [...156] [ip4][..udp] [......10.0.2.15][28681] -> [..86.244.228.86][10131] + not-detected: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] [Unknown][Unrated] + idle: [...176] [ip4][..udp] [......10.0.2.15][28681] -> [....41.99.164.4][.6346] + not-detected: [...774] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6599] [Unknown][Unrated] + idle: [...774] [ip4][..udp] [......10.0.2.15][28681] -> [..50.58.238.149][.6599] + not-detected: [...268] [ip4][..tcp] [......10.0.2.15][50292] -> [...95.10.205.67][11603] [Unknown][Unrated] + idle: [...268] [ip4][..tcp] [......10.0.2.15][50292] -> [...95.10.205.67][11603] + not-detected: [....84] [ip4][..tcp] [......10.0.2.15][50243] -> [176.138.129.252][27962] [Unknown][Unrated] + idle: [....84] [ip4][..tcp] [......10.0.2.15][50243] -> [176.138.129.252][27962] + not-detected: [...792] [ip4][..udp] [......10.0.2.15][28681] -> [.36.239.213.146][21750] [Unknown][Unrated] + idle: [...792] [ip4][..udp] [......10.0.2.15][28681] -> [.36.239.213.146][21750] + not-detected: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] [Unknown][Unrated] + idle: [...157] [ip4][..udp] [......10.0.2.15][28681] -> [.86.227.162.150][.6346] + not-detected: [...142] [ip4][..tcp] [......10.0.2.15][50255] -> [..36.236.203.37][52165] [Unknown][Unrated] + idle: [...142] [ip4][..tcp] [......10.0.2.15][50255] -> [..36.236.203.37][52165] + not-detected: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] [Unknown][Unrated] + idle: [...209] [ip4][..udp] [......10.0.2.15][28681] -> [..91.179.98.234][.6346] + not-detected: [...241] [ip4][..tcp] [......10.0.2.15][50287] -> [.98.215.130.156][12405] [Unknown][Unrated] + idle: [...241] [ip4][..tcp] [......10.0.2.15][50287] -> [.98.215.130.156][12405] + not-detected: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] [Unknown][Unrated] + idle: [...116] [ip4][..udp] [......10.0.2.15][28681] -> [.124.44.190.145][10170] + not-detected: [...236] [ip4][..tcp] [......10.0.2.15][50282] -> [..221.124.66.33][13060] [Unknown][Unrated] + idle: [...236] [ip4][..tcp] [......10.0.2.15][50282] -> [..221.124.66.33][13060] + not-detected: [...226] [ip4][..tcp] [......10.0.2.15][50272] -> [...1.172.184.48][13298] [Unknown][Unrated] + idle: [...226] [ip4][..tcp] [......10.0.2.15][50272] -> [...1.172.184.48][13298] + not-detected: [...225] [ip4][..tcp] [......10.0.2.15][50271] -> [.218.164.198.27][60202] [Unknown][Unrated] + idle: [...225] [ip4][..tcp] [......10.0.2.15][50271] -> [.218.164.198.27][60202] + not-detected: [...224] [ip4][..tcp] [......10.0.2.15][50270] -> [...114.27.24.95][11427] [Unknown][Unrated] + idle: [...224] [ip4][..tcp] [......10.0.2.15][50270] -> [...114.27.24.95][11427] + not-detected: [...485] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.209][.6346] [Unknown][Unrated] + idle: [...485] [ip4][..udp] [......10.0.2.15][28681] -> [...154.3.42.209][.6346] + not-detected: [...145] [ip4][..tcp] [......10.0.2.15][50258] -> [122.100.216.210][.7097] [Unknown][Unrated] + idle: [...145] [ip4][..tcp] [......10.0.2.15][50258] -> [122.100.216.210][.7097] + not-detected: [...147] [ip4][..tcp] [......10.0.2.15][50260] -> [113.255.200.161][51394] [Unknown][Unrated] + idle: [...147] [ip4][..tcp] [......10.0.2.15][50260] -> [113.255.200.161][51394] + not-detected: [....81] [ip4][..tcp] [......10.0.2.15][50240] -> [..36.237.10.152][21293] [Unknown][Unrated] + idle: [....81] [ip4][..tcp] [......10.0.2.15][50240] -> [..36.237.10.152][21293] + not-detected: [....57] [ip4][..tcp] [......10.0.2.15][50216] -> [182.155.128.228][.3256] [Unknown][Unrated] + idle: [....57] [ip4][..tcp] [......10.0.2.15][50216] -> [182.155.128.228][.3256] + not-detected: [....44] [ip4][..tcp] [......10.0.2.15][50204] -> [..124.218.26.16][.9728] [Unknown][Unrated] + idle: [....44] [ip4][..tcp] [......10.0.2.15][50204] -> [..124.218.26.16][.9728] + not-detected: [...771] [ip4][..udp] [......10.0.2.15][28681] -> [...202.27.193.6][.6346] [Unknown][Unrated] + idle: [...771] [ip4][..udp] [......10.0.2.15][28681] -> [...202.27.193.6][.6346] + not-detected: [...234] [ip4][..tcp] [......10.0.2.15][50280] -> [...99.199.148.6][.4338] [Unknown][Unrated] + idle: [...234] [ip4][..tcp] [......10.0.2.15][50280] -> [...99.199.148.6][.4338] + not-detected: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] [Unknown][Unrated] + idle: [...133] [ip4][..udp] [......10.0.2.15][28681] -> [.91.175.220.161][15721] + not-detected: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] [Unknown][Unrated] + idle: [...167] [ip4][..udp] [......10.0.2.15][28681] -> [..93.29.107.176][20363] + not-detected: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] [Unknown][Unrated] + idle: [...171] [ip4][..udp] [......10.0.2.15][28681] -> [196.217.132.111][25394] + not-detected: [...229] [ip4][..tcp] [......10.0.2.15][50275] -> [.122.117.100.78][.9010] [Unknown][Unrated] + idle: [...229] [ip4][..tcp] [......10.0.2.15][50275] -> [.122.117.100.78][.9010] + not-detected: [...786] [ip4][..udp] [......10.0.2.15][28681] -> [....114.38.9.82][24223] [Unknown][Unrated] + idle: [...786] [ip4][..udp] [......10.0.2.15][28681] -> [....114.38.9.82][24223] + not-detected: [...781] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][23458] [Unknown][Unrated] + idle: [...781] [ip4][..udp] [......10.0.2.15][28681] -> [...112.105.52.2][23458] + not-detected: [...782] [ip4][..udp] [......10.0.2.15][28681] -> [.65.182.231.232][.7890] [Unknown][Unrated] + idle: [...782] [ip4][..udp] [......10.0.2.15][28681] -> [.65.182.231.232][.7890] + not-detected: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] [Unknown][Unrated] + idle: [...160] [ip4][..udp] [......10.0.2.15][28681] -> [...83.150.49.35][32448] + not-detected: [...486] [ip4][..udp] [......10.0.2.15][28681] -> [...88.68.45.203][.6346] [Unknown][Unrated] + idle: [...486] [ip4][..udp] [......10.0.2.15][28681] -> [...88.68.45.203][.6346] + not-detected: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] [Unknown][Unrated] + idle: [...185] [ip4][..udp] [......10.0.2.15][28681] -> [.109.132.196.58][.6346] + not-detected: [....39] [ip4][..tcp] [......10.0.2.15][50200] -> [176.128.217.128][45194] [Unknown][Unrated] + idle: [....39] [ip4][..tcp] [......10.0.2.15][50200] -> [176.128.217.128][45194] + not-detected: [...769] [ip4][..udp] [......10.0.2.15][28681] -> [.123.110.61.169][11973] [Unknown][Unrated] + idle: [...769] [ip4][..udp] [......10.0.2.15][28681] -> [.123.110.61.169][11973] + not-detected: [....53] [ip4][..tcp] [......10.0.2.15][50213] -> [...85.117.153.7][50138] [Unknown][Unrated] + idle: [....53] [ip4][..tcp] [......10.0.2.15][50213] -> [...85.117.153.7][50138] + not-detected: [...762] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] [Unknown][Unrated] + idle: [...762] [ip4][..udp] [......10.0.2.15][28681] -> [...86.75.43.182][43502] + not-detected: [....82] [ip4][..tcp] [......10.0.2.15][50241] -> [..98.18.172.208][63172] [Unknown][Unrated] + idle: [....82] [ip4][..tcp] [......10.0.2.15][50241] -> [..98.18.172.208][63172] + not-detected: [...297] [ip4][..tcp] [......10.0.2.15][50321] -> [213.229.111.224][.4876] [Unknown][Unrated] + idle: [...297] [ip4][..tcp] [......10.0.2.15][50321] -> [213.229.111.224][.4876] + not-detected: [...775] [ip4][..udp] [......10.0.2.15][28681] -> [..223.17.132.18][23458] [Unknown][Unrated] + idle: [...775] [ip4][..udp] [......10.0.2.15][28681] -> [..223.17.132.18][23458] + not-detected: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] [Unknown][Unrated] + idle: [...130] [ip4][..udp] [......10.0.2.15][28681] -> [..119.224.95.97][46356] + not-detected: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] [Unknown][Unrated] + idle: [...129] [ip4][..udp] [......10.0.2.15][28681] -> [.176.138.50.179][29411] + not-detected: [...788] [ip4][..udp] [......10.0.2.15][28681] -> [.220.134.167.82][.5820] [Unknown][Unrated] + idle: [...788] [ip4][..udp] [......10.0.2.15][28681] -> [.220.134.167.82][.5820] + not-detected: [....79] [ip4][..tcp] [......10.0.2.15][50238] -> [.124.218.41.253][59144] [Unknown][Unrated] + idle: [....79] [ip4][..tcp] [......10.0.2.15][50238] -> [.124.218.41.253][59144] + not-detected: [...230] [ip4][..tcp] [......10.0.2.15][50276] -> [.96.246.156.126][56070] [Unknown][Unrated] + idle: [...230] [ip4][..tcp] [......10.0.2.15][50276] -> [.96.246.156.126][56070] + not-detected: [....70] [ip4][..tcp] [......10.0.2.15][50229] -> [....1.36.249.91][64920] [Unknown][Unrated] + idle: [....70] [ip4][..tcp] [......10.0.2.15][50229] -> [....1.36.249.91][64920] + not-detected: [...789] [ip4][..udp] [......10.0.2.15][28681] -> [..42.98.115.128][23458] [Unknown][Unrated] + idle: [...789] [ip4][..udp] [......10.0.2.15][28681] -> [..42.98.115.128][23458] + not-detected: [...795] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] [Unknown][Unrated] + idle: [...795] [ip4][..udp] [......10.0.2.15][28681] -> [..213.120.26.86][29946] + not-detected: [....33] [ip4][..tcp] [......10.0.2.15][50195] -> [162.157.143.201][29762] [Unknown][Unrated] + idle: [....33] [ip4][..tcp] [......10.0.2.15][50195] -> [162.157.143.201][29762] + not-detected: [....91] [ip4][..tcp] [......10.0.2.15][50246] -> [...80.7.252.192][45685] [Unknown][Unrated] + idle: [....91] [ip4][..tcp] [......10.0.2.15][50246] -> [...80.7.252.192][45685] + not-detected: [...755] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] [Unknown][Unrated] + idle: [...755] [ip4][..udp] [......10.0.2.15][28681] -> [..83.134.107.32][38836] + not-detected: [....50] [ip4][..tcp] [......10.0.2.15][50210] -> [..36.234.18.166][61404] [Unknown][Unrated] + idle: [....50] [ip4][..tcp] [......10.0.2.15][50210] -> [..36.234.18.166][61404] + not-detected: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] [Unknown][Unrated] + idle: [...137] [ip4][..udp] [......10.0.2.15][28681] -> [...82.65.70.197][21693] + not-detected: [....45] [ip4][..tcp] [......10.0.2.15][50205] -> [.114.46.139.171][52120] [Unknown][Unrated] + idle: [....45] [ip4][..tcp] [......10.0.2.15][50205] -> [.114.46.139.171][52120] + not-detected: [...772] [ip4][..udp] [......10.0.2.15][28681] -> [.73.192.231.237][.9676] [Unknown][Unrated] + idle: [...772] [ip4][..udp] [......10.0.2.15][28681] -> [.73.192.231.237][.9676] + not-detected: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] [Unknown][Unrated] + idle: [...109] [ip4][..udp] [......10.0.2.15][28681] -> [...88.169.2.153][52414] + not-detected: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] [Unknown][Unrated] + idle: [...140] [ip4][..udp] [......10.0.2.15][28681] -> [.77.197.111.186][.6346] + not-detected: [...770] [ip4][..udp] [......10.0.2.15][28681] -> [..97.83.183.148][.8890] [Unknown][Unrated] + idle: [...770] [ip4][..udp] [......10.0.2.15][28681] -> [..97.83.183.148][.8890] + not-detected: [...235] [ip4][..tcp] [......10.0.2.15][50281] -> [.94.134.154.158][54130] [Unknown][Unrated] + idle: [...235] [ip4][..tcp] [......10.0.2.15][50281] -> [.94.134.154.158][54130] + idle: [...783] [ip4][.icmp] [.65.182.231.232] -> [......10.0.2.15] [ICMP][Network][Acceptable] + not-detected: [....60] [ip4][..tcp] [......10.0.2.15][50219] -> [.193.121.165.12][55376] [Unknown][Unrated] + idle: [....60] [ip4][..tcp] [......10.0.2.15][50219] -> [.193.121.165.12][55376] + end: [...239] [ip4][..tcp] [......10.0.2.15][50285] -> [..75.133.101.93][52367] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + end: [...334] [ip4][..tcp] [......10.0.2.15][50328] -> [..189.147.72.83][26108] [HTTP.Gnutella][Media][Potentially Dangerous] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address, Unsafe Protocol + not-detected: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] [Unknown][Unrated] + idle: [...175] [ip4][..udp] [......10.0.2.15][28681] -> [...115.69.62.99][.6346] + not-detected: [...756] [ip4][..udp] [......10.0.2.15][28681] -> [..41.100.68.255][12838] [Unknown][Unrated] + idle: [...756] [ip4][..udp] [......10.0.2.15][28681] -> [..41.100.68.255][12838] + not-detected: [...790] [ip4][..udp] [......10.0.2.15][28681] -> [.218.164.39.233][20855] [Unknown][Unrated] + idle: [...790] [ip4][..udp] [......10.0.2.15][28681] -> [.218.164.39.233][20855] + not-detected: [....80] [ip4][..tcp] [......10.0.2.15][50239] -> [...112.105.52.2][.6384] [Unknown][Unrated] + idle: [....80] [ip4][..tcp] [......10.0.2.15][50239] -> [...112.105.52.2][.6384] + not-detected: [...232] [ip4][..tcp] [......10.0.2.15][50278] -> [..36.231.59.187][62234] [Unknown][Unrated] + idle: [...232] [ip4][..tcp] [......10.0.2.15][50278] -> [..36.231.59.187][62234] + not-detected: [...766] [ip4][..udp] [......10.0.2.15][28681] -> [...76.119.55.28][20347] [Unknown][Unrated] + idle: [...766] [ip4][..udp] [......10.0.2.15][28681] -> [...76.119.55.28][20347] + not-detected: [...763] [ip4][..udp] [......10.0.2.15][28681] -> [.85.170.209.214][46210] [Unknown][Unrated] + idle: [...763] [ip4][..udp] [......10.0.2.15][28681] -> [.85.170.209.214][46210] + end: [...288] [ip4][..tcp] [......10.0.2.15][50312] -> [104.238.172.250][23548] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...120] [ip4][..tcp] [......10.0.2.15][50251] -> [...24.127.1.235][37814] [Unknown][Unrated] + idle: [...120] [ip4][..tcp] [......10.0.2.15][50251] -> [...24.127.1.235][37814] + not-detected: [...144] [ip4][..tcp] [......10.0.2.15][50257] -> [...219.70.48.23][.3054] [Unknown][Unrated] + idle: [...144] [ip4][..tcp] [......10.0.2.15][50257] -> [...219.70.48.23][.3054] + not-detected: [...286] [ip4][..tcp] [......10.0.2.15][50310] -> [.76.110.153.177][40022] [Unknown][Unrated] + idle: [...286] [ip4][..tcp] [......10.0.2.15][50310] -> [.76.110.153.177][40022] + not-detected: [....40] [ip4][..tcp] [......10.0.2.15][50201] -> [..78.122.93.185][.6346] [Unknown][Unrated] + idle: [....40] [ip4][..tcp] [......10.0.2.15][50201] -> [..78.122.93.185][.6346] + not-detected: [....58] [ip4][..tcp] [......10.0.2.15][50217] -> [.113.252.86.162][54958] [Unknown][Unrated] + idle: [....58] [ip4][..tcp] [......10.0.2.15][50217] -> [.113.252.86.162][54958] + not-detected: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] [Unknown][Unrated] + idle: [...158] [ip4][..udp] [......10.0.2.15][28681] -> [.118.166.226.70][.6346] + not-detected: [....32] [ip4][..tcp] [......10.0.2.15][50194] -> [..92.152.66.153][43771] [Unknown][Unrated] + idle: [....32] [ip4][..tcp] [......10.0.2.15][50194] -> [..92.152.66.153][43771] + not-detected: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] [Unknown][Unrated] + idle: [....87] [ip4][..udp] [......10.0.2.15][28681] -> [..92.131.85.245][31743] + not-detected: [....83] [ip4][..tcp] [......10.0.2.15][50242] -> [109.210.203.131][.6346] [Unknown][Unrated] + idle: [....83] [ip4][..tcp] [......10.0.2.15][50242] -> [109.210.203.131][.6346] + not-detected: [....66] [ip4][..tcp] [......10.0.2.15][50225] -> [.109.210.81.147][24800] [Unknown][Unrated] + idle: [....66] [ip4][..tcp] [......10.0.2.15][50225] -> [.109.210.81.147][24800] + not-detected: [...150] [ip4][..tcp] [......10.0.2.15][50263] -> [..73.182.136.42][27873] [Unknown][Unrated] + idle: [...150] [ip4][..tcp] [......10.0.2.15][50263] -> [..73.182.136.42][27873] + not-detected: [....62] [ip4][..tcp] [......10.0.2.15][50221] -> [...59.104.173.5][49956] [Unknown][Unrated] + idle: [....62] [ip4][..tcp] [......10.0.2.15][50221] -> [...59.104.173.5][49956] + not-detected: [...785] [ip4][..udp] [......10.0.2.15][28681] -> [.176.134.139.39][.6346] [Unknown][Unrated] + idle: [...785] [ip4][..udp] [......10.0.2.15][28681] -> [.176.134.139.39][.6346] + not-detected: [...780] [ip4][..udp] [......10.0.2.15][28681] -> [...68.66.94.132][17735] [Unknown][Unrated] + idle: [...780] [ip4][..udp] [......10.0.2.15][28681] -> [...68.66.94.132][17735] + not-detected: [...761] [ip4][..udp] [......10.0.2.15][28681] -> [..195.132.75.56][56009] [Unknown][Unrated] + idle: [...761] [ip4][..udp] [......10.0.2.15][28681] -> [..195.132.75.56][56009] + not-detected: [....55] [ip4][..tcp] [......10.0.2.15][50214] -> [.80.193.171.146][53808] [Unknown][Unrated] + idle: [....55] [ip4][..tcp] [......10.0.2.15][50214] -> [.80.193.171.146][53808] + not-detected: [...231] [ip4][..tcp] [......10.0.2.15][50277] -> [.82.181.251.218][36368] [Unknown][Unrated] + idle: [...231] [ip4][..tcp] [......10.0.2.15][50277] -> [.82.181.251.218][36368] + not-detected: [...791] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] [Unknown][Unrated] + idle: [...791] [ip4][..udp] [......10.0.2.15][28681] -> [...219.85.11.85][10722] + end: [....94] [ip4][..tcp] [......10.0.2.15][50249] -> [.86.208.180.181][45883] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [...312] [ip4][..udp] [......10.0.2.15][28681] -> [..24.167.201.53][47282] [Gnutella][Download][Potentially Dangerous] + RISK: Unsafe Protocol + not-detected: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] [Unknown][Unrated] + idle: [...138] [ip4][..udp] [......10.0.2.15][28681] -> [167.114.170.156][23844] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/google_ssl.pcap.out b/test/results/flow-info/google_ssl.pcap.out new file mode 100644 index 000000000..52227f3fe --- /dev/null +++ b/test/results/flow-info/google_ssl.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...172.31.3.224][42835] -> [.216.58.212.100][..443] + guessed: [.....1] [ip4][..tcp] [...172.31.3.224][42835] -> [.216.58.212.100][..443] [TLS.Google][Web][Acceptable] + end: [.....1] [ip4][..tcp] [...172.31.3.224][42835] -> [.216.58.212.100][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/googledns_android10.pcap.out b/test/results/flow-info/googledns_android10.pcap.out new file mode 100644 index 000000000..d2e3760b6 --- /dev/null +++ b/test/results/flow-info/googledns_android10.pcap.out @@ -0,0 +1,77 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [........8.8.8.8][..853] -> [..192.168.1.159][55856] [MIDSTREAM] + new: [.....2] [ip4][..tcp] [..192.168.1.159][48044] -> [........8.8.4.4][..853] + new: [.....3] [ip4][..tcp] [..192.168.1.159][56024] -> [........8.8.8.8][..853] + detected: [.....2] [ip4][..tcp] [..192.168.1.159][48044] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detected: [.....3] [ip4][..tcp] [..192.168.1.159][56024] -> [........8.8.8.8][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....2] [ip4][..tcp] [..192.168.1.159][48044] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....2] [ip4][..tcp] [..192.168.1.159][48044] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....3] [ip4][..tcp] [..192.168.1.159][56024] -> [........8.8.8.8][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....3] [ip4][..tcp] [..192.168.1.159][56024] -> [........8.8.8.8][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [.....4] [ip4][..tcp] [..192.168.1.159][48048] -> [........8.8.4.4][..853] + detected: [.....4] [ip4][..tcp] [..192.168.1.159][48048] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....4] [ip4][..tcp] [..192.168.1.159][48048] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....4] [ip4][..tcp] [..192.168.1.159][48048] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [.....4] [ip4][..tcp] [..192.168.1.159][48048] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.447| 0.072| 0.122] + [IAT(c->s)...: 0.000| 0.387| 0.074| 0.114][IAT(s->c)...: 0.000| 0.447| 0.069| 0.128] + [PKTLEN(c->s): 66.000| 225.000| 131.600| 75.000][PKTLEN(s->c): 66.000|1484.000| 432.900| 451.100] + [BINS(c->s)..: 9,0,1,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,0,0,0,0,1,0,1,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0] + new: [.....5] [ip4][.icmp] [..192.168.1.159] -> [........8.8.8.8] + detected: [.....5] [ip4][.icmp] [..192.168.1.159] -> [........8.8.8.8] [ICMP][Network][Acceptable] + new: [.....6] [ip4][..tcp] [........8.8.4.4][..853] -> [..192.168.1.159][47968] [MIDSTREAM] + update: [.....5] [ip4][.icmp] [..192.168.1.159] -> [........8.8.8.8] [ICMP][Network][Acceptable] + new: [.....7] [ip4][..tcp] [..192.168.1.159][48098] -> [........8.8.4.4][..853] + detected: [.....7] [ip4][..tcp] [..192.168.1.159][48098] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....7] [ip4][..tcp] [..192.168.1.159][48098] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [.....7] [ip4][..tcp] [..192.168.1.159][48098] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.254| 0.185| 0.342] + [IAT(c->s)...: 0.001| 1.234| 0.191| 0.338][IAT(s->c)...: 0.000| 1.254| 0.180| 0.345] + [PKTLEN(c->s): 66.000| 583.000| 161.600| 131.200][PKTLEN(s->c): 66.000| 565.000| 262.800| 236.600] + [BINS(c->s)..: 8,1,0,0,6,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,0,0,0,1,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....5] [ip4][.icmp] [..192.168.1.159] -> [........8.8.8.8] [ICMP][Network][Acceptable] + idle: [.....5] [ip4][.icmp] [..192.168.1.159] -> [........8.8.8.8] [ICMP][Network][Acceptable] + guessed: [.....1] [ip4][..tcp] [........8.8.8.8][..853] -> [..192.168.1.159][55856] [DoH_DoT.Google][Web][Acceptable] + end: [.....1] [ip4][..tcp] [........8.8.8.8][..853] -> [..192.168.1.159][55856] + end: [.....3] [ip4][..tcp] [..192.168.1.159][56024] -> [........8.8.8.8][..853] + end: [.....2] [ip4][..tcp] [..192.168.1.159][48044] -> [........8.8.4.4][..853] + guessed: [.....6] [ip4][..tcp] [........8.8.4.4][..853] -> [..192.168.1.159][47968] [DoH_DoT.Google][Web][Acceptable] + end: [.....6] [ip4][..tcp] [........8.8.4.4][..853] -> [..192.168.1.159][47968] + end: [.....4] [ip4][..tcp] [..192.168.1.159][48048] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [.....8] [ip4][..tcp] [..192.168.1.159][48210] -> [........8.8.4.4][..853] + detected: [.....8] [ip4][..tcp] [..192.168.1.159][48210] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....8] [ip4][..tcp] [..192.168.1.159][48210] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....8] [ip4][..tcp] [..192.168.1.159][48210] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [.....8] [ip4][..tcp] [..192.168.1.159][48210] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 5.704| 0.390| 1.388] + [IAT(c->s)...: 0.000| 5.641| 0.402| 1.400][IAT(s->c)...: 0.000| 5.704| 0.378| 1.375] + [PKTLEN(c->s): 66.000| 225.000| 131.600| 75.000][PKTLEN(s->c): 66.000|1484.000| 432.900| 451.100] + [BINS(c->s)..: 9,0,1,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,0,0,0,0,1,0,1,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0] + end: [.....7] [ip4][..tcp] [..192.168.1.159][48098] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....8] [ip4][..tcp] [..192.168.1.159][48210] -> [........8.8.4.4][..853] [TLS.DoH_DoT][Network][Fun] + RISK: TLS (probably) Not Carrying HTTPS + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/gquic.pcap.out b/test/results/flow-info/gquic.pcap.out new file mode 100644 index 000000000..aaa634674 --- /dev/null +++ b/test/results/flow-info/gquic.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.....10.44.5.25][61097] -> [.216.58.213.163][..443] + detected: [.....1] [ip4][..udp] [.....10.44.5.25][61097] -> [.216.58.213.163][..443] [QUIC.Google][Web][Acceptable] + idle: [.....1] [ip4][..udp] [.....10.44.5.25][61097] -> [.216.58.213.163][..443] [QUIC.Google][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/gre_no_options.pcapng.out b/test/results/flow-info/gre_no_options.pcapng.out new file mode 100644 index 000000000..15f493d4d --- /dev/null +++ b/test/results/flow-info/gre_no_options.pcapng.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][...47] [....203.0.113.1] -> [......192.0.2.2] + detected: [.....1] [ip4][...47] [....203.0.113.1] -> [......192.0.2.2] [GRE][Network][Acceptable] + idle: [.....1] [ip4][...47] [....203.0.113.1] -> [......192.0.2.2] [GRE][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/gtp_c.pcap.out b/test/results/flow-info/gtp_c.pcap.out new file mode 100644 index 000000000..2ec4db765 --- /dev/null +++ b/test/results/flow-info/gtp_c.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.....10.101.0.2][.1024] -> [.....10.102.0.2][.2123] + detected: [.....1] [ip4][..udp] [.....10.101.0.2][.1024] -> [.....10.102.0.2][.2123] [GTP.GTP_C][Network][Acceptable] + idle: [.....1] [ip4][..udp] [.....10.101.0.2][.1024] -> [.....10.102.0.2][.2123] [GTP.GTP_C][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/gtp_false_positive.pcapng.out b/test/results/flow-info/gtp_false_positive.pcapng.out new file mode 100644 index 000000000..cf458ada1 --- /dev/null +++ b/test/results/flow-info/gtp_false_positive.pcapng.out @@ -0,0 +1,18 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.....24.1.33.66][29255] -> [..62.56.122.232][.3386] + update: [.....1] [ip4][..udp] [.....24.1.33.66][29255] -> [..62.56.122.232][.3386] + DAEMON-EVENT: [Processed: 5 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 1] + new: [.....2] [ip4][..udp] [...50.7.111.134][17000] -> [103.225.103.159][.2123] + not-detected: [.....1] [ip4][..udp] [.....24.1.33.66][29255] -> [..62.56.122.232][.3386] [Unknown][Unrated] + idle: [.....1] [ip4][..udp] [.....24.1.33.66][29255] -> [..62.56.122.232][.3386] + DAEMON-EVENT: [Processed: 6 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 1|guessed: 0|detection-updates: 0|updates: 1] + new: [.....3] [ip4][..udp] [119.185.190.173][.2123] -> [...66.86.98.114][50140] + guessed: [.....2] [ip4][..udp] [...50.7.111.134][17000] -> [103.225.103.159][.2123] [GTP][Network][Acceptable] + idle: [.....2] [ip4][..udp] [...50.7.111.134][17000] -> [103.225.103.159][.2123] + guessed: [.....3] [ip4][..udp] [119.185.190.173][.2123] -> [...66.86.98.114][50140] [GTP][Network][Acceptable] + idle: [.....3] [ip4][..udp] [119.185.190.173][.2123] -> [...66.86.98.114][50140] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/gtp_prime.pcapng.out b/test/results/flow-info/gtp_prime.pcapng.out new file mode 100644 index 000000000..bd91d147d --- /dev/null +++ b/test/results/flow-info/gtp_prime.pcapng.out @@ -0,0 +1,5 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/h323-overflow.pcap.out b/test/results/flow-info/h323-overflow.pcap.out new file mode 100644 index 000000000..4e28296f9 --- /dev/null +++ b/test/results/flow-info/h323-overflow.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....192.168.1.1][31337] -> [....192.168.1.2][...80] [MIDSTREAM] + guessed: [.....1] [ip4][..tcp] [....192.168.1.1][31337] -> [....192.168.1.2][...80] [HTTP][Web][Acceptable] + idle: [.....1] [ip4][..tcp] [....192.168.1.1][31337] -> [....192.168.1.2][...80] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/h323.pcap.out b/test/results/flow-info/h323.pcap.out new file mode 100644 index 000000000..db1307f95 --- /dev/null +++ b/test/results/flow-info/h323.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.....17.2.0.124][.2034] -> [.....17.2.0.161][.1719] + detected: [.....1] [ip4][..udp] [.....17.2.0.124][.2034] -> [.....17.2.0.161][.1719] [H323][VoIP][Acceptable] + new: [.....2] [ip4][..tcp] [.....17.2.0.124][.3032] -> [.....17.2.0.122][.1720] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [.....17.2.0.124][.3032] -> [.....17.2.0.122][.1720] [H323][VoIP][Acceptable] + idle: [.....1] [ip4][..udp] [.....17.2.0.124][.2034] -> [.....17.2.0.161][.1719] [H323][VoIP][Acceptable] + idle: [.....2] [ip4][..tcp] [.....17.2.0.124][.3032] -> [.....17.2.0.122][.1720] [H323][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/hangout.pcap.out b/test/results/flow-info/hangout.pcap.out new file mode 100644 index 000000000..34c37a222 --- /dev/null +++ b/test/results/flow-info/hangout.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.74.125.134.127][19305] -> [....10.89.61.13][56406] + detected: [.....1] [ip4][..udp] [.74.125.134.127][19305] -> [....10.89.61.13][56406] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....1] [ip4][..udp] [.74.125.134.127][19305] -> [....10.89.61.13][56406] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/hpvirtgrp.pcap.out b/test/results/flow-info/hpvirtgrp.pcap.out new file mode 100644 index 000000000..8b40198d9 --- /dev/null +++ b/test/results/flow-info/hpvirtgrp.pcap.out @@ -0,0 +1,46 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.2.100][46570] -> [..160.44.194.66][.5223] + detected: [.....1] [ip4][..tcp] [..192.168.2.100][46570] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [..192.168.2.100][59200] -> [..160.44.194.66][.5223] + detected: [.....2] [ip4][..tcp] [..192.168.2.100][59200] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + idle: [.....1] [ip4][..tcp] [..192.168.2.100][46570] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + new: [.....3] [ip4][..tcp] [..192.168.2.100][59324] -> [..160.44.194.66][.5223] + detected: [.....3] [ip4][..tcp] [..192.168.2.100][59324] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + DAEMON-EVENT: [Processed: 45 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....4] [ip4][..tcp] [..192.168.2.100][59920] -> [..160.44.194.66][.5223] + detected: [.....4] [ip4][..tcp] [..192.168.2.100][59920] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + idle: [.....2] [ip4][..tcp] [..192.168.2.100][59200] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + idle: [.....3] [ip4][..tcp] [..192.168.2.100][59324] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + DAEMON-EVENT: [Processed: 60 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..tcp] [..192.168.2.100][40152] -> [..160.44.194.66][.5223] + detected: [.....5] [ip4][..tcp] [..192.168.2.100][40152] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + DAEMON-EVENT: [Processed: 75 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....6] [ip4][..tcp] [..192.168.2.100][35634] -> [..160.44.194.66][.5223] + detected: [.....6] [ip4][..tcp] [..192.168.2.100][35634] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + idle: [.....4] [ip4][..tcp] [..192.168.2.100][59920] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + DAEMON-EVENT: [Processed: 90 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....7] [ip4][..tcp] [..192.168.2.100][49838] -> [..160.44.194.66][.5223] + detected: [.....7] [ip4][..tcp] [..192.168.2.100][49838] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + idle: [.....6] [ip4][..tcp] [..192.168.2.100][35634] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + idle: [.....5] [ip4][..tcp] [..192.168.2.100][40152] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + DAEMON-EVENT: [Processed: 105 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 7|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....8] [ip4][..tcp] [..192.168.2.100][42552] -> [..160.44.194.66][.5223] + detected: [.....8] [ip4][..tcp] [..192.168.2.100][42552] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + DAEMON-EVENT: [Processed: 120 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....9] [ip4][..tcp] [..192.168.2.100][42764] -> [..160.44.194.66][.5223] + detected: [.....9] [ip4][..tcp] [..192.168.2.100][42764] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + idle: [.....7] [ip4][..tcp] [..192.168.2.100][49838] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + update: [.....8] [ip4][..tcp] [..192.168.2.100][42552] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + idle: [.....8] [ip4][..tcp] [..192.168.2.100][42552] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + idle: [.....9] [ip4][..tcp] [..192.168.2.100][42764] -> [..160.44.194.66][.5223] [HP_VIRTGRP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/hsrp0.pcap.out b/test/results/flow-info/hsrp0.pcap.out new file mode 100644 index 000000000..0d253fbf1 --- /dev/null +++ b/test/results/flow-info/hsrp0.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..10.28.168.253][.1985] -> [......224.0.0.2][.1985] + detected: [.....1] [ip4][..udp] [..10.28.168.253][.1985] -> [......224.0.0.2][.1985] [HSRP][Network][Acceptable] + new: [.....2] [ip4][..udp] [..10.28.170.253][.1985] -> [......224.0.0.2][.1985] + detected: [.....2] [ip4][..udp] [..10.28.170.253][.1985] -> [......224.0.0.2][.1985] [HSRP][Network][Acceptable] + new: [.....3] [ip4][..udp] [..10.28.171.253][.1985] -> [......224.0.0.2][.1985] + detected: [.....3] [ip4][..udp] [..10.28.171.253][.1985] -> [......224.0.0.2][.1985] [HSRP][Network][Acceptable] + new: [.....4] [ip4][..udp] [..10.28.168.252][.1985] -> [......224.0.0.2][.1985] + detected: [.....4] [ip4][..udp] [..10.28.168.252][.1985] -> [......224.0.0.2][.1985] [HSRP][Network][Acceptable] + idle: [.....3] [ip4][..udp] [..10.28.171.253][.1985] -> [......224.0.0.2][.1985] [HSRP][Network][Acceptable] + idle: [.....2] [ip4][..udp] [..10.28.170.253][.1985] -> [......224.0.0.2][.1985] [HSRP][Network][Acceptable] + idle: [.....4] [ip4][..udp] [..10.28.168.252][.1985] -> [......224.0.0.2][.1985] [HSRP][Network][Acceptable] + idle: [.....1] [ip4][..udp] [..10.28.168.253][.1985] -> [......224.0.0.2][.1985] [HSRP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/hsrp2.pcap.out b/test/results/flow-info/hsrp2.pcap.out new file mode 100644 index 000000000..0db4f34fe --- /dev/null +++ b/test/results/flow-info/hsrp2.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..10.52.220.125][.1985] -> [....224.0.0.102][.1985] + detected: [.....1] [ip4][..udp] [..10.52.220.125][.1985] -> [....224.0.0.102][.1985] [HSRP][Network][Acceptable] + new: [.....2] [ip4][..udp] [..10.52.253.125][.1985] -> [....224.0.0.102][.1985] + detected: [.....2] [ip4][..udp] [..10.52.253.125][.1985] -> [....224.0.0.102][.1985] [HSRP][Network][Acceptable] + idle: [.....2] [ip4][..udp] [..10.52.253.125][.1985] -> [....224.0.0.102][.1985] [HSRP][Network][Acceptable] + idle: [.....1] [ip4][..udp] [..10.52.220.125][.1985] -> [....224.0.0.102][.1985] [HSRP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/hsrp2_ipv6.pcapng.out b/test/results/flow-info/hsrp2_ipv6.pcapng.out new file mode 100644 index 000000000..63f62e548 --- /dev/null +++ b/test/results/flow-info/hsrp2_ipv6.pcapng.out @@ -0,0 +1,22 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [................................fe80::1][.2029] -> [...............................ff02::66][.2029] + detected: [.....1] [ip6][..udp] [................................fe80::1][.2029] -> [...............................ff02::66][.2029] [HSRP][Network][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....2] [ip6][..udp] [................................fe80::2][.2029] -> [...............................ff02::66][.2029] + detected: [.....2] [ip6][..udp] [................................fe80::2][.2029] -> [...............................ff02::66][.2029] [HSRP][Network][Acceptable] + RISK: Known Proto on Non Std Port + update: [.....1] [ip6][..udp] [................................fe80::1][.2029] -> [...............................ff02::66][.2029] [HSRP][Network][Acceptable] + RISK: Known Proto on Non Std Port + update: [.....2] [ip6][..udp] [................................fe80::2][.2029] -> [...............................ff02::66][.2029] [HSRP][Network][Acceptable] + RISK: Known Proto on Non Std Port + update: [.....1] [ip6][..udp] [................................fe80::1][.2029] -> [...............................ff02::66][.2029] [HSRP][Network][Acceptable] + RISK: Known Proto on Non Std Port + update: [.....2] [ip6][..udp] [................................fe80::2][.2029] -> [...............................ff02::66][.2029] [HSRP][Network][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....2] [ip6][..udp] [................................fe80::2][.2029] -> [...............................ff02::66][.2029] [HSRP][Network][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....1] [ip6][..udp] [................................fe80::1][.2029] -> [...............................ff02::66][.2029] [HSRP][Network][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/http-crash-content-disposition.pcap.out b/test/results/flow-info/http-crash-content-disposition.pcap.out new file mode 100644 index 000000000..9c65a0f6a --- /dev/null +++ b/test/results/flow-info/http-crash-content-disposition.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.0.103][51171] -> [...174.129.0.10][...80] + detected: [.....1] [ip4][..tcp] [..192.168.0.103][51171] -> [...174.129.0.10][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [.....1] [ip4][..tcp] [..192.168.0.103][51171] -> [...174.129.0.10][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/http-lines-split.pcap.out b/test/results/flow-info/http-lines-split.pcap.out new file mode 100644 index 000000000..8508e4bda --- /dev/null +++ b/test/results/flow-info/http-lines-split.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....192.168.0.1][39236] -> [...192.168.0.20][31337] + detected: [.....1] [ip4][..tcp] [....192.168.0.1][39236] -> [...192.168.0.20][31337] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + end: [.....1] [ip4][..tcp] [....192.168.0.1][39236] -> [...192.168.0.20][31337] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/http-manipulated.pcap.out b/test/results/flow-info/http-manipulated.pcap.out new file mode 100644 index 000000000..0b295c277 --- /dev/null +++ b/test/results/flow-info/http-manipulated.pcap.out @@ -0,0 +1,23 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.0.20][33632] -> [....192.168.0.7][.8080] + detected: [.....1] [ip4][..tcp] [...192.168.0.20][33632] -> [....192.168.0.7][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: [Processed: 10 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [...192.168.0.20][33684] -> [....192.168.0.7][.8080] + detected: [.....2] [ip4][..tcp] [...192.168.0.20][33684] -> [....192.168.0.7][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [.....2] [ip4][..tcp] [...192.168.0.20][33684] -> [....192.168.0.7][.8080] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.073| 0.005| 0.018] + [IAT(c->s)...: 0.000| 0.073| 0.005| 0.018][IAT(s->c)...: 0.000| 0.073| 0.005| 0.018] + [PKTLEN(c->s): 54.000| 440.000| 99.800| 119.300][PKTLEN(s->c): 60.000|5894.000|2829.100|1943.500] + [BINS(c->s)..: 14,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,10] + end: [.....1] [ip4][..tcp] [...192.168.0.20][33632] -> [....192.168.0.7][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + end: [.....2] [ip4][..tcp] [...192.168.0.20][33684] -> [....192.168.0.7][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/http-proxy.pcapng.out b/test/results/flow-info/http-proxy.pcapng.out new file mode 100644 index 000000000..7edf86ead --- /dev/null +++ b/test/results/flow-info/http-proxy.pcapng.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.103][.1241] -> [..192.168.1.146][.8080] + detected: [.....1] [ip4][..tcp] [..192.168.1.103][.1241] -> [..192.168.1.146][.8080] [HTTP_Proxy][Web][Acceptable] + end: [.....1] [ip4][..tcp] [..192.168.1.103][.1241] -> [..192.168.1.146][.8080] [HTTP_Proxy][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/http_auth.pcap.out b/test/results/flow-info/http_auth.pcap.out new file mode 100644 index 000000000..2d2b74373 --- /dev/null +++ b/test/results/flow-info/http_auth.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....192.168.0.4][54337] -> [192.254.189.169][...80] + detected: [.....1] [ip4][..tcp] [....192.168.0.4][54337] -> [192.254.189.169][...80] [HTTP][Web][Acceptable] + analyse: [.....1] [ip4][..tcp] [....192.168.0.4][54337] -> [192.254.189.169][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.862| 0.405| 1.194] + [IAT(c->s)...: 0.000| 4.862| 0.532| 1.295][IAT(s->c)...: 0.001| 4.862| 0.314| 1.106] + [PKTLEN(c->s): 66.000| 805.000| 119.600| 190.100][PKTLEN(s->c): 66.000|1514.000|1046.300| 619.600] + [BINS(c->s)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,1,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0] + end: [.....1] [ip4][..tcp] [....192.168.0.4][54337] -> [192.254.189.169][...80] [HTTP][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/http_connect.pcap.out b/test/results/flow-info/http_connect.pcap.out new file mode 100644 index 000000000..faea4f54f --- /dev/null +++ b/test/results/flow-info/http_connect.pcap.out @@ -0,0 +1,29 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.103][.1714] -> [..192.168.1.146][.8080] + detected: [.....1] [ip4][..tcp] [..192.168.1.103][.1714] -> [..192.168.1.146][.8080] [HTTP_Connect][Web][Acceptable] + new: [.....2] [ip4][..udp] [..192.168.1.146][47767] -> [....192.168.1.2][...53] + detected: [.....2] [ip4][..udp] [..192.168.1.146][47767] -> [....192.168.1.2][...53] [DNS][Network][Acceptable] + detection-update: [.....2] [ip4][..udp] [..192.168.1.146][47767] -> [....192.168.1.2][...53] [DNS][Network][Acceptable] + new: [.....3] [ip4][..tcp] [..192.168.1.146][35968] -> [..151.101.2.132][..443] + detected: [.....3] [ip4][..tcp] [..192.168.1.146][35968] -> [..151.101.2.132][..443] [TLS][Web][Safe] + detection-update: [.....3] [ip4][..tcp] [..192.168.1.146][35968] -> [..151.101.2.132][..443] [TLS][Web][Safe] + analyse: [.....3] [ip4][..tcp] [..192.168.1.146][35968] -> [..151.101.2.132][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.016| 0.003| 0.005] + [IAT(c->s)...: 0.000| 0.016| 0.003| 0.005][IAT(s->c)...: 0.000| 0.015| 0.003| 0.005] + [PKTLEN(c->s): 66.000| 583.000| 133.400| 165.400][PKTLEN(s->c): 66.000|1450.000| 992.600| 625.700] + [BINS(c->s)..: 13,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0,0,0] + analyse: [.....1] [ip4][..tcp] [..192.168.1.103][.1714] -> [..192.168.1.146][.8080] [HTTP_Connect][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.053| 0.007| 0.013] + [IAT(c->s)...: 0.000| 0.050| 0.008| 0.013][IAT(s->c)...: 0.000| 0.053| 0.006| 0.012] + [PKTLEN(c->s): 60.000| 571.000| 165.000| 145.200][PKTLEN(s->c): 54.000|5590.000|1317.100|1980.800] + [BINS(c->s)..: 7,0,2,0,1,1,1,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,4] + idle: [.....2] [ip4][..udp] [..192.168.1.146][47767] -> [....192.168.1.2][...53] [DNS][Network][Acceptable] + idle: [.....3] [ip4][..tcp] [..192.168.1.146][35968] -> [..151.101.2.132][..443] [TLS][Web][Safe] + idle: [.....1] [ip4][..tcp] [..192.168.1.103][.1714] -> [..192.168.1.146][.8080] [HTTP_Connect][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/http_guessed_host_and_guessed.pcapng.out b/test/results/flow-info/http_guessed_host_and_guessed.pcapng.out new file mode 100644 index 000000000..5b75050d4 --- /dev/null +++ b/test/results/flow-info/http_guessed_host_and_guessed.pcapng.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....170.33.13.5][..110] -> [....192.168.0.1][..179] + guessed: [.....1] [ip4][..tcp] [....170.33.13.5][..110] -> [....192.168.0.1][..179] [POP3.Alibaba][Email][Acceptable] + end: [.....1] [ip4][..tcp] [....170.33.13.5][..110] -> [....192.168.0.1][..179] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/http_ipv6.pcap.out b/test/results/flow-info/http_ipv6.pcap.out new file mode 100644 index 000000000..f91ac7121 --- /dev/null +++ b/test/results/flow-info/http_ipv6.pcap.out @@ -0,0 +1,72 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][40526] -> [...............2a00:1450:4006:804::200e][..443] [MIDSTREAM] + new: [.....2] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][41776] -> [...............2a00:1450:4001:803::1017][..443] [MIDSTREAM] + detected: [.....2] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][41776] -> [...............2a00:1450:4001:803::1017][..443] [TLS][Web][Safe] + new: [.....3] [ip6][..udp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][45931] -> [...............2a00:1450:4001:803::1017][..443] + detected: [.....3] [ip6][..udp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][45931] -> [...............2a00:1450:4001:803::1017][..443] [QUIC.Google][Web][Acceptable] + new: [.....4] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][58660] -> [...............2a00:1450:4006:803::2008][..443] [MIDSTREAM] + new: [.....5] [ip6][..udp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][55145] -> [.................2a00:1450:400b:c02::5f][..443] + analyse: [.....3] [ip6][..udp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][45931] -> [...............2a00:1450:4001:803::1017][..443] [QUIC.Google][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.002| 6.009| 0.604| 1.486] + [IAT(c->s)...: 0.026| 6.009| 0.617| 1.462][IAT(s->c)...: 0.002| 6.009| 0.590| 1.511] + [PKTLEN(c->s): 99.000|1412.000| 300.700| 378.600][PKTLEN(s->c): 91.000|1412.000| 385.700| 368.200] + [BINS(c->s)..: 0,9,0,0,0,1,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0] + [BINS(s->c)..: 2,6,0,0,0,0,0,0,0,0,0,0,0,0,0,1,3,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0] + new: [.....6] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37486] -> [................2a03:b0c0:3:d0::70:1001][..443] + new: [.....7] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37488] -> [................2a03:b0c0:3:d0::70:1001][..443] + detected: [.....6] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37486] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + detected: [.....7] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37488] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + detection-update: [.....7] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37488] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + detection-update: [.....6] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37486] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + detection-update: [.....6] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37486] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + RISK: TLS Cert Mismatch + detection-update: [.....7] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37488] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + RISK: TLS Cert Mismatch + new: [.....8] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37494] -> [................2a03:b0c0:3:d0::70:1001][..443] + detected: [.....8] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37494] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + detection-update: [.....8] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37494] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + detection-update: [.....8] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37494] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + RISK: TLS Cert Mismatch + new: [.....9] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][60124] -> [..................2a02:26f0:ad:1a1::eed][..443] [MIDSTREAM] + new: [....10] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][40308] -> [....2a03:2880:1010:3f20:face:b00c::25de][..443] [MIDSTREAM] + new: [....11] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][33062] -> [.................2a00:1450:400b:c02::9a][..443] [MIDSTREAM] + new: [....12] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37506] -> [................2a03:b0c0:3:d0::70:1001][..443] + detected: [....12] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37506] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + detection-update: [....12] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37506] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + detection-update: [....12] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37506] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + RISK: TLS Cert Mismatch + new: [....13] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][59690] -> [...............2a00:1450:4001:803::1012][..443] [MIDSTREAM] + new: [....14] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][53132] -> [..................2a02:26f0:ad:197::236][..443] + new: [....15] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][53134] -> [..................2a02:26f0:ad:197::236][..443] + detected: [....15] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][53134] -> [..................2a02:26f0:ad:197::236][..443] [TLS.Facebook][SocialNetwork][Fun] + detected: [....14] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][53132] -> [..................2a02:26f0:ad:197::236][..443] [TLS.Facebook][SocialNetwork][Fun] + detection-update: [....15] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][53134] -> [..................2a02:26f0:ad:197::236][..443] [TLS.Facebook][SocialNetwork][Fun] + detection-update: [....14] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][53132] -> [..................2a02:26f0:ad:197::236][..443] [TLS.Facebook][SocialNetwork][Fun] + detection-update: [....14] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][53132] -> [..................2a02:26f0:ad:197::236][..443] [TLS.Facebook][SocialNetwork][Fun] + idle: [....14] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][53132] -> [..................2a02:26f0:ad:197::236][..443] + idle: [....15] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][53134] -> [..................2a02:26f0:ad:197::236][..443] + idle: [.....2] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][41776] -> [...............2a00:1450:4001:803::1017][..443] + idle: [.....3] [ip6][..udp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][45931] -> [...............2a00:1450:4001:803::1017][..443] [QUIC.Google][Web][Acceptable] + guessed: [.....9] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][60124] -> [..................2a02:26f0:ad:1a1::eed][..443] [TLS][Web][Safe] + idle: [.....9] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][60124] -> [..................2a02:26f0:ad:1a1::eed][..443] + guessed: [.....4] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][58660] -> [...............2a00:1450:4006:803::2008][..443] [TLS][Web][Safe] + idle: [.....4] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][58660] -> [...............2a00:1450:4006:803::2008][..443] + end: [.....6] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37486] -> [................2a03:b0c0:3:d0::70:1001][..443] + end: [.....7] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37488] -> [................2a03:b0c0:3:d0::70:1001][..443] + end: [.....8] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37494] -> [................2a03:b0c0:3:d0::70:1001][..443] + idle: [....12] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][37506] -> [................2a03:b0c0:3:d0::70:1001][..443] [TLS.ntop][Network][Safe] + RISK: TLS Cert Mismatch + guessed: [.....1] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][40526] -> [...............2a00:1450:4006:804::200e][..443] [TLS][Web][Safe] + idle: [.....1] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][40526] -> [...............2a00:1450:4006:804::200e][..443] + guessed: [....10] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][40308] -> [....2a03:2880:1010:3f20:face:b00c::25de][..443] [TLS][Web][Safe] + idle: [....10] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][40308] -> [....2a03:2880:1010:3f20:face:b00c::25de][..443] + not-detected: [.....5] [ip6][..udp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][55145] -> [.................2a00:1450:400b:c02::5f][..443] [Unknown][Unrated] + idle: [.....5] [ip6][..udp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][55145] -> [.................2a00:1450:400b:c02::5f][..443] + guessed: [....11] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][33062] -> [.................2a00:1450:400b:c02::9a][..443] [TLS][Web][Safe] + idle: [....11] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][33062] -> [.................2a00:1450:400b:c02::9a][..443] + guessed: [....13] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][59690] -> [...............2a00:1450:4001:803::1012][..443] [TLS][Web][Safe] + idle: [....13] [ip6][..tcp] [........2a00:d40:1:3:7aac:c0ff:fea7:d4c][59690] -> [...............2a00:1450:4001:803::1012][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/http_on_sip_port.pcap.out b/test/results/flow-info/http_on_sip_port.pcap.out new file mode 100644 index 000000000..0f555617c --- /dev/null +++ b/test/results/flow-info/http_on_sip_port.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.82.178.111.221][.5060] -> [....45.58.148.2][.8888] + detected: [.....1] [ip4][..tcp] [.82.178.111.221][.5060] -> [....45.58.148.2][.8888] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + idle: [.....1] [ip4][..tcp] [.82.178.111.221][.5060] -> [....45.58.148.2][.8888] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/i3d.pcap.out b/test/results/flow-info/i3d.pcap.out new file mode 100644 index 000000000..e00ee81a8 --- /dev/null +++ b/test/results/flow-info/i3d.pcap.out @@ -0,0 +1,20 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][60476] -> [..213.163.87.47][50004] + detected: [.....1] [ip4][..udp] [..192.168.2.100][60476] -> [..213.163.87.47][50004] [i3D][Game][Acceptable] + DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..udp] [..192.168.2.100][55205] -> [..213.163.87.47][50004] + detected: [.....2] [ip4][..udp] [..192.168.2.100][55205] -> [..213.163.87.47][50004] [i3D][Game][Acceptable] + idle: [.....1] [ip4][..udp] [..192.168.2.100][60476] -> [..213.163.87.47][50004] [i3D][Game][Acceptable] + DAEMON-EVENT: [Processed: 30 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..udp] [..192.168.2.100][62620] -> [..213.163.87.47][50004] + detected: [.....3] [ip4][..udp] [..192.168.2.100][62620] -> [..213.163.87.47][50004] [i3D][Game][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.2.100][55205] -> [..213.163.87.47][50004] [i3D][Game][Acceptable] + new: [.....4] [ip4][..udp] [..192.168.2.100][62461] -> [..213.163.87.47][50004] + detected: [.....4] [ip4][..udp] [..192.168.2.100][62461] -> [..213.163.87.47][50004] [i3D][Game][Acceptable] + idle: [.....4] [ip4][..udp] [..192.168.2.100][62461] -> [..213.163.87.47][50004] [i3D][Game][Acceptable] + idle: [.....3] [ip4][..udp] [..192.168.2.100][62620] -> [..213.163.87.47][50004] [i3D][Game][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/iax.pcap.out b/test/results/flow-info/iax.pcap.out new file mode 100644 index 000000000..bab1b911f --- /dev/null +++ b/test/results/flow-info/iax.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...82.110.36.84][.4569] -> [..192.168.2.120][.4566] + detected: [.....1] [ip4][..udp] [...82.110.36.84][.4569] -> [..192.168.2.120][.4566] [IAX][VoIP][Acceptable] + analyse: [.....1] [ip4][..udp] [...82.110.36.84][.4569] -> [..192.168.2.120][.4566] [IAX][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 0.051| 0.019| 0.011] + [IAT(c->s)...: 0.001| 0.043| 0.019| 0.009][IAT(s->c)...: 0.002| 0.051| 0.019| 0.018] + [PKTLEN(c->s): 60.000| 214.000| 186.400| 48.400][PKTLEN(s->c): 54.000| 214.000| 116.400| 76.500] + [BINS(c->s)..: 3,0,1,0,0,23,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..udp] [...82.110.36.84][.4569] -> [..192.168.2.120][.4566] [IAX][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/icmp-tunnel.pcap.out b/test/results/flow-info/icmp-tunnel.pcap.out new file mode 100644 index 000000000..486abc5e2 --- /dev/null +++ b/test/results/flow-info/icmp-tunnel.pcap.out @@ -0,0 +1,70 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] + detected: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + analyse: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.999| 13.999| 1.420| 2.297] + [IAT(c->s)...: 0.999| 1.001| 1.000| 0.001][IAT(s->c)...: 1.001| 13.999| 2.445| 4.085] + [PKTLEN(c->s): 126.000| 126.000| 126.000| 0.000][PKTLEN(s->c): 126.000| 126.000| 126.000| 0.000] + [BINS(c->s)..: 0,0,23,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + DAEMON-EVENT: [Processed: 251 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 12] + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + update: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + idle: [.....1] [ip4][.icmp] [192.168.154.131] -> [192.168.154.132] [ICMP][Network][Acceptable] + RISK: Malformed Packet + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/iec60780-5-104.pcap.out b/test/results/flow-info/iec60780-5-104.pcap.out new file mode 100644 index 000000000..b4c2a2017 --- /dev/null +++ b/test/results/flow-info/iec60780-5-104.pcap.out @@ -0,0 +1,31 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.172.27.248.109][.1568] -> [..172.27.248.79][.2404] + detected: [.....1] [ip4][..tcp] [.172.27.248.109][.1568] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + new: [.....2] [ip4][..tcp] [.172.27.248.109][.1570] -> [..172.27.248.79][.2404] + detected: [.....2] [ip4][..tcp] [.172.27.248.109][.1570] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + new: [.....3] [ip4][..tcp] [.172.27.248.109][.1571] -> [..172.27.248.79][.2404] + detected: [.....3] [ip4][..tcp] [.172.27.248.109][.1571] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + end: [.....1] [ip4][..tcp] [.172.27.248.109][.1568] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + new: [.....4] [ip4][..tcp] [.172.27.248.109][.1572] -> [..172.27.248.79][.2404] + detected: [.....4] [ip4][..tcp] [.172.27.248.109][.1572] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + end: [.....2] [ip4][..tcp] [.172.27.248.109][.1570] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + end: [.....3] [ip4][..tcp] [.172.27.248.109][.1571] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + new: [.....5] [ip4][..tcp] [.172.27.248.109][.1577] -> [..172.27.248.79][.2404] + detected: [.....5] [ip4][..tcp] [.172.27.248.109][.1577] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + new: [.....6] [ip4][..tcp] [.172.27.248.109][.1578] -> [..172.27.248.79][.2404] + detected: [.....6] [ip4][..tcp] [.172.27.248.109][.1578] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + DAEMON-EVENT: [Processed: 106 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + end: [.....4] [ip4][..tcp] [.172.27.248.109][.1572] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + end: [.....5] [ip4][..tcp] [.172.27.248.109][.1577] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + analyse: [.....6] [ip4][..tcp] [.172.27.248.109][.1578] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 32.516| 11.085| 10.877] + [IAT(c->s)...: 0.000| 32.485| 9.540| 10.735][IAT(s->c)...: 0.000| 32.516| 13.224| 10.709] + [PKTLEN(c->s): 60.000| 70.000| 62.200| 4.000][PKTLEN(s->c): 54.000| 118.000| 70.500| 16.100] + [BINS(c->s)..: 19,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....6] [ip4][..tcp] [.172.27.248.109][.1578] -> [..172.27.248.79][.2404] [IEC60870][IoT-Scada][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/imap-starttls.pcap.out b/test/results/flow-info/imap-starttls.pcap.out new file mode 100644 index 000000000..e0caddc15 --- /dev/null +++ b/test/results/flow-info/imap-starttls.pcap.out @@ -0,0 +1,24 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.17.53][49640] -> [.212.227.17.186][..143] + detected: [.....1] [ip4][..tcp] [..192.168.17.53][49640] -> [.212.227.17.186][..143] [IMAPS][Email][Safe] + RISK: Known Proto on Non Std Port + detection-update: [.....1] [ip4][..tcp] [..192.168.17.53][49640] -> [.212.227.17.186][..143] [IMAPS][Email][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....1] [ip4][..tcp] [..192.168.17.53][49640] -> [.212.227.17.186][..143] [IMAPS][Email][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....1] [ip4][..tcp] [..192.168.17.53][49640] -> [.212.227.17.186][..143] [IMAPS][Email][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + analyse: [.....1] [ip4][..tcp] [..192.168.17.53][49640] -> [.212.227.17.186][..143] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.678| 0.188| 0.378] + [IAT(c->s)...: 0.000| 1.487| 0.166| 0.343][IAT(s->c)...: 0.000| 1.678| 0.215| 0.416] + [PKTLEN(c->s): 54.000| 372.000| 85.300| 75.500][PKTLEN(s->c): 60.000|1514.000| 459.900| 570.900] + [BINS(c->s)..: 15,1,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,2,1,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + detection-update: [.....1] [ip4][..tcp] [..192.168.17.53][49640] -> [.212.227.17.186][..143] [IMAPS][Email][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + end: [.....1] [ip4][..tcp] [..192.168.17.53][49640] -> [.212.227.17.186][..143] [IMAPS][Email][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/imap.pcap.out b/test/results/flow-info/imap.pcap.out new file mode 100644 index 000000000..eeedb9f3c --- /dev/null +++ b/test/results/flow-info/imap.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......10.40.4.2][46045] -> [......10.40.3.2][..143] + detected: [.....1] [ip4][..tcp] [......10.40.4.2][46045] -> [......10.40.3.2][..143] [IMAP][Email][Unsafe] + RISK: Unsafe Protocol + analyse: [.....1] [ip4][..tcp] [......10.40.4.2][46045] -> [......10.40.3.2][..143] [IMAP][Email][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.331| 0.295| 1.060] + [IAT(c->s)...: 0.000| 4.330| 0.254| 0.989][IAT(s->c)...: 0.000| 4.331| 0.351| 1.149] + [PKTLEN(c->s): 66.000| 139.000| 75.800| 17.500][PKTLEN(s->c): 74.000| 762.000| 174.400| 181.200] + [BINS(c->s)..: 18,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,4,1,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..tcp] [......10.40.4.2][46045] -> [......10.40.3.2][..143] [IMAP][Email][Unsafe] + RISK: Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/imaps.pcap.out b/test/results/flow-info/imaps.pcap.out new file mode 100644 index 000000000..59eb77f7c --- /dev/null +++ b/test/results/flow-info/imaps.pcap.out @@ -0,0 +1,20 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....192.168.1.8][50506] -> [.167.99.215.164][..993] + detected: [.....1] [ip4][..tcp] [....192.168.1.8][50506] -> [.167.99.215.164][..993] [IMAPS.ntop][Email][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....1] [ip4][..tcp] [....192.168.1.8][50506] -> [.167.99.215.164][..993] [IMAPS.ntop][Email][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....1] [ip4][..tcp] [....192.168.1.8][50506] -> [.167.99.215.164][..993] [IMAPS.ntop][Email][Safe] + RISK: TLS (probably) Not Carrying HTTPS + DAEMON-EVENT: [Processed: 20 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 2|updates: 0] + new: [.....2] [ip4][..tcp] [....192.168.0.1][51529] -> [.....10.10.10.1][..993] + detected: [.....2] [ip4][..tcp] [....192.168.0.1][51529] -> [.....10.10.10.1][..993] [IMAPS][Email][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....2] [ip4][..tcp] [....192.168.0.1][51529] -> [.....10.10.10.1][..993] [IMAPS][Email][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....1] [ip4][..tcp] [....192.168.1.8][50506] -> [.167.99.215.164][..993] + idle: [.....2] [ip4][..tcp] [....192.168.0.1][51529] -> [.....10.10.10.1][..993] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/imo.pcap.out b/test/results/flow-info/imo.pcap.out new file mode 100644 index 000000000..6b9a37416 --- /dev/null +++ b/test/results/flow-info/imo.pcap.out @@ -0,0 +1,24 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.192.168.12.169][49207] -> [.185.155.137.30][36535] + detected: [.....1] [ip4][..udp] [.192.168.12.169][49207] -> [.185.155.137.30][36535] [IMO][VoIP][Acceptable] + new: [.....2] [ip4][..udp] [.192.168.12.169][49207] -> [....93.33.47.58][57604] + detected: [.....2] [ip4][..udp] [.192.168.12.169][49207] -> [....93.33.47.58][57604] [IMO][VoIP][Acceptable] + analyse: [.....2] [ip4][..udp] [.192.168.12.169][49207] -> [....93.33.47.58][57604] [IMO][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.464| 0.060| 0.120] + [IAT(c->s)...: 0.000| 0.464| 0.075| 0.145][IAT(s->c)...: 0.000| 0.379| 0.045| 0.090] + [PKTLEN(c->s): 43.000| 142.000| 57.100| 22.000][PKTLEN(s->c): 43.000| 149.000| 56.900| 24.000] + [BINS(c->s)..: 15,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 15,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....1] [ip4][..udp] [.192.168.12.169][49207] -> [.185.155.137.30][36535] [IMO][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.003| 0.138| 0.306] + [IAT(c->s)...: 0.000| 1.003| 0.133| 0.300][IAT(s->c)...: 0.000| 1.003| 0.144| 0.312] + [PKTLEN(c->s): 224.000|1266.000| 736.500| 500.800][PKTLEN(s->c): 52.000| 266.000| 90.000| 60.900] + [BINS(c->s)..: 0,0,0,0,0,2,5,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 10,0,1,3,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....2] [ip4][..udp] [.192.168.12.169][49207] -> [....93.33.47.58][57604] [IMO][VoIP][Acceptable] + idle: [.....1] [ip4][..udp] [.192.168.12.169][49207] -> [.185.155.137.30][36535] [IMO][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/instagram.pcap.out b/test/results/flow-info/instagram.pcap.out new file mode 100644 index 000000000..dec96585a --- /dev/null +++ b/test/results/flow-info/instagram.pcap.out @@ -0,0 +1,261 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.0.103][56382] -> [..173.252.107.4][..443] + new: [.....2] [ip4][..tcp] [..192.168.0.103][33936] -> [....31.13.93.52][..443] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [..192.168.0.103][33936] -> [....31.13.93.52][..443] [TLS.Facebook][SocialNetwork][Fun] + detected: [.....1] [ip4][..tcp] [..192.168.0.103][56382] -> [..173.252.107.4][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....1] [ip4][..tcp] [..192.168.0.103][56382] -> [..173.252.107.4][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + analyse: [.....2] [ip4][..tcp] [..192.168.0.103][33936] -> [....31.13.93.52][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.572| 0.136| 0.382] + [IAT(c->s)...: 0.000| 1.523| 0.141| 0.383][IAT(s->c)...: 0.000| 1.572| 0.132| 0.381] + [PKTLEN(c->s): 66.000|1431.000| 213.600| 396.000][PKTLEN(s->c): 66.000|1464.000|1151.300| 534.100] + [BINS(c->s)..: 14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,11,0,0,0,0] + detection-update: [.....2] [ip4][..tcp] [..192.168.0.103][33936] -> [....31.13.93.52][..443] [TLS.Facebook][SocialNetwork][Fun] + new: [.....3] [ip4][..tcp] [..192.168.0.103][38816] -> [...46.33.70.160][...80] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [..192.168.0.103][38816] -> [...46.33.70.160][...80] [HTTP.Instagram][SocialNetwork][Fun] + new: [.....4] [ip4][..tcp] [..192.168.0.103][57936] -> [...82.85.26.162][...80] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [..192.168.0.103][57936] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun] + new: [.....5] [ip4][..tcp] [..192.168.0.103][44379] -> [...82.85.26.186][...80] [MIDSTREAM] + detected: [.....5] [ip4][..tcp] [..192.168.0.103][44379] -> [...82.85.26.186][...80] [HTTP.Instagram][SocialNetwork][Fun] + new: [.....6] [ip4][..tcp] [..192.168.0.103][57965] -> [...82.85.26.185][...80] [MIDSTREAM] + detected: [.....6] [ip4][..tcp] [..192.168.0.103][57965] -> [...82.85.26.185][...80] [HTTP.Instagram][SocialNetwork][Fun] + analyse: [.....3] [ip4][..tcp] [..192.168.0.103][38816] -> [...46.33.70.160][...80] [HTTP.Instagram][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.033| 0.003| 0.008] + [IAT(c->s)...: 0.000| 0.033| 0.010| 0.012][IAT(s->c)...: 0.000| 0.033| 0.002| 0.006] + [PKTLEN(c->s): 66.000| 326.000| 109.300| 96.900][PKTLEN(s->c): 1484.000|1484.000|1484.000| 0.400] + [BINS(c->s)..: 5,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,0,0,0] + analyse: [.....4] [ip4][..tcp] [..192.168.0.103][57936] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.112| 0.011| 0.030] + [IAT(c->s)...: 0.000| 0.112| 0.013| 0.031][IAT(s->c)...: 0.000| 0.111| 0.010| 0.028] + [PKTLEN(c->s): 66.000| 319.000| 82.900| 63.100][PKTLEN(s->c): 186.000|1484.000|1405.400| 305.000] + [BINS(c->s)..: 14,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0,0,0] + detection-update: [.....6] [ip4][..tcp] [..192.168.0.103][57965] -> [...82.85.26.185][...80] [HTTP.Instagram][SocialNetwork][Fun] + detection-update: [.....5] [ip4][..tcp] [..192.168.0.103][44379] -> [...82.85.26.186][...80] [HTTP.Instagram][SocialNetwork][Fun] + new: [.....7] [ip4][..tcp] [..192.168.0.103][33976] -> [....77.67.29.17][...80] [MIDSTREAM] + analyse: [.....5] [ip4][..tcp] [..192.168.0.103][44379] -> [...82.85.26.186][...80] [HTTP.Instagram][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.372| 0.037| 0.093] + [IAT(c->s)...: 0.000| 0.310| 0.041| 0.089][IAT(s->c)...: 0.000| 0.372| 0.033| 0.095] + [PKTLEN(c->s): 66.000| 325.000| 111.700| 84.700][PKTLEN(s->c): 1474.000|1484.000|1483.400| 2.400] + [BINS(c->s)..: 13,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,0,0,0] + new: [.....8] [ip4][..tcp] [..192.168.0.103][37350] -> [...82.85.26.153][...80] [MIDSTREAM] + detected: [.....8] [ip4][..tcp] [..192.168.0.103][37350] -> [...82.85.26.153][...80] [HTTP.Instagram][SocialNetwork][Fun] + new: [.....9] [ip4][..udp] [..192.168.0.106][17500] -> [255.255.255.255][17500] + detected: [.....9] [ip4][..udp] [..192.168.0.106][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + new: [....10] [ip4][..udp] [..192.168.0.106][17500] -> [..192.168.0.255][17500] + detected: [....10] [ip4][..udp] [..192.168.0.106][17500] -> [..192.168.0.255][17500] [Dropbox][Cloud][Acceptable] + new: [....11] [ip4][..udp] [....192.168.0.1][..520] -> [..192.168.0.255][..520] + new: [....12] [ip4][..tcp] [....31.13.93.52][..443] -> [..192.168.0.103][33934] [MIDSTREAM] + detected: [....12] [ip4][..tcp] [....31.13.93.52][..443] -> [..192.168.0.103][33934] [TLS.Facebook][SocialNetwork][Fun] + new: [....13] [ip4][..tcp] [..192.168.0.103][33935] -> [....31.13.93.52][..443] [MIDSTREAM] + detected: [....13] [ip4][..tcp] [..192.168.0.103][33935] -> [....31.13.93.52][..443] [TLS.Facebook][SocialNetwork][Fun] + new: [....14] [ip4][.icmp] [..192.168.0.103] -> [..192.168.0.103] + detected: [....14] [ip4][.icmp] [..192.168.0.103] -> [..192.168.0.103] [ICMP][Network][Acceptable] + new: [....15] [ip4][..tcp] [..192.168.0.103][33763] -> [....31.13.93.52][..443] [MIDSTREAM] + detected: [....15] [ip4][..tcp] [..192.168.0.103][33763] -> [....31.13.93.52][..443] [TLS.Facebook][SocialNetwork][Fun] + new: [....16] [ip4][..tcp] [..192.168.0.103][38817] -> [...46.33.70.160][...80] [MIDSTREAM] + analyse: [.....7] [ip4][..tcp] [..192.168.0.103][33976] -> [....77.67.29.17][...80] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 7.322| 0.237| 1.293] + [IAT(c->s)...: 0.000| 7.322| 0.612| 2.023][IAT(s->c)...: 0.000| 0.004| 0.001| 0.001] + [PKTLEN(c->s): 66.000| 66.000| 66.000| 0.000][PKTLEN(s->c): 1337.000|1484.000|1476.300| 32.800] + [BINS(c->s)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,18,0,0,0] + guessed: [.....7] [ip4][..tcp] [..192.168.0.103][33976] -> [....77.67.29.17][...80] [HTTP][Web][Acceptable] + detected: [.....7] [ip4][..tcp] [..192.168.0.103][33976] -> [....77.67.29.17][...80] [HTTP][Web][Acceptable] + new: [....17] [ip4][..udp] [..192.168.0.103][51219] -> [........8.8.8.8][...53] + detected: [....17] [ip4][..udp] [..192.168.0.103][51219] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + new: [....18] [ip4][..udp] [..192.168.0.103][33603] -> [........8.8.8.8][...53] + detected: [....18] [ip4][..udp] [..192.168.0.103][33603] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + new: [....19] [ip4][..tcp] [..192.168.0.103][57966] -> [...82.85.26.185][...80] [MIDSTREAM] + new: [....20] [ip4][..udp] [..192.168.0.103][26540] -> [........8.8.8.8][...53] + detected: [....20] [ip4][..udp] [..192.168.0.103][26540] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + detection-update: [....17] [ip4][..udp] [..192.168.0.103][51219] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + new: [....21] [ip4][..tcp] [..192.168.0.103][44558] -> [...46.33.70.174][..443] + detection-update: [....18] [ip4][..udp] [..192.168.0.103][33603] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + new: [....22] [ip4][..tcp] [..192.168.0.103][41181] -> [...82.85.26.154][..443] + new: [....23] [ip4][..tcp] [..192.168.0.103][41182] -> [...82.85.26.154][..443] + detection-update: [....20] [ip4][..udp] [..192.168.0.103][26540] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + new: [....24] [ip4][..tcp] [..192.168.0.103][60908] -> [...46.33.70.136][..443] + detected: [....21] [ip4][..tcp] [..192.168.0.103][44558] -> [...46.33.70.174][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detected: [....24] [ip4][..tcp] [..192.168.0.103][60908] -> [...46.33.70.136][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detected: [....22] [ip4][..tcp] [..192.168.0.103][41181] -> [...82.85.26.154][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detected: [....23] [ip4][..tcp] [..192.168.0.103][41182] -> [...82.85.26.154][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....24] [ip4][..tcp] [..192.168.0.103][60908] -> [...46.33.70.136][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....24] [ip4][..tcp] [..192.168.0.103][60908] -> [...46.33.70.136][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....21] [ip4][..tcp] [..192.168.0.103][44558] -> [...46.33.70.174][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....21] [ip4][..tcp] [..192.168.0.103][44558] -> [...46.33.70.174][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....22] [ip4][..tcp] [..192.168.0.103][41181] -> [...82.85.26.154][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....22] [ip4][..tcp] [..192.168.0.103][41181] -> [...82.85.26.154][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....23] [ip4][..tcp] [..192.168.0.103][41182] -> [...82.85.26.154][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....23] [ip4][..tcp] [..192.168.0.103][41182] -> [...82.85.26.154][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + new: [....25] [ip4][..tcp] [..92.122.48.138][...80] -> [..192.168.0.103][41562] [MIDSTREAM] + new: [....26] [ip4][..tcp] [..192.168.0.103][58052] -> [...82.85.26.162][...80] [MIDSTREAM] + detected: [....26] [ip4][..tcp] [..192.168.0.103][58052] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun] + new: [....27] [ip4][..tcp] [..192.168.0.103][58053] -> [...82.85.26.162][...80] [MIDSTREAM] + detected: [....27] [ip4][..tcp] [..192.168.0.103][58053] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun] + analyse: [....26] [ip4][..tcp] [..192.168.0.103][58052] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.062| 0.005| 0.015] + [IAT(c->s)...: 0.000| 0.062| 0.005| 0.016][IAT(s->c)...: 0.000| 0.061| 0.004| 0.014] + [PKTLEN(c->s): 66.000| 326.000| 83.300| 64.900][PKTLEN(s->c): 396.000|1484.000|1419.500| 255.900] + [BINS(c->s)..: 14,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,0,0,0] + new: [....28] [ip4][..tcp] [....31.13.86.52][...80] -> [..192.168.0.103][58216] [MIDSTREAM] + analyse: [....28] [ip4][..tcp] [....31.13.86.52][...80] -> [..192.168.0.103][58216] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.002| 0.001| 0.001] + [IAT(c->s)...: 0.000| 0.002| 0.001| 0.001][IAT(s->c)...: 0.000| 0.002| 0.001| 0.001] + [PKTLEN(c->s): 1464.000|1464.000|1464.000| 0.000][PKTLEN(s->c): 66.000| 66.000| 66.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,0,0,0,0] + [BINS(s->c)..: 11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + guessed: [....28] [ip4][..tcp] [....31.13.86.52][...80] -> [..192.168.0.103][58216] [HTTP.Facebook][SocialNetwork][Fun] + detected: [....28] [ip4][..tcp] [....31.13.86.52][...80] -> [..192.168.0.103][58216] [HTTP.Facebook][SocialNetwork][Fun] + update: [....14] [ip4][.icmp] [..192.168.0.103] -> [..192.168.0.103] [ICMP][Network][Acceptable] + update: [.....9] [ip4][..udp] [..192.168.0.106][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + update: [....10] [ip4][..udp] [..192.168.0.106][17500] -> [..192.168.0.255][17500] [Dropbox][Cloud][Acceptable] + update: [....11] [ip4][..udp] [....192.168.0.1][..520] -> [..192.168.0.255][..520] + new: [....29] [ip4][..tcp] [....2.22.236.51][...80] -> [..192.168.0.103][44151] [MIDSTREAM] + new: [....30] [ip4][..tcp] [..192.168.0.103][58690] -> [...46.33.70.159][..443] [MIDSTREAM] + detected: [....30] [ip4][..tcp] [..192.168.0.103][58690] -> [...46.33.70.159][..443] [TLS][Web][Safe] + new: [....31] [ip4][..udp] [..192.168.0.103][27124] -> [........8.8.8.8][...53] + detected: [....31] [ip4][..udp] [..192.168.0.103][27124] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + analyse: [....29] [ip4][..tcp] [....2.22.236.51][...80] -> [..192.168.0.103][44151] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.004| 0.001| 0.001] + [IAT(c->s)...: 0.000| 0.004| 0.001| 0.001][IAT(s->c)...: 0.000| 0.004| 0.001| 0.001] + [PKTLEN(c->s): 1484.000|1484.000|1484.000| 0.000][PKTLEN(s->c): 66.000| 66.000| 66.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,0,0,0] + [BINS(s->c)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + guessed: [....29] [ip4][..tcp] [....2.22.236.51][...80] -> [..192.168.0.103][44151] [HTTP][Web][Acceptable] + detected: [....29] [ip4][..tcp] [....2.22.236.51][...80] -> [..192.168.0.103][44151] [HTTP][Web][Acceptable] + new: [....32] [ip4][..tcp] [...46.33.70.150][...80] -> [..192.168.0.103][40855] + DAEMON-EVENT: [Processed: 743 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 32 / 32|skipped: 0|!detected: 0|guessed: 3|detection-updates: 15|updates: 4] + new: [....33] [ip4][..tcp] [...192.168.2.17][49355] -> [....31.13.86.52][..443] + detected: [....33] [ip4][..tcp] [...192.168.2.17][49355] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + detection-update: [....33] [ip4][..tcp] [...192.168.2.17][49355] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + analyse: [....33] [ip4][..tcp] [...192.168.2.17][49355] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.017| 0.003| 0.006] + [IAT(c->s)...: 0.000| 0.017| 0.004| 0.006][IAT(s->c)...: 0.000| 0.017| 0.003| 0.005] + [PKTLEN(c->s): 66.000| 564.000| 122.900| 135.300][PKTLEN(s->c): 66.000|1454.000|1055.600| 578.200] + [BINS(c->s)..: 11,0,1,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,0,0,0,0] + new: [....34] [ip4][..tcp] [...192.168.2.17][49357] -> [....31.13.86.52][..443] + new: [....35] [ip4][..tcp] [...192.168.2.17][49358] -> [....31.13.86.52][..443] + new: [....36] [ip4][..tcp] [...192.168.2.17][49359] -> [....31.13.86.52][..443] + detected: [....34] [ip4][..tcp] [...192.168.2.17][49357] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + detected: [....35] [ip4][..tcp] [...192.168.2.17][49358] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + detected: [....36] [ip4][..tcp] [...192.168.2.17][49359] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + detection-update: [....34] [ip4][..tcp] [...192.168.2.17][49357] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + detection-update: [....35] [ip4][..tcp] [...192.168.2.17][49358] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + detection-update: [....36] [ip4][..tcp] [...192.168.2.17][49359] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + analyse: [....36] [ip4][..tcp] [...192.168.2.17][49359] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.159| 0.012| 0.037] + [IAT(c->s)...: 0.000| 0.143| 0.013| 0.036][IAT(s->c)...: 0.000| 0.159| 0.012| 0.037] + [PKTLEN(c->s): 66.000| 637.000| 172.600| 200.300][PKTLEN(s->c): 66.000|1454.000| 858.100| 596.900] + [BINS(c->s)..: 11,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,0,0] + analyse: [....35] [ip4][..tcp] [...192.168.2.17][49358] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.157| 0.021| 0.045] + [IAT(c->s)...: 0.000| 0.157| 0.019| 0.042][IAT(s->c)...: 0.000| 0.156| 0.023| 0.048] + [PKTLEN(c->s): 66.000| 654.000| 224.600| 239.400][PKTLEN(s->c): 66.000|1454.000| 771.400| 614.300] + [BINS(c->s)..: 9,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0] + idle: [.....8] [ip4][..tcp] [..192.168.0.103][37350] -> [...82.85.26.153][...80] + idle: [....22] [ip4][..tcp] [..192.168.0.103][41181] -> [...82.85.26.154][..443] + idle: [....23] [ip4][..tcp] [..192.168.0.103][41182] -> [...82.85.26.154][..443] + idle: [.....4] [ip4][..tcp] [..192.168.0.103][57936] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun] + idle: [....20] [ip4][..udp] [..192.168.0.103][26540] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + idle: [.....6] [ip4][..tcp] [..192.168.0.103][57965] -> [...82.85.26.185][...80] + guessed: [....19] [ip4][..tcp] [..192.168.0.103][57966] -> [...82.85.26.185][...80] [HTTP][Web][Acceptable] + end: [....19] [ip4][..tcp] [..192.168.0.103][57966] -> [...82.85.26.185][...80] + end: [....30] [ip4][..tcp] [..192.168.0.103][58690] -> [...46.33.70.159][..443] [TLS][Web][Safe] + end: [.....7] [ip4][..tcp] [..192.168.0.103][33976] -> [....77.67.29.17][...80] [HTTP][Web][Acceptable] + idle: [....17] [ip4][..udp] [..192.168.0.103][51219] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + idle: [....26] [ip4][..tcp] [..192.168.0.103][58052] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun] + idle: [....27] [ip4][..tcp] [..192.168.0.103][58053] -> [...82.85.26.162][...80] + idle: [....14] [ip4][.icmp] [..192.168.0.103] -> [..192.168.0.103] [ICMP][Network][Acceptable] + idle: [.....9] [ip4][..udp] [..192.168.0.106][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....24] [ip4][..tcp] [..192.168.0.103][60908] -> [...46.33.70.136][..443] + idle: [....28] [ip4][..tcp] [....31.13.86.52][...80] -> [..192.168.0.103][58216] [HTTP.Facebook][SocialNetwork][Fun] + idle: [....21] [ip4][..tcp] [..192.168.0.103][44558] -> [...46.33.70.174][..443] + guessed: [....32] [ip4][..tcp] [...46.33.70.150][...80] -> [..192.168.0.103][40855] [HTTP][Web][Acceptable] + idle: [....32] [ip4][..tcp] [...46.33.70.150][...80] -> [..192.168.0.103][40855] + idle: [.....3] [ip4][..tcp] [..192.168.0.103][38816] -> [...46.33.70.160][...80] [HTTP.Instagram][SocialNetwork][Fun] + guessed: [....16] [ip4][..tcp] [..192.168.0.103][38817] -> [...46.33.70.160][...80] [HTTP][Web][Acceptable] + end: [....16] [ip4][..tcp] [..192.168.0.103][38817] -> [...46.33.70.160][...80] + idle: [....10] [ip4][..udp] [..192.168.0.106][17500] -> [..192.168.0.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....31] [ip4][..udp] [..192.168.0.103][27124] -> [........8.8.8.8][...53] + idle: [.....1] [ip4][..tcp] [..192.168.0.103][56382] -> [..173.252.107.4][..443] [TLS.Instagram][SocialNetwork][Fun] + RISK: Obsolete TLS (v1.1 or older) + idle: [....15] [ip4][..tcp] [..192.168.0.103][33763] -> [....31.13.93.52][..443] + idle: [....29] [ip4][..tcp] [....2.22.236.51][...80] -> [..192.168.0.103][44151] [HTTP][Web][Acceptable] + end: [.....5] [ip4][..tcp] [..192.168.0.103][44379] -> [...82.85.26.186][...80] [HTTP.Instagram][SocialNetwork][Fun] + idle: [....12] [ip4][..tcp] [....31.13.93.52][..443] -> [..192.168.0.103][33934] + idle: [....13] [ip4][..tcp] [..192.168.0.103][33935] -> [....31.13.93.52][..443] + idle: [.....2] [ip4][..tcp] [..192.168.0.103][33936] -> [....31.13.93.52][..443] [TLS.Facebook][SocialNetwork][Fun] + idle: [....18] [ip4][..udp] [..192.168.0.103][33603] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun] + not-detected: [....11] [ip4][..udp] [....192.168.0.1][..520] -> [..192.168.0.255][..520] [Unknown][Unrated] + idle: [....11] [ip4][..udp] [....192.168.0.1][..520] -> [..192.168.0.255][..520] + guessed: [....25] [ip4][..tcp] [..92.122.48.138][...80] -> [..192.168.0.103][41562] [HTTP][Web][Acceptable] + idle: [....25] [ip4][..tcp] [..92.122.48.138][...80] -> [..192.168.0.103][41562] + new: [....37] [ip4][..tcp] [...192.168.2.17][49360] -> [....31.13.86.52][..443] + new: [....38] [ip4][..tcp] [...192.168.2.17][49361] -> [....31.13.86.52][..443] + detected: [....37] [ip4][..tcp] [...192.168.2.17][49360] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + detected: [....38] [ip4][..tcp] [...192.168.2.17][49361] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + detection-update: [....37] [ip4][..tcp] [...192.168.2.17][49360] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + detection-update: [....38] [ip4][..tcp] [...192.168.2.17][49361] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + analyse: [....37] [ip4][..tcp] [...192.168.2.17][49360] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.016| 0.003| 0.005] + [IAT(c->s)...: 0.000| 0.014| 0.003| 0.005][IAT(s->c)...: 0.000| 0.016| 0.002| 0.005] + [PKTLEN(c->s): 66.000| 592.000| 151.500| 173.100][PKTLEN(s->c): 66.000|1454.000|1081.900| 582.300] + [BINS(c->s)..: 9,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,0,0,0,0] + analyse: [....34] [ip4][..tcp] [...192.168.2.17][49357] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 10.470| 0.692| 2.561] + [IAT(c->s)...: 0.000| 10.413| 0.763| 2.677][IAT(s->c)...: 0.000| 10.470| 0.633| 2.459] + [PKTLEN(c->s): 66.000| 663.000| 211.500| 230.100][PKTLEN(s->c): 66.000|1454.000| 706.900| 603.400] + [BINS(c->s)..: 10,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0] + analyse: [....38] [ip4][..tcp] [...192.168.2.17][49361] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.132| 0.012| 0.032] + [IAT(c->s)...: 0.000| 0.130| 0.013| 0.033][IAT(s->c)...: 0.000| 0.132| 0.010| 0.031] + [PKTLEN(c->s): 66.000| 592.000| 134.400| 158.500][PKTLEN(s->c): 66.000|1454.000| 953.400| 621.200] + [BINS(c->s)..: 12,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0,0,0] + end: [....33] [ip4][..tcp] [...192.168.2.17][49355] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + end: [....34] [ip4][..tcp] [...192.168.2.17][49357] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + end: [....35] [ip4][..tcp] [...192.168.2.17][49358] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + end: [....36] [ip4][..tcp] [...192.168.2.17][49359] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + end: [....37] [ip4][..tcp] [...192.168.2.17][49360] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + end: [....38] [ip4][..tcp] [...192.168.2.17][49361] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ip_fragmented_garbage.pcap.out b/test/results/flow-info/ip_fragmented_garbage.pcap.out new file mode 100644 index 000000000..16a728dd3 --- /dev/null +++ b/test/results/flow-info/ip_fragmented_garbage.pcap.out @@ -0,0 +1,9139 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.......10.0.0.2][24102] -> [.....10.128.0.2][10792] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [.....2] [ip4][..tcp] [.......10.0.0.2][18730] -> [.....10.128.0.2][20304] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [.....3] [ip4][..tcp] [.......10.0.0.2][.9253] -> [.....10.128.0.2][24102] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [.....4] [ip4][..tcp] [.......10.0.0.2][16417] -> [.....10.128.0.2][16419] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [.....5] [ip4][..tcp] [.......10.0.0.2][21029] -> [.....10.128.0.2][22878] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [.....6] [ip4][..tcp] [.......10.0.0.2][24101] -> [.....10.128.0.2][.9251] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [.....7] [ip4][..tcp] [.......10.0.0.2][10790] -> [.....10.128.0.2][24101] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [.....8] [ip4][..tcp] [.......10.0.0.2][.9508] -> [.....10.128.0.2][.8995] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [.....9] [ip4][..tcp] [.......10.0.0.2][13617] -> [.....10.128.0.2][10536] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....10] [ip4][..tcp] [.......10.0.0.2][14387] -> [.....10.128.0.2][14646] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....11] [ip4][..tcp] [.......10.0.0.2][18248] -> [.....10.128.0.2][19019] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....12] [ip4][..tcp] [.......10.0.0.2][13105] -> [.....10.128.0.2][14648] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....13] [ip4][..tcp] [.......10.0.0.2][16243] -> [.....10.128.0.2][21055] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....14] [ip4][..tcp] [.......10.0.0.2][17458] -> [.....10.128.0.2][10790] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....15] [ip4][..tcp] [.......10.0.0.2][.2612] -> [.....10.128.0.2][12849] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....16] [ip4][..tcp] [.......10.0.0.2][16199] -> [.....10.128.0.2][21055] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....17] [ip4][..tcp] [.......10.0.0.2][19273] -> [.....10.128.0.2][19016] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....18] [ip4][..tcp] [.......10.0.0.2][.9566] -> [.....10.128.0.2][18498] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....19] [ip4][..tcp] [.......10.0.0.2][11892] -> [.....10.128.0.2][26470] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....20] [ip4][..tcp] [.......10.0.0.2][.9508] -> [.....10.128.0.2][.8998] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....21] [ip4][..tcp] [.......10.0.0.2][13362] -> [.....10.128.0.2][12596] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....22] [ip4][..tcp] [.......10.0.0.2][18258] -> [.....10.128.0.2][16199] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....23] [ip4][..tcp] [.......10.0.0.2][18762] -> [.....10.128.0.2][18503] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....24] [ip4][..tcp] [.......10.0.0.2][24136] -> [.....10.128.0.2][16967] [MIDSTREAM] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....25] [ip4][..tcp] [.......10.0.0.2][29799] -> [.....10.128.0.2][26228] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....26] [ip4][..tcp] [.......10.0.0.2][.9251] -> [.....10.128.0.2][.9770] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....27] [ip4][..tcp] [.......10.0.0.2][17751] -> [.....10.128.0.2][.9024] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....28] [ip4][..tcp] [.......10.0.0.2][27502] -> [.....10.128.0.2][30307] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + new: [....29] [ip4][..tcp] [.......10.0.0.2][10792] -> [.....10.128.0.2][10790] + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected + not-detected: [.....4] [ip4][..tcp] [.......10.0.0.2][16417] -> [.....10.128.0.2][16419] [Unknown][Unrated] + end: [.....4] [ip4][..tcp] [.......10.0.0.2][16417] -> [.....10.128.0.2][16419] + not-detected: [.....8] [ip4][..tcp] [.......10.0.0.2][.9508] -> [.....10.128.0.2][.8995] [Unknown][Unrated] + idle: [.....8] [ip4][..tcp] [.......10.0.0.2][.9508] -> [.....10.128.0.2][.8995] + not-detected: [....20] [ip4][..tcp] [.......10.0.0.2][.9508] -> [.....10.128.0.2][.8998] [Unknown][Unrated] + idle: [....20] [ip4][..tcp] [.......10.0.0.2][.9508] -> [.....10.128.0.2][.8998] + not-detected: [.....7] [ip4][..tcp] [.......10.0.0.2][10790] -> [.....10.128.0.2][24101] [Unknown][Unrated] + end: [.....7] [ip4][..tcp] [.......10.0.0.2][10790] -> [.....10.128.0.2][24101] + not-detected: [.....1] [ip4][..tcp] [.......10.0.0.2][24102] -> [.....10.128.0.2][10792] [Unknown][Unrated] + end: [.....1] [ip4][..tcp] [.......10.0.0.2][24102] -> [.....10.128.0.2][10792] + not-detected: [.....2] [ip4][..tcp] [.......10.0.0.2][18730] -> [.....10.128.0.2][20304] [Unknown][Unrated] + end: [.....2] [ip4][..tcp] [.......10.0.0.2][18730] -> [.....10.128.0.2][20304] + not-detected: [....24] [ip4][..tcp] [.......10.0.0.2][24136] -> [.....10.128.0.2][16967] [Unknown][Unrated] + end: [....24] [ip4][..tcp] [.......10.0.0.2][24136] -> [.....10.128.0.2][16967] + not-detected: [....27] [ip4][..tcp] [.......10.0.0.2][17751] -> [.....10.128.0.2][.9024] [Unknown][Unrated] + idle: [....27] [ip4][..tcp] [.......10.0.0.2][17751] -> [.....10.128.0.2][.9024] + not-detected: [....10] [ip4][..tcp] [.......10.0.0.2][14387] -> [.....10.128.0.2][14646] [Unknown][Unrated] + end: [....10] [ip4][..tcp] [.......10.0.0.2][14387] -> [.....10.128.0.2][14646] + not-detected: [....16] [ip4][..tcp] [.......10.0.0.2][16199] -> [.....10.128.0.2][21055] [Unknown][Unrated] + end: [....16] [ip4][..tcp] [.......10.0.0.2][16199] -> [.....10.128.0.2][21055] + not-detected: [....23] [ip4][..tcp] [.......10.0.0.2][18762] -> [.....10.128.0.2][18503] [Unknown][Unrated] + idle: [....23] [ip4][..tcp] [.......10.0.0.2][18762] -> [.....10.128.0.2][18503] + not-detected: [....11] [ip4][..tcp] [.......10.0.0.2][18248] -> [.....10.128.0.2][19019] [Unknown][Unrated] + end: [....11] [ip4][..tcp] [.......10.0.0.2][18248] -> [.....10.128.0.2][19019] + not-detected: [....13] [ip4][..tcp] [.......10.0.0.2][16243] -> [.....10.128.0.2][21055] [Unknown][Unrated] + end: [....13] [ip4][..tcp] [.......10.0.0.2][16243] -> [.....10.128.0.2][21055] + not-detected: [....28] [ip4][..tcp] [.......10.0.0.2][27502] -> [.....10.128.0.2][30307] [Unknown][Unrated] + idle: [....28] [ip4][..tcp] [.......10.0.0.2][27502] -> [.....10.128.0.2][30307] + not-detected: [.....6] [ip4][..tcp] [.......10.0.0.2][24101] -> [.....10.128.0.2][.9251] [Unknown][Unrated] + end: [.....6] [ip4][..tcp] [.......10.0.0.2][24101] -> [.....10.128.0.2][.9251] + not-detected: [.....3] [ip4][..tcp] [.......10.0.0.2][.9253] -> [.....10.128.0.2][24102] [Unknown][Unrated] + end: [.....3] [ip4][..tcp] [.......10.0.0.2][.9253] -> [.....10.128.0.2][24102] + not-detected: [....26] [ip4][..tcp] [.......10.0.0.2][.9251] -> [.....10.128.0.2][.9770] [Unknown][Unrated] + idle: [....26] [ip4][..tcp] [.......10.0.0.2][.9251] -> [.....10.128.0.2][.9770] + not-detected: [....25] [ip4][..tcp] [.......10.0.0.2][29799] -> [.....10.128.0.2][26228] [Unknown][Unrated] + idle: [....25] [ip4][..tcp] [.......10.0.0.2][29799] -> [.....10.128.0.2][26228] + not-detected: [.....5] [ip4][..tcp] [.......10.0.0.2][21029] -> [.....10.128.0.2][22878] [Unknown][Unrated] + idle: [.....5] [ip4][..tcp] [.......10.0.0.2][21029] -> [.....10.128.0.2][22878] + not-detected: [....29] [ip4][..tcp] [.......10.0.0.2][10792] -> [.....10.128.0.2][10790] [Unknown][Unrated] + idle: [....29] [ip4][..tcp] [.......10.0.0.2][10792] -> [.....10.128.0.2][10790] + not-detected: [....15] [ip4][..tcp] [.......10.0.0.2][.2612] -> [.....10.128.0.2][12849] [Unknown][Unrated] + end: [....15] [ip4][..tcp] [.......10.0.0.2][.2612] -> [.....10.128.0.2][12849] + not-detected: [....12] [ip4][..tcp] [.......10.0.0.2][13105] -> [.....10.128.0.2][14648] [Unknown][Unrated] + end: [....12] [ip4][..tcp] [.......10.0.0.2][13105] -> [.....10.128.0.2][14648] + not-detected: [....21] [ip4][..tcp] [.......10.0.0.2][13362] -> [.....10.128.0.2][12596] [Unknown][Unrated] + end: [....21] [ip4][..tcp] [.......10.0.0.2][13362] -> [.....10.128.0.2][12596] + not-detected: [....17] [ip4][..tcp] [.......10.0.0.2][19273] -> [.....10.128.0.2][19016] [Unknown][Unrated] + idle: [....17] [ip4][..tcp] [.......10.0.0.2][19273] -> [.....10.128.0.2][19016] + not-detected: [....18] [ip4][..tcp] [.......10.0.0.2][.9566] -> [.....10.128.0.2][18498] [Unknown][Unrated] + end: [....18] [ip4][..tcp] [.......10.0.0.2][.9566] -> [.....10.128.0.2][18498] + not-detected: [....19] [ip4][..tcp] [.......10.0.0.2][11892] -> [.....10.128.0.2][26470] [Unknown][Unrated] + end: [....19] [ip4][..tcp] [.......10.0.0.2][11892] -> [.....10.128.0.2][26470] + not-detected: [....14] [ip4][..tcp] [.......10.0.0.2][17458] -> [.....10.128.0.2][10790] [Unknown][Unrated] + end: [....14] [ip4][..tcp] [.......10.0.0.2][17458] -> [.....10.128.0.2][10790] + not-detected: [.....9] [ip4][..tcp] [.......10.0.0.2][13617] -> [.....10.128.0.2][10536] [Unknown][Unrated] + end: [.....9] [ip4][..tcp] [.......10.0.0.2][13617] -> [.....10.128.0.2][10536] + not-detected: [....22] [ip4][..tcp] [.......10.0.0.2][18258] -> [.....10.128.0.2][16199] [Unknown][Unrated] + end: [....22] [ip4][..tcp] [.......10.0.0.2][18258] -> [.....10.128.0.2][16199] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/iphone.pcap.out b/test/results/flow-info/iphone.pcap.out new file mode 100644 index 000000000..27fc54ba6 --- /dev/null +++ b/test/results/flow-info/iphone.pcap.out @@ -0,0 +1,226 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] + detected: [.....1] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + new: [.....2] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [.....2] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [.....3] [ip4][..udp] [....192.168.2.1][.5353] -> [....224.0.0.251][.5353] + detected: [.....3] [ip4][..udp] [....192.168.2.1][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [.....4] [ip6][..udp] [...............fe80::c42c:3ff:fe60:6a64][.5353] -> [...............................ff02::fb][.5353] + detected: [.....4] [ip6][..udp] [...............fe80::c42c:3ff:fe60:6a64][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [.....5] [ip4][..udp] [169.254.225.216][.5353] -> [....224.0.0.251][.5353] + detected: [.....5] [ip4][..udp] [169.254.225.216][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [.....6] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] + detected: [.....6] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + new: [.....7] [ip4][..udp] [....192.168.2.1][.5351] -> [......224.0.0.1][.5350] + new: [.....8] [ip4][..udp] [169.254.225.216][60538] -> [239.255.255.250][.1900] + detected: [.....8] [ip4][..udp] [169.254.225.216][60538] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [.....9] [ip4][..udp] [....192.168.2.1][51411] -> [239.255.255.250][.1900] + detected: [.....9] [ip4][..udp] [....192.168.2.1][51411] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....10] [ip4][..udp] [....192.168.2.1][...67] -> [...192.168.2.17][...68] + detected: [....10] [ip4][..udp] [....192.168.2.1][...67] -> [...192.168.2.17][...68] [DHCP][Network][Acceptable] + new: [....11] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ff98:a29c] + detected: [....11] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ff98:a29c] [ICMPV6][Network][Acceptable] + new: [....12] [ip6][icmp6] [...............fe80::823:3f17:8298:a29c] -> [................................ff02::2] + detected: [....12] [ip6][icmp6] [...............fe80::823:3f17:8298:a29c] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + new: [....13] [ip6][..udp] [...............fe80::823:3f17:8298:a29c][.5353] -> [...............................ff02::fb][.5353] + detected: [....13] [ip6][..udp] [...............fe80::823:3f17:8298:a29c][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....14] [ip6][icmp6] [...............fe80::823:3f17:8298:a29c] -> [...............................ff02::16] + detected: [....14] [ip6][icmp6] [...............fe80::823:3f17:8298:a29c] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + new: [....15] [ip4][..udp] [...192.168.2.17][63381] -> [....192.168.2.1][...53] + detected: [....15] [ip4][..udp] [...192.168.2.17][63381] -> [....192.168.2.1][...53] [DNS.AppleiCloud][Web][Acceptable] + new: [....16] [ip4][..udp] [...192.168.2.17][63143] -> [....192.168.2.1][...53] + detected: [....16] [ip4][..udp] [...192.168.2.17][63143] -> [....192.168.2.1][...53] [DNS.AppleiCloud][Web][Acceptable] + new: [....17] [ip4][..udp] [...192.168.2.17][61862] -> [....192.168.2.1][...53] + detected: [....17] [ip4][..udp] [...192.168.2.17][61862] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + new: [....18] [ip4][..udp] [...192.168.2.17][55914] -> [....192.168.2.1][...53] + detected: [....18] [ip4][..udp] [...192.168.2.17][55914] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + new: [....19] [ip4][..udp] [...192.168.2.17][51007] -> [....192.168.2.1][...53] + detected: [....19] [ip4][..udp] [...192.168.2.17][51007] -> [....192.168.2.1][...53] [DNS][ConnCheck][Acceptable] + detection-update: [....16] [ip4][..udp] [...192.168.2.17][63143] -> [....192.168.2.1][...53] [DNS.AppleiCloud][Web][Acceptable] + detection-update: [....15] [ip4][..udp] [...192.168.2.17][63381] -> [....192.168.2.1][...53] [DNS.AppleiCloud][Web][Acceptable] + detection-update: [....17] [ip4][..udp] [...192.168.2.17][61862] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + detection-update: [....18] [ip4][..udp] [...192.168.2.17][55914] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + new: [....20] [ip4][..tcp] [...192.168.2.17][50575] -> [.17.248.185.140][..443] + detection-update: [....19] [ip4][..udp] [...192.168.2.17][51007] -> [....192.168.2.1][...53] [DNS.Apple][ConnCheck][Safe] + new: [....21] [ip4][..udp] [...192.168.2.17][55457] -> [....192.168.2.1][...53] + detected: [....21] [ip4][..udp] [...192.168.2.17][55457] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + new: [....22] [ip4][..udp] [...192.168.2.17][.5353] -> [....224.0.0.251][.5353] + detected: [....22] [ip4][..udp] [...192.168.2.17][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....23] [ip4][..tcp] [...192.168.2.17][50576] -> [...95.101.25.53][..443] + new: [....24] [ip4][..tcp] [...192.168.2.17][50577] -> [....17.130.2.46][..443] + new: [....25] [ip4][..tcp] [...192.168.2.17][49152] -> [.17.253.105.202][...80] + detected: [....20] [ip4][..tcp] [...192.168.2.17][50575] -> [.17.248.185.140][..443] [TLS.AppleiCloud][Web][Acceptable] + detection-update: [....21] [ip4][..udp] [...192.168.2.17][55457] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + detected: [....23] [ip4][..tcp] [...192.168.2.17][50576] -> [...95.101.25.53][..443] [TLS.Apple][Web][Safe] + new: [....26] [ip4][..tcp] [...192.168.2.17][50578] -> [.17.253.105.202][..443] + new: [....27] [ip4][..tcp] [...192.168.2.17][50579] -> [.17.253.105.202][..443] + detection-update: [....23] [ip4][..tcp] [...192.168.2.17][50576] -> [...95.101.25.53][..443] [TLS.Apple][Web][Safe] + new: [....28] [ip4][..udp] [...192.168.2.17][52852] -> [....192.168.2.1][...53] + detected: [....28] [ip4][..udp] [...192.168.2.17][52852] -> [....192.168.2.1][...53] [DNS.AppleiCloud][Web][Acceptable] + detected: [....25] [ip4][..tcp] [...192.168.2.17][49152] -> [.17.253.105.202][...80] [HTTP.Apple][ConnCheck][Safe] + detected: [....24] [ip4][..tcp] [...192.168.2.17][50577] -> [....17.130.2.46][..443] [TLS.Apple][Web][Safe] + detected: [....27] [ip4][..tcp] [...192.168.2.17][50579] -> [.17.253.105.202][..443] [TLS.Apple][Web][Safe] + detected: [....26] [ip4][..tcp] [...192.168.2.17][50578] -> [.17.253.105.202][..443] [TLS.Apple][Web][Safe] + detection-update: [....20] [ip4][..tcp] [...192.168.2.17][50575] -> [.17.248.185.140][..443] [TLS.AppleiCloud][Web][Acceptable] + detection-update: [....20] [ip4][..tcp] [...192.168.2.17][50575] -> [.17.248.185.140][..443] [TLS.AppleiCloud][Web][Acceptable] + detection-update: [....28] [ip4][..udp] [...192.168.2.17][52852] -> [....192.168.2.1][...53] [DNS.AppleiCloud][Web][Acceptable] + detection-update: [....27] [ip4][..tcp] [...192.168.2.17][50579] -> [.17.253.105.202][..443] [TLS.Apple][Web][Safe] + new: [....29] [ip4][..tcp] [...192.168.2.17][50580] -> [..17.248.176.75][..443] + detection-update: [....26] [ip4][..tcp] [...192.168.2.17][50578] -> [.17.253.105.202][..443] [TLS.Apple][Web][Safe] + detection-update: [....24] [ip4][..tcp] [...192.168.2.17][50577] -> [....17.130.2.46][..443] [TLS.Apple][Web][Safe] + detection-update: [....24] [ip4][..tcp] [...192.168.2.17][50577] -> [....17.130.2.46][..443] [TLS.Apple][Web][Safe] + new: [....30] [ip4][..udp] [...192.168.2.17][52682] -> [....192.168.2.1][...53] + detected: [....30] [ip4][..udp] [...192.168.2.17][52682] -> [....192.168.2.1][...53] [DNS.AppleiCloud][Web][Acceptable] + new: [....31] [ip4][..udp] [...192.168.2.17][64203] -> [....192.168.2.1][...53] + detected: [....31] [ip4][..udp] [...192.168.2.17][64203] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + new: [....32] [ip4][..udp] [...192.168.2.17][53317] -> [....192.168.2.1][...53] + detected: [....32] [ip4][..udp] [...192.168.2.17][53317] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + new: [....33] [ip4][..udp] [...192.168.2.17][62526] -> [....192.168.2.1][...53] + detected: [....33] [ip4][..udp] [...192.168.2.17][62526] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + new: [....34] [ip4][..udp] [...192.168.2.17][63377] -> [....192.168.2.1][...53] + detected: [....34] [ip4][..udp] [...192.168.2.17][63377] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + new: [....35] [ip4][..udp] [...192.168.2.17][53272] -> [....192.168.2.1][...53] + detected: [....35] [ip4][..udp] [...192.168.2.17][53272] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + new: [....36] [ip4][..udp] [...192.168.2.17][53983] -> [....192.168.2.1][...53] + detected: [....36] [ip4][..udp] [...192.168.2.17][53983] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + new: [....37] [ip4][..udp] [...192.168.2.17][49880] -> [....192.168.2.1][...53] + detected: [....37] [ip4][..udp] [...192.168.2.17][49880] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + new: [....38] [ip4][..tcp] [...192.168.2.17][50581] -> [..17.248.185.87][..443] + detected: [....29] [ip4][..tcp] [...192.168.2.17][50580] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + detection-update: [....30] [ip4][..udp] [...192.168.2.17][52682] -> [....192.168.2.1][...53] [DNS.AppleiCloud][Web][Acceptable] + detection-update: [....32] [ip4][..udp] [...192.168.2.17][53317] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + detection-update: [....31] [ip4][..udp] [...192.168.2.17][64203] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + detection-update: [....34] [ip4][..udp] [...192.168.2.17][63377] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + detection-update: [....36] [ip4][..udp] [...192.168.2.17][53983] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + detection-update: [....29] [ip4][..tcp] [...192.168.2.17][50580] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + detection-update: [....37] [ip4][..udp] [...192.168.2.17][49880] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + detection-update: [....35] [ip4][..udp] [...192.168.2.17][53272] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + detection-update: [....33] [ip4][..udp] [...192.168.2.17][62526] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + new: [....39] [ip4][..tcp] [...192.168.2.17][50582] -> [..92.122.252.82][..443] + detection-update: [....29] [ip4][..tcp] [...192.168.2.17][50580] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + new: [....40] [ip4][.icmp] [...192.168.2.17] -> [....192.168.2.1] + detected: [....40] [ip4][.icmp] [...192.168.2.17] -> [....192.168.2.1] [ICMP][Network][Acceptable] + new: [....41] [ip4][..tcp] [...192.168.2.17][50583] -> [...104.73.61.30][..443] + detected: [....39] [ip4][..tcp] [...192.168.2.17][50582] -> [..92.122.252.82][..443] [TLS.Apple][Web][Safe] + detected: [....38] [ip4][..tcp] [...192.168.2.17][50581] -> [..17.248.185.87][..443] [TLS.AppleiCloud][Web][Acceptable] + detection-update: [....39] [ip4][..tcp] [...192.168.2.17][50582] -> [..92.122.252.82][..443] [TLS.Apple][Web][Safe] + detected: [....41] [ip4][..tcp] [...192.168.2.17][50583] -> [...104.73.61.30][..443] [TLS.Apple][Web][Safe] + detection-update: [....41] [ip4][..tcp] [...192.168.2.17][50583] -> [...104.73.61.30][..443] [TLS.Apple][Web][Safe] + detection-update: [....38] [ip4][..tcp] [...192.168.2.17][50581] -> [..17.248.185.87][..443] [TLS.AppleiCloud][Web][Acceptable] + detection-update: [....38] [ip4][..tcp] [...192.168.2.17][50581] -> [..17.248.185.87][..443] [TLS.AppleiCloud][Web][Acceptable] + new: [....42] [ip4][....2] [...192.168.2.17] -> [.....224.0.0.22] + detected: [....42] [ip4][....2] [...192.168.2.17] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + new: [....43] [ip4][..udp] [...192.168.2.17][62160] -> [....192.168.2.1][...53] + detected: [....43] [ip4][..udp] [...192.168.2.17][62160] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + new: [....44] [ip4][..udp] [...192.168.2.17][52031] -> [....192.168.2.1][...53] + detected: [....44] [ip4][..udp] [...192.168.2.17][52031] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + detection-update: [....43] [ip4][..udp] [...192.168.2.17][62160] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + detection-update: [....44] [ip4][..udp] [...192.168.2.17][52031] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + new: [....45] [ip4][..tcp] [...192.168.2.17][50584] -> [..17.248.176.75][..443] + detected: [....45] [ip4][..tcp] [...192.168.2.17][50584] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + detection-update: [....45] [ip4][..tcp] [...192.168.2.17][50584] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + detection-update: [....45] [ip4][..tcp] [...192.168.2.17][50584] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + new: [....46] [ip4][..tcp] [...192.168.2.17][50585] -> [..17.137.166.35][..443] + detected: [....46] [ip4][..tcp] [...192.168.2.17][50585] -> [..17.137.166.35][..443] [TLS.Apple][Web][Safe] + new: [....47] [ip4][..tcp] [...192.168.2.17][50586] -> [..17.248.176.75][..443] + detected: [....47] [ip4][..tcp] [...192.168.2.17][50586] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + detection-update: [....46] [ip4][..tcp] [...192.168.2.17][50585] -> [..17.137.166.35][..443] [TLS.Apple][Web][Safe] + detection-update: [....46] [ip4][..tcp] [...192.168.2.17][50585] -> [..17.137.166.35][..443] [TLS.Apple][Web][Safe] + detection-update: [....47] [ip4][..tcp] [...192.168.2.17][50586] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + detection-update: [....47] [ip4][..tcp] [...192.168.2.17][50586] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + new: [....48] [ip4][..udp] [...192.168.2.17][65079] -> [....192.168.2.1][...53] + detected: [....48] [ip4][..udp] [...192.168.2.17][65079] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + detection-update: [....48] [ip4][..udp] [...192.168.2.17][65079] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + analyse: [....29] [ip4][..tcp] [...192.168.2.17][50580] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.686| 0.087| 0.170] + [IAT(c->s)...: 0.000| 0.651| 0.079| 0.157][IAT(s->c)...: 0.000| 0.686| 0.096| 0.185] + [PKTLEN(c->s): 66.000|1090.000| 216.400| 260.400][PKTLEN(s->c): 66.000|1506.000| 463.900| 573.400] + [BINS(c->s)..: 8,4,1,0,1,0,0,0,0,0,0,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + new: [....49] [ip4][..tcp] [...192.168.2.17][50587] -> [...92.123.77.26][..443] + detected: [....49] [ip4][..tcp] [...192.168.2.17][50587] -> [...92.123.77.26][..443] [TLS.AppleiTunes][Streaming][Fun] + detection-update: [....49] [ip4][..tcp] [...192.168.2.17][50587] -> [...92.123.77.26][..443] [TLS.AppleiTunes][Streaming][Fun] + analyse: [....45] [ip4][..tcp] [...192.168.2.17][50584] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.655| 0.067| 0.146] + [IAT(c->s)...: 0.000| 0.511| 0.060| 0.125][IAT(s->c)...: 0.000| 0.655| 0.076| 0.168] + [PKTLEN(c->s): 54.000|1084.000| 190.100| 257.400][PKTLEN(s->c): 66.000|1506.000| 472.000| 576.600] + [BINS(c->s)..: 9,5,1,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + analyse: [....49] [ip4][..tcp] [...192.168.2.17][50587] -> [...92.123.77.26][..443] [TLS.AppleiTunes][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.147| 0.026| 0.045] + [IAT(c->s)...: 0.000| 0.146| 0.021| 0.043][IAT(s->c)...: 0.000| 0.147| 0.031| 0.046] + [PKTLEN(c->s): 66.000|1506.000| 258.800| 374.300][PKTLEN(s->c): 66.000|1506.000| 435.500| 537.000] + [BINS(c->s)..: 10,3,1,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 6,1,1,0,0,0,0,0,2,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,2,0,0] + analyse: [....38] [ip4][..tcp] [...192.168.2.17][50581] -> [..17.248.185.87][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.804| 0.109| 0.185] + [IAT(c->s)...: 0.000| 0.656| 0.090| 0.155][IAT(s->c)...: 0.000| 0.804| 0.140| 0.221] + [PKTLEN(c->s): 66.000|1506.000| 727.200| 656.400][PKTLEN(s->c): 66.000|1506.000| 748.100| 684.800] + [BINS(c->s)..: 8,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,7,0,0] + [BINS(s->c)..: 5,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,4,0,0] + detection-update: [....38] [ip4][..tcp] [...192.168.2.17][50581] -> [..17.248.185.87][..443] [TLS.AppleiCloud][Web][Acceptable] + new: [....50] [ip4][..udp] [...192.168.2.17][63677] -> [....192.168.2.1][...53] + detected: [....50] [ip4][..udp] [...192.168.2.17][63677] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + detection-update: [....50] [ip4][..udp] [...192.168.2.17][63677] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + new: [....51] [ip4][..tcp] [...192.168.2.17][50588] -> [...95.101.24.53][..443] + detected: [....51] [ip4][..tcp] [...192.168.2.17][50588] -> [...95.101.24.53][..443] [TLS.AppleiTunes][Streaming][Fun] + detection-update: [....51] [ip4][..tcp] [...192.168.2.17][50588] -> [...95.101.24.53][..443] [TLS.AppleiTunes][Streaming][Fun] + idle: [....20] [ip4][..tcp] [...192.168.2.17][50575] -> [.17.248.185.140][..443] + idle: [....29] [ip4][..tcp] [...192.168.2.17][50580] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + idle: [....38] [ip4][..tcp] [...192.168.2.17][50581] -> [..17.248.185.87][..443] [TLS.AppleiCloud][Web][Acceptable] + idle: [....45] [ip4][..tcp] [...192.168.2.17][50584] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + idle: [....47] [ip4][..tcp] [...192.168.2.17][50586] -> [..17.248.176.75][..443] [TLS.AppleiCloud][Web][Acceptable] + idle: [....28] [ip4][..udp] [...192.168.2.17][52852] -> [....192.168.2.1][...53] [DNS.AppleiCloud][Web][Acceptable] + idle: [....16] [ip4][..udp] [...192.168.2.17][63143] -> [....192.168.2.1][...53] [DNS.AppleiCloud][Web][Acceptable] + idle: [.....2] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [....13] [ip6][..udp] [...............fe80::823:3f17:8298:a29c][.5353] -> [...............................ff02::fb][.5353] + idle: [.....9] [ip4][..udp] [....192.168.2.1][51411] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....19] [ip4][..udp] [...192.168.2.17][51007] -> [....192.168.2.1][...53] [DNS.Apple][ConnCheck][Safe] + idle: [....46] [ip4][..tcp] [...192.168.2.17][50585] -> [..17.137.166.35][..443] + idle: [....34] [ip4][..udp] [...192.168.2.17][63377] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + idle: [....15] [ip4][..udp] [...192.168.2.17][63381] -> [....192.168.2.1][...53] [DNS.AppleiCloud][Web][Acceptable] + idle: [.....5] [ip4][..udp] [169.254.225.216][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + idle: [....41] [ip4][..tcp] [...192.168.2.17][50583] -> [...104.73.61.30][..443] + idle: [....40] [ip4][.icmp] [...192.168.2.17] -> [....192.168.2.1] [ICMP][Network][Acceptable] + idle: [....42] [ip4][....2] [...192.168.2.17] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + idle: [....35] [ip4][..udp] [...192.168.2.17][53272] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + idle: [....32] [ip4][..udp] [...192.168.2.17][53317] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + idle: [....10] [ip4][..udp] [....192.168.2.1][...67] -> [...192.168.2.17][...68] [DHCP][Network][Acceptable] + idle: [....24] [ip4][..tcp] [...192.168.2.17][50577] -> [....17.130.2.46][..443] + idle: [.....1] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....21] [ip4][..udp] [...192.168.2.17][55457] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + idle: [....39] [ip4][..tcp] [...192.168.2.17][50582] -> [..92.122.252.82][..443] + idle: [....50] [ip4][..udp] [...192.168.2.17][63677] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + idle: [.....8] [ip4][..udp] [169.254.225.216][60538] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [.....4] [ip6][..udp] [...............fe80::c42c:3ff:fe60:6a64][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + idle: [....11] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ff98:a29c] [ICMPV6][Network][Acceptable] + idle: [....17] [ip4][..udp] [...192.168.2.17][61862] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + idle: [....49] [ip4][..tcp] [...192.168.2.17][50587] -> [...92.123.77.26][..443] [TLS.AppleiTunes][Streaming][Fun] + guessed: [.....7] [ip4][..udp] [....192.168.2.1][.5351] -> [......224.0.0.1][.5350] [NAT-PMP][Network][Acceptable] + idle: [.....7] [ip4][..udp] [....192.168.2.1][.5351] -> [......224.0.0.1][.5350] + idle: [....22] [ip4][..udp] [...192.168.2.17][.5353] -> [....224.0.0.251][.5353] + idle: [.....3] [ip4][..udp] [....192.168.2.1][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + idle: [.....6] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + idle: [....18] [ip4][..udp] [...192.168.2.17][55914] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + idle: [....31] [ip4][..udp] [...192.168.2.17][64203] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + idle: [....43] [ip4][..udp] [...192.168.2.17][62160] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + idle: [....37] [ip4][..udp] [...192.168.2.17][49880] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + idle: [....36] [ip4][..udp] [...192.168.2.17][53983] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + idle: [....44] [ip4][..udp] [...192.168.2.17][52031] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + end: [....26] [ip4][..tcp] [...192.168.2.17][50578] -> [.17.253.105.202][..443] + end: [....27] [ip4][..tcp] [...192.168.2.17][50579] -> [.17.253.105.202][..443] + idle: [....23] [ip4][..tcp] [...192.168.2.17][50576] -> [...95.101.25.53][..443] + idle: [....51] [ip4][..tcp] [...192.168.2.17][50588] -> [...95.101.24.53][..443] [TLS.AppleiTunes][Streaming][Fun] + idle: [....33] [ip4][..udp] [...192.168.2.17][62526] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + end: [....25] [ip4][..tcp] [...192.168.2.17][49152] -> [.17.253.105.202][...80] [HTTP.Apple][ConnCheck][Safe] + idle: [....14] [ip6][icmp6] [...............fe80::823:3f17:8298:a29c] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + idle: [....12] [ip6][icmp6] [...............fe80::823:3f17:8298:a29c] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + idle: [....30] [ip4][..udp] [...192.168.2.17][52682] -> [....192.168.2.1][...53] [DNS.AppleiCloud][Web][Acceptable] + idle: [....48] [ip4][..udp] [...192.168.2.17][65079] -> [....192.168.2.1][...53] [DNS.AppleiTunes][Streaming][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ipp.pcap.out b/test/results/flow-info/ipp.pcap.out new file mode 100644 index 000000000..56dd5ded0 --- /dev/null +++ b/test/results/flow-info/ipp.pcap.out @@ -0,0 +1,26 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....10.10.10.49][55341] -> [...10.10.10.251][..631] + detected: [.....1] [ip4][..tcp] [....10.10.10.49][55341] -> [...10.10.10.251][..631] [HTTP.IPP][System][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + new: [.....2] [ip4][..tcp] [....10.10.10.49][55342] -> [...10.10.10.251][..631] + detected: [.....2] [ip4][..tcp] [....10.10.10.49][55342] -> [...10.10.10.251][..631] [HTTP.IPP][System][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + analyse: [.....2] [ip4][..tcp] [....10.10.10.49][55342] -> [...10.10.10.251][..631] [HTTP.IPP][System][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.009| 0.004| 0.004] + [IAT(c->s)...: 0.000| 0.009| 0.003| 0.003][IAT(s->c)...: 0.001| 0.009| 0.006| 0.003] + [PKTLEN(c->s): 66.000|2962.000|1331.700| 799.700][PKTLEN(s->c): 66.000| 91.000| 69.000| 7.300] + [BINS(c->s)..: 3,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,1,1,1,0,1,0,9] + [BINS(s->c)..: 11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....3] [ip4][..tcp] [....10.10.10.49][55343] -> [...10.10.10.251][..631] + detected: [.....3] [ip4][..tcp] [....10.10.10.49][55343] -> [...10.10.10.251][..631] [HTTP.IPP][System][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + end: [.....1] [ip4][..tcp] [....10.10.10.49][55341] -> [...10.10.10.251][..631] [HTTP.IPP][System][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + end: [.....2] [ip4][..tcp] [....10.10.10.49][55342] -> [...10.10.10.251][..631] [HTTP.IPP][System][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + end: [.....3] [ip4][..tcp] [....10.10.10.49][55343] -> [...10.10.10.251][..631] [HTTP.IPP][System][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ipsec_isakmp_esp.pcap.out b/test/results/flow-info/ipsec_isakmp_esp.pcap.out new file mode 100644 index 000000000..acb3c0bae --- /dev/null +++ b/test/results/flow-info/ipsec_isakmp_esp.pcap.out @@ -0,0 +1,199 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] + detected: [.....1] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + new: [.....2] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] + detected: [.....2] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + update: [.....1] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + update: [.....2] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + DAEMON-EVENT: [Processed: 23 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 2] + update: [.....1] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + update: [.....2] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + analyse: [.....1] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 662.067| 87.057| 203.164] + [IAT(c->s)...: 0.001| 661.960| 90.678| 207.585][IAT(s->c)...: 0.004| 662.067| 83.714| 198.937] + [PKTLEN(c->s): 138.000|1374.000| 814.200| 488.500][PKTLEN(s->c): 122.000|1070.000| 270.000| 229.400] + [BINS(c->s)..: 0,0,0,4,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,3,0,7,0,3,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....1] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + update: [.....2] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + DAEMON-EVENT: [Processed: 61 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 6] + idle: [.....2] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + update: [.....1] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + new: [.....3] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] + detected: [.....3] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + update: [.....1] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + update: [.....3] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + DAEMON-EVENT: [Processed: 84 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 9] + idle: [.....1] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + update: [.....3] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + new: [.....4] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.195][.4500] + detected: [.....4] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.195][.4500] [IPSec][VPN][Safe] + update: [.....3] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + new: [.....5] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] + detected: [.....5] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + new: [.....6] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.195][..500] + detected: [.....6] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.195][..500] [IPSec][VPN][Safe] + idle: [.....3] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + update: [.....4] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.195][.4500] [IPSec][VPN][Safe] + DAEMON-EVENT: [Processed: 126 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 12] + idle: [.....5] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + update: [.....4] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.195][.4500] [IPSec][VPN][Safe] + update: [.....6] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.195][..500] [IPSec][VPN][Safe] + DAEMON-EVENT: [Processed: 145 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 14] + new: [.....7] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.194][..500] + detected: [.....7] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.194][..500] [IPSec][VPN][Safe] + new: [.....8] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.194][.4500] + detected: [.....8] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.194][.4500] [IPSec][VPN][Safe] + idle: [.....4] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.195][.4500] [IPSec][VPN][Safe] + idle: [.....6] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.195][..500] [IPSec][VPN][Safe] + DAEMON-EVENT: [Processed: 164 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 14] + update: [.....8] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.194][.4500] [IPSec][VPN][Safe] + update: [.....7] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.194][..500] [IPSec][VPN][Safe] + update: [.....8] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.194][.4500] [IPSec][VPN][Safe] + update: [.....7] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.194][..500] [IPSec][VPN][Safe] + DAEMON-EVENT: [Processed: 187 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 18] + new: [.....9] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.225][..500] + detected: [.....9] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.225][..500] [IPSec][VPN][Safe] + new: [....10] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.225][.4500] + detected: [....10] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.225][.4500] [IPSec][VPN][Safe] + RISK: Malformed Packet + idle: [.....8] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.194][.4500] [IPSec][VPN][Safe] + idle: [.....7] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.194][..500] [IPSec][VPN][Safe] + new: [....11] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.131][..500] + detected: [....11] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.131][..500] [IPSec][VPN][Safe] + RISK: Malformed Packet + new: [....12] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.131][.4500] + detected: [....12] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.131][.4500] [IPSec][VPN][Safe] + idle: [....10] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.225][.4500] [IPSec][VPN][Safe] + RISK: Malformed Packet + idle: [.....9] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.225][..500] [IPSec][VPN][Safe] + DAEMON-EVENT: [Processed: 225 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 12|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 18] + update: [....12] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.131][.4500] [IPSec][VPN][Safe] + update: [....11] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.131][..500] [IPSec][VPN][Safe] + RISK: Malformed Packet + DAEMON-EVENT: [Processed: 244 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 12|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 20] + new: [....13] [ip4][..udp] [..192.168.2.100][43811] -> [109.237.187.193][.4500] + detected: [....13] [ip4][..udp] [..192.168.2.100][43811] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + new: [....14] [ip4][..udp] [..192.168.2.100][43811] -> [109.237.187.193][..500] + detected: [....14] [ip4][..udp] [..192.168.2.100][43811] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + idle: [....12] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.131][.4500] [IPSec][VPN][Safe] + idle: [....11] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.131][..500] [IPSec][VPN][Safe] + RISK: Malformed Packet + DAEMON-EVENT: [Processed: 267 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 14|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 20] + new: [....15] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.129][..500] + detected: [....15] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.129][..500] [IPSec][VPN][Safe] + new: [....16] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.129][.4500] + detected: [....16] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.129][.4500] [IPSec][VPN][Safe] + idle: [....13] [ip4][..udp] [..192.168.2.100][43811] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + idle: [....14] [ip4][..udp] [..192.168.2.100][43811] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + new: [....17] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.225][..500] + detected: [....17] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.225][..500] [IPSec][VPN][Safe] + new: [....18] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.225][.4500] + detected: [....18] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.225][.4500] [IPSec][VPN][Safe] + new: [....19] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.131][..500] + detected: [....19] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.131][..500] [IPSec][VPN][Safe] + new: [....20] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.131][.4500] + detected: [....20] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.131][.4500] [IPSec][VPN][Safe] + new: [....21] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] + detected: [....21] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + new: [....22] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] + detected: [....22] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + new: [....23] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.227][..500] + detected: [....23] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.227][..500] [IPSec][VPN][Safe] + new: [....24] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.227][.4500] + detected: [....24] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.227][.4500] [IPSec][VPN][Safe] + analyse: [....24] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.227][.4500] [IPSec][VPN][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.000| 0.000| 0.000] + [IAT(c->s)...: 0.000| 0.000| 0.000| 0.000][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 138.000|1374.000| 725.700| 502.000][PKTLEN(s->c): 122.000|1070.000| 314.000| 293.200] + [BINS(c->s)..: 0,0,0,4,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,4,0,6,0,3,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....23] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.227][..500] [IPSec][VPN][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.000| 0.000| 0.000] + [IAT(c->s)...: 0.000| 0.000| 0.000| 0.000][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 818.000| 842.000| 830.000| 12.000][PKTLEN(s->c): 94.000| 330.000| 212.000| 118.000] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,8,0,0,0,0,0,0,0,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....25] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.226][..500] + detected: [....25] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.226][..500] [IPSec][VPN][Safe] + new: [....26] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.226][.4500] + detected: [....26] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.226][.4500] [IPSec][VPN][Safe] + new: [....27] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.130][..500] + detected: [....27] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.130][..500] [IPSec][VPN][Safe] + new: [....28] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.130][.4500] + detected: [....28] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.130][.4500] [IPSec][VPN][Safe] + analyse: [....28] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.130][.4500] [IPSec][VPN][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.000| 0.000| 0.000] + [IAT(c->s)...: 0.000| 0.000| 0.000| 0.000][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 138.000|1374.000| 645.700| 480.400][PKTLEN(s->c): 122.000|1374.000| 678.600| 531.400] + [BINS(c->s)..: 0,0,0,4,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,2,0,4,0,3,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,2,4,0,0,0,0,0,0] + new: [....29] [ip4][..udp] [..192.168.2.100][42593] -> [109.237.187.193][.4500] + detected: [....29] [ip4][..udp] [..192.168.2.100][42593] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + new: [....30] [ip4][..udp] [..192.168.2.100][42593] -> [109.237.187.193][..500] + detected: [....30] [ip4][..udp] [..192.168.2.100][42593] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + new: [....31] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.194][..500] + detected: [....31] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.194][..500] [IPSec][VPN][Safe] + new: [....32] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.194][.4500] + detected: [....32] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.194][.4500] [IPSec][VPN][Safe] + new: [....33] [ip4][..udp] [..192.168.2.100][41618] -> [109.237.187.194][.4500] + detected: [....33] [ip4][..udp] [..192.168.2.100][41618] -> [109.237.187.194][.4500] [IPSec][VPN][Safe] + new: [....34] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.195][.4500] + detected: [....34] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.195][.4500] [IPSec][VPN][Safe] + new: [....35] [ip4][..udp] [..192.168.2.100][41618] -> [109.237.187.194][..500] + detected: [....35] [ip4][..udp] [..192.168.2.100][41618] -> [109.237.187.194][..500] [IPSec][VPN][Safe] + new: [....36] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.195][..500] + detected: [....36] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.195][..500] [IPSec][VPN][Safe] + analyse: [....34] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.195][.4500] [IPSec][VPN][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.000| 0.000| 0.000] + [IAT(c->s)...: 0.000| 0.000| 0.000| 0.000][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 138.000|1374.000| 723.600| 501.100][PKTLEN(s->c): 122.000|1374.000| 461.300| 438.300] + [BINS(c->s)..: 0,0,0,4,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,2,0,6,0,3,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0] + analyse: [....18] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.225][.4500] [IPSec][VPN][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.000| 0.000| 0.000] + [IAT(c->s)...: 0.000| 0.000| 0.000| 0.000][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 138.000|1374.000| 724.700| 501.600][PKTLEN(s->c): 122.000|1374.000| 387.600| 380.100] + [BINS(c->s)..: 0,0,0,4,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,3,0,6,0,3,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0] + idle: [....28] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.130][.4500] [IPSec][VPN][Safe] + idle: [....20] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.131][.4500] [IPSec][VPN][Safe] + idle: [....26] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.226][.4500] [IPSec][VPN][Safe] + idle: [....24] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.227][.4500] [IPSec][VPN][Safe] + idle: [....34] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.195][.4500] [IPSec][VPN][Safe] + idle: [....32] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.194][.4500] [IPSec][VPN][Safe] + idle: [....22] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + idle: [....18] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.225][.4500] [IPSec][VPN][Safe] + idle: [....16] [ip4][..udp] [..192.168.2.100][14500] -> [109.237.187.129][.4500] [IPSec][VPN][Safe] + idle: [....27] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.130][..500] [IPSec][VPN][Safe] + idle: [....19] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.131][..500] [IPSec][VPN][Safe] + idle: [....25] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.226][..500] [IPSec][VPN][Safe] + idle: [....23] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.227][..500] [IPSec][VPN][Safe] + idle: [....36] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.195][..500] [IPSec][VPN][Safe] + idle: [....31] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.194][..500] [IPSec][VPN][Safe] + idle: [....21] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + idle: [....17] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.225][..500] [IPSec][VPN][Safe] + idle: [....15] [ip4][..udp] [..192.168.2.100][10500] -> [109.237.187.129][..500] [IPSec][VPN][Safe] + idle: [....33] [ip4][..udp] [..192.168.2.100][41618] -> [109.237.187.194][.4500] [IPSec][VPN][Safe] + idle: [....35] [ip4][..udp] [..192.168.2.100][41618] -> [109.237.187.194][..500] [IPSec][VPN][Safe] + idle: [....29] [ip4][..udp] [..192.168.2.100][42593] -> [109.237.187.193][.4500] [IPSec][VPN][Safe] + idle: [....30] [ip4][..udp] [..192.168.2.100][42593] -> [109.237.187.193][..500] [IPSec][VPN][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ipv6_in_gtp.pcap.out b/test/results/flow-info/ipv6_in_gtp.pcap.out new file mode 100644 index 000000000..d1508e9f1 --- /dev/null +++ b/test/results/flow-info/ipv6_in_gtp.pcap.out @@ -0,0 +1,8 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/irc.pcap.out b/test/results/flow-info/irc.pcap.out new file mode 100644 index 000000000..23954acb7 --- /dev/null +++ b/test/results/flow-info/irc.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.10.180.156.249][45921] -> [...38.229.70.20][.8000] + detected: [.....1] [ip4][..tcp] [.10.180.156.249][45921] -> [...38.229.70.20][.8000] [IRC][Chat][Unsafe] + RISK: Known Proto on Non Std Port, Unsafe Protocol + idle: [.....1] [ip4][..tcp] [.10.180.156.249][45921] -> [...38.229.70.20][.8000] [IRC][Chat][Unsafe] + RISK: Known Proto on Non Std Port, Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ja3_lots_of_cipher_suites.pcap.out b/test/results/flow-info/ja3_lots_of_cipher_suites.pcap.out new file mode 100644 index 000000000..ea0b0fb6a --- /dev/null +++ b/test/results/flow-info/ja3_lots_of_cipher_suites.pcap.out @@ -0,0 +1,15 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ja3_lots_of_cipher_suites_2_anon.pcap.out b/test/results/flow-info/ja3_lots_of_cipher_suites_2_anon.pcap.out new file mode 100644 index 000000000..de938f10c --- /dev/null +++ b/test/results/flow-info/ja3_lots_of_cipher_suites_2_anon.pcap.out @@ -0,0 +1,20 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Captured packet size is smaller than expected packet size + new: [.....1] [ip4][..udp] [.132.190.244.12][.2152] -> [.151.121.185.44][.2152] + detected: [.....1] [ip4][..udp] [.132.190.244.12][.2152] -> [.151.121.185.44][.2152] [GTP.GTP_U][Network][Acceptable] + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + idle: [.....1] [ip4][..udp] [.132.190.244.12][.2152] -> [.151.121.185.44][.2152] [GTP.GTP_U][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/jabber.pcap.out b/test/results/flow-info/jabber.pcap.out new file mode 100644 index 000000000..921c64365 --- /dev/null +++ b/test/results/flow-info/jabber.pcap.out @@ -0,0 +1,77 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....172.16.0.62][57094] -> [...172.16.1.138][.5222] + detected: [.....1] [ip4][..tcp] [....172.16.0.62][57094] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + analyse: [.....1] [ip4][..tcp] [....172.16.0.62][57094] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.338| 0.039| 0.084] + [IAT(c->s)...: 0.000| 0.338| 0.038| 0.084][IAT(s->c)...: 0.000| 0.337| 0.040| 0.085] + [PKTLEN(c->s): 66.000| 404.000| 121.400| 88.700][PKTLEN(s->c): 66.000| 445.000| 165.500| 115.600] + [BINS(c->s)..: 11,1,0,3,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,1,0,1,1,3,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....2] [ip4][..tcp] [....172.16.0.62][57122] -> [...172.16.1.138][.5222] + detected: [.....2] [ip4][..tcp] [....172.16.0.62][57122] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + analyse: [.....2] [ip4][..tcp] [....172.16.0.62][57122] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.337| 0.038| 0.085] + [IAT(c->s)...: 0.000| 0.337| 0.037| 0.085][IAT(s->c)...: 0.000| 0.336| 0.039| 0.085] + [PKTLEN(c->s): 66.000| 404.000| 121.400| 88.700][PKTLEN(s->c): 66.000| 445.000| 165.400| 115.500] + [BINS(c->s)..: 11,1,0,3,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,1,0,1,1,3,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....3] [ip4][..tcp] [....172.16.0.62][57126] -> [...172.16.1.138][.5222] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [....172.16.0.62][57126] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + new: [.....4] [ip4][..tcp] [....172.16.0.62][57129] -> [...172.16.1.138][.5222] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [....172.16.0.62][57129] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + DAEMON-EVENT: [Processed: 189 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + end: [.....3] [ip4][..tcp] [....172.16.0.62][57126] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + new: [.....5] [ip4][..tcp] [....172.16.0.62][57147] -> [...172.16.1.138][.5222] + detected: [.....5] [ip4][..tcp] [....172.16.0.62][57147] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + new: [.....6] [ip4][..tcp] [....172.16.0.62][57149] -> [...172.16.1.138][.5222] [MIDSTREAM] + detected: [.....6] [ip4][..tcp] [....172.16.0.62][57149] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + end: [.....5] [ip4][..tcp] [....172.16.0.62][57147] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + DAEMON-EVENT: [Processed: 243 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + analyse: [.....6] [ip4][..tcp] [....172.16.0.62][57149] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 600.488| 42.007| 147.105] + [IAT(c->s)...: 0.000| 600.484| 38.300| 140.969][IAT(s->c)...: 0.000| 600.488| 46.510| 154.108] + [PKTLEN(c->s): 66.000| 305.000| 126.300| 77.600][PKTLEN(s->c): 66.000| 529.000| 214.300| 140.200] + [BINS(c->s)..: 9,4,0,0,2,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,0,5,0,0,3,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 270 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....7] [ip4][..tcp] [...192.168.58.1][53460] -> [.192.168.58.153][.5222] + detected: [.....7] [ip4][..tcp] [...192.168.58.1][53460] -> [.192.168.58.153][.5222] [Jabber][Web][Acceptable] + idle: [.....1] [ip4][..tcp] [....172.16.0.62][57094] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + idle: [.....2] [ip4][..tcp] [....172.16.0.62][57122] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + idle: [.....4] [ip4][..tcp] [....172.16.0.62][57129] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + idle: [.....6] [ip4][..tcp] [....172.16.0.62][57149] -> [...172.16.1.138][.5222] [Jabber][Web][Acceptable] + DAEMON-EVENT: [Processed: 283 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 7|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....8] [ip4][..tcp] [..192.168.2.100][34218] -> [.160.44.201.102][.5223] + detected: [.....8] [ip4][..tcp] [..192.168.2.100][34218] -> [.160.44.201.102][.5223] [Jabber][Web][Acceptable] + end: [.....7] [ip4][..tcp] [...192.168.58.1][53460] -> [.192.168.58.153][.5222] [Jabber][Web][Acceptable] + DAEMON-EVENT: [Processed: 298 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....9] [ip4][..tcp] [..192.168.2.100][37614] -> [.160.44.201.102][.5223] + detected: [.....9] [ip4][..tcp] [..192.168.2.100][37614] -> [.160.44.201.102][.5223] [Jabber][Web][Acceptable] + idle: [.....8] [ip4][..tcp] [..192.168.2.100][34218] -> [.160.44.201.102][.5223] [Jabber][Web][Acceptable] + DAEMON-EVENT: [Processed: 313 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 9|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....10] [ip4][..tcp] [..192.168.2.100][58388] -> [.160.44.201.102][.5223] + detected: [....10] [ip4][..tcp] [..192.168.2.100][58388] -> [.160.44.201.102][.5223] [Jabber][Web][Acceptable] + idle: [.....9] [ip4][..tcp] [..192.168.2.100][37614] -> [.160.44.201.102][.5223] [Jabber][Web][Acceptable] + DAEMON-EVENT: [Processed: 328 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 10|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....11] [ip4][..tcp] [..192.168.2.100][41420] -> [.160.44.201.102][.5223] + detected: [....11] [ip4][..tcp] [..192.168.2.100][41420] -> [.160.44.201.102][.5223] [Jabber][Web][Acceptable] + idle: [....10] [ip4][..tcp] [..192.168.2.100][58388] -> [.160.44.201.102][.5223] [Jabber][Web][Acceptable] + DAEMON-EVENT: [Processed: 343 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 11|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....12] [ip4][..tcp] [..192.168.2.100][34070] -> [.160.44.201.102][.5223] + detected: [....12] [ip4][..tcp] [..192.168.2.100][34070] -> [.160.44.201.102][.5223] [Jabber][Web][Acceptable] + idle: [....11] [ip4][..tcp] [..192.168.2.100][41420] -> [.160.44.201.102][.5223] [Jabber][Web][Acceptable] + idle: [....12] [ip4][..tcp] [..192.168.2.100][34070] -> [.160.44.201.102][.5223] [Jabber][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/kerberos-error.pcap.out b/test/results/flow-info/kerberos-error.pcap.out new file mode 100644 index 000000000..bed9b9c87 --- /dev/null +++ b/test/results/flow-info/kerberos-error.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.148.151.79.183][34473] -> [.144.199.10.233][...88] + detected: [.....1] [ip4][..udp] [.148.151.79.183][34473] -> [.144.199.10.233][...88] [Kerberos][Network][Acceptable] + idle: [.....1] [ip4][..udp] [.148.151.79.183][34473] -> [.144.199.10.233][...88] [Kerberos][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/kerberos-login.pcap.out b/test/results/flow-info/kerberos-login.pcap.out new file mode 100644 index 000000000..912f55ce0 --- /dev/null +++ b/test/results/flow-info/kerberos-login.pcap.out @@ -0,0 +1,53 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [......10.1.12.2][.1061] -> [.......10.5.3.1][...88] + detected: [.....1] [ip4][..udp] [......10.1.12.2][.1061] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + new: [.....2] [ip4][..udp] [......10.1.12.2][.1065] -> [.......10.5.3.1][...88] + detected: [.....2] [ip4][..udp] [......10.1.12.2][.1065] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + new: [.....3] [ip4][..udp] [......10.1.12.2][.1067] -> [.......10.5.3.1][...88] + detected: [.....3] [ip4][..udp] [......10.1.12.2][.1067] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + new: [.....4] [ip4][..udp] [......10.1.12.2][.1068] -> [.......10.5.3.1][...88] + detected: [.....4] [ip4][..udp] [......10.1.12.2][.1068] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + new: [.....5] [ip4][..udp] [......10.1.12.2][.1069] -> [.......10.5.3.1][...88] + detected: [.....5] [ip4][..udp] [......10.1.12.2][.1069] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + new: [.....6] [ip4][..udp] [......10.1.12.2][.1074] -> [.......10.5.3.1][...88] + detected: [.....6] [ip4][..udp] [......10.1.12.2][.1074] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + new: [.....7] [ip4][..udp] [......10.1.12.2][.1076] -> [.......10.5.3.1][...88] + detected: [.....7] [ip4][..udp] [......10.1.12.2][.1076] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + new: [.....8] [ip4][..udp] [......10.1.12.2][.1084] -> [.......10.5.3.1][...88] + detected: [.....8] [ip4][..udp] [......10.1.12.2][.1084] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + new: [.....9] [ip4][..udp] [......10.1.12.2][.1089] -> [.......10.5.3.1][...88] + detected: [.....9] [ip4][..udp] [......10.1.12.2][.1089] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + new: [....10] [ip4][..udp] [......10.1.12.2][.1090] -> [.......10.5.3.1][...88] + detected: [....10] [ip4][..udp] [......10.1.12.2][.1090] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + new: [....11] [ip4][..udp] [......10.1.12.2][.1092] -> [.......10.5.3.1][...88] + detected: [....11] [ip4][..udp] [......10.1.12.2][.1092] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + new: [....12] [ip4][..udp] [......10.1.12.2][.1096] -> [.......10.5.3.1][...88] + detected: [....12] [ip4][..udp] [......10.1.12.2][.1096] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + update: [.....1] [ip4][..udp] [......10.1.12.2][.1061] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + update: [.....2] [ip4][..udp] [......10.1.12.2][.1065] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + update: [.....3] [ip4][..udp] [......10.1.12.2][.1067] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + update: [.....4] [ip4][..udp] [......10.1.12.2][.1068] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + update: [.....5] [ip4][..udp] [......10.1.12.2][.1069] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + update: [.....6] [ip4][..udp] [......10.1.12.2][.1074] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + update: [.....7] [ip4][..udp] [......10.1.12.2][.1076] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + DAEMON-EVENT: [Processed: 24 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 12 / 12|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 7] + new: [....13] [ip4][..tcp] [..192.168.10.12][44256] -> [...192.168.10.3][...88] + detected: [....13] [ip4][..tcp] [..192.168.10.12][44256] -> [...192.168.10.3][...88] [Kerberos][Network][Acceptable] + detection-update: [....13] [ip4][..tcp] [..192.168.10.12][44256] -> [...192.168.10.3][...88] [Kerberos][Network][Acceptable] + idle: [.....1] [ip4][..udp] [......10.1.12.2][.1061] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + idle: [.....2] [ip4][..udp] [......10.1.12.2][.1065] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + idle: [.....3] [ip4][..udp] [......10.1.12.2][.1067] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + idle: [.....4] [ip4][..udp] [......10.1.12.2][.1068] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + idle: [.....5] [ip4][..udp] [......10.1.12.2][.1069] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + idle: [.....6] [ip4][..udp] [......10.1.12.2][.1074] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + idle: [.....7] [ip4][..udp] [......10.1.12.2][.1076] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + idle: [.....8] [ip4][..udp] [......10.1.12.2][.1084] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + idle: [.....9] [ip4][..udp] [......10.1.12.2][.1089] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + idle: [....10] [ip4][..udp] [......10.1.12.2][.1090] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + idle: [....11] [ip4][..udp] [......10.1.12.2][.1092] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + idle: [....12] [ip4][..udp] [......10.1.12.2][.1096] -> [.......10.5.3.1][...88] [Kerberos][Network][Acceptable] + end: [....13] [ip4][..tcp] [..192.168.10.12][44256] -> [...192.168.10.3][...88] [Kerberos][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/kerberos.pcap.out b/test/results/flow-info/kerberos.pcap.out new file mode 100644 index 000000000..dc38009c0 --- /dev/null +++ b/test/results/flow-info/kerberos.pcap.out @@ -0,0 +1,115 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...172.16.8.201][49157] -> [.....172.16.8.8][...88] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [...172.16.8.201][49157] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + new: [.....2] [ip4][..tcp] [...172.16.8.201][49158] -> [.....172.16.8.8][...88] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [...172.16.8.201][49158] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + new: [.....3] [ip4][..tcp] [...172.16.8.201][49159] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [.....4] [ip4][..tcp] [...172.16.8.201][49160] -> [.....172.16.8.8][...88] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [...172.16.8.201][49160] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + detection-update: [.....4] [ip4][..tcp] [...172.16.8.201][49160] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + new: [.....5] [ip4][..tcp] [...172.16.8.201][49156] -> [.....172.16.8.8][..445] [MIDSTREAM] + new: [.....6] [ip4][..tcp] [...172.16.8.201][49162] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [.....7] [ip4][..tcp] [...172.16.8.201][49161] -> [.....172.16.8.8][..389] [MIDSTREAM] + new: [.....8] [ip4][..tcp] [...172.16.8.201][49166] -> [.....172.16.8.8][...88] [MIDSTREAM] + detected: [.....8] [ip4][..tcp] [...172.16.8.201][49166] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + new: [.....9] [ip4][..tcp] [...172.16.8.201][49167] -> [.....172.16.8.8][...88] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [...172.16.8.201][49167] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + new: [....10] [ip4][..tcp] [...172.16.8.201][49168] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [....11] [ip4][..tcp] [...172.16.8.201][49165] -> [.....172.16.8.8][49155] [MIDSTREAM] + new: [....12] [ip4][..tcp] [...172.16.8.201][49169] -> [.....172.16.8.8][..389] [MIDSTREAM] + new: [....13] [ip4][..tcp] [...172.16.8.201][49170] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [....14] [ip4][..tcp] [...172.16.8.201][49171] -> [.....172.16.8.8][...88] [MIDSTREAM] + detected: [....14] [ip4][..tcp] [...172.16.8.201][49171] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + detection-update: [....14] [ip4][..tcp] [...172.16.8.201][49171] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + new: [....15] [ip4][..tcp] [...172.16.8.201][49173] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [....16] [ip4][..tcp] [...172.16.8.201][49172] -> [.....172.16.8.8][..389] [MIDSTREAM] + new: [....17] [ip4][..tcp] [...172.16.8.201][49175] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [....18] [ip4][..tcp] [...172.16.8.201][49176] -> [.....172.16.8.8][...88] [MIDSTREAM] + detected: [....18] [ip4][..tcp] [...172.16.8.201][49176] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + detection-update: [....18] [ip4][..tcp] [...172.16.8.201][49176] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + new: [....19] [ip4][..tcp] [...172.16.8.201][49174] -> [.....172.16.8.8][..445] [MIDSTREAM] + new: [....20] [ip4][..tcp] [...172.16.8.201][49179] -> [.....172.16.8.8][..389] [MIDSTREAM] + new: [....21] [ip4][..tcp] [...172.16.8.201][49180] -> [.....172.16.8.8][..389] [MIDSTREAM] + new: [....22] [ip4][..tcp] [...172.16.8.201][49181] -> [.....172.16.8.8][...88] [MIDSTREAM] + detected: [....22] [ip4][..tcp] [...172.16.8.201][49181] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + new: [....23] [ip4][..tcp] [...172.16.8.201][49182] -> [.....172.16.8.8][...88] [MIDSTREAM] + detected: [....23] [ip4][..tcp] [...172.16.8.201][49182] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + new: [....24] [ip4][..tcp] [...172.16.8.201][49183] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [....25] [ip4][..tcp] [...172.16.8.201][49186] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [....26] [ip4][..tcp] [...172.16.8.201][49185] -> [.....172.16.8.8][49155] [MIDSTREAM] + new: [....27] [ip4][..tcp] [...172.16.8.201][49187] -> [.....172.16.8.8][...88] [MIDSTREAM] + detected: [....27] [ip4][..tcp] [...172.16.8.201][49187] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + new: [....28] [ip4][..tcp] [...172.16.8.201][49188] -> [.....172.16.8.8][...88] [MIDSTREAM] + detected: [....28] [ip4][..tcp] [...172.16.8.201][49188] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + new: [....29] [ip4][..tcp] [...172.16.8.201][49189] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [....30] [ip4][..tcp] [...172.16.8.201][49190] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [....31] [ip4][..tcp] [...172.16.8.201][49192] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [....32] [ip4][..tcp] [...172.16.8.201][49191] -> [.....172.16.8.8][..389] [MIDSTREAM] + new: [....33] [ip4][..tcp] [...172.16.8.201][49193] -> [.....172.16.8.8][..389] [MIDSTREAM] + new: [....34] [ip4][..tcp] [...172.16.8.201][49195] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [....35] [ip4][..tcp] [...172.16.8.201][49196] -> [.....172.16.8.8][...88] [MIDSTREAM] + new: [....36] [ip4][..tcp] [...172.16.8.201][49194] -> [.....172.16.8.8][..445] [MIDSTREAM] + not-detected: [....11] [ip4][..tcp] [...172.16.8.201][49165] -> [.....172.16.8.8][49155] [Unknown][Unrated] + idle: [....11] [ip4][..tcp] [...172.16.8.201][49165] -> [.....172.16.8.8][49155] + not-detected: [....26] [ip4][..tcp] [...172.16.8.201][49185] -> [.....172.16.8.8][49155] [Unknown][Unrated] + idle: [....26] [ip4][..tcp] [...172.16.8.201][49185] -> [.....172.16.8.8][49155] + idle: [.....1] [ip4][..tcp] [...172.16.8.201][49157] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [.....2] [ip4][..tcp] [...172.16.8.201][49158] -> [.....172.16.8.8][...88] + guessed: [.....3] [ip4][..tcp] [...172.16.8.201][49159] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [.....3] [ip4][..tcp] [...172.16.8.201][49159] -> [.....172.16.8.8][...88] + idle: [.....4] [ip4][..tcp] [...172.16.8.201][49160] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + guessed: [.....6] [ip4][..tcp] [...172.16.8.201][49162] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [.....6] [ip4][..tcp] [...172.16.8.201][49162] -> [.....172.16.8.8][...88] + idle: [.....8] [ip4][..tcp] [...172.16.8.201][49166] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [.....9] [ip4][..tcp] [...172.16.8.201][49167] -> [.....172.16.8.8][...88] + guessed: [....10] [ip4][..tcp] [...172.16.8.201][49168] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....10] [ip4][..tcp] [...172.16.8.201][49168] -> [.....172.16.8.8][...88] + guessed: [....13] [ip4][..tcp] [...172.16.8.201][49170] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....13] [ip4][..tcp] [...172.16.8.201][49170] -> [.....172.16.8.8][...88] + idle: [....14] [ip4][..tcp] [...172.16.8.201][49171] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + guessed: [....15] [ip4][..tcp] [...172.16.8.201][49173] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....15] [ip4][..tcp] [...172.16.8.201][49173] -> [.....172.16.8.8][...88] + guessed: [....17] [ip4][..tcp] [...172.16.8.201][49175] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....17] [ip4][..tcp] [...172.16.8.201][49175] -> [.....172.16.8.8][...88] + idle: [....18] [ip4][..tcp] [...172.16.8.201][49176] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....22] [ip4][..tcp] [...172.16.8.201][49181] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....23] [ip4][..tcp] [...172.16.8.201][49182] -> [.....172.16.8.8][...88] + guessed: [....24] [ip4][..tcp] [...172.16.8.201][49183] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....24] [ip4][..tcp] [...172.16.8.201][49183] -> [.....172.16.8.8][...88] + guessed: [....25] [ip4][..tcp] [...172.16.8.201][49186] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....25] [ip4][..tcp] [...172.16.8.201][49186] -> [.....172.16.8.8][...88] + idle: [....27] [ip4][..tcp] [...172.16.8.201][49187] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....28] [ip4][..tcp] [...172.16.8.201][49188] -> [.....172.16.8.8][...88] + guessed: [....29] [ip4][..tcp] [...172.16.8.201][49189] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....29] [ip4][..tcp] [...172.16.8.201][49189] -> [.....172.16.8.8][...88] + guessed: [....30] [ip4][..tcp] [...172.16.8.201][49190] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....30] [ip4][..tcp] [...172.16.8.201][49190] -> [.....172.16.8.8][...88] + guessed: [....31] [ip4][..tcp] [...172.16.8.201][49192] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....31] [ip4][..tcp] [...172.16.8.201][49192] -> [.....172.16.8.8][...88] + guessed: [....34] [ip4][..tcp] [...172.16.8.201][49195] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....34] [ip4][..tcp] [...172.16.8.201][49195] -> [.....172.16.8.8][...88] + guessed: [....35] [ip4][..tcp] [...172.16.8.201][49196] -> [.....172.16.8.8][...88] [Kerberos][Network][Acceptable] + idle: [....35] [ip4][..tcp] [...172.16.8.201][49196] -> [.....172.16.8.8][...88] + guessed: [.....7] [ip4][..tcp] [...172.16.8.201][49161] -> [.....172.16.8.8][..389] [LDAP][System][Acceptable] + idle: [.....7] [ip4][..tcp] [...172.16.8.201][49161] -> [.....172.16.8.8][..389] + guessed: [....12] [ip4][..tcp] [...172.16.8.201][49169] -> [.....172.16.8.8][..389] [LDAP][System][Acceptable] + idle: [....12] [ip4][..tcp] [...172.16.8.201][49169] -> [.....172.16.8.8][..389] + guessed: [....16] [ip4][..tcp] [...172.16.8.201][49172] -> [.....172.16.8.8][..389] [LDAP][System][Acceptable] + idle: [....16] [ip4][..tcp] [...172.16.8.201][49172] -> [.....172.16.8.8][..389] + guessed: [....20] [ip4][..tcp] [...172.16.8.201][49179] -> [.....172.16.8.8][..389] [LDAP][System][Acceptable] + idle: [....20] [ip4][..tcp] [...172.16.8.201][49179] -> [.....172.16.8.8][..389] + guessed: [....21] [ip4][..tcp] [...172.16.8.201][49180] -> [.....172.16.8.8][..389] [LDAP][System][Acceptable] + idle: [....21] [ip4][..tcp] [...172.16.8.201][49180] -> [.....172.16.8.8][..389] + guessed: [....32] [ip4][..tcp] [...172.16.8.201][49191] -> [.....172.16.8.8][..389] [LDAP][System][Acceptable] + idle: [....32] [ip4][..tcp] [...172.16.8.201][49191] -> [.....172.16.8.8][..389] + guessed: [....33] [ip4][..tcp] [...172.16.8.201][49193] -> [.....172.16.8.8][..389] [LDAP][System][Acceptable] + idle: [....33] [ip4][..tcp] [...172.16.8.201][49193] -> [.....172.16.8.8][..389] + guessed: [.....5] [ip4][..tcp] [...172.16.8.201][49156] -> [.....172.16.8.8][..445] [SMBv23][System][Acceptable] + idle: [.....5] [ip4][..tcp] [...172.16.8.201][49156] -> [.....172.16.8.8][..445] + guessed: [....19] [ip4][..tcp] [...172.16.8.201][49174] -> [.....172.16.8.8][..445] [SMBv23][System][Acceptable] + idle: [....19] [ip4][..tcp] [...172.16.8.201][49174] -> [.....172.16.8.8][..445] + guessed: [....36] [ip4][..tcp] [...172.16.8.201][49194] -> [.....172.16.8.8][..445] [SMBv23][System][Acceptable] + idle: [....36] [ip4][..tcp] [...172.16.8.201][49194] -> [.....172.16.8.8][..445] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/kerberos_fuzz.pcapng.out b/test/results/flow-info/kerberos_fuzz.pcapng.out new file mode 100644 index 000000000..e5a4a968f --- /dev/null +++ b/test/results/flow-info/kerberos_fuzz.pcapng.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......126.4.1.0][...88] -> [.......19.0.0.0][53646] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [......126.4.1.0][...88] -> [.......19.0.0.0][53646] [Kerberos][Network][Acceptable] + end: [.....1] [ip4][..tcp] [......126.4.1.0][...88] -> [.......19.0.0.0][53646] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/kismet.pcap.out b/test/results/flow-info/kismet.pcap.out new file mode 100644 index 000000000..792e212b7 --- /dev/null +++ b/test/results/flow-info/kismet.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......127.0.0.1][34065] -> [......127.0.0.1][.2501] + detected: [.....1] [ip4][..tcp] [......127.0.0.1][34065] -> [......127.0.0.1][.2501] [Kismet][Network][Acceptable] + analyse: [.....1] [ip4][..tcp] [......127.0.0.1][34065] -> [......127.0.0.1][.2501] [Kismet][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.100| 0.836| 0.406] + [IAT(c->s)...: 0.000| 1.100| 0.828| 0.410][IAT(s->c)...: 0.000| 1.100| 0.845| 0.402] + [PKTLEN(c->s): 54.000|1099.000| 120.100| 252.800][PKTLEN(s->c): 54.000| 253.000| 165.800| 53.700] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,1,0,11,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..tcp] [......127.0.0.1][34065] -> [......127.0.0.1][.2501] [Kismet][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/kontiki.pcap.out b/test/results/flow-info/kontiki.pcap.out new file mode 100644 index 000000000..f0efbc4ac --- /dev/null +++ b/test/results/flow-info/kontiki.pcap.out @@ -0,0 +1,39 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....10.25.32.59][19948] -> [255.255.255.255][19948] + new: [.....2] [ip4][..udp] [....10.25.32.59][19948] -> [..64.200.148.82][.1948] + new: [.....3] [ip4][..udp] [....10.25.32.59][19948] -> [..64.200.148.86][.8888] + detected: [.....3] [ip4][..udp] [....10.25.32.59][19948] -> [..64.200.148.86][.8888] [Kontiki][Media][Potentially Dangerous] + RISK: Unsafe Protocol + new: [.....4] [ip4][.icmp] [...10.25.249.14] -> [....10.25.32.59] + detected: [.....4] [ip4][.icmp] [...10.25.249.14] -> [....10.25.32.59] [ICMP][Network][Acceptable] + new: [.....5] [ip4][..udp] [....10.25.32.59][19948] -> [..64.200.148.88][...80] + detected: [.....5] [ip4][..udp] [....10.25.32.59][19948] -> [..64.200.148.88][...80] [Kontiki][Media][Potentially Dangerous] + RISK: Unsafe Protocol + new: [.....6] [ip4][.icmp] [.....10.25.32.3] -> [....10.25.32.59] + detected: [.....6] [ip4][.icmp] [.....10.25.32.3] -> [....10.25.32.59] [ICMP][Network][Acceptable] + new: [.....7] [ip4][.icmp] [216.168.241.157] -> [....10.25.32.59] + detected: [.....7] [ip4][.icmp] [216.168.241.157] -> [....10.25.32.59] [ICMP][Network][Acceptable] + new: [.....8] [ip4][.icmp] [...4.79.219.125] -> [....10.25.32.59] + detected: [.....8] [ip4][.icmp] [...4.79.219.125] -> [....10.25.32.59] [ICMP][Network][Acceptable] + analyse: [.....3] [ip4][..udp] [....10.25.32.59][19948] -> [..64.200.148.86][.8888] [Kontiki][Media][Potentially Dangerous] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.608| 0.045| 0.118] + [IAT(c->s)...: 0.003| 0.212| 0.078| 0.088][IAT(s->c)...: 0.000| 0.608| 0.032| 0.126] + [PKTLEN(c->s): 46.000| 259.000| 101.100| 79.400][PKTLEN(s->c): 70.000|1283.000|1144.500| 355.200] + [BINS(c->s)..: 7,0,1,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,0,0,0,0,0,0,0,0,0] + idle: [.....8] [ip4][.icmp] [...4.79.219.125] -> [....10.25.32.59] [ICMP][Network][Acceptable] + idle: [.....7] [ip4][.icmp] [216.168.241.157] -> [....10.25.32.59] [ICMP][Network][Acceptable] + idle: [.....3] [ip4][..udp] [....10.25.32.59][19948] -> [..64.200.148.86][.8888] [Kontiki][Media][Potentially Dangerous] + RISK: Unsafe Protocol + idle: [.....6] [ip4][.icmp] [.....10.25.32.3] -> [....10.25.32.59] [ICMP][Network][Acceptable] + idle: [.....4] [ip4][.icmp] [...10.25.249.14] -> [....10.25.32.59] [ICMP][Network][Acceptable] + not-detected: [.....1] [ip4][..udp] [....10.25.32.59][19948] -> [255.255.255.255][19948] [Unknown][Unrated] + idle: [.....1] [ip4][..udp] [....10.25.32.59][19948] -> [255.255.255.255][19948] + not-detected: [.....2] [ip4][..udp] [....10.25.32.59][19948] -> [..64.200.148.82][.1948] [Unknown][Unrated] + idle: [.....2] [ip4][..udp] [....10.25.32.59][19948] -> [..64.200.148.82][.1948] + idle: [.....5] [ip4][..udp] [....10.25.32.59][19948] -> [..64.200.148.88][...80] [Kontiki][Media][Potentially Dangerous] + RISK: Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/lisp_registration.pcap.out b/test/results/flow-info/lisp_registration.pcap.out new file mode 100644 index 000000000..a6ec8d478 --- /dev/null +++ b/test/results/flow-info/lisp_registration.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.....10.0.123.2][.4342] -> [.....10.0.123.1][.4342] + detected: [.....1] [ip4][..udp] [.....10.0.123.2][.4342] -> [.....10.0.123.1][.4342] [LISP][Cloud][Acceptable] + new: [.....2] [ip4][..tcp] [.....10.0.123.2][15373] -> [.....10.0.123.1][.4342] + detected: [.....2] [ip4][..tcp] [.....10.0.123.2][15373] -> [.....10.0.123.1][.4342] [LISP][Cloud][Acceptable] + new: [.....3] [ip4][..udp] [.....10.0.123.3][.4342] -> [.....10.0.123.1][.4342] + detected: [.....3] [ip4][..udp] [.....10.0.123.3][.4342] -> [.....10.0.123.1][.4342] [LISP][Cloud][Acceptable] + new: [.....4] [ip4][..tcp] [.....10.0.123.3][52995] -> [.....10.0.123.1][.4342] + detected: [.....4] [ip4][..tcp] [.....10.0.123.3][52995] -> [.....10.0.123.1][.4342] [LISP][Cloud][Acceptable] + idle: [.....4] [ip4][..tcp] [.....10.0.123.3][52995] -> [.....10.0.123.1][.4342] [LISP][Cloud][Acceptable] + idle: [.....3] [ip4][..udp] [.....10.0.123.3][.4342] -> [.....10.0.123.1][.4342] [LISP][Cloud][Acceptable] + idle: [.....1] [ip4][..udp] [.....10.0.123.2][.4342] -> [.....10.0.123.1][.4342] [LISP][Cloud][Acceptable] + idle: [.....2] [ip4][..tcp] [.....10.0.123.2][15373] -> [.....10.0.123.1][.4342] [LISP][Cloud][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/log4j-webapp-exploit.pcap.out b/test/results/flow-info/log4j-webapp-exploit.pcap.out new file mode 100644 index 000000000..685b46c97 --- /dev/null +++ b/test/results/flow-info/log4j-webapp-exploit.pcap.out @@ -0,0 +1,50 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...172.16.238.1][.1984] -> [..172.16.238.10][.8080] + detected: [.....1] [ip4][..tcp] [...172.16.238.1][.1984] -> [..172.16.238.10][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol + new: [.....2] [ip4][..tcp] [..172.16.238.10][57650] -> [..172.16.238.11][.1389] + detected: [.....2] [ip4][..tcp] [..172.16.238.10][57650] -> [..172.16.238.11][.1389] [LDAP][System][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....3] [ip4][..tcp] [..172.16.238.10][48444] -> [..172.16.238.11][...80] + detected: [.....3] [ip4][..tcp] [..172.16.238.10][48444] -> [..172.16.238.11][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + detection-update: [.....3] [ip4][..tcp] [..172.16.238.10][48444] -> [..172.16.238.11][...80] [HTTP][Download][Acceptable] + RISK: Binary App Transfer, HTTP Numeric IP Address + new: [.....4] [ip4][..tcp] [..172.16.238.10][55408] -> [....10.10.10.31][.9001] + ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol + analyse: [.....4] [ip4][..tcp] [..172.16.238.10][55408] -> [....10.10.10.31][.9001] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 7.289| 0.474| 1.790] + [IAT(c->s)...: 0.000| 7.289| 0.459| 1.763][IAT(s->c)...: 0.000| 7.289| 0.490| 1.817] + [PKTLEN(c->s): 68.000| 76.000| 70.200| 2.000][PKTLEN(s->c): 68.000| 76.000| 68.700| 2.100] + [BINS(c->s)..: 17,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [.....4] [ip4][..tcp] [..172.16.238.10][55408] -> [....10.10.10.31][.9001] [Unknown][Unrated] + new: [.....5] [ip4][..tcp] [..172.16.238.10][57742] -> [..172.16.238.11][.1389] + detected: [.....5] [ip4][..tcp] [..172.16.238.10][57742] -> [..172.16.238.11][.1389] [LDAP][System][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....6] [ip4][..tcp] [..172.16.238.10][48534] -> [..172.16.238.11][...80] + detected: [.....6] [ip4][..tcp] [..172.16.238.10][48534] -> [..172.16.238.11][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + detection-update: [.....6] [ip4][..tcp] [..172.16.238.10][48534] -> [..172.16.238.11][...80] [HTTP][Download][Acceptable] + RISK: Binary App Transfer, HTTP Numeric IP Address + new: [.....7] [ip4][..tcp] [..172.16.238.10][55498] -> [....10.10.10.31][.9001] + end: [.....5] [ip4][..tcp] [..172.16.238.10][57742] -> [..172.16.238.11][.1389] [LDAP][System][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....1] [ip4][..tcp] [...172.16.238.1][.1984] -> [..172.16.238.10][.8080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + end: [.....4] [ip4][..tcp] [..172.16.238.10][55408] -> [....10.10.10.31][.9001] [Unknown][Unrated] + not-detected: [.....7] [ip4][..tcp] [..172.16.238.10][55498] -> [....10.10.10.31][.9001] [Unknown][Unrated] + end: [.....7] [ip4][..tcp] [..172.16.238.10][55498] -> [....10.10.10.31][.9001] + end: [.....3] [ip4][..tcp] [..172.16.238.10][48444] -> [..172.16.238.11][...80] [HTTP][Download][Acceptable] + RISK: Binary App Transfer, HTTP Numeric IP Address + end: [.....6] [ip4][..tcp] [..172.16.238.10][48534] -> [..172.16.238.11][...80] [HTTP][Download][Acceptable] + RISK: Binary App Transfer, HTTP Numeric IP Address + end: [.....2] [ip4][..tcp] [..172.16.238.10][57650] -> [..172.16.238.11][.1389] [LDAP][System][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/long_tls_certificate.pcap.out b/test/results/flow-info/long_tls_certificate.pcap.out new file mode 100644 index 000000000..703712c43 --- /dev/null +++ b/test/results/flow-info/long_tls_certificate.pcap.out @@ -0,0 +1,17 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.1.60][55333] -> [.106.15.100.123][..443] + detected: [.....1] [ip4][..tcp] [...192.168.1.60][55333] -> [.106.15.100.123][..443] [TLS.Alibaba][Web][Acceptable] + detection-update: [.....1] [ip4][..tcp] [...192.168.1.60][55333] -> [.106.15.100.123][..443] [TLS.Alibaba][Web][Acceptable] + detection-update: [.....1] [ip4][..tcp] [...192.168.1.60][55333] -> [.106.15.100.123][..443] [TLS.Alibaba][Web][Acceptable] + analyse: [.....1] [ip4][..tcp] [...192.168.1.60][55333] -> [.106.15.100.123][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.371| 0.087| 0.130] + [IAT(c->s)...: 0.000| 0.371| 0.076| 0.125][IAT(s->c)...: 0.000| 0.371| 0.099| 0.135] + [PKTLEN(c->s): 54.000| 571.000| 110.800| 119.800][PKTLEN(s->c): 60.000|1506.000| 695.000| 663.100] + [BINS(c->s)..: 10,4,1,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0] + detection-update: [.....1] [ip4][..tcp] [...192.168.1.60][55333] -> [.106.15.100.123][..443] [TLS.Alibaba][Web][Acceptable] + end: [.....1] [ip4][..tcp] [...192.168.1.60][55333] -> [.106.15.100.123][..443] [TLS.Alibaba][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/malformed_dns.pcap.out b/test/results/flow-info/malformed_dns.pcap.out new file mode 100644 index 000000000..fbdf943ee --- /dev/null +++ b/test/results/flow-info/malformed_dns.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [......127.0.0.1][50435] -> [......127.0.0.1][...53] + detected: [.....1] [ip4][..udp] [......127.0.0.1][50435] -> [......127.0.0.1][...53] [DNS][Network][Acceptable] + detection-update: [.....1] [ip4][..udp] [......127.0.0.1][50435] -> [......127.0.0.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + idle: [.....1] [ip4][..udp] [......127.0.0.1][50435] -> [......127.0.0.1][...53] [DNS][Network][Acceptable] + RISK: Malformed Packet + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/malformed_icmp.pcap.out b/test/results/flow-info/malformed_icmp.pcap.out new file mode 100644 index 000000000..784cb94c9 --- /dev/null +++ b/test/results/flow-info/malformed_icmp.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][.icmp] [218.152.179.213] -> [.218.152.179.54] + detected: [.....1] [ip4][.icmp] [218.152.179.213] -> [.218.152.179.54] [ICMP][Network][Acceptable] + RISK: Malformed Packet + idle: [.....1] [ip4][.icmp] [218.152.179.213] -> [.218.152.179.54] [ICMP][Network][Acceptable] + RISK: Malformed Packet + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/malware.pcap.out b/test/results/flow-info/malware.pcap.out new file mode 100644 index 000000000..7a5b16b4a --- /dev/null +++ b/test/results/flow-info/malware.pcap.out @@ -0,0 +1,25 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.7.7][42370] -> [........1.1.1.1][...53] + detected: [.....1] [ip4][..udp] [....192.168.7.7][42370] -> [........1.1.1.1][...53] [DNS][Network][Acceptable] + detection-update: [.....1] [ip4][..udp] [....192.168.7.7][42370] -> [........1.1.1.1][...53] [DNS][Network][Acceptable] + new: [.....2] [ip4][.icmp] [....192.168.7.7] -> [144.139.247.220] + detected: [.....2] [ip4][.icmp] [....192.168.7.7] -> [144.139.247.220] [ICMP][Network][Acceptable] + new: [.....3] [ip4][..tcp] [....192.168.7.7][33706] -> [144.139.247.220][...80] + DAEMON-EVENT: [Processed: 4 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 1|updates: 0] + new: [.....4] [ip4][..tcp] [....192.168.7.7][48394] -> [..67.215.92.210][...80] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [....192.168.7.7][48394] -> [..67.215.92.210][...80] [HTTP.OpenDNS][Web][Acceptable] + new: [.....5] [ip4][..tcp] [....192.168.7.7][35236] -> [..67.215.92.210][..443] + detected: [.....5] [ip4][..tcp] [....192.168.7.7][35236] -> [..67.215.92.210][..443] [TLS.OpenDNS][Web][Acceptable] + detection-update: [.....5] [ip4][..tcp] [....192.168.7.7][35236] -> [..67.215.92.210][..443] [TLS.OpenDNS][Web][Acceptable] + detection-update: [.....5] [ip4][..tcp] [....192.168.7.7][35236] -> [..67.215.92.210][..443] [TLS.OpenDNS][Network][Acceptable] + RISK: TLS Cert Mismatch + guessed: [.....3] [ip4][..tcp] [....192.168.7.7][33706] -> [144.139.247.220][...80] [HTTP][Web][Acceptable] + idle: [.....3] [ip4][..tcp] [....192.168.7.7][33706] -> [144.139.247.220][...80] + end: [.....5] [ip4][..tcp] [....192.168.7.7][35236] -> [..67.215.92.210][..443] + idle: [.....2] [ip4][.icmp] [....192.168.7.7] -> [144.139.247.220] [ICMP][Network][Acceptable] + idle: [.....4] [ip4][..tcp] [....192.168.7.7][48394] -> [..67.215.92.210][...80] + idle: [.....1] [ip4][..udp] [....192.168.7.7][42370] -> [........1.1.1.1][...53] [DNS][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/memcached.cap.out b/test/results/flow-info/memcached.cap.out new file mode 100644 index 000000000..6f00a7b5c --- /dev/null +++ b/test/results/flow-info/memcached.cap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......127.0.0.1][59604] -> [......127.0.0.1][11211] + detected: [.....1] [ip4][..tcp] [......127.0.0.1][59604] -> [......127.0.0.1][11211] [Memcached][Network][Acceptable] + end: [.....1] [ip4][..tcp] [......127.0.0.1][59604] -> [......127.0.0.1][11211] [Memcached][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/mgcp.pcapng.out b/test/results/flow-info/mgcp.pcapng.out new file mode 100644 index 000000000..e31f60165 --- /dev/null +++ b/test/results/flow-info/mgcp.pcapng.out @@ -0,0 +1,13 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...172.16.1.116][.2427] -> [...172.16.1.119][.2427] + detected: [.....1] [ip4][..udp] [...172.16.1.116][.2427] -> [...172.16.1.119][.2427] [MGCP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [...172.16.1.116][.2427] -> [...172.16.1.119][.2427] [MGCP][VoIP][Acceptable] + DAEMON-EVENT: [Processed: 8 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 1] + new: [.....2] [ip4][..udp] [...10.10.228.72][.2427] -> [....10.10.244.2][.2427] + detected: [.....2] [ip4][..udp] [...10.10.228.72][.2427] -> [....10.10.244.2][.2427] [MGCP][VoIP][Acceptable] + idle: [.....1] [ip4][..udp] [...172.16.1.116][.2427] -> [...172.16.1.119][.2427] [MGCP][VoIP][Acceptable] + idle: [.....2] [ip4][..udp] [...10.10.228.72][.2427] -> [....10.10.244.2][.2427] [MGCP][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/modbus.pcap.out b/test/results/flow-info/modbus.pcap.out new file mode 100644 index 000000000..cd1845f31 --- /dev/null +++ b/test/results/flow-info/modbus.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [192.168.110.131][.2074] -> [192.168.110.138][..502] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [192.168.110.131][.2074] -> [192.168.110.138][..502] [Modbus][IoT-Scada][Acceptable] + analyse: [.....1] [ip4][..tcp] [192.168.110.131][.2074] -> [192.168.110.138][..502] [Modbus][IoT-Scada][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 1.014| 0.452| 0.497] + [IAT(c->s)...: 0.001| 1.014| 0.467| 0.498][IAT(s->c)...: 0.001| 1.014| 0.438| 0.496] + [PKTLEN(c->s): 66.000| 66.000| 66.000| 0.000][PKTLEN(s->c): 65.000| 65.000| 65.000| 0.000] + [BINS(c->s)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..tcp] [192.168.110.131][.2074] -> [192.168.110.138][..502] [Modbus][IoT-Scada][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/monero.pcap.out b/test/results/flow-info/monero.pcap.out new file mode 100644 index 000000000..a757001f8 --- /dev/null +++ b/test/results/flow-info/monero.pcap.out @@ -0,0 +1,30 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.2.148][46838] -> [..94.23.199.191][.3333] + detected: [.....1] [ip4][..tcp] [..192.168.2.148][46838] -> [..94.23.199.191][.3333] [Mining][Mining][Unsafe] + RISK: Known Proto on Non Std Port, Unsafe Protocol + new: [.....2] [ip4][..tcp] [..192.168.2.148][53846] -> [116.211.167.195][.3333] + detected: [.....2] [ip4][..tcp] [..192.168.2.148][53846] -> [116.211.167.195][.3333] [Mining][Mining][Unsafe] + RISK: Known Proto on Non Std Port, Unsafe Protocol + analyse: [.....1] [ip4][..tcp] [..192.168.2.148][46838] -> [..94.23.199.191][.3333] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 71.693| 7.500| 18.614] + [IAT(c->s)...: 0.000| 71.570| 7.263| 18.348][IAT(s->c)...: 0.000| 71.693| 7.753| 18.889] + [PKTLEN(c->s): 66.000|1514.000| 589.200| 677.100][PKTLEN(s->c): 66.000| 376.000| 127.500| 102.300] + [BINS(c->s)..: 8,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,3,0,0] + [BINS(s->c)..: 10,2,0,1,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....2] [ip4][..tcp] [..192.168.2.148][53846] -> [116.211.167.195][.3333] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 170.525| 32.857| 51.784] + [IAT(c->s)...: 0.000| 170.525| 31.821| 51.289][IAT(s->c)...: 0.000| 170.525| 33.963| 52.285] + [PKTLEN(c->s): 54.000|1498.000| 239.100| 458.600][PKTLEN(s->c): 60.000| 364.000| 235.900| 139.500] + [BINS(c->s)..: 12,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0] + [BINS(s->c)..: 4,2,0,1,0,0,0,0,0,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 198 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + idle: [.....2] [ip4][..tcp] [..192.168.2.148][53846] -> [116.211.167.195][.3333] [Mining][Mining][Unsafe] + RISK: Known Proto on Non Std Port, Unsafe Protocol + idle: [.....1] [ip4][..tcp] [..192.168.2.148][46838] -> [..94.23.199.191][.3333] [Mining][Mining][Unsafe] + RISK: Known Proto on Non Std Port, Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/mongo_false_positive.pcapng.out b/test/results/flow-info/mongo_false_positive.pcapng.out new file mode 100644 index 000000000..2f199608d --- /dev/null +++ b/test/results/flow-info/mongo_false_positive.pcapng.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..188.75.184.20][49542] -> [.251.182.120.32][..443] + guessed: [.....1] [ip4][..tcp] [..188.75.184.20][49542] -> [.251.182.120.32][..443] [TLS][Web][Safe] + end: [.....1] [ip4][..tcp] [..188.75.184.20][49542] -> [.251.182.120.32][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/mongodb.pcap.out b/test/results/flow-info/mongodb.pcap.out new file mode 100644 index 000000000..832152fdf --- /dev/null +++ b/test/results/flow-info/mongodb.pcap.out @@ -0,0 +1,29 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....10.10.10.10][51822] -> [....10.10.10.11][27017] + detected: [.....1] [ip4][..tcp] [....10.10.10.10][51822] -> [....10.10.10.11][27017] [MongoDB][Database][Acceptable] + DAEMON-EVENT: [Processed: 6 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [....10.10.10.12][55582] -> [....10.10.10.13][27017] + detected: [.....2] [ip4][..tcp] [....10.10.10.12][55582] -> [....10.10.10.13][27017] [MongoDB][Database][Acceptable] + idle: [.....1] [ip4][..tcp] [....10.10.10.10][51822] -> [....10.10.10.11][27017] [MongoDB][Database][Acceptable] + DAEMON-EVENT: [Processed: 12 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..tcp] [....10.10.10.14][61503] -> [....10.10.10.15][27017] + detected: [.....3] [ip4][..tcp] [....10.10.10.14][61503] -> [....10.10.10.15][27017] [MongoDB][Database][Acceptable] + idle: [.....2] [ip4][..tcp] [....10.10.10.12][55582] -> [....10.10.10.13][27017] [MongoDB][Database][Acceptable] + DAEMON-EVENT: [Processed: 16 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....4] [ip4][..tcp] [....10.10.10.16][51358] -> [....10.10.10.17][27017] + detected: [.....4] [ip4][..tcp] [....10.10.10.16][51358] -> [....10.10.10.17][27017] [MongoDB][Database][Acceptable] + idle: [.....3] [ip4][..tcp] [....10.10.10.14][61503] -> [....10.10.10.15][27017] [MongoDB][Database][Acceptable] + DAEMON-EVENT: [Processed: 20 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..tcp] [....10.10.10.18][64566] -> [....10.10.10.19][30000] + detected: [.....5] [ip4][..tcp] [....10.10.10.18][64566] -> [....10.10.10.19][30000] [MongoDB][Database][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....5] [ip4][..tcp] [....10.10.10.18][64566] -> [....10.10.10.19][30000] [MongoDB][Database][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....4] [ip4][..tcp] [....10.10.10.16][51358] -> [....10.10.10.17][27017] [MongoDB][Database][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/mpeg-dash.pcap.out b/test/results/flow-info/mpeg-dash.pcap.out new file mode 100644 index 000000000..886a951c9 --- /dev/null +++ b/test/results/flow-info/mpeg-dash.pcap.out @@ -0,0 +1,21 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.84.1.81][60926] -> [.166.248.152.10][...80] + detected: [.....1] [ip4][..tcp] [.....10.84.1.81][60926] -> [.166.248.152.10][...80] [HTTP.MpegDash][Media][Acceptable] + RISK: Suspicious DGA Domain name + DAEMON-EVENT: [Processed: 4 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [..192.168.2.105][59142] -> [..54.161.101.85][...80] + detected: [.....2] [ip4][..tcp] [..192.168.2.105][59142] -> [..54.161.101.85][...80] [HTTP.MpegDash][Media][Acceptable] + new: [.....3] [ip4][..tcp] [..54.161.101.85][...80] -> [..192.168.2.105][59144] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [..54.161.101.85][...80] -> [..192.168.2.105][59144] [HTTP.MpegDash][Media][Acceptable] + detection-update: [.....3] [ip4][..tcp] [..54.161.101.85][...80] -> [..192.168.2.105][59144] [HTTP.MpegDash][Media][Acceptable] + new: [.....4] [ip4][..tcp] [..192.168.2.105][59146] -> [..54.161.101.85][...80] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [..192.168.2.105][59146] -> [..54.161.101.85][...80] [HTTP.MpegDash][Media][Acceptable] + idle: [.....2] [ip4][..tcp] [..192.168.2.105][59142] -> [..54.161.101.85][...80] + idle: [.....3] [ip4][..tcp] [..54.161.101.85][...80] -> [..192.168.2.105][59144] + idle: [.....4] [ip4][..tcp] [..192.168.2.105][59146] -> [..54.161.101.85][...80] + idle: [.....1] [ip4][..tcp] [.....10.84.1.81][60926] -> [.166.248.152.10][...80] [HTTP.MpegDash][Media][Acceptable] + RISK: Suspicious DGA Domain name + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/mpeg.pcap.out b/test/results/flow-info/mpeg.pcap.out new file mode 100644 index 000000000..5d1b7210c --- /dev/null +++ b/test/results/flow-info/mpeg.pcap.out @@ -0,0 +1,8 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.192.168.80.160][55804] -> [.46.101.157.119][...80] + detected: [.....1] [ip4][..tcp] [.192.168.80.160][55804] -> [.46.101.157.119][...80] [HTTP.ntop][Network][Safe] + detection-update: [.....1] [ip4][..tcp] [.192.168.80.160][55804] -> [.46.101.157.119][...80] [HTTP.ntop][Media][Safe] + end: [.....1] [ip4][..tcp] [.192.168.80.160][55804] -> [.46.101.157.119][...80] [HTTP.ntop][Media][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/mpegts.pcap.out b/test/results/flow-info/mpegts.pcap.out new file mode 100644 index 000000000..a0ad613e3 --- /dev/null +++ b/test/results/flow-info/mpegts.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.....10.1.16.48][40737] -> [.230.200.201.23][.1234] + detected: [.....1] [ip4][..udp] [.....10.1.16.48][40737] -> [.230.200.201.23][.1234] [MPEG_TS][Media][Fun] + idle: [.....1] [ip4][..udp] [.....10.1.16.48][40737] -> [.230.200.201.23][.1234] [MPEG_TS][Media][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/mqtt.pcap.out b/test/results/flow-info/mqtt.pcap.out new file mode 100644 index 000000000..e986d739c --- /dev/null +++ b/test/results/flow-info/mqtt.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.10.10.1][.1883] -> [....192.168.0.1][41892] + detected: [.....1] [ip4][..tcp] [.....10.10.10.1][.1883] -> [....192.168.0.1][41892] [MQTT][RPC][Acceptable] + new: [.....2] [ip4][..tcp] [..100.67.35.238][35035] -> [..51.137.28.239][.1883] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [..100.67.35.238][35035] -> [..51.137.28.239][.1883] [MQTT][RPC][Acceptable] + idle: [.....2] [ip4][..tcp] [..100.67.35.238][35035] -> [..51.137.28.239][.1883] [MQTT][RPC][Acceptable] + idle: [.....1] [ip4][..tcp] [.....10.10.10.1][.1883] -> [....192.168.0.1][41892] [MQTT][RPC][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/mssql_tds.pcap.out b/test/results/flow-info/mssql_tds.pcap.out new file mode 100644 index 000000000..df38343d0 --- /dev/null +++ b/test/results/flow-info/mssql_tds.pcap.out @@ -0,0 +1,44 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.10.111.111.111][.1111] -> [.......10.0.0.1][.1433] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [.10.111.111.111][.1111] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + DAEMON-EVENT: [Processed: 4 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [.10.111.111.111][.2222] -> [.......10.0.0.1][.1433] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [.10.111.111.111][.2222] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + new: [.....3] [ip4][..tcp] [.10.111.111.111][.3333] -> [.......10.0.0.1][.1433] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [.10.111.111.111][.3333] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + new: [.....4] [ip4][..tcp] [.10.111.111.111][.4444] -> [.......10.0.0.1][.1433] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [.10.111.111.111][.4444] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + new: [.....5] [ip4][..tcp] [.10.111.111.111][.5555] -> [.......10.0.0.1][.1433] [MIDSTREAM] + detected: [.....5] [ip4][..tcp] [.10.111.111.111][.5555] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [.....1] [ip4][..tcp] [.10.111.111.111][.1111] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + new: [.....6] [ip4][..tcp] [.10.111.111.111][.6666] -> [.......10.0.0.1][.1433] [MIDSTREAM] + new: [.....7] [ip4][..tcp] [.10.111.111.111][.7777] -> [.......10.0.0.1][.1433] [MIDSTREAM] + detected: [.....7] [ip4][..tcp] [.10.111.111.111][.7777] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + new: [.....8] [ip4][..tcp] [.10.111.111.111][.8888] -> [.......10.0.0.1][.1433] [MIDSTREAM] + detected: [.....8] [ip4][..tcp] [.10.111.111.111][.8888] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + DAEMON-EVENT: [Processed: 34 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 7 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....9] [ip4][..tcp] [.10.111.111.111][.9999] -> [.......10.0.0.1][.1433] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [.10.111.111.111][.9999] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + new: [....10] [ip4][..tcp] [.10.111.111.111][11111] -> [.......10.0.0.1][.1433] [MIDSTREAM] + detected: [....10] [ip4][..tcp] [.10.111.111.111][11111] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + new: [....11] [ip4][..tcp] [.10.111.111.111][22222] -> [.......10.0.0.1][.1433] [MIDSTREAM] + detected: [....11] [ip4][..tcp] [.10.111.111.111][22222] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + new: [....12] [ip4][..tcp] [.10.111.111.111][33333] -> [.......10.0.0.1][.1433] [MIDSTREAM] + detected: [....12] [ip4][..tcp] [.10.111.111.111][33333] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [....10] [ip4][..tcp] [.10.111.111.111][11111] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [.....3] [ip4][..tcp] [.10.111.111.111][.3333] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [.....5] [ip4][..tcp] [.10.111.111.111][.5555] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [.....7] [ip4][..tcp] [.10.111.111.111][.7777] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [....11] [ip4][..tcp] [.10.111.111.111][22222] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [.....9] [ip4][..tcp] [.10.111.111.111][.9999] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [.....2] [ip4][..tcp] [.10.111.111.111][.2222] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [.....4] [ip4][..tcp] [.10.111.111.111][.4444] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + guessed: [.....6] [ip4][..tcp] [.10.111.111.111][.6666] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [.....6] [ip4][..tcp] [.10.111.111.111][.6666] -> [.......10.0.0.1][.1433] + idle: [....12] [ip4][..tcp] [.10.111.111.111][33333] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [.....8] [ip4][..tcp] [.10.111.111.111][.8888] -> [.......10.0.0.1][.1433] [MsSQL-TDS][Database][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/mysql-8.pcap.out b/test/results/flow-info/mysql-8.pcap.out new file mode 100644 index 000000000..d7039f0f9 --- /dev/null +++ b/test/results/flow-info/mysql-8.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.105][.8738] -> [...10.42.18.198][.3306] + detected: [.....1] [ip4][..tcp] [..192.168.1.105][.8738] -> [...10.42.18.198][.3306] [MySQL][Database][Acceptable] + idle: [.....1] [ip4][..tcp] [..192.168.1.105][.8738] -> [...10.42.18.198][.3306] [MySQL][Database][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/natpmp.pcap.out b/test/results/flow-info/natpmp.pcap.out new file mode 100644 index 000000000..6475860cd --- /dev/null +++ b/test/results/flow-info/natpmp.pcap.out @@ -0,0 +1,13 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][36845] -> [....192.168.2.1][.5351] + new: [.....2] [ip4][..udp] [..192.168.2.100][59817] -> [....192.168.2.1][.5351] + detected: [.....2] [ip4][..udp] [..192.168.2.100][59817] -> [....192.168.2.1][.5351] [NAT-PMP][Network][Acceptable] + new: [.....3] [ip4][..udp] [..192.168.2.100][35763] -> [....192.168.2.1][.5351] + detected: [.....3] [ip4][..udp] [..192.168.2.100][35763] -> [....192.168.2.1][.5351] [NAT-PMP][Network][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.2.100][59817] -> [....192.168.2.1][.5351] [NAT-PMP][Network][Acceptable] + idle: [.....3] [ip4][..udp] [..192.168.2.100][35763] -> [....192.168.2.1][.5351] [NAT-PMP][Network][Acceptable] + guessed: [.....1] [ip4][..udp] [..192.168.2.100][36845] -> [....192.168.2.1][.5351] [NAT-PMP][Network][Acceptable] + idle: [.....1] [ip4][..udp] [..192.168.2.100][36845] -> [....192.168.2.1][.5351] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/nats.pcap.out b/test/results/flow-info/nats.pcap.out new file mode 100644 index 000000000..40b0c71e1 --- /dev/null +++ b/test/results/flow-info/nats.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......127.0.0.1][54820] -> [......127.0.0.1][.4222] + detected: [.....1] [ip4][..tcp] [......127.0.0.1][54820] -> [......127.0.0.1][.4222] [Nats][RPC][Acceptable] + new: [.....2] [ip4][..tcp] [......127.0.0.1][54821] -> [......127.0.0.1][.4222] + detected: [.....2] [ip4][..tcp] [......127.0.0.1][54821] -> [......127.0.0.1][.4222] [Nats][RPC][Acceptable] + end: [.....1] [ip4][..tcp] [......127.0.0.1][54820] -> [......127.0.0.1][.4222] [Nats][RPC][Acceptable] + idle: [.....2] [ip4][..tcp] [......127.0.0.1][54821] -> [......127.0.0.1][.4222] [Nats][RPC][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ndpi_match_string_subprotocol__error.pcapng.out b/test/results/flow-info/ndpi_match_string_subprotocol__error.pcapng.out new file mode 100644 index 000000000..319abbc10 --- /dev/null +++ b/test/results/flow-info/ndpi_match_string_subprotocol__error.pcapng.out @@ -0,0 +1,11 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......10.3.9.19][40632] -> [..10.68.137.118][.8091] + detected: [.....1] [ip4][..tcp] [......10.3.9.19][40632] -> [..10.68.137.118][.8091] [HTTP.SOAP][RPC][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + DAEMON-EVENT: [Processed: 7 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + end: [.....1] [ip4][..tcp] [......10.3.9.19][40632] -> [..10.68.137.118][.8091] [HTTP.SOAP][RPC][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/nest_log_sink.pcap.out b/test/results/flow-info/nest_log_sink.pcap.out new file mode 100644 index 000000000..9961c617b --- /dev/null +++ b/test/results/flow-info/nest_log_sink.pcap.out @@ -0,0 +1,160 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.192.168.242.15][63340] -> [..35.174.82.237][11095] [MIDSTREAM] + DAEMON-EVENT: [Processed: 30 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + analyse: [.....1] [ip4][..tcp] [.192.168.242.15][63340] -> [..35.174.82.237][11095] + [min|max|avg|stddev] + [IAT(flow)...: 0.061| 60.122| 38.821| 28.558] + [IAT(c->s)...: 0.204| 60.072| 40.113| 28.101][IAT(s->c)...: 0.061| 60.122| 37.610| 28.928] + [PKTLEN(c->s): 60.000| 60.000| 60.000| 0.000][PKTLEN(s->c): 54.000| 54.000| 54.000| 0.000] + [BINS(c->s)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + guessed: [.....1] [ip4][..tcp] [.192.168.242.15][63340] -> [..35.174.82.237][11095] [NestLogSink.AmazonAWS][Cloud][Acceptable] + detected: [.....1] [ip4][..tcp] [.192.168.242.15][63340] -> [..35.174.82.237][11095] [NestLogSink.AmazonAWS][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 60 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 1|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] + detected: [.....2] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + detection-update: [.....2] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + new: [.....3] [ip4][..tcp] [.192.168.242.15][63342] -> [.35.188.154.186][11095] + detected: [.....3] [ip4][..tcp] [.192.168.242.15][63342] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + analyse: [.....3] [ip4][..tcp] [.192.168.242.15][63342] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.491| 0.199| 0.354] + [IAT(c->s)...: 0.008| 1.347| 0.194| 0.327][IAT(s->c)...: 0.000| 1.491| 0.205| 0.380] + [PKTLEN(c->s): 60.000| 585.000| 361.500| 210.400][PKTLEN(s->c): 54.000| 733.000| 136.300| 161.200] + [BINS(c->s)..: 4,1,1,0,0,0,0,0,0,0,0,0,0,0,10,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....4] [ip4][..tcp] [.192.168.242.15][63343] -> [..35.174.82.237][11095] + detected: [.....4] [ip4][..tcp] [.192.168.242.15][63343] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + new: [.....5] [ip4][..tcp] [.192.168.242.15][63344] -> [.35.188.154.186][11095] + detected: [.....5] [ip4][..tcp] [.192.168.242.15][63344] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + update: [.....2] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + analyse: [.....4] [ip4][..tcp] [.192.168.242.15][63343] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.007| 60.078| 8.258| 19.898] + [IAT(c->s)...: 0.007| 60.064| 7.986| 19.625][IAT(s->c)...: 0.016| 60.078| 8.548| 20.182] + [PKTLEN(c->s): 60.000| 585.000| 171.400| 155.600][PKTLEN(s->c): 54.000| 731.000| 192.000| 212.600] + [BINS(c->s)..: 9,1,0,1,0,3,0,0,0,1,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,2,0,0,1,3,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....1] [ip4][..tcp] [.192.168.242.15][63340] -> [..35.174.82.237][11095] [NestLogSink.AmazonAWS][Cloud][Acceptable] + end: [.....3] [ip4][..tcp] [.192.168.242.15][63342] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + end: [.....5] [ip4][..tcp] [.192.168.242.15][63344] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + update: [.....2] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + DAEMON-EVENT: [Processed: 215 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 5|skipped: 0|!detected: 0|guessed: 1|detection-updates: 1|updates: 2] + idle: [.....2] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + DAEMON-EVENT: [Processed: 245 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 1|detection-updates: 1|updates: 2] + DAEMON-EVENT: [Processed: 275 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 1|detection-updates: 1|updates: 2] + new: [.....6] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] + detected: [.....6] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + detection-update: [.....6] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + new: [.....7] [ip4][..tcp] [.192.168.242.15][63345] -> [.35.188.154.186][11095] + detected: [.....7] [ip4][..tcp] [.192.168.242.15][63345] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + analyse: [.....7] [ip4][..tcp] [.192.168.242.15][63345] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.478| 0.186| 0.338] + [IAT(c->s)...: 0.012| 1.167| 0.181| 0.293][IAT(s->c)...: 0.000| 1.478| 0.192| 0.380] + [PKTLEN(c->s): 60.000| 584.000| 361.400| 210.400][PKTLEN(s->c): 54.000| 732.000| 136.300| 161.000] + [BINS(c->s)..: 4,1,1,0,0,0,0,0,0,0,0,0,0,0,10,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....8] [ip4][..tcp] [.192.168.242.15][63346] -> [..35.174.82.237][11095] + detected: [.....8] [ip4][..tcp] [.192.168.242.15][63346] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + new: [.....9] [ip4][..tcp] [.192.168.242.15][63347] -> [.35.188.154.186][11095] + detected: [.....9] [ip4][..tcp] [.192.168.242.15][63347] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + update: [.....6] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + end: [.....4] [ip4][..tcp] [.192.168.242.15][63343] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + end: [.....7] [ip4][..tcp] [.192.168.242.15][63345] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + end: [.....9] [ip4][..tcp] [.192.168.242.15][63347] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + update: [.....6] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + analyse: [.....8] [ip4][..tcp] [.192.168.242.15][63346] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.007| 60.066| 10.038| 21.842] + [IAT(c->s)...: 0.007| 60.066| 10.906| 22.620][IAT(s->c)...: 0.015| 60.064| 8.984| 20.809] + [PKTLEN(c->s): 60.000| 585.000| 165.200| 153.300][PKTLEN(s->c): 54.000| 731.000| 190.400| 219.900] + [BINS(c->s)..: 10,1,0,1,0,3,0,0,0,1,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,2,0,0,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....6] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + DAEMON-EVENT: [Processed: 424 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 9|skipped: 0|!detected: 0|guessed: 1|detection-updates: 2|updates: 4] + DAEMON-EVENT: [Processed: 452 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 9|skipped: 0|!detected: 0|guessed: 1|detection-updates: 2|updates: 4] + new: [....10] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] + detected: [....10] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + detection-update: [....10] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + new: [....11] [ip4][..tcp] [.192.168.242.15][63348] -> [.35.188.154.186][11095] + detected: [....11] [ip4][..tcp] [.192.168.242.15][63348] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + analyse: [....11] [ip4][..tcp] [.192.168.242.15][63348] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.475| 0.185| 0.337] + [IAT(c->s)...: 0.011| 1.167| 0.180| 0.293][IAT(s->c)...: 0.000| 1.475| 0.191| 0.379] + [PKTLEN(c->s): 60.000| 584.000| 361.400| 210.400][PKTLEN(s->c): 54.000| 732.000| 136.300| 161.000] + [BINS(c->s)..: 4,1,1,0,0,0,0,0,0,0,0,0,0,0,10,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....12] [ip4][..tcp] [.192.168.242.15][63349] -> [..35.174.82.237][11095] + detected: [....12] [ip4][..tcp] [.192.168.242.15][63349] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + update: [....10] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + end: [.....8] [ip4][..tcp] [.192.168.242.15][63346] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + end: [....11] [ip4][..tcp] [.192.168.242.15][63348] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + update: [....10] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + idle: [....10] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + analyse: [....12] [ip4][..tcp] [.192.168.242.15][63349] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.004| 60.116| 15.667| 26.142] + [IAT(c->s)...: 0.004| 60.108| 15.170| 25.868][IAT(s->c)...: 0.015| 60.116| 16.198| 26.420] + [PKTLEN(c->s): 60.000| 584.000| 149.300| 140.600][PKTLEN(s->c): 54.000| 732.000| 170.300| 217.300] + [BINS(c->s)..: 10,1,0,1,0,2,1,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,2,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 562 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 12|skipped: 0|!detected: 0|guessed: 1|detection-updates: 3|updates: 6] + new: [....13] [ip4][..tcp] [.192.168.242.15][63350] -> [..35.174.82.237][11095] + detected: [....13] [ip4][..tcp] [.192.168.242.15][63350] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + end: [....12] [ip4][..tcp] [.192.168.242.15][63349] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + new: [....14] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] + detected: [....14] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + detection-update: [....14] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + new: [....15] [ip4][..tcp] [.192.168.242.15][63351] -> [.35.188.154.186][11095] + detected: [....15] [ip4][..tcp] [.192.168.242.15][63351] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + analyse: [....15] [ip4][..tcp] [.192.168.242.15][63351] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.484| 0.189| 0.353] + [IAT(c->s)...: 0.005| 1.320| 0.183| 0.325][IAT(s->c)...: 0.000| 1.484| 0.195| 0.380] + [PKTLEN(c->s): 60.000| 584.000| 361.400| 210.400][PKTLEN(s->c): 54.000| 733.000| 136.300| 161.200] + [BINS(c->s)..: 4,1,1,0,0,0,0,0,0,0,0,0,0,0,10,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....16] [ip4][..tcp] [.192.168.242.15][63352] -> [..35.174.82.237][11095] + analyse: [....13] [ip4][..tcp] [.192.168.242.15][63350] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 60.156| 9.910| 20.689] + [IAT(c->s)...: 0.001| 60.124| 9.034| 19.939][IAT(s->c)...: 0.016| 60.156| 10.975| 21.517] + [PKTLEN(c->s): 60.000| 585.000| 147.500| 137.000][PKTLEN(s->c): 54.000| 731.000| 178.500| 222.500] + [BINS(c->s)..: 10,2,0,1,0,2,1,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,2,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detected: [....16] [ip4][..tcp] [.192.168.242.15][63352] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + new: [....17] [ip4][..tcp] [.192.168.242.15][63353] -> [.35.188.154.186][11095] + detected: [....17] [ip4][..tcp] [.192.168.242.15][63353] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + update: [....14] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + end: [....13] [ip4][..tcp] [.192.168.242.15][63350] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + end: [....15] [ip4][..tcp] [.192.168.242.15][63351] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + end: [....17] [ip4][..tcp] [.192.168.242.15][63353] -> [.35.188.154.186][11095] [NestLogSink][Cloud][Acceptable] + update: [....14] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + analyse: [....16] [ip4][..tcp] [.192.168.242.15][63352] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.005| 60.173| 10.045| 21.954] + [IAT(c->s)...: 0.005| 60.173| 10.926| 22.764][IAT(s->c)...: 0.018| 60.107| 8.974| 20.878] + [PKTLEN(c->s): 60.000| 586.000| 165.200| 153.500][PKTLEN(s->c): 54.000| 730.000| 190.300| 219.700] + [BINS(c->s)..: 10,1,0,1,0,3,0,0,0,1,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,2,0,0,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [....14] [ip4][..udp] [.192.168.242.15][52849] -> [..192.168.242.1][...53] [DNS][Network][Acceptable] + DAEMON-EVENT: [Processed: 713 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 17|skipped: 0|!detected: 0|guessed: 1|detection-updates: 4|updates: 8] + DAEMON-EVENT: [Processed: 743 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 17|skipped: 0|!detected: 0|guessed: 1|detection-updates: 4|updates: 8] + DAEMON-EVENT: [Processed: 773 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 17|skipped: 0|!detected: 0|guessed: 1|detection-updates: 4|updates: 8] + idle: [....16] [ip4][..tcp] [.192.168.242.15][63352] -> [..35.174.82.237][11095] [NestLogSink][Cloud][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/netbios.pcap.out b/test/results/flow-info/netbios.pcap.out new file mode 100644 index 000000000..890550ea9 --- /dev/null +++ b/test/results/flow-info/netbios.pcap.out @@ -0,0 +1,71 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.....10.0.4.131][..137] -> [.....10.0.5.255][..137] + detected: [.....1] [ip4][..udp] [.....10.0.4.131][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + new: [.....2] [ip4][..udp] [.....10.0.5.233][..137] -> [.....10.0.5.255][..137] + detected: [.....2] [ip4][..udp] [.....10.0.5.233][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + new: [.....3] [ip4][..udp] [.......10.0.5.9][..138] -> [.....10.0.5.255][..138] + detected: [.....3] [ip4][..udp] [.......10.0.5.9][..138] -> [.....10.0.5.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [.....4] [ip4][..tcp] [......10.0.4.24][..139] -> [.....10.0.4.131][.1398] [MIDSTREAM] + analyse: [.....1] [ip4][..udp] [.....10.0.4.131][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.014| 0.750| 0.325| 0.215] + [IAT(c->s)...: 0.014| 0.750| 0.325| 0.215][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 92.000| 92.000| 92.000| 0.000][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....5] [ip4][..udp] [......10.0.1.87][57836] -> [......10.0.4.24][..137] + detected: [.....5] [ip4][..udp] [......10.0.1.87][57836] -> [......10.0.4.24][..137] [NetBIOS][System][Acceptable] + new: [.....6] [ip4][..udp] [.....10.0.4.101][..137] -> [.....10.0.5.255][..137] + detected: [.....6] [ip4][..udp] [.....10.0.4.101][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + new: [.....7] [ip4][..udp] [.....10.0.4.165][..137] -> [.....10.0.5.255][..137] + detected: [.....7] [ip4][..udp] [.....10.0.4.165][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + new: [.....8] [ip4][..udp] [......10.0.4.24][..137] -> [.....10.0.4.165][..137] + detected: [.....8] [ip4][..udp] [......10.0.4.24][..137] -> [.....10.0.4.165][..137] [NetBIOS][System][Acceptable] + new: [.....9] [ip4][..udp] [......10.0.4.66][..137] -> [.....10.0.5.255][..137] + detected: [.....9] [ip4][..udp] [......10.0.4.66][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + new: [....10] [ip4][..udp] [......10.0.4.24][..137] -> [.....10.0.5.255][..137] + detected: [....10] [ip4][..udp] [......10.0.4.24][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + new: [....11] [ip4][..udp] [.......10.0.5.1][..137] -> [......10.0.4.24][..137] + detected: [....11] [ip4][..udp] [.......10.0.5.1][..137] -> [......10.0.4.24][..137] [NetBIOS][System][Acceptable] + new: [....12] [ip4][..udp] [......10.0.5.93][..138] -> [.....10.0.5.255][..138] + detected: [....12] [ip4][..udp] [......10.0.5.93][..138] -> [.....10.0.5.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [....13] [ip4][..udp] [.....10.0.5.233][..137] -> [......10.0.4.24][..137] + detected: [....13] [ip4][..udp] [.....10.0.5.233][..137] -> [......10.0.4.24][..137] [NetBIOS][System][Acceptable] + new: [....14] [ip4][..udp] [......10.0.4.14][..137] -> [.....10.0.5.255][..137] + detected: [....14] [ip4][..udp] [......10.0.4.14][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + analyse: [.....2] [ip4][..udp] [.....10.0.5.233][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.749| 1.516| 0.995| 0.356] + [IAT(c->s)...: 0.749| 1.516| 0.995| 0.356][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 92.000| 92.000| 92.000| 0.000][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....15] [ip4][..udp] [......10.0.1.87][57921] -> [......10.0.4.24][..137] + detected: [....15] [ip4][..udp] [......10.0.1.87][57921] -> [......10.0.4.24][..137] [NetBIOS][System][Acceptable] + update: [.....1] [ip4][..udp] [.....10.0.4.131][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + update: [.....2] [ip4][..udp] [.....10.0.5.233][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + update: [.....3] [ip4][..udp] [.......10.0.5.9][..138] -> [.....10.0.5.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [.....8] [ip4][..udp] [......10.0.4.24][..137] -> [.....10.0.4.165][..137] [NetBIOS][System][Acceptable] + idle: [.....7] [ip4][..udp] [.....10.0.4.165][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + idle: [.....2] [ip4][..udp] [.....10.0.5.233][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + idle: [....11] [ip4][..udp] [.......10.0.5.1][..137] -> [......10.0.4.24][..137] [NetBIOS][System][Acceptable] + idle: [....14] [ip4][..udp] [......10.0.4.14][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + idle: [....13] [ip4][..udp] [.....10.0.5.233][..137] -> [......10.0.4.24][..137] [NetBIOS][System][Acceptable] + idle: [....10] [ip4][..udp] [......10.0.4.24][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + idle: [.....9] [ip4][..udp] [......10.0.4.66][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + idle: [.....6] [ip4][..udp] [.....10.0.4.101][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + idle: [.....1] [ip4][..udp] [.....10.0.4.131][..137] -> [.....10.0.5.255][..137] [NetBIOS][System][Acceptable] + idle: [....12] [ip4][..udp] [......10.0.5.93][..138] -> [.....10.0.5.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [.....3] [ip4][..udp] [.......10.0.5.9][..138] -> [.....10.0.5.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [.....5] [ip4][..udp] [......10.0.1.87][57836] -> [......10.0.4.24][..137] [NetBIOS][System][Acceptable] + idle: [....15] [ip4][..udp] [......10.0.1.87][57921] -> [......10.0.4.24][..137] [NetBIOS][System][Acceptable] + guessed: [.....4] [ip4][..tcp] [......10.0.4.24][..139] -> [.....10.0.4.131][.1398] [NetBIOS][System][Acceptable] + idle: [.....4] [ip4][..tcp] [......10.0.4.24][..139] -> [.....10.0.4.131][.1398] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/netbios_wildcard_dns_query.pcap.out b/test/results/flow-info/netbios_wildcard_dns_query.pcap.out new file mode 100644 index 000000000..9b628d4ed --- /dev/null +++ b/test/results/flow-info/netbios_wildcard_dns_query.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....10.1.67.250][41335] -> [.....10.1.66.20][...53] + detected: [.....1] [ip4][..udp] [....10.1.67.250][41335] -> [.....10.1.66.20][...53] [DNS][Network][Acceptable] + idle: [.....1] [ip4][..udp] [....10.1.67.250][41335] -> [.....10.1.66.20][...53] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/netflix.pcap.out b/test/results/flow-info/netflix.pcap.out new file mode 100644 index 000000000..5556a2ef0 --- /dev/null +++ b/test/results/flow-info/netflix.pcap.out @@ -0,0 +1,592 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....192.168.1.7][52929] -> [.....52.24.87.6][..443] [MIDSTREAM] + new: [.....2] [ip4][..udp] [....192.168.1.7][51543] -> [....192.168.1.1][...53] + detected: [.....2] [ip4][..udp] [....192.168.1.7][51543] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + detection-update: [.....2] [ip4][..udp] [....192.168.1.7][51543] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + detection-update: [.....2] [ip4][..udp] [....192.168.1.7][51543] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + new: [.....3] [ip4][..udp] [....192.168.1.7][52116] -> [....192.168.1.1][...53] + detected: [.....3] [ip4][..udp] [....192.168.1.7][52116] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + detection-update: [.....3] [ip4][..udp] [....192.168.1.7][52116] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + new: [.....4] [ip4][..tcp] [....192.168.1.7][53105] -> [..54.69.204.241][..443] + new: [.....5] [ip4][..tcp] [....192.168.1.7][53114] -> [...54.191.17.51][..443] + detected: [.....4] [ip4][..tcp] [....192.168.1.7][53105] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + detected: [.....5] [ip4][..tcp] [....192.168.1.7][53114] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [.....6] [ip4][..tcp] [....192.168.1.7][53115] -> [...52.32.196.36][..443] + new: [.....7] [ip4][..tcp] [....192.168.1.7][53116] -> [...52.32.196.36][..443] + detection-update: [.....4] [ip4][..tcp] [....192.168.1.7][53105] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + detection-update: [.....4] [ip4][..tcp] [....192.168.1.7][53105] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + detection-update: [.....5] [ip4][..tcp] [....192.168.1.7][53114] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....5] [ip4][..tcp] [....192.168.1.7][53114] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detected: [.....6] [ip4][..tcp] [....192.168.1.7][53115] -> [...52.32.196.36][..443] [TLS.NetFlix][Video][Fun] + detected: [.....7] [ip4][..tcp] [....192.168.1.7][53116] -> [...52.32.196.36][..443] [TLS.NetFlix][Video][Fun] + detection-update: [.....6] [ip4][..tcp] [....192.168.1.7][53115] -> [...52.32.196.36][..443] [TLS.NetFlix][Video][Fun] + detection-update: [.....6] [ip4][..tcp] [....192.168.1.7][53115] -> [...52.32.196.36][..443] [TLS.NetFlix][Video][Fun] + detection-update: [.....7] [ip4][..tcp] [....192.168.1.7][53116] -> [...52.32.196.36][..443] [TLS.NetFlix][Video][Fun] + detection-update: [.....7] [ip4][..tcp] [....192.168.1.7][53116] -> [...52.32.196.36][..443] [TLS.NetFlix][Video][Fun] + new: [.....8] [ip4][..tcp] [....192.168.1.7][53117] -> [...52.32.196.36][..443] + detected: [.....8] [ip4][..tcp] [....192.168.1.7][53117] -> [...52.32.196.36][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....8] [ip4][..tcp] [....192.168.1.7][53117] -> [...52.32.196.36][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [.....4] [ip4][..tcp] [....192.168.1.7][53105] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.364| 0.040| 0.082] + [IAT(c->s)...: 0.000| 0.311| 0.036| 0.073][IAT(s->c)...: 0.000| 0.364| 0.044| 0.092] + [PKTLEN(c->s): 66.000| 422.000| 159.200| 137.400][PKTLEN(s->c): 66.000|1514.000| 433.600| 541.500] + [BINS(c->s)..: 11,1,1,0,0,0,1,0,0,2,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,4,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + analyse: [.....7] [ip4][..tcp] [....192.168.1.7][53116] -> [...52.32.196.36][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.200| 0.035| 0.048] + [IAT(c->s)...: 0.000| 0.141| 0.032| 0.045][IAT(s->c)...: 0.000| 0.200| 0.038| 0.050] + [PKTLEN(c->s): 66.000|1514.000| 324.400| 464.000][PKTLEN(s->c): 66.000|1514.000| 581.300| 619.400] + [BINS(c->s)..: 10,1,1,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0] + [BINS(s->c)..: 5,2,0,0,0,0,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,4,0,0] + detection-update: [.....7] [ip4][..tcp] [....192.168.1.7][53116] -> [...52.32.196.36][..443] [TLS.NetFlix][Video][Fun] + new: [.....9] [ip4][..tcp] [....192.168.1.7][53118] -> [..54.69.204.241][..443] + detected: [.....9] [ip4][..tcp] [....192.168.1.7][53118] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + detection-update: [.....9] [ip4][..tcp] [....192.168.1.7][53118] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + detection-update: [.....9] [ip4][..tcp] [....192.168.1.7][53118] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + new: [....10] [ip4][..udp] [....192.168.1.7][53776] -> [239.255.255.250][.1900] + detected: [....10] [ip4][..udp] [....192.168.1.7][53776] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....11] [ip4][..tcp] [....192.168.1.7][53119] -> [..54.69.204.241][..443] + detected: [....11] [ip4][..tcp] [....192.168.1.7][53119] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + detection-update: [....11] [ip4][..tcp] [....192.168.1.7][53119] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + detection-update: [....11] [ip4][..tcp] [....192.168.1.7][53119] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + new: [....12] [ip4][....2] [....192.168.1.7] -> [239.255.255.250] + detected: [....12] [ip4][....2] [....192.168.1.7] -> [239.255.255.250] [IGMP][Network][Acceptable] + new: [....13] [ip4][..udp] [....192.168.1.7][51949] -> [....192.168.1.1][...53] + detected: [....13] [ip4][..udp] [....192.168.1.7][51949] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + detection-update: [....13] [ip4][..udp] [....192.168.1.7][51949] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + new: [....14] [ip4][..tcp] [....192.168.1.7][53132] -> [...52.89.39.139][..443] + new: [....15] [ip4][..tcp] [....192.168.1.7][53133] -> [...52.89.39.139][..443] + detected: [....14] [ip4][..tcp] [....192.168.1.7][53132] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....15] [ip4][..tcp] [....192.168.1.7][53133] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....14] [ip4][..tcp] [....192.168.1.7][53132] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....14] [ip4][..tcp] [....192.168.1.7][53132] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....15] [ip4][..tcp] [....192.168.1.7][53133] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....15] [ip4][..tcp] [....192.168.1.7][53133] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [....16] [ip4][..tcp] [....192.168.1.7][53134] -> [...52.89.39.139][..443] + detected: [....16] [ip4][..tcp] [....192.168.1.7][53134] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....16] [ip4][..tcp] [....192.168.1.7][53134] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [....15] [ip4][..tcp] [....192.168.1.7][53133] -> [...52.89.39.139][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.350| 0.041| 0.077] + [IAT(c->s)...: 0.000| 0.350| 0.043| 0.085][IAT(s->c)...: 0.000| 0.291| 0.040| 0.069] + [PKTLEN(c->s): 66.000|1514.000| 216.900| 368.100][PKTLEN(s->c): 66.000|1514.000| 871.600| 667.300] + [BINS(c->s)..: 11,1,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 4,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,7,0,0] + detection-update: [....15] [ip4][..tcp] [....192.168.1.7][53133] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [....17] [ip4][..udp] [....192.168.1.7][57719] -> [....192.168.1.1][...53] + detected: [....17] [ip4][..udp] [....192.168.1.7][57719] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + detection-update: [....17] [ip4][..udp] [....192.168.1.7][57719] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + new: [....18] [ip4][..tcp] [....192.168.1.7][53141] -> [..104.86.97.179][..443] + detected: [....18] [ip4][..tcp] [....192.168.1.7][53141] -> [..104.86.97.179][..443] [TLS.NetFlix][Video][Fun] + detection-update: [....18] [ip4][..tcp] [....192.168.1.7][53141] -> [..104.86.97.179][..443] [TLS.NetFlix][Video][Fun] + detection-update: [....18] [ip4][..tcp] [....192.168.1.7][53141] -> [..104.86.97.179][..443] [TLS.NetFlix][Video][Fun] + analyse: [....18] [ip4][..tcp] [....192.168.1.7][53141] -> [..104.86.97.179][..443] [TLS.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.040| 0.008| 0.010] + [IAT(c->s)...: 0.000| 0.026| 0.006| 0.008][IAT(s->c)...: 0.000| 0.040| 0.012| 0.013] + [PKTLEN(c->s): 66.000| 293.000| 120.300| 56.600][PKTLEN(s->c): 66.000|1514.000| 553.900| 607.800] + [BINS(c->s)..: 8,5,6,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,2,1,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + analyse: [....14] [ip4][..tcp] [....192.168.1.7][53132] -> [...52.89.39.139][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 7.508| 0.502| 1.826] + [IAT(c->s)...: 0.000| 7.402| 0.482| 1.787][IAT(s->c)...: 0.001| 7.508| 0.523| 1.867] + [PKTLEN(c->s): 66.000|1514.000| 335.900| 480.200][PKTLEN(s->c): 66.000|1514.000| 414.500| 560.100] + [BINS(c->s)..: 10,1,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 6,3,0,0,1,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + detection-update: [....14] [ip4][..tcp] [....192.168.1.7][53132] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [....19] [ip4][..udp] [....192.168.1.7][59180] -> [....192.168.1.1][...53] + detected: [....19] [ip4][..udp] [....192.168.1.7][59180] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + detection-update: [....19] [ip4][..udp] [....192.168.1.7][59180] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + new: [....20] [ip4][..tcp] [....192.168.1.7][53148] -> [..184.25.204.25][...80] + new: [....21] [ip4][..tcp] [....192.168.1.7][53149] -> [..184.25.204.25][...80] + detected: [....20] [ip4][..tcp] [....192.168.1.7][53148] -> [..184.25.204.25][...80] [HTTP.NetFlix][Video][Fun] + detected: [....21] [ip4][..tcp] [....192.168.1.7][53149] -> [..184.25.204.25][...80] [HTTP.NetFlix][Video][Fun] + new: [....22] [ip4][..tcp] [....192.168.1.7][53150] -> [..184.25.204.25][...80] + detected: [....22] [ip4][..tcp] [....192.168.1.7][53150] -> [..184.25.204.25][...80] [HTTP.NetFlix][Video][Fun] + analyse: [....21] [ip4][..tcp] [....192.168.1.7][53149] -> [..184.25.204.25][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.007| 1.300| 0.097| 0.230] + [IAT(c->s)...: 0.007| 1.300| 0.253| 0.469][IAT(s->c)...: 0.013| 0.399| 0.060| 0.074] + [PKTLEN(c->s): 66.000| 311.000| 106.700| 84.000][PKTLEN(s->c): 66.000|1514.000|1398.500| 391.700] + [BINS(c->s)..: 6,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,0,0] + new: [....23] [ip4][..udp] [....192.168.1.7][58102] -> [....192.168.1.1][...53] + detected: [....23] [ip4][..udp] [....192.168.1.7][58102] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + detection-update: [....23] [ip4][..udp] [....192.168.1.7][58102] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + new: [....24] [ip4][..tcp] [....192.168.1.7][53151] -> [.54.201.191.132][...80] + detected: [....24] [ip4][..tcp] [....192.168.1.7][53151] -> [.54.201.191.132][...80] [HTTP.NetFlix][Video][Fun] + analyse: [....24] [ip4][..tcp] [....192.168.1.7][53151] -> [.54.201.191.132][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.187| 0.029| 0.042] + [IAT(c->s)...: 0.000| 0.187| 0.041| 0.057][IAT(s->c)...: 0.000| 0.135| 0.022| 0.030] + [PKTLEN(c->s): 66.000|1514.000| 285.700| 441.600][PKTLEN(s->c): 66.000|1514.000|1150.800| 575.500] + [BINS(c->s)..: 9,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,13,0,0] + new: [....25] [ip4][..tcp] [....192.168.1.7][53152] -> [...52.89.39.139][...80] + detected: [....25] [ip4][..tcp] [....192.168.1.7][53152] -> [...52.89.39.139][...80] [HTTP.NetFlix][Video][Fun] + detection-update: [....25] [ip4][..tcp] [....192.168.1.7][53152] -> [...52.89.39.139][...80] [HTTP.NetFlix][Video][Fun] + new: [....26] [ip4][..udp] [....192.168.1.7][51728] -> [....192.168.1.1][...53] + detected: [....26] [ip4][..udp] [....192.168.1.7][51728] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....27] [ip4][..udp] [....192.168.1.7][52347] -> [....192.168.1.1][...53] + detected: [....27] [ip4][..udp] [....192.168.1.7][52347] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + analyse: [....20] [ip4][..tcp] [....192.168.1.7][53148] -> [..184.25.204.25][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 6.031| 0.428| 1.232] + [IAT(c->s)...: 0.012| 3.644| 0.510| 0.997][IAT(s->c)...: 0.001| 6.031| 0.369| 1.373] + [PKTLEN(c->s): 66.000| 312.000| 110.200| 82.900][PKTLEN(s->c): 66.000|1514.000|1353.600| 453.800] + [BINS(c->s)..: 12,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,0,0] + detection-update: [....26] [ip4][..udp] [....192.168.1.7][51728] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....28] [ip4][..tcp] [....192.168.1.7][53153] -> [..184.25.204.24][...80] + detection-update: [....27] [ip4][..udp] [....192.168.1.7][52347] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + new: [....29] [ip4][..tcp] [....192.168.1.7][53162] -> [...54.191.17.51][..443] + detected: [....28] [ip4][..tcp] [....192.168.1.7][53153] -> [..184.25.204.24][...80] [HTTP.NetFlix][Video][Fun] + detected: [....29] [ip4][..tcp] [....192.168.1.7][53162] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....28] [ip4][..tcp] [....192.168.1.7][53153] -> [..184.25.204.24][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Suspicious Content + detection-update: [....29] [ip4][..tcp] [....192.168.1.7][53162] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....29] [ip4][..tcp] [....192.168.1.7][53162] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [....30] [ip4][..tcp] [....192.168.1.7][53163] -> [..23.246.11.145][...80] + detected: [....30] [ip4][..tcp] [....192.168.1.7][53163] -> [..23.246.11.145][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + analyse: [....30] [ip4][..tcp] [....192.168.1.7][53163] -> [..23.246.11.145][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.004| 0.651| 0.082| 0.154] + [IAT(c->s)...: 0.004| 0.651| 0.126| 0.200][IAT(s->c)...: 0.005| 0.582| 0.061| 0.120] + [PKTLEN(c->s): 66.000| 422.000| 103.100| 101.200][PKTLEN(s->c): 74.000|1514.000|1401.000| 357.000] + [BINS(c->s)..: 10,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,19,0,0] + new: [....31] [ip4][..tcp] [....192.168.1.7][53164] -> [..23.246.10.139][...80] + detected: [....31] [ip4][..tcp] [....192.168.1.7][53164] -> [..23.246.10.139][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + analyse: [....31] [ip4][..tcp] [....192.168.1.7][53164] -> [..23.246.10.139][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 0.639| 0.088| 0.152] + [IAT(c->s)...: 0.005| 0.639| 0.113| 0.181][IAT(s->c)...: 0.001| 0.580| 0.072| 0.128] + [PKTLEN(c->s): 66.000| 422.000| 101.100| 93.200][PKTLEN(s->c): 74.000|1514.000|1389.200| 373.200] + [BINS(c->s)..: 12,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,0,0] + new: [....32] [ip4][..tcp] [....192.168.1.7][53171] -> [...23.246.3.140][...80] + detected: [....32] [ip4][..tcp] [....192.168.1.7][53171] -> [...23.246.3.140][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + analyse: [....32] [ip4][..tcp] [....192.168.1.7][53171] -> [...23.246.3.140][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.002| 0.044| 0.018| 0.010] + [IAT(c->s)...: 0.006| 0.041| 0.021| 0.011][IAT(s->c)...: 0.002| 0.044| 0.017| 0.009] + [PKTLEN(c->s): 66.000| 420.000| 102.600| 105.900][PKTLEN(s->c): 74.000|1514.000|1406.300| 349.100] + [BINS(c->s)..: 9,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,0,0] + analyse: [....28] [ip4][..tcp] [....192.168.1.7][53153] -> [..184.25.204.24][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.003| 4.094| 0.319| 0.812] + [IAT(c->s)...: 0.003| 1.864| 0.290| 0.559][IAT(s->c)...: 0.025| 4.094| 0.354| 1.038] + [PKTLEN(c->s): 66.000| 282.000| 94.200| 46.900][PKTLEN(s->c): 66.000|1514.000|1307.700| 505.300] + [BINS(c->s)..: 17,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,0,0] + new: [....33] [ip4][..tcp] [....192.168.1.7][53172] -> [..23.246.11.133][...80] + new: [....34] [ip4][..tcp] [....192.168.1.7][53173] -> [..23.246.11.133][...80] + new: [....35] [ip4][..tcp] [....192.168.1.7][53174] -> [..23.246.11.141][...80] + new: [....36] [ip4][..tcp] [....192.168.1.7][53175] -> [..23.246.11.141][...80] + detected: [....33] [ip4][..tcp] [....192.168.1.7][53172] -> [..23.246.11.133][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + new: [....37] [ip4][..tcp] [....192.168.1.7][53176] -> [..23.246.11.141][...80] + new: [....38] [ip4][..tcp] [....192.168.1.7][53177] -> [..23.246.11.141][...80] + new: [....39] [ip4][..tcp] [....192.168.1.7][53178] -> [..23.246.11.141][...80] + new: [....40] [ip4][..tcp] [....192.168.1.7][53179] -> [..23.246.11.141][...80] + new: [....41] [ip4][..tcp] [....192.168.1.7][53180] -> [..23.246.11.141][...80] + detected: [....35] [ip4][..tcp] [....192.168.1.7][53174] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + detected: [....34] [ip4][..tcp] [....192.168.1.7][53173] -> [..23.246.11.133][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + new: [....42] [ip4][..tcp] [....192.168.1.7][53181] -> [..23.246.11.141][...80] + new: [....43] [ip4][..tcp] [....192.168.1.7][53182] -> [..23.246.11.141][...80] + detected: [....36] [ip4][..tcp] [....192.168.1.7][53175] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + detected: [....40] [ip4][..tcp] [....192.168.1.7][53179] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + detected: [....39] [ip4][..tcp] [....192.168.1.7][53178] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + detected: [....37] [ip4][..tcp] [....192.168.1.7][53176] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + detected: [....38] [ip4][..tcp] [....192.168.1.7][53177] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + detected: [....41] [ip4][..tcp] [....192.168.1.7][53180] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + detected: [....42] [ip4][..tcp] [....192.168.1.7][53181] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + detected: [....43] [ip4][..tcp] [....192.168.1.7][53182] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + analyse: [....41] [ip4][..tcp] [....192.168.1.7][53180] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.098| 0.201| 0.403] + [IAT(c->s)...: 0.000| 1.162| 0.156| 0.251][IAT(s->c)...: 0.000| 2.098| 0.285| 0.577] + [PKTLEN(c->s): 66.000| 426.000| 93.400| 75.300][PKTLEN(s->c): 74.000|1514.000|1298.500| 469.800] + [BINS(c->s)..: 20,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,0,0] + analyse: [....38] [ip4][..tcp] [....192.168.1.7][53177] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.047| 0.281| 0.301] + [IAT(c->s)...: 0.000| 0.636| 0.227| 0.202][IAT(s->c)...: 0.001| 1.047| 0.365| 0.397] + [PKTLEN(c->s): 66.000| 426.000| 88.400| 77.800][PKTLEN(s->c): 74.000|1514.000|1196.900| 557.100] + [BINS(c->s)..: 19,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,8,0,0] + analyse: [....36] [ip4][..tcp] [....192.168.1.7][53175] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 1.636| 0.284| 0.363] + [IAT(c->s)...: 0.001| 1.105| 0.230| 0.268][IAT(s->c)...: 0.004| 1.636| 0.370| 0.463] + [PKTLEN(c->s): 66.000| 423.000| 91.100| 76.500][PKTLEN(s->c): 74.000|1514.000|1316.500| 453.700] + [BINS(c->s)..: 19,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0] + analyse: [....34] [ip4][..tcp] [....192.168.1.7][53173] -> [..23.246.11.133][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.005| 1.397| 0.291| 0.314] + [IAT(c->s)...: 0.018| 0.986| 0.299| 0.264][IAT(s->c)...: 0.005| 1.397| 0.284| 0.355] + [PKTLEN(c->s): 66.000| 423.000| 94.600| 85.400][PKTLEN(s->c): 74.000|1514.000|1365.900| 402.100] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,0,0] + analyse: [....43] [ip4][..tcp] [....192.168.1.7][53182] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.716| 0.300| 0.539] + [IAT(c->s)...: 0.001| 1.163| 0.233| 0.311][IAT(s->c)...: 0.000| 2.716| 0.423| 0.787] + [PKTLEN(c->s): 66.000| 424.000| 91.800| 74.900][PKTLEN(s->c): 74.000|1514.000|1298.500| 469.800] + [BINS(c->s)..: 20,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,0,0] + analyse: [....35] [ip4][..tcp] [....192.168.1.7][53174] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.094| 0.303| 0.556] + [IAT(c->s)...: 0.005| 0.626| 0.225| 0.222][IAT(s->c)...: 0.000| 3.094| 0.465| 0.904] + [PKTLEN(c->s): 66.000| 424.000| 91.200| 73.000][PKTLEN(s->c): 74.000|1514.000|1277.000| 487.500] + [BINS(c->s)..: 21,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0] + analyse: [....42] [ip4][..tcp] [....192.168.1.7][53181] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.609| 0.294| 0.529] + [IAT(c->s)...: 0.000| 1.152| 0.234| 0.302][IAT(s->c)...: 0.000| 2.609| 0.422| 0.808] + [PKTLEN(c->s): 66.000| 425.000| 93.400| 73.100][PKTLEN(s->c): 74.000|1514.000|1276.900| 487.700] + [BINS(c->s)..: 21,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0] + analyse: [....33] [ip4][..tcp] [....192.168.1.7][53172] -> [..23.246.11.133][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.064| 0.322| 0.577] + [IAT(c->s)...: 0.001| 0.811| 0.246| 0.261][IAT(s->c)...: 0.000| 3.064| 0.461| 0.885] + [PKTLEN(c->s): 66.000| 424.000| 95.400| 74.300][PKTLEN(s->c): 74.000|1514.000|1298.500| 469.800] + [BINS(c->s)..: 20,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,0,0] + analyse: [....39] [ip4][..tcp] [....192.168.1.7][53178] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.546| 0.356| 0.683] + [IAT(c->s)...: 0.000| 1.318| 0.274| 0.373][IAT(s->c)...: 0.005| 3.546| 0.506| 1.013] + [PKTLEN(c->s): 66.000| 423.000| 92.700| 74.500][PKTLEN(s->c): 74.000|1514.000|1298.500| 469.800] + [BINS(c->s)..: 20,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,0,0] + analyse: [....40] [ip4][..tcp] [....192.168.1.7][53179] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.457| 0.415| 0.811] + [IAT(c->s)...: 0.001| 1.393| 0.337| 0.392][IAT(s->c)...: 0.000| 4.457| 0.537| 1.197] + [PKTLEN(c->s): 66.000| 424.000| 93.500| 76.500][PKTLEN(s->c): 74.000|1514.000|1316.500| 453.700] + [BINS(c->s)..: 19,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0] + analyse: [....37] [ip4][..tcp] [....192.168.1.7][53176] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 4.432| 0.435| 0.814] + [IAT(c->s)...: 0.001| 1.251| 0.305| 0.347][IAT(s->c)...: 0.005| 4.432| 0.754| 1.360] + [PKTLEN(c->s): 66.000| 424.000| 92.500| 71.200][PKTLEN(s->c): 74.000|1514.000|1250.600| 507.300] + [BINS(c->s)..: 22,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0] + analyse: [.....9] [ip4][..tcp] [....192.168.1.7][53118] -> [..54.69.204.241][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 30.086| 1.958| 7.380] + [IAT(c->s)...: 0.000| 30.033| 1.895| 7.265][IAT(s->c)...: 0.000| 30.086| 2.025| 7.500] + [PKTLEN(c->s): 66.000|1514.000| 439.300| 588.400][PKTLEN(s->c): 66.000|1514.000| 342.700| 514.100] + [BINS(c->s)..: 9,1,1,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,3,0,0] + [BINS(s->c)..: 9,2,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + detection-update: [.....9] [ip4][..tcp] [....192.168.1.7][53118] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + new: [....44] [ip4][..tcp] [....192.168.1.7][53183] -> [...23.246.3.140][...80] + new: [....45] [ip4][..tcp] [....192.168.1.7][53184] -> [..23.246.11.141][...80] + detected: [....45] [ip4][..tcp] [....192.168.1.7][53184] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + detected: [....44] [ip4][..tcp] [....192.168.1.7][53183] -> [...23.246.3.140][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + new: [....46] [ip4][..tcp] [....192.168.1.7][53193] -> [...54.191.17.51][..443] + new: [....47] [ip4][..tcp] [....192.168.1.7][53202] -> [...54.191.17.51][..443] + new: [....48] [ip4][..udp] [....192.168.1.7][60962] -> [....192.168.1.1][...53] + detected: [....48] [ip4][..udp] [....192.168.1.7][60962] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + detection-update: [....48] [ip4][..udp] [....192.168.1.7][60962] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + new: [....49] [ip4][..tcp] [....192.168.1.7][53203] -> [...52.37.36.252][..443] + analyse: [....11] [ip4][..tcp] [....192.168.1.7][53119] -> [..54.69.204.241][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 30.431| 1.003| 5.373] + [IAT(c->s)...: 0.000| 30.431| 1.810| 7.155][IAT(s->c)...: 0.000| 0.072| 0.024| 0.026] + [PKTLEN(c->s): 66.000|1514.000| 417.700| 578.300][PKTLEN(s->c): 66.000|1514.000| 362.300| 526.700] + [BINS(c->s)..: 10,1,1,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,3,0,0] + [BINS(s->c)..: 7,3,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + detection-update: [....11] [ip4][..tcp] [....192.168.1.7][53119] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + detected: [....46] [ip4][..tcp] [....192.168.1.7][53193] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....47] [ip4][..tcp] [....192.168.1.7][53202] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....49] [ip4][..tcp] [....192.168.1.7][53203] -> [...52.37.36.252][..443] [TLS.NetFlix][Video][Fun] + detection-update: [....46] [ip4][..tcp] [....192.168.1.7][53193] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....47] [ip4][..tcp] [....192.168.1.7][53202] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....46] [ip4][..tcp] [....192.168.1.7][53193] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....49] [ip4][..tcp] [....192.168.1.7][53203] -> [...52.37.36.252][..443] [TLS.NetFlix][Video][Fun] + detection-update: [....47] [ip4][..tcp] [....192.168.1.7][53202] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....49] [ip4][..tcp] [....192.168.1.7][53203] -> [...52.37.36.252][..443] [TLS.NetFlix][Video][Fun] + analyse: [....46] [ip4][..tcp] [....192.168.1.7][53193] -> [...54.191.17.51][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.266| 0.048| 0.057] + [IAT(c->s)...: 0.000| 0.147| 0.033| 0.044][IAT(s->c)...: 0.000| 0.266| 0.084| 0.069] + [PKTLEN(c->s): 66.000|1514.000|1082.000| 624.800][PKTLEN(s->c): 66.000|1514.000| 361.700| 525.200] + [BINS(c->s)..: 5,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,15,0,0] + [BINS(s->c)..: 5,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + detection-update: [....46] [ip4][..tcp] [....192.168.1.7][53193] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [....47] [ip4][..tcp] [....192.168.1.7][53202] -> [...54.191.17.51][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.282| 0.053| 0.058] + [IAT(c->s)...: 0.000| 0.282| 0.046| 0.071][IAT(s->c)...: 0.011| 0.127| 0.062| 0.029] + [PKTLEN(c->s): 66.000|1514.000| 552.900| 622.300][PKTLEN(s->c): 66.000|1514.000| 586.200| 640.000] + [BINS(c->s)..: 10,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0] + [BINS(s->c)..: 5,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,1,2,0,0] + detection-update: [....47] [ip4][..tcp] [....192.168.1.7][53202] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [....49] [ip4][..tcp] [....192.168.1.7][53203] -> [...52.37.36.252][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.333| 0.059| 0.083] + [IAT(c->s)...: 0.000| 0.333| 0.044| 0.078][IAT(s->c)...: 0.001| 0.332| 0.092| 0.085] + [PKTLEN(c->s): 66.000|1514.000| 933.900| 690.000][PKTLEN(s->c): 66.000|1514.000| 377.800| 570.100] + [BINS(c->s)..: 6,1,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,12,0,0] + [BINS(s->c)..: 6,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + detection-update: [....49] [ip4][..tcp] [....192.168.1.7][53203] -> [...52.37.36.252][..443] [TLS.NetFlix][Video][Fun] + analyse: [....45] [ip4][..tcp] [....192.168.1.7][53184] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.003| 0.472| 0.093| 0.119] + [IAT(c->s)...: 0.003| 0.472| 0.095| 0.134][IAT(s->c)...: 0.005| 0.417| 0.092| 0.104] + [PKTLEN(c->s): 66.000| 581.000| 135.200| 167.600][PKTLEN(s->c): 74.000|1514.000|1262.300| 453.600] + [BINS(c->s)..: 14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,0,0] + analyse: [....44] [ip4][..tcp] [....192.168.1.7][53183] -> [...23.246.3.140][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.005| 0.731| 0.102| 0.156] + [IAT(c->s)...: 0.006| 0.731| 0.126| 0.200][IAT(s->c)...: 0.005| 0.280| 0.077| 0.077] + [PKTLEN(c->s): 66.000| 578.000| 131.000| 162.100][PKTLEN(s->c): 74.000|1514.000|1264.500| 445.700] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0] + new: [....50] [ip4][..tcp] [....192.168.1.7][53210] -> [..23.246.11.133][...80] + detected: [....50] [ip4][..tcp] [....192.168.1.7][53210] -> [..23.246.11.133][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + analyse: [....50] [ip4][..tcp] [....192.168.1.7][53210] -> [..23.246.11.133][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.004| 0.530| 0.111| 0.160] + [IAT(c->s)...: 0.004| 0.527| 0.133| 0.181][IAT(s->c)...: 0.005| 0.530| 0.096| 0.142] + [PKTLEN(c->s): 66.000| 581.000| 142.900| 177.800][PKTLEN(s->c): 74.000|1514.000|1287.900| 438.400] + [BINS(c->s)..: 12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,0,0] + update: [....10] [ip4][..udp] [....192.168.1.7][53776] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [.....2] [ip4][..udp] [....192.168.1.7][51543] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + update: [....13] [ip4][..udp] [....192.168.1.7][51949] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + update: [.....3] [ip4][..udp] [....192.168.1.7][52116] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + update: [....19] [ip4][..udp] [....192.168.1.7][59180] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + update: [....17] [ip4][..udp] [....192.168.1.7][57719] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + new: [....51] [ip4][..tcp] [....192.168.1.7][53217] -> [..23.246.11.141][...80] + detected: [....51] [ip4][..tcp] [....192.168.1.7][53217] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + analyse: [....51] [ip4][..tcp] [....192.168.1.7][53217] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.286| 0.030| 0.050] + [IAT(c->s)...: 0.000| 0.286| 0.041| 0.075][IAT(s->c)...: 0.001| 0.071| 0.024| 0.019] + [PKTLEN(c->s): 66.000| 584.000| 147.500| 184.300][PKTLEN(s->c): 74.000|1514.000|1302.000| 426.300] + [BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,0,0] + update: [....26] [ip4][..udp] [....192.168.1.7][51728] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....23] [ip4][..udp] [....192.168.1.7][58102] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + update: [....27] [ip4][..udp] [....192.168.1.7][52347] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + update: [....48] [ip4][..udp] [....192.168.1.7][60962] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + new: [....52] [ip4][..udp] [....192.168.1.7][51622] -> [....192.168.1.1][...53] + detected: [....52] [ip4][..udp] [....192.168.1.7][51622] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + detection-update: [....52] [ip4][..udp] [....192.168.1.7][51622] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + detection-update: [....52] [ip4][..udp] [....192.168.1.7][51622] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + new: [....53] [ip4][..tcp] [....192.168.1.7][53238] -> [...52.32.22.214][..443] + detected: [....53] [ip4][..tcp] [....192.168.1.7][53238] -> [...52.32.22.214][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....53] [ip4][..tcp] [....192.168.1.7][53238] -> [...52.32.22.214][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....53] [ip4][..tcp] [....192.168.1.7][53238] -> [...52.32.22.214][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [....54] [ip4][..udp] [....192.168.1.7][52095] -> [....192.168.1.1][...53] + detected: [....54] [ip4][..udp] [....192.168.1.7][52095] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + detection-update: [....54] [ip4][..udp] [....192.168.1.7][52095] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + new: [....55] [ip4][..tcp] [....192.168.1.7][53239] -> [.....52.41.30.5][..443] + new: [....56] [ip4][..tcp] [....192.168.1.7][53248] -> [...52.32.22.214][..443] + detected: [....55] [ip4][..tcp] [....192.168.1.7][53239] -> [.....52.41.30.5][..443] [TLS.NetFlix][Video][Fun] + detected: [....56] [ip4][..tcp] [....192.168.1.7][53248] -> [...52.32.22.214][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....55] [ip4][..tcp] [....192.168.1.7][53239] -> [.....52.41.30.5][..443] [TLS.NetFlix][Video][Fun] + detection-update: [....55] [ip4][..tcp] [....192.168.1.7][53239] -> [.....52.41.30.5][..443] [TLS.NetFlix][Video][Fun] + detection-update: [....56] [ip4][..tcp] [....192.168.1.7][53248] -> [...52.32.22.214][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....56] [ip4][..tcp] [....192.168.1.7][53248] -> [...52.32.22.214][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [....57] [ip4][..tcp] [....192.168.1.7][53249] -> [.....52.41.30.5][..443] + new: [....58] [ip4][..tcp] [....192.168.1.7][53250] -> [.....52.41.30.5][..443] + detected: [....57] [ip4][..tcp] [....192.168.1.7][53249] -> [.....52.41.30.5][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....58] [ip4][..tcp] [....192.168.1.7][53250] -> [.....52.41.30.5][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....57] [ip4][..tcp] [....192.168.1.7][53249] -> [.....52.41.30.5][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....58] [ip4][..tcp] [....192.168.1.7][53250] -> [.....52.41.30.5][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [....57] [ip4][..tcp] [....192.168.1.7][53249] -> [.....52.41.30.5][..443] [TLS.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.141| 0.020| 0.029] + [IAT(c->s)...: 0.000| 0.141| 0.021| 0.036][IAT(s->c)...: 0.000| 0.059| 0.020| 0.021] + [PKTLEN(c->s): 66.000|1514.000| 204.600| 360.800][PKTLEN(s->c): 66.000|1514.000| 665.100| 526.000] + [BINS(c->s)..: 12,1,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 4,0,0,0,1,1,0,0,0,0,0,1,0,0,0,1,0,0,1,0,1,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,2,0,0] + new: [....59] [ip4][..udp] [....192.168.1.7][57093] -> [....192.168.1.1][...53] + detected: [....59] [ip4][..udp] [....192.168.1.7][57093] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....59] [ip4][..udp] [....192.168.1.7][57093] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....60] [ip4][..tcp] [....192.168.1.7][53251] -> [..184.25.204.10][...80] + new: [....61] [ip4][..tcp] [....192.168.1.7][53252] -> [..184.25.204.10][...80] + detected: [....60] [ip4][..tcp] [....192.168.1.7][53251] -> [..184.25.204.10][...80] [HTTP.NetFlix][Video][Fun] + detected: [....61] [ip4][..tcp] [....192.168.1.7][53252] -> [..184.25.204.10][...80] [HTTP.NetFlix][Video][Fun] + analyse: [....55] [ip4][..tcp] [....192.168.1.7][53239] -> [.....52.41.30.5][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.501| 0.064| 0.122] + [IAT(c->s)...: 0.000| 0.437| 0.051| 0.107][IAT(s->c)...: 0.000| 0.501| 0.077| 0.134] + [PKTLEN(c->s): 66.000|1514.000| 354.700| 483.800][PKTLEN(s->c): 66.000|1514.000| 572.500| 600.300] + [BINS(c->s)..: 10,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 5,2,0,0,0,0,1,0,0,0,0,0,1,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0] + detection-update: [....55] [ip4][..tcp] [....192.168.1.7][53239] -> [.....52.41.30.5][..443] [TLS.NetFlix][Video][Fun] + analyse: [....61] [ip4][..tcp] [....192.168.1.7][53252] -> [..184.25.204.10][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 0.100| 0.036| 0.022] + [IAT(c->s)...: 0.012| 0.100| 0.039| 0.032][IAT(s->c)...: 0.001| 0.081| 0.036| 0.019] + [PKTLEN(c->s): 66.000| 311.000| 110.800| 89.700][PKTLEN(s->c): 66.000|1514.000|1402.900| 384.800] + [BINS(c->s)..: 5,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,24,0,0] + analyse: [....60] [ip4][..tcp] [....192.168.1.7][53251] -> [..184.25.204.10][...80] [HTTP.NetFlix][Video][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.416| 0.126| 0.341] + [IAT(c->s)...: 0.000| 1.390| 0.150| 0.365][IAT(s->c)...: 0.000| 1.416| 0.108| 0.321] + [PKTLEN(c->s): 66.000| 311.000| 101.900| 85.400][PKTLEN(s->c): 66.000|1514.000|1310.200| 473.300] + [BINS(c->s)..: 12,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,0,0] + end: [....18] [ip4][..tcp] [....192.168.1.7][53141] -> [..104.86.97.179][..443] [TLS.NetFlix][Video][Fun] + idle: [....12] [ip4][....2] [....192.168.1.7] -> [239.255.255.250] [IGMP][Network][Acceptable] + idle: [....59] [ip4][..udp] [....192.168.1.7][57093] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....19] [ip4][..udp] [....192.168.1.7][59180] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + end: [.....5] [ip4][..tcp] [....192.168.1.7][53114] -> [...54.191.17.51][..443] + end: [....29] [ip4][..tcp] [....192.168.1.7][53162] -> [...54.191.17.51][..443] + guessed: [.....1] [ip4][..tcp] [....192.168.1.7][52929] -> [.....52.24.87.6][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [.....1] [ip4][..tcp] [....192.168.1.7][52929] -> [.....52.24.87.6][..443] + idle: [....46] [ip4][..tcp] [....192.168.1.7][53193] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + end: [....47] [ip4][..tcp] [....192.168.1.7][53202] -> [...54.191.17.51][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + end: [....25] [ip4][..tcp] [....192.168.1.7][53152] -> [...52.89.39.139][...80] [HTTP.NetFlix][Video][Fun] + end: [....24] [ip4][..tcp] [....192.168.1.7][53151] -> [.54.201.191.132][...80] [HTTP.NetFlix][Video][Fun] + end: [.....6] [ip4][..tcp] [....192.168.1.7][53115] -> [...52.32.196.36][..443] + end: [.....7] [ip4][..tcp] [....192.168.1.7][53116] -> [...52.32.196.36][..443] [TLS.NetFlix][Video][Fun] + end: [.....8] [ip4][..tcp] [....192.168.1.7][53117] -> [...52.32.196.36][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + idle: [....10] [ip4][..udp] [....192.168.1.7][53776] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + end: [....20] [ip4][..tcp] [....192.168.1.7][53148] -> [..184.25.204.25][...80] [HTTP.NetFlix][Video][Fun] + end: [....21] [ip4][..tcp] [....192.168.1.7][53149] -> [..184.25.204.25][...80] [HTTP.NetFlix][Video][Fun] + end: [....22] [ip4][..tcp] [....192.168.1.7][53150] -> [..184.25.204.25][...80] [HTTP.NetFlix][Video][Fun] + end: [....28] [ip4][..tcp] [....192.168.1.7][53153] -> [..184.25.204.24][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Suspicious Content + end: [....53] [ip4][..tcp] [....192.168.1.7][53238] -> [...52.32.22.214][..443] + idle: [....56] [ip4][..tcp] [....192.168.1.7][53248] -> [...52.32.22.214][..443] + idle: [....60] [ip4][..tcp] [....192.168.1.7][53251] -> [..184.25.204.10][...80] [HTTP.NetFlix][Video][Fun] + idle: [....61] [ip4][..tcp] [....192.168.1.7][53252] -> [..184.25.204.10][...80] [HTTP.NetFlix][Video][Fun] + idle: [.....2] [ip4][..udp] [....192.168.1.7][51543] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + idle: [....17] [ip4][..udp] [....192.168.1.7][57719] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + end: [....14] [ip4][..tcp] [....192.168.1.7][53132] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + end: [....15] [ip4][..tcp] [....192.168.1.7][53133] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + end: [....16] [ip4][..tcp] [....192.168.1.7][53134] -> [...52.89.39.139][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + idle: [....52] [ip4][..udp] [....192.168.1.7][51622] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + idle: [....55] [ip4][..tcp] [....192.168.1.7][53239] -> [.....52.41.30.5][..443] [TLS.NetFlix][Video][Fun] + idle: [....57] [ip4][..tcp] [....192.168.1.7][53249] -> [.....52.41.30.5][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + idle: [....58] [ip4][..tcp] [....192.168.1.7][53250] -> [.....52.41.30.5][..443] [TLS.NetFlix][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + idle: [....26] [ip4][..udp] [....192.168.1.7][51728] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....13] [ip4][..udp] [....192.168.1.7][51949] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + idle: [....23] [ip4][..udp] [....192.168.1.7][58102] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + idle: [....54] [ip4][..udp] [....192.168.1.7][52095] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + idle: [.....3] [ip4][..udp] [....192.168.1.7][52116] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + idle: [....27] [ip4][..udp] [....192.168.1.7][52347] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + end: [....30] [ip4][..tcp] [....192.168.1.7][53163] -> [..23.246.11.145][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....31] [ip4][..tcp] [....192.168.1.7][53164] -> [..23.246.10.139][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....32] [ip4][..tcp] [....192.168.1.7][53171] -> [...23.246.3.140][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....33] [ip4][..tcp] [....192.168.1.7][53172] -> [..23.246.11.133][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....34] [ip4][..tcp] [....192.168.1.7][53173] -> [..23.246.11.133][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....35] [ip4][..tcp] [....192.168.1.7][53174] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....36] [ip4][..tcp] [....192.168.1.7][53175] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....37] [ip4][..tcp] [....192.168.1.7][53176] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....38] [ip4][..tcp] [....192.168.1.7][53177] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....39] [ip4][..tcp] [....192.168.1.7][53178] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....40] [ip4][..tcp] [....192.168.1.7][53179] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....41] [ip4][..tcp] [....192.168.1.7][53180] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....42] [ip4][..tcp] [....192.168.1.7][53181] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....43] [ip4][..tcp] [....192.168.1.7][53182] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....44] [ip4][..tcp] [....192.168.1.7][53183] -> [...23.246.3.140][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....45] [ip4][..tcp] [....192.168.1.7][53184] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....50] [ip4][..tcp] [....192.168.1.7][53210] -> [..23.246.11.133][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [....51] [ip4][..tcp] [....192.168.1.7][53217] -> [..23.246.11.141][...80] [HTTP.NetFlix][Video][Fun] + RISK: HTTP Numeric IP Address + end: [.....4] [ip4][..tcp] [....192.168.1.7][53105] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + end: [.....9] [ip4][..tcp] [....192.168.1.7][53118] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + end: [....11] [ip4][..tcp] [....192.168.1.7][53119] -> [..54.69.204.241][..443] [TLS.NetFlix][Video][Fun] + end: [....49] [ip4][..tcp] [....192.168.1.7][53203] -> [...52.37.36.252][..443] [TLS.NetFlix][Video][Fun] + idle: [....48] [ip4][..udp] [....192.168.1.7][60962] -> [....192.168.1.1][...53] [DNS.NetFlix][Video][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/netflow-fritz.pcap.out b/test/results/flow-info/netflow-fritz.pcap.out new file mode 100644 index 000000000..f6818d3d5 --- /dev/null +++ b/test/results/flow-info/netflow-fritz.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.0.1][23384] -> [....192.168.1.1][.2055] + detected: [.....1] [ip4][..udp] [....192.168.0.1][23384] -> [....192.168.1.1][.2055] [NetFlow][Network][Acceptable] + idle: [.....1] [ip4][..udp] [....192.168.0.1][23384] -> [....192.168.1.1][.2055] [NetFlow][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/netflowv9.pcap.out b/test/results/flow-info/netflowv9.pcap.out new file mode 100644 index 000000000..f57f54d8d --- /dev/null +++ b/test/results/flow-info/netflowv9.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.134][48629] -> [..192.168.2.222][.2057] + detected: [.....1] [ip4][..udp] [..192.168.2.134][48629] -> [..192.168.2.222][.2057] [NetFlow][Network][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....1] [ip4][..udp] [..192.168.2.134][48629] -> [..192.168.2.222][.2057] [NetFlow][Network][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/nfsv2.pcap.out b/test/results/flow-info/nfsv2.pcap.out new file mode 100644 index 000000000..216c732ba --- /dev/null +++ b/test/results/flow-info/nfsv2.pcap.out @@ -0,0 +1,42 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....139.25.22.2][.3289] -> [..139.25.22.102][..111] + detected: [.....1] [ip4][..udp] [....139.25.22.2][.3289] -> [..139.25.22.102][..111] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....2] [ip4][..udp] [....139.25.22.2][..671] -> [..139.25.22.102][.1048] + detected: [.....2] [ip4][..udp] [....139.25.22.2][..671] -> [..139.25.22.102][.1048] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....3] [ip4][..udp] [....139.25.22.2][.3291] -> [..139.25.22.102][..111] + detected: [.....3] [ip4][..udp] [....139.25.22.2][.3291] -> [..139.25.22.102][..111] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....4] [ip4][..udp] [....139.25.22.2][.3292] -> [..139.25.22.102][.2049] + detected: [.....4] [ip4][..udp] [....139.25.22.2][.3292] -> [..139.25.22.102][.2049] [NFS][DataTransfer][Acceptable] + new: [.....5] [ip4][..udp] [....139.25.22.2][.1023] -> [..139.25.22.102][.2049] + detected: [.....5] [ip4][..udp] [....139.25.22.2][.1023] -> [..139.25.22.102][.2049] [NFS][DataTransfer][Acceptable] + analyse: [.....5] [ip4][..udp] [....139.25.22.2][.1023] -> [..139.25.22.102][.2049] [NFS][DataTransfer][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.010| 0.040| 0.015| 0.011] + [IAT(c->s)...: 0.010| 0.040| 0.015| 0.011][IAT(s->c)...: 0.010| 0.040| 0.015| 0.011] + [PKTLEN(c->s): 166.000| 214.000| 177.500| 14.400][PKTLEN(s->c): 70.000| 170.000| 117.500| 41.400] + [BINS(c->s)..: 0,0,0,5,9,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,0,5,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....6] [ip4][..udp] [....139.25.22.2][.3293] -> [..139.25.22.102][..111] + detected: [.....6] [ip4][..udp] [....139.25.22.2][.3293] -> [..139.25.22.102][..111] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....7] [ip4][..udp] [....139.25.22.2][..686] -> [..139.25.22.102][.1048] + detected: [.....7] [ip4][..udp] [....139.25.22.2][..686] -> [..139.25.22.102][.1048] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....4] [ip4][..udp] [....139.25.22.2][.3292] -> [..139.25.22.102][.2049] [NFS][DataTransfer][Acceptable] + idle: [.....1] [ip4][..udp] [....139.25.22.2][.3289] -> [..139.25.22.102][..111] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....3] [ip4][..udp] [....139.25.22.2][.3291] -> [..139.25.22.102][..111] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....6] [ip4][..udp] [....139.25.22.2][.3293] -> [..139.25.22.102][..111] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....2] [ip4][..udp] [....139.25.22.2][..671] -> [..139.25.22.102][.1048] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....7] [ip4][..udp] [....139.25.22.2][..686] -> [..139.25.22.102][.1048] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....5] [ip4][..udp] [....139.25.22.2][.1023] -> [..139.25.22.102][.2049] [NFS][DataTransfer][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/nfsv3.pcap.out b/test/results/flow-info/nfsv3.pcap.out new file mode 100644 index 000000000..7dbeac35f --- /dev/null +++ b/test/results/flow-info/nfsv3.pcap.out @@ -0,0 +1,47 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....139.25.22.2][.3295] -> [..139.25.22.102][..111] + detected: [.....1] [ip4][..udp] [....139.25.22.2][.3295] -> [..139.25.22.102][..111] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....2] [ip4][..udp] [....139.25.22.2][.3296] -> [..139.25.22.102][.1048] + detected: [.....2] [ip4][..udp] [....139.25.22.2][.3296] -> [..139.25.22.102][.1048] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....3] [ip4][..udp] [....139.25.22.2][..706] -> [..139.25.22.102][.1048] + detected: [.....3] [ip4][..udp] [....139.25.22.2][..706] -> [..139.25.22.102][.1048] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....4] [ip4][..udp] [....139.25.22.2][.3297] -> [..139.25.22.102][..111] + detected: [.....4] [ip4][..udp] [....139.25.22.2][.3297] -> [..139.25.22.102][..111] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....5] [ip4][..udp] [....139.25.22.2][.3298] -> [..139.25.22.102][.2049] + detected: [.....5] [ip4][..udp] [....139.25.22.2][.3298] -> [..139.25.22.102][.2049] [NFS][DataTransfer][Acceptable] + new: [.....6] [ip4][..udp] [....139.25.22.2][.1022] -> [..139.25.22.102][.2049] + detected: [.....6] [ip4][..udp] [....139.25.22.2][.1022] -> [..139.25.22.102][.2049] [NFS][DataTransfer][Acceptable] + analyse: [.....6] [ip4][..udp] [....139.25.22.2][.1022] -> [..139.25.22.102][.2049] [NFS][DataTransfer][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.010| 0.050| 0.017| 0.015] + [IAT(c->s)...: 0.010| 0.050| 0.017| 0.015][IAT(s->c)...: 0.010| 0.050| 0.017| 0.015] + [PKTLEN(c->s): 170.000| 226.000| 183.000| 17.600][PKTLEN(s->c): 74.000| 314.000| 169.800| 87.400] + [BINS(c->s)..: 0,0,0,0,13,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,6,0,2,2,2,0,2,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....7] [ip4][..udp] [....139.25.22.2][.3299] -> [..139.25.22.102][..111] + detected: [.....7] [ip4][..udp] [....139.25.22.2][.3299] -> [..139.25.22.102][..111] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....8] [ip4][..udp] [....139.25.22.2][..722] -> [..139.25.22.102][.1048] + detected: [.....8] [ip4][..udp] [....139.25.22.2][..722] -> [..139.25.22.102][.1048] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....5] [ip4][..udp] [....139.25.22.2][.3298] -> [..139.25.22.102][.2049] [NFS][DataTransfer][Acceptable] + idle: [.....1] [ip4][..udp] [....139.25.22.2][.3295] -> [..139.25.22.102][..111] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....4] [ip4][..udp] [....139.25.22.2][.3297] -> [..139.25.22.102][..111] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....7] [ip4][..udp] [....139.25.22.2][.3299] -> [..139.25.22.102][..111] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....3] [ip4][..udp] [....139.25.22.2][..706] -> [..139.25.22.102][.1048] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....8] [ip4][..udp] [....139.25.22.2][..722] -> [..139.25.22.102][.1048] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....2] [ip4][..udp] [....139.25.22.2][.3296] -> [..139.25.22.102][.1048] [NFS][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....6] [ip4][..udp] [....139.25.22.2][.1022] -> [..139.25.22.102][.2049] [NFS][DataTransfer][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/nintendo.pcap.out b/test/results/flow-info/nintendo.pcap.out new file mode 100644 index 000000000..28a6ac403 --- /dev/null +++ b/test/results/flow-info/nintendo.pcap.out @@ -0,0 +1,117 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.192.168.12.114][52119] -> [....91.8.243.35][49432] + detected: [.....1] [ip4][..udp] [.192.168.12.114][52119] -> [....91.8.243.35][49432] [Nintendo][Game][Fun] + new: [.....2] [ip4][..udp] [.192.168.12.114][52119] -> [...134.3.248.25][56955] + detected: [.....2] [ip4][..udp] [.192.168.12.114][52119] -> [...134.3.248.25][56955] [Nintendo][Game][Fun] + new: [.....3] [ip4][..udp] [.192.168.12.114][52119] -> [..109.21.255.11][50251] + detected: [.....3] [ip4][..udp] [.192.168.12.114][52119] -> [..109.21.255.11][50251] [Nintendo][Game][Fun] + new: [.....4] [ip4][..tcp] [..54.187.10.185][..443] -> [.192.168.12.114][48328] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [..54.187.10.185][..443] -> [.192.168.12.114][48328] [TLS.AmazonAWS][Cloud][Acceptable] + new: [.....5] [ip4][..udp] [.192.168.12.114][52119] -> [...35.158.74.61][33335] + detected: [.....5] [ip4][..udp] [.192.168.12.114][52119] -> [...35.158.74.61][33335] [Nintendo][Game][Fun] + analyse: [.....1] [ip4][..udp] [.192.168.12.114][52119] -> [....91.8.243.35][49432] [Nintendo][Game][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.730| 0.194| 0.332] + [IAT(c->s)...: 0.000| 0.514| 0.195| 0.208][IAT(s->c)...: 0.000| 1.730| 0.192| 0.416] + [PKTLEN(c->s): 102.000| 230.000| 121.000| 31.100][PKTLEN(s->c): 102.000| 854.000| 213.000| 243.300] + [BINS(c->s)..: 0,7,7,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,4,8,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....6] [ip4][..udp] [.192.168.12.114][52119] -> [..52.10.205.177][34343] + new: [.....7] [ip4][..udp] [.192.168.12.114][18874] -> [...192.168.12.1][...53] + detected: [.....7] [ip4][..udp] [.192.168.12.114][18874] -> [...192.168.12.1][...53] [DNS.Nintendo][Game][Fun] + detection-update: [.....7] [ip4][..udp] [.192.168.12.114][18874] -> [...192.168.12.1][...53] [DNS.Nintendo][Game][Fun] + new: [.....8] [ip4][..tcp] [.192.168.12.114][41517] -> [..54.192.27.217][..443] + detected: [.....8] [ip4][..tcp] [.192.168.12.114][41517] -> [..54.192.27.217][..443] [TLS.Nintendo][Game][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....8] [ip4][..tcp] [.192.168.12.114][41517] -> [..54.192.27.217][..443] [TLS.Nintendo][Game][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....8] [ip4][..tcp] [.192.168.12.114][41517] -> [..54.192.27.217][..443] [TLS.Nintendo][Game][Fun] + RISK: TLS (probably) Not Carrying HTTPS + new: [.....9] [ip4][..tcp] [.192.168.12.114][11534] -> [..54.146.242.74][..443] [MIDSTREAM] + new: [....10] [ip4][..udp] [.192.168.12.114][55915] -> [...35.158.74.61][33334] + new: [....11] [ip4][..udp] [.192.168.12.114][55915] -> [...35.158.74.61][10025] + new: [....12] [ip4][..udp] [.192.168.12.114][55915] -> [...35.158.74.61][33335] + new: [....13] [ip4][..udp] [.192.168.12.114][10184] -> [...192.168.12.1][...53] + detected: [....13] [ip4][..udp] [.192.168.12.114][10184] -> [...192.168.12.1][...53] [DNS.Nintendo][Game][Fun] + detection-update: [....13] [ip4][..udp] [.192.168.12.114][10184] -> [...192.168.12.1][...53] [DNS.Nintendo][Game][Fun] + detection-update: [....13] [ip4][..udp] [.192.168.12.114][10184] -> [...192.168.12.1][...53] [DNS.Nintendo][Game][Fun] + detection-update: [....13] [ip4][..udp] [.192.168.12.114][10184] -> [...192.168.12.1][...53] [DNS.Nintendo][Game][Fun] + new: [....14] [ip4][..udp] [.192.168.12.114][55915] -> [..52.10.205.177][34343] + new: [....15] [ip4][..udp] [.192.168.12.114][51035] -> [...192.168.12.1][...53] + detected: [....15] [ip4][..udp] [.192.168.12.114][51035] -> [...192.168.12.1][...53] [DNS.Nintendo][Game][Fun] + detection-update: [....15] [ip4][..udp] [.192.168.12.114][51035] -> [...192.168.12.1][...53] [DNS.Nintendo][Game][Fun] + new: [....16] [ip4][..tcp] [.192.168.12.114][31329] -> [....54.192.27.8][..443] + detected: [....16] [ip4][..tcp] [.192.168.12.114][31329] -> [....54.192.27.8][..443] [TLS.Nintendo][Game][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....16] [ip4][..tcp] [.192.168.12.114][31329] -> [....54.192.27.8][..443] [TLS.Nintendo][Game][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....16] [ip4][..tcp] [.192.168.12.114][31329] -> [....54.192.27.8][..443] [TLS.Nintendo][Game][Fun] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [.....4] [ip4][..tcp] [..54.187.10.185][..443] -> [.192.168.12.114][48328] [TLS.AmazonAWS][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 14.019| 1.263| 3.443] + [IAT(c->s)...: 0.000| 14.019| 1.087| 3.232][IAT(s->c)...: 0.004| 13.944| 1.507| 3.702] + [PKTLEN(c->s): 66.000| 400.000| 123.400| 76.900][PKTLEN(s->c): 66.000| 471.000| 150.200| 121.500] + [BINS(c->s)..: 8,5,0,5,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,6,1,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....17] [ip4][..udp] [.192.168.12.114][55915] -> [.185.118.169.65][27520] + detected: [....17] [ip4][..udp] [.192.168.12.114][55915] -> [.185.118.169.65][27520] [Nintendo][Game][Fun] + new: [....18] [ip4][.icmp] [..151.6.184.100] -> [.192.168.12.114] + detected: [....18] [ip4][.icmp] [..151.6.184.100] -> [.192.168.12.114] [ICMP][Network][Acceptable] + new: [....19] [ip4][..udp] [.192.168.12.114][55915] -> [.93.237.131.235][56066] + detected: [....19] [ip4][..udp] [.192.168.12.114][55915] -> [.93.237.131.235][56066] [Nintendo][Game][Fun] + new: [....20] [ip4][..udp] [.192.168.12.114][55915] -> [..81.61.158.138][51769] + detected: [....20] [ip4][..udp] [.192.168.12.114][55915] -> [..81.61.158.138][51769] [Nintendo][Game][Fun] + new: [....21] [ip4][.icmp] [...151.6.184.98] -> [.192.168.12.114] + detected: [....21] [ip4][.icmp] [...151.6.184.98] -> [.192.168.12.114] [ICMP][Network][Acceptable] + analyse: [....17] [ip4][..udp] [.192.168.12.114][55915] -> [.185.118.169.65][27520] [Nintendo][Game][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.754| 0.078| 0.153] + [IAT(c->s)...: 0.000| 0.312| 0.055| 0.096][IAT(s->c)...: 0.000| 0.754| 0.127| 0.222] + [PKTLEN(c->s): 102.000| 886.000| 154.400| 160.300][PKTLEN(s->c): 102.000| 886.000| 198.000| 230.300] + [BINS(c->s)..: 0,2,18,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,2,6,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....19] [ip4][..udp] [.192.168.12.114][55915] -> [.93.237.131.235][56066] [Nintendo][Game][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.758| 0.106| 0.188] + [IAT(c->s)...: 0.000| 0.607| 0.080| 0.147][IAT(s->c)...: 0.000| 0.758| 0.161| 0.245] + [PKTLEN(c->s): 102.000| 886.000| 231.500| 231.800][PKTLEN(s->c): 102.000| 886.000| 198.000| 230.300] + [BINS(c->s)..: 0,3,13,0,1,0,0,0,0,1,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,2,6,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [....20] [ip4][..udp] [.192.168.12.114][55915] -> [..81.61.158.138][51769] [Nintendo][Game][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.649| 0.099| 0.184] + [IAT(c->s)...: 0.000| 0.649| 0.081| 0.162][IAT(s->c)...: 0.000| 0.629| 0.128| 0.211] + [PKTLEN(c->s): 102.000| 886.000| 157.200| 167.900][PKTLEN(s->c): 102.000| 886.000| 184.700| 212.300] + [BINS(c->s)..: 0,3,15,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,2,8,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + guessed: [....11] [ip4][..udp] [.192.168.12.114][55915] -> [...35.158.74.61][10025] [AmazonAWS][Cloud][Acceptable] + idle: [....11] [ip4][..udp] [.192.168.12.114][55915] -> [...35.158.74.61][10025] + idle: [....15] [ip4][..udp] [.192.168.12.114][51035] -> [...192.168.12.1][...53] [DNS.Nintendo][Game][Fun] + idle: [....13] [ip4][..udp] [.192.168.12.114][10184] -> [...192.168.12.1][...53] [DNS.Nintendo][Game][Fun] + guessed: [.....9] [ip4][..tcp] [.192.168.12.114][11534] -> [..54.146.242.74][..443] [TLS.AmazonAWS][Cloud][Acceptable] + idle: [.....9] [ip4][..tcp] [.192.168.12.114][11534] -> [..54.146.242.74][..443] + idle: [.....4] [ip4][..tcp] [..54.187.10.185][..443] -> [.192.168.12.114][48328] [TLS.AmazonAWS][Cloud][Acceptable] + idle: [....20] [ip4][..udp] [.192.168.12.114][55915] -> [..81.61.158.138][51769] [Nintendo][Game][Fun] + idle: [.....7] [ip4][..udp] [.192.168.12.114][18874] -> [...192.168.12.1][...53] [DNS.Nintendo][Game][Fun] + guessed: [....10] [ip4][..udp] [.192.168.12.114][55915] -> [...35.158.74.61][33334] [AmazonAWS][Cloud][Acceptable] + idle: [....10] [ip4][..udp] [.192.168.12.114][55915] -> [...35.158.74.61][33334] + guessed: [....12] [ip4][..udp] [.192.168.12.114][55915] -> [...35.158.74.61][33335] [AmazonAWS][Cloud][Acceptable] + idle: [....12] [ip4][..udp] [.192.168.12.114][55915] -> [...35.158.74.61][33335] + guessed: [....14] [ip4][..udp] [.192.168.12.114][55915] -> [..52.10.205.177][34343] [AmazonAWS][Cloud][Acceptable] + idle: [....14] [ip4][..udp] [.192.168.12.114][55915] -> [..52.10.205.177][34343] + idle: [....19] [ip4][..udp] [.192.168.12.114][55915] -> [.93.237.131.235][56066] [Nintendo][Game][Fun] + idle: [.....5] [ip4][..udp] [.192.168.12.114][52119] -> [...35.158.74.61][33335] [Nintendo][Game][Fun] + guessed: [.....6] [ip4][..udp] [.192.168.12.114][52119] -> [..52.10.205.177][34343] [AmazonAWS][Cloud][Acceptable] + idle: [.....6] [ip4][..udp] [.192.168.12.114][52119] -> [..52.10.205.177][34343] + end: [.....8] [ip4][..tcp] [.192.168.12.114][41517] -> [..54.192.27.217][..443] + end: [....16] [ip4][..tcp] [.192.168.12.114][31329] -> [....54.192.27.8][..443] + idle: [....17] [ip4][..udp] [.192.168.12.114][55915] -> [.185.118.169.65][27520] [Nintendo][Game][Fun] + idle: [.....1] [ip4][..udp] [.192.168.12.114][52119] -> [....91.8.243.35][49432] [Nintendo][Game][Fun] + idle: [.....3] [ip4][..udp] [.192.168.12.114][52119] -> [..109.21.255.11][50251] [Nintendo][Game][Fun] + idle: [.....2] [ip4][..udp] [.192.168.12.114][52119] -> [...134.3.248.25][56955] [Nintendo][Game][Fun] + idle: [....21] [ip4][.icmp] [...151.6.184.98] -> [.192.168.12.114] [ICMP][Network][Acceptable] + idle: [....18] [ip4][.icmp] [..151.6.184.100] -> [.192.168.12.114] [ICMP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/nntp.pcap.out b/test/results/flow-info/nntp.pcap.out new file mode 100644 index 000000000..c39f64538 --- /dev/null +++ b/test/results/flow-info/nntp.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.192.168.190.20][55630] -> [..192.168.190.5][..119] + detected: [.....1] [ip4][..tcp] [.192.168.190.20][55630] -> [..192.168.190.5][..119] [Usenet][Web][Acceptable] + analyse: [.....1] [ip4][..tcp] [.192.168.190.20][55630] -> [..192.168.190.5][..119] [Usenet][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 25.684| 4.346| 7.782] + [IAT(c->s)...: 0.000| 25.684| 3.742| 7.372][IAT(s->c)...: 0.000| 25.684| 5.182| 8.245] + [PKTLEN(c->s): 54.000| 97.000| 71.700| 10.000][PKTLEN(s->c): 66.000|1514.000| 436.500| 556.500] + [BINS(c->s)..: 19,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,3,0,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,2,0,0] + end: [.....1] [ip4][..tcp] [.192.168.190.20][55630] -> [..192.168.190.5][..119] [Usenet][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/no_sni.pcap.out b/test/results/flow-info/no_sni.pcap.out new file mode 100644 index 000000000..99ca8be0b --- /dev/null +++ b/test/results/flow-info/no_sni.pcap.out @@ -0,0 +1,56 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.119][51331] -> [.104.16.249.249][..443] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [..192.168.1.119][51331] -> [.104.16.249.249][..443] [TLS.Cloudflare][Web][Acceptable] + new: [.....2] [ip4][..tcp] [..192.168.1.119][51606] -> [.104.16.249.249][..443] + detected: [.....2] [ip4][..tcp] [..192.168.1.119][51606] -> [.104.16.249.249][..443] [TLS.DoH_DoT][Network][Fun] + detection-update: [.....2] [ip4][..tcp] [..192.168.1.119][51606] -> [.104.16.249.249][..443] [TLS.DoH_DoT][Network][Fun] + new: [.....3] [ip4][..tcp] [..192.168.1.119][51612] -> [..104.16.124.96][..443] + analyse: [.....2] [ip4][..tcp] [..192.168.1.119][51606] -> [.104.16.249.249][..443] [TLS.DoH_DoT][Network][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.180| 0.028| 0.054] + [IAT(c->s)...: 0.000| 0.178| 0.027| 0.053][IAT(s->c)...: 0.000| 0.180| 0.029| 0.055] + [PKTLEN(c->s): 54.000| 670.000| 131.600| 144.900][PKTLEN(s->c): 60.000| 736.000| 152.000| 182.300] + [BINS(c->s)..: 10,1,3,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 11,1,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detected: [.....3] [ip4][..tcp] [..192.168.1.119][51612] -> [..104.16.124.96][..443] [TLS.Cloudflare][Web][Acceptable] + detection-update: [.....3] [ip4][..tcp] [..192.168.1.119][51612] -> [..104.16.124.96][..443] [TLS.Cloudflare][Web][Acceptable] + analyse: [.....3] [ip4][..tcp] [..192.168.1.119][51612] -> [..104.16.124.96][..443] [TLS.Cloudflare][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.473| 0.050| 0.107] + [IAT(c->s)...: 0.000| 0.473| 0.052| 0.119][IAT(s->c)...: 0.000| 0.380| 0.049| 0.095] + [PKTLEN(c->s): 54.000|1001.000| 185.200| 295.900][PKTLEN(s->c): 60.000|1514.000| 576.800| 561.000] + [BINS(c->s)..: 12,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,2,0,1,0,0] + new: [.....4] [ip4][..tcp] [..192.168.1.119][51635] -> [..104.17.198.37][..443] + new: [.....5] [ip4][..tcp] [..192.168.1.119][51636] -> [..104.17.198.37][..443] + new: [.....6] [ip4][..tcp] [..192.168.1.119][51637] -> [..104.22.72.170][..443] + new: [.....7] [ip4][..tcp] [..192.168.1.119][51638] -> [..104.22.72.170][..443] + new: [.....8] [ip4][..tcp] [..192.168.1.119][51639] -> [..104.22.72.170][..443] + detected: [.....4] [ip4][..tcp] [..192.168.1.119][51635] -> [..104.17.198.37][..443] [TLS.Cloudflare][Web][Acceptable] + detected: [.....5] [ip4][..tcp] [..192.168.1.119][51636] -> [..104.17.198.37][..443] [TLS.Cloudflare][Web][Acceptable] + detected: [.....6] [ip4][..tcp] [..192.168.1.119][51637] -> [..104.22.72.170][..443] [TLS.Cloudflare][Web][Acceptable] + detected: [.....8] [ip4][..tcp] [..192.168.1.119][51639] -> [..104.22.72.170][..443] [TLS.Cloudflare][Web][Acceptable] + detected: [.....7] [ip4][..tcp] [..192.168.1.119][51638] -> [..104.22.72.170][..443] [TLS.Cloudflare][Web][Acceptable] + detection-update: [.....4] [ip4][..tcp] [..192.168.1.119][51635] -> [..104.17.198.37][..443] [TLS.Cloudflare][Web][Acceptable] + detection-update: [.....5] [ip4][..tcp] [..192.168.1.119][51636] -> [..104.17.198.37][..443] [TLS.Cloudflare][Web][Acceptable] + detection-update: [.....6] [ip4][..tcp] [..192.168.1.119][51637] -> [..104.22.72.170][..443] [TLS.Cloudflare][Web][Acceptable] + detection-update: [.....8] [ip4][..tcp] [..192.168.1.119][51639] -> [..104.22.72.170][..443] [TLS.Cloudflare][Web][Acceptable] + detection-update: [.....7] [ip4][..tcp] [..192.168.1.119][51638] -> [..104.22.72.170][..443] [TLS.Cloudflare][Web][Acceptable] + analyse: [.....6] [ip4][..tcp] [..192.168.1.119][51637] -> [..104.22.72.170][..443] [TLS.Cloudflare][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.144| 0.032| 0.043] + [IAT(c->s)...: 0.000| 0.126| 0.029| 0.037][IAT(s->c)...: 0.000| 0.144| 0.035| 0.049] + [PKTLEN(c->s): 54.000| 766.000| 136.700| 172.600][PKTLEN(s->c): 60.000|1514.000| 476.300| 529.000] + [BINS(c->s)..: 12,0,3,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,1,0,0] + idle: [.....6] [ip4][..tcp] [..192.168.1.119][51637] -> [..104.22.72.170][..443] [TLS.Cloudflare][Web][Acceptable] + end: [.....7] [ip4][..tcp] [..192.168.1.119][51638] -> [..104.22.72.170][..443] + end: [.....8] [ip4][..tcp] [..192.168.1.119][51639] -> [..104.22.72.170][..443] + end: [.....1] [ip4][..tcp] [..192.168.1.119][51331] -> [.104.16.249.249][..443] + idle: [.....2] [ip4][..tcp] [..192.168.1.119][51606] -> [.104.16.249.249][..443] [TLS.DoH_DoT][Network][Fun] + idle: [.....3] [ip4][..tcp] [..192.168.1.119][51612] -> [..104.16.124.96][..443] [TLS.Cloudflare][Web][Acceptable] + idle: [.....4] [ip4][..tcp] [..192.168.1.119][51635] -> [..104.17.198.37][..443] [TLS.Cloudflare][Web][Acceptable] + idle: [.....5] [ip4][..tcp] [..192.168.1.119][51636] -> [..104.17.198.37][..443] [TLS.Cloudflare][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ocs.pcap.out b/test/results/flow-info/ocs.pcap.out new file mode 100644 index 000000000..70aabf2e5 --- /dev/null +++ b/test/results/flow-info/ocs.pcap.out @@ -0,0 +1,95 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.180.2][47699] -> [.64.233.184.188][.5228] + new: [.....2] [ip4][..udp] [..192.168.180.2][38472] -> [........8.8.8.8][...53] + detected: [.....2] [ip4][..udp] [..192.168.180.2][38472] -> [........8.8.8.8][...53] [DNS.OCS][Media][Fun] + new: [.....3] [ip4][..udp] [..192.168.180.2][40097] -> [........8.8.8.8][...53] + detected: [.....3] [ip4][..udp] [..192.168.180.2][40097] -> [........8.8.8.8][...53] [DNS.Crashlytics][DataTransfer][Acceptable] + new: [.....4] [ip4][..udp] [..192.168.180.2][.1291] -> [........8.8.8.8][...53] + detected: [.....4] [ip4][..udp] [..192.168.180.2][.1291] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + new: [.....5] [ip4][..tcp] [..192.168.180.2][48250] -> [.178.248.208.54][...80] + new: [.....6] [ip4][..tcp] [..192.168.180.2][39263] -> [..23.21.230.199][..443] + new: [.....7] [ip4][..tcp] [..192.168.180.2][53356] -> [137.135.129.206][...80] + detected: [.....5] [ip4][..tcp] [..192.168.180.2][48250] -> [.178.248.208.54][...80] [HTTP.OCS][Media][Fun] + detected: [.....7] [ip4][..tcp] [..192.168.180.2][53356] -> [137.135.129.206][...80] [HTTP.Azure][Cloud][Acceptable] + new: [.....8] [ip4][..tcp] [..192.168.180.2][44959] -> [137.135.129.206][...80] + detected: [.....8] [ip4][..tcp] [..192.168.180.2][44959] -> [137.135.129.206][...80] [HTTP.Azure][Cloud][Acceptable] + new: [.....9] [ip4][..udp] [..192.168.180.2][48770] -> [........8.8.8.8][...53] + detected: [.....9] [ip4][..udp] [..192.168.180.2][48770] -> [........8.8.8.8][...53] [DNS.PlayStore][SoftwareUpdate][Safe] + new: [....10] [ip4][..tcp] [..192.168.180.2][41223] -> [..216.58.208.46][..443] + detected: [....10] [ip4][..tcp] [..192.168.180.2][41223] -> [..216.58.208.46][..443] [TLS.Google][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [.....6] [ip4][..tcp] [..192.168.180.2][39263] -> [..23.21.230.199][..443] [TLS.Crashlytics][DataTransfer][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....11] [ip4][..udp] [..192.168.180.2][.3621] -> [........8.8.8.8][...53] + detected: [....11] [ip4][..udp] [..192.168.180.2][.3621] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + new: [....12] [ip4][..tcp] [..192.168.180.2][46166] -> [.137.135.131.52][.5122] + new: [....13] [ip4][..tcp] [..192.168.180.2][49881] -> [.178.248.208.54][...80] + new: [....14] [ip4][..udp] [..192.168.180.2][.2589] -> [........8.8.8.8][...53] + detected: [....14] [ip4][..udp] [..192.168.180.2][.2589] -> [........8.8.8.8][...53] [DNS.OCS][Media][Fun] + detected: [....13] [ip4][..tcp] [..192.168.180.2][49881] -> [.178.248.208.54][...80] [HTTP.OCS][Media][Fun] + new: [....15] [ip4][..tcp] [..192.168.180.2][36680] -> [.178.248.208.54][..443] + detected: [....15] [ip4][..tcp] [..192.168.180.2][36680] -> [.178.248.208.54][..443] [TLS.OCS][Media][Fun] + RISK: Obsolete TLS (v1.1 or older) + analyse: [....13] [ip4][..tcp] [..192.168.180.2][49881] -> [.178.248.208.54][...80] [HTTP.OCS][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.929| 0.088| 0.173] + [IAT(c->s)...: 0.000| 0.929| 0.088| 0.173][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 52.000| 715.000| 83.100| 113.800][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 31,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....16] [ip4][..tcp] [..192.168.180.2][32946] -> [.64.233.184.188][..443] + detected: [....16] [ip4][..tcp] [..192.168.180.2][32946] -> [.64.233.184.188][..443] [TLS.GoogleServices][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [....17] [ip4][..udp] [..192.168.180.2][11793] -> [........8.8.8.8][...53] + detected: [....17] [ip4][..udp] [..192.168.180.2][11793] -> [........8.8.8.8][...53] [DNS.GoogleServices][Web][Acceptable] + new: [....18] [ip4][..tcp] [..192.168.180.2][47803] -> [..64.233.166.95][..443] + detected: [....18] [ip4][..tcp] [..192.168.180.2][47803] -> [..64.233.166.95][..443] [TLS.Google][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + update: [....14] [ip4][..udp] [..192.168.180.2][.2589] -> [........8.8.8.8][...53] + update: [.....3] [ip4][..udp] [..192.168.180.2][40097] -> [........8.8.8.8][...53] + update: [.....4] [ip4][..udp] [..192.168.180.2][.1291] -> [........8.8.8.8][...53] + update: [....11] [ip4][..udp] [..192.168.180.2][.3621] -> [........8.8.8.8][...53] + update: [.....2] [ip4][..udp] [..192.168.180.2][38472] -> [........8.8.8.8][...53] + update: [.....9] [ip4][..udp] [..192.168.180.2][48770] -> [........8.8.8.8][...53] + new: [....19] [ip4][..udp] [..192.168.180.2][24245] -> [........8.8.8.8][...53] + detected: [....19] [ip4][..udp] [..192.168.180.2][24245] -> [........8.8.8.8][...53] [DNS.OCS][Media][Fun] + new: [....20] [ip4][..tcp] [..192.168.180.2][42590] -> [178.248.208.210][...80] + detected: [....20] [ip4][..tcp] [..192.168.180.2][42590] -> [178.248.208.210][...80] [HTTP.OCS][Media][Fun] + analyse: [....20] [ip4][..tcp] [..192.168.180.2][42590] -> [178.248.208.210][...80] [HTTP.OCS][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.079| 0.027| 0.030] + [IAT(c->s)...: 0.000| 0.079| 0.027| 0.030][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 52.000| 204.000| 63.900| 26.300][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 31,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [....17] [ip4][..udp] [..192.168.180.2][11793] -> [........8.8.8.8][...53] + idle: [....20] [ip4][..tcp] [..192.168.180.2][42590] -> [178.248.208.210][...80] [HTTP.OCS][Media][Fun] + end: [.....8] [ip4][..tcp] [..192.168.180.2][44959] -> [137.135.129.206][...80] + guessed: [....12] [ip4][..tcp] [..192.168.180.2][46166] -> [.137.135.131.52][.5122] [Azure][Cloud][Acceptable] + idle: [....12] [ip4][..tcp] [..192.168.180.2][46166] -> [.137.135.131.52][.5122] + guessed: [.....1] [ip4][..tcp] [..192.168.180.2][47699] -> [.64.233.184.188][.5228] [Google][Web][Acceptable] + idle: [.....1] [ip4][..tcp] [..192.168.180.2][47699] -> [.64.233.184.188][.5228] + end: [.....6] [ip4][..tcp] [..192.168.180.2][39263] -> [..23.21.230.199][..443] [TLS.Crashlytics][DataTransfer][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + end: [.....7] [ip4][..tcp] [..192.168.180.2][53356] -> [137.135.129.206][...80] + idle: [....15] [ip4][..tcp] [..192.168.180.2][36680] -> [.178.248.208.54][..443] [TLS.OCS][Media][Fun] + RISK: Obsolete TLS (v1.1 or older) + idle: [....14] [ip4][..udp] [..192.168.180.2][.2589] -> [........8.8.8.8][...53] + idle: [....16] [ip4][..tcp] [..192.168.180.2][32946] -> [.64.233.184.188][..443] [TLS.GoogleServices][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + end: [....13] [ip4][..tcp] [..192.168.180.2][49881] -> [.178.248.208.54][...80] [HTTP.OCS][Media][Fun] + idle: [.....3] [ip4][..udp] [..192.168.180.2][40097] -> [........8.8.8.8][...53] + idle: [.....4] [ip4][..udp] [..192.168.180.2][.1291] -> [........8.8.8.8][...53] + idle: [.....5] [ip4][..tcp] [..192.168.180.2][48250] -> [.178.248.208.54][...80] + end: [....10] [ip4][..tcp] [..192.168.180.2][41223] -> [..216.58.208.46][..443] [TLS.Google][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + idle: [....18] [ip4][..tcp] [..192.168.180.2][47803] -> [..64.233.166.95][..443] [TLS.Google][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + idle: [....17] [ip4][..udp] [..192.168.180.2][11793] -> [........8.8.8.8][...53] + idle: [....11] [ip4][..udp] [..192.168.180.2][.3621] -> [........8.8.8.8][...53] + idle: [.....2] [ip4][..udp] [..192.168.180.2][38472] -> [........8.8.8.8][...53] + idle: [.....9] [ip4][..udp] [..192.168.180.2][48770] -> [........8.8.8.8][...53] + idle: [....19] [ip4][..udp] [..192.168.180.2][24245] -> [........8.8.8.8][...53] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ocsp.pcapng.out b/test/results/flow-info/ocsp.pcapng.out new file mode 100644 index 000000000..a1f23802d --- /dev/null +++ b/test/results/flow-info/ocsp.pcapng.out @@ -0,0 +1,84 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.227][49813] -> [.109.70.240.130][...80] + detected: [.....1] [ip4][..tcp] [..192.168.1.227][49813] -> [.109.70.240.130][...80] [HTTP][Web][Acceptable] + DAEMON-EVENT: [Processed: 23 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [..192.168.1.128][54154] -> [.142.250.184.99][...80] + detected: [.....2] [ip4][..tcp] [..192.168.1.128][54154] -> [.142.250.184.99][...80] [HTTP.OCSP][Cloud][Safe] + end: [.....1] [ip4][..tcp] [..192.168.1.227][49813] -> [.109.70.240.130][...80] [HTTP][Web][Acceptable] + new: [.....3] [ip4][..tcp] [..192.168.1.128][43728] -> [..92.122.95.235][...80] + detected: [.....3] [ip4][..tcp] [..192.168.1.128][43728] -> [..92.122.95.235][...80] [HTTP.OCSP][Network][Safe] + analyse: [.....2] [ip4][..tcp] [..192.168.1.128][54154] -> [.142.250.184.99][...80] [HTTP.OCSP][Cloud][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.003| 10.243| 7.530| 4.272] + [IAT(c->s)...: 0.007| 10.243| 7.871| 4.060][IAT(s->c)...: 0.003| 10.243| 7.189| 4.448] + [PKTLEN(c->s): 118.000| 512.000| 164.800| 126.800][PKTLEN(s->c): 118.000| 820.000| 212.100| 238.400] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....3] [ip4][..tcp] [..192.168.1.128][43728] -> [..92.122.95.235][...80] [HTTP.OCSP][Network][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 10.244| 7.440| 4.399] + [IAT(c->s)...: 0.000| 10.244| 7.527| 4.355][IAT(s->c)...: 0.001| 10.244| 7.347| 4.442] + [PKTLEN(c->s): 118.000| 504.000| 163.900| 124.200][PKTLEN(s->c): 118.000|1007.000| 237.100| 302.000] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....4] [ip4][..tcp] [..192.168.1.128][34320] -> [.151.139.128.14][...80] + detected: [.....4] [ip4][..tcp] [..192.168.1.128][34320] -> [.151.139.128.14][...80] [HTTP.OCSP][Network][Safe] + new: [.....5] [ip4][..tcp] [..192.168.1.128][34340] -> [.151.139.128.14][...80] + detected: [.....5] [ip4][..tcp] [..192.168.1.128][34340] -> [.151.139.128.14][...80] [HTTP.OCSP][Network][Safe] + end: [.....3] [ip4][..tcp] [..192.168.1.128][43728] -> [..92.122.95.235][...80] [HTTP.OCSP][Network][Safe] + end: [.....2] [ip4][..tcp] [..192.168.1.128][54154] -> [.142.250.184.99][...80] [HTTP.OCSP][Cloud][Safe] + DAEMON-EVENT: [Processed: 157 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....6] [ip4][..tcp] [..192.168.1.128][47904] -> [..93.184.220.29][...80] + detected: [.....6] [ip4][..tcp] [..192.168.1.128][47904] -> [..93.184.220.29][...80] [HTTP.OCSP][Network][Safe] + end: [.....4] [ip4][..tcp] [..192.168.1.128][34320] -> [.151.139.128.14][...80] [HTTP.OCSP][Network][Safe] + end: [.....5] [ip4][..tcp] [..192.168.1.128][34340] -> [.151.139.128.14][...80] [HTTP.OCSP][Network][Safe] + analyse: [.....6] [ip4][..tcp] [..192.168.1.128][47904] -> [..93.184.220.29][...80] [HTTP.OCSP][Network][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 10.240| 6.308| 4.932] + [IAT(c->s)...: 0.000| 10.240| 6.052| 4.990][IAT(s->c)...: 0.000| 10.240| 6.618| 4.843] + [PKTLEN(c->s): 118.000| 505.000| 182.900| 144.000][PKTLEN(s->c): 118.000| 917.000| 289.800| 327.600] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 207 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....7] [ip4][..tcp] [..192.168.1.128][49382] -> [....52.85.15.92][...80] + detected: [.....7] [ip4][..tcp] [..192.168.1.128][49382] -> [....52.85.15.92][...80] [HTTP.OCSP][Network][Safe] + new: [.....8] [ip4][..tcp] [..192.168.1.128][59922] -> [..151.101.2.133][...80] + detected: [.....8] [ip4][..tcp] [..192.168.1.128][59922] -> [..151.101.2.133][...80] [HTTP.OCSP][Network][Safe] + end: [.....6] [ip4][..tcp] [..192.168.1.128][47904] -> [..93.184.220.29][...80] [HTTP.OCSP][Network][Safe] + analyse: [.....8] [ip4][..tcp] [..192.168.1.128][59922] -> [..151.101.2.133][...80] [HTTP.OCSP][Network][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 10.241| 7.851| 4.241] + [IAT(c->s)...: 0.001| 10.241| 7.676| 4.274][IAT(s->c)...: 0.001| 10.240| 8.039| 4.196] + [PKTLEN(c->s): 118.000| 519.000| 142.100| 94.300][PKTLEN(s->c): 118.000|1462.000| 251.700| 362.000] + [BINS(c->s)..: 16,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0] + analyse: [.....7] [ip4][..tcp] [..192.168.1.128][49382] -> [....52.85.15.92][...80] [HTTP.OCSP][Network][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 10.241| 7.462| 4.365] + [IAT(c->s)...: 0.000| 10.241| 7.229| 4.486][IAT(s->c)...: 0.012| 10.241| 7.711| 4.217] + [PKTLEN(c->s): 118.000| 514.000| 141.800| 93.100][PKTLEN(s->c): 118.000|1124.000| 185.600| 250.800] + [BINS(c->s)..: 16,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 274 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....9] [ip4][..tcp] [..192.168.1.128][45514] -> [.109.70.240.114][...80] + detected: [.....9] [ip4][..tcp] [..192.168.1.128][45514] -> [.109.70.240.114][...80] [HTTP.OCSP][Network][Safe] + end: [.....8] [ip4][..tcp] [..192.168.1.128][59922] -> [..151.101.2.133][...80] [HTTP.OCSP][Network][Safe] + end: [.....7] [ip4][..tcp] [..192.168.1.128][49382] -> [....52.85.15.92][...80] [HTTP.OCSP][Network][Safe] + new: [....10] [ip4][..tcp] [..192.168.1.128][49034] -> [...23.12.96.145][...80] + detected: [....10] [ip4][..tcp] [..192.168.1.128][49034] -> [...23.12.96.145][...80] [HTTP.OCSP][Network][Safe] + end: [.....9] [ip4][..tcp] [..192.168.1.128][45514] -> [.109.70.240.114][...80] [HTTP.OCSP][Network][Safe] + analyse: [....10] [ip4][..tcp] [..192.168.1.128][49034] -> [...23.12.96.145][...80] [HTTP.OCSP][Network][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 10.241| 4.682| 4.929] + [IAT(c->s)...: 0.000| 10.241| 4.896| 4.949][IAT(s->c)...: 0.003| 10.240| 4.451| 4.897] + [PKTLEN(c->s): 118.000| 505.000| 186.600| 147.100][PKTLEN(s->c): 118.000|1566.000| 510.000| 563.500] + [BINS(c->s)..: 14,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + end: [....10] [ip4][..tcp] [..192.168.1.128][49034] -> [...23.12.96.145][...80] [HTTP.OCSP][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ookla.pcap.out b/test/results/flow-info/ookla.pcap.out new file mode 100644 index 000000000..ca525102d --- /dev/null +++ b/test/results/flow-info/ookla.pcap.out @@ -0,0 +1,17 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....192.168.1.7][51207] -> [..46.44.253.187][...80] + detected: [.....1] [ip4][..tcp] [....192.168.1.7][51207] -> [..46.44.253.187][...80] [HTTP.Ookla][Network][Safe] + new: [.....2] [ip4][..tcp] [....192.168.1.7][51215] -> [..46.44.253.187][.8080] + detected: [.....2] [ip4][..tcp] [....192.168.1.7][51215] -> [..46.44.253.187][.8080] [Ookla][Network][Safe] + analyse: [.....2] [ip4][..tcp] [....192.168.1.7][51215] -> [..46.44.253.187][.8080] [Ookla][Network][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.138| 0.055| 0.033] + [IAT(c->s)...: 0.026| 0.103| 0.045| 0.024][IAT(s->c)...: 0.000| 0.138| 0.073| 0.038] + [PKTLEN(c->s): 66.000| 85.000| 74.900| 9.100][PKTLEN(s->c): 66.000| 100.000| 83.600| 7.900] + [BINS(c->s)..: 21,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 10,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....2] [ip4][..tcp] [....192.168.1.7][51215] -> [..46.44.253.187][.8080] [Ookla][Network][Safe] + end: [.....1] [ip4][..tcp] [....192.168.1.7][51207] -> [..46.44.253.187][...80] [HTTP.Ookla][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/openvpn.pcap.out b/test/results/flow-info/openvpn.pcap.out new file mode 100644 index 000000000..848a09a3f --- /dev/null +++ b/test/results/flow-info/openvpn.pcap.out @@ -0,0 +1,44 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.1.77][60140] -> [.46.101.231.218][..443] + detected: [.....1] [ip4][..tcp] [...192.168.1.77][60140] -> [.46.101.231.218][..443] [OpenVPN][VPN][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [.....1] [ip4][..tcp] [...192.168.1.77][60140] -> [.46.101.231.218][..443] [OpenVPN][VPN][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.998| 0.088| 0.234] + [IAT(c->s)...: 0.000| 0.945| 0.103| 0.244][IAT(s->c)...: 0.000| 0.998| 0.077| 0.225] + [PKTLEN(c->s): 66.000| 371.000| 128.600| 84.300][PKTLEN(s->c): 66.000| 222.000| 174.200| 60.300] + [BINS(c->s)..: 6,5,0,0,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,1,0,0,13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 95 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..udp] [..192.168.43.12][41507] -> [.139.59.151.137][13680] + detected: [.....2] [ip4][..udp] [..192.168.43.12][41507] -> [.139.59.151.137][13680] [OpenVPN][VPN][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [.....2] [ip4][..udp] [..192.168.43.12][41507] -> [.139.59.151.137][13680] [OpenVPN][VPN][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.196| 0.045| 0.060] + [IAT(c->s)...: 0.000| 0.196| 0.044| 0.059][IAT(s->c)...: 0.000| 0.195| 0.047| 0.060] + [PKTLEN(c->s): 84.000| 345.000| 106.400| 59.700][PKTLEN(s->c): 96.000| 196.000| 178.900| 22.400] + [BINS(c->s)..: 0,16,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,1,0,0,14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..tcp] [...192.168.1.77][60140] -> [.46.101.231.218][..443] [OpenVPN][VPN][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: [Processed: 178 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..udp] [..192.168.43.18][13680] -> [.139.59.151.137][13680] + detected: [.....3] [ip4][..udp] [..192.168.43.18][13680] -> [.139.59.151.137][13680] [OpenVPN][VPN][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [.....3] [ip4][..udp] [..192.168.43.18][13680] -> [.139.59.151.137][13680] [OpenVPN][VPN][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.242| 0.188| 0.537] + [IAT(c->s)...: 0.000| 2.196| 0.182| 0.524][IAT(s->c)...: 0.000| 2.242| 0.194| 0.551] + [PKTLEN(c->s): 84.000| 345.000| 105.900| 59.800][PKTLEN(s->c): 92.000| 196.000| 172.800| 31.100] + [BINS(c->s)..: 0,16,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,2,0,0,13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....2] [ip4][..udp] [..192.168.43.12][41507] -> [.139.59.151.137][13680] [OpenVPN][VPN][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....3] [ip4][..udp] [..192.168.43.18][13680] -> [.139.59.151.137][13680] [OpenVPN][VPN][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/oracle12.pcapng.out b/test/results/flow-info/oracle12.pcapng.out new file mode 100644 index 000000000..a737ae584 --- /dev/null +++ b/test/results/flow-info/oracle12.pcapng.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......10.0.2.15][40226] -> [....10.0.72.139][.1521] + guessed: [.....1] [ip4][..tcp] [......10.0.2.15][40226] -> [....10.0.72.139][.1521] [Oracle][Database][Acceptable] + idle: [.....1] [ip4][..tcp] [......10.0.2.15][40226] -> [....10.0.72.139][.1521] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/os_detected.pcapng.out b/test/results/flow-info/os_detected.pcapng.out new file mode 100644 index 000000000..b4425f1bf --- /dev/null +++ b/test/results/flow-info/os_detected.pcapng.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.1.128][39821] -> [........8.8.8.8][..443] + detected: [.....1] [ip4][..udp] [..192.168.1.128][39821] -> [........8.8.8.8][..443] [QUIC.Google][Web][Acceptable] + RISK: Missing SNI TLS Extn + idle: [.....1] [ip4][..udp] [..192.168.1.128][39821] -> [........8.8.8.8][..443] [QUIC.Google][Web][Acceptable] + RISK: Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ospfv2_add_new_prefix.pcap.out b/test/results/flow-info/ospfv2_add_new_prefix.pcap.out new file mode 100644 index 000000000..454dc88a6 --- /dev/null +++ b/test/results/flow-info/ospfv2_add_new_prefix.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][...89] [.....10.1.10.10] -> [......10.1.10.1] + detected: [.....1] [ip4][...89] [.....10.1.10.10] -> [......10.1.10.1] [OSPF][Network][Acceptable] + idle: [.....1] [ip4][...89] [.....10.1.10.10] -> [......10.1.10.1] [OSPF][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/pgm.pcap.out b/test/results/flow-info/pgm.pcap.out new file mode 100644 index 000000000..9fda8eec8 --- /dev/null +++ b/test/results/flow-info/pgm.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..113] [..10.244.64.154] -> [.....235.0.1.47] + detected: [.....1] [ip4][..113] [..10.244.64.154] -> [.....235.0.1.47] [PGM][Network][Acceptable] + analyse: [.....1] [ip4][..113] [..10.244.64.154] -> [.....235.0.1.47] [PGM][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.841| 0.063| 0.156] + [IAT(c->s)...: 0.000| 0.841| 0.063| 0.156][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 70.000|1344.000| 203.200| 214.800][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,1,9,12,2,1,2,1,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..113] [..10.244.64.154] -> [.....235.0.1.47] [PGM][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/pgsql.pcap.out b/test/results/flow-info/pgsql.pcap.out new file mode 100644 index 000000000..4df9fe4a9 --- /dev/null +++ b/test/results/flow-info/pgsql.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......127.0.0.1][45930] -> [......127.0.0.1][.5432] + new: [.....2] [ip4][..tcp] [......127.0.0.1][45931] -> [......127.0.0.1][.5432] + detected: [.....1] [ip4][..tcp] [......127.0.0.1][45930] -> [......127.0.0.1][.5432] [PostgreSQL][Database][Acceptable] + detected: [.....2] [ip4][..tcp] [......127.0.0.1][45931] -> [......127.0.0.1][.5432] [PostgreSQL][Database][Acceptable] + idle: [.....1] [ip4][..tcp] [......127.0.0.1][45930] -> [......127.0.0.1][.5432] [PostgreSQL][Database][Acceptable] + idle: [.....2] [ip4][..tcp] [......127.0.0.1][45931] -> [......127.0.0.1][.5432] [PostgreSQL][Database][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/pim.pcap.out b/test/results/flow-info/pim.pcap.out new file mode 100644 index 000000000..b429f4ba8 --- /dev/null +++ b/test/results/flow-info/pim.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..103] [192.168.203.234] -> [.....224.0.0.13] + detected: [.....1] [ip4][..103] [192.168.203.234] -> [.....224.0.0.13] [IP_PIM][Network][Acceptable] + idle: [.....1] [ip4][..103] [192.168.203.234] -> [.....224.0.0.13] [IP_PIM][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/pinterest.pcap.out b/test/results/flow-info/pinterest.pcap.out new file mode 100644 index 000000000..edea36e82 --- /dev/null +++ b/test/results/flow-info/pinterest.pcap.out @@ -0,0 +1,263 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33164] -> [.....................64:ff9b::9765:7854][..443] [MIDSTREAM] + new: [.....2] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40876] -> [...............2a00:1450:4007:807::200a][..443] [MIDSTREAM] + new: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33262] -> [.....................64:ff9b::9765:7854][..443] + detected: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33262] -> [.....................64:ff9b::9765:7854][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33262] -> [.....................64:ff9b::9765:7854][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33262] -> [.....................64:ff9b::9765:7854][..443] [TLS.Pinterest][SocialNetwork][Fun] + analyse: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33262] -> [.....................64:ff9b::9765:7854][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.172| 0.014| 0.033] + [IAT(c->s)...: 0.000| 0.041| 0.007| 0.013][IAT(s->c)...: 0.000| 0.172| 0.020| 0.042] + [PKTLEN(c->s): 86.000| 603.000| 160.700| 149.900][PKTLEN(s->c): 86.000|1134.000| 569.900| 485.800] + [BINS(c->s)..: 10,1,1,1,0,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,2,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33262] -> [.....................64:ff9b::9765:7854][..443] [TLS.Pinterest][SocialNetwork][Fun] + new: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38512] -> [.......................2a04:4e42:1d::84][..443] + new: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38514] -> [.......................2a04:4e42:1d::84][..443] + new: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38516] -> [.......................2a04:4e42:1d::84][..443] + new: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38518] -> [.......................2a04:4e42:1d::84][..443] + new: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38520] -> [.......................2a04:4e42:1d::84][..443] + new: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38522] -> [.......................2a04:4e42:1d::84][..443] + detected: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38512] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detected: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38518] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detected: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38516] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detected: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38514] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detected: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38522] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detected: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38520] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38512] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38512] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38518] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38518] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38516] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38522] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38522] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38514] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38516] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38514] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38520] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38520] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + new: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33156] -> [.....................64:ff9b::9765:7854][..443] [MIDSTREAM] + new: [....11] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58726] -> [...............2a00:1450:4007:80b::2002][..443] [MIDSTREAM] + new: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][34626] -> [.....................64:ff9b::acd9:13e2][..443] [MIDSTREAM] + analyse: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38512] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.054| 0.008| 0.015] + [IAT(c->s)...: 0.000| 0.044| 0.007| 0.013][IAT(s->c)...: 0.000| 0.054| 0.009| 0.017] + [PKTLEN(c->s): 86.000|1040.000| 244.100| 244.000][PKTLEN(s->c): 86.000|1474.000| 589.000| 631.100] + [BINS(c->s)..: 9,1,1,1,0,0,0,0,2,2,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,4,0,0,0,0] + new: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47032] -> [......................2600:1901::7a0b::][..443] + detected: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47032] -> [......................2600:1901::7a0b::][..443] [TLS][Web][Safe] + new: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40694] -> [...............2a00:1450:4007:816::2004][..443] + detection-update: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47032] -> [......................2600:1901::7a0b::][..443] [TLS][Web][Safe] + detected: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40694] -> [...............2a00:1450:4007:816::2004][..443] [TLS.Google][Web][Acceptable] + new: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33280] -> [.....................64:ff9b::9765:7854][..443] + detection-update: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40694] -> [...............2a00:1450:4007:816::2004][..443] [TLS.Google][Web][Acceptable] + detected: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33280] -> [.....................64:ff9b::9765:7854][..443] [TLS.Pinterest][SocialNetwork][Fun] + analyse: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40694] -> [...............2a00:1450:4007:816::2004][..443] [TLS.Google][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.044| 0.009| 0.014] + [IAT(c->s)...: 0.000| 0.044| 0.008| 0.014][IAT(s->c)...: 0.000| 0.039| 0.011| 0.014] + [PKTLEN(c->s): 86.000| 603.000| 149.200| 137.000][PKTLEN(s->c): 86.000|1294.000| 396.200| 419.000] + [BINS(c->s)..: 12,1,2,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,1,0,0,0,0,2,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0] + detection-update: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33280] -> [.....................64:ff9b::9765:7854][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33280] -> [.....................64:ff9b::9765:7854][..443] [TLS.Pinterest][SocialNetwork][Fun] + new: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57050] -> [......................2a04:4e42:1d::720][..443] + analyse: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47032] -> [......................2600:1901::7a0b::][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.133| 0.017| 0.031] + [IAT(c->s)...: 0.000| 0.133| 0.014| 0.032][IAT(s->c)...: 0.000| 0.094| 0.021| 0.027] + [PKTLEN(c->s): 86.000| 603.000| 185.200| 170.400][PKTLEN(s->c): 86.000|1294.000| 501.000| 523.700] + [BINS(c->s)..: 11,1,2,0,1,0,0,0,0,0,0,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0] + detected: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57050] -> [......................2a04:4e42:1d::720][..443] [TLS][Web][Safe] + detection-update: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57050] -> [......................2a04:4e42:1d::720][..443] [TLS][Web][Safe] + detection-update: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57050] -> [......................2a04:4e42:1d::720][..443] [TLS][Media][Safe] + analyse: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33280] -> [.....................64:ff9b::9765:7854][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.090| 0.016| 0.023] + [IAT(c->s)...: 0.000| 0.090| 0.014| 0.025][IAT(s->c)...: 0.000| 0.050| 0.018| 0.020] + [PKTLEN(c->s): 86.000| 603.000| 151.700| 138.300][PKTLEN(s->c): 86.000|1134.000| 478.000| 456.800] + [BINS(c->s)..: 11,1,1,1,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,2,0,0,1,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33280] -> [.....................64:ff9b::9765:7854][..443] [TLS.Pinterest][SocialNetwork][Fun] + analyse: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57050] -> [......................2a04:4e42:1d::720][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.050| 0.009| 0.016] + [IAT(c->s)...: 0.000| 0.050| 0.008| 0.016][IAT(s->c)...: 0.000| 0.050| 0.011| 0.017] + [PKTLEN(c->s): 86.000| 603.000| 153.800| 147.400][PKTLEN(s->c): 86.000|1474.000| 871.600| 656.400] + [BINS(c->s)..: 12,0,1,1,0,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,8,0,0,0,0] + detection-update: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57050] -> [......................2a04:4e42:1d::720][..443] [TLS][Media][Safe] + new: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51582] -> [...............2a00:1450:4007:816::2003][..443] + detected: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51582] -> [...............2a00:1450:4007:816::2003][..443] [TLS.Google][Web][Acceptable] + new: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54416] -> [...............2a00:1450:4007:806::200e][..443] + detected: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54416] -> [...............2a00:1450:4007:806::200e][..443] [TLS.Google][Web][Acceptable] + new: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51292] -> [.........2a03:2880:f030:13:face:b00c::3][..443] + detection-update: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51582] -> [...............2a00:1450:4007:816::2003][..443] [TLS.Google][Web][Acceptable] + detected: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51292] -> [.........2a03:2880:f030:13:face:b00c::3][..443] [TLS.Facebook][SocialNetwork][Fun] + detection-update: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54416] -> [...............2a00:1450:4007:806::200e][..443] [TLS.Google][Web][Acceptable] + detection-update: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51292] -> [.........2a03:2880:f030:13:face:b00c::3][..443] [TLS.Facebook][SocialNetwork][Fun] + analyse: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51582] -> [...............2a00:1450:4007:816::2003][..443] [TLS.Google][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.077| 0.017| 0.027] + [IAT(c->s)...: 0.000| 0.077| 0.013| 0.027][IAT(s->c)...: 0.000| 0.077| 0.022| 0.027] + [PKTLEN(c->s): 86.000| 603.000| 148.200| 140.700][PKTLEN(s->c): 86.000|1294.000| 694.900| 550.600] + [BINS(c->s)..: 12,0,2,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0] + analyse: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54416] -> [...............2a00:1450:4007:806::200e][..443] [TLS.Google][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.079| 0.014| 0.022] + [IAT(c->s)...: 0.000| 0.079| 0.014| 0.024][IAT(s->c)...: 0.000| 0.070| 0.014| 0.021] + [PKTLEN(c->s): 86.000| 603.000| 146.800| 134.600][PKTLEN(s->c): 86.000|1294.000| 725.400| 553.800] + [BINS(c->s)..: 12,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0] + analyse: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51292] -> [.........2a03:2880:f030:13:face:b00c::3][..443] [TLS.Facebook][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.093| 0.012| 0.022] + [IAT(c->s)...: 0.000| 0.065| 0.012| 0.019][IAT(s->c)...: 0.000| 0.093| 0.012| 0.026] + [PKTLEN(c->s): 86.000| 603.000| 161.300| 135.000][PKTLEN(s->c): 86.000|1466.000| 444.000| 491.800] + [BINS(c->s)..: 12,0,2,1,0,0,0,0,2,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,2,1,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0] + new: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][60340] -> [......2a03:2880:f11f:83:face:b00c::25de][..443] + detected: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][60340] -> [......2a03:2880:f11f:83:face:b00c::25de][..443] [TLS.Facebook][SocialNetwork][Fun] + new: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47790] -> [...............2a00:1450:4007:816::200a][..443] + detection-update: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][60340] -> [......2a03:2880:f11f:83:face:b00c::25de][..443] [TLS.Facebook][SocialNetwork][Fun] + detected: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47790] -> [...............2a00:1450:4007:816::200a][..443] [TLS.GoogleServices][Web][Acceptable] + detection-update: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47790] -> [...............2a00:1450:4007:816::200a][..443] [TLS.GoogleServices][Web][Acceptable] + new: [....22] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43562] -> [...............2a00:1450:4007:805::2003][..443] [MIDSTREAM] + detected: [....22] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43562] -> [...............2a00:1450:4007:805::2003][..443] [TLS][Web][Safe] + analyse: [....22] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43562] -> [...............2a00:1450:4007:805::2003][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.029| 0.002| 0.007] + [IAT(c->s)...: 0.000| 0.029| 0.004| 0.009][IAT(s->c)...: 0.000| 0.023| 0.002| 0.006] + [PKTLEN(c->s): 86.000| 244.000| 117.200| 59.000][PKTLEN(s->c): 86.000|1294.000|1001.600| 493.800] + [BINS(c->s)..: 7,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,1,0,1,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,0,0,0,0,0,0,0,0,0,0] + new: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40894] -> [...............2a00:1450:4007:816::200d][..443] + detected: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40894] -> [...............2a00:1450:4007:816::200d][..443] [TLS.Google][Web][Acceptable] + detection-update: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40894] -> [...............2a00:1450:4007:816::200d][..443] [TLS.Google][Web][Acceptable] + analyse: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47790] -> [...............2a00:1450:4007:816::200a][..443] [TLS.GoogleServices][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.486| 0.068| 0.273] + [IAT(c->s)...: 0.000| 1.486| 0.105| 0.357][IAT(s->c)...: 0.000| 0.055| 0.019| 0.019] + [PKTLEN(c->s): 86.000| 603.000| 161.800| 143.600][PKTLEN(s->c): 86.000|1294.000| 354.500| 415.000] + [BINS(c->s)..: 11,1,2,0,0,1,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,2,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0] + analyse: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40894] -> [...............2a00:1450:4007:816::200d][..443] [TLS.Google][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.043| 0.009| 0.013] + [IAT(c->s)...: 0.000| 0.040| 0.009| 0.013][IAT(s->c)...: 0.000| 0.043| 0.010| 0.013] + [PKTLEN(c->s): 86.000| 603.000| 146.400| 134.000][PKTLEN(s->c): 86.000|1294.000| 719.100| 550.500] + [BINS(c->s)..: 12,0,2,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0] + analyse: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][60340] -> [......2a03:2880:f11f:83:face:b00c::25de][..443] [TLS.Facebook][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.522| 0.133| 0.377] + [IAT(c->s)...: 0.000| 1.490| 0.127| 0.367][IAT(s->c)...: 0.000| 1.522| 0.141| 0.386] + [PKTLEN(c->s): 86.000| 632.000| 187.800| 185.400][PKTLEN(s->c): 86.000|1466.000| 359.100| 464.100] + [BINS(c->s)..: 11,0,2,0,0,0,0,0,0,0,0,1,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,2,1,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0] + new: [....24] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56940] -> [......................2a04:4e42:1d::720][..443] [MIDSTREAM] + new: [....25] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51472] -> [...............2a00:1450:4007:816::2003][..443] [MIDSTREAM] + new: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54308] -> [...............2a00:1450:4007:806::200e][..443] [MIDSTREAM] + new: [....27] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57130] -> [...............2a00:1450:4007:80c::200a][..443] [MIDSTREAM] + new: [....28] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38402] -> [.......................2a04:4e42:1d::84][..443] [MIDSTREAM] + new: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46918] -> [......................2600:1901::7a0b::][..443] [MIDSTREAM] + new: [....30] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38406] -> [.......................2a04:4e42:1d::84][..443] [MIDSTREAM] + new: [....31] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51446] -> [...............2a00:1450:4007:816::2003][..443] [MIDSTREAM] + new: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47682] -> [...............2a00:1450:4007:816::200a][..443] [MIDSTREAM] + new: [....33] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48890] -> [...............2a00:1450:4007:815::2003][..443] [MIDSTREAM] + new: [....34] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40560] -> [...............2a00:1450:4007:816::2004][..443] [MIDSTREAM] + new: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38546] -> [.......................2a04:4e42:1d::84][..443] + new: [....36] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][45126] -> [...............2a00:1450:4007:80a::200e][..443] + detected: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38546] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detected: [....36] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][45126] -> [...............2a00:1450:4007:80a::200e][..443] [TLS.Google][Advertisement][Acceptable] + detection-update: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38546] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38546] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + detection-update: [....36] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][45126] -> [...............2a00:1450:4007:80a::200e][..443] [TLS.Google][Advertisement][Acceptable] + analyse: [....36] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][45126] -> [...............2a00:1450:4007:80a::200e][..443] [TLS.Google][Advertisement][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.157| 0.019| 0.038] + [IAT(c->s)...: 0.000| 0.157| 0.015| 0.039][IAT(s->c)...: 0.000| 0.112| 0.024| 0.035] + [PKTLEN(c->s): 86.000| 603.000| 143.500| 131.700][PKTLEN(s->c): 86.000|1294.000| 748.300| 539.800] + [BINS(c->s)..: 13,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0] + analyse: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38546] -> [.......................2a04:4e42:1d::84][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.136| 0.027| 0.042] + [IAT(c->s)...: 0.000| 0.111| 0.023| 0.039][IAT(s->c)...: 0.000| 0.136| 0.032| 0.045] + [PKTLEN(c->s): 86.000| 603.000| 163.300| 138.400][PKTLEN(s->c): 86.000|1474.000| 692.800| 639.800] + [BINS(c->s)..: 9,1,1,1,1,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,1,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,6,0,0,0,0] + detection-update: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38546] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + new: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40114] -> [.....................64:ff9b::9765:7a6e][..443] + detected: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40114] -> [.....................64:ff9b::9765:7a6e][..443] [TLS][Web][Safe] + detection-update: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40114] -> [.....................64:ff9b::9765:7a6e][..443] [TLS][Web][Safe] + detection-update: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40114] -> [.....................64:ff9b::9765:7a6e][..443] [TLS][Media][Safe] + analyse: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40114] -> [.....................64:ff9b::9765:7a6e][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.045| 0.007| 0.012] + [IAT(c->s)...: 0.000| 0.045| 0.007| 0.013][IAT(s->c)...: 0.000| 0.037| 0.007| 0.012] + [PKTLEN(c->s): 86.000| 603.000| 150.100| 135.700][PKTLEN(s->c): 86.000|1134.000| 633.300| 504.100] + [BINS(c->s)..: 11,1,1,1,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40114] -> [.....................64:ff9b::9765:7a6e][..443] [TLS][Media][Safe] + guessed: [.....2] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40876] -> [...............2a00:1450:4007:807::200a][..443] [TLS][Web][Safe] + idle: [.....2] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40876] -> [...............2a00:1450:4007:807::200a][..443] + idle: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47032] -> [......................2600:1901::7a0b::][..443] [TLS][Web][Safe] + idle: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40894] -> [...............2a00:1450:4007:816::200d][..443] [TLS.Google][Web][Acceptable] + idle: [....36] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][45126] -> [...............2a00:1450:4007:80a::200e][..443] [TLS.Google][Advertisement][Acceptable] + idle: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40114] -> [.....................64:ff9b::9765:7a6e][..443] [TLS][Media][Safe] + guessed: [....31] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51446] -> [...............2a00:1450:4007:816::2003][..443] [TLS][Web][Safe] + idle: [....31] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51446] -> [...............2a00:1450:4007:816::2003][..443] + guessed: [....25] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51472] -> [...............2a00:1450:4007:816::2003][..443] [TLS][Web][Safe] + idle: [....25] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51472] -> [...............2a00:1450:4007:816::2003][..443] + idle: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51582] -> [...............2a00:1450:4007:816::2003][..443] [TLS.Google][Web][Acceptable] + guessed: [....28] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38402] -> [.......................2a04:4e42:1d::84][..443] [TLS][Web][Safe] + idle: [....28] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38402] -> [.......................2a04:4e42:1d::84][..443] + guessed: [....30] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38406] -> [.......................2a04:4e42:1d::84][..443] [TLS][Web][Safe] + idle: [....30] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38406] -> [.......................2a04:4e42:1d::84][..443] + idle: [....22] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43562] -> [...............2a00:1450:4007:805::2003][..443] [TLS][Web][Safe] + guessed: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47682] -> [...............2a00:1450:4007:816::200a][..443] [TLS][Web][Safe] + idle: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47682] -> [...............2a00:1450:4007:816::200a][..443] + idle: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51292] -> [.........2a03:2880:f030:13:face:b00c::3][..443] [TLS.Facebook][SocialNetwork][Fun] + guessed: [....24] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56940] -> [......................2a04:4e42:1d::720][..443] [TLS][Web][Safe] + idle: [....24] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56940] -> [......................2a04:4e42:1d::720][..443] + idle: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38512] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + end: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38514] -> [.......................2a04:4e42:1d::84][..443] + end: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38516] -> [.......................2a04:4e42:1d::84][..443] + end: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38518] -> [.......................2a04:4e42:1d::84][..443] + end: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38520] -> [.......................2a04:4e42:1d::84][..443] + end: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38522] -> [.......................2a04:4e42:1d::84][..443] + idle: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38546] -> [.......................2a04:4e42:1d::84][..443] [TLS.Pinterest][SocialNetwork][Fun] + idle: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47790] -> [...............2a00:1450:4007:816::200a][..443] [TLS.GoogleServices][Web][Acceptable] + idle: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57050] -> [......................2a04:4e42:1d::720][..443] [TLS][Media][Safe] + guessed: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][34626] -> [.....................64:ff9b::acd9:13e2][..443] [TLS][Web][Safe] + idle: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][34626] -> [.....................64:ff9b::acd9:13e2][..443] + guessed: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54308] -> [...............2a00:1450:4007:806::200e][..443] [TLS][Web][Safe] + idle: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54308] -> [...............2a00:1450:4007:806::200e][..443] + idle: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54416] -> [...............2a00:1450:4007:806::200e][..443] [TLS.Google][Web][Acceptable] + guessed: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33156] -> [.....................64:ff9b::9765:7854][..443] [TLS][Web][Safe] + idle: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33156] -> [.....................64:ff9b::9765:7854][..443] + guessed: [.....1] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33164] -> [.....................64:ff9b::9765:7854][..443] [TLS][Web][Safe] + idle: [.....1] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33164] -> [.....................64:ff9b::9765:7854][..443] + guessed: [....11] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58726] -> [...............2a00:1450:4007:80b::2002][..443] [TLS][Web][Safe] + idle: [....11] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58726] -> [...............2a00:1450:4007:80b::2002][..443] + idle: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][60340] -> [......2a03:2880:f11f:83:face:b00c::25de][..443] [TLS.Facebook][SocialNetwork][Fun] + idle: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33262] -> [.....................64:ff9b::9765:7854][..443] [TLS.Pinterest][SocialNetwork][Fun] + idle: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][33280] -> [.....................64:ff9b::9765:7854][..443] [TLS.Pinterest][SocialNetwork][Fun] + guessed: [....34] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40560] -> [...............2a00:1450:4007:816::2004][..443] [TLS][Web][Safe] + idle: [....34] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40560] -> [...............2a00:1450:4007:816::2004][..443] + idle: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40694] -> [...............2a00:1450:4007:816::2004][..443] [TLS.Google][Web][Acceptable] + guessed: [....33] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48890] -> [...............2a00:1450:4007:815::2003][..443] [TLS][Web][Safe] + idle: [....33] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48890] -> [...............2a00:1450:4007:815::2003][..443] + guessed: [....27] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57130] -> [...............2a00:1450:4007:80c::200a][..443] [TLS][Web][Safe] + idle: [....27] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57130] -> [...............2a00:1450:4007:80c::200a][..443] + guessed: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46918] -> [......................2600:1901::7a0b::][..443] [TLS][Web][Safe] + idle: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46918] -> [......................2600:1901::7a0b::][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/pluralsight.pcap.out b/test/results/flow-info/pluralsight.pcap.out new file mode 100644 index 000000000..a7d33340b --- /dev/null +++ b/test/results/flow-info/pluralsight.pcap.out @@ -0,0 +1,32 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.128][42642] -> [...54.69.188.18][..443] + detected: [.....1] [ip4][..tcp] [..192.168.1.128][42642] -> [...54.69.188.18][..443] [TLS.Pluralsight][Streaming][Fun] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.128][42642] -> [...54.69.188.18][..443] [TLS.Pluralsight][Streaming][Fun] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.128][42642] -> [...54.69.188.18][..443] [TLS.Pluralsight][Streaming][Fun] + new: [.....2] [ip4][..tcp] [..192.168.1.128][42782] -> [..146.75.62.208][..443] + new: [.....3] [ip4][..tcp] [..192.168.1.128][42790] -> [..146.75.62.208][..443] + detected: [.....2] [ip4][..tcp] [..192.168.1.128][42782] -> [..146.75.62.208][..443] [TLS.Pluralsight][Streaming][Fun] + detected: [.....3] [ip4][..tcp] [..192.168.1.128][42790] -> [..146.75.62.208][..443] [TLS.Pluralsight][Streaming][Fun] + detection-update: [.....2] [ip4][..tcp] [..192.168.1.128][42782] -> [..146.75.62.208][..443] [TLS.Pluralsight][Streaming][Fun] + detection-update: [.....2] [ip4][..tcp] [..192.168.1.128][42782] -> [..146.75.62.208][..443] [TLS.Pluralsight][Streaming][Fun] + detection-update: [.....3] [ip4][..tcp] [..192.168.1.128][42790] -> [..146.75.62.208][..443] [TLS.Pluralsight][Streaming][Fun] + detection-update: [.....3] [ip4][..tcp] [..192.168.1.128][42790] -> [..146.75.62.208][..443] [TLS.Pluralsight][Streaming][Fun] + new: [.....4] [ip4][..tcp] [..192.168.1.128][42618] -> [..18.203.201.56][..443] + detected: [.....4] [ip4][..tcp] [..192.168.1.128][42618] -> [..18.203.201.56][..443] [TLS.Pluralsight][Streaming][Fun] + detection-update: [.....4] [ip4][..tcp] [..192.168.1.128][42618] -> [..18.203.201.56][..443] [TLS.Pluralsight][Streaming][Fun] + detection-update: [.....4] [ip4][..tcp] [..192.168.1.128][42618] -> [..18.203.201.56][..443] [TLS.Pluralsight][Streaming][Fun] + new: [.....5] [ip4][..tcp] [..192.168.1.128][48948] -> [.104.19.162.127][..443] + detected: [.....5] [ip4][..tcp] [..192.168.1.128][48948] -> [.104.19.162.127][..443] [TLS.Pluralsight][Streaming][Fun] + detection-update: [.....5] [ip4][..tcp] [..192.168.1.128][48948] -> [.104.19.162.127][..443] [TLS.Pluralsight][Streaming][Fun] + new: [.....6] [ip4][..tcp] [..192.168.1.128][44770] -> [.104.17.209.240][..443] + detected: [.....6] [ip4][..tcp] [..192.168.1.128][44770] -> [.104.17.209.240][..443] [TLS.Pluralsight][Streaming][Fun] + detection-update: [.....6] [ip4][..tcp] [..192.168.1.128][44770] -> [.104.17.209.240][..443] [TLS.Pluralsight][Streaming][Fun] + idle: [.....6] [ip4][..tcp] [..192.168.1.128][44770] -> [.104.17.209.240][..443] + idle: [.....4] [ip4][..tcp] [..192.168.1.128][42618] -> [..18.203.201.56][..443] + idle: [.....5] [ip4][..tcp] [..192.168.1.128][48948] -> [.104.19.162.127][..443] + idle: [.....2] [ip4][..tcp] [..192.168.1.128][42782] -> [..146.75.62.208][..443] + idle: [.....3] [ip4][..tcp] [..192.168.1.128][42790] -> [..146.75.62.208][..443] + idle: [.....1] [ip4][..tcp] [..192.168.1.128][42642] -> [...54.69.188.18][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/pop3.pcap.out b/test/results/flow-info/pop3.pcap.out new file mode 100644 index 000000000..19b7cdb84 --- /dev/null +++ b/test/results/flow-info/pop3.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [143.225.229.181][35287] -> [....74.208.5.28][..110] + detected: [.....1] [ip4][..tcp] [143.225.229.181][35287] -> [....74.208.5.28][..110] [POP3][Email][Unsafe] + RISK: Unsafe Protocol + end: [.....1] [ip4][..tcp] [143.225.229.181][35287] -> [....74.208.5.28][..110] [POP3][Email][Unsafe] + RISK: Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/pop3_stls.pcap.out b/test/results/flow-info/pop3_stls.pcap.out new file mode 100644 index 000000000..f220f8117 --- /dev/null +++ b/test/results/flow-info/pop3_stls.pcap.out @@ -0,0 +1,24 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.20.18][50583] -> [...72.249.41.52][..110] + detected: [.....1] [ip4][..tcp] [..192.168.20.18][50583] -> [...72.249.41.52][..110] [POPS][Email][Safe] + RISK: Known Proto on Non Std Port + detection-update: [.....1] [ip4][..tcp] [..192.168.20.18][50583] -> [...72.249.41.52][..110] [POPS][Email][Safe] + RISK: Known Proto on Non Std Port, Obsolete TLS (v1.1 or older) + detection-update: [.....1] [ip4][..tcp] [..192.168.20.18][50583] -> [...72.249.41.52][..110] [POPS][Email][Safe] + RISK: Known Proto on Non Std Port, Obsolete TLS (v1.1 or older) + detection-update: [.....1] [ip4][..tcp] [..192.168.20.18][50583] -> [...72.249.41.52][..110] [POPS][Email][Safe] + RISK: Known Proto on Non Std Port, Obsolete TLS (v1.1 or older) + analyse: [.....1] [ip4][..tcp] [..192.168.20.18][50583] -> [...72.249.41.52][..110] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.072| 0.263| 0.525] + [IAT(c->s)...: 0.007| 2.072| 0.337| 0.592][IAT(s->c)...: 0.000| 2.003| 0.216| 0.472] + [PKTLEN(c->s): 54.000| 368.000| 104.800| 87.300][PKTLEN(s->c): 60.000|1514.000| 346.800| 513.600] + [BINS(c->s)..: 9,2,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,4,0,0,1,1,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + detection-update: [.....1] [ip4][..tcp] [..192.168.20.18][50583] -> [...72.249.41.52][..110] [POPS][Email][Safe] + RISK: Known Proto on Non Std Port, Obsolete TLS (v1.1 or older) + end: [.....1] [ip4][..tcp] [..192.168.20.18][50583] -> [...72.249.41.52][..110] [POPS][Email][Safe] + RISK: Known Proto on Non Std Port, Obsolete TLS (v1.1 or older) + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/pops.pcapng.out b/test/results/flow-info/pops.pcapng.out new file mode 100644 index 000000000..9080ff312 --- /dev/null +++ b/test/results/flow-info/pops.pcapng.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....192.168.0.1][55077] -> [.....10.10.10.1][..995] + detected: [.....1] [ip4][..tcp] [....192.168.0.1][55077] -> [.....10.10.10.1][..995] [POPS][Email][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....1] [ip4][..tcp] [....192.168.0.1][55077] -> [.....10.10.10.1][..995] [POPS][Email][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....1] [ip4][..tcp] [....192.168.0.1][55077] -> [.....10.10.10.1][..995] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/pps.pcap.out b/test/results/flow-info/pps.pcap.out new file mode 100644 index 000000000..5180733f9 --- /dev/null +++ b/test/results/flow-info/pps.pcap.out @@ -0,0 +1,427 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....1.173.5.226][22636] -> [..192.168.115.8][22793] + new: [.....2] [ip4][..udp] [..118.171.15.56][.5544] -> [..192.168.115.8][22793] + new: [.....3] [ip4][..udp] [..192.168.115.8][22793] -> [...114.42.0.158][.7716] + new: [.....4] [ip4][..udp] [..192.168.115.8][22793] -> [.222.197.138.12][.6956] + new: [.....5] [ip4][..udp] [..192.168.115.8][22793] -> [...202.198.7.89][16039] + new: [.....6] [ip4][..udp] [..192.168.115.8][22793] -> [.111.249.53.196][32443] + new: [.....7] [ip4][..udp] [..192.168.115.8][22793] -> [219.228.107.156][.1250] + analyse: [.....1] [ip4][..udp] [....1.173.5.226][22636] -> [..192.168.115.8][22793] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.014| 0.003| 0.004] + [IAT(c->s)...: 0.001| 0.014| 0.004| 0.004][IAT(s->c)...: 0.000| 0.013| 0.002| 0.004] + [PKTLEN(c->s): 1107.000|1107.000|1107.000| 0.000][PKTLEN(s->c): 79.000| 79.000| 79.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,22,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [.....1] [ip4][..udp] [....1.173.5.226][22636] -> [..192.168.115.8][22793] [Unknown][Unrated] + analyse: [.....3] [ip4][..udp] [..192.168.115.8][22793] -> [...114.42.0.158][.7716] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.013| 0.002| 0.004] + [IAT(c->s)...: 0.000| 0.013| 0.002| 0.003][IAT(s->c)...: 0.001| 0.013| 0.004| 0.004] + [PKTLEN(c->s): 79.000| 79.000| 79.000| 0.000][PKTLEN(s->c): 1107.000|1107.000|1107.000| 0.000] + [BINS(c->s)..: 0,22,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [.....3] [ip4][..udp] [..192.168.115.8][22793] -> [...114.42.0.158][.7716] [Unknown][Unrated] + new: [.....8] [ip4][..udp] [.183.228.182.44][13913] -> [..192.168.115.8][22793] + analyse: [.....2] [ip4][..udp] [..118.171.15.56][.5544] -> [..192.168.115.8][22793] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.027| 0.009| 0.008] + [IAT(c->s)...: 0.005| 0.027| 0.015| 0.007][IAT(s->c)...: 0.000| 0.024| 0.006| 0.007] + [PKTLEN(c->s): 1107.000|1107.000|1107.000| 0.000][PKTLEN(s->c): 79.000| 79.000| 79.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,22,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [.....2] [ip4][..udp] [..118.171.15.56][.5544] -> [..192.168.115.8][22793] [Unknown][Unrated] + new: [.....9] [ip4][..tcp] [..192.168.115.8][50462] -> [.202.108.14.236][...80] [MIDSTREAM] + new: [....10] [ip4][..tcp] [...192.168.5.15][65125] -> [.68.233.253.133][...80] [MIDSTREAM] + analyse: [.....7] [ip4][..udp] [..192.168.115.8][22793] -> [219.228.107.156][.1250] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.070| 0.024| 0.021] + [IAT(c->s)...: 0.000| 0.046| 0.016| 0.017][IAT(s->c)...: 0.030| 0.070| 0.046| 0.016] + [PKTLEN(c->s): 79.000| 79.000| 79.000| 0.000][PKTLEN(s->c): 1107.000|1107.000|1107.000| 0.000] + [BINS(c->s)..: 0,24,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [.....7] [ip4][..udp] [..192.168.115.8][22793] -> [219.228.107.156][.1250] [Unknown][Unrated] + new: [....11] [ip4][..udp] [..192.168.115.8][22793] -> [..218.61.39.103][17788] + new: [....12] [ip4][..udp] [..192.168.115.8][22793] -> [...210.44.171.1][29702] + new: [....13] [ip4][..udp] [..192.168.115.8][22793] -> [.111.250.102.66][.1107] + new: [....14] [ip4][..udp] [..192.168.115.8][22793] -> [..61.223.204.67][11102] + new: [....15] [ip4][..udp] [..192.168.115.8][22793] -> [..36.237.154.69][.4316] + new: [....16] [ip4][..udp] [..192.168.115.8][22793] -> [...36.233.39.81][18590] + new: [....17] [ip4][..udp] [..192.168.115.8][22793] -> [.111.117.101.81][10162] + new: [....18] [ip4][..udp] [..192.168.115.8][22793] -> [..61.227.170.88][20227] + new: [....19] [ip4][..udp] [..192.168.115.8][22793] -> [..202.112.31.89][29072] + new: [....20] [ip4][..udp] [..192.168.115.8][22793] -> [.121.248.133.93][12757] + new: [....21] [ip4][..udp] [..192.168.115.8][22793] -> [..1.175.128.104][.5185] + new: [....22] [ip4][..udp] [..192.168.115.8][22793] -> [.222.26.193.119][.7133] + new: [....23] [ip4][..udp] [..192.168.115.8][22793] -> [.114.37.142.173][.1074] + new: [....24] [ip4][..udp] [..192.168.115.8][22793] -> [..222.26.74.190][.1037] + new: [....25] [ip4][..udp] [..192.168.115.8][22793] -> [.115.157.62.243][29006] + new: [....26] [ip4][..udp] [..192.168.115.8][22793] -> [.210.44.232.243][21044] + new: [....27] [ip4][..udp] [..192.168.115.8][22793] -> [..1.169.136.116][17951] + new: [....28] [ip4][..udp] [..192.168.115.8][22793] -> [.114.41.144.153][10492] + new: [....29] [ip4][..udp] [..192.168.115.8][22793] -> [..183.61.167.82][17788] + new: [....30] [ip4][..udp] [..192.168.115.8][22793] -> [...210.47.12.19][33738] + new: [....31] [ip4][..udp] [..192.168.115.8][22793] -> [...210.47.12.20][33738] + new: [....32] [ip4][..udp] [..192.168.115.8][22793] -> [..114.47.91.129][22576] + new: [....33] [ip4][..udp] [..192.168.115.8][22793] -> [.220.130.154.23][35941] + new: [....34] [ip4][..udp] [..192.168.115.8][22793] -> [...218.61.39.87][17788] + new: [....35] [ip4][..udp] [..192.168.115.8][22793] -> [119.188.133.182][17788] + new: [....36] [ip4][..udp] [..192.168.115.8][22793] -> [.183.61.167.104][17788] + analyse: [.....4] [ip4][..udp] [..192.168.115.8][22793] -> [.222.197.138.12][.6956] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.108| 0.029| 0.031] + [IAT(c->s)...: 0.000| 0.079| 0.019| 0.025][IAT(s->c)...: 0.018| 0.108| 0.058| 0.027] + [PKTLEN(c->s): 79.000| 79.000| 79.000| 0.000][PKTLEN(s->c): 61.000|1107.000| 976.200| 345.900] + [BINS(c->s)..: 0,24,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [.....4] [ip4][..udp] [..192.168.115.8][22793] -> [.222.197.138.12][.6956] [Unknown][Unrated] + new: [....37] [ip4][..tcp] [..192.168.115.8][50463] -> [.101.227.200.11][...80] [MIDSTREAM] + detected: [....37] [ip4][..tcp] [..192.168.115.8][50463] -> [.101.227.200.11][...80] [HTTP.PPStream][Streaming][Fun] + new: [....38] [ip4][..tcp] [..192.168.115.8][50464] -> [.123.125.112.49][...80] [MIDSTREAM] + detected: [....38] [ip4][..tcp] [..192.168.115.8][50464] -> [.123.125.112.49][...80] [HTTP][Web][Acceptable] + new: [....39] [ip4][..tcp] [..192.168.115.8][50466] -> [..203.66.182.24][...80] [MIDSTREAM] + detected: [....39] [ip4][..tcp] [..192.168.115.8][50466] -> [..203.66.182.24][...80] [HTTP.Google][Web][Acceptable] + new: [....40] [ip4][..tcp] [..192.168.115.8][50467] -> [.202.108.14.219][...80] [MIDSTREAM] + detected: [....40] [ip4][..tcp] [..192.168.115.8][50467] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + new: [....41] [ip4][..tcp] [..192.168.115.8][50469] -> [.202.108.14.219][...80] [MIDSTREAM] + detected: [....41] [ip4][..tcp] [..192.168.115.8][50469] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + new: [....42] [ip4][..tcp] [..192.168.115.8][50470] -> [.202.108.14.236][...80] [MIDSTREAM] + detected: [....42] [ip4][..tcp] [..192.168.115.8][50470] -> [.202.108.14.236][...80] [HTTP.PPStream][Streaming][Fun] + new: [....43] [ip4][..tcp] [..192.168.115.8][50471] -> [.202.108.14.236][...80] [MIDSTREAM] + detected: [....43] [ip4][..tcp] [..192.168.115.8][50471] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + new: [....44] [ip4][..tcp] [..192.168.115.8][50474] -> [.202.108.14.221][...80] [MIDSTREAM] + detected: [....44] [ip4][..tcp] [..192.168.115.8][50474] -> [.202.108.14.221][...80] [HTTP.PPStream][Streaming][Fun] + new: [....45] [ip4][..tcp] [..192.168.115.8][50475] -> [.202.108.14.236][...80] [MIDSTREAM] + detected: [....45] [ip4][..tcp] [..192.168.115.8][50475] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + new: [....46] [ip4][..tcp] [..192.168.115.8][50473] -> [.202.108.14.219][...80] [MIDSTREAM] + detected: [....46] [ip4][..tcp] [..192.168.115.8][50473] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + new: [....47] [ip4][..tcp] [..192.168.115.8][50476] -> [..101.227.32.39][...80] [MIDSTREAM] + detected: [....47] [ip4][..tcp] [..192.168.115.8][50476] -> [..101.227.32.39][...80] [HTTP.PPStream][Streaming][Fun] + new: [....48] [ip4][..tcp] [..192.168.115.8][50477] -> [.202.108.14.219][...80] [MIDSTREAM] + detected: [....48] [ip4][..tcp] [..192.168.115.8][50477] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + new: [....49] [ip4][..tcp] [..117.79.81.135][...80] -> [..192.168.115.8][50443] [MIDSTREAM] + detected: [....49] [ip4][..tcp] [..117.79.81.135][...80] -> [..192.168.115.8][50443] [HTTP][Web][Acceptable] + new: [....50] [ip4][..tcp] [..192.168.115.8][50482] -> [.140.205.243.64][...80] [MIDSTREAM] + detected: [....50] [ip4][..tcp] [..192.168.115.8][50482] -> [.140.205.243.64][...80] [HTTP][Web][Acceptable] + new: [....51] [ip4][..tcp] [..192.168.115.8][50483] -> [.202.108.14.219][...80] [MIDSTREAM] + detected: [....51] [ip4][..tcp] [..192.168.115.8][50483] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + new: [....52] [ip4][..tcp] [..192.168.115.8][50484] -> [.202.108.14.219][...80] [MIDSTREAM] + detected: [....52] [ip4][..tcp] [..192.168.115.8][50484] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + new: [....53] [ip4][..tcp] [..192.168.115.8][50485] -> [.202.108.14.236][...80] [MIDSTREAM] + detected: [....53] [ip4][..tcp] [..192.168.115.8][50485] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + new: [....54] [ip4][..tcp] [..192.168.115.8][50486] -> [...77.234.40.96][...80] [MIDSTREAM] + detected: [....54] [ip4][..tcp] [..192.168.115.8][50486] -> [...77.234.40.96][...80] [HTTP.Cybersec][Cybersecurity][Safe] + RISK: HTTP Suspicious User-Agent + new: [....55] [ip4][..udp] [...192.168.5.57][59648] -> [239.255.255.250][.1900] + detected: [....55] [ip4][..udp] [...192.168.5.57][59648] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....56] [ip4][..tcp] [..192.168.115.8][50487] -> [.202.108.14.219][...80] [MIDSTREAM] + detected: [....56] [ip4][..tcp] [..192.168.115.8][50487] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + new: [....57] [ip4][..tcp] [..192.168.115.8][50488] -> [..223.26.106.20][...80] [MIDSTREAM] + detected: [....57] [ip4][..tcp] [..192.168.115.8][50488] -> [..223.26.106.20][...80] [HTTP][Web][Acceptable] + new: [....58] [ip4][..tcp] [..192.168.115.8][50489] -> [.119.188.13.188][...80] [MIDSTREAM] + detected: [....58] [ip4][..tcp] [..192.168.115.8][50489] -> [.119.188.13.188][...80] [HTTP][Web][Acceptable] + new: [....59] [ip4][..tcp] [..192.168.115.8][50490] -> [.119.188.13.188][...80] [MIDSTREAM] + detected: [....59] [ip4][..tcp] [..192.168.115.8][50490] -> [.119.188.13.188][...80] [HTTP][Web][Acceptable] + new: [....60] [ip4][..tcp] [..192.168.115.8][50491] -> [..223.26.106.66][...80] [MIDSTREAM] + detected: [....60] [ip4][..tcp] [..192.168.115.8][50491] -> [..223.26.106.66][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + detection-update: [....60] [ip4][..tcp] [..192.168.115.8][50491] -> [..223.26.106.66][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [....61] [ip4][..tcp] [..192.168.115.8][50492] -> [...111.206.13.3][...80] [MIDSTREAM] + detected: [....61] [ip4][..tcp] [..192.168.115.8][50492] -> [...111.206.13.3][...80] [HTTP][Web][Acceptable] + new: [....62] [ip4][..tcp] [..192.168.115.8][50493] -> [.202.108.14.236][...80] [MIDSTREAM] + detected: [....62] [ip4][..tcp] [..192.168.115.8][50493] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + new: [....63] [ip4][..tcp] [..192.168.115.8][50494] -> [..223.26.106.66][...80] [MIDSTREAM] + detected: [....63] [ip4][..tcp] [..192.168.115.8][50494] -> [..223.26.106.66][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + new: [....64] [ip4][..tcp] [...192.168.5.15][65127] -> [.68.233.253.133][...80] [MIDSTREAM] + detected: [....64] [ip4][..tcp] [...192.168.5.15][65127] -> [.68.233.253.133][...80] [HTTP][Web][Acceptable] + new: [....65] [ip4][..udp] [...192.168.5.48][63930] -> [239.255.255.250][.1900] + detected: [....65] [ip4][..udp] [...192.168.5.48][63930] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....66] [ip4][..tcp] [..192.168.115.8][50495] -> [.202.108.14.236][...80] [MIDSTREAM] + detected: [....66] [ip4][..tcp] [..192.168.115.8][50495] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + new: [....67] [ip4][..tcp] [..192.168.115.8][50496] -> [.101.227.200.11][...80] [MIDSTREAM] + detected: [....67] [ip4][..tcp] [..192.168.115.8][50496] -> [.101.227.200.11][...80] [HTTP.PPStream][Streaming][Fun] + new: [....68] [ip4][..tcp] [..192.168.115.8][50497] -> [.123.125.112.49][...80] [MIDSTREAM] + detected: [....68] [ip4][..tcp] [..192.168.115.8][50497] -> [.123.125.112.49][...80] [HTTP][Web][Acceptable] + new: [....69] [ip4][..udp] [...192.168.5.63][39383] -> [239.255.255.250][.1900] + detected: [....69] [ip4][..udp] [...192.168.5.63][39383] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....70] [ip4][..udp] [...192.168.5.63][60976] -> [239.255.255.250][.1900] + detected: [....70] [ip4][..udp] [...192.168.5.63][60976] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....71] [ip4][..tcp] [..192.168.115.8][50498] -> [..36.110.220.15][...80] [MIDSTREAM] + detected: [....71] [ip4][..tcp] [..192.168.115.8][50498] -> [..36.110.220.15][...80] [HTTP][Web][Acceptable] + new: [....72] [ip4][..tcp] [..192.168.115.8][50499] -> [..111.206.22.76][...80] [MIDSTREAM] + detected: [....72] [ip4][..tcp] [..192.168.115.8][50499] -> [..111.206.22.76][...80] [HTTP.PPStream][Streaming][Fun] + new: [....73] [ip4][..tcp] [..192.168.115.8][50500] -> [..23.41.133.163][...80] [MIDSTREAM] + detected: [....73] [ip4][..tcp] [..192.168.115.8][50500] -> [..23.41.133.163][...80] [HTTP][Web][Acceptable] + new: [....74] [ip4][..tcp] [..192.168.115.8][50501] -> [.202.108.14.236][...80] [MIDSTREAM] + detected: [....74] [ip4][..tcp] [..192.168.115.8][50501] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + new: [....75] [ip4][..udp] [...192.168.5.38][58897] -> [239.255.255.250][.1900] + detected: [....75] [ip4][..udp] [...192.168.5.38][58897] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....76] [ip4][..tcp] [..192.168.115.8][50502] -> [.202.108.14.236][...80] [MIDSTREAM] + detected: [....76] [ip4][..tcp] [..192.168.115.8][50502] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + new: [....77] [ip4][..udp] [...192.168.5.50][52529] -> [239.255.255.250][.1900] + detected: [....77] [ip4][..udp] [...192.168.5.50][52529] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....78] [ip4][..tcp] [...192.168.5.15][65128] -> [.68.233.253.133][...80] [MIDSTREAM] + detected: [....78] [ip4][..tcp] [...192.168.5.15][65128] -> [.68.233.253.133][...80] [HTTP][Web][Acceptable] + new: [....79] [ip4][..tcp] [..192.168.115.8][50503] -> [.202.108.14.219][...80] [MIDSTREAM] + detected: [....79] [ip4][..tcp] [..192.168.115.8][50503] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + new: [....80] [ip4][..udp] [...192.168.5.28][60023] -> [239.255.255.250][.1900] + detected: [....80] [ip4][..udp] [...192.168.5.28][60023] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....22] [ip4][..udp] [..192.168.115.8][22793] -> [.222.26.193.119][.7133] + update: [....25] [ip4][..udp] [..192.168.115.8][22793] -> [.115.157.62.243][29006] + update: [....13] [ip4][..udp] [..192.168.115.8][22793] -> [.111.250.102.66][.1107] + update: [....24] [ip4][..udp] [..192.168.115.8][22793] -> [..222.26.74.190][.1037] + update: [....26] [ip4][..udp] [..192.168.115.8][22793] -> [.210.44.232.243][21044] + update: [....27] [ip4][..udp] [..192.168.115.8][22793] -> [..1.169.136.116][17951] + update: [....33] [ip4][..udp] [..192.168.115.8][22793] -> [.220.130.154.23][35941] + update: [....32] [ip4][..udp] [..192.168.115.8][22793] -> [..114.47.91.129][22576] + update: [.....6] [ip4][..udp] [..192.168.115.8][22793] -> [.111.249.53.196][32443] + update: [.....3] [ip4][..udp] [..192.168.115.8][22793] -> [...114.42.0.158][.7716] [Unknown][Unrated] + update: [....12] [ip4][..udp] [..192.168.115.8][22793] -> [...210.44.171.1][29702] + update: [.....4] [ip4][..udp] [..192.168.115.8][22793] -> [.222.197.138.12][.6956] [Unknown][Unrated] + update: [.....2] [ip4][..udp] [..118.171.15.56][.5544] -> [..192.168.115.8][22793] [Unknown][Unrated] + update: [....23] [ip4][..udp] [..192.168.115.8][22793] -> [.114.37.142.173][.1074] + update: [.....7] [ip4][..udp] [..192.168.115.8][22793] -> [219.228.107.156][.1250] [Unknown][Unrated] + update: [....16] [ip4][..udp] [..192.168.115.8][22793] -> [...36.233.39.81][18590] + update: [....35] [ip4][..udp] [..192.168.115.8][22793] -> [119.188.133.182][17788] + update: [....18] [ip4][..udp] [..192.168.115.8][22793] -> [..61.227.170.88][20227] + update: [....20] [ip4][..udp] [..192.168.115.8][22793] -> [.121.248.133.93][12757] + update: [....19] [ip4][..udp] [..192.168.115.8][22793] -> [..202.112.31.89][29072] + update: [....28] [ip4][..udp] [..192.168.115.8][22793] -> [.114.41.144.153][10492] + update: [....14] [ip4][..udp] [..192.168.115.8][22793] -> [..61.223.204.67][11102] + update: [.....8] [ip4][..udp] [.183.228.182.44][13913] -> [..192.168.115.8][22793] + update: [....29] [ip4][..udp] [..192.168.115.8][22793] -> [..183.61.167.82][17788] + update: [....36] [ip4][..udp] [..192.168.115.8][22793] -> [.183.61.167.104][17788] + update: [....21] [ip4][..udp] [..192.168.115.8][22793] -> [..1.175.128.104][.5185] + update: [....11] [ip4][..udp] [..192.168.115.8][22793] -> [..218.61.39.103][17788] + update: [....34] [ip4][..udp] [..192.168.115.8][22793] -> [...218.61.39.87][17788] + update: [....30] [ip4][..udp] [..192.168.115.8][22793] -> [...210.47.12.19][33738] + update: [....31] [ip4][..udp] [..192.168.115.8][22793] -> [...210.47.12.20][33738] + update: [....17] [ip4][..udp] [..192.168.115.8][22793] -> [.111.117.101.81][10162] + update: [.....1] [ip4][..udp] [....1.173.5.226][22636] -> [..192.168.115.8][22793] [Unknown][Unrated] + update: [.....5] [ip4][..udp] [..192.168.115.8][22793] -> [...202.198.7.89][16039] + update: [....15] [ip4][..udp] [..192.168.115.8][22793] -> [..36.237.154.69][.4316] + new: [....81] [ip4][..tcp] [..192.168.115.8][50505] -> [..223.26.106.19][...80] [MIDSTREAM] + detected: [....81] [ip4][..tcp] [..192.168.115.8][50505] -> [..223.26.106.19][...80] [HTTP][Web][Acceptable] + new: [....82] [ip4][..tcp] [..192.168.115.8][50504] -> [.202.108.14.236][...80] [MIDSTREAM] + detected: [....82] [ip4][..tcp] [..192.168.115.8][50504] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + analyse: [....81] [ip4][..tcp] [..192.168.115.8][50505] -> [..223.26.106.19][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.036| 0.003| 0.009] + [IAT(c->s)...: 0.035| 0.035| 0.035| 0.000][IAT(s->c)...: 0.000| 0.036| 0.002| 0.007] + [PKTLEN(c->s): 198.000| 202.000| 200.000| 2.000][PKTLEN(s->c): 566.000|1314.000|1289.100| 134.300] + [BINS(c->s)..: 0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,29,0,0,0,0,0,0,0,0] + new: [....83] [ip4][..udp] [...192.168.5.38][.1900] -> [239.255.255.250][.1900] + detected: [....83] [ip4][..udp] [...192.168.5.38][.1900] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....84] [ip4][..udp] [...192.168.5.41][50374] -> [239.255.255.250][.1900] + detected: [....84] [ip4][..udp] [...192.168.5.41][50374] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....85] [ip4][..tcp] [..192.168.115.8][50507] -> [..223.26.106.19][...80] [MIDSTREAM] + detected: [....85] [ip4][..tcp] [..192.168.115.8][50507] -> [..223.26.106.19][...80] [HTTP][Web][Acceptable] + new: [....86] [ip4][..tcp] [.202.108.14.219][...80] -> [..192.168.115.8][50506] [MIDSTREAM] + detected: [....86] [ip4][..tcp] [.202.108.14.219][...80] -> [..192.168.115.8][50506] [HTTP][Web][Acceptable] + new: [....87] [ip4][..tcp] [.202.108.14.219][...80] -> [..192.168.115.8][50295] [MIDSTREAM] + detected: [....87] [ip4][..tcp] [.202.108.14.219][...80] -> [..192.168.115.8][50295] [HTTP][Web][Acceptable] + new: [....88] [ip4][..tcp] [..192.168.115.8][50508] -> [..223.26.106.19][...80] [MIDSTREAM] + detected: [....88] [ip4][..tcp] [..192.168.115.8][50508] -> [..223.26.106.19][...80] [HTTP][Web][Acceptable] + new: [....89] [ip4][..tcp] [..192.168.115.8][50509] -> [.106.38.219.107][...80] [MIDSTREAM] + detected: [....89] [ip4][..tcp] [..192.168.115.8][50509] -> [.106.38.219.107][...80] [HTTP][Web][Acceptable] + new: [....90] [ip4][..tcp] [..192.168.115.8][50766] -> [..223.26.106.20][...80] [MIDSTREAM] + detected: [....90] [ip4][..tcp] [..192.168.115.8][50766] -> [..223.26.106.20][...80] [HTTP][Web][Acceptable] + new: [....91] [ip4][..tcp] [..192.168.115.8][50767] -> [..223.26.106.20][...80] [MIDSTREAM] + detected: [....91] [ip4][..tcp] [..192.168.115.8][50767] -> [..223.26.106.20][...80] [HTTP][Web][Acceptable] + new: [....92] [ip4][..tcp] [..192.168.115.8][50765] -> [..36.110.220.15][...80] [MIDSTREAM] + detected: [....92] [ip4][..tcp] [..192.168.115.8][50765] -> [..36.110.220.15][...80] [HTTP][Web][Acceptable] + new: [....93] [ip4][..tcp] [..192.168.115.8][50768] -> [..223.26.106.19][...80] [MIDSTREAM] + detected: [....93] [ip4][..tcp] [..192.168.115.8][50768] -> [..223.26.106.19][...80] [HTTP][Web][Acceptable] + new: [....94] [ip4][..tcp] [..192.168.115.8][50769] -> [.101.227.200.11][...80] [MIDSTREAM] + detected: [....94] [ip4][..tcp] [..192.168.115.8][50769] -> [.101.227.200.11][...80] [HTTP.PPStream][Streaming][Fun] + new: [....95] [ip4][..tcp] [..192.168.115.8][50771] -> [.202.108.14.236][...80] [MIDSTREAM] + detected: [....95] [ip4][..tcp] [..192.168.115.8][50771] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + new: [....96] [ip4][..tcp] [..192.168.115.8][50772] -> [.123.125.111.70][...80] [MIDSTREAM] + detected: [....96] [ip4][..tcp] [..192.168.115.8][50772] -> [.123.125.111.70][...80] [HTTP.PPStream][Streaming][Fun] + new: [....97] [ip4][..tcp] [..192.168.115.8][50773] -> [.202.108.14.221][...80] [MIDSTREAM] + detected: [....97] [ip4][..tcp] [..192.168.115.8][50773] -> [.202.108.14.221][...80] [HTTP][Streaming][Acceptable] + new: [....98] [ip4][..tcp] [..192.168.115.8][50775] -> [.123.125.111.70][...80] [MIDSTREAM] + detected: [....98] [ip4][..tcp] [..192.168.115.8][50775] -> [.123.125.111.70][...80] [HTTP.PPStream][Streaming][Fun] + new: [....99] [ip4][..tcp] [..192.168.115.8][50774] -> [.202.108.14.219][...80] [MIDSTREAM] + detected: [....99] [ip4][..tcp] [..192.168.115.8][50774] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + new: [...100] [ip4][..tcp] [..192.168.115.8][50776] -> [..111.206.22.77][...80] [MIDSTREAM] + detected: [...100] [ip4][..tcp] [..192.168.115.8][50776] -> [..111.206.22.77][...80] [HTTP.PPStream][Streaming][Fun] + new: [...101] [ip4][..tcp] [..192.168.115.8][50777] -> [..111.206.22.77][...80] [MIDSTREAM] + detected: [...101] [ip4][..tcp] [..192.168.115.8][50777] -> [..111.206.22.77][...80] [HTTP.PPStream][Streaming][Fun] + new: [...102] [ip4][..tcp] [..192.168.115.8][50778] -> [..223.26.106.20][...80] [MIDSTREAM] + detected: [...102] [ip4][..tcp] [..192.168.115.8][50778] -> [..223.26.106.20][...80] [HTTP.PPStream][Streaming][Fun] + analyse: [...102] [ip4][..tcp] [..192.168.115.8][50778] -> [..223.26.106.20][...80] [HTTP.PPStream][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.061| 0.005| 0.014] + [IAT(c->s)...: 0.000| 0.000| 0.000| 0.000][IAT(s->c)...: 0.000| 0.061| 0.005| 0.014] + [PKTLEN(c->s): 303.000| 303.000| 303.000| 0.000][PKTLEN(s->c): 1314.000|1314.000|1314.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,0,0,0,0,0,0,0,0] + new: [...103] [ip4][..udp] [..192.168.115.1][50945] -> [239.255.255.250][.1900] + detected: [...103] [ip4][..udp] [..192.168.115.1][50945] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [...104] [ip4][..tcp] [..192.168.115.8][50779] -> [..111.206.22.77][...80] [MIDSTREAM] + detected: [...104] [ip4][..tcp] [..192.168.115.8][50779] -> [..111.206.22.77][...80] [HTTP.PPStream][Streaming][Fun] + new: [...105] [ip4][..tcp] [..192.168.115.8][50780] -> [..223.26.106.20][...80] [MIDSTREAM] + detected: [...105] [ip4][..tcp] [..192.168.115.8][50780] -> [..223.26.106.20][...80] [HTTP.PPStream][Streaming][Fun] + analyse: [...105] [ip4][..tcp] [..192.168.115.8][50780] -> [..223.26.106.20][...80] [HTTP.PPStream][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.063| 0.006| 0.016] + [IAT(c->s)...: 0.000| 0.000| 0.000| 0.000][IAT(s->c)...: 0.000| 0.063| 0.006| 0.016] + [PKTLEN(c->s): 303.000| 303.000| 303.000| 0.000][PKTLEN(s->c): 1314.000|1314.000|1314.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,0,0,0,0,0,0,0,0] + update: [....55] [ip4][..udp] [...192.168.5.57][59648] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [...106] [ip4][..tcp] [..192.168.115.8][50781] -> [..223.26.106.20][...80] [MIDSTREAM] + detected: [...106] [ip4][..tcp] [..192.168.115.8][50781] -> [..223.26.106.20][...80] [HTTP.PPStream][Streaming][Fun] + new: [...107] [ip4][..tcp] [...77.234.41.35][...80] -> [..192.168.115.8][49174] [MIDSTREAM] + detected: [...107] [ip4][..tcp] [...77.234.41.35][...80] -> [..192.168.115.8][49174] [HTTP.AVAST][Download][Safe] + RISK: Binary App Transfer + detection-update: [...107] [ip4][..tcp] [...77.234.41.35][...80] -> [..192.168.115.8][49174] [HTTP.AVAST][Download][Safe] + RISK: Binary App Transfer + not-detected: [....22] [ip4][..udp] [..192.168.115.8][22793] -> [.222.26.193.119][.7133] [Unknown][Unrated] + idle: [....22] [ip4][..udp] [..192.168.115.8][22793] -> [.222.26.193.119][.7133] + idle: [....54] [ip4][..tcp] [..192.168.115.8][50486] -> [...77.234.40.96][...80] [HTTP.Cybersec][Cybersecurity][Safe] + RISK: HTTP Suspicious User-Agent + not-detected: [....25] [ip4][..udp] [..192.168.115.8][22793] -> [.115.157.62.243][29006] [Unknown][Unrated] + idle: [....25] [ip4][..udp] [..192.168.115.8][22793] -> [.115.157.62.243][29006] + not-detected: [....13] [ip4][..udp] [..192.168.115.8][22793] -> [.111.250.102.66][.1107] [Unknown][Unrated] + idle: [....13] [ip4][..udp] [..192.168.115.8][22793] -> [.111.250.102.66][.1107] + guessed: [....10] [ip4][..tcp] [...192.168.5.15][65125] -> [.68.233.253.133][...80] [HTTP][Web][Acceptable] + end: [....10] [ip4][..tcp] [...192.168.5.15][65125] -> [.68.233.253.133][...80] + idle: [....64] [ip4][..tcp] [...192.168.5.15][65127] -> [.68.233.253.133][...80] [HTTP][Web][Acceptable] + idle: [....78] [ip4][..tcp] [...192.168.5.15][65128] -> [.68.233.253.133][...80] [HTTP][Web][Acceptable] + not-detected: [....24] [ip4][..udp] [..192.168.115.8][22793] -> [..222.26.74.190][.1037] [Unknown][Unrated] + idle: [....24] [ip4][..udp] [..192.168.115.8][22793] -> [..222.26.74.190][.1037] + not-detected: [....26] [ip4][..udp] [..192.168.115.8][22793] -> [.210.44.232.243][21044] [Unknown][Unrated] + idle: [....26] [ip4][..udp] [..192.168.115.8][22793] -> [.210.44.232.243][21044] + not-detected: [....27] [ip4][..udp] [..192.168.115.8][22793] -> [..1.169.136.116][17951] [Unknown][Unrated] + idle: [....27] [ip4][..udp] [..192.168.115.8][22793] -> [..1.169.136.116][17951] + idle: [....39] [ip4][..tcp] [..192.168.115.8][50466] -> [..203.66.182.24][...80] [HTTP.Google][Web][Acceptable] + not-detected: [....33] [ip4][..udp] [..192.168.115.8][22793] -> [.220.130.154.23][35941] [Unknown][Unrated] + idle: [....33] [ip4][..udp] [..192.168.115.8][22793] -> [.220.130.154.23][35941] + idle: [....55] [ip4][..udp] [...192.168.5.57][59648] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....57] [ip4][..tcp] [..192.168.115.8][50488] -> [..223.26.106.20][...80] [HTTP][Web][Acceptable] + idle: [....60] [ip4][..tcp] [..192.168.115.8][50491] -> [..223.26.106.66][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + idle: [....63] [ip4][..tcp] [..192.168.115.8][50494] -> [..223.26.106.66][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + idle: [....81] [ip4][..tcp] [..192.168.115.8][50505] -> [..223.26.106.19][...80] [HTTP][Web][Acceptable] + idle: [....85] [ip4][..tcp] [..192.168.115.8][50507] -> [..223.26.106.19][...80] [HTTP][Web][Acceptable] + idle: [....88] [ip4][..tcp] [..192.168.115.8][50508] -> [..223.26.106.19][...80] [HTTP][Web][Acceptable] + not-detected: [....32] [ip4][..udp] [..192.168.115.8][22793] -> [..114.47.91.129][22576] [Unknown][Unrated] + idle: [....32] [ip4][..udp] [..192.168.115.8][22793] -> [..114.47.91.129][22576] + idle: [....37] [ip4][..tcp] [..192.168.115.8][50463] -> [.101.227.200.11][...80] [HTTP.PPStream][Streaming][Fun] + idle: [....47] [ip4][..tcp] [..192.168.115.8][50476] -> [..101.227.32.39][...80] [HTTP.PPStream][Streaming][Fun] + idle: [....67] [ip4][..tcp] [..192.168.115.8][50496] -> [.101.227.200.11][...80] [HTTP.PPStream][Streaming][Fun] + idle: [....65] [ip4][..udp] [...192.168.5.48][63930] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....69] [ip4][..udp] [...192.168.5.63][39383] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + not-detected: [.....6] [ip4][..udp] [..192.168.115.8][22793] -> [.111.249.53.196][32443] [Unknown][Unrated] + idle: [.....6] [ip4][..udp] [..192.168.115.8][22793] -> [.111.249.53.196][32443] + idle: [....90] [ip4][..tcp] [..192.168.115.8][50766] -> [..223.26.106.20][...80] [HTTP][Web][Acceptable] + idle: [....91] [ip4][..tcp] [..192.168.115.8][50767] -> [..223.26.106.20][...80] [HTTP][Web][Acceptable] + idle: [....93] [ip4][..tcp] [..192.168.115.8][50768] -> [..223.26.106.19][...80] [HTTP][Web][Acceptable] + end: [...102] [ip4][..tcp] [..192.168.115.8][50778] -> [..223.26.106.20][...80] [HTTP.PPStream][Streaming][Fun] + end: [...105] [ip4][..tcp] [..192.168.115.8][50780] -> [..223.26.106.20][...80] [HTTP.PPStream][Streaming][Fun] + idle: [...106] [ip4][..tcp] [..192.168.115.8][50781] -> [..223.26.106.20][...80] + idle: [....87] [ip4][..tcp] [.202.108.14.219][...80] -> [..192.168.115.8][50295] + idle: [.....3] [ip4][..udp] [..192.168.115.8][22793] -> [...114.42.0.158][.7716] [Unknown][Unrated] + idle: [....80] [ip4][..udp] [...192.168.5.28][60023] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + not-detected: [....12] [ip4][..udp] [..192.168.115.8][22793] -> [...210.44.171.1][29702] [Unknown][Unrated] + idle: [....12] [ip4][..udp] [..192.168.115.8][22793] -> [...210.44.171.1][29702] + idle: [....58] [ip4][..tcp] [..192.168.115.8][50489] -> [.119.188.13.188][...80] [HTTP][Web][Acceptable] + idle: [....59] [ip4][..tcp] [..192.168.115.8][50490] -> [.119.188.13.188][...80] [HTTP][Web][Acceptable] + idle: [....94] [ip4][..tcp] [..192.168.115.8][50769] -> [.101.227.200.11][...80] [HTTP.PPStream][Streaming][Fun] + idle: [.....4] [ip4][..udp] [..192.168.115.8][22793] -> [.222.197.138.12][.6956] [Unknown][Unrated] + idle: [.....2] [ip4][..udp] [..118.171.15.56][.5544] -> [..192.168.115.8][22793] [Unknown][Unrated] + guessed: [.....9] [ip4][..tcp] [..192.168.115.8][50462] -> [.202.108.14.236][...80] [HTTP][Web][Acceptable] + idle: [.....9] [ip4][..tcp] [..192.168.115.8][50462] -> [.202.108.14.236][...80] + idle: [....40] [ip4][..tcp] [..192.168.115.8][50467] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + idle: [....41] [ip4][..tcp] [..192.168.115.8][50469] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + idle: [....42] [ip4][..tcp] [..192.168.115.8][50470] -> [.202.108.14.236][...80] [HTTP.PPStream][Streaming][Fun] + idle: [....43] [ip4][..tcp] [..192.168.115.8][50471] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + idle: [....46] [ip4][..tcp] [..192.168.115.8][50473] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + idle: [....44] [ip4][..tcp] [..192.168.115.8][50474] -> [.202.108.14.221][...80] [HTTP.PPStream][Streaming][Fun] + idle: [....45] [ip4][..tcp] [..192.168.115.8][50475] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + idle: [....48] [ip4][..tcp] [..192.168.115.8][50477] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + idle: [....51] [ip4][..tcp] [..192.168.115.8][50483] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + idle: [....52] [ip4][..tcp] [..192.168.115.8][50484] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + idle: [....53] [ip4][..tcp] [..192.168.115.8][50485] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + idle: [....56] [ip4][..tcp] [..192.168.115.8][50487] -> [.202.108.14.219][...80] + idle: [....62] [ip4][..tcp] [..192.168.115.8][50493] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + idle: [....66] [ip4][..tcp] [..192.168.115.8][50495] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + idle: [....74] [ip4][..tcp] [..192.168.115.8][50501] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + idle: [....76] [ip4][..tcp] [..192.168.115.8][50502] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + idle: [....79] [ip4][..tcp] [..192.168.115.8][50503] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + idle: [....82] [ip4][..tcp] [..192.168.115.8][50504] -> [.202.108.14.236][...80] + idle: [....86] [ip4][..tcp] [.202.108.14.219][...80] -> [..192.168.115.8][50506] + idle: [...107] [ip4][..tcp] [...77.234.41.35][...80] -> [..192.168.115.8][49174] + not-detected: [....23] [ip4][..udp] [..192.168.115.8][22793] -> [.114.37.142.173][.1074] [Unknown][Unrated] + idle: [....23] [ip4][..udp] [..192.168.115.8][22793] -> [.114.37.142.173][.1074] + idle: [.....7] [ip4][..udp] [..192.168.115.8][22793] -> [219.228.107.156][.1250] [Unknown][Unrated] + not-detected: [....16] [ip4][..udp] [..192.168.115.8][22793] -> [...36.233.39.81][18590] [Unknown][Unrated] + idle: [....16] [ip4][..udp] [..192.168.115.8][22793] -> [...36.233.39.81][18590] + idle: [....38] [ip4][..tcp] [..192.168.115.8][50464] -> [.123.125.112.49][...80] [HTTP][Web][Acceptable] + not-detected: [....35] [ip4][..udp] [..192.168.115.8][22793] -> [119.188.133.182][17788] [Unknown][Unrated] + idle: [....35] [ip4][..udp] [..192.168.115.8][22793] -> [119.188.133.182][17788] + end: [....68] [ip4][..tcp] [..192.168.115.8][50497] -> [.123.125.112.49][...80] [HTTP][Web][Acceptable] + idle: [....50] [ip4][..tcp] [..192.168.115.8][50482] -> [.140.205.243.64][...80] [HTTP][Web][Acceptable] + not-detected: [....18] [ip4][..udp] [..192.168.115.8][22793] -> [..61.227.170.88][20227] [Unknown][Unrated] + idle: [....18] [ip4][..udp] [..192.168.115.8][22793] -> [..61.227.170.88][20227] + not-detected: [....20] [ip4][..udp] [..192.168.115.8][22793] -> [.121.248.133.93][12757] [Unknown][Unrated] + idle: [....20] [ip4][..udp] [..192.168.115.8][22793] -> [.121.248.133.93][12757] + idle: [....95] [ip4][..tcp] [..192.168.115.8][50771] -> [.202.108.14.236][...80] [HTTP][Streaming][Acceptable] + not-detected: [....19] [ip4][..udp] [..192.168.115.8][22793] -> [..202.112.31.89][29072] [Unknown][Unrated] + idle: [....19] [ip4][..udp] [..192.168.115.8][22793] -> [..202.112.31.89][29072] + idle: [....97] [ip4][..tcp] [..192.168.115.8][50773] -> [.202.108.14.221][...80] [HTTP][Streaming][Acceptable] + idle: [....99] [ip4][..tcp] [..192.168.115.8][50774] -> [.202.108.14.219][...80] [HTTP][Streaming][Acceptable] + not-detected: [....28] [ip4][..udp] [..192.168.115.8][22793] -> [.114.41.144.153][10492] [Unknown][Unrated] + idle: [....28] [ip4][..udp] [..192.168.115.8][22793] -> [.114.41.144.153][10492] + not-detected: [....14] [ip4][..udp] [..192.168.115.8][22793] -> [..61.223.204.67][11102] [Unknown][Unrated] + idle: [....14] [ip4][..udp] [..192.168.115.8][22793] -> [..61.223.204.67][11102] + idle: [....71] [ip4][..tcp] [..192.168.115.8][50498] -> [..36.110.220.15][...80] [HTTP][Web][Acceptable] + idle: [....61] [ip4][..tcp] [..192.168.115.8][50492] -> [...111.206.13.3][...80] [HTTP][Web][Acceptable] + idle: [....72] [ip4][..tcp] [..192.168.115.8][50499] -> [..111.206.22.76][...80] [HTTP.PPStream][Streaming][Fun] + idle: [....89] [ip4][..tcp] [..192.168.115.8][50509] -> [.106.38.219.107][...80] [HTTP][Web][Acceptable] + idle: [....96] [ip4][..tcp] [..192.168.115.8][50772] -> [.123.125.111.70][...80] [HTTP.PPStream][Streaming][Fun] + idle: [....98] [ip4][..tcp] [..192.168.115.8][50775] -> [.123.125.111.70][...80] [HTTP.PPStream][Streaming][Fun] + not-detected: [.....8] [ip4][..udp] [.183.228.182.44][13913] -> [..192.168.115.8][22793] [Unknown][Unrated] + idle: [.....8] [ip4][..udp] [.183.228.182.44][13913] -> [..192.168.115.8][22793] + idle: [....84] [ip4][..udp] [...192.168.5.41][50374] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + not-detected: [....36] [ip4][..udp] [..192.168.115.8][22793] -> [.183.61.167.104][17788] [Unknown][Unrated] + idle: [....36] [ip4][..udp] [..192.168.115.8][22793] -> [.183.61.167.104][17788] + not-detected: [....29] [ip4][..udp] [..192.168.115.8][22793] -> [..183.61.167.82][17788] [Unknown][Unrated] + idle: [....29] [ip4][..udp] [..192.168.115.8][22793] -> [..183.61.167.82][17788] + not-detected: [....21] [ip4][..udp] [..192.168.115.8][22793] -> [..1.175.128.104][.5185] [Unknown][Unrated] + idle: [....21] [ip4][..udp] [..192.168.115.8][22793] -> [..1.175.128.104][.5185] + not-detected: [....34] [ip4][..udp] [..192.168.115.8][22793] -> [...218.61.39.87][17788] [Unknown][Unrated] + idle: [....34] [ip4][..udp] [..192.168.115.8][22793] -> [...218.61.39.87][17788] + not-detected: [....11] [ip4][..udp] [..192.168.115.8][22793] -> [..218.61.39.103][17788] [Unknown][Unrated] + idle: [....11] [ip4][..udp] [..192.168.115.8][22793] -> [..218.61.39.103][17788] + idle: [....77] [ip4][..udp] [...192.168.5.50][52529] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + not-detected: [....31] [ip4][..udp] [..192.168.115.8][22793] -> [...210.47.12.20][33738] [Unknown][Unrated] + idle: [....31] [ip4][..udp] [..192.168.115.8][22793] -> [...210.47.12.20][33738] + not-detected: [....30] [ip4][..udp] [..192.168.115.8][22793] -> [...210.47.12.19][33738] [Unknown][Unrated] + idle: [....30] [ip4][..udp] [..192.168.115.8][22793] -> [...210.47.12.19][33738] + idle: [....92] [ip4][..tcp] [..192.168.115.8][50765] -> [..36.110.220.15][...80] [HTTP][Web][Acceptable] + idle: [....49] [ip4][..tcp] [..117.79.81.135][...80] -> [..192.168.115.8][50443] + idle: [...100] [ip4][..tcp] [..192.168.115.8][50776] -> [..111.206.22.77][...80] [HTTP.PPStream][Streaming][Fun] + idle: [...101] [ip4][..tcp] [..192.168.115.8][50777] -> [..111.206.22.77][...80] [HTTP.PPStream][Streaming][Fun] + idle: [...104] [ip4][..tcp] [..192.168.115.8][50779] -> [..111.206.22.77][...80] [HTTP.PPStream][Streaming][Fun] + idle: [....75] [ip4][..udp] [...192.168.5.38][58897] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....70] [ip4][..udp] [...192.168.5.63][60976] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + not-detected: [....17] [ip4][..udp] [..192.168.115.8][22793] -> [.111.117.101.81][10162] [Unknown][Unrated] + idle: [....17] [ip4][..udp] [..192.168.115.8][22793] -> [.111.117.101.81][10162] + idle: [...103] [ip4][..udp] [..192.168.115.1][50945] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [.....1] [ip4][..udp] [....1.173.5.226][22636] -> [..192.168.115.8][22793] [Unknown][Unrated] + not-detected: [.....5] [ip4][..udp] [..192.168.115.8][22793] -> [...202.198.7.89][16039] [Unknown][Unrated] + idle: [.....5] [ip4][..udp] [..192.168.115.8][22793] -> [...202.198.7.89][16039] + idle: [....73] [ip4][..tcp] [..192.168.115.8][50500] -> [..23.41.133.163][...80] [HTTP][Web][Acceptable] + idle: [....83] [ip4][..udp] [...192.168.5.38][.1900] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + not-detected: [....15] [ip4][..udp] [..192.168.115.8][22793] -> [..36.237.154.69][.4316] [Unknown][Unrated] + idle: [....15] [ip4][..udp] [..192.168.115.8][22793] -> [..36.237.154.69][.4316] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/pptp.pcap.out b/test/results/flow-info/pptp.pcap.out new file mode 100644 index 000000000..d4681e24f --- /dev/null +++ b/test/results/flow-info/pptp.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.43.22][41366] -> [...191.101.61.1][.1723] + detected: [.....1] [ip4][..tcp] [..192.168.43.22][41366] -> [...191.101.61.1][.1723] [PPTP][VPN][Acceptable] + end: [.....1] [ip4][..tcp] [..192.168.43.22][41366] -> [...191.101.61.1][.1723] [PPTP][VPN][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/psiphon3.pcap.out b/test/results/flow-info/psiphon3.pcap.out new file mode 100644 index 000000000..47aaec341 --- /dev/null +++ b/test/results/flow-info/psiphon3.pcap.out @@ -0,0 +1,22 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.0.103][40557] -> [.104.18.151.190][..443] + detected: [.....1] [ip4][..tcp] [..192.168.0.103][40557] -> [.104.18.151.190][..443] [TLS.Cloudflare][Web][Acceptable] + RISK: Missing SNI TLS Extn + detection-update: [.....1] [ip4][..tcp] [..192.168.0.103][40557] -> [.104.18.151.190][..443] [TLS.Cloudflare][Web][Acceptable] + RISK: Missing SNI TLS Extn + detection-update: [.....1] [ip4][..tcp] [..192.168.0.103][40557] -> [.104.18.151.190][..443] [TLS.Psiphon][VPN][Acceptable] + RISK: Missing SNI TLS Extn + analyse: [.....1] [ip4][..tcp] [..192.168.0.103][40557] -> [.104.18.151.190][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 0.046| 0.011| 0.012] + [IAT(c->s)...: 0.001| 0.046| 0.011| 0.014][IAT(s->c)...: 0.001| 0.026| 0.010| 0.008] + [PKTLEN(c->s): 40.000|1048.000| 155.400| 236.000][PKTLEN(s->c): 40.000|1500.000| 434.400| 539.800] + [BINS(c->s)..: 10,1,3,0,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,2,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + detection-update: [.....1] [ip4][..tcp] [..192.168.0.103][40557] -> [.104.18.151.190][..443] [TLS.Psiphon][VPN][Acceptable] + RISK: Missing SNI TLS Extn + end: [.....1] [ip4][..tcp] [..192.168.0.103][40557] -> [.104.18.151.190][..443] [TLS.Psiphon][VPN][Acceptable] + RISK: Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/punycode-idn.pcap.out b/test/results/flow-info/punycode-idn.pcap.out new file mode 100644 index 000000000..bab67ef7c --- /dev/null +++ b/test/results/flow-info/punycode-idn.pcap.out @@ -0,0 +1,15 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.140][45520] -> [....192.168.2.1][...53] + detected: [.....1] [ip4][..udp] [..192.168.2.140][45520] -> [....192.168.2.1][...53] [DNS.Spotify][Music][Acceptable] + detection-update: [.....1] [ip4][..udp] [..192.168.2.140][45520] -> [....192.168.2.1][...53] [DNS.Spotify][Music][Acceptable] + new: [.....2] [ip4][..udp] [..192.168.2.140][60156] -> [....192.168.2.1][...53] + detected: [.....2] [ip4][..udp] [..192.168.2.140][60156] -> [....192.168.2.1][...53] [DNS][Network][Acceptable] + detection-update: [.....2] [ip4][..udp] [..192.168.2.140][60156] -> [....192.168.2.1][...53] [DNS][Network][Acceptable] + new: [.....3] [ip4][..tcp] [..192.168.2.140][56011] -> [...170.33.9.230][...80] + detected: [.....3] [ip4][..tcp] [..192.168.2.140][56011] -> [...170.33.9.230][...80] [HTTP.Alibaba][Web][Acceptable] + idle: [.....1] [ip4][..udp] [..192.168.2.140][45520] -> [....192.168.2.1][...53] [DNS.Spotify][Music][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.2.140][60156] -> [....192.168.2.1][...53] + end: [.....3] [ip4][..tcp] [..192.168.2.140][56011] -> [...170.33.9.230][...80] [HTTP.Alibaba][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-23.pcap.out b/test/results/flow-info/quic-23.pcap.out new file mode 100644 index 000000000..4d91f8bff --- /dev/null +++ b/test/results/flow-info/quic-23.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [2e4a:774d:26fd:7f9b:785b:2d1b:4f8a:63c7][50339] -> [3bcc:9991:faba:bae1:cd2a:e2fd:b3be:c5ab][..443] + detected: [.....1] [ip6][..udp] [2e4a:774d:26fd:7f9b:785b:2d1b:4f8a:63c7][50339] -> [3bcc:9991:faba:bae1:cd2a:e2fd:b3be:c5ab][..443] [QUIC][Web][Acceptable] + idle: [.....1] [ip6][..udp] [2e4a:774d:26fd:7f9b:785b:2d1b:4f8a:63c7][50339] -> [3bcc:9991:faba:bae1:cd2a:e2fd:b3be:c5ab][..443] [QUIC][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-24.pcap.out b/test/results/flow-info/quic-24.pcap.out new file mode 100644 index 000000000..fe7a709a9 --- /dev/null +++ b/test/results/flow-info/quic-24.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.......10.9.0.1][41436] -> [.......10.9.0.2][..443] + detected: [.....1] [ip4][..udp] [.......10.9.0.1][41436] -> [.......10.9.0.2][..443] [QUIC][Web][Acceptable] + idle: [.....1] [ip4][..udp] [.......10.9.0.1][41436] -> [.......10.9.0.2][..443] [QUIC][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-27.pcap.out b/test/results/flow-info/quic-27.pcap.out new file mode 100644 index 000000000..01a08aa1d --- /dev/null +++ b/test/results/flow-info/quic-27.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [...3ef4:2194:f4a6:3503:40cd:714:57:c4e4][64229] -> [..............2f3d:64d1:9d59:549b::200e][..443] + detected: [.....1] [ip6][..udp] [...3ef4:2194:f4a6:3503:40cd:714:57:c4e4][64229] -> [..............2f3d:64d1:9d59:549b::200e][..443] [QUIC.Google][Web][Acceptable] + idle: [.....1] [ip6][..udp] [...3ef4:2194:f4a6:3503:40cd:714:57:c4e4][64229] -> [..............2f3d:64d1:9d59:549b::200e][..443] [QUIC.Google][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-28.pcap.out b/test/results/flow-info/quic-28.pcap.out new file mode 100644 index 000000000..0fefa9cc9 --- /dev/null +++ b/test/results/flow-info/quic-28.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.......10.9.0.2][60106] -> [..104.26.11.240][..443] + detected: [.....1] [ip4][..udp] [.......10.9.0.2][60106] -> [..104.26.11.240][..443] [QUIC.Cloudflare][Web][Acceptable] + analyse: [.....1] [ip4][..udp] [.......10.9.0.2][60106] -> [..104.26.11.240][..443] [QUIC.Cloudflare][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.021| 0.006| 0.007] + [IAT(c->s)...: 0.000| 0.021| 0.007| 0.007][IAT(s->c)...: 0.000| 0.020| 0.005| 0.007] + [PKTLEN(c->s): 85.000|1242.000| 372.500| 477.000][PKTLEN(s->c): 85.000|1239.000| 324.200| 385.300] + [BINS(c->s)..: 0,6,1,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,9,3,0,0,1,1,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..udp] [.......10.9.0.2][60106] -> [..104.26.11.240][..443] [QUIC.Cloudflare][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-29.pcap.out b/test/results/flow-info/quic-29.pcap.out new file mode 100644 index 000000000..696de0e9e --- /dev/null +++ b/test/results/flow-info/quic-29.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.......10.9.0.1][36588] -> [.......10.9.0.2][..443] + detected: [.....1] [ip4][..udp] [.......10.9.0.1][36588] -> [.......10.9.0.2][..443] [QUIC][Web][Acceptable] + idle: [.....1] [ip4][..udp] [.......10.9.0.1][36588] -> [.......10.9.0.2][..443] [QUIC][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-33.pcapng.out b/test/results/flow-info/quic-33.pcapng.out new file mode 100644 index 000000000..b0e4588eb --- /dev/null +++ b/test/results/flow-info/quic-33.pcapng.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [....................................::1][51430] -> [....................................::1][.4443] + detected: [.....1] [ip6][..udp] [....................................::1][51430] -> [....................................::1][.4443] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + analyse: [.....1] [ip6][..udp] [....................................::1][51430] -> [....................................::1][.4443] [QUIC][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.003| 0.000| 0.001] + [IAT(c->s)...: 0.000| 0.003| 0.001| 0.001][IAT(s->c)...: 0.000| 0.003| 0.000| 0.001] + [PKTLEN(c->s): 115.000|1502.000| 454.300| 513.100][PKTLEN(s->c): 117.000|1502.000|1220.400| 491.200] + [BINS(c->s)..: 0,4,0,0,1,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 0,3,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,15,0,0] + idle: [.....1] [ip6][..udp] [....................................::1][51430] -> [....................................::1][.4443] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-34.pcap.out b/test/results/flow-info/quic-34.pcap.out new file mode 100644 index 000000000..367ab735f --- /dev/null +++ b/test/results/flow-info/quic-34.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...192.168.56.1][55880] -> [.192.168.56.198][.4443] + detected: [.....1] [ip4][..udp] [...192.168.56.1][55880] -> [.192.168.56.198][.4443] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + idle: [.....1] [ip4][..udp] [...192.168.56.1][55880] -> [.192.168.56.198][.4443] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-fuzz-overflow.pcapng.out b/test/results/flow-info/quic-fuzz-overflow.pcapng.out new file mode 100644 index 000000000..21ef3e3f3 --- /dev/null +++ b/test/results/flow-info/quic-fuzz-overflow.pcapng.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [255.255.255.255][.8224] -> [.255.255.255.32][.8224] + detected: [.....1] [ip4][..udp] [255.255.255.255][.8224] -> [.255.255.255.32][.8224] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + idle: [.....1] [ip4][..udp] [255.255.255.255][.8224] -> [.255.255.255.32][.8224] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-mvfst-22.pcap.out b/test/results/flow-info/quic-mvfst-22.pcap.out new file mode 100644 index 000000000..a86e5454b --- /dev/null +++ b/test/results/flow-info/quic-mvfst-22.pcap.out @@ -0,0 +1,13 @@ + DAEMON-EVENT: init + new: [.....1] [ip4][..udp] [......10.0.2.15][35601] -> [.....31.13.86.8][..443] + detected: [.....1] [ip4][..udp] [......10.0.2.15][35601] -> [.....31.13.86.8][..443] [QUIC.Facebook][SocialNetwork][Fun] + analyse: [.....1] [ip4][..udp] [......10.0.2.15][35601] -> [.....31.13.86.8][..443] [QUIC.Facebook][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.091| 0.169| 0.515] + [IAT(c->s)...: 0.000| 2.091| 0.226| 0.593][IAT(s->c)...: 0.000| 2.073| 0.135| 0.460] + [PKTLEN(c->s): 73.000|1274.000| 611.700| 550.200][PKTLEN(s->c): 66.000|1294.000| 641.800| 592.200] + [BINS(c->s)..: 1,3,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,3,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,3,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,0,0,0,0,0,0,0,0] + update: [.....1] [ip4][..udp] [......10.0.2.15][35601] -> [.....31.13.86.8][..443] [QUIC.Facebook][SocialNetwork][Fun] + idle: [.....1] [ip4][..udp] [......10.0.2.15][35601] -> [.....31.13.86.8][..443] [QUIC.Facebook][SocialNetwork][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-mvfst-22_decryption_error.pcap.out b/test/results/flow-info/quic-mvfst-22_decryption_error.pcap.out new file mode 100644 index 000000000..d57c73e49 --- /dev/null +++ b/test/results/flow-info/quic-mvfst-22_decryption_error.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..10.230.40.168][62196] -> [..94.97.225.146][..443] + detected: [.....1] [ip4][..udp] [..10.230.40.168][62196] -> [..94.97.225.146][..443] [QUIC][Web][Acceptable] + analyse: [.....1] [ip4][..udp] [..10.230.40.168][62196] -> [..94.97.225.146][..443] [QUIC][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 0.003| 0.002| 0.001] + [IAT(c->s)...: 0.001| 0.001| 0.001| 0.000][IAT(s->c)...: 0.001| 0.003| 0.002| 0.001] + [PKTLEN(c->s): 60.000|1260.000| 385.200| 401.200][PKTLEN(s->c): 66.000|1280.000| 855.500| 517.700] + [BINS(c->s)..: 0,3,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,3,0,0,0,0,0,3,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..udp] [..10.230.40.168][62196] -> [..94.97.225.146][..443] [QUIC][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-mvfst-27.pcapng.out b/test/results/flow-info/quic-mvfst-27.pcapng.out new file mode 100644 index 000000000..4ba9c2178 --- /dev/null +++ b/test/results/flow-info/quic-mvfst-27.pcapng.out @@ -0,0 +1,5 @@ + DAEMON-EVENT: init + new: [.....1] [ip4][..udp] [......10.0.2.15][35957] -> [..69.171.250.15][..443] + detected: [.....1] [ip4][..udp] [......10.0.2.15][35957] -> [..69.171.250.15][..443] [QUIC.Facebook][SocialNetwork][Fun] + idle: [.....1] [ip4][..udp] [......10.0.2.15][35957] -> [..69.171.250.15][..443] [QUIC.Facebook][SocialNetwork][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-mvfst-exp.pcap.out b/test/results/flow-info/quic-mvfst-exp.pcap.out new file mode 100644 index 000000000..9b61b4169 --- /dev/null +++ b/test/results/flow-info/quic-mvfst-exp.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [.2aac:cdf7:d506:7807:9092:75f:a963:f4ab][57587] -> [....3f65:ece9:fe71:6e2a:face:b00c::358e][..443] + detected: [.....1] [ip6][..udp] [.2aac:cdf7:d506:7807:9092:75f:a963:f4ab][57587] -> [....3f65:ece9:fe71:6e2a:face:b00c::358e][..443] [QUIC.Facebook][SocialNetwork][Fun] + idle: [.....1] [ip6][..udp] [.2aac:cdf7:d506:7807:9092:75f:a963:f4ab][57587] -> [....3f65:ece9:fe71:6e2a:face:b00c::358e][..443] [QUIC.Facebook][SocialNetwork][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic-v2-01.pcapng.out b/test/results/flow-info/quic-v2-01.pcapng.out new file mode 100644 index 000000000..ee2c6e8e4 --- /dev/null +++ b/test/results/flow-info/quic-v2-01.pcapng.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...192.168.56.1][34229] -> [.192.168.56.198][.4443] + detected: [.....1] [ip4][..udp] [...192.168.56.1][34229] -> [.192.168.56.198][.4443] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + analyse: [.....1] [ip4][..udp] [...192.168.56.1][34229] -> [.192.168.56.198][.4443] [QUIC][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.003| 0.000| 0.001] + [IAT(c->s)...: 0.000| 0.003| 0.001| 0.001][IAT(s->c)...: 0.000| 0.002| 0.000| 0.000] + [PKTLEN(c->s): 97.000|1482.000| 451.000| 513.900][PKTLEN(s->c): 97.000|1482.000|1278.700| 439.200] + [BINS(c->s)..: 0,4,0,0,0,2,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 0,2,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,18,0,0] + idle: [.....1] [ip4][..udp] [...192.168.56.1][34229] -> [.192.168.56.198][.4443] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic.pcap.out b/test/results/flow-info/quic.pcap.out new file mode 100644 index 000000000..895202c7b --- /dev/null +++ b/test/results/flow-info/quic.pcap.out @@ -0,0 +1,56 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.1.109][57833] -> [.216.58.212.101][..443] + detected: [.....1] [ip4][..udp] [..192.168.1.109][57833] -> [.216.58.212.101][..443] [QUIC.GMail][Email][Acceptable] + analyse: [.....1] [ip4][..udp] [..192.168.1.109][57833] -> [.216.58.212.101][..443] [QUIC.GMail][Email][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.198| 0.584| 0.964] + [IAT(c->s)...: 0.015| 3.119| 0.603| 0.951][IAT(s->c)...: 0.000| 3.198| 0.565| 0.975] + [PKTLEN(c->s): 79.000|1392.000| 312.800| 392.500][PKTLEN(s->c): 61.000|1392.000| 333.300| 372.700] + [BINS(c->s)..: 0,8,0,1,1,1,1,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0] + [BINS(s->c)..: 4,4,0,0,1,1,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0] + DAEMON-EVENT: [Processed: 413 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..udp] [.......10.0.0.4][40134] -> [.......10.0.0.3][.6121] + detected: [.....2] [ip4][..udp] [.......10.0.0.4][40134] -> [.......10.0.0.3][.6121] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + idle: [.....1] [ip4][..udp] [..192.168.1.109][57833] -> [.216.58.212.101][..443] [QUIC.GMail][Email][Acceptable] + DAEMON-EVENT: [Processed: 419 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..udp] [..192.168.1.105][45669] -> [...172.217.16.4][..443] + detected: [.....3] [ip4][..udp] [..192.168.1.105][45669] -> [...172.217.16.4][..443] [QUIC.Google][Web][Acceptable] + new: [.....4] [ip4][..udp] [..192.168.1.105][40461] -> [...172.217.16.3][..443] + new: [.....5] [ip4][..udp] [..192.168.1.105][34438] -> [.216.58.210.238][..443] + detected: [.....5] [ip4][..udp] [..192.168.1.105][34438] -> [.216.58.210.238][..443] [QUIC.YouTube][Media][Fun] + new: [.....6] [ip4][..udp] [..192.168.1.105][48445] -> [.216.58.214.110][..443] + detected: [.....6] [ip4][..udp] [..192.168.1.105][48445] -> [.216.58.214.110][..443] [QUIC.YouTube][Media][Fun] + new: [.....7] [ip4][..udp] [..192.168.1.105][40030] -> [.216.58.201.227][..443] + detected: [.....7] [ip4][..udp] [..192.168.1.105][40030] -> [.216.58.201.227][..443] [QUIC.Google][Web][Acceptable] + new: [.....8] [ip4][..udp] [..192.168.1.105][55934] -> [.216.58.201.238][..443] + detected: [.....8] [ip4][..udp] [..192.168.1.105][55934] -> [.216.58.201.238][..443] [QUIC.YouTube][Media][Fun] + new: [.....9] [ip4][..udp] [..192.168.1.105][53817] -> [.216.58.210.225][..443] + detected: [.....9] [ip4][..udp] [..192.168.1.105][53817] -> [.216.58.210.225][..443] [QUIC.YouTube][Media][Fun] + idle: [.....2] [ip4][..udp] [.......10.0.0.4][40134] -> [.......10.0.0.3][.6121] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + DAEMON-EVENT: [Processed: 449 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 7 / 9|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....10] [ip4][..udp] [..192.168.1.109][35236] -> [.216.58.210.206][..443] + detected: [....10] [ip4][..udp] [..192.168.1.109][35236] -> [.216.58.210.206][..443] [QUIC.YouTube][Media][Fun] + analyse: [....10] [ip4][..udp] [..192.168.1.109][35236] -> [.216.58.210.206][..443] [QUIC.YouTube][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.829| 0.062| 0.199] + [IAT(c->s)...: 0.000| 0.803| 0.087| 0.227][IAT(s->c)...: 0.000| 0.829| 0.048| 0.180] + [PKTLEN(c->s): 79.000|1392.000| 350.800| 478.600][PKTLEN(s->c): 75.000|1392.000|1184.400| 467.600] + [BINS(c->s)..: 0,8,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0] + [BINS(s->c)..: 0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,16,0,0,0,0,0] + idle: [.....7] [ip4][..udp] [..192.168.1.105][40030] -> [.216.58.201.227][..443] [QUIC.Google][Web][Acceptable] + guessed: [.....4] [ip4][..udp] [..192.168.1.105][40461] -> [...172.217.16.3][..443] [Google][Web][Acceptable] + idle: [.....4] [ip4][..udp] [..192.168.1.105][40461] -> [...172.217.16.3][..443] + idle: [.....6] [ip4][..udp] [..192.168.1.105][48445] -> [.216.58.214.110][..443] [QUIC.YouTube][Media][Fun] + idle: [.....5] [ip4][..udp] [..192.168.1.105][34438] -> [.216.58.210.238][..443] [QUIC.YouTube][Media][Fun] + idle: [.....3] [ip4][..udp] [..192.168.1.105][45669] -> [...172.217.16.4][..443] [QUIC.Google][Web][Acceptable] + idle: [....10] [ip4][..udp] [..192.168.1.109][35236] -> [.216.58.210.206][..443] [QUIC.YouTube][Media][Fun] + idle: [.....9] [ip4][..udp] [..192.168.1.105][53817] -> [.216.58.210.225][..443] [QUIC.YouTube][Media][Fun] + idle: [.....8] [ip4][..udp] [..192.168.1.105][55934] -> [.216.58.201.238][..443] [QUIC.YouTube][Media][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic046.pcap.out b/test/results/flow-info/quic046.pcap.out new file mode 100644 index 000000000..6d9015d0a --- /dev/null +++ b/test/results/flow-info/quic046.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.1.236][50587] -> [..216.58.206.86][..443] + detected: [.....1] [ip4][..udp] [..192.168.1.236][50587] -> [..216.58.206.86][..443] [QUIC.YouTube][Media][Fun] + analyse: [.....1] [ip4][..udp] [..192.168.1.236][50587] -> [..216.58.206.86][..443] [QUIC.YouTube][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.029| 0.002| 0.006] + [IAT(c->s)...: 0.001| 0.021| 0.003| 0.006][IAT(s->c)...: 0.000| 0.029| 0.002| 0.007] + [PKTLEN(c->s): 70.000|1392.000| 387.000| 444.300][PKTLEN(s->c): 62.000|1392.000|1262.900| 377.900] + [BINS(c->s)..: 2,0,1,0,5,2,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,0,0,0,0,0] + idle: [.....1] [ip4][..udp] [..192.168.1.236][50587] -> [..216.58.206.86][..443] [QUIC.YouTube][Media][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic_0RTT.pcap.out b/test/results/flow-info/quic_0RTT.pcap.out new file mode 100644 index 000000000..2e7590d01 --- /dev/null +++ b/test/results/flow-info/quic_0RTT.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [....................................::1][60459] -> [....................................::1][.4443] + detected: [.....1] [ip6][..udp] [....................................::1][60459] -> [....................................::1][.4443] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: [Processed: 2 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..udp] [..192.168.2.100][51972] -> [142.250.181.227][..443] + detected: [.....2] [ip4][..udp] [..192.168.2.100][51972] -> [142.250.181.227][..443] [QUIC.Google][Web][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.2.100][51972] -> [142.250.181.227][..443] [QUIC.Google][Web][Acceptable] + idle: [.....1] [ip6][..udp] [....................................::1][60459] -> [....................................::1][.4443] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic_crypto_aes_auth_size.pcap.out b/test/results/flow-info/quic_crypto_aes_auth_size.pcap.out new file mode 100644 index 000000000..8859b4a61 --- /dev/null +++ b/test/results/flow-info/quic_crypto_aes_auth_size.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...134.53.36.43][34917] -> [..142.104.38.30][..443] + detected: [.....1] [ip4][..udp] [...134.53.36.43][34917] -> [..142.104.38.30][..443] [QUIC.Snapchat][SocialNetwork][Fun] + new: [.....2] [ip4][..udp] [245.161.134.177][27636] -> [..77.242.114.14][..443] + detected: [.....2] [ip4][..udp] [245.161.134.177][27636] -> [..77.242.114.14][..443] [QUIC.Snapchat][SocialNetwork][Fun] + idle: [.....1] [ip4][..udp] [...134.53.36.43][34917] -> [..142.104.38.30][..443] [QUIC.Snapchat][SocialNetwork][Fun] + idle: [.....2] [ip4][..udp] [245.161.134.177][27636] -> [..77.242.114.14][..443] [QUIC.Snapchat][SocialNetwork][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic_frags_ch_in_multiple_packets.pcapng.out b/test/results/flow-info/quic_frags_ch_in_multiple_packets.pcapng.out new file mode 100644 index 000000000..df14e6f8b --- /dev/null +++ b/test/results/flow-info/quic_frags_ch_in_multiple_packets.pcapng.out @@ -0,0 +1,11 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [....................................::1][58822] -> [....................................::1][.4443] + detected: [.....1] [ip6][..udp] [....................................::1][58822] -> [....................................::1][.4443] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + detection-update: [.....1] [ip6][..udp] [....................................::1][58822] -> [....................................::1][.4443] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + idle: [.....1] [ip6][..udp] [....................................::1][58822] -> [....................................::1][.4443] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out b/test/results/flow-info/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out new file mode 100644 index 000000000..8f91ea5b0 --- /dev/null +++ b/test/results/flow-info/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out @@ -0,0 +1,512 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.133.205.75.230][56528] -> [.208.229.157.81][..443] + detected: [.....1] [ip4][..udp] [.133.205.75.230][56528] -> [.208.229.157.81][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [.....2] [ip4][..udp] [..147.196.90.42][61647] -> [..177.86.46.206][..443] + detected: [.....2] [ip4][..udp] [..147.196.90.42][61647] -> [..177.86.46.206][..443] [QUIC.Google][Web][Acceptable] + idle: [.....1] [ip4][..udp] [.133.205.75.230][56528] -> [.208.229.157.81][..443] [QUIC.GoogleServices][Web][Acceptable] + DAEMON-EVENT: [Processed: 8 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..udp] [...168.144.64.5][55376] -> [.212.22.246.243][..443] + detected: [.....3] [ip4][..udp] [...168.144.64.5][55376] -> [.212.22.246.243][..443] [QUIC.Google][Web][Acceptable] + new: [.....4] [ip4][..udp] [...168.144.64.5][64964] -> [.133.202.76.105][..443] + detected: [.....4] [ip4][..udp] [...168.144.64.5][64964] -> [.133.202.76.105][..443] [QUIC.Google][Web][Acceptable] + new: [.....5] [ip4][..udp] [...168.144.64.5][55844] -> [..112.1.105.138][..443] + detected: [.....5] [ip4][..udp] [...168.144.64.5][55844] -> [..112.1.105.138][..443] [QUIC.PlayStore][SoftwareUpdate][Safe] + new: [.....6] [ip4][..udp] [...168.144.64.5][59827] -> [..37.47.218.224][..443] + detected: [.....6] [ip4][..udp] [...168.144.64.5][59827] -> [..37.47.218.224][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [.....2] [ip4][..udp] [..147.196.90.42][61647] -> [..177.86.46.206][..443] [QUIC.Google][Web][Acceptable] + new: [.....7] [ip4][..udp] [...168.144.64.5][51053] -> [241.138.147.133][..443] + detected: [.....7] [ip4][..udp] [...168.144.64.5][51053] -> [241.138.147.133][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [.....3] [ip4][..udp] [...168.144.64.5][55376] -> [.212.22.246.243][..443] [QUIC.Google][Web][Acceptable] + update: [.....4] [ip4][..udp] [...168.144.64.5][64964] -> [.133.202.76.105][..443] [QUIC.Google][Web][Acceptable] + update: [.....6] [ip4][..udp] [...168.144.64.5][59827] -> [..37.47.218.224][..443] [QUIC.Google][Advertisement][Acceptable] + update: [.....5] [ip4][..udp] [...168.144.64.5][55844] -> [..112.1.105.138][..443] [QUIC.PlayStore][SoftwareUpdate][Safe] + DAEMON-EVENT: [Processed: 17 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 7|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 4] + new: [.....8] [ip4][..udp] [..10.117.78.100][44252] -> [.251.236.18.198][..443] + detected: [.....8] [ip4][..udp] [..10.117.78.100][44252] -> [.251.236.18.198][..443] [QUIC.Google][Web][Acceptable] + idle: [.....3] [ip4][..udp] [...168.144.64.5][55376] -> [.212.22.246.243][..443] [QUIC.Google][Web][Acceptable] + idle: [.....4] [ip4][..udp] [...168.144.64.5][64964] -> [.133.202.76.105][..443] [QUIC.Google][Web][Acceptable] + idle: [.....6] [ip4][..udp] [...168.144.64.5][59827] -> [..37.47.218.224][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [.....7] [ip4][..udp] [...168.144.64.5][51053] -> [241.138.147.133][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [.....5] [ip4][..udp] [...168.144.64.5][55844] -> [..112.1.105.138][..443] [QUIC.PlayStore][SoftwareUpdate][Safe] + new: [.....9] [ip4][..udp] [..10.117.78.100][55273] -> [202.152.155.121][..443] + detected: [.....9] [ip4][..udp] [..10.117.78.100][55273] -> [202.152.155.121][..443] [QUIC.Google][Web][Acceptable] + DAEMON-EVENT: [Processed: 19 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 9|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 4] + new: [....10] [ip4][..udp] [...168.144.64.5][53404] -> [113.250.137.243][..443] + detected: [....10] [ip4][..udp] [...168.144.64.5][53404] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....11] [ip4][..udp] [...168.144.64.5][53431] -> [...128.248.24.1][..443] + detected: [....11] [ip4][..udp] [...168.144.64.5][53431] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + new: [....12] [ip4][..udp] [...168.144.64.5][50482] -> [121.209.126.161][..443] + detected: [....12] [ip4][..udp] [...168.144.64.5][50482] -> [121.209.126.161][..443] [QUIC.YouTube][Media][Fun] + new: [....13] [ip4][..udp] [...168.144.64.5][62652] -> [.158.146.215.30][..443] + detected: [....13] [ip4][..udp] [...168.144.64.5][62652] -> [.158.146.215.30][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....14] [ip4][..udp] [...168.144.64.5][63136] -> [...9.65.169.252][..443] + detected: [....14] [ip4][..udp] [...168.144.64.5][63136] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + idle: [.....8] [ip4][..udp] [..10.117.78.100][44252] -> [.251.236.18.198][..443] [QUIC.Google][Web][Acceptable] + idle: [.....9] [ip4][..udp] [..10.117.78.100][55273] -> [202.152.155.121][..443] [QUIC.Google][Web][Acceptable] + new: [....15] [ip4][..udp] [...168.144.64.5][51456] -> [102.194.207.179][..443] + detected: [....15] [ip4][..udp] [...168.144.64.5][51456] -> [102.194.207.179][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....12] [ip4][..udp] [...168.144.64.5][50482] -> [121.209.126.161][..443] [QUIC.YouTube][Media][Fun] + update: [....13] [ip4][..udp] [...168.144.64.5][62652] -> [.158.146.215.30][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....14] [ip4][..udp] [...168.144.64.5][63136] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + update: [....11] [ip4][..udp] [...168.144.64.5][53431] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....10] [ip4][..udp] [...168.144.64.5][53404] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....16] [ip4][..udp] [...168.144.64.5][63163] -> [113.250.137.243][..443] + detected: [....16] [ip4][..udp] [...168.144.64.5][63163] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....17] [ip4][..udp] [...168.144.64.5][54016] -> [...153.98.28.78][..443] + detected: [....17] [ip4][..udp] [...168.144.64.5][54016] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + new: [....18] [ip4][..udp] [...168.144.64.5][51248] -> [..99.42.133.245][..443] + detected: [....18] [ip4][..udp] [...168.144.64.5][51248] -> [..99.42.133.245][..443] [QUIC.Google][Web][Acceptable] + new: [....19] [ip4][..udp] [...168.144.64.5][60896] -> [.45.228.175.189][..443] + detected: [....19] [ip4][..udp] [...168.144.64.5][60896] -> [.45.228.175.189][..443] [QUIC.Google][Web][Acceptable] + update: [....17] [ip4][..udp] [...168.144.64.5][54016] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + update: [....12] [ip4][..udp] [...168.144.64.5][50482] -> [121.209.126.161][..443] [QUIC.YouTube][Media][Fun] + update: [....13] [ip4][..udp] [...168.144.64.5][62652] -> [.158.146.215.30][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....14] [ip4][..udp] [...168.144.64.5][63136] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + update: [....16] [ip4][..udp] [...168.144.64.5][63163] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....11] [ip4][..udp] [...168.144.64.5][53431] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....18] [ip4][..udp] [...168.144.64.5][51248] -> [..99.42.133.245][..443] [QUIC.Google][Web][Acceptable] + update: [....10] [ip4][..udp] [...168.144.64.5][53404] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....15] [ip4][..udp] [...168.144.64.5][51456] -> [102.194.207.179][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....20] [ip4][..udp] [...168.144.64.5][60551] -> [...128.248.24.1][..443] + detected: [....20] [ip4][..udp] [...168.144.64.5][60551] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + new: [....21] [ip4][..udp] [...168.144.64.5][56488] -> [..177.86.46.206][..443] + detected: [....21] [ip4][..udp] [...168.144.64.5][56488] -> [..177.86.46.206][..443] [QUIC.YouTube][Media][Fun] + idle: [....11] [ip4][..udp] [...168.144.64.5][53431] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + idle: [....10] [ip4][..udp] [...168.144.64.5][53404] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....17] [ip4][..udp] [...168.144.64.5][54016] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + update: [....12] [ip4][..udp] [...168.144.64.5][50482] -> [121.209.126.161][..443] [QUIC.YouTube][Media][Fun] + update: [....13] [ip4][..udp] [...168.144.64.5][62652] -> [.158.146.215.30][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....14] [ip4][..udp] [...168.144.64.5][63136] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + update: [....16] [ip4][..udp] [...168.144.64.5][63163] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....19] [ip4][..udp] [...168.144.64.5][60896] -> [.45.228.175.189][..443] [QUIC.Google][Web][Acceptable] + update: [....18] [ip4][..udp] [...168.144.64.5][51248] -> [..99.42.133.245][..443] [QUIC.Google][Web][Acceptable] + update: [....15] [ip4][..udp] [...168.144.64.5][51456] -> [102.194.207.179][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....22] [ip4][..udp] [...168.144.64.5][49153] -> [...153.98.28.78][..443] + detected: [....22] [ip4][..udp] [...168.144.64.5][49153] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + idle: [....12] [ip4][..udp] [...168.144.64.5][50482] -> [121.209.126.161][..443] [QUIC.YouTube][Media][Fun] + idle: [....13] [ip4][..udp] [...168.144.64.5][62652] -> [.158.146.215.30][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....14] [ip4][..udp] [...168.144.64.5][63136] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + update: [....20] [ip4][..udp] [...168.144.64.5][60551] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + new: [....23] [ip4][..udp] [...168.144.64.5][51296] -> [...128.248.24.1][..443] + detected: [....23] [ip4][..udp] [...168.144.64.5][51296] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + idle: [....17] [ip4][..udp] [...168.144.64.5][54016] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + idle: [....16] [ip4][..udp] [...168.144.64.5][63163] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....18] [ip4][..udp] [...168.144.64.5][51248] -> [..99.42.133.245][..443] [QUIC.Google][Web][Acceptable] + idle: [....15] [ip4][..udp] [...168.144.64.5][51456] -> [102.194.207.179][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....19] [ip4][..udp] [...168.144.64.5][60896] -> [.45.228.175.189][..443] [QUIC.Google][Web][Acceptable] + update: [....22] [ip4][..udp] [...168.144.64.5][49153] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + update: [....21] [ip4][..udp] [...168.144.64.5][56488] -> [..177.86.46.206][..443] [QUIC.YouTube][Media][Fun] + update: [....20] [ip4][..udp] [...168.144.64.5][60551] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + new: [....24] [ip4][..udp] [...168.144.64.5][57767] -> [....76.83.40.87][..443] + detected: [....24] [ip4][..udp] [...168.144.64.5][57767] -> [....76.83.40.87][..443] [QUIC.YouTube][Media][Fun] + idle: [....23] [ip4][..udp] [...168.144.64.5][51296] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + idle: [....19] [ip4][..udp] [...168.144.64.5][60896] -> [.45.228.175.189][..443] [QUIC.Google][Web][Acceptable] + idle: [....22] [ip4][..udp] [...168.144.64.5][49153] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + idle: [....21] [ip4][..udp] [...168.144.64.5][56488] -> [..177.86.46.206][..443] [QUIC.YouTube][Media][Fun] + idle: [....20] [ip4][..udp] [...168.144.64.5][60551] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + new: [....25] [ip4][..udp] [...168.144.64.5][63736] -> [.213.188.47.247][..443] + detected: [....25] [ip4][..udp] [...168.144.64.5][63736] -> [.213.188.47.247][..443] [QUIC.YouTube][Media][Fun] + new: [....26] [ip4][..udp] [...168.144.64.5][52273] -> [244.214.160.219][..443] + detected: [....26] [ip4][..udp] [...168.144.64.5][52273] -> [244.214.160.219][..443] [QUIC.YouTube][Media][Fun] + new: [....27] [ip4][..udp] [...168.144.64.5][49324] -> [..35.194.157.47][..443] + detected: [....27] [ip4][..udp] [...168.144.64.5][49324] -> [..35.194.157.47][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....24] [ip4][..udp] [...168.144.64.5][57767] -> [....76.83.40.87][..443] [QUIC.YouTube][Media][Fun] + DAEMON-EVENT: [Processed: 38 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 27|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 32] + new: [....28] [ip4][..udp] [...168.144.64.5][62047] -> [..136.125.67.96][..443] + detected: [....28] [ip4][..udp] [...168.144.64.5][62047] -> [..136.125.67.96][..443] [QUIC.Google][Web][Acceptable] + update: [....25] [ip4][..udp] [...168.144.64.5][63736] -> [.213.188.47.247][..443] [QUIC.YouTube][Media][Fun] + update: [....27] [ip4][..udp] [...168.144.64.5][49324] -> [..35.194.157.47][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....26] [ip4][..udp] [...168.144.64.5][52273] -> [244.214.160.219][..443] [QUIC.YouTube][Media][Fun] + update: [....24] [ip4][..udp] [...168.144.64.5][57767] -> [....76.83.40.87][..443] [QUIC.YouTube][Media][Fun] + new: [....29] [ip4][..udp] [...168.144.64.5][64976] -> [..220.80.126.73][..443] + detected: [....29] [ip4][..udp] [...168.144.64.5][64976] -> [..220.80.126.73][..443] [QUIC.YouTube][Media][Fun] + idle: [....25] [ip4][..udp] [...168.144.64.5][63736] -> [.213.188.47.247][..443] [QUIC.YouTube][Media][Fun] + idle: [....28] [ip4][..udp] [...168.144.64.5][62047] -> [..136.125.67.96][..443] [QUIC.Google][Web][Acceptable] + idle: [....27] [ip4][..udp] [...168.144.64.5][49324] -> [..35.194.157.47][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....26] [ip4][..udp] [...168.144.64.5][52273] -> [244.214.160.219][..443] [QUIC.YouTube][Media][Fun] + idle: [....24] [ip4][..udp] [...168.144.64.5][57767] -> [....76.83.40.87][..443] [QUIC.YouTube][Media][Fun] + new: [....30] [ip4][..udp] [...168.144.64.5][61209] -> [..35.194.157.47][..443] + detected: [....30] [ip4][..udp] [...168.144.64.5][61209] -> [..35.194.157.47][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....31] [ip4][..udp] [...168.144.64.5][50540] -> [...99.45.60.254][..443] + detected: [....31] [ip4][..udp] [...168.144.64.5][50540] -> [...99.45.60.254][..443] [QUIC.YouTube][Media][Fun] + update: [....29] [ip4][..udp] [...168.144.64.5][64976] -> [..220.80.126.73][..443] [QUIC.YouTube][Media][Fun] + update: [....30] [ip4][..udp] [...168.144.64.5][61209] -> [..35.194.157.47][..443] [QUIC.Google][Advertisement][Acceptable] + DAEMON-EVENT: [Processed: 42 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 31|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 38] + new: [....32] [ip4][..udp] [...168.144.64.5][60809] -> [...9.65.169.252][..443] + detected: [....32] [ip4][..udp] [...168.144.64.5][60809] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + update: [....29] [ip4][..udp] [...168.144.64.5][64976] -> [..220.80.126.73][..443] [QUIC.YouTube][Media][Fun] + update: [....30] [ip4][..udp] [...168.144.64.5][61209] -> [..35.194.157.47][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....31] [ip4][..udp] [...168.144.64.5][50540] -> [...99.45.60.254][..443] [QUIC.YouTube][Media][Fun] + new: [....33] [ip4][..udp] [...168.144.64.5][55637] -> [.169.81.163.225][..443] + detected: [....33] [ip4][..udp] [...168.144.64.5][55637] -> [.169.81.163.225][..443] [QUIC.YouTube][Media][Fun] + new: [....34] [ip4][..udp] [...168.144.64.5][53127] -> [113.250.137.243][..443] + detected: [....34] [ip4][..udp] [...168.144.64.5][53127] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + idle: [....29] [ip4][..udp] [...168.144.64.5][64976] -> [..220.80.126.73][..443] [QUIC.YouTube][Media][Fun] + idle: [....30] [ip4][..udp] [...168.144.64.5][61209] -> [..35.194.157.47][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....31] [ip4][..udp] [...168.144.64.5][50540] -> [...99.45.60.254][..443] [QUIC.YouTube][Media][Fun] + update: [....32] [ip4][..udp] [...168.144.64.5][60809] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + update: [....33] [ip4][..udp] [...168.144.64.5][55637] -> [.169.81.163.225][..443] [QUIC.YouTube][Media][Fun] + new: [....35] [ip4][..udp] [...168.144.64.5][50073] -> [.152.128.87.238][..443] + detected: [....35] [ip4][..udp] [...168.144.64.5][50073] -> [.152.128.87.238][..443] [QUIC.YouTube][Media][Fun] + idle: [....32] [ip4][..udp] [...168.144.64.5][60809] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + idle: [....33] [ip4][..udp] [...168.144.64.5][55637] -> [.169.81.163.225][..443] [QUIC.YouTube][Media][Fun] + update: [....34] [ip4][..udp] [...168.144.64.5][53127] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + new: [....36] [ip4][..udp] [.192.168.254.11][59048] -> [.251.236.18.198][..443] + detected: [....36] [ip4][..udp] [.192.168.254.11][59048] -> [.251.236.18.198][..443] [QUIC.Google][Web][Acceptable] + idle: [....34] [ip4][..udp] [...168.144.64.5][53127] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + update: [....35] [ip4][..udp] [...168.144.64.5][50073] -> [.152.128.87.238][..443] [QUIC.YouTube][Media][Fun] + new: [....37] [ip4][..udp] [.192.168.254.11][38331] -> [.93.100.151.221][..443] + detected: [....37] [ip4][..udp] [.192.168.254.11][38331] -> [.93.100.151.221][..443] [QUIC.DataSaver][Web][Fun] + new: [....38] [ip4][..udp] [.192.168.254.11][45652] -> [.170.196.90.126][..443] + detected: [....38] [ip4][..udp] [.192.168.254.11][45652] -> [.170.196.90.126][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....39] [ip4][..udp] [.192.168.254.11][43427] -> [..98.251.203.81][..443] + detected: [....39] [ip4][..udp] [.192.168.254.11][43427] -> [..98.251.203.81][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....40] [ip4][..udp] [.192.168.254.11][54692] -> [.171.182.169.23][..443] + detected: [....40] [ip4][..udp] [.192.168.254.11][54692] -> [.171.182.169.23][..443] [QUIC][Web][Acceptable] + update: [....36] [ip4][..udp] [.192.168.254.11][59048] -> [.251.236.18.198][..443] [QUIC.Google][Web][Acceptable] + update: [....35] [ip4][..udp] [...168.144.64.5][50073] -> [.152.128.87.238][..443] [QUIC.YouTube][Media][Fun] + new: [....41] [ip4][..udp] [.192.168.254.11][35124] -> [..168.78.153.39][..443] + detected: [....41] [ip4][..udp] [.192.168.254.11][35124] -> [..168.78.153.39][..443] [QUIC][Web][Acceptable] + idle: [....35] [ip4][..udp] [...168.144.64.5][50073] -> [.152.128.87.238][..443] [QUIC.YouTube][Media][Fun] + update: [....38] [ip4][..udp] [.192.168.254.11][45652] -> [.170.196.90.126][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....37] [ip4][..udp] [.192.168.254.11][38331] -> [.93.100.151.221][..443] [QUIC.DataSaver][Web][Fun] + update: [....36] [ip4][..udp] [.192.168.254.11][59048] -> [.251.236.18.198][..443] [QUIC.Google][Web][Acceptable] + update: [....40] [ip4][..udp] [.192.168.254.11][54692] -> [.171.182.169.23][..443] [QUIC][Web][Acceptable] + update: [....39] [ip4][..udp] [.192.168.254.11][43427] -> [..98.251.203.81][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....42] [ip4][..udp] [.192.168.254.11][51075] -> [.117.148.117.30][..443] + detected: [....42] [ip4][..udp] [.192.168.254.11][51075] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....43] [ip4][..udp] [.192.168.254.11][49689] -> [.87.179.155.149][..443] + detected: [....43] [ip4][..udp] [.192.168.254.11][49689] -> [.87.179.155.149][..443] [QUIC.Google][Web][Acceptable] + idle: [....36] [ip4][..udp] [.192.168.254.11][59048] -> [.251.236.18.198][..443] [QUIC.Google][Web][Acceptable] + update: [....38] [ip4][..udp] [.192.168.254.11][45652] -> [.170.196.90.126][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....41] [ip4][..udp] [.192.168.254.11][35124] -> [..168.78.153.39][..443] [QUIC][Web][Acceptable] + update: [....37] [ip4][..udp] [.192.168.254.11][38331] -> [.93.100.151.221][..443] [QUIC.DataSaver][Web][Fun] + update: [....40] [ip4][..udp] [.192.168.254.11][54692] -> [.171.182.169.23][..443] [QUIC][Web][Acceptable] + update: [....39] [ip4][..udp] [.192.168.254.11][43427] -> [..98.251.203.81][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....44] [ip4][..udp] [...168.144.64.5][62818] -> [113.250.137.243][..443] + detected: [....44] [ip4][..udp] [...168.144.64.5][62818] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....38] [ip4][..udp] [.192.168.254.11][45652] -> [.170.196.90.126][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....37] [ip4][..udp] [.192.168.254.11][38331] -> [.93.100.151.221][..443] [QUIC.DataSaver][Web][Fun] + idle: [....39] [ip4][..udp] [.192.168.254.11][43427] -> [..98.251.203.81][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....45] [ip4][..udp] [...168.144.64.5][56425] -> [..125.136.204.4][..443] + detected: [....45] [ip4][..udp] [...168.144.64.5][56425] -> [..125.136.204.4][..443] [QUIC.YouTube][Media][Fun] + idle: [....40] [ip4][..udp] [.192.168.254.11][54692] -> [.171.182.169.23][..443] [QUIC][Web][Acceptable] + DAEMON-EVENT: [Processed: 57 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 45|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 57] + new: [....46] [ip4][..udp] [...168.144.64.5][59622] -> [...153.98.28.78][..443] + detected: [....46] [ip4][..udp] [...168.144.64.5][59622] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + idle: [....44] [ip4][..udp] [...168.144.64.5][62818] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....41] [ip4][..udp] [.192.168.254.11][35124] -> [..168.78.153.39][..443] [QUIC][Web][Acceptable] + idle: [....42] [ip4][..udp] [.192.168.254.11][51075] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....43] [ip4][..udp] [.192.168.254.11][49689] -> [.87.179.155.149][..443] [QUIC.Google][Web][Acceptable] + update: [....45] [ip4][..udp] [...168.144.64.5][56425] -> [..125.136.204.4][..443] [QUIC.YouTube][Media][Fun] + new: [....47] [ip4][..udp] [...168.144.64.5][50552] -> [108.171.138.182][..443] + detected: [....47] [ip4][..udp] [...168.144.64.5][50552] -> [108.171.138.182][..443] [QUIC.Google][Web][Acceptable] + idle: [....45] [ip4][..udp] [...168.144.64.5][56425] -> [..125.136.204.4][..443] [QUIC.YouTube][Media][Fun] + new: [....48] [ip4][..udp] [...168.144.64.5][56844] -> [113.250.137.243][..443] + detected: [....48] [ip4][..udp] [...168.144.64.5][56844] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + new: [....49] [ip4][..udp] [...168.144.64.5][58414] -> [...153.98.28.78][..443] + detected: [....49] [ip4][..udp] [...168.144.64.5][58414] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + update: [....48] [ip4][..udp] [...168.144.64.5][56844] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + update: [....47] [ip4][..udp] [...168.144.64.5][50552] -> [108.171.138.182][..443] [QUIC.Google][Web][Acceptable] + update: [....46] [ip4][..udp] [...168.144.64.5][59622] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + new: [....50] [ip4][..udp] [...168.144.64.5][61341] -> [.16.232.218.117][..443] + detected: [....50] [ip4][..udp] [...168.144.64.5][61341] -> [.16.232.218.117][..443] [QUIC.YouTube][Media][Fun] + new: [....51] [ip4][..udp] [...168.144.64.5][56683] -> [113.250.137.243][..443] + detected: [....51] [ip4][..udp] [...168.144.64.5][56683] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + update: [....49] [ip4][..udp] [...168.144.64.5][58414] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + update: [....48] [ip4][..udp] [...168.144.64.5][56844] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + update: [....47] [ip4][..udp] [...168.144.64.5][50552] -> [108.171.138.182][..443] [QUIC.Google][Web][Acceptable] + update: [....46] [ip4][..udp] [...168.144.64.5][59622] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + new: [....52] [ip4][..udp] [...168.144.64.5][64700] -> [.16.232.218.117][..443] + detected: [....52] [ip4][..udp] [...168.144.64.5][64700] -> [.16.232.218.117][..443] [QUIC.YouTube][Media][Fun] + idle: [....48] [ip4][..udp] [...168.144.64.5][56844] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + idle: [....47] [ip4][..udp] [...168.144.64.5][50552] -> [108.171.138.182][..443] [QUIC.Google][Web][Acceptable] + idle: [....46] [ip4][..udp] [...168.144.64.5][59622] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + update: [....49] [ip4][..udp] [...168.144.64.5][58414] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + update: [....50] [ip4][..udp] [...168.144.64.5][61341] -> [.16.232.218.117][..443] [QUIC.YouTube][Media][Fun] + update: [....51] [ip4][..udp] [...168.144.64.5][56683] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + new: [....53] [ip4][..udp] [...168.144.64.5][60936] -> [...9.65.169.252][..443] + detected: [....53] [ip4][..udp] [...168.144.64.5][60936] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + update: [....49] [ip4][..udp] [...168.144.64.5][58414] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + update: [....50] [ip4][..udp] [...168.144.64.5][61341] -> [.16.232.218.117][..443] [QUIC.YouTube][Media][Fun] + update: [....51] [ip4][..udp] [...168.144.64.5][56683] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + update: [....52] [ip4][..udp] [...168.144.64.5][64700] -> [.16.232.218.117][..443] [QUIC.YouTube][Media][Fun] + new: [....54] [ip4][..udp] [...168.144.64.5][59965] -> [..22.12.150.194][..443] + detected: [....54] [ip4][..udp] [...168.144.64.5][59965] -> [..22.12.150.194][..443] [QUIC.YouTube][Media][Fun] + idle: [....49] [ip4][..udp] [...168.144.64.5][58414] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + new: [....55] [ip4][..udp] [...168.144.64.5][64693] -> [113.250.137.243][..443] + detected: [....55] [ip4][..udp] [...168.144.64.5][64693] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + idle: [....50] [ip4][..udp] [...168.144.64.5][61341] -> [.16.232.218.117][..443] [QUIC.YouTube][Media][Fun] + idle: [....51] [ip4][..udp] [...168.144.64.5][56683] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + update: [....54] [ip4][..udp] [...168.144.64.5][59965] -> [..22.12.150.194][..443] [QUIC.YouTube][Media][Fun] + update: [....53] [ip4][..udp] [...168.144.64.5][60936] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + update: [....52] [ip4][..udp] [...168.144.64.5][64700] -> [.16.232.218.117][..443] [QUIC.YouTube][Media][Fun] + new: [....56] [ip4][..udp] [...168.144.64.5][59680] -> [.117.148.117.30][..443] + detected: [....56] [ip4][..udp] [...168.144.64.5][59680] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....54] [ip4][..udp] [...168.144.64.5][59965] -> [..22.12.150.194][..443] [QUIC.YouTube][Media][Fun] + idle: [....53] [ip4][..udp] [...168.144.64.5][60936] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + idle: [....55] [ip4][..udp] [...168.144.64.5][64693] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + idle: [....52] [ip4][..udp] [...168.144.64.5][64700] -> [.16.232.218.117][..443] [QUIC.YouTube][Media][Fun] + new: [....57] [ip4][..udp] [...168.144.64.5][57565] -> [217.254.108.174][..443] + detected: [....57] [ip4][..udp] [...168.144.64.5][57565] -> [217.254.108.174][..443] [QUIC.YouTube][Media][Fun] + new: [....58] [ip4][..udp] [...168.144.64.5][52387] -> [..143.52.137.18][..443] + detected: [....58] [ip4][..udp] [...168.144.64.5][52387] -> [..143.52.137.18][..443] [QUIC.Google][Advertisement][Acceptable] + DAEMON-EVENT: [Processed: 70 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 58|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 75] + new: [....59] [ip4][..udp] [...168.144.64.5][49860] -> [113.250.137.243][..443] + detected: [....59] [ip4][..udp] [...168.144.64.5][49860] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + update: [....56] [ip4][..udp] [...168.144.64.5][59680] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....57] [ip4][..udp] [...168.144.64.5][57565] -> [217.254.108.174][..443] [QUIC.YouTube][Media][Fun] + update: [....58] [ip4][..udp] [...168.144.64.5][52387] -> [..143.52.137.18][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....60] [ip4][..udp] [...168.144.64.5][60949] -> [185.186.183.185][..443] + detected: [....60] [ip4][..udp] [...168.144.64.5][60949] -> [185.186.183.185][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....56] [ip4][..udp] [...168.144.64.5][59680] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....57] [ip4][..udp] [...168.144.64.5][57565] -> [217.254.108.174][..443] [QUIC.YouTube][Media][Fun] + update: [....58] [ip4][..udp] [...168.144.64.5][52387] -> [..143.52.137.18][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....59] [ip4][..udp] [...168.144.64.5][49860] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + new: [....61] [ip4][..udp] [...168.144.64.5][57735] -> [..137.238.249.2][..443] + detected: [....61] [ip4][..udp] [...168.144.64.5][57735] -> [..137.238.249.2][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....56] [ip4][..udp] [...168.144.64.5][59680] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....57] [ip4][..udp] [...168.144.64.5][57565] -> [217.254.108.174][..443] [QUIC.YouTube][Media][Fun] + idle: [....60] [ip4][..udp] [...168.144.64.5][60949] -> [185.186.183.185][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....58] [ip4][..udp] [...168.144.64.5][52387] -> [..143.52.137.18][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....59] [ip4][..udp] [...168.144.64.5][49860] -> [113.250.137.243][..443] [QUIC.Google][Cloud][Acceptable] + DAEMON-EVENT: [Processed: 73 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 61|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 82] + new: [....62] [ip4][..udp] [..52.187.20.175][50588] -> [.208.229.157.81][..443] + detected: [....62] [ip4][..udp] [..52.187.20.175][50588] -> [.208.229.157.81][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....61] [ip4][..udp] [...168.144.64.5][57735] -> [..137.238.249.2][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....63] [ip4][..udp] [..52.187.20.175][61089] -> [..99.42.133.245][..443] + detected: [....63] [ip4][..udp] [..52.187.20.175][61089] -> [..99.42.133.245][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....62] [ip4][..udp] [..52.187.20.175][50588] -> [.208.229.157.81][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....64] [ip4][..udp] [..52.187.20.175][49880] -> [.208.229.157.81][..443] + detected: [....64] [ip4][..udp] [..52.187.20.175][49880] -> [.208.229.157.81][..443] [QUIC.GoogleServices][Web][Acceptable] + DAEMON-EVENT: [Processed: 85 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 64|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 83] + new: [....65] [ip4][..udp] [159.117.176.124][58337] -> [.208.229.157.81][..443] + detected: [....65] [ip4][..udp] [159.117.176.124][58337] -> [.208.229.157.81][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....62] [ip4][..udp] [..52.187.20.175][50588] -> [.208.229.157.81][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....64] [ip4][..udp] [..52.187.20.175][49880] -> [.208.229.157.81][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....63] [ip4][..udp] [..52.187.20.175][61089] -> [..99.42.133.245][..443] [QUIC.GoogleServices][Web][Acceptable] + DAEMON-EVENT: [Processed: 89 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 65|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 83] + new: [....66] [ip4][..udp] [159.117.176.124][49867] -> [...198.74.29.79][..443] + detected: [....66] [ip4][..udp] [159.117.176.124][49867] -> [...198.74.29.79][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....65] [ip4][..udp] [159.117.176.124][58337] -> [.208.229.157.81][..443] [QUIC.GoogleServices][Web][Acceptable] + DAEMON-EVENT: [Processed: 93 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 66|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 83] + new: [....67] [ip4][..udp] [..52.187.20.175][58123] -> [..118.89.218.46][..443] + detected: [....67] [ip4][..udp] [..52.187.20.175][58123] -> [..118.89.218.46][..443] [QUIC.Google][Web][Acceptable] + new: [....68] [ip4][..udp] [..52.187.20.175][63507] -> [121.209.126.161][..443] + detected: [....68] [ip4][..udp] [..52.187.20.175][63507] -> [121.209.126.161][..443] [QUIC.Google][Web][Acceptable] + idle: [....66] [ip4][..udp] [159.117.176.124][49867] -> [...198.74.29.79][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....69] [ip4][..udp] [..52.187.20.175][57066] -> [108.171.138.182][..443] + detected: [....69] [ip4][..udp] [..52.187.20.175][57066] -> [108.171.138.182][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....67] [ip4][..udp] [..52.187.20.175][58123] -> [..118.89.218.46][..443] [QUIC.Google][Web][Acceptable] + update: [....68] [ip4][..udp] [..52.187.20.175][63507] -> [121.209.126.161][..443] [QUIC.Google][Web][Acceptable] + DAEMON-EVENT: [Processed: 102 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 69|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 85] + new: [....70] [ip4][..udp] [..52.187.20.175][52512] -> [..196.245.61.64][..443] + detected: [....70] [ip4][..udp] [..52.187.20.175][52512] -> [..196.245.61.64][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....67] [ip4][..udp] [..52.187.20.175][58123] -> [..118.89.218.46][..443] [QUIC.Google][Web][Acceptable] + idle: [....68] [ip4][..udp] [..52.187.20.175][63507] -> [121.209.126.161][..443] [QUIC.Google][Web][Acceptable] + idle: [....69] [ip4][..udp] [..52.187.20.175][57066] -> [108.171.138.182][..443] [QUIC.GoogleServices][Web][Acceptable] + DAEMON-EVENT: [Processed: 106 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 70|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 85] + new: [....71] [ip4][..udp] [..52.187.20.175][51619] -> [.208.229.157.81][..443] + detected: [....71] [ip4][..udp] [..52.187.20.175][51619] -> [.208.229.157.81][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....70] [ip4][..udp] [..52.187.20.175][52512] -> [..196.245.61.64][..443] [QUIC.GoogleServices][Web][Acceptable] + DAEMON-EVENT: [Processed: 110 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 71|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 85] + new: [....72] [ip4][..udp] [...168.144.64.5][58703] -> [.93.100.151.221][..443] + detected: [....72] [ip4][..udp] [...168.144.64.5][58703] -> [.93.100.151.221][..443] [QUIC.PlayStore][SoftwareUpdate][Safe] + new: [....73] [ip4][..udp] [...168.144.64.5][55066] -> [...128.248.24.1][..443] + detected: [....73] [ip4][..udp] [...168.144.64.5][55066] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + new: [....74] [ip4][..udp] [...168.144.64.5][61886] -> [....65.33.51.74][..443] + detected: [....74] [ip4][..udp] [...168.144.64.5][61886] -> [....65.33.51.74][..443] [QUIC.Google][Web][Acceptable] + new: [....75] [ip4][..udp] [...168.144.64.5][65391] -> [...128.248.24.1][..443] + detected: [....75] [ip4][..udp] [...168.144.64.5][65391] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + new: [....76] [ip4][..udp] [...168.144.64.5][58832] -> [.117.148.117.30][..443] + detected: [....76] [ip4][..udp] [...168.144.64.5][58832] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....77] [ip4][..udp] [...168.144.64.5][58429] -> [....38.57.8.121][..443] + detected: [....77] [ip4][..udp] [...168.144.64.5][58429] -> [....38.57.8.121][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....71] [ip4][..udp] [..52.187.20.175][51619] -> [.208.229.157.81][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....78] [ip4][..udp] [...168.144.64.5][55479] -> [113.250.137.243][..443] + detected: [....78] [ip4][..udp] [...168.144.64.5][55479] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....73] [ip4][..udp] [...168.144.64.5][55066] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....75] [ip4][..udp] [...168.144.64.5][65391] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....72] [ip4][..udp] [...168.144.64.5][58703] -> [.93.100.151.221][..443] [QUIC.PlayStore][SoftwareUpdate][Safe] + update: [....76] [ip4][..udp] [...168.144.64.5][58832] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....74] [ip4][..udp] [...168.144.64.5][61886] -> [....65.33.51.74][..443] [QUIC.Google][Web][Acceptable] + update: [....77] [ip4][..udp] [...168.144.64.5][58429] -> [....38.57.8.121][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....79] [ip4][..udp] [...168.144.64.5][60934] -> [...128.248.24.1][..443] + detected: [....79] [ip4][..udp] [...168.144.64.5][60934] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + new: [....80] [ip4][..udp] [...168.144.64.5][59785] -> [...128.248.24.1][..443] + detected: [....80] [ip4][..udp] [...168.144.64.5][59785] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + new: [....81] [ip4][..udp] [...168.144.64.5][59327] -> [...153.98.28.78][..443] + detected: [....81] [ip4][..udp] [...168.144.64.5][59327] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + new: [....82] [ip4][..udp] [...168.144.64.5][63925] -> [...39.227.72.32][..443] + detected: [....82] [ip4][..udp] [...168.144.64.5][63925] -> [...39.227.72.32][..443] [QUIC.Google][Web][Acceptable] + update: [....79] [ip4][..udp] [...168.144.64.5][60934] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....73] [ip4][..udp] [...168.144.64.5][55066] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....75] [ip4][..udp] [...168.144.64.5][65391] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....72] [ip4][..udp] [...168.144.64.5][58703] -> [.93.100.151.221][..443] [QUIC.PlayStore][SoftwareUpdate][Safe] + update: [....76] [ip4][..udp] [...168.144.64.5][58832] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....74] [ip4][..udp] [...168.144.64.5][61886] -> [....65.33.51.74][..443] [QUIC.Google][Web][Acceptable] + update: [....78] [ip4][..udp] [...168.144.64.5][55479] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....77] [ip4][..udp] [...168.144.64.5][58429] -> [....38.57.8.121][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....83] [ip4][..udp] [...168.144.64.5][49926] -> [.103.179.40.184][..443] + detected: [....83] [ip4][..udp] [...168.144.64.5][49926] -> [.103.179.40.184][..443] [QUIC.YouTube][Media][Fun] + new: [....84] [ip4][..udp] [...168.144.64.5][56384] -> [.117.148.117.30][..443] + detected: [....84] [ip4][..udp] [...168.144.64.5][56384] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....85] [ip4][..udp] [...168.144.64.5][57398] -> [..137.238.249.2][..443] + detected: [....85] [ip4][..udp] [...168.144.64.5][57398] -> [..137.238.249.2][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....79] [ip4][..udp] [...168.144.64.5][60934] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....73] [ip4][..udp] [...168.144.64.5][55066] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....75] [ip4][..udp] [...168.144.64.5][65391] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....72] [ip4][..udp] [...168.144.64.5][58703] -> [.93.100.151.221][..443] [QUIC.PlayStore][SoftwareUpdate][Safe] + update: [....80] [ip4][..udp] [...168.144.64.5][59785] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....76] [ip4][..udp] [...168.144.64.5][58832] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....81] [ip4][..udp] [...168.144.64.5][59327] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + update: [....74] [ip4][..udp] [...168.144.64.5][61886] -> [....65.33.51.74][..443] [QUIC.Google][Web][Acceptable] + update: [....78] [ip4][..udp] [...168.144.64.5][55479] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....82] [ip4][..udp] [...168.144.64.5][63925] -> [...39.227.72.32][..443] [QUIC.Google][Web][Acceptable] + update: [....77] [ip4][..udp] [...168.144.64.5][58429] -> [....38.57.8.121][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....86] [ip4][..udp] [...168.144.64.5][64497] -> [102.194.207.179][..443] + detected: [....86] [ip4][..udp] [...168.144.64.5][64497] -> [102.194.207.179][..443] [QUIC.Google][Web][Acceptable] + idle: [....73] [ip4][..udp] [...168.144.64.5][55066] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + idle: [....75] [ip4][..udp] [...168.144.64.5][65391] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + idle: [....72] [ip4][..udp] [...168.144.64.5][58703] -> [.93.100.151.221][..443] [QUIC.PlayStore][SoftwareUpdate][Safe] + idle: [....76] [ip4][..udp] [...168.144.64.5][58832] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....74] [ip4][..udp] [...168.144.64.5][61886] -> [....65.33.51.74][..443] [QUIC.Google][Web][Acceptable] + idle: [....77] [ip4][..udp] [...168.144.64.5][58429] -> [....38.57.8.121][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....87] [ip4][..udp] [...168.144.64.5][55572] -> [.117.148.117.30][..443] + detected: [....87] [ip4][..udp] [...168.144.64.5][55572] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....88] [ip4][..udp] [...168.144.64.5][58956] -> [...128.248.24.1][..443] + detected: [....88] [ip4][..udp] [...168.144.64.5][58956] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + new: [....89] [ip4][..udp] [...168.144.64.5][54449] -> [102.194.207.179][..443] + detected: [....89] [ip4][..udp] [...168.144.64.5][54449] -> [102.194.207.179][..443] [QUIC.Google][Web][Acceptable] + idle: [....79] [ip4][..udp] [...168.144.64.5][60934] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + idle: [....78] [ip4][..udp] [...168.144.64.5][55479] -> [113.250.137.243][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....86] [ip4][..udp] [...168.144.64.5][64497] -> [102.194.207.179][..443] [QUIC.Google][Web][Acceptable] + update: [....83] [ip4][..udp] [...168.144.64.5][49926] -> [.103.179.40.184][..443] [QUIC.YouTube][Media][Fun] + update: [....85] [ip4][..udp] [...168.144.64.5][57398] -> [..137.238.249.2][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....88] [ip4][..udp] [...168.144.64.5][58956] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....84] [ip4][..udp] [...168.144.64.5][56384] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + update: [....80] [ip4][..udp] [...168.144.64.5][59785] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + update: [....81] [ip4][..udp] [...168.144.64.5][59327] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + update: [....82] [ip4][..udp] [...168.144.64.5][63925] -> [...39.227.72.32][..443] [QUIC.Google][Web][Acceptable] + update: [....87] [ip4][..udp] [...168.144.64.5][55572] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + new: [....90] [ip4][..udp] [...168.144.64.5][60342] -> [.93.100.151.221][..443] + detected: [....90] [ip4][..udp] [...168.144.64.5][60342] -> [.93.100.151.221][..443] [QUIC.YouTube][Media][Fun] + idle: [....86] [ip4][..udp] [...168.144.64.5][64497] -> [102.194.207.179][..443] [QUIC.Google][Web][Acceptable] + idle: [....83] [ip4][..udp] [...168.144.64.5][49926] -> [.103.179.40.184][..443] [QUIC.YouTube][Media][Fun] + idle: [....85] [ip4][..udp] [...168.144.64.5][57398] -> [..137.238.249.2][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....88] [ip4][..udp] [...168.144.64.5][58956] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + idle: [....89] [ip4][..udp] [...168.144.64.5][54449] -> [102.194.207.179][..443] [QUIC.Google][Web][Acceptable] + idle: [....84] [ip4][..udp] [...168.144.64.5][56384] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....80] [ip4][..udp] [...168.144.64.5][59785] -> [...128.248.24.1][..443] [QUIC.Google][Web][Acceptable] + idle: [....81] [ip4][..udp] [...168.144.64.5][59327] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + idle: [....82] [ip4][..udp] [...168.144.64.5][63925] -> [...39.227.72.32][..443] [QUIC.Google][Web][Acceptable] + idle: [....87] [ip4][..udp] [...168.144.64.5][55572] -> [.117.148.117.30][..443] [QUIC.Google][Advertisement][Acceptable] + DAEMON-EVENT: [Processed: 129 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 90|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 119] + new: [....91] [ip4][..udp] [...168.144.64.5][65186] -> [...9.65.169.252][..443] + detected: [....91] [ip4][..udp] [...168.144.64.5][65186] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + idle: [....90] [ip4][..udp] [...168.144.64.5][60342] -> [.93.100.151.221][..443] [QUIC.YouTube][Media][Fun] + new: [....92] [ip4][..udp] [...168.144.64.5][52942] -> [.93.100.151.221][..443] + detected: [....92] [ip4][..udp] [...168.144.64.5][52942] -> [.93.100.151.221][..443] [QUIC.Google][Web][Acceptable] + idle: [....91] [ip4][..udp] [...168.144.64.5][65186] -> [...9.65.169.252][..443] [QUIC.YouTube][Media][Fun] + new: [....93] [ip4][..udp] [..52.187.20.175][62114] -> [...198.74.29.79][..443] + detected: [....93] [ip4][..udp] [..52.187.20.175][62114] -> [...198.74.29.79][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....92] [ip4][..udp] [...168.144.64.5][52942] -> [.93.100.151.221][..443] [QUIC.Google][Web][Acceptable] + DAEMON-EVENT: [Processed: 135 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 93|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 119] + new: [....94] [ip4][..udp] [...168.144.64.5][55561] -> [..35.194.157.47][..443] + detected: [....94] [ip4][..udp] [...168.144.64.5][55561] -> [..35.194.157.47][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [....93] [ip4][..udp] [..52.187.20.175][62114] -> [...198.74.29.79][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....95] [ip4][..udp] [159.117.176.124][61202] -> [...198.74.29.79][..443] + detected: [....95] [ip4][..udp] [159.117.176.124][61202] -> [...198.74.29.79][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....94] [ip4][..udp] [...168.144.64.5][55561] -> [..35.194.157.47][..443] [QUIC.Google][Advertisement][Acceptable] + DAEMON-EVENT: [Processed: 140 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 95|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 119] + new: [....96] [ip4][..udp] [159.117.176.124][49521] -> [...128.248.24.1][..443] + detected: [....96] [ip4][..udp] [159.117.176.124][49521] -> [...128.248.24.1][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....95] [ip4][..udp] [159.117.176.124][61202] -> [...198.74.29.79][..443] [QUIC.GoogleServices][Web][Acceptable] + DAEMON-EVENT: [Processed: 144 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 96|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 120] + new: [....97] [ip4][..udp] [...168.144.64.5][49217] -> [185.186.183.185][..443] + detected: [....97] [ip4][..udp] [...168.144.64.5][49217] -> [185.186.183.185][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....95] [ip4][..udp] [159.117.176.124][61202] -> [...198.74.29.79][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....96] [ip4][..udp] [159.117.176.124][49521] -> [...128.248.24.1][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [....98] [ip4][..udp] [..52.187.20.175][61286] -> [...198.74.29.79][..443] + detected: [....98] [ip4][..udp] [..52.187.20.175][61286] -> [...198.74.29.79][..443] [QUIC.GoogleServices][Web][Acceptable] + update: [....97] [ip4][..udp] [...168.144.64.5][49217] -> [185.186.183.185][..443] [QUIC.GoogleServices][Web][Acceptable] + DAEMON-EVENT: [Processed: 149 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 98|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 121] + new: [....99] [ip4][..udp] [..52.187.20.175][53260] -> [102.194.207.179][..443] + detected: [....99] [ip4][..udp] [..52.187.20.175][53260] -> [102.194.207.179][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....97] [ip4][..udp] [...168.144.64.5][49217] -> [185.186.183.185][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [....98] [ip4][..udp] [..52.187.20.175][61286] -> [...198.74.29.79][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [...100] [ip4][..udp] [...168.144.64.5][50023] -> [..76.231.104.92][..443] + detected: [...100] [ip4][..udp] [...168.144.64.5][50023] -> [..76.231.104.92][..443] [QUIC.YouTube][Media][Fun] + update: [....99] [ip4][..udp] [..52.187.20.175][53260] -> [102.194.207.179][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [...101] [ip4][..udp] [...168.144.64.5][65360] -> [....65.33.51.74][..443] + detected: [...101] [ip4][..udp] [...168.144.64.5][65360] -> [....65.33.51.74][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [...100] [ip4][..udp] [...168.144.64.5][50023] -> [..76.231.104.92][..443] [QUIC.YouTube][Media][Fun] + idle: [....99] [ip4][..udp] [..52.187.20.175][53260] -> [102.194.207.179][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [...102] [ip4][..udp] [159.117.176.124][64134] -> [..207.121.63.92][..443] + detected: [...102] [ip4][..udp] [159.117.176.124][64134] -> [..207.121.63.92][..443] [QUIC.Google][Web][Acceptable] + new: [...103] [ip4][..udp] [..52.187.20.175][61484] -> [202.152.155.121][..443] + detected: [...103] [ip4][..udp] [..52.187.20.175][61484] -> [202.152.155.121][..443] [QUIC.Google][Web][Acceptable] + update: [...101] [ip4][..udp] [...168.144.64.5][65360] -> [....65.33.51.74][..443] [QUIC.Google][Advertisement][Acceptable] + new: [...104] [ip4][..udp] [159.117.176.124][51856] -> [.16.205.123.234][..443] + detected: [...104] [ip4][..udp] [159.117.176.124][51856] -> [.16.205.123.234][..443] [QUIC.WhatsAppFiles][Download][Acceptable] + idle: [...101] [ip4][..udp] [...168.144.64.5][65360] -> [....65.33.51.74][..443] [QUIC.Google][Advertisement][Acceptable] + DAEMON-EVENT: [Processed: 164 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 104|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 123] + new: [...105] [ip4][..udp] [...168.144.64.5][54120] -> [...153.98.28.78][..443] + detected: [...105] [ip4][..udp] [...168.144.64.5][54120] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + idle: [...102] [ip4][..udp] [159.117.176.124][64134] -> [..207.121.63.92][..443] [QUIC.Google][Web][Acceptable] + idle: [...103] [ip4][..udp] [..52.187.20.175][61484] -> [202.152.155.121][..443] [QUIC.Google][Web][Acceptable] + idle: [...104] [ip4][..udp] [159.117.176.124][51856] -> [.16.205.123.234][..443] [QUIC.WhatsAppFiles][Download][Acceptable] + DAEMON-EVENT: [Processed: 165 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 105|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 123] + new: [...106] [ip4][..udp] [...168.144.64.5][52396] -> [...153.98.28.78][..443] + detected: [...106] [ip4][..udp] [...168.144.64.5][52396] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + idle: [...105] [ip4][..udp] [...168.144.64.5][54120] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + DAEMON-EVENT: [Processed: 166 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 106|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 123] + new: [...107] [ip4][..udp] [...168.144.64.5][50224] -> [....126.3.93.89][..443] + detected: [...107] [ip4][..udp] [...168.144.64.5][50224] -> [....126.3.93.89][..443] [QUIC.GoogleServices][Web][Acceptable] + new: [...108] [ip4][..udp] [...168.144.64.5][62719] -> [..31.219.210.96][..443] + detected: [...108] [ip4][..udp] [...168.144.64.5][62719] -> [..31.219.210.96][..443] [QUIC.Google][Web][Acceptable] + idle: [...106] [ip4][..udp] [...168.144.64.5][52396] -> [...153.98.28.78][..443] [QUIC.DoH_DoT][Network][Fun] + new: [...109] [ip4][..udp] [...168.144.64.5][58351] -> [.193.68.169.100][..443] + detected: [...109] [ip4][..udp] [...168.144.64.5][58351] -> [.193.68.169.100][..443] [QUIC.Google][Web][Acceptable] + new: [...110] [ip4][..udp] [...168.144.64.5][57319] -> [....7.71.118.27][..443] + detected: [...110] [ip4][..udp] [...168.144.64.5][57319] -> [....7.71.118.27][..443] [QUIC.PlayStore][SoftwareUpdate][Safe] + new: [...111] [ip4][..udp] [...168.144.64.5][60919] -> [.53.101.228.200][..443] + detected: [...111] [ip4][..udp] [...168.144.64.5][60919] -> [.53.101.228.200][..443] [QUIC.Google][Web][Acceptable] + new: [...112] [ip4][..udp] [...168.144.64.5][50423] -> [.144.237.113.58][..443] + detected: [...112] [ip4][..udp] [...168.144.64.5][50423] -> [.144.237.113.58][..443] [QUIC.Google][Web][Acceptable] + idle: [...110] [ip4][..udp] [...168.144.64.5][57319] -> [....7.71.118.27][..443] [QUIC.PlayStore][SoftwareUpdate][Safe] + idle: [...107] [ip4][..udp] [...168.144.64.5][50224] -> [....126.3.93.89][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [...108] [ip4][..udp] [...168.144.64.5][62719] -> [..31.219.210.96][..443] [QUIC.Google][Web][Acceptable] + idle: [...109] [ip4][..udp] [...168.144.64.5][58351] -> [.193.68.169.100][..443] [QUIC.Google][Web][Acceptable] + idle: [...111] [ip4][..udp] [...168.144.64.5][60919] -> [.53.101.228.200][..443] [QUIC.Google][Web][Acceptable] + DAEMON-EVENT: [Processed: 178 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 112|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 123] + new: [...113] [ip4][..udp] [...168.144.64.5][59206] -> [..76.231.104.92][..443] + detected: [...113] [ip4][..udp] [...168.144.64.5][59206] -> [..76.231.104.92][..443] [QUIC.Google][Web][Acceptable] + idle: [...113] [ip4][..udp] [...168.144.64.5][59206] -> [..76.231.104.92][..443] [QUIC.Google][Web][Acceptable] + idle: [...112] [ip4][..udp] [...168.144.64.5][50423] -> [.144.237.113.58][..443] [QUIC.Google][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic_interop_V.pcapng.out b/test/results/flow-info/quic_interop_V.pcapng.out new file mode 100644 index 000000000..796226c5d --- /dev/null +++ b/test/results/flow-info/quic_interop_V.pcapng.out @@ -0,0 +1,319 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][38077] -> [.........2400:8902::f03c:91ff:fe69:a454][..443] + detected: [.....1] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][38077] -> [.........2400:8902::f03c:91ff:fe69:a454][..443] [QUIC][Web][Acceptable] + new: [.....2] [ip4][..udp] [..192.168.1.128][37643] -> [..71.202.41.169][..443] + detected: [.....2] [ip4][..udp] [..192.168.1.128][37643] -> [..71.202.41.169][..443] [QUIC][Web][Acceptable] + new: [.....3] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][37876] -> [.2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab][..443] + detected: [.....3] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][37876] -> [.2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab][..443] [QUIC][Web][Acceptable] + new: [.....4] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][34442] -> [.2001:4800:7817:101:be76:4eff:fe04:631d][..443] + detected: [.....4] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][34442] -> [.2001:4800:7817:101:be76:4eff:fe04:631d][..443] [QUIC][Web][Acceptable] + new: [.....5] [ip4][..udp] [..192.168.1.128][47010] -> [...3.121.242.54][..443] + detected: [.....5] [ip4][..udp] [..192.168.1.128][47010] -> [...3.121.242.54][..443] [QUIC.AmazonAWS][Cloud][Acceptable] + new: [.....6] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][48707] -> [..2a00:ac00:4000:400:2e0:4cff:fe68:199d][..443] + detected: [.....6] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][48707] -> [..2a00:ac00:4000:400:2e0:4cff:fe68:199d][..443] [QUIC][Web][Acceptable] + new: [.....7] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][60346] -> [..................2001:bc8:47a4:1c25::1][..443] + detected: [.....7] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][60346] -> [..................2001:bc8:47a4:1c25::1][..443] [QUIC][Web][Acceptable] + new: [.....8] [ip4][..udp] [..192.168.1.128][46576] -> [..40.112.191.60][.4433] + detected: [.....8] [ip4][..udp] [..192.168.1.128][46576] -> [..40.112.191.60][.4433] [QUIC.Azure][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....9] [ip4][..udp] [..192.168.1.128][46334] -> [..40.112.191.60][..443] + detected: [.....9] [ip4][..udp] [..192.168.1.128][46334] -> [..40.112.191.60][..443] [QUIC.Azure][Cloud][Acceptable] + new: [....10] [ip4][..udp] [..192.168.1.128][38366] -> [.202.238.220.92][.4433] + detected: [....10] [ip4][..udp] [..192.168.1.128][38366] -> [.202.238.220.92][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....11] [ip4][.icmp] [...3.121.242.54] -> [..192.168.1.128] + detected: [....11] [ip4][.icmp] [...3.121.242.54] -> [..192.168.1.128] [ICMP][Network][Acceptable] + new: [....12] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][32957] -> [.................2606:4700:10::6816:826][.4433] + detected: [....12] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][32957] -> [.................2606:4700:10::6816:826][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....13] [ip4][..udp] [..192.168.1.128][60784] -> [...3.121.242.54][.4433] + detected: [....13] [ip4][..udp] [..192.168.1.128][60784] -> [...3.121.242.54][.4433] [QUIC.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + new: [....14] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][51185] -> [..................2001:bc8:47a4:1c25::1][.4433] + detected: [....14] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][51185] -> [..................2001:bc8:47a4:1c25::1][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....15] [ip4][..udp] [..192.168.1.128][34511] -> [.131.159.24.198][..443] + detected: [....15] [ip4][..udp] [..192.168.1.128][34511] -> [.131.159.24.198][..443] [QUIC][Web][Acceptable] + new: [....16] [ip4][..udp] [..192.168.1.128][51887] -> [..51.158.105.98][..443] + detected: [....16] [ip4][..udp] [..192.168.1.128][51887] -> [..51.158.105.98][..443] [QUIC][Web][Acceptable] + new: [....17] [ip4][..udp] [..192.168.1.128][43475] -> [..18.189.84.245][.4433] + detected: [....17] [ip4][..udp] [..192.168.1.128][43475] -> [..18.189.84.245][.4433] [QUIC.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + new: [....18] [ip4][..udp] [..192.168.1.128][49151] -> [133.242.206.244][.4433] + detected: [....18] [ip4][..udp] [..192.168.1.128][49151] -> [133.242.206.244][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....19] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][39945] -> [.2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab][.4433] + detected: [....19] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][39945] -> [.2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....20] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][39624] -> [.....2001:19f0:5:c21:5400:1ff:fe33:3b96][..443] + detected: [....20] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][39624] -> [.....2001:19f0:5:c21:5400:1ff:fe33:3b96][..443] [QUIC][Web][Acceptable] + new: [....21] [ip4][..udp] [..192.168.1.128][59171] -> [..193.190.10.98][.4433] + detected: [....21] [ip4][..udp] [..192.168.1.128][59171] -> [..193.190.10.98][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....22] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][35643] -> [......................2001:19f0:4:34::1][.4433] + detected: [....22] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][35643] -> [......................2001:19f0:4:34::1][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....23] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][56213] -> [.........2400:8902::f03c:91ff:fe69:a454][.4433] + detected: [....23] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][56213] -> [.........2400:8902::f03c:91ff:fe69:a454][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....24] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][52080] -> [2600:1f18:2310:d230:5103:7d9e:7d75:374f][.4434] + detected: [....24] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][52080] -> [2600:1f18:2310:d230:5103:7d9e:7d75:374f][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....25] [ip4][..udp] [..192.168.1.128][37661] -> [..71.202.41.169][.4433] + detected: [....25] [ip4][..udp] [..192.168.1.128][37661] -> [..71.202.41.169][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....26] [ip4][..udp] [..192.168.1.128][37784] -> [..140.227.52.92][..443] + detected: [....26] [ip4][..udp] [..192.168.1.128][37784] -> [..140.227.52.92][..443] [QUIC][Web][Acceptable] + new: [....27] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][60983] -> [..2a00:ac00:4000:400:2e0:4cff:fe68:199d][.4433] + detected: [....27] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][60983] -> [..2a00:ac00:4000:400:2e0:4cff:fe68:199d][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....28] [ip4][..udp] [..192.168.1.128][49658] -> [..193.190.10.98][..443] + detected: [....28] [ip4][..udp] [..192.168.1.128][49658] -> [..193.190.10.98][..443] [QUIC][Web][Acceptable] + new: [....29] [ip4][..udp] [..192.168.1.128][41587] -> [.131.159.24.198][.4433] + detected: [....29] [ip4][..udp] [..192.168.1.128][41587] -> [.131.159.24.198][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....30] [ip4][.icmp] [..51.158.105.98] -> [..192.168.1.128] + detected: [....30] [ip4][.icmp] [..51.158.105.98] -> [..192.168.1.128] [ICMP][Network][Acceptable] + new: [....31] [ip4][..udp] [..192.168.1.128][38933] -> [.202.238.220.92][..443] + detected: [....31] [ip4][..udp] [..192.168.1.128][38933] -> [.202.238.220.92][..443] [QUIC][Web][Acceptable] + new: [....32] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][52271] -> [..2a00:ac00:4000:400:2e0:4cff:fe68:199d][.4434] + detected: [....32] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][52271] -> [..2a00:ac00:4000:400:2e0:4cff:fe68:199d][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....33] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][51040] -> [............2604:a880:800:a1::1279:3001][.4433] + detected: [....33] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][51040] -> [............2604:a880:800:a1::1279:3001][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....34] [ip4][.icmp] [.131.159.24.198] -> [..192.168.1.128] + detected: [....34] [ip4][.icmp] [.131.159.24.198] -> [..192.168.1.128] [ICMP][Network][Acceptable] + new: [....35] [ip4][..udp] [..192.168.1.128][45250] -> [..51.158.105.98][.4433] + detected: [....35] [ip4][..udp] [..192.168.1.128][45250] -> [..51.158.105.98][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....36] [ip4][..udp] [..192.168.1.128][42456] -> [133.242.206.244][..443] + detected: [....36] [ip4][..udp] [..192.168.1.128][42456] -> [133.242.206.244][..443] [QUIC][Web][Acceptable] + new: [....37] [ip6][icmp6] [.2001:4800:7817:101:be76:4eff:fe04:631d] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] + detected: [....37] [ip6][icmp6] [.2001:4800:7817:101:be76:4eff:fe04:631d] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] [ICMPV6][Network][Acceptable] + new: [....38] [ip4][..udp] [..192.168.1.128][50289] -> [..71.202.41.169][.4434] + detected: [....38] [ip4][..udp] [..192.168.1.128][50289] -> [..71.202.41.169][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....39] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][49270] -> [..................2001:bc8:47a4:1c25::1][.4434] + detected: [....39] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][49270] -> [..................2001:bc8:47a4:1c25::1][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....40] [ip4][..udp] [..192.168.1.128][34903] -> [..18.189.84.245][..443] + detected: [....40] [ip4][..udp] [..192.168.1.128][34903] -> [..18.189.84.245][..443] [QUIC.AmazonAWS][Cloud][Acceptable] + new: [....41] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][45852] -> [.....2001:19f0:5:c21:5400:1ff:fe33:3b96][.4433] + detected: [....41] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][45852] -> [.....2001:19f0:5:c21:5400:1ff:fe33:3b96][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....42] [ip4][..udp] [..192.168.1.128][45855] -> [133.242.206.244][.4434] + detected: [....42] [ip4][..udp] [..192.168.1.128][45855] -> [133.242.206.244][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....43] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][46353] -> [.................2606:4700:10::6816:826][..443] + detected: [....43] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][46353] -> [.................2606:4700:10::6816:826][..443] [QUIC][Web][Acceptable] + new: [....44] [ip4][..udp] [..192.168.1.128][53791] -> [..40.112.191.60][.4434] + detected: [....44] [ip4][..udp] [..192.168.1.128][53791] -> [..40.112.191.60][.4434] [QUIC.Azure][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + new: [....45] [ip4][..udp] [..192.168.1.128][59515] -> [..193.190.10.98][.4434] + detected: [....45] [ip4][..udp] [..192.168.1.128][59515] -> [..193.190.10.98][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....46] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][49788] -> [.2001:4800:7817:101:be76:4eff:fe04:631d][.4434] + detected: [....46] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][49788] -> [.2001:4800:7817:101:be76:4eff:fe04:631d][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....47] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][46242] -> [2600:1f18:2310:d230:5103:7d9e:7d75:374f][..443] + detected: [....47] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][46242] -> [2600:1f18:2310:d230:5103:7d9e:7d75:374f][..443] [QUIC][Web][Acceptable] + new: [....48] [ip4][..udp] [..192.168.1.128][44619] -> [..140.227.52.92][.4433] + detected: [....48] [ip4][..udp] [..192.168.1.128][44619] -> [..140.227.52.92][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....49] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][44243] -> [......................2001:19f0:4:34::1][.4434] + detected: [....49] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][44243] -> [......................2001:19f0:4:34::1][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....50] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][38394] -> [2600:1f18:2310:d230:5103:7d9e:7d75:374f][.4433] + detected: [....50] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][38394] -> [2600:1f18:2310:d230:5103:7d9e:7d75:374f][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....51] [ip6][icmp6] [.....2001:19f0:5:c21:5400:1ff:fe33:3b96] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] + detected: [....51] [ip6][icmp6] [.....2001:19f0:5:c21:5400:1ff:fe33:3b96] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] [ICMPV6][Network][Acceptable] + new: [....52] [ip4][..udp] [..192.168.1.128][35263] -> [.202.238.220.92][.4434] + detected: [....52] [ip4][..udp] [..192.168.1.128][35263] -> [.202.238.220.92][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....53] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][53760] -> [............2604:a880:800:a1::1279:3001][.4434] + detected: [....53] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][53760] -> [............2604:a880:800:a1::1279:3001][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....54] [ip4][..udp] [..192.168.1.128][54570] -> [..18.189.84.245][.4434] + detected: [....54] [ip4][..udp] [..192.168.1.128][54570] -> [..18.189.84.245][.4434] [QUIC.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + new: [....55] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][44924] -> [.........2400:8902::f03c:91ff:fe69:a454][.4434] + detected: [....55] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][44924] -> [.........2400:8902::f03c:91ff:fe69:a454][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....56] [ip4][..udp] [..192.168.1.128][39975] -> [.138.91.188.147][..443] + detected: [....56] [ip4][..udp] [..192.168.1.128][39975] -> [.138.91.188.147][..443] [QUIC.Azure][Cloud][Acceptable] + new: [....57] [ip4][..udp] [..192.168.1.128][50705] -> [.138.91.188.147][.4434] + detected: [....57] [ip4][..udp] [..192.168.1.128][50705] -> [.138.91.188.147][.4434] [QUIC.Azure][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + new: [....58] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][41857] -> [.................2606:4700:10::6816:826][.4434] + detected: [....58] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][41857] -> [.................2606:4700:10::6816:826][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....59] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][56073] -> [............2604:a880:800:a1::1279:3001][..443] + detected: [....59] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][56073] -> [............2604:a880:800:a1::1279:3001][..443] [QUIC][Web][Acceptable] + new: [....60] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][43645] -> [......................2001:19f0:4:34::1][..443] + detected: [....60] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][43645] -> [......................2001:19f0:4:34::1][..443] [QUIC][Web][Acceptable] + new: [....61] [ip4][..udp] [..192.168.1.128][48644] -> [.131.159.24.198][.4434] + detected: [....61] [ip4][..udp] [..192.168.1.128][48644] -> [.131.159.24.198][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....62] [ip4][..udp] [..192.168.1.128][42468] -> [.138.91.188.147][.4433] + detected: [....62] [ip4][..udp] [..192.168.1.128][42468] -> [.138.91.188.147][.4433] [QUIC.Azure][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + new: [....63] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][38689] -> [.....2001:19f0:5:c21:5400:1ff:fe33:3b96][.4434] + detected: [....63] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][38689] -> [.....2001:19f0:5:c21:5400:1ff:fe33:3b96][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....64] [ip4][..udp] [..192.168.1.128][53402] -> [...3.121.242.54][.4434] + detected: [....64] [ip4][..udp] [..192.168.1.128][53402] -> [...3.121.242.54][.4434] [QUIC.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + new: [....65] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][53140] -> [.2001:4800:7817:101:be76:4eff:fe04:631d][.4433] + detected: [....65] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][53140] -> [.2001:4800:7817:101:be76:4eff:fe04:631d][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....66] [ip4][..udp] [..192.168.1.128][57926] -> [..140.227.52.92][.4434] + detected: [....66] [ip4][..udp] [..192.168.1.128][57926] -> [..140.227.52.92][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....67] [ip6][icmp6] [.........2400:8902::f03c:91ff:fe69:a454] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] + detected: [....67] [ip6][icmp6] [.........2400:8902::f03c:91ff:fe69:a454] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] [ICMPV6][Network][Acceptable] + new: [....68] [ip6][icmp6] [......................2001:19f0:4:34::1] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] + detected: [....68] [ip6][icmp6] [......................2001:19f0:4:34::1] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] [ICMPV6][Network][Acceptable] + new: [....69] [ip4][..udp] [..192.168.1.128][43735] -> [..51.158.105.98][.4434] + detected: [....69] [ip4][..udp] [..192.168.1.128][43735] -> [..51.158.105.98][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....70] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][44605] -> [.2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab][.4434] + detected: [....70] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][44605] -> [.2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + new: [....71] [ip4][.icmp] [.202.238.220.92] -> [..192.168.1.128] + detected: [....71] [ip4][.icmp] [.202.238.220.92] -> [..192.168.1.128] [ICMP][Network][Acceptable] + new: [....72] [ip4][.icmp] [..18.189.84.245] -> [..192.168.1.128] + detected: [....72] [ip4][.icmp] [..18.189.84.245] -> [..192.168.1.128] [ICMP][Network][Acceptable] + new: [....73] [ip6][icmp6] [............2604:a880:800:a1::1279:3001] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] + detected: [....73] [ip6][icmp6] [............2604:a880:800:a1::1279:3001] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] [ICMPV6][Network][Acceptable] + new: [....74] [ip4][.icmp] [..192.168.1.128] -> [..40.112.191.60] + detected: [....74] [ip4][.icmp] [..192.168.1.128] -> [..40.112.191.60] [ICMP][Network][Acceptable] + new: [....75] [ip4][.icmp] [133.242.206.244] -> [..192.168.1.128] + detected: [....75] [ip4][.icmp] [133.242.206.244] -> [..192.168.1.128] [ICMP][Network][Acceptable] + new: [....76] [ip4][.icmp] [..192.168.1.128] -> [..140.227.52.92] + detected: [....76] [ip4][.icmp] [..192.168.1.128] -> [..140.227.52.92] [ICMP][Network][Acceptable] + new: [....77] [ip4][.icmp] [..192.168.1.128] -> [.138.91.188.147] + detected: [....77] [ip4][.icmp] [..192.168.1.128] -> [.138.91.188.147] [ICMP][Network][Acceptable] + idle: [....21] [ip4][..udp] [..192.168.1.128][59171] -> [..193.190.10.98][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....8] [ip4][..udp] [..192.168.1.128][46576] -> [..40.112.191.60][.4433] [QUIC.Azure][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....34] [ip4][.icmp] [.131.159.24.198] -> [..192.168.1.128] [ICMP][Network][Acceptable] + idle: [.....1] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][38077] -> [.........2400:8902::f03c:91ff:fe69:a454][..443] [QUIC][Web][Acceptable] + idle: [....46] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][49788] -> [.2001:4800:7817:101:be76:4eff:fe04:631d][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....13] [ip4][..udp] [..192.168.1.128][60784] -> [...3.121.242.54][.4433] [QUIC.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....38] [ip4][..udp] [..192.168.1.128][50289] -> [..71.202.41.169][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....15] [ip4][..udp] [..192.168.1.128][34511] -> [.131.159.24.198][..443] [QUIC][Web][Acceptable] + idle: [....74] [ip4][.icmp] [..192.168.1.128] -> [..40.112.191.60] [ICMP][Network][Acceptable] + idle: [....17] [ip4][..udp] [..192.168.1.128][43475] -> [..18.189.84.245][.4433] [QUIC.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....35] [ip4][..udp] [..192.168.1.128][45250] -> [..51.158.105.98][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....73] [ip6][icmp6] [............2604:a880:800:a1::1279:3001] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] [ICMPV6][Network][Acceptable] + idle: [....45] [ip4][..udp] [..192.168.1.128][59515] -> [..193.190.10.98][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....31] [ip4][..udp] [..192.168.1.128][38933] -> [.202.238.220.92][..443] [QUIC][Web][Acceptable] + idle: [....33] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][51040] -> [............2604:a880:800:a1::1279:3001][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....26] [ip4][..udp] [..192.168.1.128][37784] -> [..140.227.52.92][..443] [QUIC][Web][Acceptable] + idle: [....11] [ip4][.icmp] [...3.121.242.54] -> [..192.168.1.128] [ICMP][Network][Acceptable] + idle: [....43] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][46353] -> [.................2606:4700:10::6816:826][..443] [QUIC][Web][Acceptable] + idle: [....67] [ip6][icmp6] [.........2400:8902::f03c:91ff:fe69:a454] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] [ICMPV6][Network][Acceptable] + idle: [....19] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][39945] -> [.2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....60] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][43645] -> [......................2001:19f0:4:34::1][..443] [QUIC][Web][Acceptable] + idle: [....56] [ip4][..udp] [..192.168.1.128][39975] -> [.138.91.188.147][..443] [QUIC.Azure][Cloud][Acceptable] + idle: [.....3] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][37876] -> [.2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab][..443] [QUIC][Web][Acceptable] + idle: [....22] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][35643] -> [......................2001:19f0:4:34::1][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....32] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][52271] -> [..2a00:ac00:4000:400:2e0:4cff:fe68:199d][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....52] [ip4][..udp] [..192.168.1.128][35263] -> [.202.238.220.92][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....41] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][45852] -> [.....2001:19f0:5:c21:5400:1ff:fe33:3b96][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....55] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][44924] -> [.........2400:8902::f03c:91ff:fe69:a454][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....20] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][39624] -> [.....2001:19f0:5:c21:5400:1ff:fe33:3b96][..443] [QUIC][Web][Acceptable] + idle: [....36] [ip4][..udp] [..192.168.1.128][42456] -> [133.242.206.244][..443] [QUIC][Web][Acceptable] + idle: [....69] [ip4][..udp] [..192.168.1.128][43735] -> [..51.158.105.98][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....5] [ip4][..udp] [..192.168.1.128][47010] -> [...3.121.242.54][..443] [QUIC.AmazonAWS][Cloud][Acceptable] + idle: [....75] [ip4][.icmp] [133.242.206.244] -> [..192.168.1.128] [ICMP][Network][Acceptable] + idle: [....28] [ip4][..udp] [..192.168.1.128][49658] -> [..193.190.10.98][..443] [QUIC][Web][Acceptable] + idle: [.....7] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][60346] -> [..................2001:bc8:47a4:1c25::1][..443] [QUIC][Web][Acceptable] + idle: [....16] [ip4][..udp] [..192.168.1.128][51887] -> [..51.158.105.98][..443] [QUIC][Web][Acceptable] + idle: [....62] [ip4][..udp] [..192.168.1.128][42468] -> [.138.91.188.147][.4433] [QUIC.Azure][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....57] [ip4][..udp] [..192.168.1.128][50705] -> [.138.91.188.147][.4434] [QUIC.Azure][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....64] [ip4][..udp] [..192.168.1.128][53402] -> [...3.121.242.54][.4434] [QUIC.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....48] [ip4][..udp] [..192.168.1.128][44619] -> [..140.227.52.92][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....29] [ip4][..udp] [..192.168.1.128][41587] -> [.131.159.24.198][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....49] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][44243] -> [......................2001:19f0:4:34::1][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....77] [ip4][.icmp] [..192.168.1.128] -> [.138.91.188.147] [ICMP][Network][Acceptable] + idle: [....76] [ip4][.icmp] [..192.168.1.128] -> [..140.227.52.92] [ICMP][Network][Acceptable] + idle: [....53] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][53760] -> [............2604:a880:800:a1::1279:3001][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....70] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][44605] -> [.2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....54] [ip4][..udp] [..192.168.1.128][54570] -> [..18.189.84.245][.4434] [QUIC.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....44] [ip4][..udp] [..192.168.1.128][53791] -> [..40.112.191.60][.4434] [QUIC.Azure][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....27] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][60983] -> [..2a00:ac00:4000:400:2e0:4cff:fe68:199d][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....18] [ip4][..udp] [..192.168.1.128][49151] -> [133.242.206.244][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....37] [ip6][icmp6] [.2001:4800:7817:101:be76:4eff:fe04:631d] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] [ICMPV6][Network][Acceptable] + idle: [.....4] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][34442] -> [.2001:4800:7817:101:be76:4eff:fe04:631d][..443] [QUIC][Web][Acceptable] + idle: [.....6] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][48707] -> [..2a00:ac00:4000:400:2e0:4cff:fe68:199d][..443] [QUIC][Web][Acceptable] + idle: [....12] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][32957] -> [.................2606:4700:10::6816:826][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....24] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][52080] -> [2600:1f18:2310:d230:5103:7d9e:7d75:374f][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....65] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][53140] -> [.2001:4800:7817:101:be76:4eff:fe04:631d][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....59] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][56073] -> [............2604:a880:800:a1::1279:3001][..443] [QUIC][Web][Acceptable] + idle: [....72] [ip4][.icmp] [..18.189.84.245] -> [..192.168.1.128] [ICMP][Network][Acceptable] + idle: [....68] [ip6][icmp6] [......................2001:19f0:4:34::1] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] [ICMPV6][Network][Acceptable] + idle: [....51] [ip6][icmp6] [.....2001:19f0:5:c21:5400:1ff:fe33:3b96] -> [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d] [ICMPV6][Network][Acceptable] + idle: [....47] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][46242] -> [2600:1f18:2310:d230:5103:7d9e:7d75:374f][..443] [QUIC][Web][Acceptable] + idle: [....63] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][38689] -> [.....2001:19f0:5:c21:5400:1ff:fe33:3b96][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....10] [ip4][..udp] [..192.168.1.128][38366] -> [.202.238.220.92][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....23] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][56213] -> [.........2400:8902::f03c:91ff:fe69:a454][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....30] [ip4][.icmp] [..51.158.105.98] -> [..192.168.1.128] [ICMP][Network][Acceptable] + idle: [....14] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][51185] -> [..................2001:bc8:47a4:1c25::1][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....25] [ip4][..udp] [..192.168.1.128][37661] -> [..71.202.41.169][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....71] [ip4][.icmp] [.202.238.220.92] -> [..192.168.1.128] [ICMP][Network][Acceptable] + idle: [....50] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][38394] -> [2600:1f18:2310:d230:5103:7d9e:7d75:374f][.4433] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....61] [ip4][..udp] [..192.168.1.128][48644] -> [.131.159.24.198][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....9] [ip4][..udp] [..192.168.1.128][46334] -> [..40.112.191.60][..443] [QUIC.Azure][Cloud][Acceptable] + idle: [....39] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][49270] -> [..................2001:bc8:47a4:1c25::1][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....42] [ip4][..udp] [..192.168.1.128][45855] -> [133.242.206.244][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....58] [ip6][..udp] [..2001:b07:ac9:d5ae:a4d3:fe47:691e:807d][41857] -> [.................2606:4700:10::6816:826][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....2] [ip4][..udp] [..192.168.1.128][37643] -> [..71.202.41.169][..443] [QUIC][Web][Acceptable] + idle: [....66] [ip4][..udp] [..192.168.1.128][57926] -> [..140.227.52.92][.4434] [QUIC][Web][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....40] [ip4][..udp] [..192.168.1.128][34903] -> [..18.189.84.245][..443] [QUIC.AmazonAWS][Cloud][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic_q39.pcap.out b/test/results/flow-info/quic_q39.pcap.out new file mode 100644 index 000000000..a77c5153f --- /dev/null +++ b/test/results/flow-info/quic_q39.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.170.216.16.209][38620] -> [.21.157.183.227][..443] + detected: [.....1] [ip4][..udp] [.170.216.16.209][38620] -> [.21.157.183.227][..443] [QUIC.YouTube][Media][Fun] + analyse: [.....1] [ip4][..udp] [.170.216.16.209][38620] -> [.21.157.183.227][..443] [QUIC.YouTube][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 6.515| 0.578| 1.532] + [IAT(c->s)...: 0.001| 6.185| 0.609| 1.508][IAT(s->c)...: 0.000| 6.515| 0.548| 1.553] + [PKTLEN(c->s): 83.000|1392.000| 940.600| 575.500][PKTLEN(s->c): 60.000|1392.000| 171.900| 320.000] + [BINS(c->s)..: 0,4,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,9,0,0,0,0,0] + [BINS(s->c)..: 4,10,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0] + idle: [.....1] [ip4][..udp] [.170.216.16.209][38620] -> [.21.157.183.227][..443] [QUIC.YouTube][Media][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic_q43.pcap.out b/test/results/flow-info/quic_q43.pcap.out new file mode 100644 index 000000000..155c00c8f --- /dev/null +++ b/test/results/flow-info/quic_q43.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..51.120.20.202][49241] -> [..72.119.217.29][..443] + detected: [.....1] [ip4][..udp] [..51.120.20.202][49241] -> [..72.119.217.29][..443] [QUIC.DoH_DoT][Network][Fun] + idle: [.....1] [ip4][..udp] [..51.120.20.202][49241] -> [..72.119.217.29][..443] [QUIC.DoH_DoT][Network][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic_q46.pcap.out b/test/results/flow-info/quic_q46.pcap.out new file mode 100644 index 000000000..4e76105cc --- /dev/null +++ b/test/results/flow-info/quic_q46.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..172.29.42.236][38292] -> [.153.20.183.203][..443] + detected: [.....1] [ip4][..udp] [..172.29.42.236][38292] -> [.153.20.183.203][..443] [QUIC.Google][Web][Acceptable] + idle: [.....1] [ip4][..udp] [..172.29.42.236][38292] -> [.153.20.183.203][..443] [QUIC.Google][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic_q46_b.pcap.out b/test/results/flow-info/quic_q46_b.pcap.out new file mode 100644 index 000000000..015ce6680 --- /dev/null +++ b/test/results/flow-info/quic_q46_b.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..172.27.69.216][45530] -> [.110.231.134.35][..443] + detected: [.....1] [ip4][..udp] [..172.27.69.216][45530] -> [.110.231.134.35][..443] [QUIC.YouTubeUpload][Media][Fun] + idle: [.....1] [ip4][..udp] [..172.27.69.216][45530] -> [.110.231.134.35][..443] [QUIC.YouTubeUpload][Media][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic_q50.pcap.out b/test/results/flow-info/quic_q50.pcap.out new file mode 100644 index 000000000..a7798b3b8 --- /dev/null +++ b/test/results/flow-info/quic_q50.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [248.144.129.147][39203] -> [184.151.193.237][..443] + detected: [.....1] [ip4][..udp] [248.144.129.147][39203] -> [184.151.193.237][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [.....1] [ip4][..udp] [248.144.129.147][39203] -> [184.151.193.237][..443] [QUIC.GoogleServices][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic_t50.pcap.out b/test/results/flow-info/quic_t50.pcap.out new file mode 100644 index 000000000..1800e3976 --- /dev/null +++ b/test/results/flow-info/quic_t50.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.40.154.127.200][49836] -> [166.240.188.209][..443] + detected: [.....1] [ip4][..udp] [.40.154.127.200][49836] -> [166.240.188.209][..443] [QUIC.GoogleServices][Web][Acceptable] + idle: [.....1] [ip4][..udp] [.40.154.127.200][49836] -> [166.240.188.209][..443] [QUIC.GoogleServices][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quic_t51.pcap.out b/test/results/flow-info/quic_t51.pcap.out new file mode 100644 index 000000000..a119f0396 --- /dev/null +++ b/test/results/flow-info/quic_t51.pcap.out @@ -0,0 +1,15 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [187.227.136.152][55356] -> [.211.247.147.90][..443] + detected: [.....1] [ip4][..udp] [187.227.136.152][55356] -> [.211.247.147.90][..443] [QUIC.Google][Web][Acceptable] + analyse: [.....1] [ip4][..udp] [187.227.136.152][55356] -> [.211.247.147.90][..443] [QUIC.Google][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 19.583| 2.165| 5.210] + [IAT(c->s)...: 0.002| 19.472| 2.583| 5.571][IAT(s->c)...: 0.000| 19.583| 1.863| 4.910] + [PKTLEN(c->s): 75.000|1392.000| 375.300| 484.200][PKTLEN(s->c): 67.000|1392.000| 510.200| 504.700] + [BINS(c->s)..: 0,8,1,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,1,0,0,0,1,1,0,0,0,0,1,0,0,0,0,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,3,0,0,0,0,0] + update: [.....1] [ip4][..udp] [187.227.136.152][55356] -> [.211.247.147.90][..443] [QUIC.Google][Web][Acceptable] + idle: [.....1] [ip4][..udp] [187.227.136.152][55356] -> [.211.247.147.90][..443] [QUIC.Google][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/quickplay.pcap.out b/test/results/flow-info/quickplay.pcap.out new file mode 100644 index 000000000..fcdf76245 --- /dev/null +++ b/test/results/flow-info/quickplay.pcap.out @@ -0,0 +1,83 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..10.54.169.250][50668] -> [...120.28.35.41][...80] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [..10.54.169.250][50668] -> [...120.28.35.41][...80] [HTTP][Streaming][Acceptable] + new: [.....2] [ip4][..tcp] [..10.54.169.250][50669] -> [...120.28.35.41][...80] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [..10.54.169.250][50669] -> [...120.28.35.41][...80] [HTTP][Streaming][Acceptable] + new: [.....3] [ip4][..tcp] [..10.54.169.250][33064] -> [....120.28.5.18][...80] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [..10.54.169.250][33064] -> [....120.28.5.18][...80] [HTTP][Streaming][Acceptable] + new: [.....4] [ip4][..tcp] [..10.54.169.250][52285] -> [..173.252.74.22][...80] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [..10.54.169.250][52285] -> [..173.252.74.22][...80] [HTTP.Facebook][SocialNetwork][Fun] + new: [.....5] [ip4][..tcp] [..10.54.169.250][52288] -> [..173.252.74.22][...80] [MIDSTREAM] + detected: [.....5] [ip4][..tcp] [..10.54.169.250][52288] -> [..173.252.74.22][...80] [HTTP.Facebook][SocialNetwork][Fun] + new: [.....6] [ip4][..tcp] [..10.54.169.250][33277] -> [..120.28.26.231][...80] [MIDSTREAM] + detected: [.....6] [ip4][..tcp] [..10.54.169.250][33277] -> [..120.28.26.231][...80] [HTTP.Google][Web][Acceptable] + new: [.....7] [ip4][..tcp] [..10.54.169.250][44793] -> [....31.13.68.49][...80] [MIDSTREAM] + detected: [.....7] [ip4][..tcp] [..10.54.169.250][44793] -> [....31.13.68.49][...80] [HTTP.Facebook][SocialNetwork][Fun] + new: [.....8] [ip4][..tcp] [..10.54.169.250][44256] -> [....120.28.5.41][...80] [MIDSTREAM] + detected: [.....8] [ip4][..tcp] [..10.54.169.250][44256] -> [....120.28.5.41][...80] [HTTP][Streaming][Acceptable] + new: [.....9] [ip4][..tcp] [..10.54.169.250][52007] -> [...120.28.35.40][...80] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [..10.54.169.250][52007] -> [...120.28.35.40][...80] [HTTP][Streaming][Acceptable] + new: [....10] [ip4][..tcp] [..10.54.169.250][54883] -> [203.205.151.160][...80] [MIDSTREAM] + detected: [....10] [ip4][..tcp] [..10.54.169.250][54883] -> [203.205.151.160][...80] [HTTP_Proxy.QQ][Chat][Fun] + RISK: Known Proto on Non Std Port + new: [....11] [ip4][..tcp] [..10.54.169.250][52009] -> [...120.28.35.40][...80] [MIDSTREAM] + detected: [....11] [ip4][..tcp] [..10.54.169.250][52009] -> [...120.28.35.40][...80] [HTTP][Streaming][Acceptable] + new: [....12] [ip4][..tcp] [..10.54.169.250][42761] -> [203.205.129.101][...80] [MIDSTREAM] + detected: [....12] [ip4][..tcp] [..10.54.169.250][42761] -> [203.205.129.101][...80] [HTTP_Proxy.QQ][Chat][Fun] + RISK: Known Proto on Non Std Port + new: [....13] [ip4][..tcp] [..10.54.169.250][54885] -> [203.205.151.160][...80] [MIDSTREAM] + detected: [....13] [ip4][..tcp] [..10.54.169.250][54885] -> [203.205.151.160][...80] [HTTP_Proxy.QQ][Chat][Fun] + RISK: Known Proto on Non Std Port + new: [....14] [ip4][..tcp] [..10.54.169.250][42762] -> [203.205.129.101][...80] [MIDSTREAM] + detected: [....14] [ip4][..tcp] [..10.54.169.250][42762] -> [203.205.129.101][...80] [HTTP_Proxy.QQ][Chat][Fun] + RISK: Known Proto on Non Std Port + analyse: [....11] [ip4][..tcp] [..10.54.169.250][52009] -> [...120.28.35.40][...80] [HTTP][Streaming][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.183| 5.871| 2.460| 1.331] + [IAT(c->s)...: 0.183| 5.871| 2.249| 1.405][IAT(s->c)...: 0.646| 5.777| 2.715| 1.186] + [PKTLEN(c->s): 500.000| 587.000| 520.400| 34.800][PKTLEN(s->c): 76.000|1456.000| 831.100| 469.800] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,13,1,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,1,0,1,0,0,0,1,0,0,0,0,0,0,1,0,1,0,0,0,0,0,1,0,0,0,1,0,0,0,0,1,0,0,1,2,0,0,0,0,0,2,0,0,0,0] + new: [....15] [ip4][..tcp] [..10.54.169.250][35670] -> [203.205.147.215][...80] [MIDSTREAM] + detected: [....15] [ip4][..tcp] [..10.54.169.250][35670] -> [203.205.147.215][...80] [HTTP_Proxy.QQ][Chat][Fun] + RISK: Known Proto on Non Std Port + new: [....16] [ip4][..tcp] [..10.54.169.250][56381] -> [..54.179.140.65][...80] [MIDSTREAM] + detected: [....16] [ip4][..tcp] [..10.54.169.250][56381] -> [..54.179.140.65][...80] [HTTP.Xiaomi][Web][Acceptable] + new: [....17] [ip4][..tcp] [..10.54.169.250][52017] -> [...120.28.35.40][...80] [MIDSTREAM] + detected: [....17] [ip4][..tcp] [..10.54.169.250][52017] -> [...120.28.35.40][...80] [HTTP][Streaming][Acceptable] + end: [....13] [ip4][..tcp] [..10.54.169.250][54885] -> [203.205.151.160][...80] [HTTP_Proxy.QQ][Chat][Fun] + RISK: Known Proto on Non Std Port + new: [....18] [ip4][..tcp] [..10.54.169.250][52018] -> [...120.28.35.40][...80] [MIDSTREAM] + detected: [....18] [ip4][..tcp] [..10.54.169.250][52018] -> [...120.28.35.40][...80] [HTTP][Streaming][Acceptable] + new: [....19] [ip4][..tcp] [..10.54.169.250][52019] -> [...120.28.35.40][...80] [MIDSTREAM] + detected: [....19] [ip4][..tcp] [..10.54.169.250][52019] -> [...120.28.35.40][...80] [HTTP][Streaming][Acceptable] + new: [....20] [ip4][..tcp] [..10.54.169.250][52021] -> [...120.28.35.40][...80] [MIDSTREAM] + detected: [....20] [ip4][..tcp] [..10.54.169.250][52021] -> [...120.28.35.40][...80] [HTTP][Streaming][Acceptable] + new: [....21] [ip4][..tcp] [..10.54.169.250][52022] -> [...120.28.35.40][...80] [MIDSTREAM] + detected: [....21] [ip4][..tcp] [..10.54.169.250][52022] -> [...120.28.35.40][...80] [HTTP][Streaming][Acceptable] + idle: [.....1] [ip4][..tcp] [..10.54.169.250][50668] -> [...120.28.35.41][...80] [HTTP][Streaming][Acceptable] + idle: [.....2] [ip4][..tcp] [..10.54.169.250][50669] -> [...120.28.35.41][...80] [HTTP][Streaming][Acceptable] + idle: [.....7] [ip4][..tcp] [..10.54.169.250][44793] -> [....31.13.68.49][...80] [HTTP.Facebook][SocialNetwork][Fun] + idle: [....10] [ip4][..tcp] [..10.54.169.250][54883] -> [203.205.151.160][...80] + idle: [....12] [ip4][..tcp] [..10.54.169.250][42761] -> [203.205.129.101][...80] [HTTP_Proxy.QQ][Chat][Fun] + RISK: Known Proto on Non Std Port + idle: [....14] [ip4][..tcp] [..10.54.169.250][42762] -> [203.205.129.101][...80] [HTTP_Proxy.QQ][Chat][Fun] + RISK: Known Proto on Non Std Port + idle: [.....3] [ip4][..tcp] [..10.54.169.250][33064] -> [....120.28.5.18][...80] + idle: [.....6] [ip4][..tcp] [..10.54.169.250][33277] -> [..120.28.26.231][...80] [HTTP.Google][Web][Acceptable] + idle: [....16] [ip4][..tcp] [..10.54.169.250][56381] -> [..54.179.140.65][...80] [HTTP.Xiaomi][Web][Acceptable] + idle: [.....9] [ip4][..tcp] [..10.54.169.250][52007] -> [...120.28.35.40][...80] + idle: [....11] [ip4][..tcp] [..10.54.169.250][52009] -> [...120.28.35.40][...80] [HTTP][Streaming][Acceptable] + idle: [....17] [ip4][..tcp] [..10.54.169.250][52017] -> [...120.28.35.40][...80] + idle: [....18] [ip4][..tcp] [..10.54.169.250][52018] -> [...120.28.35.40][...80] + end: [....19] [ip4][..tcp] [..10.54.169.250][52019] -> [...120.28.35.40][...80] [HTTP][Streaming][Acceptable] + idle: [....20] [ip4][..tcp] [..10.54.169.250][52021] -> [...120.28.35.40][...80] + idle: [....21] [ip4][..tcp] [..10.54.169.250][52022] -> [...120.28.35.40][...80] + idle: [.....4] [ip4][..tcp] [..10.54.169.250][52285] -> [..173.252.74.22][...80] [HTTP.Facebook][SocialNetwork][Fun] + idle: [.....5] [ip4][..tcp] [..10.54.169.250][52288] -> [..173.252.74.22][...80] [HTTP.Facebook][SocialNetwork][Fun] + idle: [....15] [ip4][..tcp] [..10.54.169.250][35670] -> [203.205.147.215][...80] [HTTP_Proxy.QQ][Chat][Fun] + RISK: Known Proto on Non Std Port + idle: [.....8] [ip4][..tcp] [..10.54.169.250][44256] -> [....120.28.5.41][...80] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/radius_false_positive.pcapng.out b/test/results/flow-info/radius_false_positive.pcapng.out new file mode 100644 index 000000000..1706aa8e9 --- /dev/null +++ b/test/results/flow-info/radius_false_positive.pcapng.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [................2bc6:b5ac:cb3b:676b::18][..443] -> [3dba:3762:c186:e122:89b0:5170:a86c:ecff][53129] + not-detected: [.....1] [ip6][..udp] [................2bc6:b5ac:cb3b:676b::18][..443] -> [3dba:3762:c186:e122:89b0:5170:a86c:ecff][53129] [Unknown][Unrated] + idle: [.....1] [ip6][..udp] [................2bc6:b5ac:cb3b:676b::18][..443] -> [3dba:3762:c186:e122:89b0:5170:a86c:ecff][53129] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/raknet.pcap.out b/test/results/flow-info/raknet.pcap.out new file mode 100644 index 000000000..d8fffeca1 --- /dev/null +++ b/test/results/flow-info/raknet.pcap.out @@ -0,0 +1,61 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][60030] + detected: [.....1] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][60030] [RakNet][Game][Acceptable] + new: [.....2] [ip4][..udp] [..192.168.2.100][60689] -> [.148.153.35.205][60028] + detected: [.....2] [ip4][..udp] [..192.168.2.100][60689] -> [.148.153.35.205][60028] [RakNet][Game][Acceptable] + update: [.....1] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][60030] [RakNet][Game][Acceptable] + DAEMON-EVENT: [Processed: 30 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 1] + new: [.....3] [ip4][..udp] [..192.168.2.100][32951] -> [.148.153.35.205][60021] + detected: [.....3] [ip4][..udp] [..192.168.2.100][32951] -> [.148.153.35.205][60021] [RakNet][Game][Acceptable] + new: [.....4] [ip4][..udp] [.148.153.35.205][60022] -> [..192.168.2.100][32951] + detected: [.....4] [ip4][..udp] [.148.153.35.205][60022] -> [..192.168.2.100][32951] [RakNet][Game][Acceptable] + new: [.....5] [ip4][..udp] [..192.168.2.100][32952] -> [.148.153.35.205][60021] + detected: [.....5] [ip4][..udp] [..192.168.2.100][32952] -> [.148.153.35.205][60021] [RakNet][Game][Acceptable] + new: [.....6] [ip4][..udp] [.148.153.35.205][60025] -> [..192.168.2.100][32951] + detected: [.....6] [ip4][..udp] [.148.153.35.205][60025] -> [..192.168.2.100][32951] [RakNet][Game][Acceptable] + new: [.....7] [ip4][..udp] [..192.168.2.100][32953] -> [.148.153.35.205][60021] + detected: [.....7] [ip4][..udp] [..192.168.2.100][32953] -> [.148.153.35.205][60021] [RakNet][Game][Acceptable] + new: [.....8] [ip4][..udp] [..192.168.2.100][60690] -> [.148.153.35.205][60028] + detected: [.....8] [ip4][..udp] [..192.168.2.100][60690] -> [.148.153.35.205][60028] [RakNet][Game][Acceptable] + new: [.....9] [ip4][..udp] [.148.153.35.205][60005] -> [..192.168.2.100][32951] + detected: [.....9] [ip4][..udp] [.148.153.35.205][60005] -> [..192.168.2.100][32951] [RakNet][Game][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.2.100][60689] -> [.148.153.35.205][60028] [RakNet][Game][Acceptable] + idle: [.....1] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][60030] [RakNet][Game][Acceptable] + new: [....10] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][60031] + detected: [....10] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][60031] [RakNet][Game][Acceptable] + new: [....11] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][59935] + update: [.....8] [ip4][..udp] [..192.168.2.100][60690] -> [.148.153.35.205][60028] [RakNet][Game][Acceptable] + update: [....10] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][60031] [RakNet][Game][Acceptable] + update: [.....9] [ip4][..udp] [.148.153.35.205][60005] -> [..192.168.2.100][32951] [RakNet][Game][Acceptable] + update: [.....3] [ip4][..udp] [..192.168.2.100][32951] -> [.148.153.35.205][60021] [RakNet][Game][Acceptable] + update: [.....4] [ip4][..udp] [.148.153.35.205][60022] -> [..192.168.2.100][32951] [RakNet][Game][Acceptable] + update: [.....5] [ip4][..udp] [..192.168.2.100][32952] -> [.148.153.35.205][60021] [RakNet][Game][Acceptable] + update: [.....7] [ip4][..udp] [..192.168.2.100][32953] -> [.148.153.35.205][60021] [RakNet][Game][Acceptable] + update: [.....6] [ip4][..udp] [.148.153.35.205][60025] -> [..192.168.2.100][32951] [RakNet][Game][Acceptable] + update: [.....8] [ip4][..udp] [..192.168.2.100][60690] -> [.148.153.35.205][60028] [RakNet][Game][Acceptable] + update: [....11] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][59935] + update: [....10] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][60031] [RakNet][Game][Acceptable] + update: [.....9] [ip4][..udp] [.148.153.35.205][60005] -> [..192.168.2.100][32951] [RakNet][Game][Acceptable] + update: [.....3] [ip4][..udp] [..192.168.2.100][32951] -> [.148.153.35.205][60021] [RakNet][Game][Acceptable] + update: [.....4] [ip4][..udp] [.148.153.35.205][60022] -> [..192.168.2.100][32951] [RakNet][Game][Acceptable] + update: [.....5] [ip4][..udp] [..192.168.2.100][32952] -> [.148.153.35.205][60021] [RakNet][Game][Acceptable] + update: [.....7] [ip4][..udp] [..192.168.2.100][32953] -> [.148.153.35.205][60021] [RakNet][Game][Acceptable] + update: [.....6] [ip4][..udp] [.148.153.35.205][60025] -> [..192.168.2.100][32951] [RakNet][Game][Acceptable] + detected: [....11] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][59935] [RakNet][Game][Acceptable] + idle: [.....8] [ip4][..udp] [..192.168.2.100][60690] -> [.148.153.35.205][60028] [RakNet][Game][Acceptable] + idle: [....10] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][60031] [RakNet][Game][Acceptable] + idle: [.....9] [ip4][..udp] [.148.153.35.205][60005] -> [..192.168.2.100][32951] [RakNet][Game][Acceptable] + idle: [.....3] [ip4][..udp] [..192.168.2.100][32951] -> [.148.153.35.205][60021] [RakNet][Game][Acceptable] + idle: [.....5] [ip4][..udp] [..192.168.2.100][32952] -> [.148.153.35.205][60021] [RakNet][Game][Acceptable] + idle: [.....4] [ip4][..udp] [.148.153.35.205][60022] -> [..192.168.2.100][32951] [RakNet][Game][Acceptable] + idle: [.....7] [ip4][..udp] [..192.168.2.100][32953] -> [.148.153.35.205][60021] [RakNet][Game][Acceptable] + idle: [.....6] [ip4][..udp] [.148.153.35.205][60025] -> [..192.168.2.100][32951] [RakNet][Game][Acceptable] + update: [....11] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][59935] [RakNet][Game][Acceptable] + new: [....12] [ip4][..udp] [.148.153.35.205][43582] -> [..192.168.2.100][44501] + detected: [....12] [ip4][..udp] [.148.153.35.205][43582] -> [..192.168.2.100][44501] [RakNet][Game][Acceptable] + idle: [....11] [ip4][..udp] [..192.168.2.100][44501] -> [.148.153.35.205][59935] [RakNet][Game][Acceptable] + idle: [....12] [ip4][..udp] [.148.153.35.205][43582] -> [..192.168.2.100][44501] [RakNet][Game][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/rdp.pcap.out b/test/results/flow-info/rdp.pcap.out new file mode 100644 index 000000000..054d11376 --- /dev/null +++ b/test/results/flow-info/rdp.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...172.16.2.185][52494] -> [..192.168.2.142][.3389] + detected: [.....1] [ip4][..tcp] [...172.16.2.185][52494] -> [..192.168.2.142][.3389] [RDP][RemoteAccess][Acceptable] + RISK: Desktop/File Sharing + analyse: [.....1] [ip4][..tcp] [...172.16.2.185][52494] -> [..192.168.2.142][.3389] [RDP][RemoteAccess][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.086| 0.035| 0.023] + [IAT(c->s)...: 0.000| 0.083| 0.027| 0.024][IAT(s->c)...: 0.040| 0.086| 0.049| 0.012] + [PKTLEN(c->s): 44.000| 616.000| 125.700| 154.000][PKTLEN(s->c): 44.000|1223.000| 217.800| 327.800] + [BINS(c->s)..: 12,3,1,2,0,1,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,4,1,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0] + end: [.....1] [ip4][..tcp] [...172.16.2.185][52494] -> [..192.168.2.142][.3389] [RDP][RemoteAccess][Acceptable] + RISK: Desktop/File Sharing + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/reasm_crash_anon.pcapng.out b/test/results/flow-info/reasm_crash_anon.pcapng.out new file mode 100644 index 000000000..ffc310186 --- /dev/null +++ b/test/results/flow-info/reasm_crash_anon.pcapng.out @@ -0,0 +1,18 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [192.168.145.147][51218] -> [...10.209.8.148][21999] [MIDSTREAM] + analyse: [.....1] [ip4][..tcp] [192.168.145.147][51218] -> [...10.209.8.148][21999] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 30.166| 9.710| 14.065] + [IAT(c->s)...: 0.000| 30.098| 6.841| 12.605][IAT(s->c)...: 0.001| 30.166| 16.723| 14.956] + [PKTLEN(c->s): 68.000| 81.000| 73.100| 6.300][PKTLEN(s->c): 122.000| 793.000| 421.100| 330.000] + [BINS(c->s)..: 23,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [.....1] [ip4][..tcp] [192.168.145.147][51218] -> [...10.209.8.148][21999] [Unknown][Unrated] + DAEMON-EVENT: [Processed: 93 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 1|guessed: 0|detection-updates: 0|updates: 0] + DAEMON-EVENT: [Processed: 169 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 1|guessed: 0|detection-updates: 0|updates: 0] + end: [.....1] [ip4][..tcp] [192.168.145.147][51218] -> [...10.209.8.148][21999] [Unknown][Unrated] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/reasm_segv_anon.pcapng.out b/test/results/flow-info/reasm_segv_anon.pcapng.out new file mode 100644 index 000000000..519c792df --- /dev/null +++ b/test/results/flow-info/reasm_segv_anon.pcapng.out @@ -0,0 +1,42 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Captured packet size is smaller than expected packet size + new: [.....1] [ip4][..udp] [...145.76.2.236][.2152] -> [...187.96.52.85][.2152] + detected: [.....1] [ip4][..udp] [...145.76.2.236][.2152] -> [...187.96.52.85][.2152] [GTP.GTP_U][Network][Acceptable] + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + analyse: [.....1] [ip4][..udp] [...145.76.2.236][.2152] -> [...187.96.52.85][.2152] [GTP.GTP_U][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.859| 0.305| 0.564] + [IAT(c->s)...: 0.020| 1.859| 0.592| 0.678][IAT(s->c)...: 0.000| 1.799| 0.206| 0.480] + [PKTLEN(c->s): 106.000| 122.000| 113.100| 5.900][PKTLEN(s->c): 90.000|1490.000|1255.600| 472.300] + [BINS(c->s)..: 0,0,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,2,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,17,0,0] + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + idle: [.....1] [ip4][..udp] [...145.76.2.236][.2152] -> [...187.96.52.85][.2152] [GTP.GTP_U][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/reddit.pcap.out b/test/results/flow-info/reddit.pcap.out new file mode 100644 index 000000000..058f74615 --- /dev/null +++ b/test/results/flow-info/reddit.pcap.out @@ -0,0 +1,474 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40028] -> [...............2a00:1450:4007:80a::200a][..443] + new: [.....2] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40030] -> [...............2a00:1450:4007:80a::200a][..443] + new: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56558] -> [.....................64:ff9b::9765:798c][..443] + detected: [.....1] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40028] -> [...............2a00:1450:4007:80a::200a][..443] [TLS.GoogleServices][Web][Acceptable] + new: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56560] -> [.....................64:ff9b::9765:798c][..443] + detected: [.....2] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40030] -> [...............2a00:1450:4007:80a::200a][..443] [TLS.GoogleServices][Web][Acceptable] + detected: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56558] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....1] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40028] -> [...............2a00:1450:4007:80a::200a][..443] [TLS.GoogleServices][Web][Acceptable] + detection-update: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56558] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56558] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....2] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40030] -> [...............2a00:1450:4007:80a::200a][..443] [TLS.GoogleServices][Web][Acceptable] + detected: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56560] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56560] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56560] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + analyse: [.....1] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40028] -> [...............2a00:1450:4007:80a::200a][..443] [TLS.GoogleServices][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.076| 0.015| 0.024] + [IAT(c->s)...: 0.000| 0.075| 0.014| 0.023][IAT(s->c)...: 0.000| 0.076| 0.016| 0.025] + [PKTLEN(c->s): 86.000| 910.000| 221.900| 258.800][PKTLEN(s->c): 86.000|1294.000| 368.200| 395.500] + [BINS(c->s)..: 11,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,1,1,0,0,0,1,0,0,1,1,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0] + analyse: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56558] -> [.....................64:ff9b::9765:798c][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.288| 0.099| 0.316] + [IAT(c->s)...: 0.000| 1.288| 0.110| 0.340][IAT(s->c)...: 0.000| 1.229| 0.090| 0.295] + [PKTLEN(c->s): 86.000| 603.000| 166.600| 154.800][PKTLEN(s->c): 86.000|1134.000| 606.100| 487.100] + [BINS(c->s)..: 9,1,1,1,0,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,1,0,1,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56558] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + new: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56562] -> [.....................64:ff9b::9765:798c][..443] + new: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56564] -> [.....................64:ff9b::9765:798c][..443] + new: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56566] -> [.....................64:ff9b::9765:798c][..443] + new: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56568] -> [.....................64:ff9b::9765:798c][..443] + new: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56570] -> [.....................64:ff9b::9765:798c][..443] + new: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56572] -> [.....................64:ff9b::9765:798c][..443] + new: [....11] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56574] -> [.....................64:ff9b::9765:798c][..443] + new: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56576] -> [.....................64:ff9b::9765:798c][..443] + new: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56578] -> [.....................64:ff9b::9765:798c][..443] + new: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56580] -> [.....................64:ff9b::9765:798c][..443] + new: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56582] -> [.....................64:ff9b::9765:798c][..443] + new: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56584] -> [.....................64:ff9b::9765:798c][..443] + new: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56586] -> [.....................64:ff9b::9765:798c][..443] + new: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56588] -> [.....................64:ff9b::9765:798c][..443] + detected: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56564] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56562] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56570] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56568] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56566] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56572] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + new: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56590] -> [.....................64:ff9b::9765:798c][..443] + new: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56592] -> [.....................64:ff9b::9765:798c][..443] + detected: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56578] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56576] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [....11] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56574] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56582] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56580] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56584] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56586] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56588] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56564] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56564] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56562] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56562] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56568] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56570] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56568] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56570] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56566] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56566] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56572] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56592] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detected: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56590] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56572] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56578] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56578] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56576] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56576] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....11] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56574] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56580] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....11] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56574] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56582] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56582] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56580] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56584] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56584] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56586] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56586] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56588] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56588] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + analyse: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56564] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.042| 0.008| 0.014] + [IAT(c->s)...: 0.000| 0.040| 0.006| 0.013][IAT(s->c)...: 0.000| 0.042| 0.014| 0.017] + [PKTLEN(c->s): 86.000|1474.000| 259.400| 294.700][PKTLEN(s->c): 86.000|1134.000| 485.600| 451.600] + [BINS(c->s)..: 8,1,1,4,2,0,2,0,0,2,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0] + [BINS(s->c)..: 4,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56592] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56592] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56590] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56590] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + analyse: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56578] -> [.....................64:ff9b::9765:798c][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.048| 0.010| 0.016] + [IAT(c->s)...: 0.000| 0.039| 0.010| 0.015][IAT(s->c)...: 0.000| 0.048| 0.011| 0.017] + [PKTLEN(c->s): 86.000| 603.000| 189.900| 166.700][PKTLEN(s->c): 86.000|1134.000| 629.900| 491.700] + [BINS(c->s)..: 8,2,1,1,0,0,0,0,0,0,0,1,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56578] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + analyse: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56582] -> [.....................64:ff9b::9765:798c][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.060| 0.011| 0.020] + [IAT(c->s)...: 0.000| 0.057| 0.009| 0.018][IAT(s->c)...: 0.000| 0.060| 0.015| 0.022] + [PKTLEN(c->s): 86.000| 603.000| 178.400| 151.100][PKTLEN(s->c): 86.000|1134.000| 462.200| 445.200] + [BINS(c->s)..: 10,1,1,1,1,0,0,0,1,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,1,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56582] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + analyse: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56592] -> [.....................64:ff9b::9765:798c][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.052| 0.011| 0.020] + [IAT(c->s)...: 0.000| 0.052| 0.010| 0.019][IAT(s->c)...: 0.000| 0.051| 0.011| 0.020] + [PKTLEN(c->s): 86.000| 603.000| 155.700| 140.300][PKTLEN(s->c): 86.000|1134.000| 598.200| 489.700] + [BINS(c->s)..: 11,0,2,1,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56592] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + new: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56594] -> [.....................64:ff9b::9765:798c][..443] + detected: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56594] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56594] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56594] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + analyse: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56594] -> [.....................64:ff9b::9765:798c][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.092| 0.013| 0.024] + [IAT(c->s)...: 0.000| 0.092| 0.011| 0.024][IAT(s->c)...: 0.000| 0.066| 0.017| 0.022] + [PKTLEN(c->s): 86.000| 603.000| 149.900| 138.800][PKTLEN(s->c): 86.000|1134.000| 635.000| 486.500] + [BINS(c->s)..: 12,1,1,1,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56594] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + new: [....22] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][50960] -> [...............2a00:1450:4007:805::2002][..443] + new: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43492] -> [......................64:ff9b::df9:21c6][..443] + new: [....24] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38320] -> [.....................64:ff9b::6853:b3b6][..443] + detected: [....22] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][50960] -> [...............2a00:1450:4007:805::2002][..443] [TLS.GoogleServices][Web][Acceptable] + detected: [....24] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38320] -> [.....................64:ff9b::6853:b3b6][..443] [TLS][Web][Safe] + detected: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43492] -> [......................64:ff9b::df9:21c6][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....22] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][50960] -> [...............2a00:1450:4007:805::2002][..443] [TLS.GoogleServices][Web][Acceptable] + detection-update: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43492] -> [......................64:ff9b::df9:21c6][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....24] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38320] -> [.....................64:ff9b::6853:b3b6][..443] [TLS][Web][Safe] + analyse: [....22] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][50960] -> [...............2a00:1450:4007:805::2002][..443] [TLS.GoogleServices][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.044| 0.009| 0.015] + [IAT(c->s)...: 0.000| 0.044| 0.008| 0.015][IAT(s->c)...: 0.000| 0.038| 0.010| 0.014] + [PKTLEN(c->s): 86.000| 603.000| 146.800| 134.600][PKTLEN(s->c): 86.000|1294.000| 726.100| 542.400] + [BINS(c->s)..: 12,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0] + analyse: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43492] -> [......................64:ff9b::df9:21c6][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.051| 0.009| 0.016] + [IAT(c->s)...: 0.000| 0.051| 0.008| 0.016][IAT(s->c)...: 0.000| 0.039| 0.011| 0.015] + [PKTLEN(c->s): 86.000| 603.000| 143.100| 131.100][PKTLEN(s->c): 86.000|1474.000| 852.500| 668.500] + [BINS(c->s)..: 13,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,0,0] + detection-update: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43492] -> [......................64:ff9b::df9:21c6][..443] [TLS.Amazon][Web][Acceptable] + analyse: [....24] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38320] -> [.....................64:ff9b::6853:b3b6][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.072| 0.015| 0.019] + [IAT(c->s)...: 0.000| 0.072| 0.014| 0.023][IAT(s->c)...: 0.000| 0.037| 0.016| 0.015] + [PKTLEN(c->s): 86.000| 603.000| 153.100| 139.800][PKTLEN(s->c): 86.000|1474.000| 706.200| 645.000] + [BINS(c->s)..: 11,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,1,0,0,0,0,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,5,0,0,0,0] + new: [....25] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51026] -> [.....................64:ff9b::acd9:12c2][..443] + detected: [....25] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51026] -> [.....................64:ff9b::acd9:12c2][..443] [TLS.Google][Advertisement][Acceptable] + new: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48240] -> [.....................64:ff9b::9765:789d][..443] + detected: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48240] -> [.....................64:ff9b::9765:789d][..443] [TLS.Twitter][SocialNetwork][Fun] + detection-update: [....25] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51026] -> [.....................64:ff9b::acd9:12c2][..443] [TLS.Google][Advertisement][Acceptable] + detection-update: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48240] -> [.....................64:ff9b::9765:789d][..443] [TLS.Twitter][SocialNetwork][Fun] + detection-update: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48240] -> [.....................64:ff9b::9765:789d][..443] [TLS.Twitter][SocialNetwork][Fun] + analyse: [....25] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51026] -> [.....................64:ff9b::acd9:12c2][..443] [TLS.Google][Advertisement][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.049| 0.009| 0.015] + [IAT(c->s)...: 0.000| 0.049| 0.008| 0.016][IAT(s->c)...: 0.000| 0.039| 0.011| 0.014] + [PKTLEN(c->s): 86.000| 603.000| 147.600| 135.800][PKTLEN(s->c): 86.000|1474.000| 765.600| 644.000] + [BINS(c->s)..: 12,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0] + analyse: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48240] -> [.....................64:ff9b::9765:789d][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.061| 0.009| 0.016] + [IAT(c->s)...: 0.000| 0.061| 0.008| 0.017][IAT(s->c)...: 0.000| 0.047| 0.010| 0.015] + [PKTLEN(c->s): 86.000| 603.000| 146.000| 132.000][PKTLEN(s->c): 86.000|1134.000| 639.300| 487.600] + [BINS(c->s)..: 12,1,1,1,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48240] -> [.....................64:ff9b::9765:789d][..443] [TLS.Twitter][SocialNetwork][Fun] + new: [....27] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39520] -> [...............2a00:1450:4007:816::2008][..443] + detected: [....27] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39520] -> [...............2a00:1450:4007:816::2008][..443] [TLS.GoogleServices][Web][Acceptable] + detection-update: [....27] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39520] -> [...............2a00:1450:4007:816::2008][..443] [TLS.GoogleServices][Web][Acceptable] + new: [....28] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][32970] -> [.....................64:ff9b::6853:b3d1][..443] + analyse: [....27] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39520] -> [...............2a00:1450:4007:816::2008][..443] [TLS.GoogleServices][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.044| 0.009| 0.015] + [IAT(c->s)...: 0.000| 0.044| 0.009| 0.015][IAT(s->c)...: 0.000| 0.038| 0.009| 0.015] + [PKTLEN(c->s): 86.000| 603.000| 146.900| 134.800][PKTLEN(s->c): 86.000|1294.000| 712.600| 543.300] + [BINS(c->s)..: 12,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0] + detected: [....28] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][32970] -> [.....................64:ff9b::6853:b3d1][..443] [TLS][Web][Safe] + new: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56782] -> [.....................64:ff9b::68f4:2ac8][..443] + detected: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56782] -> [.....................64:ff9b::68f4:2ac8][..443] [TLS.Twitter][SocialNetwork][Fun] + detection-update: [....28] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][32970] -> [.....................64:ff9b::6853:b3d1][..443] [TLS][Web][Safe] + new: [....30] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39626] -> [.....................64:ff9b::2278:cf94][..443] + new: [....31] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54862] -> [...............2a00:1450:4007:806::200e][..443] + detected: [....30] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39626] -> [.....................64:ff9b::2278:cf94][..443] [TLS][Web][Safe] + new: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48648] -> [...2620:116:800d:21:f916:5049:f87f:108e][..443] + new: [....33] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][44264] -> [.....................64:ff9b::1736:86f1][..443] + detected: [....31] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54862] -> [...............2a00:1450:4007:806::200e][..443] [TLS.YouTube][Media][Fun] + detected: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48648] -> [...2620:116:800d:21:f916:5049:f87f:108e][..443] [TLS][Web][Safe] + detected: [....33] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][44264] -> [.....................64:ff9b::1736:86f1][..443] [TLS][Advertisement][Safe] + detection-update: [....30] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39626] -> [.....................64:ff9b::2278:cf94][..443] [TLS][Web][Safe] + detection-update: [....31] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54862] -> [...............2a00:1450:4007:806::200e][..443] [TLS.YouTube][Media][Fun] + detection-update: [....33] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][44264] -> [.....................64:ff9b::1736:86f1][..443] [TLS][Advertisement][Safe] + detection-update: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48648] -> [...2620:116:800d:21:f916:5049:f87f:108e][..443] [TLS][Web][Safe] + detection-update: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48648] -> [...2620:116:800d:21:f916:5049:f87f:108e][..443] [TLS][Web][Safe] + detection-update: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56782] -> [.....................64:ff9b::68f4:2ac8][..443] [TLS.Twitter][SocialNetwork][Fun] + detection-update: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56782] -> [.....................64:ff9b::68f4:2ac8][..443] [TLS.Twitter][SocialNetwork][Fun] + analyse: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48648] -> [...2620:116:800d:21:f916:5049:f87f:108e][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.180| 0.022| 0.040] + [IAT(c->s)...: 0.000| 0.094| 0.022| 0.033][IAT(s->c)...: 0.000| 0.180| 0.023| 0.046] + [PKTLEN(c->s): 86.000| 603.000| 167.500| 141.700][PKTLEN(s->c): 86.000|1474.000| 754.300| 650.300] + [BINS(c->s)..: 10,1,0,2,0,0,0,0,2,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0] + detection-update: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48648] -> [...2620:116:800d:21:f916:5049:f87f:108e][..443] [TLS][Web][Safe] + analyse: [....31] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54862] -> [...............2a00:1450:4007:806::200e][..443] [TLS.YouTube][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.169| 0.024| 0.039] + [IAT(c->s)...: 0.000| 0.092| 0.021| 0.032][IAT(s->c)...: 0.000| 0.169| 0.026| 0.046] + [PKTLEN(c->s): 86.000| 603.000| 175.500| 166.700][PKTLEN(s->c): 86.000|1294.000| 673.200| 548.300] + [BINS(c->s)..: 12,0,2,0,0,0,0,0,0,0,0,0,2,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0] + new: [....34] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51100] -> [.....................64:ff9b::d83a:d1e6][..443] + new: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51102] -> [.....................64:ff9b::d83a:d1e6][..443] + new: [....36] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56186] -> [...2600:9000:219c:ee00:6:44e3:f8c0:93a1][..443] + detected: [....34] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51100] -> [.....................64:ff9b::d83a:d1e6][..443] [TLS.Google][Advertisement][Acceptable] + detected: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51102] -> [.....................64:ff9b::d83a:d1e6][..443] [TLS.Google][Advertisement][Acceptable] + detected: [....36] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56186] -> [...2600:9000:219c:ee00:6:44e3:f8c0:93a1][..443] [TLS][Web][Safe] + detection-update: [....34] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51100] -> [.....................64:ff9b::d83a:d1e6][..443] [TLS.Google][Advertisement][Acceptable] + detection-update: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51102] -> [.....................64:ff9b::d83a:d1e6][..443] [TLS.Google][Advertisement][Acceptable] + detection-update: [....36] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56186] -> [...2600:9000:219c:ee00:6:44e3:f8c0:93a1][..443] [TLS][Web][Safe] + analyse: [....34] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51100] -> [.....................64:ff9b::d83a:d1e6][..443] [TLS.Google][Advertisement][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.043| 0.011| 0.015] + [IAT(c->s)...: 0.000| 0.043| 0.010| 0.015][IAT(s->c)...: 0.000| 0.041| 0.012| 0.014] + [PKTLEN(c->s): 86.000| 603.000| 164.300| 146.900][PKTLEN(s->c): 86.000|1474.000| 392.100| 493.600] + [BINS(c->s)..: 11,2,2,0,0,0,1,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0] + analyse: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56782] -> [.....................64:ff9b::68f4:2ac8][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.217| 0.048| 0.068] + [IAT(c->s)...: 0.000| 0.217| 0.046| 0.070][IAT(s->c)...: 0.000| 0.212| 0.051| 0.066] + [PKTLEN(c->s): 86.000| 603.000| 177.800| 145.300][PKTLEN(s->c): 86.000|1474.000| 367.000| 459.100] + [BINS(c->s)..: 9,1,0,3,0,0,0,0,0,2,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,2,0,0,0,0,0,1,1,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0] + detection-update: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56782] -> [.....................64:ff9b::68f4:2ac8][..443] [TLS.Twitter][SocialNetwork][Fun] + new: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39736] -> [.....2606:2800:134:1a0d:1429:742:782:b6][..443] + detected: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39736] -> [.....2606:2800:134:1a0d:1429:742:782:b6][..443] [TLS.Twitter][SocialNetwork][Fun] + detection-update: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39736] -> [.....2606:2800:134:1a0d:1429:742:782:b6][..443] [TLS.Twitter][SocialNetwork][Fun] + new: [....38] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54726] -> [...............2a00:1450:4007:808::2006][..443] + new: [....39] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57282] -> [...............2a00:1450:4007:805::2004][..443] + detected: [....38] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54726] -> [...............2a00:1450:4007:808::2006][..443] [TLS.Google][Advertisement][Acceptable] + detected: [....39] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57282] -> [...............2a00:1450:4007:805::2004][..443] [TLS.Google][Web][Acceptable] + analyse: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39736] -> [.....2606:2800:134:1a0d:1429:742:782:b6][..443] [TLS.Twitter][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.051| 0.013| 0.018] + [IAT(c->s)...: 0.000| 0.051| 0.012| 0.019][IAT(s->c)...: 0.000| 0.043| 0.014| 0.017] + [PKTLEN(c->s): 86.000| 609.000| 188.000| 183.600][PKTLEN(s->c): 86.000|1294.000| 455.600| 494.700] + [BINS(c->s)..: 11,0,2,0,0,0,0,0,0,0,0,0,1,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,2,0,0,0,2,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0] + detection-update: [....38] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54726] -> [...............2a00:1450:4007:808::2006][..443] [TLS.Google][Advertisement][Acceptable] + new: [....40] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58122] -> [...............2a00:1450:4007:805::2001][..443] + new: [....41] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][52296] -> [...............2a00:1450:4007:815::2016][..443] + new: [....42] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47302] -> [...............2a00:1450:4007:80c::2003][..443] + new: [....43] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47304] -> [...............2a00:1450:4007:80c::2003][..443] + detection-update: [....39] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57282] -> [...............2a00:1450:4007:805::2004][..443] [TLS.Google][Web][Acceptable] + detected: [....42] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47302] -> [...............2a00:1450:4007:80c::2003][..443] [TLS.Google][Web][Acceptable] + detected: [....43] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47304] -> [...............2a00:1450:4007:80c::2003][..443] [TLS.Google][Web][Acceptable] + detected: [....40] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58122] -> [...............2a00:1450:4007:805::2001][..443] [TLS.YouTube][Media][Fun] + analyse: [....39] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57282] -> [...............2a00:1450:4007:805::2004][..443] [TLS.Google][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.062| 0.010| 0.018] + [IAT(c->s)...: 0.000| 0.062| 0.010| 0.019][IAT(s->c)...: 0.000| 0.047| 0.010| 0.017] + [PKTLEN(c->s): 86.000| 603.000| 148.400| 137.000][PKTLEN(s->c): 86.000|1294.000| 705.100| 541.700] + [BINS(c->s)..: 12,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,0,0,0,2,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0] + detected: [....41] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][52296] -> [...............2a00:1450:4007:815::2016][..443] [TLS.YouTube][Media][Fun] + detection-update: [....40] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58122] -> [...............2a00:1450:4007:805::2001][..443] [TLS.YouTube][Media][Fun] + detection-update: [....41] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][52296] -> [...............2a00:1450:4007:815::2016][..443] [TLS.YouTube][Media][Fun] + detection-update: [....42] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47302] -> [...............2a00:1450:4007:80c::2003][..443] [TLS.Google][Web][Acceptable] + detection-update: [....43] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47304] -> [...............2a00:1450:4007:80c::2003][..443] [TLS.Google][Web][Acceptable] + analyse: [....40] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58122] -> [...............2a00:1450:4007:805::2001][..443] [TLS.YouTube][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.069| 0.013| 0.024] + [IAT(c->s)...: 0.000| 0.069| 0.013| 0.023][IAT(s->c)...: 0.000| 0.069| 0.014| 0.025] + [PKTLEN(c->s): 86.000| 603.000| 155.800| 146.100][PKTLEN(s->c): 86.000|1294.000| 614.800| 528.600] + [BINS(c->s)..: 11,0,2,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,0,0,0,0,0,0,1,0,0,0,1,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0] + analyse: [....42] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47302] -> [...............2a00:1450:4007:80c::2003][..443] [TLS.Google][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.073| 0.012| 0.021] + [IAT(c->s)...: 0.000| 0.073| 0.011| 0.021][IAT(s->c)...: 0.000| 0.066| 0.013| 0.021] + [PKTLEN(c->s): 86.000| 603.000| 154.400| 137.700][PKTLEN(s->c): 86.000|1294.000| 692.700| 552.800] + [BINS(c->s)..: 11,0,3,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0] + analyse: [....41] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][52296] -> [...............2a00:1450:4007:815::2016][..443] [TLS.YouTube][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.068| 0.014| 0.023] + [IAT(c->s)...: 0.000| 0.067| 0.013| 0.022][IAT(s->c)...: 0.000| 0.068| 0.015| 0.024] + [PKTLEN(c->s): 86.000| 603.000| 149.400| 138.800][PKTLEN(s->c): 86.000|1294.000| 719.600| 544.100] + [BINS(c->s)..: 12,0,2,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0] + new: [....44] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56640] -> [.....................64:ff9b::9765:798c][..443] + detected: [....44] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56640] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....44] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56640] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + detection-update: [....44] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56640] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + analyse: [....44] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56640] -> [.....................64:ff9b::9765:798c][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.144| 0.017| 0.037] + [IAT(c->s)...: 0.000| 0.144| 0.015| 0.037][IAT(s->c)...: 0.000| 0.144| 0.019| 0.038] + [PKTLEN(c->s): 86.000| 603.000| 193.400| 178.700][PKTLEN(s->c): 86.000|1134.000| 361.000| 399.800] + [BINS(c->s)..: 9,1,2,1,0,0,0,0,0,0,0,0,1,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,1,1,0,0,0,0,0,1,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [....44] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56640] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + new: [....45] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51006] -> [...............2a00:1450:4007:805::2002][..443] + new: [....46] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][59336] -> [...............2a00:1450:4007:80b::2002][..443] + detected: [....45] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51006] -> [...............2a00:1450:4007:805::2002][..443] [TLS.Google][Web][Acceptable] + detected: [....46] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][59336] -> [...............2a00:1450:4007:80b::2002][..443] [TLS.Google][Web][Acceptable] + new: [....47] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46646] -> [.....................64:ff9b::345f:7ca5][..443] + new: [....48] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][59624] -> [...............2a00:1450:4007:80b::2001][..443] + detected: [....47] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46646] -> [.....................64:ff9b::345f:7ca5][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....45] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51006] -> [...............2a00:1450:4007:805::2002][..443] [TLS.Google][Web][Acceptable] + detection-update: [....46] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][59336] -> [...............2a00:1450:4007:80b::2002][..443] [TLS.Google][Web][Acceptable] + detected: [....48] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][59624] -> [...............2a00:1450:4007:80b::2001][..443] [TLS.Google][Advertisement][Acceptable] + detection-update: [....48] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][59624] -> [...............2a00:1450:4007:80b::2001][..443] [TLS.Google][Advertisement][Acceptable] + detection-update: [....47] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46646] -> [.....................64:ff9b::345f:7ca5][..443] [TLS.Amazon][Web][Acceptable] + detection-update: [....47] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46646] -> [.....................64:ff9b::345f:7ca5][..443] [TLS.Amazon][Web][Acceptable] + analyse: [....46] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][59336] -> [...............2a00:1450:4007:80b::2002][..443] [TLS.Google][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.046| 0.008| 0.012] + [IAT(c->s)...: 0.000| 0.046| 0.007| 0.012][IAT(s->c)...: 0.000| 0.037| 0.008| 0.012] + [PKTLEN(c->s): 86.000| 603.000| 146.500| 132.200][PKTLEN(s->c): 86.000|1294.000| 461.300| 471.500] + [BINS(c->s)..: 12,1,2,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,1,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0] + analyse: [....48] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][59624] -> [...............2a00:1450:4007:80b::2001][..443] [TLS.Google][Advertisement][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.034| 0.007| 0.011] + [IAT(c->s)...: 0.000| 0.034| 0.007| 0.011][IAT(s->c)...: 0.000| 0.033| 0.008| 0.012] + [PKTLEN(c->s): 86.000| 603.000| 148.500| 140.800][PKTLEN(s->c): 86.000|1294.000| 552.300| 496.400] + [BINS(c->s)..: 13,0,2,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0] + new: [....49] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46806] -> [...............2a00:1450:4007:808::2001][..443] + new: [....50] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46808] -> [...............2a00:1450:4007:808::2001][..443] + new: [....51] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46810] -> [...............2a00:1450:4007:808::2001][..443] + new: [....52] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46812] -> [...............2a00:1450:4007:808::2001][..443] + new: [....53] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46814] -> [...............2a00:1450:4007:808::2001][..443] + new: [....54] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38166] -> [...............2a00:1450:4007:811::200a][..443] + new: [....55] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36964] -> [...............2a00:1450:4007:80f::2001][..443] + new: [....56] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36966] -> [...............2a00:1450:4007:80f::2001][..443] + new: [....57] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36968] -> [...............2a00:1450:4007:80f::2001][..443] + new: [....58] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36970] -> [...............2a00:1450:4007:80f::2001][..443] + detected: [....49] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46806] -> [...............2a00:1450:4007:808::2001][..443] [TLS][Web][Safe] + detected: [....50] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46808] -> [...............2a00:1450:4007:808::2001][..443] [TLS][Web][Safe] + detected: [....51] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46810] -> [...............2a00:1450:4007:808::2001][..443] [TLS][Web][Safe] + detected: [....52] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46812] -> [...............2a00:1450:4007:808::2001][..443] [TLS][Web][Safe] + detected: [....53] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46814] -> [...............2a00:1450:4007:808::2001][..443] [TLS][Web][Safe] + detected: [....54] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38166] -> [...............2a00:1450:4007:811::200a][..443] [TLS.GoogleServices][Web][Acceptable] + detected: [....55] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36964] -> [...............2a00:1450:4007:80f::2001][..443] [TLS.Google][Advertisement][Acceptable] + detected: [....56] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36966] -> [...............2a00:1450:4007:80f::2001][..443] [TLS.Google][Advertisement][Acceptable] + detected: [....58] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36970] -> [...............2a00:1450:4007:80f::2001][..443] [TLS.Google][Advertisement][Acceptable] + detected: [....57] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36968] -> [...............2a00:1450:4007:80f::2001][..443] [TLS.Google][Advertisement][Acceptable] + detection-update: [....49] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46806] -> [...............2a00:1450:4007:808::2001][..443] [TLS][Web][Safe] + new: [....59] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36972] -> [...............2a00:1450:4007:80f::2001][..443] + detection-update: [....50] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46808] -> [...............2a00:1450:4007:808::2001][..443] [TLS][Web][Safe] + detection-update: [....51] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46810] -> [...............2a00:1450:4007:808::2001][..443] [TLS][Web][Safe] + detection-update: [....52] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46812] -> [...............2a00:1450:4007:808::2001][..443] [TLS][Web][Safe] + detection-update: [....53] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46814] -> [...............2a00:1450:4007:808::2001][..443] [TLS][Web][Safe] + detection-update: [....54] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38166] -> [...............2a00:1450:4007:811::200a][..443] [TLS.GoogleServices][Web][Acceptable] + detection-update: [....55] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36964] -> [...............2a00:1450:4007:80f::2001][..443] [TLS.Google][Advertisement][Acceptable] + detection-update: [....56] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36966] -> [...............2a00:1450:4007:80f::2001][..443] [TLS.Google][Advertisement][Acceptable] + detection-update: [....58] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36970] -> [...............2a00:1450:4007:80f::2001][..443] [TLS.Google][Advertisement][Acceptable] + detection-update: [....57] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36968] -> [...............2a00:1450:4007:80f::2001][..443] [TLS.Google][Advertisement][Acceptable] + analyse: [....49] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46806] -> [...............2a00:1450:4007:808::2001][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.042| 0.008| 0.012] + [IAT(c->s)...: 0.000| 0.038| 0.008| 0.012][IAT(s->c)...: 0.000| 0.042| 0.007| 0.013] + [PKTLEN(c->s): 86.000| 603.000| 172.600| 150.900][PKTLEN(s->c): 86.000|1294.000| 756.000| 562.600] + [BINS(c->s)..: 10,0,2,0,0,0,0,0,1,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,8,0,0,0,0,0,0,0,0,0,0] + analyse: [....55] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36964] -> [...............2a00:1450:4007:80f::2001][..443] [TLS.Google][Advertisement][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.046| 0.009| 0.014] + [IAT(c->s)...: 0.000| 0.046| 0.009| 0.013][IAT(s->c)...: 0.000| 0.045| 0.009| 0.015] + [PKTLEN(c->s): 86.000| 603.000| 169.400| 150.700][PKTLEN(s->c): 86.000|1294.000| 500.400| 489.800] + [BINS(c->s)..: 11,0,2,0,0,0,0,0,0,2,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,0,1,0,0,1,0,0,1,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0] + analyse: [....54] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38166] -> [...............2a00:1450:4007:811::200a][..443] [TLS.GoogleServices][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.044| 0.010| 0.014] + [IAT(c->s)...: 0.000| 0.044| 0.010| 0.013][IAT(s->c)...: 0.000| 0.044| 0.010| 0.014] + [PKTLEN(c->s): 86.000| 603.000| 148.200| 136.700][PKTLEN(s->c): 86.000|1294.000| 419.900| 413.500] + [BINS(c->s)..: 12,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,1,0,0,0,0,1,0,1,0,0,0,0,0,1,1,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0] + new: [....60] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47006] -> [.....................64:ff9b::34d3:acec][..443] + detected: [....60] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47006] -> [.....................64:ff9b::34d3:acec][..443] [TLS][Web][Safe] + detection-update: [....60] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47006] -> [.....................64:ff9b::34d3:acec][..443] [TLS][Web][Safe] + detection-update: [....60] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47006] -> [.....................64:ff9b::34d3:acec][..443] [TLS][Web][Safe] + idle: [....39] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57282] -> [...............2a00:1450:4007:805::2004][..443] [TLS.Google][Web][Acceptable] + idle: [....46] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][59336] -> [...............2a00:1450:4007:80b::2002][..443] [TLS.Google][Web][Acceptable] + idle: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48240] -> [.....................64:ff9b::9765:789d][..443] [TLS.Twitter][SocialNetwork][Fun] + idle: [....55] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36964] -> [...............2a00:1450:4007:80f::2001][..443] [TLS.Google][Advertisement][Acceptable] + end: [....56] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36966] -> [...............2a00:1450:4007:80f::2001][..443] + end: [....57] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36968] -> [...............2a00:1450:4007:80f::2001][..443] + end: [....58] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36970] -> [...............2a00:1450:4007:80f::2001][..443] + guessed: [....59] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36972] -> [...............2a00:1450:4007:80f::2001][..443] [TLS][Web][Safe] + end: [....59] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][36972] -> [...............2a00:1450:4007:80f::2001][..443] + idle: [....33] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][44264] -> [.....................64:ff9b::1736:86f1][..443] + idle: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56558] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + idle: [....42] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47302] -> [...............2a00:1450:4007:80c::2003][..443] [TLS.Google][Web][Acceptable] + idle: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56560] -> [.....................64:ff9b::9765:798c][..443] + end: [....43] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47304] -> [...............2a00:1450:4007:80c::2003][..443] + end: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56562] -> [.....................64:ff9b::9765:798c][..443] + idle: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56564] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + end: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56566] -> [.....................64:ff9b::9765:798c][..443] + end: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56568] -> [.....................64:ff9b::9765:798c][..443] + end: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56570] -> [.....................64:ff9b::9765:798c][..443] + end: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56572] -> [.....................64:ff9b::9765:798c][..443] + end: [....11] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56574] -> [.....................64:ff9b::9765:798c][..443] + end: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56576] -> [.....................64:ff9b::9765:798c][..443] + idle: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56578] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + end: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56580] -> [.....................64:ff9b::9765:798c][..443] + idle: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56582] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + end: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56584] -> [.....................64:ff9b::9765:798c][..443] + end: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56586] -> [.....................64:ff9b::9765:798c][..443] + end: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56588] -> [.....................64:ff9b::9765:798c][..443] + end: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56590] -> [.....................64:ff9b::9765:798c][..443] + idle: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56592] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + idle: [....48] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][59624] -> [...............2a00:1450:4007:80b::2001][..443] [TLS.Google][Advertisement][Acceptable] + idle: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56594] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + idle: [....44] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56640] -> [.....................64:ff9b::9765:798c][..443] [TLS.Reddit][SocialNetwork][Fun] + idle: [....36] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56186] -> [...2600:9000:219c:ee00:6:44e3:f8c0:93a1][..443] + idle: [....24] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38320] -> [.....................64:ff9b::6853:b3b6][..443] [TLS][Web][Safe] + idle: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56782] -> [.....................64:ff9b::68f4:2ac8][..443] [TLS.Twitter][SocialNetwork][Fun] + idle: [....47] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46646] -> [.....................64:ff9b::345f:7ca5][..443] + idle: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39736] -> [.....2606:2800:134:1a0d:1429:742:782:b6][..443] [TLS.Twitter][SocialNetwork][Fun] + idle: [....27] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39520] -> [...............2a00:1450:4007:816::2008][..443] [TLS.GoogleServices][Web][Acceptable] + idle: [....40] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58122] -> [...............2a00:1450:4007:805::2001][..443] [TLS.YouTube][Media][Fun] + idle: [....25] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51026] -> [.....................64:ff9b::acd9:12c2][..443] [TLS.Google][Advertisement][Acceptable] + idle: [....34] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51100] -> [.....................64:ff9b::d83a:d1e6][..443] [TLS.Google][Advertisement][Acceptable] + idle: [....60] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47006] -> [.....................64:ff9b::34d3:acec][..443] + end: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51102] -> [.....................64:ff9b::d83a:d1e6][..443] + idle: [....41] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][52296] -> [...............2a00:1450:4007:815::2016][..443] [TLS.YouTube][Media][Fun] + idle: [.....1] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40028] -> [...............2a00:1450:4007:80a::200a][..443] [TLS.GoogleServices][Web][Acceptable] + end: [.....2] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40030] -> [...............2a00:1450:4007:80a::200a][..443] + idle: [....28] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][32970] -> [.....................64:ff9b::6853:b3d1][..443] + idle: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48648] -> [...2620:116:800d:21:f916:5049:f87f:108e][..443] [TLS][Web][Safe] + idle: [....54] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38166] -> [...............2a00:1450:4007:811::200a][..443] [TLS.GoogleServices][Web][Acceptable] + idle: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43492] -> [......................64:ff9b::df9:21c6][..443] [TLS.Amazon][Web][Acceptable] + idle: [....38] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54726] -> [...............2a00:1450:4007:808::2006][..443] [TLS.Google][Advertisement][Acceptable] + idle: [....31] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][54862] -> [...............2a00:1450:4007:806::200e][..443] [TLS.YouTube][Media][Fun] + idle: [....30] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39626] -> [.....................64:ff9b::2278:cf94][..443] [TLS][Web][Safe] + idle: [....49] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46806] -> [...............2a00:1450:4007:808::2001][..443] [TLS][Web][Safe] + end: [....50] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46808] -> [...............2a00:1450:4007:808::2001][..443] + end: [....51] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46810] -> [...............2a00:1450:4007:808::2001][..443] + end: [....52] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46812] -> [...............2a00:1450:4007:808::2001][..443] + end: [....53] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][46814] -> [...............2a00:1450:4007:808::2001][..443] + idle: [....22] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][50960] -> [...............2a00:1450:4007:805::2002][..443] [TLS.GoogleServices][Web][Acceptable] + idle: [....45] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51006] -> [...............2a00:1450:4007:805::2002][..443] [TLS.Google][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/riotgames.pcap.out b/test/results/flow-info/riotgames.pcap.out new file mode 100644 index 000000000..0c380c2ae --- /dev/null +++ b/test/results/flow-info/riotgames.pcap.out @@ -0,0 +1,47 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][59956] -> [...162.249.72.1][.7194] + detected: [.....1] [ip4][..udp] [..192.168.2.100][59956] -> [...162.249.72.1][.7194] [RiotGames][Game][Acceptable] + DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..udp] [..192.168.2.100][48526] -> [213.179.216.242][50004] + detected: [.....2] [ip4][..udp] [..192.168.2.100][48526] -> [213.179.216.242][50004] [Discord][Collaborative][Fun] + idle: [.....1] [ip4][..udp] [..192.168.2.100][59956] -> [...162.249.72.1][.7194] [RiotGames][Game][Acceptable] + DAEMON-EVENT: [Processed: 17 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..udp] [..192.168.2.100][62854] -> [...162.249.72.1][.8181] + detected: [.....3] [ip4][..udp] [..192.168.2.100][62854] -> [...162.249.72.1][.8181] [RiotGames][Game][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.2.100][48526] -> [213.179.216.242][50004] [Discord][Collaborative][Fun] + DAEMON-EVENT: [Processed: 19 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....4] [ip4][..udp] [..192.168.2.100][54231] -> [....43.229.65.1][.7998] + detected: [.....4] [ip4][..udp] [..192.168.2.100][54231] -> [....43.229.65.1][.7998] [RiotGames][Game][Acceptable] + idle: [.....3] [ip4][..udp] [..192.168.2.100][62854] -> [...162.249.72.1][.8181] [RiotGames][Game][Acceptable] + DAEMON-EVENT: [Processed: 21 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..udp] [..192.168.2.100][58106] -> [...162.249.72.1][.8181] + detected: [.....5] [ip4][..udp] [..192.168.2.100][58106] -> [...162.249.72.1][.8181] [RiotGames][Game][Acceptable] + idle: [.....4] [ip4][..udp] [..192.168.2.100][54231] -> [....43.229.65.1][.7998] [RiotGames][Game][Acceptable] + DAEMON-EVENT: [Processed: 23 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....6] [ip4][..udp] [..192.168.2.100][50004] -> [...162.249.72.1][.8181] + detected: [.....6] [ip4][..udp] [..192.168.2.100][50004] -> [...162.249.72.1][.8181] [RiotGames][Game][Acceptable] + idle: [.....5] [ip4][..udp] [..192.168.2.100][58106] -> [...162.249.72.1][.8181] [RiotGames][Game][Acceptable] + DAEMON-EVENT: [Processed: 25 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....7] [ip4][..udp] [..192.168.2.100][63038] -> [....43.229.65.1][.7998] + detected: [.....7] [ip4][..udp] [..192.168.2.100][63038] -> [....43.229.65.1][.7998] [RiotGames][Game][Acceptable] + idle: [.....6] [ip4][..udp] [..192.168.2.100][50004] -> [...162.249.72.1][.8181] [RiotGames][Game][Acceptable] + DAEMON-EVENT: [Processed: 27 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 7|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....8] [ip4][..udp] [..192.168.2.100][61099] -> [....66.22.241.8][50004] + detected: [.....8] [ip4][..udp] [..192.168.2.100][61099] -> [....66.22.241.8][50004] [Discord][Collaborative][Fun] + idle: [.....7] [ip4][..udp] [..192.168.2.100][63038] -> [....43.229.65.1][.7998] [RiotGames][Game][Acceptable] + DAEMON-EVENT: [Processed: 29 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....9] [ip4][..udp] [..192.168.2.100][49298] -> [...162.249.72.1][.7194] + detected: [.....9] [ip4][..udp] [..192.168.2.100][49298] -> [...162.249.72.1][.7194] [RiotGames][Game][Acceptable] + idle: [.....8] [ip4][..udp] [..192.168.2.100][61099] -> [....66.22.241.8][50004] [Discord][Collaborative][Fun] + idle: [.....9] [ip4][..udp] [..192.168.2.100][49298] -> [...162.249.72.1][.7194] [RiotGames][Game][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/rsh-syslog-false-positive.pcap.out b/test/results/flow-info/rsh-syslog-false-positive.pcap.out new file mode 100644 index 000000000..99a34fff8 --- /dev/null +++ b/test/results/flow-info/rsh-syslog-false-positive.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..172.31.78.129][.9039] -> [..172.29.43.201][..514] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [..172.31.78.129][.9039] -> [..172.29.43.201][..514] [Syslog][System][Acceptable] + ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size + idle: [.....1] [ip4][..tcp] [..172.31.78.129][.9039] -> [..172.29.43.201][..514] [Syslog][System][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/rsh.pcap.out b/test/results/flow-info/rsh.pcap.out new file mode 100644 index 000000000..a086ebd53 --- /dev/null +++ b/test/results/flow-info/rsh.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......127.0.0.1][.1023] -> [......127.0.0.1][..514] + detected: [.....1] [ip4][..tcp] [......127.0.0.1][.1023] -> [......127.0.0.1][..514] [RSH][RemoteAccess][Unsafe] + RISK: Unsafe Protocol + new: [.....2] [ip4][..tcp] [......127.0.0.1][.1021] -> [......127.0.0.1][..514] + detected: [.....2] [ip4][..tcp] [......127.0.0.1][.1021] -> [......127.0.0.1][..514] [RSH][RemoteAccess][Unsafe] + RISK: Unsafe Protocol + end: [.....2] [ip4][..tcp] [......127.0.0.1][.1021] -> [......127.0.0.1][..514] [RSH][RemoteAccess][Unsafe] + RISK: Unsafe Protocol + end: [.....1] [ip4][..tcp] [......127.0.0.1][.1023] -> [......127.0.0.1][..514] [RSH][RemoteAccess][Unsafe] + RISK: Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/rsync.pcap.out b/test/results/flow-info/rsync.pcap.out new file mode 100644 index 000000000..3f06187e3 --- /dev/null +++ b/test/results/flow-info/rsync.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......127.0.0.1][54489] -> [......127.0.0.1][..873] + detected: [.....1] [ip4][..tcp] [......127.0.0.1][54489] -> [......127.0.0.1][..873] [RSYNC][DataTransfer][Acceptable] + end: [.....1] [ip4][..tcp] [......127.0.0.1][54489] -> [......127.0.0.1][..873] [RSYNC][DataTransfer][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/rtmp.pcap.out b/test/results/flow-info/rtmp.pcap.out new file mode 100644 index 000000000..698bce433 --- /dev/null +++ b/test/results/flow-info/rtmp.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.43.1][.1177] -> [.192.168.43.128][.1935] + detected: [.....1] [ip4][..tcp] [...192.168.43.1][.1177] -> [.192.168.43.128][.1935] [RTMP][Media][Acceptable] + idle: [.....1] [ip4][..tcp] [...192.168.43.1][.1177] -> [.192.168.43.128][.1935] [RTMP][Media][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/rtsp.pcap.out b/test/results/flow-info/rtsp.pcap.out new file mode 100644 index 000000000..45e4fb47f --- /dev/null +++ b/test/results/flow-info/rtsp.pcap.out @@ -0,0 +1,81 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......10.1.1.10][52470] -> [.......10.2.2.2][.8554] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [......10.1.1.10][52470] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + new: [.....2] [ip4][..tcp] [......10.1.1.10][52472] -> [.......10.2.2.2][.8554] + detected: [.....2] [ip4][..tcp] [......10.1.1.10][52472] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + analyse: [.....2] [ip4][..tcp] [......10.1.1.10][52472] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.021| 0.002| 0.006] + [IAT(c->s)...: 0.000| 0.021| 0.002| 0.006][IAT(s->c)...: 0.000| 0.021| 0.002| 0.006] + [PKTLEN(c->s): 56.000| 198.000| 124.600| 61.100][PKTLEN(s->c): 56.000| 181.000| 92.500| 51.200] + [BINS(c->s)..: 8,0,0,4,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....3] [ip4][..tcp] [......10.1.1.10][52474] -> [.......10.2.2.2][.8554] + detected: [.....3] [ip4][..tcp] [......10.1.1.10][52474] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + analyse: [.....3] [ip4][..tcp] [......10.1.1.10][52474] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.021| 0.002| 0.005] + [IAT(c->s)...: 0.000| 0.021| 0.002| 0.006][IAT(s->c)...: 0.000| 0.020| 0.002| 0.005] + [PKTLEN(c->s): 56.000| 198.000| 124.600| 61.100][PKTLEN(s->c): 56.000| 181.000| 92.500| 51.200] + [BINS(c->s)..: 8,0,0,4,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....4] [ip4][..tcp] [......10.1.1.10][52476] -> [.......10.2.2.2][.8554] + detected: [.....4] [ip4][..tcp] [......10.1.1.10][52476] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + analyse: [.....4] [ip4][..tcp] [......10.1.1.10][52476] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.021| 0.002| 0.005] + [IAT(c->s)...: 0.000| 0.021| 0.002| 0.005][IAT(s->c)...: 0.000| 0.020| 0.002| 0.005] + [PKTLEN(c->s): 56.000| 198.000| 124.600| 61.100][PKTLEN(s->c): 56.000| 181.000| 92.500| 51.200] + [BINS(c->s)..: 8,0,0,4,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....5] [ip4][..tcp] [......10.1.1.10][52478] -> [.......10.2.2.2][.8554] + detected: [.....5] [ip4][..tcp] [......10.1.1.10][52478] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + analyse: [.....5] [ip4][..tcp] [......10.1.1.10][52478] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.505| 0.033| 0.124] + [IAT(c->s)...: 0.000| 0.505| 0.034| 0.126][IAT(s->c)...: 0.000| 0.505| 0.033| 0.122] + [PKTLEN(c->s): 56.000| 172.000| 92.100| 46.200][PKTLEN(s->c): 56.000| 181.000| 92.500| 51.200] + [BINS(c->s)..: 12,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....1] [ip4][..tcp] [......10.1.1.10][52470] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + new: [.....6] [ip4][..tcp] [......10.1.1.10][52480] -> [.......10.2.2.2][.8554] + detected: [.....6] [ip4][..tcp] [......10.1.1.10][52480] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + analyse: [.....6] [ip4][..tcp] [......10.1.1.10][52480] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.024| 0.002| 0.006] + [IAT(c->s)...: 0.000| 0.024| 0.002| 0.006][IAT(s->c)...: 0.000| 0.020| 0.002| 0.005] + [PKTLEN(c->s): 56.000| 198.000| 124.600| 61.100][PKTLEN(s->c): 56.000| 181.000| 92.500| 51.200] + [BINS(c->s)..: 8,0,0,4,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....2] [ip4][..tcp] [......10.1.1.10][52472] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + new: [.....7] [ip4][..tcp] [......10.1.1.10][52482] -> [.......10.2.2.2][.8554] + detected: [.....7] [ip4][..tcp] [......10.1.1.10][52482] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + analyse: [.....7] [ip4][..tcp] [......10.1.1.10][52482] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.021| 0.002| 0.005] + [IAT(c->s)...: 0.000| 0.021| 0.002| 0.005][IAT(s->c)...: 0.000| 0.020| 0.002| 0.005] + [PKTLEN(c->s): 56.000| 198.000| 124.600| 61.100][PKTLEN(s->c): 56.000| 181.000| 92.500| 51.200] + [BINS(c->s)..: 8,0,0,4,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....3] [ip4][..tcp] [......10.1.1.10][52474] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + end: [.....4] [ip4][..tcp] [......10.1.1.10][52476] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + end: [.....5] [ip4][..tcp] [......10.1.1.10][52478] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + end: [.....6] [ip4][..tcp] [......10.1.1.10][52480] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + idle: [.....7] [ip4][..tcp] [......10.1.1.10][52482] -> [.......10.2.2.2][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/rtsp_setup_http.pcapng.out b/test/results/flow-info/rtsp_setup_http.pcapng.out new file mode 100644 index 000000000..7a24dfb9a --- /dev/null +++ b/test/results/flow-info/rtsp_setup_http.pcapng.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...172.28.5.170][63840] -> [....172.28.4.26][.8554] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [...172.28.5.170][63840] -> [....172.28.4.26][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + idle: [.....1] [ip4][..tcp] [...172.28.5.170][63840] -> [....172.28.4.26][.8554] [RTSP][Media][Fun] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/rx.pcap.out b/test/results/flow-info/rx.pcap.out new file mode 100644 index 000000000..92098cc7a --- /dev/null +++ b/test/results/flow-info/rx.pcap.out @@ -0,0 +1,26 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [131.114.219.168][41559] -> [192.167.206.124][.7002] + detected: [.....1] [ip4][..udp] [131.114.219.168][41559] -> [192.167.206.124][.7002] [RX][RPC][Acceptable] + new: [.....2] [ip4][..udp] [131.114.219.168][38331] -> [192.167.206.124][.7002] + detected: [.....2] [ip4][..udp] [131.114.219.168][38331] -> [192.167.206.124][.7002] [RX][RPC][Acceptable] + new: [.....3] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.124][.7003] + detected: [.....3] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.124][.7003] [RX][RPC][Acceptable] + new: [.....4] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.241][.7000] + detected: [.....4] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.241][.7000] [RX][RPC][Acceptable] + new: [.....5] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.124][.7000] + detected: [.....5] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.124][.7000] [RX][RPC][Acceptable] + analyse: [.....4] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.241][.7000] [RX][RPC][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.105| 0.029| 0.034] + [IAT(c->s)...: 0.000| 0.103| 0.028| 0.033][IAT(s->c)...: 0.000| 0.105| 0.030| 0.034] + [PKTLEN(c->s): 70.000| 510.000| 190.700| 158.700][PKTLEN(s->c): 74.000| 782.000| 160.700| 172.300] + [BINS(c->s)..: 1,4,7,0,1,0,0,0,0,0,0,0,2,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,6,5,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..udp] [131.114.219.168][41559] -> [192.167.206.124][.7002] [RX][RPC][Acceptable] + idle: [.....5] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.124][.7000] [RX][RPC][Acceptable] + idle: [.....4] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.241][.7000] [RX][RPC][Acceptable] + idle: [.....3] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.124][.7003] [RX][RPC][Acceptable] + idle: [.....2] [ip4][..udp] [131.114.219.168][38331] -> [192.167.206.124][.7002] [RX][RPC][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/s7comm.pcap.out b/test/results/flow-info/s7comm.pcap.out new file mode 100644 index 000000000..c96da46e9 --- /dev/null +++ b/test/results/flow-info/s7comm.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.1.10][.4185] -> [...192.168.1.40][..102] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [...192.168.1.10][.4185] -> [...192.168.1.40][..102] [s7comm][Network][Acceptable] + analyse: [.....1] [ip4][..tcp] [...192.168.1.10][.4185] -> [...192.168.1.40][..102] [s7comm][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.009| 0.005| 0.003] + [IAT(c->s)...: 0.000| 0.009| 0.004| 0.003][IAT(s->c)...: 0.003| 0.009| 0.007| 0.002] + [PKTLEN(c->s): 61.000| 87.000| 72.900| 11.600][PKTLEN(s->c): 76.000| 275.000| 126.200| 51.100] + [BINS(c->s)..: 17,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,5,3,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..tcp] [...192.168.1.10][.4185] -> [...192.168.1.40][..102] [s7comm][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/safari.pcap.out b/test/results/flow-info/safari.pcap.out new file mode 100644 index 000000000..f7fc1d3a1 --- /dev/null +++ b/test/results/flow-info/safari.pcap.out @@ -0,0 +1,92 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.178][55262] -> [...146.48.58.18][..443] + detected: [.....1] [ip4][..tcp] [..192.168.1.178][55262] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.178][55262] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.178][55262] -> [...146.48.58.18][..443] [TLS][Web][Safe] + new: [.....2] [ip4][..tcp] [..192.168.1.178][55265] -> [...146.48.58.18][..443] + new: [.....3] [ip4][..tcp] [..192.168.1.178][55266] -> [...146.48.58.18][..443] + new: [.....4] [ip4][..tcp] [..192.168.1.178][55267] -> [...146.48.58.18][..443] + new: [.....5] [ip4][..tcp] [..192.168.1.178][55268] -> [...146.48.58.18][..443] + new: [.....6] [ip4][..tcp] [..192.168.1.178][55269] -> [...146.48.58.18][..443] + analyse: [.....1] [ip4][..tcp] [..192.168.1.178][55262] -> [...146.48.58.18][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.579| 0.077| 0.167] + [IAT(c->s)...: 0.000| 0.579| 0.085| 0.174][IAT(s->c)...: 0.000| 0.551| 0.070| 0.160] + [PKTLEN(c->s): 66.000| 445.000| 137.900| 131.400][PKTLEN(s->c): 66.000|1506.000| 950.400| 676.200] + [BINS(c->s)..: 11,0,1,0,0,0,0,1,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.178][55262] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detected: [.....4] [ip4][..tcp] [..192.168.1.178][55267] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detected: [.....2] [ip4][..tcp] [..192.168.1.178][55265] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detected: [.....5] [ip4][..tcp] [..192.168.1.178][55268] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detected: [.....3] [ip4][..tcp] [..192.168.1.178][55266] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detected: [.....6] [ip4][..tcp] [..192.168.1.178][55269] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....4] [ip4][..tcp] [..192.168.1.178][55267] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....2] [ip4][..tcp] [..192.168.1.178][55265] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....5] [ip4][..tcp] [..192.168.1.178][55268] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....3] [ip4][..tcp] [..192.168.1.178][55266] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....6] [ip4][..tcp] [..192.168.1.178][55269] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [.....4] [ip4][..tcp] [..192.168.1.178][55267] -> [...146.48.58.18][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.119| 0.018| 0.029] + [IAT(c->s)...: 0.000| 0.084| 0.020| 0.024][IAT(s->c)...: 0.000| 0.119| 0.016| 0.032] + [PKTLEN(c->s): 66.000| 508.000| 147.900| 154.600][PKTLEN(s->c): 66.000|1506.000|1008.600| 658.000] + [BINS(c->s)..: 10,1,0,0,0,0,1,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0] + analyse: [.....2] [ip4][..tcp] [..192.168.1.178][55265] -> [...146.48.58.18][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.140| 0.019| 0.033] + [IAT(c->s)...: 0.000| 0.104| 0.023| 0.028][IAT(s->c)...: 0.000| 0.140| 0.017| 0.036] + [PKTLEN(c->s): 66.000| 500.000| 145.600| 149.200][PKTLEN(s->c): 66.000|1506.000| 982.000| 665.600] + [BINS(c->s)..: 10,1,0,0,0,0,1,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0] + analyse: [.....3] [ip4][..tcp] [..192.168.1.178][55266] -> [...146.48.58.18][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.144| 0.020| 0.034] + [IAT(c->s)...: 0.000| 0.107| 0.023| 0.029][IAT(s->c)...: 0.000| 0.144| 0.017| 0.036] + [PKTLEN(c->s): 66.000| 503.000| 147.600| 153.700][PKTLEN(s->c): 66.000|1506.000| 994.600| 659.800] + [BINS(c->s)..: 10,1,0,0,0,0,1,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0] + analyse: [.....6] [ip4][..tcp] [..192.168.1.178][55269] -> [...146.48.58.18][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.147| 0.020| 0.034] + [IAT(c->s)...: 0.000| 0.105| 0.023| 0.029][IAT(s->c)...: 0.000| 0.147| 0.017| 0.037] + [PKTLEN(c->s): 66.000| 500.000| 147.200| 152.900][PKTLEN(s->c): 66.000|1506.000| 960.700| 684.600] + [BINS(c->s)..: 10,1,0,0,0,0,1,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0] + analyse: [.....5] [ip4][..tcp] [..192.168.1.178][55268] -> [...146.48.58.18][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.146| 0.022| 0.035] + [IAT(c->s)...: 0.000| 0.116| 0.024| 0.030][IAT(s->c)...: 0.000| 0.146| 0.020| 0.038] + [PKTLEN(c->s): 66.000| 503.000| 170.700| 171.800][PKTLEN(s->c): 66.000|1506.000| 852.800| 687.200] + [BINS(c->s)..: 10,1,0,0,0,0,1,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,8,0,0] + new: [.....7] [ip4][..tcp] [..192.168.1.178][55285] -> [...146.48.58.18][..443] + detected: [.....7] [ip4][..tcp] [..192.168.1.178][55285] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....7] [ip4][..tcp] [..192.168.1.178][55285] -> [...146.48.58.18][..443] [TLS][Web][Safe] + detection-update: [.....7] [ip4][..tcp] [..192.168.1.178][55285] -> [...146.48.58.18][..443] [TLS][Web][Safe] + idle: [.....1] [ip4][..tcp] [..192.168.1.178][55262] -> [...146.48.58.18][..443] [TLS][Web][Safe] + idle: [.....2] [ip4][..tcp] [..192.168.1.178][55265] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....3] [ip4][..tcp] [..192.168.1.178][55266] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....4] [ip4][..tcp] [..192.168.1.178][55267] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....5] [ip4][..tcp] [..192.168.1.178][55268] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....6] [ip4][..tcp] [..192.168.1.178][55269] -> [...146.48.58.18][..443] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....7] [ip4][..tcp] [..192.168.1.178][55285] -> [...146.48.58.18][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/salesforce.pcap.out b/test/results/flow-info/salesforce.pcap.out new file mode 100644 index 000000000..0617d9d0d --- /dev/null +++ b/test/results/flow-info/salesforce.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.178][54399] -> [...85.222.142.6][..443] + detected: [.....1] [ip4][..tcp] [..192.168.1.178][54399] -> [...85.222.142.6][..443] [TLS.Salesforce][Cloud][Safe] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.178][54399] -> [...85.222.142.6][..443] [TLS.Salesforce][Cloud][Safe] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.178][54399] -> [...85.222.142.6][..443] [TLS.Salesforce][Cloud][Safe] + idle: [.....1] [ip4][..tcp] [..192.168.1.178][54399] -> [...85.222.142.6][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/sccp_hw_conf_register.pcapng.out b/test/results/flow-info/sccp_hw_conf_register.pcapng.out new file mode 100644 index 000000000..092abe056 --- /dev/null +++ b/test/results/flow-info/sccp_hw_conf_register.pcapng.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..10.180.110.58][46461] -> [..10.180.110.48][.2000] + detected: [.....1] [ip4][..tcp] [..10.180.110.58][46461] -> [..10.180.110.48][.2000] [CiscoSkinny][VoIP][Acceptable] + idle: [.....1] [ip4][..tcp] [..10.180.110.58][46461] -> [..10.180.110.48][.2000] [CiscoSkinny][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/sctp.cap.out b/test/results/flow-info/sctp.cap.out new file mode 100644 index 000000000..d4a25ddb6 --- /dev/null +++ b/test/results/flow-info/sctp.cap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..132] [.....10.28.6.43] -> [.....10.28.6.44] + detected: [.....1] [ip4][..132] [.....10.28.6.43] -> [.....10.28.6.44] [SCTP][Network][Acceptable] + new: [.....2] [ip4][..132] [.....10.28.6.42] -> [.....10.28.6.44] + detected: [.....2] [ip4][..132] [.....10.28.6.42] -> [.....10.28.6.44] [SCTP][Network][Acceptable] + idle: [.....2] [ip4][..132] [.....10.28.6.42] -> [.....10.28.6.44] [SCTP][Network][Acceptable] + idle: [.....1] [ip4][..132] [.....10.28.6.43] -> [.....10.28.6.44] [SCTP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/selfsigned.pcap.out b/test/results/flow-info/selfsigned.pcap.out new file mode 100644 index 000000000..fd3413da2 --- /dev/null +++ b/test/results/flow-info/selfsigned.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......127.0.0.1][51607] -> [......127.0.0.1][.3001] + detected: [.....1] [ip4][..tcp] [......127.0.0.1][51607] -> [......127.0.0.1][.3001] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port + detection-update: [.....1] [ip4][..tcp] [......127.0.0.1][51607] -> [......127.0.0.1][.3001] [TLS.ntop][Network][Safe] + RISK: Known Proto on Non Std Port, Self-signed Cert, TLS Cert Expired + end: [.....1] [ip4][..tcp] [......127.0.0.1][51607] -> [......127.0.0.1][.3001] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/sflow.pcap.out b/test/results/flow-info/sflow.pcap.out new file mode 100644 index 000000000..a01b38eb1 --- /dev/null +++ b/test/results/flow-info/sflow.pcap.out @@ -0,0 +1,8 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...172.21.35.17][.1027] -> [..172.21.35.199][.6343] + detected: [.....1] [ip4][..udp] [...172.21.35.17][.1027] -> [..172.21.35.199][.6343] [sFlow][Network][Acceptable] + update: [.....1] [ip4][..udp] [...172.21.35.17][.1027] -> [..172.21.35.199][.6343] [sFlow][Network][Acceptable] + idle: [.....1] [ip4][..udp] [...172.21.35.17][.1027] -> [..172.21.35.199][.6343] [sFlow][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/signal.pcap.out b/test/results/flow-info/signal.pcap.out new file mode 100644 index 000000000..73730f6be --- /dev/null +++ b/test/results/flow-info/signal.pcap.out @@ -0,0 +1,120 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [.....1] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [.....2] [ip4][..udp] [...192.168.2.17][60793] -> [....192.168.2.1][...53] + detected: [.....2] [ip4][..udp] [...192.168.2.17][60793] -> [....192.168.2.1][...53] [DNS][Network][Acceptable] + new: [.....3] [ip4][..tcp] [...192.168.2.17][49226] -> [.34.225.240.173][..443] + new: [.....4] [ip4][..tcp] [...192.168.2.17][57018] -> [....23.57.24.16][..443] + new: [.....5] [ip4][..tcp] [...192.168.2.17][57019] -> [.34.225.240.173][..443] + new: [.....6] [ip4][..tcp] [...192.168.2.17][57020] -> [.34.225.240.173][..443] + new: [.....7] [ip4][..tcp] [...192.168.2.17][57021] -> [.34.225.240.173][..443] + detection-update: [.....2] [ip4][..udp] [...192.168.2.17][60793] -> [....192.168.2.1][...53] [DNS][Network][Acceptable] + detected: [.....4] [ip4][..tcp] [...192.168.2.17][57018] -> [....23.57.24.16][..443] [TLS.AppleiTunes][Streaming][Fun] + detection-update: [.....4] [ip4][..tcp] [...192.168.2.17][57018] -> [....23.57.24.16][..443] [TLS.AppleiTunes][Streaming][Fun] + detected: [.....3] [ip4][..tcp] [...192.168.2.17][49226] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detected: [.....5] [ip4][..tcp] [...192.168.2.17][57019] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + detected: [.....7] [ip4][..tcp] [...192.168.2.17][57021] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + detected: [.....6] [ip4][..tcp] [...192.168.2.17][57020] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + analyse: [.....4] [ip4][..tcp] [...192.168.2.17][57018] -> [....23.57.24.16][..443] [TLS.AppleiTunes][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.052| 0.012| 0.020] + [IAT(c->s)...: 0.000| 0.048| 0.013| 0.020][IAT(s->c)...: 0.000| 0.052| 0.012| 0.020] + [PKTLEN(c->s): 66.000| 583.000| 122.600| 124.700][PKTLEN(s->c): 66.000|1506.000| 732.000| 587.100] + [BINS(c->s)..: 10,3,1,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,1,0,0,0,0,0,2,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,1,0,0,0,0,0,0,4,0,0] + detection-update: [.....3] [ip4][..tcp] [...192.168.2.17][49226] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....3] [ip4][..tcp] [...192.168.2.17][49226] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....5] [ip4][..tcp] [...192.168.2.17][57019] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + detection-update: [.....5] [ip4][..tcp] [...192.168.2.17][57019] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + detection-update: [.....7] [ip4][..tcp] [...192.168.2.17][57021] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + detection-update: [.....7] [ip4][..tcp] [...192.168.2.17][57021] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + detection-update: [.....6] [ip4][..tcp] [...192.168.2.17][57020] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + detection-update: [.....6] [ip4][..tcp] [...192.168.2.17][57020] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + new: [.....8] [ip4][..tcp] [...192.168.2.17][56996] -> [.17.248.146.144][..443] [MIDSTREAM] + detected: [.....8] [ip4][..tcp] [...192.168.2.17][56996] -> [.17.248.146.144][..443] [TLS.Apple][Web][Safe] + new: [.....9] [ip4][..tcp] [...192.168.2.17][57017] -> [...2.18.232.118][..443] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [...192.168.2.17][57017] -> [...2.18.232.118][..443] [TLS][Web][Safe] + new: [....10] [ip4][..tcp] [...192.168.2.17][49227] -> [....35.169.3.40][..443] + new: [....11] [ip4][..tcp] [...192.168.2.17][57022] -> [....23.57.24.16][..443] + new: [....12] [ip4][..udp] [...192.168.2.17][56263] -> [....192.168.2.1][...53] + detected: [....12] [ip4][..udp] [...192.168.2.17][56263] -> [....192.168.2.1][...53] [DNS.Signal][Chat][Fun] + new: [....13] [ip4][..tcp] [...192.168.2.17][57023] -> [....35.169.3.40][..443] + new: [....14] [ip4][..tcp] [...192.168.2.17][57024] -> [....35.169.3.40][..443] + new: [....15] [ip4][..tcp] [...192.168.2.17][57025] -> [....35.169.3.40][..443] + detection-update: [....12] [ip4][..udp] [...192.168.2.17][56263] -> [....192.168.2.1][...53] [DNS.Signal][Chat][Fun] + new: [....16] [ip4][.icmp] [...192.168.2.17] -> [....192.168.2.1] + detected: [....16] [ip4][.icmp] [...192.168.2.17] -> [....192.168.2.1] [ICMP][Network][Acceptable] + detected: [....11] [ip4][..tcp] [...192.168.2.17][57022] -> [....23.57.24.16][..443] [TLS.AppleiTunes][Streaming][Fun] + detection-update: [....11] [ip4][..tcp] [...192.168.2.17][57022] -> [....23.57.24.16][..443] [TLS.AppleiTunes][Streaming][Fun] + detected: [....10] [ip4][..tcp] [...192.168.2.17][49227] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....13] [ip4][..tcp] [...192.168.2.17][57023] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + detected: [....14] [ip4][..tcp] [...192.168.2.17][57024] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + detected: [....15] [ip4][..tcp] [...192.168.2.17][57025] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + analyse: [....11] [ip4][..tcp] [...192.168.2.17][57022] -> [....23.57.24.16][..443] [TLS.AppleiTunes][Streaming][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.101| 0.015| 0.025] + [IAT(c->s)...: 0.000| 0.101| 0.017| 0.027][IAT(s->c)...: 0.000| 0.083| 0.014| 0.023] + [PKTLEN(c->s): 66.000| 583.000| 125.100| 128.200][PKTLEN(s->c): 66.000|1506.000| 728.500| 569.700] + [BINS(c->s)..: 9,3,1,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,1,0,0,0,0,0,2,0,0,1,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,1,0,0,0,0,0,0,4,0,0] + detection-update: [....10] [ip4][..tcp] [...192.168.2.17][49227] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....10] [ip4][..tcp] [...192.168.2.17][49227] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....13] [ip4][..tcp] [...192.168.2.17][57023] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + detection-update: [....13] [ip4][..tcp] [...192.168.2.17][57023] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + detection-update: [....15] [ip4][..tcp] [...192.168.2.17][57025] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + detection-update: [....15] [ip4][..tcp] [...192.168.2.17][57025] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + detection-update: [....14] [ip4][..tcp] [...192.168.2.17][57024] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + detection-update: [....14] [ip4][..tcp] [...192.168.2.17][57024] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + new: [....17] [ip4][..tcp] [...192.168.2.17][57026] -> [....35.169.3.40][..443] + detected: [....17] [ip4][..tcp] [...192.168.2.17][57026] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + detection-update: [....17] [ip4][..tcp] [...192.168.2.17][57026] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + detection-update: [....17] [ip4][..tcp] [...192.168.2.17][57026] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + analyse: [....17] [ip4][..tcp] [...192.168.2.17][57026] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.115| 0.033| 0.050] + [IAT(c->s)...: 0.000| 0.112| 0.024| 0.045][IAT(s->c)...: 0.000| 0.115| 0.047| 0.054] + [PKTLEN(c->s): 66.000|1506.000| 681.200| 632.900][PKTLEN(s->c): 66.000|1506.000| 286.300| 463.400] + [BINS(c->s)..: 4,3,1,1,0,0,0,1,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0] + [BINS(s->c)..: 7,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + new: [....18] [ip4][..tcp] [....23.57.24.16][..443] -> [...192.168.2.17][57016] [MIDSTREAM] + detected: [....18] [ip4][..tcp] [....23.57.24.16][..443] -> [...192.168.2.17][57016] [TLS][Web][Safe] + new: [....19] [ip4][..tcp] [...192.168.2.17][57027] -> [...13.35.253.42][..443] + detected: [....19] [ip4][..tcp] [...192.168.2.17][57027] -> [...13.35.253.42][..443] [TLS.Signal][Chat][Fun] + detection-update: [....19] [ip4][..tcp] [...192.168.2.17][57027] -> [...13.35.253.42][..443] [TLS.Signal][Chat][Fun] + detection-update: [....19] [ip4][..tcp] [...192.168.2.17][57027] -> [...13.35.253.42][..443] [TLS.Signal][Chat][Fun] + analyse: [....19] [ip4][..tcp] [...192.168.2.17][57027] -> [...13.35.253.42][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.043| 0.012| 0.016] + [IAT(c->s)...: 0.000| 0.040| 0.009| 0.014][IAT(s->c)...: 0.000| 0.043| 0.016| 0.018] + [PKTLEN(c->s): 66.000|1506.000| 652.400| 646.100][PKTLEN(s->c): 66.000|1506.000| 278.400| 450.000] + [BINS(c->s)..: 5,4,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0] + [BINS(s->c)..: 7,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + detection-update: [....19] [ip4][..tcp] [...192.168.2.17][57027] -> [...13.35.253.42][..443] [TLS.Signal][Chat][Fun] + idle: [.....1] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + end: [.....8] [ip4][..tcp] [...192.168.2.17][56996] -> [.17.248.146.144][..443] [TLS.Apple][Web][Safe] + idle: [....16] [ip4][.icmp] [...192.168.2.17] -> [....192.168.2.1] [ICMP][Network][Acceptable] + end: [....18] [ip4][..tcp] [....23.57.24.16][..443] -> [...192.168.2.17][57016] + end: [.....4] [ip4][..tcp] [...192.168.2.17][57018] -> [....23.57.24.16][..443] [TLS.AppleiTunes][Streaming][Fun] + end: [....11] [ip4][..tcp] [...192.168.2.17][57022] -> [....23.57.24.16][..443] [TLS.AppleiTunes][Streaming][Fun] + end: [.....5] [ip4][..tcp] [...192.168.2.17][57019] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + end: [.....6] [ip4][..tcp] [...192.168.2.17][57020] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + end: [.....7] [ip4][..tcp] [...192.168.2.17][57021] -> [.34.225.240.173][..443] [TLS.Signal][Chat][Fun] + idle: [....13] [ip4][..tcp] [...192.168.2.17][57023] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + idle: [....14] [ip4][..tcp] [...192.168.2.17][57024] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + idle: [....15] [ip4][..tcp] [...192.168.2.17][57025] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + idle: [....17] [ip4][..tcp] [...192.168.2.17][57026] -> [....35.169.3.40][..443] [TLS.Signal][Chat][Fun] + end: [.....9] [ip4][..tcp] [...192.168.2.17][57017] -> [...2.18.232.118][..443] [TLS][Web][Safe] + end: [.....3] [ip4][..tcp] [...192.168.2.17][49226] -> [.34.225.240.173][..443] + idle: [....10] [ip4][..tcp] [...192.168.2.17][49227] -> [....35.169.3.40][..443] + idle: [....19] [ip4][..tcp] [...192.168.2.17][57027] -> [...13.35.253.42][..443] [TLS.Signal][Chat][Fun] + idle: [....12] [ip4][..udp] [...192.168.2.17][56263] -> [....192.168.2.1][...53] [DNS.Signal][Chat][Fun] + idle: [.....2] [ip4][..udp] [...192.168.2.17][60793] -> [....192.168.2.1][...53] [DNS][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/simple-dnscrypt.pcap.out b/test/results/flow-info/simple-dnscrypt.pcap.out new file mode 100644 index 000000000..b9693b90d --- /dev/null +++ b/test/results/flow-info/simple-dnscrypt.pcap.out @@ -0,0 +1,40 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.192.168.43.167][50233] -> [..134.119.26.24][..443] + detected: [.....1] [ip4][..tcp] [.192.168.43.167][50233] -> [..134.119.26.24][..443] [TLS][Web][Safe] + detection-update: [.....1] [ip4][..tcp] [.192.168.43.167][50233] -> [..134.119.26.24][..443] [TLS][Web][Safe] + detection-update: [.....1] [ip4][..tcp] [.192.168.43.167][50233] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + analyse: [.....1] [ip4][..tcp] [.192.168.43.167][50233] -> [..134.119.26.24][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.222| 0.043| 0.053] + [IAT(c->s)...: 0.000| 0.115| 0.042| 0.043][IAT(s->c)...: 0.000| 0.222| 0.044| 0.060] + [PKTLEN(c->s): 54.000| 272.000| 108.400| 70.700][PKTLEN(s->c): 54.000|1364.000| 652.500| 599.900] + [BINS(c->s)..: 7,4,1,1,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,1,0,0,0,0,0,1,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,6,0,0,0,0,0,0,0] + detection-update: [.....1] [ip4][..tcp] [.192.168.43.167][50233] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + new: [.....2] [ip4][..tcp] [.192.168.43.167][50253] -> [..134.119.26.24][..443] + new: [.....3] [ip4][..tcp] [.192.168.43.167][50258] -> [..134.119.26.24][..443] + new: [.....4] [ip4][..tcp] [.192.168.43.167][50259] -> [..134.119.26.24][..443] + detected: [.....2] [ip4][..tcp] [.192.168.43.167][50253] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + detected: [.....4] [ip4][..tcp] [.192.168.43.167][50259] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + detected: [.....3] [ip4][..tcp] [.192.168.43.167][50258] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + detection-update: [.....4] [ip4][..tcp] [.192.168.43.167][50259] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + detection-update: [.....4] [ip4][..tcp] [.192.168.43.167][50259] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + detection-update: [.....2] [ip4][..tcp] [.192.168.43.167][50253] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + detection-update: [.....2] [ip4][..tcp] [.192.168.43.167][50253] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + detection-update: [.....3] [ip4][..tcp] [.192.168.43.167][50258] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + detection-update: [.....3] [ip4][..tcp] [.192.168.43.167][50258] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + analyse: [.....4] [ip4][..tcp] [.192.168.43.167][50259] -> [..134.119.26.24][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.106| 0.026| 0.036] + [IAT(c->s)...: 0.000| 0.106| 0.026| 0.039][IAT(s->c)...: 0.000| 0.085| 0.026| 0.033] + [PKTLEN(c->s): 54.000| 334.000| 114.900| 79.300][PKTLEN(s->c): 54.000|1364.000| 551.200| 561.900] + [BINS(c->s)..: 7,4,2,1,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,1,0,0,0,0,0,1,1,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,0] + detection-update: [.....4] [ip4][..tcp] [.192.168.43.167][50259] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + idle: [.....1] [ip4][..tcp] [.192.168.43.167][50233] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + idle: [.....2] [ip4][..tcp] [.192.168.43.167][50253] -> [..134.119.26.24][..443] + idle: [.....3] [ip4][..tcp] [.192.168.43.167][50258] -> [..134.119.26.24][..443] + idle: [.....4] [ip4][..tcp] [.192.168.43.167][50259] -> [..134.119.26.24][..443] [TLS.DNScrypt][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/sip.pcap.out b/test/results/flow-info/sip.pcap.out new file mode 100644 index 000000000..00eb5d11f --- /dev/null +++ b/test/results/flow-info/sip.pcap.out @@ -0,0 +1,52 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] + detected: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + new: [.....2] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] + detected: [.....2] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....2] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....2] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + DAEMON-EVENT: [Processed: 43 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 9] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....2] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + analyse: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.026| 279.042| 42.751| 57.874] + [IAT(c->s)...: 0.227| 150.200| 33.134| 34.181][IAT(s->c)...: 0.026| 279.042| 60.237| 82.710] + [PKTLEN(c->s): 47.000| 867.000| 396.700| 326.500][PKTLEN(s->c): 348.000| 635.000| 491.700| 86.200] + [BINS(c->s)..: 9,0,0,0,0,0,0,0,0,0,1,0,0,0,4,0,0,0,0,0,0,4,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,2,1,0,0,0,1,6,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....2] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + idle: [.....2] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + DAEMON-EVENT: [Processed: 68 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 17] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + new: [.....3] [ip4][..udp] [....192.168.1.2][30000] -> [..212.242.33.36][40392] + detected: [.....3] [ip4][..udp] [....192.168.1.2][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + new: [.....4] [ip4][..udp] [....192.168.1.2][30001] -> [..212.242.33.36][40393] + detected: [.....4] [ip4][..udp] [....192.168.1.2][30001] -> [..212.242.33.36][40393] [RTCP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + update: [.....3] [ip4][..udp] [....192.168.1.2][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + update: [.....4] [ip4][..udp] [....192.168.1.2][30001] -> [..212.242.33.36][40393] [RTCP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + idle: [.....1] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.242.33.35][.5060] [SIP][VoIP][Acceptable] + idle: [.....3] [ip4][..udp] [....192.168.1.2][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] + idle: [.....4] [ip4][..udp] [....192.168.1.2][30001] -> [..212.242.33.36][40393] [RTCP][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/sip_hello.pcapng.out b/test/results/flow-info/sip_hello.pcapng.out new file mode 100644 index 000000000..22761ae48 --- /dev/null +++ b/test/results/flow-info/sip_hello.pcapng.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.10.239.156.235][.5060] -> [...172.29.38.91][.5060] + update: [.....1] [ip4][..udp] [.10.239.156.235][.5060] -> [...172.29.38.91][.5060] + update: [.....1] [ip4][..udp] [.10.239.156.235][.5060] -> [...172.29.38.91][.5060] + update: [.....1] [ip4][..udp] [.10.239.156.235][.5060] -> [...172.29.38.91][.5060] + detected: [.....1] [ip4][..udp] [.10.239.156.235][.5060] -> [...172.29.38.91][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [.10.239.156.235][.5060] -> [...172.29.38.91][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [.10.239.156.235][.5060] -> [...172.29.38.91][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [.10.239.156.235][.5060] -> [...172.29.38.91][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [.10.239.156.235][.5060] -> [...172.29.38.91][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [.10.239.156.235][.5060] -> [...172.29.38.91][.5060] [SIP][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [.10.239.156.235][.5060] -> [...172.29.38.91][.5060] [SIP][VoIP][Acceptable] + idle: [.....1] [ip4][..udp] [.10.239.156.235][.5060] -> [...172.29.38.91][.5060] [SIP][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/sites.pcapng.out b/test/results/flow-info/sites.pcapng.out new file mode 100644 index 000000000..c24bce420 --- /dev/null +++ b/test/results/flow-info/sites.pcapng.out @@ -0,0 +1,234 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.192.168.12.169][46160] -> [..69.171.250.20][..443] + detected: [.....1] [ip4][..tcp] [.192.168.12.169][46160] -> [..69.171.250.20][..443] [TLS.Messenger][Chat][Acceptable] + detection-update: [.....1] [ip4][..tcp] [.192.168.12.169][46160] -> [..69.171.250.20][..443] [TLS.Messenger][Chat][Acceptable] + DAEMON-EVENT: [Processed: 4 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 1|updates: 0] + new: [.....2] [ip4][..tcp] [..192.168.1.250][41878] -> [...92.122.95.99][..443] + detected: [.....2] [ip4][..tcp] [..192.168.1.250][41878] -> [...92.122.95.99][..443] [TLS.TikTok][SocialNetwork][Fun] + detection-update: [.....2] [ip4][..tcp] [..192.168.1.250][41878] -> [...92.122.95.99][..443] [TLS.TikTok][SocialNetwork][Fun] + idle: [.....1] [ip4][..tcp] [.192.168.12.169][46160] -> [..69.171.250.20][..443] + DAEMON-EVENT: [Processed: 35 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 2|updates: 0] + new: [.....3] [ip4][..tcp] [..192.168.1.227][50071] -> [...52.73.71.226][..443] + detected: [.....3] [ip4][..tcp] [..192.168.1.227][50071] -> [...52.73.71.226][..443] [TLS.Fuze][VoIP][Acceptable] + detection-update: [.....3] [ip4][..tcp] [..192.168.1.227][50071] -> [...52.73.71.226][..443] [TLS.Fuze][VoIP][Acceptable] + detection-update: [.....3] [ip4][..tcp] [..192.168.1.227][50071] -> [...52.73.71.226][..443] [TLS.Fuze][VoIP][Acceptable] + end: [.....2] [ip4][..tcp] [..192.168.1.250][41878] -> [...92.122.95.99][..443] + DAEMON-EVENT: [Processed: 66 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 4|updates: 0] + new: [.....4] [ip4][..tcp] [..192.168.1.128][50620] -> [.91.198.174.208][..443] + detected: [.....4] [ip4][..tcp] [..192.168.1.128][50620] -> [.91.198.174.208][..443] [TLS.Wikipedia][Web][Safe] + detection-update: [.....4] [ip4][..tcp] [..192.168.1.128][50620] -> [.91.198.174.208][..443] [TLS.Wikipedia][Web][Safe] + analyse: [.....4] [ip4][..tcp] [..192.168.1.128][50620] -> [.91.198.174.208][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.053| 0.020| 0.024] + [IAT(c->s)...: 0.000| 0.052| 0.020| 0.024][IAT(s->c)...: 0.000| 0.053| 0.020| 0.024] + [PKTLEN(c->s): 66.000| 583.000| 140.600| 142.000][PKTLEN(s->c): 66.000|1514.000| 981.900| 646.100] + [BINS(c->s)..: 10,0,1,0,0,1,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,1,0,1,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,10,0,0] + detection-update: [.....4] [ip4][..tcp] [..192.168.1.128][50620] -> [.91.198.174.208][..443] [TLS.Wikipedia][Web][Safe] + end: [.....3] [ip4][..tcp] [..192.168.1.227][50071] -> [...52.73.71.226][..443] + DAEMON-EVENT: [Processed: 118 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 6|updates: 0] + new: [.....5] [ip4][..tcp] [..192.168.1.250][39890] -> [...45.82.241.51][...80] + detected: [.....5] [ip4][..tcp] [..192.168.1.250][39890] -> [...45.82.241.51][...80] [HTTP.Likee][SocialNetwork][Fun] + analyse: [.....5] [ip4][..tcp] [..192.168.1.250][39890] -> [...45.82.241.51][...80] [HTTP.Likee][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.031| 0.138| 0.327] + [IAT(c->s)...: 0.000| 0.974| 0.110| 0.289][IAT(s->c)...: 0.000| 1.031| 0.184| 0.379] + [PKTLEN(c->s): 60.000| 244.000| 82.500| 59.100][PKTLEN(s->c): 60.000|1514.000|1312.700| 491.000] + [BINS(c->s)..: 15,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,12,0,0] + end: [.....4] [ip4][..tcp] [..192.168.1.128][50620] -> [.91.198.174.208][..443] [TLS.Wikipedia][Web][Safe] + DAEMON-EVENT: [Processed: 230 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 6|updates: 0] + new: [.....6] [ip4][..tcp] [..192.168.1.128][46724] -> [.199.232.82.109][..443] + detected: [.....6] [ip4][..tcp] [..192.168.1.128][46724] -> [.199.232.82.109][..443] [TLS.Vimeo][Streaming][Fun] + detection-update: [.....6] [ip4][..tcp] [..192.168.1.128][46724] -> [.199.232.82.109][..443] [TLS.Vimeo][Streaming][Fun] + detection-update: [.....6] [ip4][..tcp] [..192.168.1.128][46724] -> [.199.232.82.109][..443] [TLS.Vimeo][Streaming][Fun] + end: [.....5] [ip4][..tcp] [..192.168.1.250][39890] -> [...45.82.241.51][...80] [HTTP.Likee][SocialNetwork][Fun] + DAEMON-EVENT: [Processed: 255 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 8|updates: 0] + new: [.....7] [ip4][..tcp] [..192.168.1.128][48918] -> [...143.204.9.65][..443] + detected: [.....7] [ip4][..tcp] [..192.168.1.128][48918] -> [...143.204.9.65][..443] [TLS.DisneyPlus][Streaming][Fun] + detection-update: [.....7] [ip4][..tcp] [..192.168.1.128][48918] -> [...143.204.9.65][..443] [TLS.DisneyPlus][Streaming][Fun] + end: [.....6] [ip4][..tcp] [..192.168.1.128][46724] -> [.199.232.82.109][..443] + DAEMON-EVENT: [Processed: 284 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 7|skipped: 0|!detected: 0|guessed: 0|detection-updates: 9|updates: 0] + new: [.....8] [ip4][..tcp] [.192.168.12.169][39248] -> [...23.12.104.83][..443] + detected: [.....8] [ip4][..tcp] [.192.168.12.169][39248] -> [...23.12.104.83][..443] [TLS.AccuWeather][Web][Fun] + detection-update: [.....8] [ip4][..tcp] [.192.168.12.169][39248] -> [...23.12.104.83][..443] [TLS.AccuWeather][Web][Fun] + end: [.....7] [ip4][..tcp] [..192.168.1.128][48918] -> [...143.204.9.65][..443] + DAEMON-EVENT: [Processed: 314 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 10|updates: 0] + new: [.....9] [ip4][..udp] [..192.168.1.123][59102] -> [..216.58.209.46][..443] + detected: [.....9] [ip4][..udp] [..192.168.1.123][59102] -> [..216.58.209.46][..443] [QUIC.GoogleClassroom][Collaborative][Safe] + end: [.....8] [ip4][..tcp] [.192.168.12.169][39248] -> [...23.12.104.83][..443] + DAEMON-EVENT: [Processed: 315 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 9|skipped: 0|!detected: 0|guessed: 0|detection-updates: 10|updates: 0] + new: [....10] [ip4][..tcp] [..192.168.1.128][35054] -> [..31.222.67.112][..443] + detected: [....10] [ip4][..tcp] [..192.168.1.128][35054] -> [..31.222.67.112][..443] [TLS.Badoo][SocialNetwork][Fun] + detection-update: [....10] [ip4][..tcp] [..192.168.1.128][35054] -> [..31.222.67.112][..443] [TLS.Badoo][SocialNetwork][Fun] + idle: [.....9] [ip4][..udp] [..192.168.1.123][59102] -> [..216.58.209.46][..443] [QUIC.GoogleClassroom][Collaborative][Safe] + new: [....11] [ip4][..tcp] [..192.168.1.128][53998] -> [..172.65.251.78][..443] + detected: [....11] [ip4][..tcp] [..192.168.1.128][53998] -> [..172.65.251.78][..443] [TLS.GitLab][Collaborative][Fun] + detection-update: [....11] [ip4][..tcp] [..192.168.1.128][53998] -> [..172.65.251.78][..443] [TLS.GitLab][Collaborative][Fun] + new: [....12] [ip4][..tcp] [..192.168.1.128][42580] -> [...2.17.141.128][..443] + detected: [....12] [ip4][..tcp] [..192.168.1.128][42580] -> [...2.17.141.128][..443] [TLS.Activision][Game][Fun] + detection-update: [....12] [ip4][..tcp] [..192.168.1.128][42580] -> [...2.17.141.128][..443] [TLS.Activision][Game][Fun] + detection-update: [....12] [ip4][..tcp] [..192.168.1.128][42580] -> [...2.17.141.128][..443] [TLS.Activision][Game][Fun] + new: [....13] [ip4][..tcp] [..192.168.1.128][46084] -> [..146.75.62.167][..443] + detected: [....13] [ip4][..tcp] [..192.168.1.128][46084] -> [..146.75.62.167][..443] [TLS.Twitch][Video][Fun] + detection-update: [....13] [ip4][..tcp] [..192.168.1.128][46084] -> [..146.75.62.167][..443] [TLS.Twitch][Video][Fun] + new: [....14] [ip4][..tcp] [..192.168.1.128][45936] -> [..208.85.40.158][...80] + new: [....15] [ip4][..tcp] [..192.168.1.128][51806] -> [..18.66.196.102][..443] + detected: [....15] [ip4][..tcp] [..192.168.1.128][51806] -> [..18.66.196.102][..443] [TLS.SoundCloud][Music][Fun] + detection-update: [....15] [ip4][..tcp] [..192.168.1.128][51806] -> [..18.66.196.102][..443] [TLS.SoundCloud][Music][Fun] + new: [....16] [ip4][..tcp] [..192.168.1.128][56468] -> [.151.101.192.92][..443] + detected: [....16] [ip4][..tcp] [..192.168.1.128][56468] -> [.151.101.192.92][..443] [TLS][Web][Safe] + detection-update: [....16] [ip4][..tcp] [..192.168.1.128][56468] -> [.151.101.192.92][..443] [TLS][Web][Safe] + detection-update: [....16] [ip4][..tcp] [..192.168.1.128][56468] -> [.151.101.192.92][..443] [TLS.Vevo][Music][Fun] + new: [....17] [ip4][..tcp] [..192.168.1.128][48140] -> [.....23.1.66.79][..443] + detected: [....17] [ip4][..tcp] [..192.168.1.128][48140] -> [.....23.1.66.79][..443] [TLS.CNN][Web][Safe] + detection-update: [....17] [ip4][..tcp] [..192.168.1.128][48140] -> [.....23.1.66.79][..443] [TLS.CNN][Web][Safe] + new: [....18] [ip4][..tcp] [..192.168.1.128][40832] -> [....2.17.141.49][..443] + detected: [....18] [ip4][..tcp] [..192.168.1.128][40832] -> [....2.17.141.49][..443] [TLS.eBay][Shopping][Safe] + detection-update: [....18] [ip4][..tcp] [..192.168.1.128][40832] -> [....2.17.141.49][..443] [TLS.eBay][Shopping][Safe] + new: [....19] [ip4][..tcp] [..192.168.1.128][42884] -> [.185.125.190.21][..443] + detected: [....19] [ip4][..tcp] [..192.168.1.128][42884] -> [.185.125.190.21][..443] [TLS.UbuntuONE][Cloud][Acceptable] + detection-update: [....19] [ip4][..tcp] [..192.168.1.128][42884] -> [.185.125.190.21][..443] [TLS.UbuntuONE][Cloud][Acceptable] + new: [....20] [ip4][..tcp] [..192.168.1.128][51248] -> [..95.131.169.91][..443] + detected: [....20] [ip4][..tcp] [..192.168.1.128][51248] -> [..95.131.169.91][..443] [TLS][Web][Safe] + detection-update: [....20] [ip4][..tcp] [..192.168.1.128][51248] -> [..95.131.169.91][..443] [TLS][Web][Safe] + detection-update: [....20] [ip4][..tcp] [..192.168.1.128][51248] -> [..95.131.169.91][..443] [TLS.Tuenti][VoIP][Acceptable] + new: [....21] [ip4][..tcp] [..192.168.1.128][39302] -> [..95.131.170.91][..443] + detected: [....21] [ip4][..tcp] [..192.168.1.128][39302] -> [..95.131.170.91][..443] [TLS.Tuenti][VoIP][Acceptable] + detection-update: [....21] [ip4][..tcp] [..192.168.1.128][39302] -> [..95.131.170.91][..443] [TLS.Tuenti][VoIP][Acceptable] + detection-update: [....21] [ip4][..tcp] [..192.168.1.128][39302] -> [..95.131.170.91][..443] [TLS.Tuenti][VoIP][Acceptable] + new: [....22] [ip4][..tcp] [..192.168.1.128][51432] -> [.95.101.195.214][..443] + detected: [....22] [ip4][..tcp] [..192.168.1.128][51432] -> [.95.101.195.214][..443] [TLS.Hulu][Streaming][Fun] + detection-update: [....22] [ip4][..tcp] [..192.168.1.128][51432] -> [.95.101.195.214][..443] [TLS.Hulu][Streaming][Fun] + new: [....23] [ip4][..tcp] [..192.168.1.128][44954] -> [..34.96.123.111][...80] + new: [....24] [ip4][..tcp] [..192.168.1.128][47122] -> [.35.201.112.136][..443] + detected: [....24] [ip4][..tcp] [..192.168.1.128][47122] -> [.35.201.112.136][..443] [TLS.LastFM][Music][Fun] + detection-update: [....24] [ip4][..tcp] [..192.168.1.128][47122] -> [.35.201.112.136][..443] [TLS.LastFM][Music][Fun] + new: [....25] [ip4][..tcp] [..192.168.1.128][39036] -> [..69.191.252.15][...80] + new: [....26] [ip4][..tcp] [..192.168.1.128][43412] -> [.151.101.193.73][..443] + detected: [....26] [ip4][..tcp] [..192.168.1.128][43412] -> [.151.101.193.73][..443] [TLS.Bloomberg][Cloud][Acceptable] + detection-update: [....26] [ip4][..tcp] [..192.168.1.128][43412] -> [.151.101.193.73][..443] [TLS.Bloomberg][Cloud][Acceptable] + detection-update: [....26] [ip4][..tcp] [..192.168.1.128][43412] -> [.151.101.193.73][..443] [TLS.Bloomberg][Cloud][Acceptable] + new: [....27] [ip4][..tcp] [..192.168.1.128][57014] -> [108.139.210.102][..443] + detected: [....27] [ip4][..tcp] [..192.168.1.128][57014] -> [108.139.210.102][..443] [TLS.Bloomberg][Cloud][Acceptable] + detection-update: [....27] [ip4][..tcp] [..192.168.1.128][57014] -> [108.139.210.102][..443] [TLS.Bloomberg][Cloud][Acceptable] + new: [....28] [ip4][..tcp] [..192.168.1.128][48654] -> [...13.107.42.14][..443] + detected: [....28] [ip4][..tcp] [..192.168.1.128][48654] -> [...13.107.42.14][..443] [TLS.LinkedIn][SocialNetwork][Fun] + detection-update: [....28] [ip4][..tcp] [..192.168.1.128][48654] -> [...13.107.42.14][..443] [TLS.LinkedIn][SocialNetwork][Fun] + new: [....29] [ip4][..tcp] [..192.168.1.128][39934] -> [..104.23.98.190][..443] + detected: [....29] [ip4][..tcp] [..192.168.1.128][39934] -> [..104.23.98.190][..443] [TLS.Pastebin][Download][Potentially Dangerous] + RISK: Unsafe Protocol + detection-update: [....29] [ip4][..tcp] [..192.168.1.128][39934] -> [..104.23.98.190][..443] [TLS.Pastebin][Download][Potentially Dangerous] + RISK: Unsafe Protocol + new: [....30] [ip4][..tcp] [..192.168.1.128][57336] -> [....23.1.68.189][..443] + detected: [....30] [ip4][..tcp] [..192.168.1.128][57336] -> [....23.1.68.189][..443] [TLS.Playstation][Game][Fun] + detection-update: [....30] [ip4][..tcp] [..192.168.1.128][57336] -> [....23.1.68.189][..443] [TLS.Playstation][Game][Fun] + detection-update: [....30] [ip4][..tcp] [..192.168.1.128][57336] -> [....23.1.68.189][..443] [TLS.Playstation][Game][Fun] + new: [....31] [ip4][..tcp] [..192.168.1.128][46264] -> [...23.51.246.65][..443] + detected: [....31] [ip4][..tcp] [..192.168.1.128][46264] -> [...23.51.246.65][..443] [TLS.Playstation][Game][Fun] + detection-update: [....31] [ip4][..tcp] [..192.168.1.128][46264] -> [...23.51.246.65][..443] [TLS.Playstation][Game][Fun] + new: [....32] [ip4][..tcp] [..192.168.1.128][43150] -> [.108.138.199.67][..443] + detected: [....32] [ip4][..tcp] [..192.168.1.128][43150] -> [.108.138.199.67][..443] [TLS.Deezer][Music][Fun] + detection-update: [....32] [ip4][..tcp] [..192.168.1.128][43150] -> [.108.138.199.67][..443] [TLS.Deezer][Music][Fun] + new: [....33] [ip4][..tcp] [..192.168.1.128][52070] -> [....18.65.82.67][...80] + new: [....34] [ip4][..tcp] [..192.168.1.128][38858] -> [142.250.180.142][..443] + detected: [....34] [ip4][..tcp] [..192.168.1.128][38858] -> [142.250.180.142][..443] [TLS.GoogleMaps][Web][Safe] + detection-update: [....34] [ip4][..tcp] [..192.168.1.128][38858] -> [142.250.180.142][..443] [TLS.GoogleMaps][Web][Safe] + new: [....35] [ip4][..tcp] [..192.168.1.128][48902] -> [....2.17.140.63][..443] + detected: [....35] [ip4][..tcp] [..192.168.1.128][48902] -> [....2.17.140.63][..443] [TLS.Xbox][Game][Fun] + detection-update: [....35] [ip4][..tcp] [..192.168.1.128][48902] -> [....2.17.140.63][..443] [TLS.Xbox][Game][Fun] + new: [....36] [ip4][..tcp] [..192.168.1.128][39828] -> [....40.97.160.2][..443] + detected: [....36] [ip4][..tcp] [..192.168.1.128][39828] -> [....40.97.160.2][..443] [TLS.Outlook][Email][Acceptable] + detection-update: [....36] [ip4][..tcp] [..192.168.1.128][39828] -> [....40.97.160.2][..443] [TLS.Microsoft365][Collaborative][Acceptable] + DAEMON-EVENT: [Processed: 457 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 27 / 36|skipped: 0|!detected: 0|guessed: 0|detection-updates: 39|updates: 0] + new: [....37] [ip4][..tcp] [..192.168.1.128][45898] -> [..15.160.39.187][..443] + detected: [....37] [ip4][..tcp] [..192.168.1.128][45898] -> [..15.160.39.187][..443] [TLS.AppleSiri][VirtAssistant][Acceptable] + detection-update: [....37] [ip4][..tcp] [..192.168.1.128][45898] -> [..15.160.39.187][..443] [TLS.AppleSiri][VirtAssistant][Acceptable] + idle: [....22] [ip4][..tcp] [..192.168.1.128][51432] -> [.95.101.195.214][..443] + guessed: [....23] [ip4][..tcp] [..192.168.1.128][44954] -> [..34.96.123.111][...80] [HTTP.GoogleCloud][Cloud][Acceptable] + idle: [....23] [ip4][..tcp] [..192.168.1.128][44954] -> [..34.96.123.111][...80] + guessed: [....25] [ip4][..tcp] [..192.168.1.128][39036] -> [..69.191.252.15][...80] [HTTP.Bloomberg][Network][Acceptable] + idle: [....25] [ip4][..tcp] [..192.168.1.128][39036] -> [..69.191.252.15][...80] + idle: [....10] [ip4][..tcp] [..192.168.1.128][35054] -> [..31.222.67.112][..443] + idle: [....26] [ip4][..tcp] [..192.168.1.128][43412] -> [.151.101.193.73][..443] + idle: [....12] [ip4][..tcp] [..192.168.1.128][42580] -> [...2.17.141.128][..443] + idle: [....13] [ip4][..tcp] [..192.168.1.128][46084] -> [..146.75.62.167][..443] + idle: [....31] [ip4][..tcp] [..192.168.1.128][46264] -> [...23.51.246.65][..443] + guessed: [....14] [ip4][..tcp] [..192.168.1.128][45936] -> [..208.85.40.158][...80] [HTTP][Web][Acceptable] + idle: [....14] [ip4][..tcp] [..192.168.1.128][45936] -> [..208.85.40.158][...80] + idle: [....35] [ip4][..tcp] [..192.168.1.128][48902] -> [....2.17.140.63][..443] + idle: [....18] [ip4][..tcp] [..192.168.1.128][40832] -> [....2.17.141.49][..443] + idle: [....30] [ip4][..tcp] [..192.168.1.128][57336] -> [....23.1.68.189][..443] + idle: [....28] [ip4][..tcp] [..192.168.1.128][48654] -> [...13.107.42.14][..443] + idle: [....24] [ip4][..tcp] [..192.168.1.128][47122] -> [.35.201.112.136][..443] + idle: [....27] [ip4][..tcp] [..192.168.1.128][57014] -> [108.139.210.102][..443] + idle: [....16] [ip4][..tcp] [..192.168.1.128][56468] -> [.151.101.192.92][..443] + idle: [....34] [ip4][..tcp] [..192.168.1.128][38858] -> [142.250.180.142][..443] + idle: [....32] [ip4][..tcp] [..192.168.1.128][43150] -> [.108.138.199.67][..443] + guessed: [....33] [ip4][..tcp] [..192.168.1.128][52070] -> [....18.65.82.67][...80] [HTTP.AmazonAWS][Cloud][Acceptable] + idle: [....33] [ip4][..tcp] [..192.168.1.128][52070] -> [....18.65.82.67][...80] + idle: [....29] [ip4][..tcp] [..192.168.1.128][39934] -> [..104.23.98.190][..443] + idle: [....20] [ip4][..tcp] [..192.168.1.128][51248] -> [..95.131.169.91][..443] + idle: [....15] [ip4][..tcp] [..192.168.1.128][51806] -> [..18.66.196.102][..443] + idle: [....11] [ip4][..tcp] [..192.168.1.128][53998] -> [..172.65.251.78][..443] + idle: [....36] [ip4][..tcp] [..192.168.1.128][39828] -> [....40.97.160.2][..443] + idle: [....21] [ip4][..tcp] [..192.168.1.128][39302] -> [..95.131.170.91][..443] + idle: [....17] [ip4][..tcp] [..192.168.1.128][48140] -> [.....23.1.66.79][..443] + idle: [....19] [ip4][..tcp] [..192.168.1.128][42884] -> [.185.125.190.21][..443] + new: [....38] [ip4][..tcp] [..192.168.1.128][57878] -> [.52.113.194.132][..443] + detected: [....38] [ip4][..tcp] [..192.168.1.128][57878] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + detection-update: [....38] [ip4][..tcp] [..192.168.1.128][57878] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + new: [....39] [ip4][..tcp] [..192.168.1.128][33664] -> [108.138.185.106][..443] + detected: [....39] [ip4][..tcp] [..192.168.1.128][33664] -> [108.138.185.106][..443] [TLS.AmazonVideo][Video][Acceptable] + detection-update: [....39] [ip4][..tcp] [..192.168.1.128][33664] -> [108.138.185.106][..443] [TLS.AmazonVideo][Video][Acceptable] + new: [....40] [ip4][..tcp] [..192.168.1.128][56458] -> [142.250.185.142][..443] + detected: [....40] [ip4][..tcp] [..192.168.1.128][56458] -> [142.250.185.142][..443] [TLS.GoogleDrive][Cloud][Acceptable] + detection-update: [....40] [ip4][..tcp] [..192.168.1.128][56458] -> [142.250.185.142][..443] [TLS.GoogleDrive][Cloud][Acceptable] + new: [....41] [ip4][..tcp] [..192.168.1.128][33102] -> [...13.81.118.91][..443] + detected: [....41] [ip4][..tcp] [..192.168.1.128][33102] -> [...13.81.118.91][..443] [TLS.Azure][Cloud][Acceptable] + detection-update: [....41] [ip4][..tcp] [..192.168.1.128][33102] -> [...13.81.118.91][..443] [TLS.Microsoft][Cloud][Safe] + new: [....42] [ip4][..tcp] [..192.168.1.128][56836] -> [...13.107.42.13][..443] + detected: [....42] [ip4][..tcp] [..192.168.1.128][56836] -> [...13.107.42.13][..443] [TLS.MS_OneDrive][Cloud][Acceptable] + detection-update: [....42] [ip4][..tcp] [..192.168.1.128][56836] -> [...13.107.42.13][..443] [TLS.MS_OneDrive][Cloud][Acceptable] + new: [....43] [ip4][..tcp] [..192.168.1.128][45014] -> [129.226.107.210][..443] + detected: [....43] [ip4][..tcp] [..192.168.1.128][45014] -> [129.226.107.210][..443] [TLS.IFLIX][Video][Fun] + detection-update: [....43] [ip4][..tcp] [..192.168.1.128][45014] -> [129.226.107.210][..443] [TLS.IFLIX][Video][Fun] + detection-update: [....43] [ip4][..tcp] [..192.168.1.128][45014] -> [129.226.107.210][..443] [TLS.IFLIX][Video][Fun] + new: [....44] [ip4][..udp] [..192.168.1.128][38642] -> [.216.58.212.142][..443] + detected: [....44] [ip4][..udp] [..192.168.1.128][38642] -> [.216.58.212.142][..443] [QUIC.Google][Web][Acceptable] + new: [....45] [ip4][..tcp] [..192.168.1.128][50608] -> [142.250.185.206][..443] + detected: [....45] [ip4][..tcp] [..192.168.1.128][50608] -> [142.250.185.206][..443] [TLS.Google][Web][Acceptable] + detection-update: [....45] [ip4][..tcp] [..192.168.1.128][50608] -> [142.250.185.206][..443] [TLS.Google][Web][Acceptable] + new: [....46] [ip4][..udp] [..192.168.1.128][36832] -> [142.250.181.238][..443] + detected: [....46] [ip4][..udp] [..192.168.1.128][36832] -> [142.250.181.238][..443] [QUIC.GooglePlus][SocialNetwork][Fun] + update: [....44] [ip4][..udp] [..192.168.1.128][38642] -> [.216.58.212.142][..443] [QUIC.Google][Web][Acceptable] + DAEMON-EVENT: [Processed: 512 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 10 / 46|skipped: 0|!detected: 0|guessed: 4|detection-updates: 48|updates: 1] + new: [....47] [ip4][..tcp] [..192.168.1.128][53978] -> [..208.85.40.158][..443] + detected: [....47] [ip4][..tcp] [..192.168.1.128][53978] -> [..208.85.40.158][..443] [TLS.Pandora][Streaming][Fun] + detection-update: [....47] [ip4][..tcp] [..192.168.1.128][53978] -> [..208.85.40.158][..443] [TLS.Pandora][Streaming][Fun] + detection-update: [....47] [ip4][..tcp] [..192.168.1.128][53978] -> [..208.85.40.158][..443] [TLS.Pandora][Streaming][Fun] + idle: [....39] [ip4][..tcp] [..192.168.1.128][33664] -> [108.138.185.106][..443] + idle: [....40] [ip4][..tcp] [..192.168.1.128][56458] -> [142.250.185.142][..443] + idle: [....45] [ip4][..tcp] [..192.168.1.128][50608] -> [142.250.185.206][..443] + idle: [....47] [ip4][..tcp] [..192.168.1.128][53978] -> [..208.85.40.158][..443] + idle: [....42] [ip4][..tcp] [..192.168.1.128][56836] -> [...13.107.42.13][..443] + idle: [....44] [ip4][..udp] [..192.168.1.128][38642] -> [.216.58.212.142][..443] [QUIC.Google][Web][Acceptable] + idle: [....43] [ip4][..tcp] [..192.168.1.128][45014] -> [129.226.107.210][..443] + idle: [....41] [ip4][..tcp] [..192.168.1.128][33102] -> [...13.81.118.91][..443] + idle: [....46] [ip4][..udp] [..192.168.1.128][36832] -> [142.250.181.238][..443] [QUIC.GooglePlus][SocialNetwork][Fun] + idle: [....38] [ip4][..tcp] [..192.168.1.128][57878] -> [.52.113.194.132][..443] + idle: [....37] [ip4][..tcp] [..192.168.1.128][45898] -> [..15.160.39.187][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/skinny.pcap.out b/test/results/flow-info/skinny.pcap.out new file mode 100644 index 000000000..4b2a9347d --- /dev/null +++ b/test/results/flow-info/skinny.pcap.out @@ -0,0 +1,80 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.192.168.195.58][49399] -> [.192.168.193.12][.2000] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [.192.168.195.58][49399] -> [.192.168.193.12][.2000] [CiscoSkinny][VoIP][Acceptable] + new: [.....2] [ip4][..tcp] [.192.168.193.12][.2000] -> [.192.168.195.50][51532] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [.192.168.193.12][.2000] -> [.192.168.195.50][51532] [CiscoSkinny][VoIP][Acceptable] + analyse: [.....1] [ip4][..tcp] [.192.168.195.58][49399] -> [.192.168.193.12][.2000] [CiscoSkinny][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.610| 0.245| 0.877] + [IAT(c->s)...: 0.006| 3.610| 0.318| 0.993][IAT(s->c)...: 0.000| 3.560| 0.199| 0.792] + [PKTLEN(c->s): 60.000| 106.000| 76.300| 20.000][PKTLEN(s->c): 60.000| 378.000| 140.200| 85.800] + [BINS(c->s)..: 9,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,2,0,0,5,1,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....3] [ip4][..udp] [.192.168.195.58][32150] -> [.192.168.193.24][.9395] + detected: [.....3] [ip4][..udp] [.192.168.195.58][32150] -> [.192.168.193.24][.9395] [RTP][Media][Acceptable] + new: [.....4] [ip4][..udp] [.192.168.195.58][32144] -> [.192.168.195.50][17718] + detected: [.....4] [ip4][..udp] [.192.168.195.58][32144] -> [.192.168.195.50][17718] [RTP][Media][Acceptable] + new: [.....5] [ip4][..udp] [.192.168.195.50][17726] -> [.192.168.193.24][.9399] + detected: [.....5] [ip4][..udp] [.192.168.195.50][17726] -> [.192.168.193.24][.9399] [RTP][Media][Acceptable] + new: [.....6] [ip4][..udp] [.192.168.195.58][32152] -> [.192.168.193.24][.9396] + detected: [.....6] [ip4][..udp] [.192.168.195.58][32152] -> [.192.168.193.24][.9396] [RTP][Media][Acceptable] + new: [.....7] [ip4][..udp] [.192.168.195.50][17732] -> [.192.168.193.24][.9400] + detected: [.....7] [ip4][..udp] [.192.168.195.50][17732] -> [.192.168.193.24][.9400] [RTP][Media][Acceptable] + analyse: [.....4] [ip4][..udp] [.192.168.195.58][32144] -> [.192.168.195.50][17718] [RTP][Media][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.026| 0.010| 0.010] + [IAT(c->s)...: 0.000| 0.020| 0.009| 0.010][IAT(s->c)...: 0.000| 0.026| 0.010| 0.010] + [PKTLEN(c->s): 214.000| 214.000| 214.000| 0.000][PKTLEN(s->c): 214.000| 214.000| 214.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....3] [ip4][..udp] [.192.168.195.58][32150] -> [.192.168.193.24][.9395] [RTP][Media][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.020| 0.020| 0.020| 0.000] + [IAT(c->s)...: 0.020| 0.020| 0.020| 0.000][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 214.000| 214.000| 214.000| 0.000][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....5] [ip4][..udp] [.192.168.195.50][17726] -> [.192.168.193.24][.9399] [RTP][Media][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.020| 0.020| 0.020| 0.000] + [IAT(c->s)...: 0.020| 0.020| 0.020| 0.000][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 214.000| 214.000| 214.000| 0.000][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....6] [ip4][..udp] [.192.168.195.58][32152] -> [.192.168.193.24][.9396] [RTP][Media][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.019| 0.021| 0.020| 0.000] + [IAT(c->s)...: 0.019| 0.021| 0.020| 0.000][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 214.000| 214.000| 214.000| 0.000][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....7] [ip4][..udp] [.192.168.195.50][17732] -> [.192.168.193.24][.9400] [RTP][Media][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.020| 0.020| 0.020| 0.000] + [IAT(c->s)...: 0.020| 0.020| 0.020| 0.000][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 214.000| 214.000| 214.000| 0.000][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....8] [ip4][..tcp] [.192.168.195.58][50917] -> [.....10.16.2.25][.2000] [MIDSTREAM] + detected: [.....8] [ip4][..tcp] [.192.168.195.58][50917] -> [.....10.16.2.25][.2000] [CiscoSkinny][VoIP][Acceptable] + analyse: [.....2] [ip4][..tcp] [.192.168.193.12][.2000] -> [.192.168.195.50][51532] [CiscoSkinny][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 7.046| 0.705| 1.877] + [IAT(c->s)...: 0.000| 7.000| 0.642| 1.801][IAT(s->c)...: 0.001| 7.046| 0.780| 1.963] + [PKTLEN(c->s): 60.000| 546.000| 139.000| 116.300][PKTLEN(s->c): 60.000| 106.000| 74.900| 19.700] + [BINS(c->s)..: 10,2,0,0,4,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 10,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....9] [ip4][.icmp] [.192.168.195.50] -> [.192.168.195.58] + detected: [.....9] [ip4][.icmp] [.192.168.195.50] -> [.192.168.195.58] [ICMP][Network][Acceptable] + idle: [.....9] [ip4][.icmp] [.192.168.195.50] -> [.192.168.195.58] [ICMP][Network][Acceptable] + idle: [.....1] [ip4][..tcp] [.192.168.195.58][49399] -> [.192.168.193.12][.2000] [CiscoSkinny][VoIP][Acceptable] + idle: [.....2] [ip4][..tcp] [.192.168.193.12][.2000] -> [.192.168.195.50][51532] [CiscoSkinny][VoIP][Acceptable] + idle: [.....5] [ip4][..udp] [.192.168.195.50][17726] -> [.192.168.193.24][.9399] [RTP][Media][Acceptable] + idle: [.....7] [ip4][..udp] [.192.168.195.50][17732] -> [.192.168.193.24][.9400] [RTP][Media][Acceptable] + idle: [.....3] [ip4][..udp] [.192.168.195.58][32150] -> [.192.168.193.24][.9395] [RTP][Media][Acceptable] + idle: [.....6] [ip4][..udp] [.192.168.195.58][32152] -> [.192.168.193.24][.9396] [RTP][Media][Acceptable] + idle: [.....4] [ip4][..udp] [.192.168.195.58][32144] -> [.192.168.195.50][17718] [RTP][Media][Acceptable] + idle: [.....8] [ip4][..tcp] [.192.168.195.58][50917] -> [.....10.16.2.25][.2000] [CiscoSkinny][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/skype-conference-call.pcap.out b/test/results/flow-info/skype-conference-call.pcap.out new file mode 100644 index 000000000..5f29973e0 --- /dev/null +++ b/test/results/flow-info/skype-conference-call.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...192.168.2.20][49282] -> [...104.46.40.49][60642] + detected: [.....1] [ip4][..udp] [...192.168.2.20][49282] -> [...104.46.40.49][60642] [STUN.Skype_TeamsCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [.....1] [ip4][..udp] [...192.168.2.20][49282] -> [...104.46.40.49][60642] [STUN.Skype_TeamsCall][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.100| 0.011| 0.022] + [IAT(c->s)...: 0.000| 0.055| 0.012| 0.017][IAT(s->c)...: 0.000| 0.100| 0.010| 0.027] + [PKTLEN(c->s): 85.000| 957.000| 443.100| 398.500][PKTLEN(s->c): 77.000| 209.000| 156.000| 30.100] + [BINS(c->s)..: 0,1,4,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,1,2,12,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..udp] [...192.168.2.20][49282] -> [...104.46.40.49][60642] [STUN.Skype_TeamsCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/skype.pcap.out b/test/results/flow-info/skype.pcap.out new file mode 100644 index 000000000..00c7b8668 --- /dev/null +++ b/test/results/flow-info/skype.pcap.out @@ -0,0 +1,1345 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...192.168.1.34][49163] -> [....192.168.1.1][...53] + detected: [.....1] [ip4][..udp] [...192.168.1.34][49163] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....2] [ip4][..udp] [...192.168.1.34][57406] -> [....192.168.1.1][...53] + detected: [.....2] [ip4][..udp] [...192.168.1.34][57406] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....3] [ip4][..udp] [...192.168.1.34][55711] -> [....192.168.1.1][...53] + detected: [.....3] [ip4][..udp] [...192.168.1.34][55711] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....4] [ip4][..udp] [...192.168.1.34][52850] -> [....192.168.1.1][...53] + detected: [.....4] [ip4][..udp] [...192.168.1.34][52850] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....5] [ip4][..udp] [...192.168.1.34][54396] -> [....192.168.1.1][...53] + detected: [.....5] [ip4][..udp] [...192.168.1.34][54396] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....6] [ip4][..udp] [...192.168.1.34][65426] -> [....192.168.1.1][...53] + detected: [.....6] [ip4][..udp] [...192.168.1.34][65426] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....7] [ip4][..udp] [...192.168.1.34][64085] -> [....192.168.1.1][...53] + detected: [.....7] [ip4][..udp] [...192.168.1.34][64085] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....8] [ip4][..udp] [...192.168.1.34][58681] -> [....192.168.1.1][...53] + detected: [.....8] [ip4][..udp] [...192.168.1.34][58681] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [.....9] [ip4][..tcp] [...192.168.1.34][50026] -> [...65.55.223.33][40002] + new: [....10] [ip4][..udp] [...192.168.1.34][49793] -> [....192.168.1.1][...53] + detected: [....10] [ip4][..udp] [...192.168.1.34][49793] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....11] [ip4][..udp] [...192.168.1.34][65045] -> [....192.168.1.1][...53] + detected: [....11] [ip4][..udp] [...192.168.1.34][65045] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + detection-update: [.....7] [ip4][..udp] [...192.168.1.34][64085] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....12] [ip4][..tcp] [...192.168.1.34][50027] -> [...23.223.73.34][..443] + new: [....13] [ip4][..udp] [...192.168.1.34][49990] -> [....192.168.1.1][...53] + detected: [....13] [ip4][..udp] [...192.168.1.34][49990] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....14] [ip4][..udp] [...192.168.1.34][57288] -> [....192.168.1.1][...53] + detected: [....14] [ip4][..udp] [...192.168.1.34][57288] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + detection-update: [.....8] [ip4][..udp] [...192.168.1.34][58681] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detected: [....12] [ip4][..tcp] [...192.168.1.34][50027] -> [...23.223.73.34][..443] [TLS.Skype_Teams][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [....15] [ip4][..tcp] [...192.168.1.34][50028] -> [.157.56.126.211][..443] + detected: [....15] [ip4][..tcp] [...192.168.1.34][50028] -> [.157.56.126.211][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....15] [ip4][..tcp] [...192.168.1.34][50028] -> [.157.56.126.211][..443] [TLS.Skype_Teams][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....16] [ip4][..udp] [...192.168.1.34][49903] -> [....192.168.1.1][...53] + detected: [....16] [ip4][..udp] [...192.168.1.34][49903] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....17] [ip4][..udp] [...192.168.1.34][51879] -> [....192.168.1.1][...53] + detected: [....17] [ip4][..udp] [...192.168.1.34][51879] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + detection-update: [....17] [ip4][..udp] [...192.168.1.34][51879] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....18] [ip4][..tcp] [...192.168.1.34][50029] -> [..23.206.33.166][..443] + detected: [....18] [ip4][..tcp] [...192.168.1.34][50029] -> [..23.206.33.166][..443] [TLS.Skype_Teams][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [....15] [ip4][..tcp] [...192.168.1.34][50028] -> [.157.56.126.211][..443] [TLS.Skype_Teams][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.301| 0.083| 0.084] + [IAT(c->s)...: 0.000| 0.288| 0.076| 0.082][IAT(s->c)...: 0.000| 0.301| 0.092| 0.087] + [PKTLEN(c->s): 66.000|1383.000| 244.300| 332.700][PKTLEN(s->c): 66.000|1506.000| 535.600| 559.000] + [BINS(c->s)..: 10,1,1,1,0,0,1,1,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0] + [BINS(s->c)..: 4,1,0,1,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + new: [....19] [ip4][..tcp] [...192.168.1.34][50030] -> [...65.55.223.33][..443] + new: [....20] [ip4][..udp] [...192.168.1.34][60288] -> [....192.168.1.1][...53] + detected: [....20] [ip4][..udp] [...192.168.1.34][60288] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....21] [ip4][..udp] [...192.168.1.34][57726] -> [....192.168.1.1][...53] + detected: [....21] [ip4][..udp] [...192.168.1.34][57726] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....22] [ip4][..udp] [..192.168.0.254][.1025] -> [239.255.255.250][.1900] + detected: [....22] [ip4][..udp] [..192.168.0.254][.1025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....23] [ip4][..tcp] [.108.160.170.46][..443] -> [...192.168.1.34][49445] [MIDSTREAM] + detected: [....23] [ip4][..tcp] [.108.160.170.46][..443] -> [...192.168.1.34][49445] [TLS.Dropbox][Cloud][Acceptable] + new: [....24] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.166][40022] + detected: [....24] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.166][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....25] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.155][40020] + detected: [....25] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.155][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....26] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.142][40023] + detected: [....26] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.142][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....27] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.15][40024] + detected: [....27] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.15][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....28] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.46][40027] + detected: [....28] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.46][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....29] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.15][40026] + detected: [....29] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.15][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....30] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.160][40028] + detected: [....30] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.160][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....31] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.28][40009] + detected: [....31] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.28][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....32] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.176][40022] + detected: [....32] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.176][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....33] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.15][40027] + detected: [....33] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.15][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....34] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.165][40020] + detected: [....34] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....35] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.150][40004] + detected: [....35] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.150][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....36] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.24][40001] + detected: [....36] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.24][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....37] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.48][40008] + detected: [....37] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.48][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....38] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.42][40024] + detected: [....38] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.42][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....39] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][33033] + detected: [....39] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....40] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.175][40006] + detected: [....40] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.175][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....41] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.162][40004] + detected: [....41] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.162][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....42] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.33][40011] + detected: [....42] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.33][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....43] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.172][40010] + detected: [....43] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.172][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....44] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.160][40029] + detected: [....44] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.160][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....45] [ip4][..udp] [...192.168.1.34][17500] -> [255.255.255.255][17500] + detected: [....45] [ip4][..udp] [...192.168.1.34][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + new: [....46] [ip4][..udp] [...192.168.1.34][17500] -> [..192.168.1.255][17500] + detected: [....46] [ip4][..udp] [...192.168.1.34][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + new: [....47] [ip4][..udp] [...192.168.1.92][17500] -> [255.255.255.255][17500] + detected: [....47] [ip4][..udp] [...192.168.1.92][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + new: [....48] [ip4][..udp] [...192.168.1.92][17500] -> [..192.168.1.255][17500] + detected: [....48] [ip4][..udp] [...192.168.1.92][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + new: [....49] [ip4][..tcp] [...192.168.1.34][50032] -> [...157.56.52.44][40032] + new: [....50] [ip4][..tcp] [...192.168.1.34][50033] -> [..157.55.56.170][40015] + new: [....51] [ip4][..tcp] [...192.168.1.34][50034] -> [.157.55.130.140][40033] + new: [....52] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.145][40027] + detected: [....52] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....53] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.140][40012] + detected: [....53] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.140][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....54] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.150][40004] + detected: [....54] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.150][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....55] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.25][40028] + detected: [....55] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.25][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....56] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.153][40024] + detected: [....56] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.153][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....57] [ip4][..tcp] [...192.168.1.34][50035] -> [213.199.179.175][40021] + new: [....58] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.38][40015] + detected: [....58] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.38][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....59] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.175][40008] + detected: [....59] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.175][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....60] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.43][40002] + detected: [....60] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.43][40002] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....61] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.161][40012] + detected: [....61] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.161][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....62] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.17][40022] + detected: [....62] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.17][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....63] [ip4][..tcp] [...192.168.1.34][50036] -> [...157.56.52.44][..443] + new: [....64] [ip4][..tcp] [...192.168.1.34][50037] -> [..157.55.56.170][..443] + new: [....65] [ip4][..tcp] [...192.168.1.34][50038] -> [.157.55.130.140][..443] + new: [....66] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.18][33033] + detected: [....66] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....67] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.154][40005] + detected: [....67] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.154][40005] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....68] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.45][40012] + detected: [....68] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.45][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....69] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.24][40001] + detected: [....69] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.24][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....70] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.45][40012] + detected: [....70] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.45][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....71] [ip4][..tcp] [...192.168.1.34][50039] -> [213.199.179.175][..443] + new: [....72] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.17][40022] + detected: [....72] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.17][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....73] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.159][40009] + detected: [....73] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.159][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....74] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.142][40025] + detected: [....74] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.142][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....75] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.143][40030] + detected: [....75] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.143][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....76] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.21][40004] + detected: [....76] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.21][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....77] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.151][40027] + detected: [....77] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.151][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....78] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.17][40013] + detected: [....78] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.17][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....79] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.170][40011] + detected: [....79] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.170][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....80] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.168][40007] + detected: [....80] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.168][40007] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....81] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.44][40031] + detected: [....81] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.44][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....82] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.152][40001] + detected: [....82] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.152][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....83] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.146][33033] + detected: [....83] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....84] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.143][40018] + detected: [....84] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.143][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....85] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.25][40028] + detected: [....85] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.25][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....86] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.151][40027] + detected: [....86] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.151][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....87] [ip4][..tcp] [...192.168.1.34][50044] -> [.157.55.130.167][40031] + new: [....88] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.166][40022] + detected: [....88] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.166][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....89] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.155][40004] + detected: [....89] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....90] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.27][40027] + detected: [....90] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.27][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....91] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.173][40012] + detected: [....91] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.173][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....92] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.157][40010] + detected: [....92] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.157][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....93] [ip4][....2] [..192.168.0.254] -> [......224.0.0.1] + detected: [....93] [ip4][....2] [..192.168.0.254] -> [......224.0.0.1] [IGMP][Network][Acceptable] + new: [....94] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.165][40007] + detected: [....94] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.165][40007] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....95] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.20][40033] + detected: [....95] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.20][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....96] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.148][40010] + detected: [....96] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.148][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....97] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.148][40029] + detected: [....97] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.148][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....98] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.141][40020] + detected: [....98] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.141][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....99] [ip4][..tcp] [...192.168.1.34][50045] -> [.157.55.130.167][..443] + new: [...100] [ip4][....2] [...192.168.1.92] -> [....224.0.0.251] + detected: [...100] [ip4][....2] [...192.168.1.92] -> [....224.0.0.251] [IGMP][Network][Acceptable] + new: [...101] [ip4][..tcp] [...192.168.1.34][50046] -> [.157.55.130.150][40011] + new: [...102] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.24][40032] + detected: [...102] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.24][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...103] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.175][40013] + detected: [...103] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.175][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...104] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.146][33033] + detected: [...104] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...105] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.145][40027] + detected: [...105] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...106] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.43][40001] + detected: [...106] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.43][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...107] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.44][40013] + detected: [...107] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.44][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...108] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.26][40026] + detected: [...108] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.26][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...109] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.155][40004] + detected: [...109] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...110] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.41][40027] + detected: [...110] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.41][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...111] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.47][40029] + detected: [...111] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.47][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...112] [ip4][..tcp] [...192.168.1.34][50048] -> [.157.55.130.150][..443] + new: [...113] [ip4][..tcp] [...192.168.1.34][50049] -> [.157.55.130.166][40021] + new: [...114] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.141][40015] + detected: [...114] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.141][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...115] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.168][40006] + detected: [...115] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.168][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...116] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.142][40023] + detected: [...116] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.142][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...117] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.143][40022] + detected: [...117] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.143][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...118] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.33][40011] + detected: [...118] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.33][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...119] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.155][40004] + detected: [...119] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...120] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.143][40017] + detected: [...120] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.143][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...121] [ip4][..udp] [...192.168.1.92][57621] -> [..192.168.1.255][57621] + detected: [...121] [ip4][..udp] [...192.168.1.92][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] + new: [...122] [ip4][..tcp] [...192.168.1.34][50051] -> [.157.55.130.166][..443] + new: [...123] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.168][40006] + detected: [...123] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.168][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...124] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.18][33033] + detected: [...124] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...125] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.154][40034] + detected: [...125] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.154][40034] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...126] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][40030] + detected: [...126] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...127] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.32][40009] + detected: [...127] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.32][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...128] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.141][40004] + detected: [...128] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.141][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...129] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.28][40026] + detected: [...129] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.28][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...130] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.161][40011] + detected: [...130] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.161][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...131] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.144][40034] + detected: [...131] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.144][40034] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...132] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.19][40001] + detected: [...132] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.19][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...133] [ip4][..tcp] [...192.168.1.34][50053] -> [..157.55.56.146][40030] + new: [...134] [ip4][..tcp] [...192.168.1.34][50054] -> [.157.55.130.153][40005] + new: [...135] [ip4][..tcp] [...192.168.1.34][50055] -> [..111.221.74.47][40030] + new: [...136] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.173][40017] + detected: [...136] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.173][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...137] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.153][40023] + detected: [...137] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.153][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...138] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.149][40030] + detected: [...138] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.149][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...139] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][40026] + detected: [...139] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...140] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.143][40022] + detected: [...140] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.143][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...141] [ip4][..tcp] [...192.168.1.34][50056] -> [..157.55.56.146][..443] + new: [...142] [ip4][..tcp] [...192.168.1.34][50057] -> [.157.55.130.153][..443] + new: [...143] [ip4][..tcp] [...192.168.1.34][50058] -> [..111.221.74.47][..443] + new: [...144] [ip4][..tcp] [...192.168.1.34][50059] -> [..111.221.74.38][40015] + new: [...145] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.21][40027] + detected: [...145] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.21][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...146] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.140][40003] + detected: [...146] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.140][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...147] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][33033] + detected: [...147] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...148] [ip4][..tcp] [...192.168.1.34][50024] -> [..17.172.100.36][..443] [MIDSTREAM] + new: [...149] [ip4][..udp] [...192.168.1.34][55159] -> [....192.168.1.1][...53] + detected: [...149] [ip4][..udp] [...192.168.1.34][55159] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + new: [...150] [ip4][..udp] [...192.168.1.34][63108] -> [....192.168.1.1][...53] + detected: [...150] [ip4][..udp] [...192.168.1.34][63108] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + new: [...151] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.147][40020] + detected: [...151] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.147][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...152] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.165][40020] + detected: [...152] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...153] [ip4][..tcp] [...192.168.1.34][50063] -> [..111.221.74.38][..443] + new: [...154] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.166][40011] + detected: [...154] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.166][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...155] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.165][40026] + detected: [...155] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.165][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...156] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.157][40013] + detected: [...156] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.157][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...157] [ip4][..udp] [...192.168.1.34][58458] -> [....192.168.1.1][...53] + detected: [...157] [ip4][..udp] [...192.168.1.34][58458] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...158] [ip4][..udp] [...192.168.1.34][49360] -> [....192.168.1.1][...53] + detected: [...158] [ip4][..udp] [...192.168.1.34][49360] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...159] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.145][40022] + detected: [...159] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.145][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...160] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.26][40004] + detected: [...160] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.26][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...161] [ip4][..tcp] [...192.168.1.34][50065] -> [...65.55.223.12][40031] + new: [...162] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.151][40017] + detected: [...162] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.151][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...163] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.170][40011] + detected: [...163] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.170][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...164] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.176][40020] + detected: [...164] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.176][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...165] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.148][40010] + detected: [...165] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.148][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...166] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.158][40031] + detected: [...166] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.158][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...167] [ip4][..tcp] [...192.168.1.34][50066] -> [...65.55.223.12][..443] + new: [...168] [ip4][..tcp] [...192.168.1.34][50067] -> [..157.55.56.160][40027] + new: [...169] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.162][40029] + detected: [...169] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.162][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...170] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.16][40032] + detected: [...170] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.16][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...171] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.159][40021] + detected: [...171] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.159][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...172] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.146][33033] + detected: [...172] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...173] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.28][40014] + detected: [...173] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.28][40014] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...174] [ip4][..tcp] [...192.168.1.34][50069] -> [..157.55.56.160][..443] + new: [...175] [ip4][..udp] [...192.168.1.34][54343] -> [....192.168.1.1][...53] + detected: [...175] [ip4][..udp] [...192.168.1.34][54343] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...176] [ip4][..udp] [...192.168.1.34][58368] -> [....192.168.1.1][...53] + detected: [...176] [ip4][..udp] [...192.168.1.34][58368] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...177] [ip4][..tcp] [...192.168.1.34][50070] -> [.157.55.130.170][40018] + new: [...178] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.148][40019] + detected: [...178] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.148][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...179] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.37][40032] + detected: [...179] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.37][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...180] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.154][40017] + detected: [...180] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.154][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...181] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.172][40019] + detected: [...181] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.172][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...182] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.40][40018] + detected: [...182] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.40][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...183] [ip4][..tcp] [...192.168.1.34][50072] -> [.157.55.130.170][..443] + new: [...184] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.12][40031] + detected: [...184] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.12][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...185] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.156][40034] + detected: [...185] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.156][40034] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...186] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.31][40021] + detected: [...186] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.31][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...187] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.29][40024] + detected: [...187] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.29][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...188] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.147][40019] + detected: [...188] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.147][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...189] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.168][40006] + detected: [...189] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.168][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...190] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.29][40010] + detected: [...190] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.29][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...191] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.166][40015] + detected: [...191] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.166][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...192] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.159][40009] + detected: [...192] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.159][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...193] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.18][33033] + detected: [...193] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...194] [ip4][..tcp] [...192.168.1.34][50074] -> [.157.55.130.173][40003] + new: [...195] [ip4][..tcp] [...192.168.1.34][50075] -> [213.199.179.142][40003] + new: [...196] [ip4][..tcp] [...192.168.1.34][50076] -> [.157.55.235.156][40014] + new: [...197] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.151][40029] + detected: [...197] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.151][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...198] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.172][40032] + detected: [...198] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.172][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...199] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.152][40023] + detected: [...199] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.152][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [.....4] [ip4][..udp] [...192.168.1.34][52850] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....6] [ip4][..udp] [...192.168.1.34][65426] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....14] [ip4][..udp] [...192.168.1.34][57288] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [...192.168.1.34][49163] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....2] [ip4][..udp] [...192.168.1.34][57406] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....21] [ip4][..udp] [...192.168.1.34][57726] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....3] [ip4][..udp] [...192.168.1.34][55711] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....7] [ip4][..udp] [...192.168.1.34][64085] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....10] [ip4][..udp] [...192.168.1.34][49793] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....17] [ip4][..udp] [...192.168.1.34][51879] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....16] [ip4][..udp] [...192.168.1.34][49903] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....13] [ip4][..udp] [...192.168.1.34][49990] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....20] [ip4][..udp] [...192.168.1.34][60288] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....5] [ip4][..udp] [...192.168.1.34][54396] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....8] [ip4][..udp] [...192.168.1.34][58681] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....11] [ip4][..udp] [...192.168.1.34][65045] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...200] [ip4][..tcp] [...192.168.1.34][50077] -> [.157.55.130.176][40022] + new: [...201] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.145][40024] + detected: [...201] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.145][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...202] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.165][40020] + detected: [...202] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...203] [ip4][..tcp] [...192.168.1.34][50078] -> [.157.55.130.173][..443] + new: [...204] [ip4][..tcp] [...192.168.1.34][50079] -> [213.199.179.142][..443] + new: [...205] [ip4][..tcp] [...192.168.1.34][50080] -> [.157.55.235.156][..443] + new: [...206] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.145][40027] + detected: [...206] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...207] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.160][40027] + detected: [...207] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.160][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...208] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.155][40003] + detected: [...208] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.155][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...209] [ip4][..tcp] [...192.168.1.34][50081] -> [.157.55.130.176][..443] + new: [...210] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.146][33033] + detected: [...210] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...211] [ip4][..tcp] [...192.168.1.34][50086] -> [.111.221.77.142][40023] + new: [...212] [ip4][..tcp] [...192.168.1.34][50087] -> [.111.221.77.142][..443] + new: [...213] [ip4][..tcp] [...192.168.1.34][50088] -> [.157.55.235.146][33033] + new: [...214] [ip4][..udp] [...192.168.1.34][63321] -> [....192.168.1.1][...53] + detected: [...214] [ip4][..udp] [...192.168.1.34][63321] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + detection-update: [...214] [ip4][..udp] [...192.168.1.34][63321] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...215] [ip4][..tcp] [...192.168.1.34][50090] -> [..23.206.33.166][..443] + detected: [...215] [ip4][..tcp] [...192.168.1.34][50090] -> [..23.206.33.166][..443] [TLS.Skype_Teams][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [...216] [ip4][..tcp] [...192.168.1.34][50091] -> [.157.55.235.146][..443] + new: [...217] [ip4][..tcp] [...192.168.1.34][50092] -> [.157.55.130.155][40020] + update: [....31] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.28][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....33] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.15][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....22] [ip4][..udp] [..192.168.0.254][.1025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....34] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....24] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.166][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....26] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.142][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....27] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.15][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....28] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.46][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....30] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.160][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....29] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.15][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....25] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.155][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....32] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.176][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...218] [ip4][..tcp] [...192.168.1.34][50094] -> [.157.55.130.155][..443] + new: [...219] [ip4][..tcp] [...192.168.1.34][50096] -> [..111.221.74.46][40027] + new: [...220] [ip4][..tcp] [...192.168.1.34][50097] -> [.157.55.235.176][40022] + new: [...221] [ip4][..tcp] [...192.168.1.34][50098] -> [...65.55.223.15][40026] + new: [...222] [ip4][..tcp] [...192.168.1.34][50099] -> [....64.4.23.166][40022] + new: [...223] [ip4][..tcp] [...192.168.1.34][50100] -> [..111.221.74.46][..443] + new: [...224] [ip4][..tcp] [...192.168.1.34][50101] -> [.157.55.235.176][..443] + new: [...225] [ip4][..tcp] [...192.168.1.34][50102] -> [...65.55.223.15][..443] + new: [...226] [ip4][..tcp] [...192.168.1.34][50103] -> [....64.4.23.166][..443] + analyse: [....22] [ip4][..udp] [..192.168.0.254][.1025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.015| 19.851| 1.938| 5.863] + [IAT(c->s)...: 0.015| 19.851| 1.938| 5.863][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 327.000| 405.000| 372.000| 29.200][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,3,10,6,13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [....69] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.24][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....76] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.21][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....42] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.33][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....70] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.45][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....78] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.17][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....90] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.27][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....45] [ip4][..udp] [...192.168.1.34][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + update: [....47] [ip4][..udp] [...192.168.1.92][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + update: [....46] [ip4][..udp] [...192.168.1.34][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + update: [....48] [ip4][..udp] [...192.168.1.92][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + update: [....66] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....54] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.150][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....73] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.159][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....96] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.148][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....79] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.170][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....53] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.140][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....84] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.143][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....83] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....39] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....36] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.24][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....80] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.168][40007] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....37] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.48][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....43] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.172][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....98] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.141][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....62] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.17][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....38] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.42][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....56] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.153][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....52] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....77] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.151][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....55] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.25][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....97] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.148][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....81] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.44][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....60] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.43][40002] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....68] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.45][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....58] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.38][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....72] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.17][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....85] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.25][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....95] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.20][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....82] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.152][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....41] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.162][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....67] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.154][40005] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....40] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.175][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....59] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.175][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....92] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.157][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....61] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.161][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....91] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.173][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....88] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.166][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....74] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.142][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....86] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.151][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....44] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.160][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....75] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.143][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....35] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.150][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....89] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....94] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.165][40007] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...227] [ip4][..tcp] [...192.168.1.34][50108] -> [...157.56.52.28][40009] + new: [...228] [ip4][..udp] [...192.168.1.34][49485] -> [239.255.255.250][.1900] + detected: [...228] [ip4][..udp] [...192.168.1.34][49485] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [...229] [ip4][..udp] [...192.168.1.34][51066] -> [239.255.255.250][.1900] + detected: [...229] [ip4][..udp] [...192.168.1.34][51066] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [...230] [ip4][..udp] [...192.168.1.34][54067] -> [....192.168.1.1][.5351] + detected: [...230] [ip4][..udp] [...192.168.1.34][54067] -> [....192.168.1.1][.5351] [NAT-PMP][Network][Acceptable] + new: [...231] [ip4][.icmp] [....192.168.1.1] -> [...192.168.1.34] + detected: [...231] [ip4][.icmp] [....192.168.1.1] -> [...192.168.1.34] [ICMP][Network][Acceptable] + new: [...232] [ip4][..tcp] [...192.168.1.34][50109] -> [.91.190.216.125][12350] + analyse: [...227] [ip4][..tcp] [...192.168.1.34][50108] -> [...157.56.52.28][40009] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.965| 0.176| 0.204] + [IAT(c->s)...: 0.000| 0.965| 0.181| 0.230][IAT(s->c)...: 0.000| 0.761| 0.172| 0.177] + [PKTLEN(c->s): 66.000| 675.000| 148.300| 178.000][PKTLEN(s->c): 66.000|1506.000| 208.800| 360.700] + [BINS(c->s)..: 10,3,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 11,1,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + not-detected: [...227] [ip4][..tcp] [...192.168.1.34][50108] -> [...157.56.52.28][40009] [Unknown][Unrated] + new: [...233] [ip4][..tcp] [...192.168.1.34][50110] -> [.91.190.216.125][12350] + new: [...234] [ip4][..udp] [...192.168.1.34][13021] -> [..176.26.55.167][63773] + detected: [...234] [ip4][..udp] [...192.168.1.34][13021] -> [..176.26.55.167][63773] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...235] [ip4][..udp] [...192.168.1.34][13021] -> [..76.185.207.12][45493] + detected: [...235] [ip4][..udp] [...192.168.1.34][13021] -> [..76.185.207.12][45493] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...236] [ip4][..udp] [...192.168.1.34][13021] -> [.176.97.100.249][26635] + detected: [...236] [ip4][..udp] [...192.168.1.34][13021] -> [.176.97.100.249][26635] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...237] [ip4][..udp] [...192.168.1.34][13021] -> [.....71.62.0.85][33647] + detected: [...237] [ip4][..udp] [...192.168.1.34][13021] -> [.....71.62.0.85][33647] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...238] [ip4][..udp] [...192.168.1.92][.5353] -> [....224.0.0.251][.5353] + detected: [...238] [ip4][..udp] [...192.168.1.92][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [...239] [ip6][..udp] [...............fe80::c62c:3ff:fe06:49fe][.5353] -> [...............................ff02::fb][.5353] + detected: [...239] [ip6][..udp] [...............fe80::c62c:3ff:fe06:49fe][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [...240] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.145][..443] + detected: [...240] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.145][..443] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...241] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.39][..443] + detected: [...241] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.39][..443] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...242] [ip4][..tcp] [...192.168.1.34][50111] -> [.91.190.216.125][..443] + new: [...243] [ip4][..tcp] [...192.168.1.34][50112] -> [...76.167.161.6][20274] + new: [...244] [ip4][..tcp] [...192.168.1.34][50113] -> [...71.238.7.203][18767] + new: [...245] [ip4][..tcp] [...192.168.1.34][50114] -> [..5.248.186.221][31010] + new: [...246] [ip4][..tcp] [...192.168.1.34][50115] -> [....86.31.35.30][59621] + new: [...247] [ip4][..tcp] [...192.168.1.34][50116] -> [...81.83.77.141][17639] + new: [...248] [ip4][..tcp] [...192.168.1.34][50117] -> [...71.238.7.203][18767] + new: [...249] [ip4][..tcp] [...192.168.1.34][50118] -> [..5.248.186.221][31010] + new: [...250] [ip4][..tcp] [...192.168.1.34][50119] -> [....86.31.35.30][59621] + new: [...251] [ip4][..tcp] [...192.168.1.34][50121] -> [...81.83.77.141][17639] + new: [...252] [ip4][..tcp] [...192.168.1.34][50122] -> [..81.133.19.185][44431] + analyse: [...250] [ip4][..tcp] [...192.168.1.34][50119] -> [....86.31.35.30][59621] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.200| 0.063| 0.061] + [IAT(c->s)...: 0.000| 0.200| 0.051| 0.062][IAT(s->c)...: 0.000| 0.200| 0.081| 0.055] + [PKTLEN(c->s): 66.000| 820.000| 151.500| 194.100][PKTLEN(s->c): 66.000|1249.000| 211.100| 323.100] + [BINS(c->s)..: 14,2,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,1,1,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [...250] [ip4][..tcp] [...192.168.1.34][50119] -> [....86.31.35.30][59621] [Unknown][Unrated] + new: [...253] [ip4][..tcp] [...192.168.1.34][50123] -> [...80.14.46.121][.4415] + new: [...254] [ip4][..tcp] [...192.168.1.34][50124] -> [..81.133.19.185][44431] + new: [...255] [ip4][..tcp] [..17.143.160.22][.5223] -> [...192.168.1.34][49447] [MIDSTREAM] + detected: [...255] [ip4][..tcp] [..17.143.160.22][.5223] -> [...192.168.1.34][49447] [TLS.Apple][Web][Safe] + RISK: Known Proto on Non Std Port + new: [...256] [ip4][..tcp] [...192.168.1.34][50125] -> [.91.190.218.125][12350] + new: [...257] [ip4][..tcp] [...192.168.1.34][50126] -> [..91.190.216.23][12350] + new: [...258] [ip4][..tcp] [...192.168.1.34][50127] -> [...80.14.46.121][.4415] + new: [...259] [ip4][..udp] [...192.168.1.34][62454] -> [....192.168.1.1][...53] + detected: [...259] [ip4][..udp] [...192.168.1.34][62454] -> [....192.168.1.1][...53] [DNS.AppleiCloud][Web][Acceptable] + detection-update: [...259] [ip4][..udp] [...192.168.1.34][62454] -> [....192.168.1.1][...53] [DNS.AppleiCloud][Web][Acceptable] + new: [...260] [ip4][..tcp] [...192.168.1.34][50128] -> [..17.172.100.36][..443] + detected: [...260] [ip4][..tcp] [...192.168.1.34][50128] -> [..17.172.100.36][..443] [TLS.AppleiCloud][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [...260] [ip4][..tcp] [...192.168.1.34][50128] -> [..17.172.100.36][..443] [TLS.AppleiCloud][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [...261] [ip4][..tcp] [...192.168.1.34][50129] -> [.91.190.218.125][12350] + analyse: [...260] [ip4][..tcp] [...192.168.1.34][50128] -> [..17.172.100.36][..443] [TLS.AppleiCloud][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.605| 0.068| 0.136] + [IAT(c->s)...: 0.000| 0.449| 0.069| 0.123][IAT(s->c)...: 0.000| 0.605| 0.067| 0.145] + [PKTLEN(c->s): 54.000| 680.000| 233.300| 258.700][PKTLEN(s->c): 60.000|1494.000| 262.700| 415.200] + [BINS(c->s)..: 9,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,3,1,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0] + update: [...108] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.26][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...111] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.47][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...104] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...121] [ip4][..udp] [...192.168.1.92][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] + update: [...128] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.141][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...109] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...115] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.168][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...136] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.173][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...147] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...124] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...132] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.19][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...106] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.43][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...146] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.140][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...119] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...127] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.32][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...117] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.143][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...138] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.149][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...118] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.33][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...107] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.44][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...129] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.28][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...110] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.41][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...145] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.21][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...102] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.24][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...130] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.161][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...103] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.175][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...120] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.143][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...116] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.142][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...137] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.153][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...139] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...105] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...131] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.144][40034] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...123] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.168][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...114] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.141][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...140] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.143][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...126] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...125] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.154][40034] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...262] [ip4][..udp] [...192.168.1.34][52742] -> [....192.168.1.1][...53] + detected: [...262] [ip4][..udp] [...192.168.1.34][52742] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...263] [ip4][..udp] [...192.168.1.34][56387] -> [....192.168.1.1][...53] + detected: [...263] [ip4][..udp] [...192.168.1.34][56387] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + analyse: [...251] [ip4][..tcp] [...192.168.1.34][50121] -> [...81.83.77.141][17639] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.782| 0.325| 0.510] + [IAT(c->s)...: 0.000| 1.468| 0.280| 0.473][IAT(s->c)...: 0.060| 1.782| 0.388| 0.550] + [PKTLEN(c->s): 66.000| 819.000| 145.400| 200.500][PKTLEN(s->c): 66.000|1190.000| 174.800| 293.700] + [BINS(c->s)..: 14,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [...251] [ip4][..tcp] [...192.168.1.34][50121] -> [...81.83.77.141][17639] [Unknown][Unrated] + new: [...264] [ip4][..udp] [...192.168.1.34][52714] -> [....192.168.1.1][...53] + detected: [...264] [ip4][..udp] [...192.168.1.34][52714] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...265] [ip4][..udp] [...192.168.1.34][51802] -> [....192.168.1.1][...53] + detected: [...265] [ip4][..udp] [...192.168.1.34][51802] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...266] [ip4][..tcp] [...192.168.1.34][50130] -> [...212.161.8.36][13392] + new: [...267] [ip4][..udp] [...192.168.1.34][63421] -> [....192.168.1.1][...53] + detected: [...267] [ip4][..udp] [...192.168.1.34][63421] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...268] [ip4][..udp] [...192.168.1.34][65037] -> [....192.168.1.1][...53] + detected: [...268] [ip4][..udp] [...192.168.1.34][65037] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...269] [ip4][..tcp] [...192.168.1.34][50131] -> [...212.161.8.36][13392] + detected: [...269] [ip4][..tcp] [...192.168.1.34][50131] -> [...212.161.8.36][13392] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port + new: [...270] [ip4][..tcp] [...192.168.1.34][50132] -> [...149.13.32.15][13392] + detected: [...242] [ip4][..tcp] [...192.168.1.34][50111] -> [.91.190.216.125][..443] [TLS][Web][Safe] + new: [...271] [ip4][..tcp] [...192.168.1.34][50133] -> [...149.13.32.15][13392] + detected: [...271] [ip4][..tcp] [...192.168.1.34][50133] -> [...149.13.32.15][13392] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port + new: [...272] [ip4][..udp] [...192.168.1.92][50084] -> [239.255.255.250][.1900] + detected: [...272] [ip4][..udp] [...192.168.1.92][50084] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...150] [ip4][..udp] [...192.168.1.34][63108] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + update: [...179] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.37][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...149] [ip4][..udp] [...192.168.1.34][55159] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + update: [...158] [ip4][..udp] [...192.168.1.34][49360] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...172] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...154] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.166][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...173] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.28][40014] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...180] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.154][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...182] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.40][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...152] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...164] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.176][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...186] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.31][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...184] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.12][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...170] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.16][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...176] [ip4][..udp] [...192.168.1.34][58368] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...175] [ip4][..udp] [...192.168.1.34][54343] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...157] [ip4][..udp] [...192.168.1.34][58458] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...160] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.26][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...165] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.148][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...156] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.157][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...162] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.151][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...178] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.148][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...181] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.172][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...151] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.147][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...171] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.159][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...159] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.145][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...155] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.165][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...166] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.158][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...185] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.156][40034] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...163] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.170][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...169] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.162][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...273] [ip4][..udp] [...192.168.1.34][13021] -> [106.188.249.186][15120] + detected: [...273] [ip4][..udp] [...192.168.1.34][13021] -> [106.188.249.186][15120] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [.....4] [ip4][..udp] [...192.168.1.34][52850] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....6] [ip4][..udp] [...192.168.1.34][65426] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....14] [ip4][..udp] [...192.168.1.34][57288] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [...192.168.1.34][49163] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....2] [ip4][..udp] [...192.168.1.34][57406] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...193] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...210] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....21] [ip4][..udp] [...192.168.1.34][57726] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....3] [ip4][..udp] [...192.168.1.34][55711] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....7] [ip4][..udp] [...192.168.1.34][64085] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...201] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.145][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....10] [ip4][..udp] [...192.168.1.34][49793] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...197] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.151][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....17] [ip4][..udp] [...192.168.1.34][51879] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....16] [ip4][..udp] [...192.168.1.34][49903] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....13] [ip4][..udp] [...192.168.1.34][49990] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....20] [ip4][..udp] [...192.168.1.34][60288] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...192] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.159][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...187] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.29][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [.....5] [ip4][..udp] [...192.168.1.34][54396] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....8] [ip4][..udp] [...192.168.1.34][58681] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...190] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.29][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...208] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.155][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...189] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.168][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...191] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.166][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...188] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.147][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...202] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...207] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.160][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...198] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.172][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...199] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.152][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....11] [ip4][..udp] [...192.168.1.34][65045] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...206] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + analyse: [...248] [ip4][..tcp] [...192.168.1.34][50117] -> [...71.238.7.203][18767] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 25.524| 1.927| 6.197] + [IAT(c->s)...: 0.000| 25.524| 1.757| 5.960][IAT(s->c)...: 0.000| 25.388| 2.133| 6.467] + [PKTLEN(c->s): 66.000| 843.000| 152.000| 209.600][PKTLEN(s->c): 66.000|1090.000| 162.300| 258.600] + [BINS(c->s)..: 14,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,4,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [...248] [ip4][..tcp] [...192.168.1.34][50117] -> [...71.238.7.203][18767] [Unknown][Unrated] + new: [...274] [ip4][..udp] [...192.168.1.34][56886] -> [239.255.255.250][.1900] + detected: [...274] [ip4][..udp] [...192.168.1.34][56886] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [...275] [ip4][..udp] [...192.168.1.34][64560] -> [239.255.255.250][.1900] + detected: [...275] [ip4][..udp] [...192.168.1.34][64560] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [...276] [ip4][..udp] [...192.168.1.34][49511] -> [....192.168.1.1][.5351] + detected: [...276] [ip4][..udp] [...192.168.1.34][49511] -> [....192.168.1.1][.5351] [NAT-PMP][Network][Acceptable] + new: [...277] [ip4][..tcp] [...192.168.1.34][50134] -> [...157.56.53.47][12350] + update: [....31] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.28][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....33] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.15][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...214] [ip4][..udp] [...192.168.1.34][63321] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...231] [ip4][.icmp] [....192.168.1.1] -> [...192.168.1.34] [ICMP][Network][Acceptable] + update: [....22] [ip4][..udp] [..192.168.0.254][.1025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....34] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....24] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.166][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....26] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.142][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....27] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.15][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....28] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.46][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....30] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.160][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....29] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.15][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....25] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.155][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....32] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.176][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...278] [ip4][....2] [....192.168.1.1] -> [......224.0.0.1] + detected: [...278] [ip4][....2] [....192.168.1.1] -> [......224.0.0.1] [IGMP][Network][Acceptable] + new: [...279] [ip4][..udp] [...192.168.1.34][..123] -> [..17.253.48.245][..123] + detected: [...279] [ip4][..udp] [...192.168.1.34][..123] -> [..17.253.48.245][..123] [NTP][System][Acceptable] + update: [....69] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.24][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....76] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.21][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....42] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.33][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....70] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.45][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....78] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.17][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....90] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.27][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...228] [ip4][..udp] [...192.168.1.34][49485] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....45] [ip4][..udp] [...192.168.1.34][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + update: [....47] [ip4][..udp] [...192.168.1.92][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + update: [...230] [ip4][..udp] [...192.168.1.34][54067] -> [....192.168.1.1][.5351] [NAT-PMP][Network][Acceptable] + update: [....46] [ip4][..udp] [...192.168.1.34][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + update: [....48] [ip4][..udp] [...192.168.1.92][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + update: [...239] [ip6][..udp] [...............fe80::c62c:3ff:fe06:49fe][.5353] -> [...............................ff02::fb][.5353] + update: [...238] [ip4][..udp] [...192.168.1.92][.5353] -> [....224.0.0.251][.5353] + update: [....66] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....54] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.150][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....73] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.159][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....96] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.148][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....79] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.170][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....53] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.140][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....84] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.143][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....83] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....39] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...241] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.39][..443] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...240] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.145][..443] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....36] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.24][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....80] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.168][40007] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...237] [ip4][..udp] [...192.168.1.34][13021] -> [.....71.62.0.85][33647] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....37] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.48][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....43] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.172][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...236] [ip4][..udp] [...192.168.1.34][13021] -> [.176.97.100.249][26635] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....98] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.141][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....62] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.17][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....38] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.42][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....56] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.153][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....52] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....77] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.151][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....55] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.25][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....97] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.148][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....81] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.44][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...235] [ip4][..udp] [...192.168.1.34][13021] -> [..76.185.207.12][45493] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....60] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.43][40002] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....68] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.45][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....58] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.38][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....72] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.17][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....85] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.25][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....95] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.20][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...234] [ip4][..udp] [...192.168.1.34][13021] -> [..176.26.55.167][63773] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....82] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.152][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....41] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.162][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....67] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.154][40005] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....40] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.175][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....59] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.175][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....92] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.157][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....61] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.161][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....91] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.173][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....88] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.166][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....74] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.142][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....86] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.151][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...229] [ip4][..udp] [...192.168.1.34][51066] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....44] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.160][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....75] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.143][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....35] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.150][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....89] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....94] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.165][40007] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...280] [ip4][..tcp] [...192.168.1.34][50135] -> [...76.167.161.6][20274] + new: [...281] [ip4][..tcp] [...192.168.1.34][50136] -> [...71.238.7.203][18767] + new: [...282] [ip4][..tcp] [...192.168.1.34][50137] -> [..5.248.186.221][31010] + update: [...108] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.26][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...111] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.47][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...104] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...267] [ip4][..udp] [...192.168.1.34][63421] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...121] [ip4][..udp] [...192.168.1.92][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] + update: [...265] [ip4][..udp] [...192.168.1.34][51802] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...128] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.141][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...109] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...115] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.168][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...136] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.173][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...147] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...124] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...132] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.19][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...106] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.43][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...146] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.140][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...119] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...127] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.32][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...117] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.143][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...138] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.149][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...259] [ip4][..udp] [...192.168.1.34][62454] -> [....192.168.1.1][...53] [DNS.AppleiCloud][Web][Acceptable] + update: [...263] [ip4][..udp] [...192.168.1.34][56387] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...118] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.33][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...107] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.44][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...129] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.28][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...110] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.41][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...145] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.21][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...102] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.24][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...130] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.161][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...103] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.175][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...120] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.143][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...116] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.142][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...137] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.153][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...139] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...105] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...131] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.144][40034] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...264] [ip4][..udp] [...192.168.1.34][52714] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...123] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.168][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...262] [ip4][..udp] [...192.168.1.34][52742] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...114] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.141][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...268] [ip4][..udp] [...192.168.1.34][65037] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...140] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.143][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...126] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...125] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.154][40034] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...283] [ip4][..tcp] [...192.168.1.34][50138] -> [...71.238.7.203][18767] + new: [...284] [ip4][..tcp] [...192.168.1.34][50139] -> [..5.248.186.221][31010] + new: [...285] [ip4][..tcp] [...192.168.1.34][50140] -> [...76.167.161.6][20274] + update: [...150] [ip4][..udp] [...192.168.1.34][63108] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + update: [...179] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.37][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...149] [ip4][..udp] [...192.168.1.34][55159] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + update: [...231] [ip4][.icmp] [....192.168.1.1] -> [...192.168.1.34] [ICMP][Network][Acceptable] + update: [...158] [ip4][..udp] [...192.168.1.34][49360] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...273] [ip4][..udp] [...192.168.1.34][13021] -> [106.188.249.186][15120] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...272] [ip4][..udp] [...192.168.1.92][50084] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [...172] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...154] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.166][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...173] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.28][40014] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...180] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.154][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...182] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.40][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...152] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...164] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.176][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...186] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.31][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...184] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.12][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...170] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.16][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...176] [ip4][..udp] [...192.168.1.34][58368] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...175] [ip4][..udp] [...192.168.1.34][54343] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...157] [ip4][..udp] [...192.168.1.34][58458] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...160] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.26][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...165] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.148][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...156] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.157][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...162] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.151][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...178] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.148][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...181] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.172][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...151] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.147][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...171] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.159][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...159] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.145][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...155] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.165][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...166] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.158][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...185] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.156][40034] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...163] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.170][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...169] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.162][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...286] [ip4][..tcp] [...192.168.1.34][50141] -> [...80.14.46.121][.4415] + new: [...287] [ip4][..tcp] [...192.168.1.34][50142] -> [...80.14.46.121][.4415] + new: [...288] [ip4][..tcp] [...192.168.1.34][50143] -> [.78.202.226.115][29059] + new: [...289] [ip4][..tcp] [...192.168.1.34][50144] -> [.78.202.226.115][29059] + new: [...290] [ip4][....2] [...192.168.1.34] -> [....224.0.0.251] + detected: [...290] [ip4][....2] [...192.168.1.34] -> [....224.0.0.251] [IGMP][Network][Acceptable] + new: [...291] [ip4][..tcp] [...192.168.1.34][50145] -> [...157.56.53.51][12350] + guessed: [....19] [ip4][..tcp] [...192.168.1.34][50030] -> [...65.55.223.33][..443] [TLS][Web][Safe] + end: [....19] [ip4][..tcp] [...192.168.1.34][50030] -> [...65.55.223.33][..443] + not-detected: [.....9] [ip4][..tcp] [...192.168.1.34][50026] -> [...65.55.223.33][40002] [Unknown][Unrated] + end: [.....9] [ip4][..tcp] [...192.168.1.34][50026] -> [...65.55.223.33][40002] + update: [.....4] [ip4][..udp] [...192.168.1.34][52850] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....6] [ip4][..udp] [...192.168.1.34][65426] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....14] [ip4][..udp] [...192.168.1.34][57288] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....1] [ip4][..udp] [...192.168.1.34][49163] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....2] [ip4][..udp] [...192.168.1.34][57406] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...193] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...210] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....21] [ip4][..udp] [...192.168.1.34][57726] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....3] [ip4][..udp] [...192.168.1.34][55711] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....7] [ip4][..udp] [...192.168.1.34][64085] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...201] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.145][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....10] [ip4][..udp] [...192.168.1.34][49793] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...197] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.151][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...275] [ip4][..udp] [...192.168.1.34][64560] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....17] [ip4][..udp] [...192.168.1.34][51879] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....16] [ip4][..udp] [...192.168.1.34][49903] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....13] [ip4][..udp] [...192.168.1.34][49990] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....20] [ip4][..udp] [...192.168.1.34][60288] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...192] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.159][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...187] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.29][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [.....5] [ip4][..udp] [...192.168.1.34][54396] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...274] [ip4][..udp] [...192.168.1.34][56886] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [.....8] [ip4][..udp] [...192.168.1.34][58681] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [...190] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.29][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...208] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.155][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...189] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.168][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...191] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.166][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...188] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.147][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...202] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...207] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.160][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...198] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.172][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...199] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.152][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....11] [ip4][..udp] [...192.168.1.34][65045] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [...206] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...276] [ip4][..udp] [...192.168.1.34][49511] -> [....192.168.1.1][.5351] [NAT-PMP][Network][Acceptable] + new: [...292] [ip4][..tcp] [...192.168.1.34][50146] -> [...157.56.53.51][..443] + new: [...293] [ip4][..udp] [...192.168.1.34][55893] -> [....192.168.1.1][...53] + detected: [...293] [ip4][..udp] [...192.168.1.34][55893] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [....50] [ip4][..tcp] [...192.168.1.34][50033] -> [..157.55.56.170][40015] [Unknown][Unrated] + end: [....50] [ip4][..tcp] [...192.168.1.34][50033] -> [..157.55.56.170][40015] + not-detected: [....51] [ip4][..tcp] [...192.168.1.34][50034] -> [.157.55.130.140][40033] [Unknown][Unrated] + end: [....51] [ip4][..tcp] [...192.168.1.34][50034] -> [.157.55.130.140][40033] + guessed: [...148] [ip4][..tcp] [...192.168.1.34][50024] -> [..17.172.100.36][..443] [TLS.Apple][Web][Safe] + end: [...148] [ip4][..tcp] [...192.168.1.34][50024] -> [..17.172.100.36][..443] + guessed: [....65] [ip4][..tcp] [...192.168.1.34][50038] -> [.157.55.130.140][..443] [TLS][Web][Safe] + end: [....65] [ip4][..tcp] [...192.168.1.34][50038] -> [.157.55.130.140][..443] + guessed: [....63] [ip4][..tcp] [...192.168.1.34][50036] -> [...157.56.52.44][..443] [TLS][Web][Safe] + end: [....63] [ip4][..tcp] [...192.168.1.34][50036] -> [...157.56.52.44][..443] + update: [....31] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.28][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....33] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.15][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...214] [ip4][..udp] [...192.168.1.34][63321] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....22] [ip4][..udp] [..192.168.0.254][.1025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....34] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....24] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.166][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....26] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.142][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....27] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.15][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....28] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.46][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....30] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.160][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....29] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.15][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....25] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.155][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....32] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.176][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + analyse: [...283] [ip4][..tcp] [...192.168.1.34][50138] -> [...71.238.7.203][18767] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 30.126| 1.349| 5.301] + [IAT(c->s)...: 0.000| 30.126| 2.016| 6.850][IAT(s->c)...: 0.075| 3.022| 0.424| 0.753] + [PKTLEN(c->s): 66.000| 842.000| 147.200| 204.700][PKTLEN(s->c): 66.000|1090.000| 167.300| 267.500] + [BINS(c->s)..: 15,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,4,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [...283] [ip4][..tcp] [...192.168.1.34][50138] -> [...71.238.7.203][18767] [Unknown][Unrated] + not-detected: [...221] [ip4][..tcp] [...192.168.1.34][50098] -> [...65.55.223.15][40026] [Unknown][Unrated] + end: [...221] [ip4][..tcp] [...192.168.1.34][50098] -> [...65.55.223.15][40026] + not-detected: [...101] [ip4][..tcp] [...192.168.1.34][50046] -> [.157.55.130.150][40011] [Unknown][Unrated] + end: [...101] [ip4][..tcp] [...192.168.1.34][50046] -> [.157.55.130.150][40011] + not-detected: [...134] [ip4][..tcp] [...192.168.1.34][50054] -> [.157.55.130.153][40005] [Unknown][Unrated] + end: [...134] [ip4][..tcp] [...192.168.1.34][50054] -> [.157.55.130.153][40005] + idle: [.....4] [ip4][..udp] [...192.168.1.34][52850] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [...113] [ip4][..tcp] [...192.168.1.34][50049] -> [.157.55.130.166][40021] [Unknown][Unrated] + end: [...113] [ip4][..tcp] [...192.168.1.34][50049] -> [.157.55.130.166][40021] + not-detected: [....87] [ip4][..tcp] [...192.168.1.34][50044] -> [.157.55.130.167][40031] [Unknown][Unrated] + end: [....87] [ip4][..tcp] [...192.168.1.34][50044] -> [.157.55.130.167][40031] + not-detected: [...194] [ip4][..tcp] [...192.168.1.34][50074] -> [.157.55.130.173][40003] [Unknown][Unrated] + end: [...194] [ip4][..tcp] [...192.168.1.34][50074] -> [.157.55.130.173][40003] + not-detected: [...133] [ip4][..tcp] [...192.168.1.34][50053] -> [..157.55.56.146][40030] [Unknown][Unrated] + end: [...133] [ip4][..tcp] [...192.168.1.34][50053] -> [..157.55.56.146][40030] + idle: [...150] [ip4][..udp] [...192.168.1.34][63108] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + not-detected: [...177] [ip4][..tcp] [...192.168.1.34][50070] -> [.157.55.130.170][40018] [Unknown][Unrated] + end: [...177] [ip4][..tcp] [...192.168.1.34][50070] -> [.157.55.130.170][40018] + not-detected: [...196] [ip4][..tcp] [...192.168.1.34][50076] -> [.157.55.235.156][40014] [Unknown][Unrated] + end: [...196] [ip4][..tcp] [...192.168.1.34][50076] -> [.157.55.235.156][40014] + not-detected: [...168] [ip4][..tcp] [...192.168.1.34][50067] -> [..157.55.56.160][40027] [Unknown][Unrated] + end: [...168] [ip4][..tcp] [...192.168.1.34][50067] -> [..157.55.56.160][40027] + not-detected: [...200] [ip4][..tcp] [...192.168.1.34][50077] -> [.157.55.130.176][40022] [Unknown][Unrated] + end: [...200] [ip4][..tcp] [...192.168.1.34][50077] -> [.157.55.130.176][40022] + not-detected: [...217] [ip4][..tcp] [...192.168.1.34][50092] -> [.157.55.130.155][40020] [Unknown][Unrated] + end: [...217] [ip4][..tcp] [...192.168.1.34][50092] -> [.157.55.130.155][40020] + not-detected: [....57] [ip4][..tcp] [...192.168.1.34][50035] -> [213.199.179.175][40021] [Unknown][Unrated] + end: [....57] [ip4][..tcp] [...192.168.1.34][50035] -> [213.199.179.175][40021] + not-detected: [...220] [ip4][..tcp] [...192.168.1.34][50097] -> [.157.55.235.176][40022] [Unknown][Unrated] + end: [...220] [ip4][..tcp] [...192.168.1.34][50097] -> [.157.55.235.176][40022] + not-detected: [...288] [ip4][..tcp] [...192.168.1.34][50143] -> [.78.202.226.115][29059] [Unknown][Unrated] + end: [...288] [ip4][..tcp] [...192.168.1.34][50143] -> [.78.202.226.115][29059] + not-detected: [...289] [ip4][..tcp] [...192.168.1.34][50144] -> [.78.202.226.115][29059] [Unknown][Unrated] + end: [...289] [ip4][..tcp] [...192.168.1.34][50144] -> [.78.202.226.115][29059] + not-detected: [...195] [ip4][..tcp] [...192.168.1.34][50075] -> [213.199.179.142][40003] [Unknown][Unrated] + end: [...195] [ip4][..tcp] [...192.168.1.34][50075] -> [213.199.179.142][40003] + idle: [....69] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.24][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....76] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.21][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....31] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.28][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....42] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.33][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....70] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.45][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....78] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.17][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...108] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.26][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....90] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.27][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....33] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.15][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...111] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.47][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...179] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.37][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...104] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...214] [ip4][..udp] [...192.168.1.34][63321] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [....49] [ip4][..tcp] [...192.168.1.34][50032] -> [...157.56.52.44][40032] [Unknown][Unrated] + end: [....49] [ip4][..tcp] [...192.168.1.34][50032] -> [...157.56.52.44][40032] + idle: [...149] [ip4][..udp] [...192.168.1.34][55159] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + idle: [.....6] [ip4][..udp] [...192.168.1.34][65426] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + end: [...227] [ip4][..tcp] [...192.168.1.34][50108] -> [...157.56.52.28][40009] [Unknown][Unrated] + idle: [...228] [ip4][..udp] [...192.168.1.34][49485] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [...231] [ip4][.icmp] [....192.168.1.1] -> [...192.168.1.34] [ICMP][Network][Acceptable] + idle: [...267] [ip4][..udp] [...192.168.1.34][63421] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [....47] [ip4][..udp] [...192.168.1.92][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....45] [ip4][..udp] [...192.168.1.34][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....14] [ip4][..udp] [...192.168.1.34][57288] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [...290] [ip4][....2] [...192.168.1.34] -> [....224.0.0.251] [IGMP][Network][Acceptable] + idle: [...278] [ip4][....2] [....192.168.1.1] -> [......224.0.0.1] [IGMP][Network][Acceptable] + idle: [...100] [ip4][....2] [...192.168.1.92] -> [....224.0.0.251] [IGMP][Network][Acceptable] + idle: [....93] [ip4][....2] [..192.168.0.254] -> [......224.0.0.1] [IGMP][Network][Acceptable] + idle: [...230] [ip4][..udp] [...192.168.1.34][54067] -> [....192.168.1.1][.5351] [NAT-PMP][Network][Acceptable] + idle: [.....1] [ip4][..udp] [...192.168.1.34][49163] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [.....2] [ip4][..udp] [...192.168.1.34][57406] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [...210] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...193] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....48] [ip4][..udp] [...192.168.1.92][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....46] [ip4][..udp] [...192.168.1.34][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + idle: [...260] [ip4][..tcp] [...192.168.1.34][50128] -> [..17.172.100.36][..443] [TLS.AppleiCloud][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + guessed: [...226] [ip4][..tcp] [...192.168.1.34][50103] -> [....64.4.23.166][..443] [TLS][Web][Safe] + end: [...226] [ip4][..tcp] [...192.168.1.34][50103] -> [....64.4.23.166][..443] + idle: [...158] [ip4][..udp] [...192.168.1.34][49360] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [...239] [ip6][..udp] [...............fe80::c62c:3ff:fe06:49fe][.5353] -> [...............................ff02::fb][.5353] + not-detected: [...266] [ip4][..tcp] [...192.168.1.34][50130] -> [...212.161.8.36][13392] [Unknown][Unrated] + end: [...266] [ip4][..tcp] [...192.168.1.34][50130] -> [...212.161.8.36][13392] + end: [...269] [ip4][..tcp] [...192.168.1.34][50131] -> [...212.161.8.36][13392] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port + not-detected: [...243] [ip4][..tcp] [...192.168.1.34][50112] -> [...76.167.161.6][20274] [Unknown][Unrated] + end: [...243] [ip4][..tcp] [...192.168.1.34][50112] -> [...76.167.161.6][20274] + not-detected: [...280] [ip4][..tcp] [...192.168.1.34][50135] -> [...76.167.161.6][20274] [Unknown][Unrated] + end: [...280] [ip4][..tcp] [...192.168.1.34][50135] -> [...76.167.161.6][20274] + not-detected: [...232] [ip4][..tcp] [...192.168.1.34][50109] -> [.91.190.216.125][12350] [Unknown][Unrated] + end: [...232] [ip4][..tcp] [...192.168.1.34][50109] -> [.91.190.216.125][12350] + not-detected: [...233] [ip4][..tcp] [...192.168.1.34][50110] -> [.91.190.216.125][12350] [Unknown][Unrated] + end: [...233] [ip4][..tcp] [...192.168.1.34][50110] -> [.91.190.216.125][12350] + not-detected: [...285] [ip4][..tcp] [...192.168.1.34][50140] -> [...76.167.161.6][20274] [Unknown][Unrated] + end: [...285] [ip4][..tcp] [...192.168.1.34][50140] -> [...76.167.161.6][20274] + idle: [...273] [ip4][..udp] [...192.168.1.34][13021] -> [106.188.249.186][15120] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...256] [ip4][..tcp] [...192.168.1.34][50125] -> [.91.190.218.125][12350] [Unknown][Unrated] + end: [...256] [ip4][..tcp] [...192.168.1.34][50125] -> [.91.190.218.125][12350] + not-detected: [...257] [ip4][..tcp] [...192.168.1.34][50126] -> [..91.190.216.23][12350] [Unknown][Unrated] + end: [...257] [ip4][..tcp] [...192.168.1.34][50126] -> [..91.190.216.23][12350] + not-detected: [...261] [ip4][..tcp] [...192.168.1.34][50129] -> [.91.190.218.125][12350] [Unknown][Unrated] + end: [...261] [ip4][..tcp] [...192.168.1.34][50129] -> [.91.190.218.125][12350] + idle: [....21] [ip4][..udp] [...192.168.1.34][57726] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [.....3] [ip4][..udp] [...192.168.1.34][55711] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + guessed: [...143] [ip4][..tcp] [...192.168.1.34][50058] -> [..111.221.74.47][..443] [TLS][Web][Safe] + end: [...143] [ip4][..tcp] [...192.168.1.34][50058] -> [..111.221.74.47][..443] + guessed: [...153] [ip4][..tcp] [...192.168.1.34][50063] -> [..111.221.74.38][..443] [TLS][Web][Safe] + end: [...153] [ip4][..tcp] [...192.168.1.34][50063] -> [..111.221.74.38][..443] + idle: [...238] [ip4][..udp] [...192.168.1.92][.5353] -> [....224.0.0.251][.5353] + guessed: [...212] [ip4][..tcp] [...192.168.1.34][50087] -> [.111.221.77.142][..443] [TLS][Web][Safe] + end: [...212] [ip4][..tcp] [...192.168.1.34][50087] -> [.111.221.77.142][..443] + guessed: [...223] [ip4][..tcp] [...192.168.1.34][50100] -> [..111.221.74.46][..443] [TLS][Web][Safe] + end: [...223] [ip4][..tcp] [...192.168.1.34][50100] -> [..111.221.74.46][..443] + idle: [...121] [ip4][..udp] [...192.168.1.92][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] + idle: [...272] [ip4][..udp] [...192.168.1.92][50084] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....66] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + end: [....18] [ip4][..tcp] [...192.168.1.34][50029] -> [..23.206.33.166][..443] + idle: [....23] [ip4][..tcp] [.108.160.170.46][..443] -> [...192.168.1.34][49445] [TLS.Dropbox][Cloud][Acceptable] + idle: [...293] [ip4][..udp] [...192.168.1.34][55893] -> [....192.168.1.1][...53] + idle: [.....7] [ip4][..udp] [...192.168.1.34][64085] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [...244] [ip4][..tcp] [...192.168.1.34][50113] -> [...71.238.7.203][18767] [Unknown][Unrated] + end: [...244] [ip4][..tcp] [...192.168.1.34][50113] -> [...71.238.7.203][18767] + idle: [...265] [ip4][..udp] [...192.168.1.34][51802] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [...253] [ip4][..tcp] [...192.168.1.34][50123] -> [...80.14.46.121][.4415] [Unknown][Unrated] + end: [...253] [ip4][..tcp] [...192.168.1.34][50123] -> [...80.14.46.121][.4415] + end: [...248] [ip4][..tcp] [...192.168.1.34][50117] -> [...71.238.7.203][18767] [Unknown][Unrated] + not-detected: [...258] [ip4][..tcp] [...192.168.1.34][50127] -> [...80.14.46.121][.4415] [Unknown][Unrated] + end: [...258] [ip4][..tcp] [...192.168.1.34][50127] -> [...80.14.46.121][.4415] + idle: [....22] [ip4][..udp] [..192.168.0.254][.1025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [...109] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...286] [ip4][..tcp] [...192.168.1.34][50141] -> [...80.14.46.121][.4415] [Unknown][Unrated] + end: [...286] [ip4][..tcp] [...192.168.1.34][50141] -> [...80.14.46.121][.4415] + idle: [...128] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.141][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....54] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.150][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...287] [ip4][..tcp] [...192.168.1.34][50142] -> [...80.14.46.121][.4415] [Unknown][Unrated] + end: [...287] [ip4][..tcp] [...192.168.1.34][50142] -> [...80.14.46.121][.4415] + not-detected: [...281] [ip4][..tcp] [...192.168.1.34][50136] -> [...71.238.7.203][18767] [Unknown][Unrated] + end: [...281] [ip4][..tcp] [...192.168.1.34][50136] -> [...71.238.7.203][18767] + idle: [...115] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.168][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + end: [...283] [ip4][..tcp] [...192.168.1.34][50138] -> [...71.238.7.203][18767] [Unknown][Unrated] + idle: [....73] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.159][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....96] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.148][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....79] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.170][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....53] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.140][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...136] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.173][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....84] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.143][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + end: [...215] [ip4][..tcp] [...192.168.1.34][50090] -> [..23.206.33.166][..443] + idle: [....34] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....24] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.166][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...201] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.145][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....10] [ip4][..udp] [...192.168.1.34][49793] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [...197] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.151][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...172] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...147] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....83] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...275] [ip4][..udp] [...192.168.1.34][64560] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....17] [ip4][..udp] [...192.168.1.34][51879] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [....39] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + end: [...242] [ip4][..tcp] [...192.168.1.34][50111] -> [.91.190.216.125][..443] + idle: [...241] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.39][..443] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....16] [ip4][..udp] [...192.168.1.34][49903] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [...247] [ip4][..tcp] [...192.168.1.34][50116] -> [...81.83.77.141][17639] [Unknown][Unrated] + end: [...247] [ip4][..tcp] [...192.168.1.34][50116] -> [...81.83.77.141][17639] + not-detected: [...246] [ip4][..tcp] [...192.168.1.34][50115] -> [....86.31.35.30][59621] [Unknown][Unrated] + end: [...246] [ip4][..tcp] [...192.168.1.34][50115] -> [....86.31.35.30][59621] + end: [...251] [ip4][..tcp] [...192.168.1.34][50121] -> [...81.83.77.141][17639] [Unknown][Unrated] + end: [...250] [ip4][..tcp] [...192.168.1.34][50119] -> [....86.31.35.30][59621] [Unknown][Unrated] + end: [....12] [ip4][..tcp] [...192.168.1.34][50027] -> [...23.223.73.34][..443] + idle: [...240] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.145][..443] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....13] [ip4][..udp] [...192.168.1.34][49990] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [...222] [ip4][..tcp] [...192.168.1.34][50099] -> [....64.4.23.166][40022] [Unknown][Unrated] + end: [...222] [ip4][..tcp] [...192.168.1.34][50099] -> [....64.4.23.166][40022] + not-detected: [...213] [ip4][..tcp] [...192.168.1.34][50088] -> [.157.55.235.146][33033] [Unknown][Unrated] + end: [...213] [ip4][..tcp] [...192.168.1.34][50088] -> [.157.55.235.146][33033] + idle: [....20] [ip4][..udp] [...192.168.1.34][60288] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + guessed: [...167] [ip4][..tcp] [...192.168.1.34][50066] -> [...65.55.223.12][..443] [TLS][Web][Safe] + end: [...167] [ip4][..tcp] [...192.168.1.34][50066] -> [...65.55.223.12][..443] + idle: [...124] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...106] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.43][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...132] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.19][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....36] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.24][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...146] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.140][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...119] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...237] [ip4][..udp] [...192.168.1.34][13021] -> [.....71.62.0.85][33647] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....80] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.168][40007] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...255] [ip4][..tcp] [..17.143.160.22][.5223] -> [...192.168.1.34][49447] [TLS.Apple][Web][Safe] + RISK: Known Proto on Non Std Port + idle: [....37] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.48][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...192] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.159][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...127] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.32][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....43] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.172][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...154] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.166][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...236] [ip4][..udp] [...192.168.1.34][13021] -> [.176.97.100.249][26635] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...173] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.28][40014] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...180] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.154][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...182] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.40][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...164] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.176][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...152] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....98] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.141][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...186] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.31][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...117] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.143][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....62] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.17][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....26] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.142][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....56] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.153][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...187] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.29][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....38] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.42][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....27] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.15][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...277] [ip4][..tcp] [...192.168.1.34][50134] -> [...157.56.53.47][12350] [Unknown][Unrated] + end: [...277] [ip4][..tcp] [...192.168.1.34][50134] -> [...157.56.53.47][12350] + idle: [....77] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.151][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....52] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + guessed: [...225] [ip4][..tcp] [...192.168.1.34][50102] -> [...65.55.223.15][..443] [TLS][Web][Safe] + end: [...225] [ip4][..tcp] [...192.168.1.34][50102] -> [...65.55.223.15][..443] + idle: [....28] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.46][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....55] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.25][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....30] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.160][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....97] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.148][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...138] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.149][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...184] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.12][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....81] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.44][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...170] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.16][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...291] [ip4][..tcp] [...192.168.1.34][50145] -> [...157.56.53.51][12350] [Unknown][Unrated] + idle: [...291] [ip4][..tcp] [...192.168.1.34][50145] -> [...157.56.53.51][12350] + guessed: [....64] [ip4][..tcp] [...192.168.1.34][50037] -> [..157.55.56.170][..443] [TLS][Web][Safe] + end: [....64] [ip4][..tcp] [...192.168.1.34][50037] -> [..157.55.56.170][..443] + guessed: [....99] [ip4][..tcp] [...192.168.1.34][50045] -> [.157.55.130.167][..443] [TLS][Web][Safe] + end: [....99] [ip4][..tcp] [...192.168.1.34][50045] -> [.157.55.130.167][..443] + guessed: [...112] [ip4][..tcp] [...192.168.1.34][50048] -> [.157.55.130.150][..443] [TLS][Web][Safe] + end: [...112] [ip4][..tcp] [...192.168.1.34][50048] -> [.157.55.130.150][..443] + guessed: [...122] [ip4][..tcp] [...192.168.1.34][50051] -> [.157.55.130.166][..443] [TLS][Web][Safe] + end: [...122] [ip4][..tcp] [...192.168.1.34][50051] -> [.157.55.130.166][..443] + guessed: [...141] [ip4][..tcp] [...192.168.1.34][50056] -> [..157.55.56.146][..443] [TLS][Web][Safe] + end: [...141] [ip4][..tcp] [...192.168.1.34][50056] -> [..157.55.56.146][..443] + guessed: [...142] [ip4][..tcp] [...192.168.1.34][50057] -> [.157.55.130.153][..443] [TLS][Web][Safe] + end: [...142] [ip4][..tcp] [...192.168.1.34][50057] -> [.157.55.130.153][..443] + not-detected: [...245] [ip4][..tcp] [...192.168.1.34][50114] -> [..5.248.186.221][31010] [Unknown][Unrated] + end: [...245] [ip4][..tcp] [...192.168.1.34][50114] -> [..5.248.186.221][31010] + not-detected: [...249] [ip4][..tcp] [...192.168.1.34][50118] -> [..5.248.186.221][31010] [Unknown][Unrated] + end: [...249] [ip4][..tcp] [...192.168.1.34][50118] -> [..5.248.186.221][31010] + guessed: [...174] [ip4][..tcp] [...192.168.1.34][50069] -> [..157.55.56.160][..443] [TLS][Web][Safe] + end: [...174] [ip4][..tcp] [...192.168.1.34][50069] -> [..157.55.56.160][..443] + guessed: [...183] [ip4][..tcp] [...192.168.1.34][50072] -> [.157.55.130.170][..443] [TLS][Web][Safe] + end: [...183] [ip4][..tcp] [...192.168.1.34][50072] -> [.157.55.130.170][..443] + idle: [...259] [ip4][..udp] [...192.168.1.34][62454] -> [....192.168.1.1][...53] [DNS.AppleiCloud][Web][Acceptable] + guessed: [...203] [ip4][..tcp] [...192.168.1.34][50078] -> [.157.55.130.173][..443] [TLS][Web][Safe] + end: [...203] [ip4][..tcp] [...192.168.1.34][50078] -> [.157.55.130.173][..443] + guessed: [...205] [ip4][..tcp] [...192.168.1.34][50080] -> [.157.55.235.156][..443] [TLS][Web][Safe] + end: [...205] [ip4][..tcp] [...192.168.1.34][50080] -> [.157.55.235.156][..443] + guessed: [...209] [ip4][..tcp] [...192.168.1.34][50081] -> [.157.55.130.176][..443] [TLS][Web][Safe] + end: [...209] [ip4][..tcp] [...192.168.1.34][50081] -> [.157.55.130.176][..443] + not-detected: [...282] [ip4][..tcp] [...192.168.1.34][50137] -> [..5.248.186.221][31010] [Unknown][Unrated] + end: [...282] [ip4][..tcp] [...192.168.1.34][50137] -> [..5.248.186.221][31010] + idle: [...176] [ip4][..udp] [...192.168.1.34][58368] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [...284] [ip4][..tcp] [...192.168.1.34][50139] -> [..5.248.186.221][31010] [Unknown][Unrated] + end: [...284] [ip4][..tcp] [...192.168.1.34][50139] -> [..5.248.186.221][31010] + guessed: [...216] [ip4][..tcp] [...192.168.1.34][50091] -> [.157.55.235.146][..443] [TLS][Web][Safe] + end: [...216] [ip4][..tcp] [...192.168.1.34][50091] -> [.157.55.235.146][..443] + guessed: [...218] [ip4][..tcp] [...192.168.1.34][50094] -> [.157.55.130.155][..443] [TLS][Web][Safe] + end: [...218] [ip4][..tcp] [...192.168.1.34][50094] -> [.157.55.130.155][..443] + guessed: [....71] [ip4][..tcp] [...192.168.1.34][50039] -> [213.199.179.175][..443] [TLS][Web][Safe] + end: [....71] [ip4][..tcp] [...192.168.1.34][50039] -> [213.199.179.175][..443] + guessed: [...224] [ip4][..tcp] [...192.168.1.34][50101] -> [.157.55.235.176][..443] [TLS][Web][Safe] + end: [...224] [ip4][..tcp] [...192.168.1.34][50101] -> [.157.55.235.176][..443] + guessed: [...204] [ip4][..tcp] [...192.168.1.34][50079] -> [213.199.179.142][..443] [TLS][Web][Safe] + end: [...204] [ip4][..tcp] [...192.168.1.34][50079] -> [213.199.179.142][..443] + idle: [...263] [ip4][..udp] [...192.168.1.34][56387] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [...175] [ip4][..udp] [...192.168.1.34][54343] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [...144] [ip4][..tcp] [...192.168.1.34][50059] -> [..111.221.74.38][40015] [Unknown][Unrated] + end: [...144] [ip4][..tcp] [...192.168.1.34][50059] -> [..111.221.74.38][40015] + not-detected: [...135] [ip4][..tcp] [...192.168.1.34][50055] -> [..111.221.74.47][40030] [Unknown][Unrated] + end: [...135] [ip4][..tcp] [...192.168.1.34][50055] -> [..111.221.74.47][40030] + idle: [...157] [ip4][..udp] [...192.168.1.34][58458] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [...211] [ip4][..tcp] [...192.168.1.34][50086] -> [.111.221.77.142][40023] [Unknown][Unrated] + end: [...211] [ip4][..tcp] [...192.168.1.34][50086] -> [.111.221.77.142][40023] + not-detected: [...219] [ip4][..tcp] [...192.168.1.34][50096] -> [..111.221.74.46][40027] [Unknown][Unrated] + end: [...219] [ip4][..tcp] [...192.168.1.34][50096] -> [..111.221.74.46][40027] + idle: [.....5] [ip4][..udp] [...192.168.1.34][54396] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [...274] [ip4][..udp] [...192.168.1.34][56886] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + not-detected: [...270] [ip4][..tcp] [...192.168.1.34][50132] -> [...149.13.32.15][13392] [Unknown][Unrated] + end: [...270] [ip4][..tcp] [...192.168.1.34][50132] -> [...149.13.32.15][13392] + end: [...271] [ip4][..tcp] [...192.168.1.34][50133] -> [...149.13.32.15][13392] + end: [....15] [ip4][..tcp] [...192.168.1.34][50028] -> [.157.56.126.211][..443] [TLS.Skype_Teams][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + idle: [...235] [ip4][..udp] [...192.168.1.34][13021] -> [..76.185.207.12][45493] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...279] [ip4][..udp] [...192.168.1.34][..123] -> [..17.253.48.245][..123] [NTP][System][Acceptable] + idle: [.....8] [ip4][..udp] [...192.168.1.34][58681] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + guessed: [...292] [ip4][..tcp] [...192.168.1.34][50146] -> [...157.56.53.51][..443] [TLS][Web][Safe] + idle: [...292] [ip4][..tcp] [...192.168.1.34][50146] -> [...157.56.53.51][..443] + idle: [....60] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.43][40002] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...160] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.26][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...190] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.29][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...118] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.33][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....68] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.45][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...107] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.44][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....58] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.38][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....72] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.17][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...129] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.28][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....29] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.15][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...145] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.21][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...110] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.41][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....85] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.25][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...102] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.24][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....95] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.20][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...252] [ip4][..tcp] [...192.168.1.34][50122] -> [..81.133.19.185][44431] [Unknown][Unrated] + end: [...252] [ip4][..tcp] [...192.168.1.34][50122] -> [..81.133.19.185][44431] + not-detected: [...254] [ip4][..tcp] [...192.168.1.34][50124] -> [..81.133.19.185][44431] [Unknown][Unrated] + end: [...254] [ip4][..tcp] [...192.168.1.34][50124] -> [..81.133.19.185][44431] + idle: [...234] [ip4][..udp] [...192.168.1.34][13021] -> [..176.26.55.167][63773] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....82] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.152][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...208] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.155][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....41] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.162][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....67] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.154][40005] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...189] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.168][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....40] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.175][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....59] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.175][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...165] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.148][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....92] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.157][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...130] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.161][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....91] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.173][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....61] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.161][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...156] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.157][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...103] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.175][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...191] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.166][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...162] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.151][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...120] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.143][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...181] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.172][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...188] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.147][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...178] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.148][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...202] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.165][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...151] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.147][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....25] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.155][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...171] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.159][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...159] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.145][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....88] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.166][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....32] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.176][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...137] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.153][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...116] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.142][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....74] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.142][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...155] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.165][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...139] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...207] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.160][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...229] [ip4][..udp] [...192.168.1.34][51066] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [...105] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....86] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.151][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....44] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.160][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....75] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.143][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...166] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.158][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...198] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.172][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...185] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.156][40034] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...131] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.144][40034] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...264] [ip4][..udp] [...192.168.1.34][52714] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [....89] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....35] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.150][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...123] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.168][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....94] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.165][40007] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...262] [ip4][..udp] [...192.168.1.34][52742] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [...163] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.170][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...114] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.141][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...268] [ip4][..udp] [...192.168.1.34][65037] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [...140] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.143][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...199] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.152][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....11] [ip4][..udp] [...192.168.1.34][65045] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [...206] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...276] [ip4][..udp] [...192.168.1.34][49511] -> [....192.168.1.1][.5351] [NAT-PMP][Network][Acceptable] + idle: [...169] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.162][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...126] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...125] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.154][40034] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...161] [ip4][..tcp] [...192.168.1.34][50065] -> [...65.55.223.12][40031] [Unknown][Unrated] + end: [...161] [ip4][..tcp] [...192.168.1.34][50065] -> [...65.55.223.12][40031] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/skype_no_unknown.pcap.out b/test/results/flow-info/skype_no_unknown.pcap.out new file mode 100644 index 000000000..2b8c37035 --- /dev/null +++ b/test/results/flow-info/skype_no_unknown.pcap.out @@ -0,0 +1,958 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][....2] [..192.168.1.219] -> [.....224.0.0.22] + detected: [.....1] [ip4][....2] [..192.168.1.219] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + new: [.....2] [ip4][..udp] [...192.168.1.34][55028] -> [....192.168.1.1][...53] + detected: [.....2] [ip4][..udp] [...192.168.1.34][55028] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....3] [ip4][..udp] [...192.168.1.34][64971] -> [....192.168.1.1][...53] + detected: [.....3] [ip4][..udp] [...192.168.1.34][64971] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....4] [ip4][..udp] [...192.168.1.34][60688] -> [....192.168.1.1][...53] + detected: [.....4] [ip4][..udp] [...192.168.1.34][60688] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....5] [ip4][..udp] [...192.168.1.34][58631] -> [....192.168.1.1][...53] + detected: [.....5] [ip4][..udp] [...192.168.1.34][58631] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....6] [ip4][..udp] [...192.168.1.34][64240] -> [....192.168.1.1][...53] + detected: [.....6] [ip4][..udp] [...192.168.1.34][64240] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....7] [ip4][..udp] [...192.168.1.34][49864] -> [....192.168.1.1][...53] + detected: [.....7] [ip4][..udp] [...192.168.1.34][49864] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....8] [ip4][..udp] [...192.168.1.34][61016] -> [....192.168.1.1][...53] + detected: [.....8] [ip4][..udp] [...192.168.1.34][61016] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [.....9] [ip4][..udp] [...192.168.1.34][57694] -> [....192.168.1.1][...53] + detected: [.....9] [ip4][..udp] [...192.168.1.34][57694] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [.....9] [ip4][..udp] [...192.168.1.34][57694] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....10] [ip4][..tcp] [...192.168.1.34][51229] -> [...157.56.52.28][40009] + new: [....11] [ip4][..udp] [...192.168.1.34][62875] -> [....192.168.1.1][...53] + detected: [....11] [ip4][..udp] [...192.168.1.34][62875] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....12] [ip4][..udp] [...192.168.1.34][59113] -> [....192.168.1.1][...53] + detected: [....12] [ip4][..udp] [...192.168.1.34][59113] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....13] [ip4][..tcp] [...192.168.1.34][51230] -> [.157.56.126.211][..443] + new: [....14] [ip4][..udp] [...192.168.1.34][57592] -> [....192.168.1.1][...53] + detected: [....14] [ip4][..udp] [...192.168.1.34][57592] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....15] [ip4][..udp] [...192.168.1.34][53372] -> [....192.168.1.1][...53] + detected: [....15] [ip4][..udp] [...192.168.1.34][53372] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + detected: [....13] [ip4][..tcp] [...192.168.1.34][51230] -> [.157.56.126.211][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....13] [ip4][..tcp] [...192.168.1.34][51230] -> [.157.56.126.211][..443] [TLS.Skype_Teams][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....16] [ip4][..udp] [...192.168.1.34][63514] -> [....192.168.1.1][...53] + detected: [....16] [ip4][..udp] [...192.168.1.34][63514] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....17] [ip4][..udp] [...192.168.1.34][63661] -> [....192.168.1.1][...53] + detected: [....17] [ip4][..udp] [...192.168.1.34][63661] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + detection-update: [....17] [ip4][..udp] [...192.168.1.34][63661] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....18] [ip4][..tcp] [...192.168.1.34][51231] -> [..23.206.33.166][..443] + detected: [....18] [ip4][..tcp] [...192.168.1.34][51231] -> [..23.206.33.166][..443] [TLS.Skype_Teams][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [....19] [ip4][..tcp] [.17.143.160.149][.5223] -> [...192.168.1.34][50407] [MIDSTREAM] + detected: [....19] [ip4][..tcp] [.17.143.160.149][.5223] -> [...192.168.1.34][50407] [TLS.Apple][Web][Safe] + RISK: Known Proto on Non Std Port + analyse: [....13] [ip4][..tcp] [...192.168.1.34][51230] -> [.157.56.126.211][..443] [TLS.Skype_Teams][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.302| 0.085| 0.091] + [IAT(c->s)...: 0.000| 0.287| 0.072| 0.082][IAT(s->c)...: 0.000| 0.302| 0.099| 0.098] + [PKTLEN(c->s): 66.000|1383.000| 254.800| 339.400][PKTLEN(s->c): 66.000|1506.000| 504.300| 552.600] + [BINS(c->s)..: 9,1,1,1,0,0,1,1,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,0,1,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + new: [....20] [ip4][..udp] [...192.168.1.34][50055] -> [....192.168.1.1][...53] + detected: [....20] [ip4][..udp] [...192.168.1.34][50055] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....21] [ip4][..udp] [...192.168.1.34][51753] -> [....192.168.1.1][...53] + detected: [....21] [ip4][..udp] [...192.168.1.34][51753] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....22] [ip4][..tcp] [...192.168.1.34][51232] -> [...157.56.52.28][..443] + new: [....23] [ip4][..tcp] [...192.168.1.34][51227] -> [..17.172.100.36][..443] [MIDSTREAM] + detected: [....23] [ip4][..tcp] [...192.168.1.34][51227] -> [..17.172.100.36][..443] [TLS.Apple][Web][Safe] + analyse: [....23] [ip4][..tcp] [...192.168.1.34][51227] -> [..17.172.100.36][..443] [TLS.Apple][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.077| 0.169| 0.340] + [IAT(c->s)...: 0.000| 0.933| 0.208| 0.334][IAT(s->c)...: 0.000| 1.077| 0.143| 0.342] + [PKTLEN(c->s): 54.000| 680.000| 273.600| 284.800][PKTLEN(s->c): 60.000| 661.000| 204.200| 210.300] + [BINS(c->s)..: 10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,1,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,3,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....24] [ip4][..udp] [...192.168.1.34][..137] -> [..192.168.1.255][..137] + detected: [....24] [ip4][..udp] [...192.168.1.34][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + new: [....25] [ip4][..udp] [....192.168.1.1][..137] -> [...192.168.1.34][..137] + detected: [....25] [ip4][..udp] [....192.168.1.1][..137] -> [...192.168.1.34][..137] [NetBIOS][System][Acceptable] + new: [....26] [ip4][..udp] [...192.168.1.34][..138] -> [..192.168.1.255][..138] + detected: [....26] [ip4][..udp] [...192.168.1.34][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [....27] [ip4][..udp] [....192.168.1.1][..138] -> [...192.168.1.34][..138] + detected: [....27] [ip4][..udp] [....192.168.1.1][..138] -> [...192.168.1.34][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [....28] [ip4][..udp] [...192.168.1.92][..137] -> [..192.168.1.255][..137] + detected: [....28] [ip4][..udp] [...192.168.1.92][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + new: [....29] [ip4][..udp] [...192.168.1.92][..138] -> [..192.168.1.255][..138] + detected: [....29] [ip4][..udp] [...192.168.1.92][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [....30] [ip4][..udp] [...192.168.1.92][53826] -> [..192.168.1.255][..137] + detected: [....30] [ip4][..udp] [...192.168.1.92][53826] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + new: [....31] [ip6][..udp] [...............fe80::c62c:3ff:fe06:49fe][.5353] -> [...............................ff02::fb][.5353] + detected: [....31] [ip6][..udp] [...............fe80::c62c:3ff:fe06:49fe][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....32] [ip4][..udp] [...192.168.1.92][.5353] -> [....224.0.0.251][.5353] + detected: [....32] [ip4][..udp] [...192.168.1.92][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + detection-update: [....31] [ip6][..udp] [...............fe80::c62c:3ff:fe06:49fe][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....33] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.170][40015] + detected: [....33] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.170][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....34] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.15][40026] + detected: [....34] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.15][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....35] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.33][40002] + detected: [....35] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.33][40002] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....36] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.145][40027] + detected: [....36] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....37] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.165][40028] + detected: [....37] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.165][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....38] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.27][40025] + detected: [....38] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.27][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....39] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.34][40027] + detected: [....39] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.34][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....40] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.168][40024] + detected: [....40] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.168][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....41] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.143][40030] + detected: [....41] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.143][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....42] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.143][40022] + detected: [....42] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.143][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....43] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.44][40019] + detected: [....43] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.44][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....44] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.173][40013] + detected: [....44] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.173][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....45] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.167][40024] + detected: [....45] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.167][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....46] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.165][40004] + detected: [....46] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.165][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....47] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.17][40025] + detected: [....47] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.17][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....48] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.18][33033] + detected: [....48] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....49] [ip4][..udp] [..192.168.0.254][.1025] -> [239.255.255.250][.1900] + detected: [....49] [ip4][..udp] [..192.168.0.254][.1025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....50] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.32][40022] + detected: [....50] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.32][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....51] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.33][40011] + detected: [....51] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.33][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....52] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.145][40008] + detected: [....52] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.145][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....53] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.13][40009] + detected: [....53] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.13][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....54] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.19][40020] + detected: [....54] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.19][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....55] [ip4][..udp] [...192.168.1.34][17500] -> [255.255.255.255][17500] + detected: [....55] [ip4][..udp] [...192.168.1.34][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + new: [....56] [ip4][..udp] [...192.168.1.34][17500] -> [..192.168.1.255][17500] + detected: [....56] [ip4][..udp] [...192.168.1.34][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + new: [....57] [ip4][..udp] [...192.168.1.92][17500] -> [255.255.255.255][17500] + detected: [....57] [ip4][..udp] [...192.168.1.92][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + new: [....58] [ip4][..udp] [...192.168.1.92][17500] -> [..192.168.1.255][17500] + detected: [....58] [ip4][..udp] [...192.168.1.92][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + new: [....59] [ip4][..tcp] [...192.168.1.34][51234] -> [.157.55.235.147][40001] + new: [....60] [ip4][..tcp] [...192.168.1.34][51235] -> [...65.55.223.45][40009] + new: [....61] [ip4][..tcp] [...192.168.1.34][51236] -> [..111.221.74.45][40008] + new: [....62] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.171][40012] + detected: [....62] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.171][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....63] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.65][33033] + detected: [....63] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.65][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....64] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.140][40003] + detected: [....64] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.140][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....65] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.39][40031] + detected: [....65] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.39][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....66] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.25][40010] + detected: [....66] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.25][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....67] [ip4][..tcp] [...192.168.1.34][51237] -> [.157.55.130.176][40022] + new: [....68] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.28][40014] + detected: [....68] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.28][40014] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....69] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.154][40013] + detected: [....69] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.154][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....70] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.44][40020] + detected: [....70] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.44][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....71] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.173][40017] + detected: [....71] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.173][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....72] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.154][40017] + detected: [....72] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.154][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....73] [ip4][..tcp] [...192.168.1.34][51238] -> [.157.55.235.147][..443] + new: [....74] [ip4][..tcp] [...192.168.1.34][51239] -> [...65.55.223.45][..443] + new: [....75] [ip4][..tcp] [...192.168.1.34][51240] -> [..111.221.74.45][..443] + new: [....76] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][33033] + detected: [....76] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....77] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.160][40030] + detected: [....77] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.160][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....78] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.12][40031] + detected: [....78] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.12][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....79] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.143][40018] + detected: [....79] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.143][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....80] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.174][40025] + detected: [....80] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.174][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....81] [ip4][..tcp] [...192.168.1.34][51241] -> [.157.55.130.176][..443] + new: [....82] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.13][40009] + detected: [....82] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.13][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....83] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.46][40027] + detected: [....83] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.46][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....84] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.174][40019] + detected: [....84] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.174][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....85] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.22][40009] + detected: [....85] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.22][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....86] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.145][40024] + detected: [....86] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.145][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....87] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.150][40007] + detected: [....87] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.150][40007] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....88] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.15][40027] + detected: [....88] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.15][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....89] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.162][40033] + detected: [....89] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.162][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....90] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.159][40031] + detected: [....90] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.159][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....91] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.148][40029] + detected: [....91] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.148][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....92] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.142][40023] + detected: [....92] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.142][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....93] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.146][33033] + detected: [....93] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....94] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.149][40011] + detected: [....94] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.149][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....95] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.151][40029] + detected: [....95] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.151][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....96] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.165][40004] + detected: [....96] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.165][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....97] [ip4][..tcp] [...192.168.1.34][51246] -> [...157.56.52.44][40020] + new: [....98] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.156][40019] + detected: [....98] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.156][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [....99] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.27][40029] + detected: [....99] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.27][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...100] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.142][40013] + detected: [...100] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.142][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...101] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.154][40032] + detected: [...101] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.154][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...102] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.33][40002] + detected: [...102] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.33][40002] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...103] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.42][40006] + detected: [...103] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.42][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...104] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.172][40020] + detected: [...104] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.172][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...105] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.167][40029] + detected: [...105] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.167][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...106] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.140][40003] + detected: [...106] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.140][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...107] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.156][40031] + detected: [...107] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.156][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...108] [ip4][..tcp] [...192.168.1.34][51247] -> [...157.56.52.44][..443] + new: [...109] [ip4][..tcp] [...192.168.1.34][51248] -> [.111.221.77.175][40030] + new: [...110] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.13][40021] + detected: [...110] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.13][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...111] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.27][40027] + detected: [...111] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.27][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...112] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.146][33033] + detected: [...112] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...113] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.160][40008] + detected: [...113] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.160][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...114] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.42][40005] + detected: [...114] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.42][40005] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...115] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.16][40032] + detected: [...115] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.16][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...116] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.143][40018] + detected: [...116] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.143][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...117] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.176][40031] + detected: [...117] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.176][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...118] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.24][40032] + detected: [...118] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.24][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...119] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.20][40033] + detected: [...119] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.20][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...120] [ip4][..tcp] [...192.168.1.34][51250] -> [.111.221.77.175][..443] + new: [...121] [ip4][..tcp] [...192.168.1.34][51251] -> [....64.4.23.166][40029] + new: [...122] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.144][40016] + detected: [...122] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.144][40016] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...123] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.20][40033] + detected: [...123] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.20][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...124] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.144][40032] + detected: [...124] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.144][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...125] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.165][40004] + detected: [...125] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.165][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...126] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][40033] + detected: [...126] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...127] [ip4][..tcp] [108.160.163.108][..443] -> [...192.168.1.34][51222] [MIDSTREAM] + detected: [...127] [ip4][..tcp] [108.160.163.108][..443] -> [...192.168.1.34][51222] [TLS.Dropbox][Cloud][Acceptable] + new: [...128] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.24][40032] + detected: [...128] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.24][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...129] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.160][40016] + detected: [...129] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.160][40016] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...130] [ip4][..tcp] [...192.168.1.34][51253] -> [....64.4.23.166][..443] + new: [...131] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.28][40026] + detected: [...131] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.28][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...132] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][33033] + detected: [...132] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...133] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.152][40022] + detected: [...133] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.152][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...134] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.172][40011] + detected: [...134] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.172][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...135] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.151][40029] + detected: [...135] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.151][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...136] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.176][40001] + detected: [...136] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.176][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...137] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.148][40019] + detected: [...137] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.148][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...138] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.155][40027] + detected: [...138] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.155][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...139] [ip4][....2] [..192.168.0.254] -> [......224.0.0.1] + detected: [...139] [ip4][....2] [..192.168.0.254] -> [......224.0.0.1] [IGMP][Network][Acceptable] + new: [...140] [ip4][....2] [..192.168.1.229] -> [....224.0.0.251] + detected: [...140] [ip4][....2] [..192.168.1.229] -> [....224.0.0.251] [IGMP][Network][Acceptable] + new: [...141] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.154][40017] + detected: [...141] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.154][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...142] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.149][40030] + detected: [...142] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.149][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...143] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.171][40030] + detected: [...143] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.171][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...144] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.161][40031] + detected: [...144] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.161][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...145] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.148][40033] + detected: [...145] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.148][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + ERROR-EVENT: Unknown packet type + new: [...146] [ip4][..tcp] [...192.168.1.34][51255] -> [.157.55.130.142][40005] + new: [...147] [ip4][..tcp] [...192.168.1.34][51256] -> [.111.221.77.142][40013] + new: [...148] [ip4][..tcp] [...192.168.1.34][51257] -> [.157.55.235.170][40032] + new: [...149] [ip4][..tcp] [...192.168.1.34][51258] -> [213.199.179.176][40021] + new: [...150] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.149][40016] + detected: [...150] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.149][40016] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...151] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.19][40001] + detected: [...151] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.19][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...152] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.140][40011] + detected: [...152] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.140][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...153] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.167][40031] + detected: [...153] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.167][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...154] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.146][33033] + detected: [...154] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...155] [ip4][..udp] [...192.168.1.34][63342] -> [....192.168.1.1][...53] + detected: [...155] [ip4][..udp] [...192.168.1.34][63342] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...156] [ip4][..udp] [...192.168.1.34][64258] -> [....192.168.1.1][...53] + detected: [...156] [ip4][..udp] [...192.168.1.34][64258] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...157] [ip4][..tcp] [...192.168.1.34][51259] -> [.111.221.77.142][..443] + new: [...158] [ip4][..tcp] [...192.168.1.34][51260] -> [.157.55.130.142][..443] + new: [...159] [ip4][..tcp] [...192.168.1.34][51261] -> [.157.55.235.170][..443] + new: [...160] [ip4][..tcp] [...192.168.1.34][51262] -> [213.199.179.176][..443] + new: [...161] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.166][40015] + detected: [...161] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.166][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...162] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.145][40024] + detected: [...162] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.145][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...163] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.42][40024] + detected: [...163] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.42][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...164] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][40030] + detected: [...164] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...165] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.38][40015] + detected: [...165] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.38][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...166] [ip4][..udp] [...192.168.1.34][61095] -> [....192.168.1.1][...53] + detected: [...166] [ip4][..udp] [...192.168.1.34][61095] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...167] [ip4][..udp] [...192.168.1.34][55866] -> [....192.168.1.1][...53] + detected: [...167] [ip4][..udp] [...192.168.1.34][55866] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...168] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.38][40015] + detected: [...168] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.38][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...169] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.40][40017] + detected: [...169] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.40][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...170] [ip4][..tcp] [...192.168.1.34][51267] -> [..111.221.74.18][40025] + new: [...171] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.171][40031] + detected: [...171] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.171][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...172] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.43][40001] + detected: [...172] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.43][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...173] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.20][40023] + detected: [...173] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.20][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...174] [ip4][....2] [..192.168.1.219] -> [...233.89.188.1] + detected: [...174] [ip4][....2] [..192.168.1.219] -> [...233.89.188.1] [IGMP][Network][Acceptable] + new: [...175] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.140][40003] + detected: [...175] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.140][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...176] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.158][40021] + detected: [...176] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.158][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...177] [ip4][..tcp] [...192.168.1.34][51268] -> [..111.221.74.18][..443] + new: [...178] [ip4][..tcp] [...192.168.1.34][51269] -> [213.199.179.175][40029] + new: [...179] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.171][40006] + detected: [...179] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.171][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...180] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.173][40003] + detected: [...180] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.173][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...181] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.143][40018] + detected: [...181] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.143][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...182] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.18][33033] + detected: [...182] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...183] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.43][40006] + detected: [...183] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.43][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...184] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.150][40014] + detected: [...184] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.150][40014] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...185] [ip4][..tcp] [...192.168.1.34][51271] -> [213.199.179.175][..443] + new: [...186] [ip4][..tcp] [...192.168.1.34][51272] -> [.157.55.235.152][40029] + new: [...187] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.147][40014] + detected: [...187] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.147][40014] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...188] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.18][40025] + detected: [...188] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.18][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...189] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.160][40022] + detected: [...189] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.160][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...190] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.146][40030] + detected: [...190] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.146][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...191] [ip4][..tcp] [...192.168.1.34][51274] -> [.157.55.235.152][..443] + new: [...192] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.170][40018] + detected: [...192] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.170][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...193] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.159][40016] + detected: [...193] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.159][40016] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...194] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.170][40021] + detected: [...194] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.170][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...195] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.24][40029] + detected: [...195] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.24][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...196] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.158][40027] + detected: [...196] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.158][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...197] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.16][40032] + detected: [...197] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.16][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...198] [ip4][..udp] [...192.168.1.34][60413] -> [....192.168.1.1][...53] + detected: [...198] [ip4][..udp] [...192.168.1.34][60413] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...199] [ip4][..udp] [...192.168.1.34][64364] -> [....192.168.1.1][...53] + detected: [...199] [ip4][..udp] [...192.168.1.34][64364] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...200] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.149][40030] + detected: [...200] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.149][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...201] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.29][40010] + detected: [...201] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.29][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...202] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.43][40006] + detected: [...202] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.43][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...203] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.18][33033] + detected: [...203] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...204] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.15][40030] + detected: [...204] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.15][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...205] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.144][40009] + detected: [...205] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.144][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...206] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.40][40025] + detected: [...206] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.40][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [.....8] [ip4][..udp] [...192.168.1.34][61016] -> [....192.168.1.1][...53] + update: [....12] [ip4][..udp] [...192.168.1.34][59113] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....2] [ip4][..udp] [...192.168.1.34][55028] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....16] [ip4][..udp] [...192.168.1.34][63514] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....15] [ip4][..udp] [...192.168.1.34][53372] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....17] [ip4][..udp] [...192.168.1.34][63661] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....14] [ip4][..udp] [...192.168.1.34][57592] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....9] [ip4][..udp] [...192.168.1.34][57694] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [....21] [ip4][..udp] [...192.168.1.34][51753] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....7] [ip4][..udp] [...192.168.1.34][49864] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....6] [ip4][..udp] [...192.168.1.34][64240] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....20] [ip4][..udp] [...192.168.1.34][50055] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....5] [ip4][..udp] [...192.168.1.34][58631] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....4] [ip4][..udp] [...192.168.1.34][60688] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [....11] [ip4][..udp] [...192.168.1.34][62875] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + update: [.....3] [ip4][..udp] [...192.168.1.34][64971] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...207] [ip4][..tcp] [...192.168.1.34][51276] -> [.157.55.235.146][40021] + new: [...208] [ip4][..tcp] [...192.168.1.34][51277] -> [.157.55.235.156][40026] + new: [...209] [ip4][..tcp] [...192.168.1.34][51278] -> [....64.4.23.159][40009] + new: [...210] [ip4][..tcp] [...192.168.1.34][51279] -> [..111.221.74.48][40008] + new: [...211] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.175][40006] + detected: [...211] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.175][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...212] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.173][40012] + detected: [...212] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.173][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...213] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.175][40023] + detected: [...213] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.175][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...214] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.17][40013] + detected: [...214] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.17][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...215] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.170][40011] + detected: [...215] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.170][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...216] [ip4][..tcp] [...192.168.1.34][51280] -> [.157.55.235.146][..443] + new: [...217] [ip4][..tcp] [...192.168.1.34][51281] -> [.157.55.235.156][..443] + new: [...218] [ip4][..tcp] [...192.168.1.34][51282] -> [....64.4.23.159][..443] + new: [...219] [ip4][..tcp] [...192.168.1.34][51283] -> [..111.221.74.48][..443] + new: [...220] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.157][40013] + detected: [...220] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.157][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...221] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.155][40004] + detected: [...221] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...222] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.141][40015] + detected: [...222] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.141][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...223] [ip4][..udp] [...192.168.1.34][59237] -> [239.255.255.250][.1900] + detected: [...223] [ip4][..udp] [...192.168.1.34][59237] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [...224] [ip4][..udp] [...192.168.1.34][58061] -> [239.255.255.250][.1900] + detected: [...224] [ip4][..udp] [...192.168.1.34][58061] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [...225] [ip4][..udp] [...192.168.1.34][59052] -> [....192.168.1.1][.5351] + detected: [...225] [ip4][..udp] [...192.168.1.34][59052] -> [....192.168.1.1][.5351] [NAT-PMP][Network][Acceptable] + new: [...226] [ip4][.icmp] [....192.168.1.1] -> [...192.168.1.34] + detected: [...226] [ip4][.icmp] [....192.168.1.1] -> [...192.168.1.34] [ICMP][Network][Acceptable] + new: [...227] [ip4][..tcp] [...192.168.1.34][51284] -> [.91.190.218.125][12350] + new: [...228] [ip4][..tcp] [...192.168.1.34][51285] -> [.91.190.218.125][12350] + analyse: [...210] [ip4][..tcp] [...192.168.1.34][51279] -> [..111.221.74.48][40008] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.297| 0.245| 0.278] + [IAT(c->s)...: 0.000| 1.006| 0.237| 0.242][IAT(s->c)...: 0.000| 1.297| 0.253| 0.312] + [PKTLEN(c->s): 66.000| 675.000| 147.000| 182.100][PKTLEN(s->c): 66.000|1506.000| 218.700| 370.600] + [BINS(c->s)..: 11,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 11,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + not-detected: [...210] [ip4][..tcp] [...192.168.1.34][51279] -> [..111.221.74.48][40008] [Unknown][Unrated] + new: [...229] [ip4][..tcp] [...192.168.1.34][51286] -> [.91.190.218.125][..443] + new: [...230] [ip4][..udp] [...192.168.1.34][13021] -> [.174.49.171.224][32011] + detected: [...230] [ip4][..udp] [...192.168.1.34][13021] -> [.174.49.171.224][32011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...231] [ip4][..udp] [...192.168.1.34][13021] -> [...83.31.12.173][23939] + detected: [...231] [ip4][..udp] [...192.168.1.34][13021] -> [...83.31.12.173][23939] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...232] [ip4][..udp] [...192.168.1.34][13021] -> [.189.138.161.88][19521] + detected: [...232] [ip4][..udp] [...192.168.1.34][13021] -> [.189.138.161.88][19521] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...233] [ip4][..udp] [...192.168.1.34][13021] -> [189.188.134.174][22436] + detected: [...233] [ip4][..udp] [...192.168.1.34][13021] -> [189.188.134.174][22436] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...234] [ip4][..tcp] [...192.168.1.34][51288] -> [...76.167.161.6][20274] + new: [...235] [ip4][..tcp] [...192.168.1.34][51289] -> [...71.238.7.203][18767] + new: [...236] [ip4][..tcp] [...192.168.1.34][51290] -> [..5.248.186.221][31010] + new: [...237] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.14][..443] + detected: [...237] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.14][..443] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...238] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.141][..443] + detected: [...238] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.141][..443] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...239] [ip4][..tcp] [...192.168.1.34][51291] -> [...81.83.77.141][17639] + new: [...240] [ip4][..tcp] [...192.168.1.34][51292] -> [...71.238.7.203][18767] + new: [...241] [ip4][..tcp] [...192.168.1.34][51293] -> [..5.248.186.221][31010] + new: [...242] [ip4][..tcp] [...192.168.1.34][51294] -> [...81.83.77.141][17639] + new: [...243] [ip4][..udp] [...192.168.1.34][59788] -> [....192.168.1.1][...53] + detected: [...243] [ip4][..udp] [...192.168.1.34][59788] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + detection-update: [...243] [ip4][..udp] [...192.168.1.34][59788] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [...244] [ip4][..tcp] [...192.168.1.34][51295] -> [..23.206.33.166][..443] + detected: [...244] [ip4][..tcp] [...192.168.1.34][51295] -> [..23.206.33.166][..443] [TLS.Skype_Teams][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [...245] [ip4][..tcp] [...192.168.1.34][51296] -> [.91.190.216.125][12350] + new: [...246] [ip4][..tcp] [...192.168.1.34][51297] -> [..91.190.216.24][12350] + new: [...247] [ip4][..tcp] [...192.168.1.34][51298] -> [.82.224.110.241][38895] + new: [...248] [ip4][..tcp] [...192.168.1.34][51299] -> [.91.190.216.125][12350] + new: [...249] [ip4][..tcp] [...192.168.1.34][51300] -> [...76.167.161.6][20274] + update: [....38] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.27][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....24] [ip4][..udp] [...192.168.1.34][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....25] [ip4][..udp] [....192.168.1.1][..137] -> [...192.168.1.34][..137] [NetBIOS][System][Acceptable] + update: [....28] [ip4][..udp] [...192.168.1.92][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....26] [ip4][..udp] [...192.168.1.34][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [....27] [ip4][..udp] [....192.168.1.1][..138] -> [...192.168.1.34][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [....29] [ip4][..udp] [...192.168.1.92][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [....31] [ip6][..udp] [...............fe80::c62c:3ff:fe06:49fe][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [....32] [ip4][..udp] [...192.168.1.92][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [....36] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....30] [ip4][..udp] [...192.168.1.92][53826] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....43] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.44][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....42] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.143][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....34] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.15][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....39] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.34][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....35] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.33][40002] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....33] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.170][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....40] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.168][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....37] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.165][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....41] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.143][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...250] [ip4][..tcp] [...192.168.1.34][51301] -> [.82.224.110.241][38895] + new: [...251] [ip4][..tcp] [...192.168.1.34][51302] -> [.91.190.216.125][..443] + new: [...252] [ip4][..tcp] [...192.168.1.34][51303] -> [...80.121.84.93][62381] + analyse: [...242] [ip4][..tcp] [...192.168.1.34][51294] -> [...81.83.77.141][17639] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.004| 0.281| 0.501] + [IAT(c->s)...: 0.000| 1.936| 0.239| 0.489][IAT(s->c)...: 0.064| 2.004| 0.333| 0.510] + [PKTLEN(c->s): 66.000| 818.000| 151.600| 204.400][PKTLEN(s->c): 66.000|1190.000| 164.500| 284.900] + [BINS(c->s)..: 13,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [...242] [ip4][..tcp] [...192.168.1.34][51294] -> [...81.83.77.141][17639] [Unknown][Unrated] + new: [...253] [ip4][..tcp] [...192.168.1.34][51305] -> [...149.13.32.15][13392] + new: [...254] [ip4][..tcp] [...192.168.1.34][51306] -> [...80.121.84.93][62381] + new: [...255] [ip4][..tcp] [...192.168.1.34][51307] -> [...149.13.32.15][13392] + new: [...256] [ip4][..tcp] [...192.168.1.34][51308] -> [...80.121.84.93][..443] + detected: [...255] [ip4][..tcp] [...192.168.1.34][51307] -> [...149.13.32.15][13392] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port + new: [...257] [ip4][..tcp] [...192.168.1.34][51309] -> [...149.13.32.15][13392] + new: [...258] [ip4][..tcp] [...192.168.1.34][51311] -> [..93.79.224.176][14506] + new: [...259] [ip4][..tcp] [...192.168.1.34][51312] -> [...149.13.32.15][13392] + detected: [...259] [ip4][..tcp] [...192.168.1.34][51312] -> [...149.13.32.15][13392] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port + new: [...260] [ip4][..tcp] [...192.168.1.34][51313] -> [...212.161.8.36][13392] + new: [...261] [ip4][..tcp] [...192.168.1.34][51314] -> [..93.79.224.176][14506] + update: [...102] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.33][40002] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....66] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.25][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....54] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.19][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....88] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.15][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....65] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.39][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....78] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.12][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....93] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....55] [ip4][..udp] [...192.168.1.34][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + update: [....57] [ip4][..udp] [...192.168.1.92][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + update: [....56] [ip4][..udp] [...192.168.1.34][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + update: [....58] [ip4][..udp] [...192.168.1.92][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + update: [....48] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....63] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.65][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....49] [ip4][..udp] [..192.168.0.254][.1025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [....46] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.165][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....71] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.173][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....79] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.143][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....92] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.142][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....91] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.148][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...101] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.154][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....76] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...103] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.42][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....82] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.13][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....51] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.33][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....86] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.145][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....83] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.46][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....95] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.151][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....90] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.159][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....53] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.13][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....85] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.22][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....68] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.28][40014] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....70] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.44][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....50] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.32][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....47] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.17][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....99] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.27][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...106] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.140][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....87] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.150][40007] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....52] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.145][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....94] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.149][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....62] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.171][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....69] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.154][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...100] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.142][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....84] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.174][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....98] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.156][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...104] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.172][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....45] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.167][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...105] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.167][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....89] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.162][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....64] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.140][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....96] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.165][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....44] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.173][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....72] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.154][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....80] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.174][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [....77] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.160][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + update: [...107] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.156][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + new: [...262] [ip4][..tcp] [...192.168.1.34][51315] -> [...212.161.8.36][13392] + detected: [...262] [ip4][..tcp] [...192.168.1.34][51315] -> [...212.161.8.36][13392] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port + new: [...263] [ip4][..tcp] [...192.168.1.34][51316] -> [...149.13.32.15][13392] + new: [...264] [ip4][..tcp] [...192.168.1.34][51317] -> [...149.13.32.15][13392] + detected: [...264] [ip4][..tcp] [...192.168.1.34][51317] -> [...149.13.32.15][13392] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port + new: [...265] [ip4][..tcp] [...192.168.1.34][51318] -> [...212.161.8.36][13392] + new: [...266] [ip4][..udp] [...192.168.1.34][13021] -> [..133.236.67.25][49195] + detected: [...266] [ip4][..udp] [...192.168.1.34][13021] -> [..133.236.67.25][49195] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + analyse: [....49] [ip4][..udp] [..192.168.0.254][.1025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 19.857| 1.935| 5.865] + [IAT(c->s)...: 0.000| 19.857| 1.935| 5.865][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 327.000| 405.000| 370.700| 29.100][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,4,9,7,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [...267] [ip4][..tcp] [...192.168.1.34][51319] -> [...212.161.8.36][13392] + idle: [...233] [ip4][..udp] [...192.168.1.34][13021] -> [189.188.134.174][22436] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + guessed: [....75] [ip4][..tcp] [...192.168.1.34][51240] -> [..111.221.74.45][..443] [TLS][Web][Safe] + end: [....75] [ip4][..tcp] [...192.168.1.34][51240] -> [..111.221.74.45][..443] + idle: [.....8] [ip4][..udp] [...192.168.1.34][61016] -> [....192.168.1.1][...53] + guessed: [...120] [ip4][..tcp] [...192.168.1.34][51250] -> [.111.221.77.175][..443] [TLS][Web][Safe] + end: [...120] [ip4][..tcp] [...192.168.1.34][51250] -> [.111.221.77.175][..443] + guessed: [...157] [ip4][..tcp] [...192.168.1.34][51259] -> [.111.221.77.142][..443] [TLS][Web][Safe] + end: [...157] [ip4][..tcp] [...192.168.1.34][51259] -> [.111.221.77.142][..443] + guessed: [...177] [ip4][..tcp] [...192.168.1.34][51268] -> [..111.221.74.18][..443] [TLS][Web][Safe] + end: [...177] [ip4][..tcp] [...192.168.1.34][51268] -> [..111.221.74.18][..443] + guessed: [...219] [ip4][..tcp] [...192.168.1.34][51283] -> [..111.221.74.48][..443] [TLS][Web][Safe] + end: [...219] [ip4][..tcp] [...192.168.1.34][51283] -> [..111.221.74.48][..443] + idle: [...266] [ip4][..udp] [...192.168.1.34][13021] -> [..133.236.67.25][49195] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...166] [ip4][..udp] [...192.168.1.34][61095] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [...231] [ip4][..udp] [...192.168.1.34][13021] -> [...83.31.12.173][23939] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...102] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.33][40002] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...114] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.42][40005] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...202] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.43][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...201] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.29][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....66] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.25][40010] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...214] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.17][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...165] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.38][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...169] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.40][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....54] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.19][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...110] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.13][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....38] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.27][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....88] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.15][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....78] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.12][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....65] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.39][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...118] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.24][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...115] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.16][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...123] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.20][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....12] [ip4][..udp] [...192.168.1.34][59113] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [...235] [ip4][..tcp] [...192.168.1.34][51289] -> [...71.238.7.203][18767] [Unknown][Unrated] + end: [...235] [ip4][..tcp] [...192.168.1.34][51289] -> [...71.238.7.203][18767] + end: [....18] [ip4][..tcp] [...192.168.1.34][51231] -> [..23.206.33.166][..443] + not-detected: [...240] [ip4][..tcp] [...192.168.1.34][51292] -> [...71.238.7.203][18767] [Unknown][Unrated] + idle: [...240] [ip4][..tcp] [...192.168.1.34][51292] -> [...71.238.7.203][18767] + idle: [.....2] [ip4][..udp] [...192.168.1.34][55028] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + end: [...244] [ip4][..tcp] [...192.168.1.34][51295] -> [..23.206.33.166][..443] + idle: [....93] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....19] [ip4][..tcp] [.17.143.160.149][.5223] -> [...192.168.1.34][50407] + guessed: [...229] [ip4][..tcp] [...192.168.1.34][51286] -> [.91.190.218.125][..443] [TLS][Web][Safe] + end: [...229] [ip4][..tcp] [...192.168.1.34][51286] -> [.91.190.218.125][..443] + idle: [...155] [ip4][..udp] [...192.168.1.34][63342] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [...258] [ip4][..tcp] [...192.168.1.34][51311] -> [..93.79.224.176][14506] [Unknown][Unrated] + end: [...258] [ip4][..tcp] [...192.168.1.34][51311] -> [..93.79.224.176][14506] + not-detected: [...261] [ip4][..tcp] [...192.168.1.34][51314] -> [..93.79.224.176][14506] [Unknown][Unrated] + idle: [...261] [ip4][..tcp] [...192.168.1.34][51314] -> [..93.79.224.176][14506] + guessed: [...251] [ip4][..tcp] [...192.168.1.34][51302] -> [.91.190.216.125][..443] [TLS][Web][Safe] + end: [...251] [ip4][..tcp] [...192.168.1.34][51302] -> [.91.190.216.125][..443] + not-detected: [...239] [ip4][..tcp] [...192.168.1.34][51291] -> [...81.83.77.141][17639] [Unknown][Unrated] + end: [...239] [ip4][..tcp] [...192.168.1.34][51291] -> [...81.83.77.141][17639] + idle: [...242] [ip4][..tcp] [...192.168.1.34][51294] -> [...81.83.77.141][17639] [Unknown][Unrated] + not-detected: [...247] [ip4][..tcp] [...192.168.1.34][51298] -> [.82.224.110.241][38895] [Unknown][Unrated] + end: [...247] [ip4][..tcp] [...192.168.1.34][51298] -> [.82.224.110.241][38895] + not-detected: [...250] [ip4][..tcp] [...192.168.1.34][51301] -> [.82.224.110.241][38895] [Unknown][Unrated] + idle: [...250] [ip4][..tcp] [...192.168.1.34][51301] -> [.82.224.110.241][38895] + idle: [...226] [ip4][.icmp] [....192.168.1.1] -> [...192.168.1.34] [ICMP][Network][Acceptable] + idle: [....57] [ip4][..udp] [...192.168.1.92][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....55] [ip4][..udp] [...192.168.1.34][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + not-detected: [...121] [ip4][..tcp] [...192.168.1.34][51251] -> [....64.4.23.166][40029] [Unknown][Unrated] + end: [...121] [ip4][..tcp] [...192.168.1.34][51251] -> [....64.4.23.166][40029] + not-detected: [...209] [ip4][..tcp] [...192.168.1.34][51278] -> [....64.4.23.159][40009] [Unknown][Unrated] + end: [...209] [ip4][..tcp] [...192.168.1.34][51278] -> [....64.4.23.159][40009] + idle: [...139] [ip4][....2] [..192.168.0.254] -> [......224.0.0.1] [IGMP][Network][Acceptable] + idle: [...140] [ip4][....2] [..192.168.1.229] -> [....224.0.0.251] [IGMP][Network][Acceptable] + idle: [.....1] [ip4][....2] [..192.168.1.219] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + idle: [....16] [ip4][..udp] [...192.168.1.34][63514] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + guessed: [....74] [ip4][..tcp] [...192.168.1.34][51239] -> [...65.55.223.45][..443] [TLS][Web][Safe] + end: [....74] [ip4][..tcp] [...192.168.1.34][51239] -> [...65.55.223.45][..443] + idle: [...203] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...154] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....15] [ip4][..udp] [...192.168.1.34][53372] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + guessed: [....73] [ip4][..tcp] [...192.168.1.34][51238] -> [.157.55.235.147][..443] [TLS][Web][Safe] + end: [....73] [ip4][..tcp] [...192.168.1.34][51238] -> [.157.55.235.147][..443] + not-detected: [...236] [ip4][..tcp] [...192.168.1.34][51290] -> [..5.248.186.221][31010] [Unknown][Unrated] + end: [...236] [ip4][..tcp] [...192.168.1.34][51290] -> [..5.248.186.221][31010] + guessed: [....81] [ip4][..tcp] [...192.168.1.34][51241] -> [.157.55.130.176][..443] [TLS][Web][Safe] + end: [....81] [ip4][..tcp] [...192.168.1.34][51241] -> [.157.55.130.176][..443] + idle: [....58] [ip4][..udp] [...192.168.1.92][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....56] [ip4][..udp] [...192.168.1.34][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + not-detected: [...241] [ip4][..tcp] [...192.168.1.34][51293] -> [..5.248.186.221][31010] [Unknown][Unrated] + idle: [...241] [ip4][..tcp] [...192.168.1.34][51293] -> [..5.248.186.221][31010] + guessed: [...158] [ip4][..tcp] [...192.168.1.34][51260] -> [.157.55.130.142][..443] [TLS][Web][Safe] + end: [...158] [ip4][..tcp] [...192.168.1.34][51260] -> [.157.55.130.142][..443] + guessed: [...159] [ip4][..tcp] [...192.168.1.34][51261] -> [.157.55.235.170][..443] [TLS][Web][Safe] + end: [...159] [ip4][..tcp] [...192.168.1.34][51261] -> [.157.55.235.170][..443] + idle: [...230] [ip4][..udp] [...192.168.1.34][13021] -> [.174.49.171.224][32011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + guessed: [...191] [ip4][..tcp] [...192.168.1.34][51274] -> [.157.55.235.152][..443] [TLS][Web][Safe] + end: [...191] [ip4][..tcp] [...192.168.1.34][51274] -> [.157.55.235.152][..443] + guessed: [...216] [ip4][..tcp] [...192.168.1.34][51280] -> [.157.55.235.146][..443] [TLS][Web][Safe] + end: [...216] [ip4][..tcp] [...192.168.1.34][51280] -> [.157.55.235.146][..443] + guessed: [...217] [ip4][..tcp] [...192.168.1.34][51281] -> [.157.55.235.156][..443] [TLS][Web][Safe] + end: [...217] [ip4][..tcp] [...192.168.1.34][51281] -> [.157.55.235.156][..443] + idle: [....17] [ip4][..udp] [...192.168.1.34][63661] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + guessed: [...160] [ip4][..tcp] [...192.168.1.34][51262] -> [213.199.179.176][..443] [TLS][Web][Safe] + end: [...160] [ip4][..tcp] [...192.168.1.34][51262] -> [213.199.179.176][..443] + guessed: [...185] [ip4][..tcp] [...192.168.1.34][51271] -> [213.199.179.175][..443] [TLS][Web][Safe] + end: [...185] [ip4][..tcp] [...192.168.1.34][51271] -> [213.199.179.175][..443] + not-detected: [....61] [ip4][..tcp] [...192.168.1.34][51236] -> [..111.221.74.45][40008] [Unknown][Unrated] + end: [....61] [ip4][..tcp] [...192.168.1.34][51236] -> [..111.221.74.45][40008] + idle: [....28] [ip4][..udp] [...192.168.1.92][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [....25] [ip4][..udp] [....192.168.1.1][..137] -> [...192.168.1.34][..137] [NetBIOS][System][Acceptable] + idle: [....24] [ip4][..udp] [...192.168.1.34][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [....29] [ip4][..udp] [...192.168.1.92][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [....27] [ip4][..udp] [....192.168.1.1][..138] -> [...192.168.1.34][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [....26] [ip4][..udp] [...192.168.1.34][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [....31] [ip6][..udp] [...............fe80::c62c:3ff:fe06:49fe][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + idle: [...174] [ip4][....2] [..192.168.1.219] -> [...233.89.188.1] [IGMP][Network][Acceptable] + idle: [...232] [ip4][..udp] [...192.168.1.34][13021] -> [.189.138.161.88][19521] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...147] [ip4][..tcp] [...192.168.1.34][51256] -> [.111.221.77.142][40013] [Unknown][Unrated] + end: [...147] [ip4][..tcp] [...192.168.1.34][51256] -> [.111.221.77.142][40013] + idle: [....14] [ip4][..udp] [...192.168.1.34][57592] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [...109] [ip4][..tcp] [...192.168.1.34][51248] -> [.111.221.77.175][40030] [Unknown][Unrated] + end: [...109] [ip4][..tcp] [...192.168.1.34][51248] -> [.111.221.77.175][40030] + idle: [...210] [ip4][..tcp] [...192.168.1.34][51279] -> [..111.221.74.48][40008] [Unknown][Unrated] + not-detected: [...170] [ip4][..tcp] [...192.168.1.34][51267] -> [..111.221.74.18][40025] [Unknown][Unrated] + end: [...170] [ip4][..tcp] [...192.168.1.34][51267] -> [..111.221.74.18][40025] + idle: [...237] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.14][..443] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...224] [ip4][..udp] [...192.168.1.34][58061] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [...127] [ip4][..tcp] [108.160.163.108][..443] -> [...192.168.1.34][51222] + not-detected: [...253] [ip4][..tcp] [...192.168.1.34][51305] -> [...149.13.32.15][13392] [Unknown][Unrated] + end: [...253] [ip4][..tcp] [...192.168.1.34][51305] -> [...149.13.32.15][13392] + end: [...255] [ip4][..tcp] [...192.168.1.34][51307] -> [...149.13.32.15][13392] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port + not-detected: [...257] [ip4][..tcp] [...192.168.1.34][51309] -> [...149.13.32.15][13392] [Unknown][Unrated] + end: [...257] [ip4][..tcp] [...192.168.1.34][51309] -> [...149.13.32.15][13392] + end: [...259] [ip4][..tcp] [...192.168.1.34][51312] -> [...149.13.32.15][13392] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port + not-detected: [...263] [ip4][..tcp] [...192.168.1.34][51316] -> [...149.13.32.15][13392] [Unknown][Unrated] + end: [...263] [ip4][..tcp] [...192.168.1.34][51316] -> [...149.13.32.15][13392] + end: [...264] [ip4][..tcp] [...192.168.1.34][51317] -> [...149.13.32.15][13392] + idle: [.....9] [ip4][..udp] [...192.168.1.34][57694] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....13] [ip4][..tcp] [...192.168.1.34][51230] -> [.157.56.126.211][..443] [TLS.Skype_Teams][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + guessed: [....22] [ip4][..tcp] [...192.168.1.34][51232] -> [...157.56.52.28][..443] [TLS][Web][Safe] + end: [....22] [ip4][..tcp] [...192.168.1.34][51232] -> [...157.56.52.28][..443] + guessed: [...108] [ip4][..tcp] [...192.168.1.34][51247] -> [...157.56.52.44][..443] [TLS][Web][Safe] + end: [...108] [ip4][..tcp] [...192.168.1.34][51247] -> [...157.56.52.44][..443] + idle: [...243] [ip4][..udp] [...192.168.1.34][59788] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [....32] [ip4][..udp] [...192.168.1.92][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + idle: [....21] [ip4][..udp] [...192.168.1.34][51753] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [....63] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.65][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....48] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...167] [ip4][..udp] [...192.168.1.34][55866] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [....49] [ip4][..udp] [..192.168.0.254][.1025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [...136] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.176][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...175] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.140][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...221] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.155][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....46] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.165][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...215] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.170][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + guessed: [...256] [ip4][..tcp] [...192.168.1.34][51308] -> [...80.121.84.93][..443] [TLS][Web][Safe] + idle: [...256] [ip4][..tcp] [...192.168.1.34][51308] -> [...80.121.84.93][..443] + idle: [....71] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.173][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....79] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.143][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...176] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.158][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....92] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.142][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....36] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.145][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...135] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.151][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....91] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.148][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...142] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.149][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...171] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.171][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...101] [ip4][..udp] [...192.168.1.34][13021] -> [....64.4.23.154][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...132] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...112] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....30] [ip4][..udp] [...192.168.1.92][53826] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + not-detected: [....60] [ip4][..tcp] [...192.168.1.34][51235] -> [...65.55.223.45][40009] [Unknown][Unrated] + end: [....60] [ip4][..tcp] [...192.168.1.34][51235] -> [...65.55.223.45][40009] + idle: [....76] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [.....7] [ip4][..udp] [...192.168.1.34][49864] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [.....6] [ip4][..udp] [...192.168.1.34][64240] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [....59] [ip4][..tcp] [...192.168.1.34][51234] -> [.157.55.235.147][40001] [Unknown][Unrated] + end: [....59] [ip4][..tcp] [...192.168.1.34][51234] -> [.157.55.235.147][40001] + idle: [...156] [ip4][..udp] [...192.168.1.34][64258] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [....67] [ip4][..tcp] [...192.168.1.34][51237] -> [.157.55.130.176][40022] [Unknown][Unrated] + end: [....67] [ip4][..tcp] [...192.168.1.34][51237] -> [.157.55.130.176][40022] + not-detected: [...146] [ip4][..tcp] [...192.168.1.34][51255] -> [.157.55.130.142][40005] [Unknown][Unrated] + end: [...146] [ip4][..tcp] [...192.168.1.34][51255] -> [.157.55.130.142][40005] + not-detected: [...148] [ip4][..tcp] [...192.168.1.34][51257] -> [.157.55.235.170][40032] [Unknown][Unrated] + end: [...148] [ip4][..tcp] [...192.168.1.34][51257] -> [.157.55.235.170][40032] + not-detected: [...207] [ip4][..tcp] [...192.168.1.34][51276] -> [.157.55.235.146][40021] [Unknown][Unrated] + end: [...207] [ip4][..tcp] [...192.168.1.34][51276] -> [.157.55.235.146][40021] + idle: [...238] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.141][..443] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...186] [ip4][..tcp] [...192.168.1.34][51272] -> [.157.55.235.152][40029] [Unknown][Unrated] + end: [...186] [ip4][..tcp] [...192.168.1.34][51272] -> [.157.55.235.152][40029] + not-detected: [...208] [ip4][..tcp] [...192.168.1.34][51277] -> [.157.55.235.156][40026] [Unknown][Unrated] + end: [...208] [ip4][..tcp] [...192.168.1.34][51277] -> [.157.55.235.156][40026] + idle: [...225] [ip4][..udp] [...192.168.1.34][59052] -> [....192.168.1.1][.5351] [NAT-PMP][Network][Acceptable] + not-detected: [...149] [ip4][..tcp] [...192.168.1.34][51258] -> [213.199.179.176][40021] [Unknown][Unrated] + end: [...149] [ip4][..tcp] [...192.168.1.34][51258] -> [213.199.179.176][40021] + idle: [...199] [ip4][..udp] [...192.168.1.34][64364] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [...178] [ip4][..tcp] [...192.168.1.34][51269] -> [213.199.179.175][40029] [Unknown][Unrated] + end: [...178] [ip4][..tcp] [...192.168.1.34][51269] -> [213.199.179.175][40029] + idle: [....20] [ip4][..udp] [...192.168.1.34][50055] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [...182] [ip4][..udp] [...192.168.1.34][13021] -> [...157.56.52.18][33033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...172] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.43][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...151] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.19][40001] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...125] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.165][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...103] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.42][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....82] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.13][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....51] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.33][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...212] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.173][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...168] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.38][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...150] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.149][40016] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...129] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.160][40016] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...141] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.154][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....43] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.44][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...194] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.170][40021] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....42] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.143][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....86] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.145][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...206] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.40][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...131] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.28][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....34] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.15][40026] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....83] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.46][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...111] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.27][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....39] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.34][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....95] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.151][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...143] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.171][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....90] [ip4][..udp] [...192.168.1.34][13021] -> [.111.221.77.159][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...128] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.24][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...119] [ip4][..udp] [...192.168.1.34][13021] -> [..111.221.74.20][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...198] [ip4][..udp] [...192.168.1.34][60413] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + not-detected: [....10] [ip4][..tcp] [...192.168.1.34][51229] -> [...157.56.52.28][40009] [Unknown][Unrated] + end: [....10] [ip4][..tcp] [...192.168.1.34][51229] -> [...157.56.52.28][40009] + not-detected: [....97] [ip4][..tcp] [...192.168.1.34][51246] -> [...157.56.52.44][40020] [Unknown][Unrated] + end: [....97] [ip4][..tcp] [...192.168.1.34][51246] -> [...157.56.52.44][40020] + not-detected: [...252] [ip4][..tcp] [...192.168.1.34][51303] -> [...80.121.84.93][62381] [Unknown][Unrated] + idle: [...252] [ip4][..tcp] [...192.168.1.34][51303] -> [...80.121.84.93][62381] + not-detected: [...254] [ip4][..tcp] [...192.168.1.34][51306] -> [...80.121.84.93][62381] [Unknown][Unrated] + idle: [...254] [ip4][..tcp] [...192.168.1.34][51306] -> [...80.121.84.93][62381] + end: [....23] [ip4][..tcp] [...192.168.1.34][51227] -> [..17.172.100.36][..443] [TLS.Apple][Web][Safe] + idle: [.....5] [ip4][..udp] [...192.168.1.34][58631] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [.....4] [ip4][..udp] [...192.168.1.34][60688] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + guessed: [...130] [ip4][..tcp] [...192.168.1.34][51253] -> [....64.4.23.166][..443] [TLS][Web][Safe] + end: [...130] [ip4][..tcp] [...192.168.1.34][51253] -> [....64.4.23.166][..443] + guessed: [...218] [ip4][..tcp] [...192.168.1.34][51282] -> [....64.4.23.159][..443] [TLS][Web][Safe] + end: [...218] [ip4][..tcp] [...192.168.1.34][51282] -> [....64.4.23.159][..443] + idle: [....35] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.33][40002] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...183] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.43][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....85] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.22][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....53] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.13][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....68] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.28][40014] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....70] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.44][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....50] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.32][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...173] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.20][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...163] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.42][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...188] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.18][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....47] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.17][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...195] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.24][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....99] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.27][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...204] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.15][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...197] [ip4][..udp] [...192.168.1.34][13021] -> [...65.55.223.16][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...260] [ip4][..tcp] [...192.168.1.34][51313] -> [...212.161.8.36][13392] [Unknown][Unrated] + end: [...260] [ip4][..tcp] [...192.168.1.34][51313] -> [...212.161.8.36][13392] + end: [...262] [ip4][..tcp] [...192.168.1.34][51315] -> [...212.161.8.36][13392] + not-detected: [...265] [ip4][..tcp] [...192.168.1.34][51318] -> [...212.161.8.36][13392] [Unknown][Unrated] + idle: [...265] [ip4][..tcp] [...192.168.1.34][51318] -> [...212.161.8.36][13392] + not-detected: [...267] [ip4][..tcp] [...192.168.1.34][51319] -> [...212.161.8.36][13392] [Unknown][Unrated] + idle: [...267] [ip4][..tcp] [...192.168.1.34][51319] -> [...212.161.8.36][13392] + idle: [....11] [ip4][..udp] [...192.168.1.34][62875] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [...180] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.173][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...106] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.140][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...211] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.175][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...179] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.171][40006] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...223] [ip4][..udp] [...192.168.1.34][59237] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [.....3] [ip4][..udp] [...192.168.1.34][64971] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + idle: [....87] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.150][40007] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...113] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.160][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....52] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.145][40008] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...152] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.140][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....94] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.149][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....62] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.171][40012] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...220] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.157][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...100] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.142][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....69] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.154][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...187] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.147][40014] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...184] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.150][40014] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...161] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.166][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....33] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.170][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...193] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.159][40016] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...122] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.144][40016] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...234] [ip4][..tcp] [...192.168.1.34][51288] -> [...76.167.161.6][20274] [Unknown][Unrated] + end: [...234] [ip4][..tcp] [...192.168.1.34][51288] -> [...76.167.161.6][20274] + idle: [...192] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.170][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...181] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.143][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...137] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.148][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....98] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.156][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....84] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.174][40019] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...104] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.172][40020] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...189] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.160][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...133] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.152][40022] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...213] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.175][40023] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....45] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.167][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....40] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.168][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...196] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.158][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...138] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.155][40027] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....37] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.165][40028] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...249] [ip4][..tcp] [...192.168.1.34][51300] -> [...76.167.161.6][20274] [Unknown][Unrated] + end: [...249] [ip4][..tcp] [...192.168.1.34][51300] -> [...76.167.161.6][20274] + idle: [...105] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.167][40029] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...190] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.146][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....41] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.143][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...153] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.167][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...144] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.161][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...117] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.176][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...124] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.144][40032] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...145] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.148][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...126] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.130.146][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....89] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.162][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + not-detected: [...227] [ip4][..tcp] [...192.168.1.34][51284] -> [.91.190.218.125][12350] [Unknown][Unrated] + end: [...227] [ip4][..tcp] [...192.168.1.34][51284] -> [.91.190.218.125][12350] + not-detected: [...228] [ip4][..tcp] [...192.168.1.34][51285] -> [.91.190.218.125][12350] [Unknown][Unrated] + end: [...228] [ip4][..tcp] [...192.168.1.34][51285] -> [.91.190.218.125][12350] + not-detected: [...245] [ip4][..tcp] [...192.168.1.34][51296] -> [.91.190.216.125][12350] [Unknown][Unrated] + end: [...245] [ip4][..tcp] [...192.168.1.34][51296] -> [.91.190.216.125][12350] + not-detected: [...246] [ip4][..tcp] [...192.168.1.34][51297] -> [..91.190.216.24][12350] [Unknown][Unrated] + idle: [...246] [ip4][..tcp] [...192.168.1.34][51297] -> [..91.190.216.24][12350] + not-detected: [...248] [ip4][..tcp] [...192.168.1.34][51299] -> [.91.190.216.125][12350] [Unknown][Unrated] + end: [...248] [ip4][..tcp] [...192.168.1.34][51299] -> [.91.190.216.125][12350] + idle: [....64] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.140][40003] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....96] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.165][40004] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...205] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.144][40009] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...134] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.172][40011] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....44] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.173][40013] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...222] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.141][40015] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....72] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.154][40017] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...116] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.143][40018] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...162] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.145][40024] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....80] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.174][40025] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...200] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.149][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...164] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.146][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [....77] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.160][40030] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + idle: [...107] [ip4][..udp] [...192.168.1.34][13021] -> [213.199.179.156][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/skype_udp.pcap.out b/test/results/flow-info/skype_udp.pcap.out new file mode 100644 index 000000000..e9e36f92b --- /dev/null +++ b/test/results/flow-info/skype_udp.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.1.2][35990] -> [.24.224.190.149][39262] + detected: [.....1] [ip4][..udp] [....192.168.1.2][35990] -> [.24.224.190.149][39262] [Skype_Teams][VoIP][Acceptable] + idle: [.....1] [ip4][..udp] [....192.168.1.2][35990] -> [.24.224.190.149][39262] [Skype_Teams][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/smb_deletefile.pcap.out b/test/results/flow-info/smb_deletefile.pcap.out new file mode 100644 index 000000000..c8b3c7c23 --- /dev/null +++ b/test/results/flow-info/smb_deletefile.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.118][56848] -> [..192.168.1.187][..445] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [..192.168.1.118][56848] -> [..192.168.1.187][..445] [NetBIOS.SMBv23][System][Acceptable] + analyse: [.....1] [ip4][..tcp] [..192.168.1.118][56848] -> [..192.168.1.187][..445] [NetBIOS.SMBv23][System][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.158| 0.143| 0.529] + [IAT(c->s)...: 0.000| 2.157| 0.116| 0.481][IAT(s->c)...: 0.000| 2.158| 0.184| 0.595] + [PKTLEN(c->s): 54.000| 466.000| 202.600| 166.500][PKTLEN(s->c): 60.000| 554.000| 373.300| 180.900] + [BINS(c->s)..: 10,0,0,2,0,0,0,1,0,0,4,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,1,2,0,0,0,0,0,1,0,1,1,0,1,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip4][..tcp] [..192.168.1.118][56848] -> [..192.168.1.187][..445] [NetBIOS.SMBv23][System][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/smb_frags.pcap.out b/test/results/flow-info/smb_frags.pcap.out new file mode 100644 index 000000000..543f1024f --- /dev/null +++ b/test/results/flow-info/smb_frags.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.10.202.211.125][54120] -> [.....10.202.7.8][..445] + detected: [.....1] [ip4][..tcp] [.10.202.211.125][54120] -> [.....10.202.7.8][..445] [NetBIOS.SMBv1][System][Dangerous] + RISK: Known Proto on Non Std Port, SMB Insecure Vers, Unsafe Protocol + end: [.....1] [ip4][..tcp] [.10.202.211.125][54120] -> [.....10.202.7.8][..445] [NetBIOS.SMBv1][System][Dangerous] + RISK: Known Proto on Non Std Port, SMB Insecure Vers, Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/smbv1.pcap.out b/test/results/flow-info/smbv1.pcap.out new file mode 100644 index 000000000..40c4bfc07 --- /dev/null +++ b/test/results/flow-info/smbv1.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.172.16.156.130][50927] -> [...10.128.0.243][..445] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [.172.16.156.130][50927] -> [...10.128.0.243][..445] [NetBIOS.SMBv1][System][Dangerous] + RISK: Known Proto on Non Std Port, SMB Insecure Vers, Unsafe Protocol + idle: [.....1] [ip4][..tcp] [.172.16.156.130][50927] -> [...10.128.0.243][..445] [NetBIOS.SMBv1][System][Dangerous] + RISK: Known Proto on Non Std Port, SMB Insecure Vers, Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/smpp_in_general.pcap.out b/test/results/flow-info/smpp_in_general.pcap.out new file mode 100644 index 000000000..f6abdb652 --- /dev/null +++ b/test/results/flow-info/smpp_in_general.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.10.226.202.118][.1770] -> [..10.226.202.53][.9000] + detected: [.....1] [ip4][..tcp] [.10.226.202.118][.1770] -> [..10.226.202.53][.9000] [SMPP][Download][Acceptable] + end: [.....1] [ip4][..tcp] [.10.226.202.118][.1770] -> [..10.226.202.53][.9000] [SMPP][Download][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/smtp-starttls.pcap.out b/test/results/flow-info/smtp-starttls.pcap.out new file mode 100644 index 000000000..5329c18b1 --- /dev/null +++ b/test/results/flow-info/smtp-starttls.pcap.out @@ -0,0 +1,39 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.......10.0.0.1][57406] -> [..173.194.68.26][...25] + detected: [.....1] [ip4][..tcp] [.......10.0.0.1][57406] -> [..173.194.68.26][...25] [SMTP.Google][Email][Acceptable] + detection-update: [.....1] [ip4][..tcp] [.......10.0.0.1][57406] -> [..173.194.68.26][...25] [SMTPS.Google][Email][Acceptable] + detection-update: [.....1] [ip4][..tcp] [.......10.0.0.1][57406] -> [..173.194.68.26][...25] [SMTPS.Google][Email][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....1] [ip4][..tcp] [.......10.0.0.1][57406] -> [..173.194.68.26][...25] [SMTPS.Google][Email][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....1] [ip4][..tcp] [.......10.0.0.1][57406] -> [..173.194.68.26][...25] [SMTPS.Google][Email][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + analyse: [.....1] [ip4][..tcp] [.......10.0.0.1][57406] -> [..173.194.68.26][...25] [SMTPS.Google][Email][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.157| 0.030| 0.035] + [IAT(c->s)...: 0.000| 0.157| 0.032| 0.040][IAT(s->c)...: 0.000| 0.104| 0.027| 0.029] + [PKTLEN(c->s): 66.000| 752.000| 158.800| 176.200][PKTLEN(s->c): 66.000|1484.000| 338.600| 460.900] + [BINS(c->s)..: 9,3,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,3,1,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0] + DAEMON-EVENT: [Processed: 36 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 4|updates: 0] + new: [.....2] [ip6][..tcp] [...2003:de:2016:125:fc36:8317:4e86:cb72][.7562] -> [...............2003:de:2016:120::a08:53][...25] + detected: [.....2] [ip6][..tcp] [...2003:de:2016:125:fc36:8317:4e86:cb72][.7562] -> [...............2003:de:2016:120::a08:53][...25] [SMTP][Email][Acceptable] + detection-update: [.....2] [ip6][..tcp] [...2003:de:2016:125:fc36:8317:4e86:cb72][.7562] -> [...............2003:de:2016:120::a08:53][...25] [SMTPS][Email][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....2] [ip6][..tcp] [...2003:de:2016:125:fc36:8317:4e86:cb72][.7562] -> [...............2003:de:2016:120::a08:53][...25] [SMTPS][Email][Safe] + RISK: Self-signed Cert, TLS (probably) Not Carrying HTTPS + analyse: [.....2] [ip6][..tcp] [...2003:de:2016:125:fc36:8317:4e86:cb72][.7562] -> [...............2003:de:2016:120::a08:53][...25] [SMTPS][Email][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.203| 0.019| 0.049] + [IAT(c->s)...: 0.000| 0.203| 0.020| 0.050][IAT(s->c)...: 0.000| 0.202| 0.018| 0.048] + [PKTLEN(c->s): 78.000|1112.000| 187.100| 243.900][PKTLEN(s->c): 78.000|1218.000| 209.800| 269.100] + [BINS(c->s)..: 7,4,2,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,4,2,0,1,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....2] [ip6][..tcp] [...2003:de:2016:125:fc36:8317:4e86:cb72][.7562] -> [...............2003:de:2016:120::a08:53][...25] [SMTPS][Email][Safe] + RISK: Self-signed Cert, TLS (probably) Not Carrying HTTPS + end: [.....1] [ip4][..tcp] [.......10.0.0.1][57406] -> [..173.194.68.26][...25] [SMTPS.Google][Email][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/smtp.pcap.out b/test/results/flow-info/smtp.pcap.out new file mode 100644 index 000000000..7fb8fbb80 --- /dev/null +++ b/test/results/flow-info/smtp.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..194.7.248.153][.2127] -> [.172.16.114.207][...25] + detected: [.....1] [ip4][..tcp] [..194.7.248.153][.2127] -> [.172.16.114.207][...25] [SMTP][Email][Acceptable] + analyse: [.....1] [ip4][..tcp] [..194.7.248.153][.2127] -> [.172.16.114.207][...25] [SMTP][Email][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.055| 0.006| 0.012] + [IAT(c->s)...: 0.001| 0.031| 0.006| 0.010][IAT(s->c)...: 0.000| 0.055| 0.006| 0.014] + [PKTLEN(c->s): 60.000| 94.000| 84.400| 13.000][PKTLEN(s->c): 60.000| 138.000| 90.800| 16.500] + [BINS(c->s)..: 5,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,12,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....1] [ip4][..tcp] [..194.7.248.153][.2127] -> [.172.16.114.207][...25] [SMTP][Email][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/smtps.pcapng.out b/test/results/flow-info/smtps.pcapng.out new file mode 100644 index 000000000..2001689cb --- /dev/null +++ b/test/results/flow-info/smtps.pcapng.out @@ -0,0 +1,11 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....62.43.36.99][37682] -> [...21.65.95.132][..465] + detected: [.....1] [ip4][..tcp] [....62.43.36.99][37682] -> [...21.65.95.132][..465] [SMTPS][Email][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....1] [ip4][..tcp] [....62.43.36.99][37682] -> [...21.65.95.132][..465] [SMTPS][Email][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + idle: [.....1] [ip4][..tcp] [....62.43.36.99][37682] -> [...21.65.95.132][..465] [SMTPS][Email][Safe] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/snapchat.pcap.out b/test/results/flow-info/snapchat.pcap.out new file mode 100644 index 000000000..40387de26 --- /dev/null +++ b/test/results/flow-info/snapchat.pcap.out @@ -0,0 +1,19 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.......10.8.0.1][33233] -> [.74.125.136.141][..443] + detected: [.....1] [ip4][..tcp] [.......10.8.0.1][33233] -> [.74.125.136.141][..443] [TLS.Google][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....1] [ip4][..tcp] [.......10.8.0.1][33233] -> [.74.125.136.141][..443] [TLS.Google][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + new: [.....2] [ip4][..tcp] [.......10.8.0.1][44536] -> [.74.125.136.141][..443] + new: [.....3] [ip4][..tcp] [.......10.8.0.1][56193] -> [.74.125.136.141][..443] + detected: [.....2] [ip4][..tcp] [.......10.8.0.1][44536] -> [.74.125.136.141][..443] [TLS.Snapchat][SocialNetwork][Fun] + detected: [.....3] [ip4][..tcp] [.......10.8.0.1][56193] -> [.74.125.136.141][..443] [TLS.Snapchat][SocialNetwork][Fun] + detection-update: [.....2] [ip4][..tcp] [.......10.8.0.1][44536] -> [.74.125.136.141][..443] [TLS.Snapchat][SocialNetwork][Fun] + detection-update: [.....3] [ip4][..tcp] [.......10.8.0.1][56193] -> [.74.125.136.141][..443] [TLS.Snapchat][SocialNetwork][Fun] + end: [.....1] [ip4][..tcp] [.......10.8.0.1][33233] -> [.74.125.136.141][..443] [TLS.Google][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + idle: [.....3] [ip4][..tcp] [.......10.8.0.1][56193] -> [.74.125.136.141][..443] [TLS.Snapchat][SocialNetwork][Fun] + idle: [.....2] [ip4][..tcp] [.......10.8.0.1][44536] -> [.74.125.136.141][..443] [TLS.Snapchat][SocialNetwork][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/snapchat_call.pcapng.out b/test/results/flow-info/snapchat_call.pcapng.out new file mode 100644 index 000000000..3bbefe491 --- /dev/null +++ b/test/results/flow-info/snapchat_call.pcapng.out @@ -0,0 +1,18 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.192.168.12.169][42083] -> [.18.184.138.142][..443] + detected: [.....1] [ip4][..udp] [.192.168.12.169][42083] -> [.18.184.138.142][..443] [QUIC.AmazonAWS][Cloud][Acceptable] + RISK: Missing SNI TLS Extn + detection-update: [.....1] [ip4][..udp] [.192.168.12.169][42083] -> [.18.184.138.142][..443] [QUIC.SnapchatCall][VoIP][Acceptable] + RISK: Missing SNI TLS Extn + analyse: [.....1] [ip4][..udp] [.192.168.12.169][42083] -> [.18.184.138.142][..443] [QUIC.SnapchatCall][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.447| 0.221| 0.397] + [IAT(c->s)...: 0.000| 1.173| 0.201| 0.353][IAT(s->c)...: 0.000| 1.447| 0.240| 0.434] + [PKTLEN(c->s): 70.000|1392.000| 285.900| 438.500][PKTLEN(s->c): 62.000|1392.000| 406.000| 489.400] + [BINS(c->s)..: 4,8,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0] + [BINS(s->c)..: 4,4,0,0,0,0,0,0,2,2,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0] + idle: [.....1] [ip4][..udp] [.192.168.12.169][42083] -> [.18.184.138.142][..443] [QUIC.SnapchatCall][VoIP][Acceptable] + RISK: Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/snmp.pcap.out b/test/results/flow-info/snmp.pcap.out new file mode 100644 index 000000000..3bb83a9f1 --- /dev/null +++ b/test/results/flow-info/snmp.pcap.out @@ -0,0 +1,76 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..176.211.60.43][43015] -> [...97.0.115.163][..161] + detected: [.....1] [ip4][..udp] [..176.211.60.43][43015] -> [...97.0.115.163][..161] [SNMP][Network][Acceptable] + detection-update: [.....1] [ip4][..udp] [..176.211.60.43][43015] -> [...97.0.115.163][..161] [SNMP][Network][Acceptable] + new: [.....2] [ip4][..udp] [...65.2.162.193][59988] -> [.130.70.149.185][..161] + detected: [.....2] [ip4][..udp] [...65.2.162.193][59988] -> [.130.70.149.185][..161] [SNMP][Network][Acceptable] + detection-update: [.....2] [ip4][..udp] [...65.2.162.193][59988] -> [.130.70.149.185][..161] [SNMP][Network][Acceptable] + new: [.....3] [ip4][..udp] [..176.211.60.43][37224] -> [...97.0.115.163][..161] + detected: [.....3] [ip4][..udp] [..176.211.60.43][37224] -> [...97.0.115.163][..161] [SNMP][Network][Acceptable] + detection-update: [.....3] [ip4][..udp] [..176.211.60.43][37224] -> [...97.0.115.163][..161] [SNMP][Network][Acceptable] + new: [.....4] [ip4][..udp] [...65.2.162.193][58433] -> [.130.70.149.185][..161] + detected: [.....4] [ip4][..udp] [...65.2.162.193][58433] -> [.130.70.149.185][..161] [SNMP][Network][Acceptable] + detection-update: [.....4] [ip4][..udp] [...65.2.162.193][58433] -> [.130.70.149.185][..161] [SNMP][Network][Acceptable] + update: [.....1] [ip4][..udp] [..176.211.60.43][43015] -> [...97.0.115.163][..161] [SNMP][Network][Acceptable] + new: [.....5] [ip4][..udp] [..30.54.142.240][56251] -> [..250.58.112.87][..161] + detected: [.....5] [ip4][..udp] [..30.54.142.240][56251] -> [..250.58.112.87][..161] [SNMP][Network][Acceptable] + new: [.....6] [ip4][..udp] [..30.54.142.240][52435] -> [..250.58.112.87][..161] + detected: [.....6] [ip4][..udp] [..30.54.142.240][52435] -> [..250.58.112.87][..161] [SNMP][Network][Acceptable] + update: [.....2] [ip4][..udp] [...65.2.162.193][59988] -> [.130.70.149.185][..161] [SNMP][Network][Acceptable] + update: [.....1] [ip4][..udp] [..176.211.60.43][43015] -> [...97.0.115.163][..161] [SNMP][Network][Acceptable] + update: [.....4] [ip4][..udp] [...65.2.162.193][58433] -> [.130.70.149.185][..161] [SNMP][Network][Acceptable] + update: [.....3] [ip4][..udp] [..176.211.60.43][37224] -> [...97.0.115.163][..161] [SNMP][Network][Acceptable] + DAEMON-EVENT: [Processed: 28 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 6 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 4|updates: 5] + new: [.....7] [ip4][..udp] [..35.95.158.217][60440] -> [...30.79.214.36][..161] + detected: [.....7] [ip4][..udp] [..35.95.158.217][60440] -> [...30.79.214.36][..161] [SNMP][Network][Acceptable] + new: [.....8] [ip4][..udp] [..35.95.158.217][49306] -> [...30.79.214.36][..161] + detected: [.....8] [ip4][..udp] [..35.95.158.217][49306] -> [...30.79.214.36][..161] [SNMP][Network][Acceptable] + idle: [.....2] [ip4][..udp] [...65.2.162.193][59988] -> [.130.70.149.185][..161] [SNMP][Network][Acceptable] + idle: [.....1] [ip4][..udp] [..176.211.60.43][43015] -> [...97.0.115.163][..161] [SNMP][Network][Acceptable] + idle: [.....5] [ip4][..udp] [..30.54.142.240][56251] -> [..250.58.112.87][..161] [SNMP][Network][Acceptable] + idle: [.....4] [ip4][..udp] [...65.2.162.193][58433] -> [.130.70.149.185][..161] [SNMP][Network][Acceptable] + idle: [.....3] [ip4][..udp] [..176.211.60.43][37224] -> [...97.0.115.163][..161] [SNMP][Network][Acceptable] + idle: [.....6] [ip4][..udp] [..30.54.142.240][52435] -> [..250.58.112.87][..161] [SNMP][Network][Acceptable] + new: [.....9] [ip4][..udp] [.131.179.49.165][60694] -> [..254.158.1.169][..161] + detected: [.....9] [ip4][..udp] [.131.179.49.165][60694] -> [..254.158.1.169][..161] [SNMP][Network][Acceptable] + new: [....10] [ip4][..udp] [.131.179.49.165][35970] -> [..254.158.1.169][..161] + detected: [....10] [ip4][..udp] [.131.179.49.165][35970] -> [..254.158.1.169][..161] [SNMP][Network][Acceptable] + update: [.....7] [ip4][..udp] [..35.95.158.217][60440] -> [...30.79.214.36][..161] [SNMP][Network][Acceptable] + update: [.....8] [ip4][..udp] [..35.95.158.217][49306] -> [...30.79.214.36][..161] [SNMP][Network][Acceptable] + DAEMON-EVENT: [Processed: 52 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 10|skipped: 0|!detected: 0|guessed: 0|detection-updates: 4|updates: 7] + new: [....11] [ip4][..udp] [..92.135.15.240][54318] -> [.137.49.110.186][..162] + detected: [....11] [ip4][..udp] [..92.135.15.240][54318] -> [.137.49.110.186][..162] [SNMP][Network][Acceptable] + idle: [.....9] [ip4][..udp] [.131.179.49.165][60694] -> [..254.158.1.169][..161] [SNMP][Network][Acceptable] + idle: [.....7] [ip4][..udp] [..35.95.158.217][60440] -> [...30.79.214.36][..161] [SNMP][Network][Acceptable] + idle: [.....8] [ip4][..udp] [..35.95.158.217][49306] -> [...30.79.214.36][..161] [SNMP][Network][Acceptable] + idle: [....10] [ip4][..udp] [.131.179.49.165][35970] -> [..254.158.1.169][..161] [SNMP][Network][Acceptable] + new: [....12] [ip4][..udp] [.200.76.132.137][54318] -> [189.111.255.214][..162] + detected: [....12] [ip4][..udp] [.200.76.132.137][54318] -> [189.111.255.214][..162] [SNMP][Network][Acceptable] + idle: [....11] [ip4][..udp] [..92.135.15.240][54318] -> [.137.49.110.186][..162] + new: [....13] [ip4][..udp] [.113.19.156.111][54318] -> [.135.201.124.55][..162] + detected: [....13] [ip4][..udp] [.113.19.156.111][54318] -> [.135.201.124.55][..162] [SNMP][Network][Acceptable] + update: [....12] [ip4][..udp] [.200.76.132.137][54318] -> [189.111.255.214][..162] + new: [....14] [ip4][..udp] [..205.83.36.228][54318] -> [.160.174.106.32][..162] + detected: [....14] [ip4][..udp] [..205.83.36.228][54318] -> [.160.174.106.32][..162] [SNMP][Network][Acceptable] + new: [....15] [ip4][..udp] [.124.53.196.176][54318] -> [..103.248.22.47][..162] + detected: [....15] [ip4][..udp] [.124.53.196.176][54318] -> [..103.248.22.47][..162] [SNMP][Network][Acceptable] + update: [....12] [ip4][..udp] [.200.76.132.137][54318] -> [189.111.255.214][..162] + update: [....13] [ip4][..udp] [.113.19.156.111][54318] -> [.135.201.124.55][..162] [SNMP][Network][Acceptable] + DAEMON-EVENT: [Processed: 62 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 15|skipped: 0|!detected: 0|guessed: 0|detection-updates: 4|updates: 10] + new: [....16] [ip4][..udp] [...10.231.2.134][..161] -> [....10.72.247.4][61088] + detected: [....16] [ip4][..udp] [...10.231.2.134][..161] -> [....10.72.247.4][61088] [SNMP][Network][Acceptable] + idle: [....12] [ip4][..udp] [.200.76.132.137][54318] -> [189.111.255.214][..162] + idle: [....13] [ip4][..udp] [.113.19.156.111][54318] -> [.135.201.124.55][..162] [SNMP][Network][Acceptable] + idle: [....15] [ip4][..udp] [.124.53.196.176][54318] -> [..103.248.22.47][..162] [SNMP][Network][Acceptable] + idle: [....14] [ip4][..udp] [..205.83.36.228][54318] -> [.160.174.106.32][..162] [SNMP][Network][Acceptable] + new: [....17] [ip4][..udp] [.....10.99.8.88][43242] -> [.10.100.253.146][..161] + detected: [....17] [ip4][..udp] [.....10.99.8.88][43242] -> [.10.100.253.146][..161] [SNMP][Network][Acceptable] + detection-update: [....17] [ip4][..udp] [.....10.99.8.88][43242] -> [.10.100.253.146][..161] [SNMP][Network][Acceptable] + idle: [....17] [ip4][..udp] [.....10.99.8.88][43242] -> [.10.100.253.146][..161] [SNMP][Network][Acceptable] + idle: [....16] [ip4][..udp] [...10.231.2.134][..161] -> [....10.72.247.4][61088] [SNMP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/soap.pcap.out b/test/results/flow-info/soap.pcap.out new file mode 100644 index 000000000..d10d73faa --- /dev/null +++ b/test/results/flow-info/soap.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.2.100][50100] -> [...23.2.213.165][...80] + new: [.....2] [ip4][..tcp] [..192.168.2.100][50100] -> [...23.2.213.165][.4176] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [..192.168.2.100][50100] -> [...23.2.213.165][.4176] [HTTP.SOAP][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..tcp] [..185.32.192.30][...80] -> [.85.154.114.113][56028] + detected: [.....3] [ip4][..tcp] [..185.32.192.30][...80] -> [.85.154.114.113][56028] [SOAP][RPC][Acceptable] + idle: [.....3] [ip4][..tcp] [..185.32.192.30][...80] -> [.85.154.114.113][56028] [SOAP][RPC][Acceptable] + idle: [.....2] [ip4][..tcp] [..192.168.2.100][50100] -> [...23.2.213.165][.4176] + guessed: [.....1] [ip4][..tcp] [..192.168.2.100][50100] -> [...23.2.213.165][...80] [HTTP][Web][Acceptable] + end: [.....1] [ip4][..tcp] [..192.168.2.100][50100] -> [...23.2.213.165][...80] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/socks-http-example.pcap.out b/test/results/flow-info/socks-http-example.pcap.out new file mode 100644 index 000000000..1c9b0e1a3 --- /dev/null +++ b/test/results/flow-info/socks-http-example.pcap.out @@ -0,0 +1,13 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.10.180.156.185][53533] -> [.10.180.156.249][.1080] + detected: [.....1] [ip4][..tcp] [.10.180.156.185][53533] -> [.10.180.156.249][.1080] [SOCKS][Web][Acceptable] + new: [.....2] [ip4][..tcp] [.10.180.156.185][53534] -> [.10.180.156.249][.1080] + detected: [.....2] [ip4][..tcp] [.10.180.156.185][53534] -> [.10.180.156.249][.1080] [SOCKS][Web][Acceptable] + new: [.....3] [ip4][..tcp] [.10.180.156.185][53535] -> [.10.180.156.249][.1080] + end: [.....1] [ip4][..tcp] [.10.180.156.185][53533] -> [.10.180.156.249][.1080] [SOCKS][Web][Acceptable] + end: [.....2] [ip4][..tcp] [.10.180.156.185][53534] -> [.10.180.156.249][.1080] [SOCKS][Web][Acceptable] + guessed: [.....3] [ip4][..tcp] [.10.180.156.185][53535] -> [.10.180.156.249][.1080] [SOCKS][Web][Acceptable] + end: [.....3] [ip4][..tcp] [.10.180.156.185][53535] -> [.10.180.156.249][.1080] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/softether.pcap.out b/test/results/flow-info/softether.pcap.out new file mode 100644 index 000000000..9c693fe56 --- /dev/null +++ b/test/results/flow-info/softether.pcap.out @@ -0,0 +1,97 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] + detected: [.....1] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + detection-update: [.....1] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....1] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....1] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....1] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 1|updates: 3] + new: [.....2] [ip4][..tcp] [..192.168.2.100][37504] -> [..130.158.75.45][...80] + detected: [.....2] [ip4][..tcp] [..192.168.2.100][37504] -> [..130.158.75.45][...80] [HTTP.Softether][VPN][Acceptable] + idle: [.....1] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + DAEMON-EVENT: [Processed: 19 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 1|updates: 3] + new: [.....3] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] + detected: [.....3] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + idle: [.....2] [ip4][..tcp] [..192.168.2.100][37504] -> [..130.158.75.45][...80] + update: [.....3] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] + update: [.....3] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] + detection-update: [.....3] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....3] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + DAEMON-EVENT: [Processed: 34 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 2|updates: 6] + new: [.....4] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.105][.5004] + detected: [.....4] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.105][.5004] [Softether][VPN][Acceptable] + detection-update: [.....4] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.105][.5004] [Softether][VPN][Acceptable] + update: [.....3] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + detection-update: [.....4] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.105][.5004] [Softether][VPN][Acceptable] + detection-update: [.....4] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.105][.5004] [Softether][VPN][Acceptable] + update: [.....3] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....4] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.105][.5004] [Softether][VPN][Acceptable] + update: [.....3] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....4] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.105][.5004] [Softether][VPN][Acceptable] + DAEMON-EVENT: [Processed: 55 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 5|updates: 11] + idle: [.....3] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....4] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.105][.5004] [Softether][VPN][Acceptable] + update: [.....4] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.105][.5004] [Softether][VPN][Acceptable] + update: [.....4] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.105][.5004] [Softether][VPN][Acceptable] + update: [.....4] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.105][.5004] [Softether][VPN][Acceptable] + DAEMON-EVENT: [Processed: 70 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 5|updates: 15] + new: [.....5] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.112][.5004] + detected: [.....5] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.112][.5004] [Softether][VPN][Acceptable] + idle: [.....4] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.105][.5004] [Softether][VPN][Acceptable] + update: [.....5] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.112][.5004] + update: [.....5] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.112][.5004] + update: [.....5] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.112][.5004] + DAEMON-EVENT: [Processed: 85 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 5|updates: 18] + update: [.....5] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.112][.5004] [Softether][VPN][Acceptable] + update: [.....5] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.112][.5004] [Softether][VPN][Acceptable] + update: [.....5] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.112][.5004] [Softether][VPN][Acceptable] + update: [.....5] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.112][.5004] [Softether][VPN][Acceptable] + DAEMON-EVENT: [Processed: 100 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 5|updates: 22] + new: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] + detected: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + idle: [.....5] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.112][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] + detection-update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + DAEMON-EVENT: [Processed: 115 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 6|updates: 25] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + DAEMON-EVENT: [Processed: 130 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 6|updates: 29] + analyse: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.257|1566.080| 36.711| 451.865] + [IAT(c->s)...: 5.427|1540.291| 169.774| 407.981][IAT(s->c)...: 0.257|1566.080| 181.109| 428.570] + [PKTLEN(c->s): 43.000| 522.000| 99.400| 154.300][PKTLEN(s->c): 70.000| 370.000| 110.000| 102.000] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 13,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + DAEMON-EVENT: [Processed: 145 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 6|updates: 33] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + DAEMON-EVENT: [Processed: 162 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 6|updates: 37] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + update: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + idle: [.....6] [ip4][..udp] [..192.168.2.100][51381] -> [..130.158.6.113][.5004] [Softether][VPN][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/someip-tp.pcap.out b/test/results/flow-info/someip-tp.pcap.out new file mode 100644 index 000000000..263dfd227 --- /dev/null +++ b/test/results/flow-info/someip-tp.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.....10.0.1.207][56772] -> [.......10.0.1.1][18193] + detected: [.....1] [ip4][..udp] [.....10.0.1.207][56772] -> [.......10.0.1.1][18193] [SOMEIP][RPC][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....1] [ip4][..udp] [.....10.0.1.207][56772] -> [.......10.0.1.1][18193] [SOMEIP][RPC][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/someip-udp-method-call.pcapng.out b/test/results/flow-info/someip-udp-method-call.pcapng.out new file mode 100644 index 000000000..fccd53379 --- /dev/null +++ b/test/results/flow-info/someip-udp-method-call.pcapng.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.0.1][49190] -> [......224.0.0.1][49190] + detected: [.....1] [ip4][..udp] [....192.168.0.1][49190] -> [......224.0.0.1][49190] [SOMEIP][RPC][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....2] [ip4][..udp] [..192.168.0.125][49191] -> [....192.168.0.1][49201] + detected: [.....2] [ip4][..udp] [..192.168.0.125][49191] -> [....192.168.0.1][49201] [SOMEIP][RPC][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....2] [ip4][..udp] [..192.168.0.125][49191] -> [....192.168.0.1][49201] [SOMEIP][RPC][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....1] [ip4][..udp] [....192.168.0.1][49190] -> [......224.0.0.1][49190] [SOMEIP][RPC][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/someip_sd_sample.pcap.out b/test/results/flow-info/someip_sd_sample.pcap.out new file mode 100644 index 000000000..0b882fb92 --- /dev/null +++ b/test/results/flow-info/someip_sd_sample.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown datalink layer packet + ERROR-EVENT: Unknown datalink layer packet + ERROR-EVENT: Unknown datalink layer packet + ERROR-EVENT: Unknown datalink layer packet + ERROR-EVENT: Unknown datalink layer packet + ERROR-EVENT: Unknown datalink layer packet + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/sql_injection.pcap.out b/test/results/flow-info/sql_injection.pcap.out new file mode 100644 index 000000000..40a3ccc3a --- /dev/null +++ b/test/results/flow-info/sql_injection.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.3.109][53528] -> [..192.168.3.107][...80] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [..192.168.3.109][53528] -> [..192.168.3.107][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + idle: [.....1] [ip4][..tcp] [..192.168.3.109][53528] -> [..192.168.3.107][...80] [HTTP][Web][Acceptable] + RISK: SQL Injection, HTTP Numeric IP Address + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ssdp-m-search-ua.pcap.out b/test/results/flow-info/ssdp-m-search-ua.pcap.out new file mode 100644 index 000000000..4c54f0ba6 --- /dev/null +++ b/test/results/flow-info/ssdp-m-search-ua.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.192.168.242.50][56446] -> [239.255.255.250][.1900] + detected: [.....1] [ip4][..udp] [.192.168.242.50][56446] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [.....1] [ip4][..udp] [.192.168.242.50][56446] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ssdp-m-search.pcap.out b/test/results/flow-info/ssdp-m-search.pcap.out new file mode 100644 index 000000000..3bb684d52 --- /dev/null +++ b/test/results/flow-info/ssdp-m-search.pcap.out @@ -0,0 +1,8 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.242.8][42253] -> [192.168.242.255][32412] + detected: [.....1] [ip4][..udp] [..192.168.242.8][42253] -> [192.168.242.255][32412] [SSDP][System][Acceptable] + update: [.....1] [ip4][..udp] [..192.168.242.8][42253] -> [192.168.242.255][32412] [SSDP][System][Acceptable] + idle: [.....1] [ip4][..udp] [..192.168.242.8][42253] -> [192.168.242.255][32412] [SSDP][System][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ssh.pcap.out b/test/results/flow-info/ssh.pcap.out new file mode 100644 index 000000000..6e147de6b --- /dev/null +++ b/test/results/flow-info/ssh.pcap.out @@ -0,0 +1,24 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...172.16.238.1][58395] -> [.172.16.238.168][...22] + detected: [.....1] [ip4][..tcp] [...172.16.238.1][58395] -> [.172.16.238.168][...22] [SSH][RemoteAccess][Acceptable] + RISK: SSH Obsolete Cli Vers/Cipher + detection-update: [.....1] [ip4][..tcp] [...172.16.238.1][58395] -> [.172.16.238.168][...22] [SSH][RemoteAccess][Acceptable] + RISK: SSH Obsolete Cli Vers/Cipher + detection-update: [.....1] [ip4][..tcp] [...172.16.238.1][58395] -> [.172.16.238.168][...22] [SSH][RemoteAccess][Acceptable] + RISK: SSH Obsolete Cli Vers/Cipher, SSH Obsolete Ser Vers/Cipher + detection-update: [.....1] [ip4][..tcp] [...172.16.238.1][58395] -> [.172.16.238.168][...22] [SSH][RemoteAccess][Acceptable] + RISK: SSH Obsolete Cli Vers/Cipher, SSH Obsolete Ser Vers/Cipher + detection-update: [.....1] [ip4][..tcp] [...172.16.238.1][58395] -> [.172.16.238.168][...22] [SSH][RemoteAccess][Acceptable] + RISK: SSH Obsolete Cli Vers/Cipher, SSH Obsolete Ser Vers/Cipher + analyse: [.....1] [ip4][..tcp] [...172.16.238.1][58395] -> [.172.16.238.168][...22] [SSH][RemoteAccess][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.907| 0.395| 0.889] + [IAT(c->s)...: 0.000| 2.907| 0.445| 0.955][IAT(s->c)...: 0.000| 2.633| 0.333| 0.796] + [PKTLEN(c->s): 66.000| 970.000| 150.500| 205.300][PKTLEN(s->c): 66.000| 850.000| 201.200| 255.800] + [BINS(c->s)..: 12,1,1,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,1,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + end: [.....1] [ip4][..tcp] [...172.16.238.1][58395] -> [.172.16.238.168][...22] [SSH][RemoteAccess][Acceptable] + RISK: SSH Obsolete Cli Vers/Cipher, SSH Obsolete Ser Vers/Cipher + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ssl-cert-name-mismatch.pcap.out b/test/results/flow-info/ssl-cert-name-mismatch.pcap.out new file mode 100644 index 000000000..a0563f206 --- /dev/null +++ b/test/results/flow-info/ssl-cert-name-mismatch.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.2.222][54772] -> [.104.154.89.105][..443] + detected: [.....1] [ip4][..tcp] [..192.168.2.222][54772] -> [.104.154.89.105][..443] [TLS.GoogleCloud][Cloud][Acceptable] + detection-update: [.....1] [ip4][..tcp] [..192.168.2.222][54772] -> [.104.154.89.105][..443] [TLS.GoogleCloud][Cloud][Acceptable] + detection-update: [.....1] [ip4][..tcp] [..192.168.2.222][54772] -> [.104.154.89.105][..443] [TLS.GoogleCloud][Cloud][Acceptable] + end: [.....1] [ip4][..tcp] [..192.168.2.222][54772] -> [.104.154.89.105][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/starcraft_battle.pcap.out b/test/results/flow-info/starcraft_battle.pcap.out new file mode 100644 index 000000000..294c3df47 --- /dev/null +++ b/test/results/flow-info/starcraft_battle.pcap.out @@ -0,0 +1,202 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.30.252.91][..443] -> [..192.168.1.100][.3213] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [..192.30.252.91][..443] -> [..192.168.1.100][.3213] [TLS.Github][Collaborative][Acceptable] + new: [.....2] [ip4][..udp] [..192.168.1.100][58818] -> [..192.168.1.254][...53] + detected: [.....2] [ip4][..udp] [..192.168.1.100][58818] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [.....2] [ip4][..udp] [..192.168.1.100][58818] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [.....2] [ip4][..udp] [..192.168.1.100][58818] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + RISK: Suspicious DNS Traffic + new: [.....3] [ip4][..tcp] [..80.239.186.26][..443] -> [..192.168.1.100][.3476] [MIDSTREAM] + new: [.....4] [ip4][..udp] [..192.168.1.100][58831] -> [..192.168.1.254][...53] + detected: [.....4] [ip4][..udp] [..192.168.1.100][58831] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [.....4] [ip4][..udp] [..192.168.1.100][58831] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [.....4] [ip4][..udp] [..192.168.1.100][58831] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [.....4] [ip4][..udp] [..192.168.1.100][58831] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + new: [.....5] [ip4][..tcp] [..80.239.186.40][..443] -> [..192.168.1.100][.3478] [MIDSTREAM] + new: [.....6] [ip4][..udp] [..173.194.40.22][..443] -> [..192.168.1.100][53568] + new: [.....7] [ip4][..udp] [..192.168.1.100][58844] -> [..192.168.1.254][...53] + detected: [.....7] [ip4][..udp] [..192.168.1.100][58844] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [.....7] [ip4][..udp] [..192.168.1.100][58844] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + new: [.....8] [ip4][..tcp] [..192.168.1.100][.3052] -> [.216.58.212.110][..443] [MIDSTREAM] + new: [.....9] [ip4][..udp] [..192.168.1.100][58851] -> [..192.168.1.254][...53] + detected: [.....9] [ip4][..udp] [..192.168.1.100][58851] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [.....9] [ip4][..udp] [..192.168.1.100][58851] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [.....9] [ip4][..udp] [..192.168.1.100][58851] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + new: [....10] [ip4][..tcp] [..192.168.1.100][.3427] -> [.80.239.208.193][.1119] [MIDSTREAM] + new: [....11] [ip4][..tcp] [..192.168.1.100][.2759] -> [.64.233.184.188][.5228] [MIDSTREAM] + ERROR-EVENT: Unknown packet type + new: [....12] [ip4][..udp] [..192.168.1.254][38605] -> [239.255.255.250][.1900] + detected: [....12] [ip4][..udp] [..192.168.1.254][38605] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....13] [ip4][..tcp] [..192.168.1.100][.3506] -> [173.194.113.224][...80] + detected: [....13] [ip4][..tcp] [..192.168.1.100][.3506] -> [173.194.113.224][...80] [HTTP.Google][Advertisement][Acceptable] + new: [....14] [ip4][..udp] [..192.168.1.100][60026] -> [..192.168.1.254][...53] + detected: [....14] [ip4][..udp] [..192.168.1.100][60026] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name + detection-update: [....14] [ip4][..udp] [..192.168.1.100][60026] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + new: [....15] [ip4][..tcp] [..192.168.1.100][.3508] -> [.87.248.221.254][...80] + detected: [....15] [ip4][..tcp] [..192.168.1.100][.3508] -> [.87.248.221.254][...80] [HTTP][Web][Acceptable] + RISK: Suspicious DGA Domain name + detection-update: [....15] [ip4][..tcp] [..192.168.1.100][.3508] -> [.87.248.221.254][...80] [HTTP][Download][Acceptable] + RISK: Binary App Transfer, Suspicious DGA Domain name + analyse: [....15] [ip4][..tcp] [..192.168.1.100][.3508] -> [.87.248.221.254][...80] [HTTP][Download][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.072| 0.012| 0.024] + [IAT(c->s)...: 0.000| 0.072| 0.013| 0.025][IAT(s->c)...: 0.000| 0.058| 0.012| 0.022] + [PKTLEN(c->s): 54.000| 241.000| 66.400| 45.200][PKTLEN(s->c): 60.000|1514.000|1332.600| 479.900] + [BINS(c->s)..: 15,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,0,0] + new: [....16] [ip4][..tcp] [..192.168.1.100][.3512] -> [..12.129.222.54][...80] + detected: [....16] [ip4][..tcp] [..192.168.1.100][.3512] -> [..12.129.222.54][...80] [HTTP.WorldOfWarcraft][Game][Fun] + new: [....17] [ip4][..tcp] [..192.168.1.100][.3492] -> [...2.228.46.104][..443] [MIDSTREAM] + new: [....18] [ip4][..tcp] [..192.168.1.100][.3489] -> [...2.228.46.104][..443] [MIDSTREAM] + new: [....19] [ip4][..tcp] [..192.168.1.100][.3490] -> [...2.228.46.104][..443] [MIDSTREAM] + new: [....20] [ip4][..tcp] [..192.168.1.100][.3491] -> [...2.228.46.104][..443] [MIDSTREAM] + new: [....21] [ip4][..tcp] [..192.168.1.100][.3482] -> [...2.228.46.114][..443] [MIDSTREAM] + new: [....22] [ip4][..tcp] [..192.168.1.100][.3480] -> [...2.228.46.114][..443] [MIDSTREAM] + new: [....23] [ip4][..tcp] [..192.168.1.100][.3481] -> [...2.228.46.114][..443] [MIDSTREAM] + new: [....24] [ip4][..tcp] [..192.168.1.100][.3479] -> [...2.228.46.114][..443] [MIDSTREAM] + new: [....25] [ip4][..tcp] [..192.168.1.100][.3486] -> [.199.38.164.156][..443] [MIDSTREAM] + new: [....26] [ip4][..tcp] [..192.168.1.100][.3484] -> [173.194.113.224][..443] [MIDSTREAM] + detected: [....21] [ip4][..tcp] [..192.168.1.100][.3482] -> [...2.228.46.114][..443] [TLS][Web][Safe] + detected: [....24] [ip4][..tcp] [..192.168.1.100][.3479] -> [...2.228.46.114][..443] [TLS][Web][Safe] + detected: [....23] [ip4][..tcp] [..192.168.1.100][.3481] -> [...2.228.46.114][..443] [TLS][Web][Safe] + detected: [....17] [ip4][..tcp] [..192.168.1.100][.3492] -> [...2.228.46.104][..443] [TLS][Web][Safe] + detected: [....19] [ip4][..tcp] [..192.168.1.100][.3490] -> [...2.228.46.104][..443] [TLS][Web][Safe] + detected: [....20] [ip4][..tcp] [..192.168.1.100][.3491] -> [...2.228.46.104][..443] [TLS][Web][Safe] + detected: [....22] [ip4][..tcp] [..192.168.1.100][.3480] -> [...2.228.46.114][..443] [TLS][Web][Safe] + detected: [....18] [ip4][..tcp] [..192.168.1.100][.3489] -> [...2.228.46.104][..443] [TLS][Web][Safe] + new: [....27] [ip4][....2] [..192.168.1.107] -> [.....224.0.0.22] + detected: [....27] [ip4][....2] [..192.168.1.107] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + new: [....28] [ip4][..udp] [..192.168.1.100][53145] -> [..192.168.1.254][...53] + detected: [....28] [ip4][..udp] [..192.168.1.100][53145] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [....28] [ip4][..udp] [..192.168.1.100][53145] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + new: [....29] [ip4][..tcp] [..192.168.1.100][.3515] -> [..80.239.186.26][...80] + detected: [....29] [ip4][..tcp] [..192.168.1.100][.3515] -> [..80.239.186.26][...80] [HTTP][Web][Acceptable] + new: [....30] [ip4][..tcp] [..192.168.1.100][.3516] -> [..80.239.186.21][...80] + detected: [....30] [ip4][..tcp] [..192.168.1.100][.3516] -> [..80.239.186.21][...80] [HTTP][Web][Acceptable] + new: [....31] [ip4][..tcp] [..192.168.1.100][.3517] -> [213.248.127.130][.1119] + new: [....32] [ip4][..tcp] [..192.168.1.100][.3518] -> [..80.239.186.26][...80] + detected: [....32] [ip4][..tcp] [..192.168.1.100][.3518] -> [..80.239.186.26][...80] [HTTP][Web][Acceptable] + new: [....33] [ip4][..tcp] [..192.168.1.100][.3519] -> [..80.239.186.21][...80] + detected: [....31] [ip4][..tcp] [..192.168.1.100][.3517] -> [213.248.127.130][.1119] [Starcraft][Game][Fun] + detected: [....33] [ip4][..tcp] [..192.168.1.100][.3519] -> [..80.239.186.21][...80] [HTTP][Web][Acceptable] + analyse: [....31] [ip4][..tcp] [..192.168.1.100][.3517] -> [213.248.127.130][.1119] [Starcraft][Game][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.166| 0.038| 0.053] + [IAT(c->s)...: 0.000| 0.129| 0.024| 0.040][IAT(s->c)...: 0.024| 0.166| 0.097| 0.062] + [PKTLEN(c->s): 54.000| 249.000| 88.800| 47.600][PKTLEN(s->c): 60.000| 797.000| 236.000| 266.800] + [BINS(c->s)..: 23,0,0,1,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....34] [ip4][..udp] [..192.168.1.100][53146] -> [...5.42.180.154][.1119] + new: [....35] [ip4][..udp] [..192.168.1.100][53146] -> [..62.115.246.51][.1119] + new: [....36] [ip4][..udp] [..192.168.1.100][.6113] -> [213.248.127.212][.1119] + new: [....37] [ip4][..udp] [..192.168.1.100][.6113] -> [213.248.127.166][.1119] + new: [....38] [ip4][..tcp] [..192.168.1.100][.3521] -> [..80.239.186.26][...80] + detected: [....38] [ip4][..tcp] [..192.168.1.100][.3521] -> [..80.239.186.26][...80] [HTTP][Web][Acceptable] + new: [....39] [ip4][..tcp] [..192.168.1.100][.3522] -> [..80.239.186.21][...80] + detected: [....39] [ip4][..tcp] [..192.168.1.100][.3522] -> [..80.239.186.21][...80] [HTTP][Web][Acceptable] + new: [....40] [ip4][..tcp] [..192.168.1.100][.3523] -> [..80.239.186.26][...80] + new: [....41] [ip4][..tcp] [..192.168.1.100][.3524] -> [..80.239.186.26][...80] + detected: [....40] [ip4][..tcp] [..192.168.1.100][.3523] -> [..80.239.186.26][...80] [HTTP][Web][Acceptable] + detected: [....41] [ip4][..tcp] [..192.168.1.100][.3524] -> [..80.239.186.26][...80] [HTTP][Web][Acceptable] + new: [....42] [ip4][..tcp] [..192.168.1.100][.3525] -> [..80.239.186.40][...80] + new: [....43] [ip4][..tcp] [..192.168.1.100][.3526] -> [..80.239.186.40][...80] + detected: [....42] [ip4][..tcp] [..192.168.1.100][.3525] -> [..80.239.186.40][...80] [HTTP][Web][Acceptable] + detected: [....43] [ip4][..tcp] [..192.168.1.100][.3526] -> [..80.239.186.40][...80] [HTTP][Web][Acceptable] + new: [....44] [ip4][..udp] [..192.168.1.100][55468] -> [..192.168.1.254][...53] + detected: [....44] [ip4][..udp] [..192.168.1.100][55468] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [....44] [ip4][..udp] [..192.168.1.100][55468] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + new: [....45] [ip4][..tcp] [..192.168.1.100][.3527] -> [...2.228.46.112][...80] + new: [....46] [ip4][..tcp] [..192.168.1.100][.3528] -> [...2.228.46.112][...80] + new: [....47] [ip4][..tcp] [..192.168.1.100][.3529] -> [...2.228.46.112][...80] + new: [....48] [ip4][..tcp] [..192.168.1.100][.3530] -> [...2.228.46.112][...80] + new: [....49] [ip4][..tcp] [..192.168.1.100][.3531] -> [...2.228.46.112][...80] + detected: [....45] [ip4][..tcp] [..192.168.1.100][.3527] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + new: [....50] [ip4][..tcp] [..192.168.1.100][.3532] -> [...2.228.46.112][...80] + new: [....51] [ip4][..tcp] [..192.168.1.100][.3533] -> [...2.228.46.112][...80] + detected: [....47] [ip4][..tcp] [..192.168.1.100][.3529] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + detected: [....48] [ip4][..tcp] [..192.168.1.100][.3530] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + detected: [....46] [ip4][..tcp] [..192.168.1.100][.3528] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + detected: [....49] [ip4][..tcp] [..192.168.1.100][.3531] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + new: [....52] [ip4][..tcp] [..192.168.1.100][.3534] -> [...2.228.46.112][...80] + detected: [....50] [ip4][..tcp] [..192.168.1.100][.3532] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + detected: [....51] [ip4][..tcp] [..192.168.1.100][.3533] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + analyse: [....45] [ip4][..tcp] [..192.168.1.100][.3527] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.034| 0.007| 0.013] + [IAT(c->s)...: 0.000| 0.034| 0.009| 0.015][IAT(s->c)...: 0.000| 0.034| 0.005| 0.012] + [PKTLEN(c->s): 54.000| 203.000| 67.400| 41.000][PKTLEN(s->c): 60.000|1514.000|1368.900| 435.300] + [BINS(c->s)..: 11,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,0,0] + guessed: [....35] [ip4][..udp] [..192.168.1.100][53146] -> [..62.115.246.51][.1119] [Starcraft][Game][Fun] + idle: [....35] [ip4][..udp] [..192.168.1.100][53146] -> [..62.115.246.51][.1119] + guessed: [....11] [ip4][..tcp] [..192.168.1.100][.2759] -> [.64.233.184.188][.5228] [Google][Web][Acceptable] + idle: [....11] [ip4][..tcp] [..192.168.1.100][.2759] -> [.64.233.184.188][.5228] + guessed: [.....8] [ip4][..tcp] [..192.168.1.100][.3052] -> [.216.58.212.110][..443] [TLS.Google][Web][Acceptable] + idle: [.....8] [ip4][..tcp] [..192.168.1.100][.3052] -> [.216.58.212.110][..443] + idle: [....28] [ip4][..udp] [..192.168.1.100][53145] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + end: [....13] [ip4][..tcp] [..192.168.1.100][.3506] -> [173.194.113.224][...80] [HTTP.Google][Advertisement][Acceptable] + idle: [....27] [ip4][....2] [..192.168.1.107] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + guessed: [....10] [ip4][..tcp] [..192.168.1.100][.3427] -> [.80.239.208.193][.1119] [Starcraft][Game][Fun] + end: [....10] [ip4][..tcp] [..192.168.1.100][.3427] -> [.80.239.208.193][.1119] + idle: [....44] [ip4][..udp] [..192.168.1.100][55468] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + guessed: [....26] [ip4][..tcp] [..192.168.1.100][.3484] -> [173.194.113.224][..443] [TLS.Google][Web][Acceptable] + end: [....26] [ip4][..tcp] [..192.168.1.100][.3484] -> [173.194.113.224][..443] + idle: [....45] [ip4][..tcp] [..192.168.1.100][.3527] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + idle: [....46] [ip4][..tcp] [..192.168.1.100][.3528] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + idle: [....47] [ip4][..tcp] [..192.168.1.100][.3529] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + idle: [....48] [ip4][..tcp] [..192.168.1.100][.3530] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + idle: [....49] [ip4][..tcp] [..192.168.1.100][.3531] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + idle: [....50] [ip4][..tcp] [..192.168.1.100][.3532] -> [...2.228.46.112][...80] + idle: [....51] [ip4][..tcp] [..192.168.1.100][.3533] -> [...2.228.46.112][...80] + guessed: [....52] [ip4][..tcp] [..192.168.1.100][.3534] -> [...2.228.46.112][...80] [HTTP][Web][Acceptable] + idle: [....52] [ip4][..tcp] [..192.168.1.100][.3534] -> [...2.228.46.112][...80] + idle: [....31] [ip4][..tcp] [..192.168.1.100][.3517] -> [213.248.127.130][.1119] [Starcraft][Game][Fun] + end: [....24] [ip4][..tcp] [..192.168.1.100][.3479] -> [...2.228.46.114][..443] [TLS][Web][Safe] + end: [....22] [ip4][..tcp] [..192.168.1.100][.3480] -> [...2.228.46.114][..443] [TLS][Web][Safe] + end: [....23] [ip4][..tcp] [..192.168.1.100][.3481] -> [...2.228.46.114][..443] [TLS][Web][Safe] + end: [....21] [ip4][..tcp] [..192.168.1.100][.3482] -> [...2.228.46.114][..443] [TLS][Web][Safe] + end: [....18] [ip4][..tcp] [..192.168.1.100][.3489] -> [...2.228.46.104][..443] [TLS][Web][Safe] + end: [....19] [ip4][..tcp] [..192.168.1.100][.3490] -> [...2.228.46.104][..443] [TLS][Web][Safe] + end: [....20] [ip4][..tcp] [..192.168.1.100][.3491] -> [...2.228.46.104][..443] [TLS][Web][Safe] + end: [....17] [ip4][..tcp] [..192.168.1.100][.3492] -> [...2.228.46.104][..443] [TLS][Web][Safe] + idle: [....14] [ip4][..udp] [..192.168.1.100][60026] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + idle: [.....1] [ip4][..tcp] [..192.30.252.91][..443] -> [..192.168.1.100][.3213] + guessed: [....37] [ip4][..udp] [..192.168.1.100][.6113] -> [213.248.127.166][.1119] [Starcraft][Game][Fun] + idle: [....37] [ip4][..udp] [..192.168.1.100][.6113] -> [213.248.127.166][.1119] + guessed: [....36] [ip4][..udp] [..192.168.1.100][.6113] -> [213.248.127.212][.1119] [Starcraft][Game][Fun] + idle: [....36] [ip4][..udp] [..192.168.1.100][.6113] -> [213.248.127.212][.1119] + end: [....29] [ip4][..tcp] [..192.168.1.100][.3515] -> [..80.239.186.26][...80] [HTTP][Web][Acceptable] + end: [....30] [ip4][..tcp] [..192.168.1.100][.3516] -> [..80.239.186.21][...80] [HTTP][Web][Acceptable] + end: [....32] [ip4][..tcp] [..192.168.1.100][.3518] -> [..80.239.186.26][...80] [HTTP][Web][Acceptable] + end: [....33] [ip4][..tcp] [..192.168.1.100][.3519] -> [..80.239.186.21][...80] [HTTP][Web][Acceptable] + end: [....38] [ip4][..tcp] [..192.168.1.100][.3521] -> [..80.239.186.26][...80] [HTTP][Web][Acceptable] + end: [....39] [ip4][..tcp] [..192.168.1.100][.3522] -> [..80.239.186.21][...80] [HTTP][Web][Acceptable] + end: [....40] [ip4][..tcp] [..192.168.1.100][.3523] -> [..80.239.186.26][...80] [HTTP][Web][Acceptable] + end: [....41] [ip4][..tcp] [..192.168.1.100][.3524] -> [..80.239.186.26][...80] [HTTP][Web][Acceptable] + end: [....42] [ip4][..tcp] [..192.168.1.100][.3525] -> [..80.239.186.40][...80] [HTTP][Web][Acceptable] + end: [....43] [ip4][..tcp] [..192.168.1.100][.3526] -> [..80.239.186.40][...80] [HTTP][Web][Acceptable] + guessed: [.....6] [ip4][..udp] [..173.194.40.22][..443] -> [..192.168.1.100][53568] [Google][Web][Acceptable] + idle: [.....6] [ip4][..udp] [..173.194.40.22][..443] -> [..192.168.1.100][53568] + guessed: [....34] [ip4][..udp] [..192.168.1.100][53146] -> [...5.42.180.154][.1119] [Starcraft][Game][Fun] + idle: [....34] [ip4][..udp] [..192.168.1.100][53146] -> [...5.42.180.154][.1119] + guessed: [....25] [ip4][..tcp] [..192.168.1.100][.3486] -> [.199.38.164.156][..443] [TLS][Web][Safe] + end: [....25] [ip4][..tcp] [..192.168.1.100][.3486] -> [.199.38.164.156][..443] + idle: [....12] [ip4][..udp] [..192.168.1.254][38605] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + end: [....15] [ip4][..tcp] [..192.168.1.100][.3508] -> [.87.248.221.254][...80] [HTTP][Download][Acceptable] + RISK: Binary App Transfer, Suspicious DGA Domain name + guessed: [.....3] [ip4][..tcp] [..80.239.186.26][..443] -> [..192.168.1.100][.3476] [TLS][Web][Safe] + end: [.....3] [ip4][..tcp] [..80.239.186.26][..443] -> [..192.168.1.100][.3476] + guessed: [.....5] [ip4][..tcp] [..80.239.186.40][..443] -> [..192.168.1.100][.3478] [TLS][Web][Safe] + end: [.....5] [ip4][..tcp] [..80.239.186.40][..443] -> [..192.168.1.100][.3478] + idle: [.....2] [ip4][..udp] [..192.168.1.100][58818] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + RISK: Suspicious DNS Traffic + idle: [.....4] [ip4][..udp] [..192.168.1.100][58831] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + idle: [.....7] [ip4][..udp] [..192.168.1.100][58844] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + idle: [.....9] [ip4][..udp] [..192.168.1.100][58851] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + end: [....16] [ip4][..tcp] [..192.168.1.100][.3512] -> [..12.129.222.54][...80] [HTTP.WorldOfWarcraft][Game][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/steam.pcap.out b/test/results/flow-info/steam.pcap.out new file mode 100644 index 000000000..4c783fb77 --- /dev/null +++ b/test/results/flow-info/steam.pcap.out @@ -0,0 +1,169 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.13][27018] + detected: [.....1] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.13][27018] [Steam][Game][Fun] + new: [.....2] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.12][27019] + detected: [.....2] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.12][27019] [Steam][Game][Fun] + new: [.....3] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.8][27018] + detected: [.....3] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.8][27018] [Steam][Game][Fun] + new: [.....4] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.6][27017] + detected: [.....4] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.6][27017] [Steam][Game][Fun] + new: [.....5] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.172][27018] + detected: [.....5] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.172][27018] [Steam][Game][Fun] + new: [.....6] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.8][27017] + detected: [.....6] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.8][27017] [Steam][Game][Fun] + new: [.....7] [ip4][..udp] [192.168.188.149][45665] -> [...68.142.91.36][27017] + detected: [.....7] [ip4][..udp] [192.168.188.149][45665] -> [...68.142.91.36][27017] [Steam][Game][Fun] + new: [.....8] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.12][27018] + detected: [.....8] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.12][27018] [Steam][Game][Fun] + new: [.....9] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.7][27018] + detected: [.....9] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.7][27018] [Steam][Game][Fun] + new: [....10] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.171.83][27017] + detected: [....10] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.171.83][27017] [Steam][Game][Fun] + new: [....11] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.8][27019] + detected: [....11] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.8][27019] [Steam][Game][Fun] + new: [....12] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.170][27017] + detected: [....12] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.170][27017] [Steam][Game][Fun] + new: [....13] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.14][27019] + detected: [....13] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.14][27019] [Steam][Game][Fun] + new: [....14] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.187][27018] + detected: [....14] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.187][27018] [Steam][Game][Fun] + new: [....15] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.172][27017] + detected: [....15] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.172][27017] [Steam][Game][Fun] + new: [....16] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.6][27019] + detected: [....16] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.6][27019] [Steam][Game][Fun] + new: [....17] [ip4][..udp] [192.168.188.149][45665] -> [...68.142.91.34][27017] + detected: [....17] [ip4][..udp] [192.168.188.149][45665] -> [...68.142.91.34][27017] [Steam][Game][Fun] + new: [....18] [ip4][..udp] [192.168.188.149][45665] -> [...203.77.185.4][27017] + detected: [....18] [ip4][..udp] [192.168.188.149][45665] -> [...203.77.185.4][27017] [Steam][Game][Fun] + new: [....19] [ip4][..udp] [192.168.188.149][45665] -> [.68.142.116.179][27017] + detected: [....19] [ip4][..udp] [192.168.188.149][45665] -> [.68.142.116.179][27017] [Steam][Game][Fun] + new: [....20] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.188][27017] + detected: [....20] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.188][27017] [Steam][Game][Fun] + new: [....21] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.171.82][27017] + detected: [....21] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.171.82][27017] [Steam][Game][Fun] + new: [....22] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.185][27018] + detected: [....22] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.185][27018] [Steam][Game][Fun] + new: [....23] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.5][27019] + detected: [....23] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.5][27019] [Steam][Game][Fun] + new: [....24] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.13][27017] + detected: [....24] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.13][27017] [Steam][Game][Fun] + new: [....25] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.14][27017] + detected: [....25] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.14][27017] [Steam][Game][Fun] + new: [....26] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.174][27017] + detected: [....26] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.174][27017] [Steam][Game][Fun] + new: [....27] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.171][27017] + detected: [....27] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.171][27017] [Steam][Game][Fun] + new: [....28] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.133.85][27018] + detected: [....28] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.133.85][27018] [Steam][Game][Fun] + new: [....29] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.5][27018] + detected: [....29] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.5][27018] [Steam][Game][Fun] + new: [....30] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.175][27017] + detected: [....30] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.175][27017] [Steam][Game][Fun] + new: [....31] [ip4][..udp] [192.168.188.149][45665] -> [...203.77.185.5][27017] + detected: [....31] [ip4][..udp] [192.168.188.149][45665] -> [...203.77.185.5][27017] [Steam][Game][Fun] + new: [....32] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.15][27018] + detected: [....32] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.15][27018] [Steam][Game][Fun] + new: [....33] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.15][27019] + detected: [....33] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.15][27019] [Steam][Game][Fun] + new: [....34] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.174][27018] + detected: [....34] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.174][27018] [Steam][Game][Fun] + new: [....35] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.133.84][27017] + detected: [....35] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.133.84][27017] [Steam][Game][Fun] + new: [....36] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.12][27017] + detected: [....36] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.12][27017] [Steam][Game][Fun] + new: [....37] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.7][27017] + detected: [....37] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.7][27017] [Steam][Game][Fun] + new: [....38] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.187][27017] + detected: [....38] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.187][27017] [Steam][Game][Fun] + new: [....39] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.5][27017] + detected: [....39] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.5][27017] [Steam][Game][Fun] + new: [....40] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.133.84][27018] + detected: [....40] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.133.84][27018] [Steam][Game][Fun] + new: [....41] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.133.85][27017] + detected: [....41] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.133.85][27017] [Steam][Game][Fun] + new: [....42] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.176][27018] + detected: [....42] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.176][27018] [Steam][Game][Fun] + new: [....43] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.185][27017] + detected: [....43] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.185][27017] [Steam][Game][Fun] + new: [....44] [ip4][..udp] [192.168.188.149][45665] -> [...68.142.91.35][27017] + detected: [....44] [ip4][..udp] [192.168.188.149][45665] -> [...68.142.91.35][27017] [Steam][Game][Fun] + new: [....45] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.13][27019] + detected: [....45] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.13][27019] [Steam][Game][Fun] + new: [....46] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.170][27018] + detected: [....46] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.170][27018] [Steam][Game][Fun] + new: [....47] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.15][27017] + detected: [....47] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.15][27017] [Steam][Game][Fun] + new: [....48] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.175][27018] + detected: [....48] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.175][27018] [Steam][Game][Fun] + new: [....49] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.7][27019] + detected: [....49] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.7][27019] [Steam][Game][Fun] + new: [....50] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.188][27018] + detected: [....50] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.188][27018] [Steam][Game][Fun] + new: [....51] [ip4][..udp] [192.168.188.149][45665] -> [.68.142.116.178][27017] + detected: [....51] [ip4][..udp] [192.168.188.149][45665] -> [.68.142.116.178][27017] [Steam][Game][Fun] + new: [....52] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.6][27018] + detected: [....52] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.6][27018] [Steam][Game][Fun] + new: [....53] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.14][27018] + detected: [....53] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.14][27018] [Steam][Game][Fun] + new: [....54] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.171][27018] + detected: [....54] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.171][27018] [Steam][Game][Fun] + new: [....55] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.176][27017] + detected: [....55] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.176][27017] [Steam][Game][Fun] + idle: [....37] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.7][27017] [Steam][Game][Fun] + idle: [.....6] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.8][27017] [Steam][Game][Fun] + idle: [....39] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.5][27017] [Steam][Game][Fun] + idle: [.....4] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.6][27017] [Steam][Game][Fun] + idle: [....52] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.6][27018] [Steam][Game][Fun] + idle: [....29] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.5][27018] [Steam][Game][Fun] + idle: [.....9] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.7][27018] [Steam][Game][Fun] + idle: [.....3] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.8][27018] [Steam][Game][Fun] + idle: [....49] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.7][27019] [Steam][Game][Fun] + idle: [....23] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.5][27019] [Steam][Game][Fun] + idle: [....16] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.6][27019] [Steam][Game][Fun] + idle: [....11] [ip4][..udp] [192.168.188.149][45665] -> [...81.171.115.8][27019] [Steam][Game][Fun] + idle: [....27] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.171][27017] [Steam][Game][Fun] + idle: [....15] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.172][27017] [Steam][Game][Fun] + idle: [....12] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.170][27017] [Steam][Game][Fun] + idle: [....54] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.171][27018] [Steam][Game][Fun] + idle: [....46] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.170][27018] [Steam][Game][Fun] + idle: [.....5] [ip4][..udp] [192.168.188.149][45665] -> [..69.28.145.172][27018] [Steam][Game][Fun] + idle: [....55] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.176][27017] [Steam][Game][Fun] + idle: [....43] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.185][27017] [Steam][Game][Fun] + idle: [....38] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.187][27017] [Steam][Game][Fun] + idle: [....30] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.175][27017] [Steam][Game][Fun] + idle: [....26] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.174][27017] [Steam][Game][Fun] + idle: [....20] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.188][27017] [Steam][Game][Fun] + idle: [....50] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.188][27018] [Steam][Game][Fun] + idle: [....48] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.175][27018] [Steam][Game][Fun] + idle: [....42] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.176][27018] [Steam][Game][Fun] + idle: [....34] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.174][27018] [Steam][Game][Fun] + idle: [....22] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.185][27018] [Steam][Game][Fun] + idle: [....14] [ip4][..udp] [192.168.188.149][45665] -> [..72.165.61.187][27018] [Steam][Game][Fun] + idle: [....31] [ip4][..udp] [192.168.188.149][45665] -> [...203.77.185.5][27017] [Steam][Game][Fun] + idle: [....18] [ip4][..udp] [192.168.188.149][45665] -> [...203.77.185.4][27017] [Steam][Game][Fun] + idle: [....44] [ip4][..udp] [192.168.188.149][45665] -> [...68.142.91.35][27017] [Steam][Game][Fun] + idle: [....51] [ip4][..udp] [192.168.188.149][45665] -> [.68.142.116.178][27017] [Steam][Game][Fun] + idle: [....19] [ip4][..udp] [192.168.188.149][45665] -> [.68.142.116.179][27017] [Steam][Game][Fun] + idle: [....17] [ip4][..udp] [192.168.188.149][45665] -> [...68.142.91.34][27017] [Steam][Game][Fun] + idle: [.....7] [ip4][..udp] [192.168.188.149][45665] -> [...68.142.91.36][27017] [Steam][Game][Fun] + idle: [....41] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.133.85][27017] [Steam][Game][Fun] + idle: [....35] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.133.84][27017] [Steam][Game][Fun] + idle: [....21] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.171.82][27017] [Steam][Game][Fun] + idle: [....10] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.171.83][27017] [Steam][Game][Fun] + idle: [....40] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.133.84][27018] [Steam][Game][Fun] + idle: [....28] [ip4][..udp] [192.168.188.149][45665] -> [.208.111.133.85][27018] [Steam][Game][Fun] + idle: [....47] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.15][27017] [Steam][Game][Fun] + idle: [....25] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.14][27017] [Steam][Game][Fun] + idle: [....36] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.12][27017] [Steam][Game][Fun] + idle: [....24] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.13][27017] [Steam][Game][Fun] + idle: [....53] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.14][27018] [Steam][Game][Fun] + idle: [....32] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.15][27018] [Steam][Game][Fun] + idle: [.....8] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.12][27018] [Steam][Game][Fun] + idle: [.....1] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.13][27018] [Steam][Game][Fun] + idle: [....33] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.15][27019] [Steam][Game][Fun] + idle: [....45] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.13][27019] [Steam][Game][Fun] + idle: [....13] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.14][27019] [Steam][Game][Fun] + idle: [.....2] [ip4][..udp] [192.168.188.149][45665] -> [..146.66.152.12][27019] [Steam][Game][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/steam_datagram_relay_ping.pcapng.out b/test/results/flow-info/steam_datagram_relay_ping.pcapng.out new file mode 100644 index 000000000..e56f6abd6 --- /dev/null +++ b/test/results/flow-info/steam_datagram_relay_ping.pcapng.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][52157] -> [..139.45.193.10][27018] + detected: [.....1] [ip4][..udp] [..192.168.2.100][52157] -> [..139.45.193.10][27018] [Steam][Game][Fun] + idle: [.....1] [ip4][..udp] [..192.168.2.100][52157] -> [..139.45.193.10][27018] [Steam][Game][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/stun.pcap.out b/test/results/flow-info/stun.pcap.out new file mode 100644 index 000000000..30e0433fa --- /dev/null +++ b/test/results/flow-info/stun.pcap.out @@ -0,0 +1,48 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [3516:bf0b:fc53:75e7:70af:f67f:8e49:f603][56880] -> [....2a38:e156:8167:a333:face:b00c::24d9][.3478] + detected: [.....1] [ip6][..udp] [3516:bf0b:fc53:75e7:70af:f67f:8e49:f603][56880] -> [....2a38:e156:8167:a333:face:b00c::24d9][.3478] [STUN][Network][Acceptable] + update: [.....1] [ip6][..udp] [3516:bf0b:fc53:75e7:70af:f67f:8e49:f603][56880] -> [....2a38:e156:8167:a333:face:b00c::24d9][.3478] [STUN][Network][Acceptable] + update: [.....1] [ip6][..udp] [3516:bf0b:fc53:75e7:70af:f67f:8e49:f603][56880] -> [....2a38:e156:8167:a333:face:b00c::24d9][.3478] [STUN][Network][Acceptable] + analyse: [.....1] [ip6][..udp] [3516:bf0b:fc53:75e7:70af:f67f:8e49:f603][56880] -> [....2a38:e156:8167:a333:face:b00c::24d9][.3478] [STUN][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.003| 10.359| 9.105| 2.980] + [IAT(c->s)...: 0.003| 10.359| 9.409| 2.515][IAT(s->c)...: 0.003| 10.359| 8.821| 3.333] + [PKTLEN(c->s): 82.000| 82.000| 82.000| 0.000][PKTLEN(s->c): 106.000| 106.000| 106.000| 0.000] + [BINS(c->s)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....1] [ip6][..udp] [3516:bf0b:fc53:75e7:70af:f67f:8e49:f603][56880] -> [....2a38:e156:8167:a333:face:b00c::24d9][.3478] [STUN][Network][Acceptable] + DAEMON-EVENT: [Processed: 42 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 3] + new: [.....2] [ip4][..udp] [.192.168.12.169][38123] -> [....31.13.86.54][40003] + detected: [.....2] [ip4][..udp] [.192.168.12.169][38123] -> [....31.13.86.54][40003] [STUN.FacebookVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [.....2] [ip4][..udp] [.192.168.12.169][38123] -> [....31.13.86.54][40003] [STUN.FacebookVoip][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 6.004| 0.447| 1.463] + [IAT(c->s)...: 0.000| 6.004| 0.427| 1.443][IAT(s->c)...: 0.000| 5.997| 0.468| 1.483] + [PKTLEN(c->s): 70.000| 182.000| 164.100| 28.400][PKTLEN(s->c): 86.000| 174.000| 141.700| 32.000] + [BINS(c->s)..: 1,0,0,4,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,3,1,6,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....1] [ip6][..udp] [3516:bf0b:fc53:75e7:70af:f67f:8e49:f603][56880] -> [....2a38:e156:8167:a333:face:b00c::24d9][.3478] [STUN][Network][Acceptable] + DAEMON-EVENT: [Processed: 117 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 3] + new: [.....3] [ip4][..tcp] [...87.47.100.17][.3478] -> [....54.1.57.155][37257] + detected: [.....3] [ip4][..tcp] [...87.47.100.17][.3478] -> [....54.1.57.155][37257] [STUN][Network][Acceptable] + idle: [.....2] [ip4][..udp] [.192.168.12.169][38123] -> [....31.13.86.54][40003] [STUN.FacebookVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: [Processed: 137 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 3] + new: [.....4] [ip4][..udp] [.192.168.12.169][49153] -> [..142.250.82.99][.3478] + detected: [.....4] [ip4][..udp] [.192.168.12.169][49153] -> [..142.250.82.99][.3478] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + analyse: [.....4] [ip4][..udp] [.192.168.12.169][49153] -> [..142.250.82.99][.3478] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.836| 0.131| 0.227] + [IAT(c->s)...: 0.009| 0.836| 0.131| 0.247][IAT(s->c)...: 0.000| 0.625| 0.132| 0.204] + [PKTLEN(c->s): 107.000| 588.000| 161.600| 109.700][PKTLEN(s->c): 76.000|1240.000| 229.100| 297.300] + [BINS(c->s)..: 0,0,9,5,2,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,2,9,2,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0] + idle: [.....4] [ip4][..udp] [.192.168.12.169][49153] -> [..142.250.82.99][.3478] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + idle: [.....3] [ip4][..tcp] [...87.47.100.17][.3478] -> [....54.1.57.155][37257] [STUN][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/stun_signal.pcapng.out b/test/results/flow-info/stun_signal.pcapng.out new file mode 100644 index 000000000..1ac98e2a4 --- /dev/null +++ b/test/results/flow-info/stun_signal.pcapng.out @@ -0,0 +1,145 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.192.168.12.169][39518] -> [172.253.121.127][19302] + new: [.....2] [ip4][..udp] [.192.168.12.169][47204] -> [172.253.121.127][19302] + new: [.....3] [ip4][..udp] [.192.168.12.169][47204] -> [.35.158.183.167][..443] + new: [.....4] [ip4][..udp] [.192.168.12.169][47204] -> [.35.158.183.167][.3478] + new: [.....5] [ip4][..udp] [.192.168.12.169][39518] -> [.35.158.183.167][.3478] + new: [.....6] [ip4][..udp] [.192.168.12.169][39518] -> [.35.158.183.167][..443] + new: [.....7] [ip4][.icmp] [.35.158.183.167] -> [.192.168.12.169] + detected: [.....7] [ip4][.icmp] [.35.158.183.167] -> [.192.168.12.169] [ICMP][Network][Acceptable] + detected: [.....5] [ip4][..udp] [.192.168.12.169][39518] -> [.35.158.183.167][.3478] [STUN.SignalVoip][VoIP][Acceptable] + detected: [.....4] [ip4][..udp] [.192.168.12.169][47204] -> [.35.158.183.167][.3478] [STUN.SignalVoip][VoIP][Acceptable] + detected: [.....1] [ip4][..udp] [.192.168.12.169][39518] -> [172.253.121.127][19302] [STUN.SignalVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + detected: [.....6] [ip4][..udp] [.192.168.12.169][39518] -> [.35.158.183.167][..443] [STUN.SignalVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + detected: [.....3] [ip4][..udp] [.192.168.12.169][47204] -> [.35.158.183.167][..443] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....8] [ip4][..udp] [.192.168.12.169][43068] -> [.35.158.183.167][.3478] + detected: [.....8] [ip4][..udp] [.192.168.12.169][43068] -> [.35.158.183.167][.3478] [STUN.SignalVoip][VoIP][Acceptable] + new: [.....9] [ip4][..udp] [.192.168.12.169][43068] -> [.35.158.183.167][..443] + detected: [.....9] [ip4][..udp] [.192.168.12.169][43068] -> [.35.158.183.167][..443] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + new: [....10] [ip4][..udp] [.192.168.12.169][43068] -> [172.253.121.127][19302] + new: [....11] [ip4][..udp] [.192.168.12.169][39950] -> [172.253.121.127][19302] + new: [....12] [ip4][..udp] [.192.168.12.169][39950] -> [.35.158.183.167][..443] + detected: [....12] [ip4][..udp] [.192.168.12.169][39950] -> [.35.158.183.167][..443] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + new: [....13] [ip4][..udp] [.192.168.12.169][39950] -> [.35.158.183.167][.3478] + detected: [....13] [ip4][..udp] [.192.168.12.169][39950] -> [.35.158.183.167][.3478] [STUN.SignalVoip][VoIP][Acceptable] + new: [....14] [ip4][..udp] [.192.168.12.169][43068] -> [.18.195.131.143][61156] + detected: [....14] [ip4][..udp] [.192.168.12.169][43068] -> [.18.195.131.143][61156] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [....14] [ip4][..udp] [.192.168.12.169][43068] -> [.18.195.131.143][61156] [STUN.AmazonAWS][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.679| 0.149| 0.201] + [IAT(c->s)...: 0.000| 0.601| 0.154| 0.181][IAT(s->c)...: 0.000| 0.679| 0.145| 0.217] + [PKTLEN(c->s): 70.000| 146.000| 106.500| 27.000][PKTLEN(s->c): 70.000| 138.000| 105.200| 22.700] + [BINS(c->s)..: 4,3,4,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,4,5,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....7] [ip4][.icmp] [.35.158.183.167] -> [.192.168.12.169] [ICMP][Network][Acceptable] + detected: [....10] [ip4][..udp] [.192.168.12.169][43068] -> [172.253.121.127][19302] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + detected: [....11] [ip4][..udp] [.192.168.12.169][39950] -> [172.253.121.127][19302] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [.....7] [ip4][.icmp] [.35.158.183.167] -> [.192.168.12.169] [ICMP][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 17.079| 1.597| 3.547] + [IAT(c->s)...: 0.000| 17.079| 1.540| 3.605][IAT(s->c)...: 0.000| 4.842| 2.421| 2.421] + [PKTLEN(c->s): 90.000| 98.000| 92.700| 3.800][PKTLEN(s->c): 138.000| 138.000| 138.000| 0.000] + [BINS(c->s)..: 0,20,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....3] [ip4][..udp] [.192.168.12.169][47204] -> [.35.158.183.167][..443] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + update: [.....2] [ip4][..udp] [.192.168.12.169][47204] -> [172.253.121.127][19302] + update: [.....6] [ip4][..udp] [.192.168.12.169][39518] -> [.35.158.183.167][..443] [STUN.SignalVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + update: [.....1] [ip4][..udp] [.192.168.12.169][39518] -> [172.253.121.127][19302] [STUN.SignalVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + update: [.....4] [ip4][..udp] [.192.168.12.169][47204] -> [.35.158.183.167][.3478] [STUN.SignalVoip][VoIP][Acceptable] + update: [.....5] [ip4][..udp] [.192.168.12.169][39518] -> [.35.158.183.167][.3478] [STUN.SignalVoip][VoIP][Acceptable] + new: [....15] [ip4][..udp] [.192.168.12.169][47767] -> [172.253.121.127][19302] + detected: [....15] [ip4][..udp] [.192.168.12.169][47767] -> [172.253.121.127][19302] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + new: [....16] [ip4][..udp] [.192.168.12.169][37970] -> [172.253.121.127][19302] + detected: [....16] [ip4][..udp] [.192.168.12.169][37970] -> [172.253.121.127][19302] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + new: [....17] [ip4][..udp] [.192.168.12.169][47767] -> [.35.158.122.211][..443] + new: [....18] [ip4][..udp] [.192.168.12.169][37970] -> [.35.158.122.211][..443] + new: [....19] [ip4][..udp] [.192.168.12.169][47767] -> [.35.158.122.211][.3478] + new: [....20] [ip4][..udp] [.192.168.12.169][37970] -> [.35.158.122.211][.3478] + new: [....21] [ip4][.icmp] [.35.158.122.211] -> [.192.168.12.169] + detected: [....21] [ip4][.icmp] [.35.158.122.211] -> [.192.168.12.169] [ICMP][Network][Acceptable] + detected: [....19] [ip4][..udp] [.192.168.12.169][47767] -> [.35.158.122.211][.3478] [STUN.SignalVoip][VoIP][Acceptable] + detected: [....20] [ip4][..udp] [.192.168.12.169][37970] -> [.35.158.122.211][.3478] [STUN.SignalVoip][VoIP][Acceptable] + detected: [....17] [ip4][..udp] [.192.168.12.169][47767] -> [.35.158.122.211][..443] [STUN.SignalVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + detected: [....18] [ip4][..udp] [.192.168.12.169][37970] -> [.35.158.122.211][..443] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + new: [....22] [ip4][..udp] [.192.168.12.169][47767] -> [.18.195.131.143][54054] + detected: [....22] [ip4][..udp] [.192.168.12.169][47767] -> [.18.195.131.143][54054] [STUN.SignalVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + new: [....23] [ip4][..udp] [.192.168.12.169][47767] -> [.18.195.131.143][61498] + detected: [....23] [ip4][..udp] [.192.168.12.169][47767] -> [.18.195.131.143][61498] [STUN.SignalVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [....23] [ip4][..udp] [.192.168.12.169][47767] -> [.18.195.131.143][61498] [STUN.SignalVoip][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.665| 0.153| 0.189] + [IAT(c->s)...: 0.000| 0.665| 0.158| 0.186][IAT(s->c)...: 0.000| 0.631| 0.148| 0.192] + [PKTLEN(c->s): 70.000| 146.000| 108.800| 25.300][PKTLEN(s->c): 70.000| 138.000| 107.800| 23.900] + [BINS(c->s)..: 3,3,5,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,3,5,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [....13] [ip4][..udp] [.192.168.12.169][39950] -> [.35.158.183.167][.3478] [STUN.SignalVoip][VoIP][Acceptable] + update: [.....9] [ip4][..udp] [.192.168.12.169][43068] -> [.35.158.183.167][..443] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + update: [....10] [ip4][..udp] [.192.168.12.169][43068] -> [172.253.121.127][19302] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + update: [....14] [ip4][..udp] [.192.168.12.169][43068] -> [.18.195.131.143][61156] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + update: [....12] [ip4][..udp] [.192.168.12.169][39950] -> [.35.158.183.167][..443] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + update: [.....8] [ip4][..udp] [.192.168.12.169][43068] -> [.35.158.183.167][.3478] [STUN.SignalVoip][VoIP][Acceptable] + update: [....11] [ip4][..udp] [.192.168.12.169][39950] -> [172.253.121.127][19302] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + update: [.....7] [ip4][.icmp] [.35.158.183.167] -> [.192.168.12.169] [ICMP][Network][Acceptable] + idle: [....13] [ip4][..udp] [.192.168.12.169][39950] -> [.35.158.183.167][.3478] [STUN.SignalVoip][VoIP][Acceptable] + idle: [....20] [ip4][..udp] [.192.168.12.169][37970] -> [.35.158.122.211][.3478] [STUN.SignalVoip][VoIP][Acceptable] + idle: [.....9] [ip4][..udp] [.192.168.12.169][43068] -> [.35.158.183.167][..443] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....3] [ip4][..udp] [.192.168.12.169][47204] -> [.35.158.183.167][..443] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....22] [ip4][..udp] [.192.168.12.169][47767] -> [.18.195.131.143][54054] [STUN.SignalVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....10] [ip4][..udp] [.192.168.12.169][43068] -> [172.253.121.127][19302] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + guessed: [.....2] [ip4][..udp] [.192.168.12.169][47204] -> [172.253.121.127][19302] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + idle: [.....2] [ip4][..udp] [.192.168.12.169][47204] -> [172.253.121.127][19302] + idle: [....14] [ip4][..udp] [.192.168.12.169][43068] -> [.18.195.131.143][61156] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....6] [ip4][..udp] [.192.168.12.169][39518] -> [.35.158.183.167][..443] [STUN.SignalVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....17] [ip4][..udp] [.192.168.12.169][47767] -> [.35.158.122.211][..443] [STUN.SignalVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....1] [ip4][..udp] [.192.168.12.169][39518] -> [172.253.121.127][19302] [STUN.SignalVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....15] [ip4][..udp] [.192.168.12.169][47767] -> [172.253.121.127][19302] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....12] [ip4][..udp] [.192.168.12.169][39950] -> [.35.158.183.167][..443] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....8] [ip4][..udp] [.192.168.12.169][43068] -> [.35.158.183.167][.3478] [STUN.SignalVoip][VoIP][Acceptable] + idle: [.....4] [ip4][..udp] [.192.168.12.169][47204] -> [.35.158.183.167][.3478] [STUN.SignalVoip][VoIP][Acceptable] + idle: [....18] [ip4][..udp] [.192.168.12.169][37970] -> [.35.158.122.211][..443] [STUN.AmazonAWS][Cloud][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....11] [ip4][..udp] [.192.168.12.169][39950] -> [172.253.121.127][19302] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....16] [ip4][..udp] [.192.168.12.169][37970] -> [172.253.121.127][19302] [STUN.GoogleHangoutDuo][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....23] [ip4][..udp] [.192.168.12.169][47767] -> [.18.195.131.143][61498] [STUN.SignalVoip][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....21] [ip4][.icmp] [.35.158.122.211] -> [.192.168.12.169] [ICMP][Network][Acceptable] + idle: [.....7] [ip4][.icmp] [.35.158.183.167] -> [.192.168.12.169] [ICMP][Network][Acceptable] + idle: [.....5] [ip4][..udp] [.192.168.12.169][39518] -> [.35.158.183.167][.3478] [STUN.SignalVoip][VoIP][Acceptable] + idle: [....19] [ip4][..udp] [.192.168.12.169][47767] -> [.35.158.122.211][.3478] [STUN.SignalVoip][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/syncthing.pcap.out b/test/results/flow-info/syncthing.pcap.out new file mode 100644 index 000000000..8b5b7a371 --- /dev/null +++ b/test/results/flow-info/syncthing.pcap.out @@ -0,0 +1,27 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][42370] -> [.............................ff12::8384][21027] + detected: [.....1] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][42370] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + new: [.....2] [ip4][..udp] [..192.168.2.100][33927] -> [..192.168.2.255][21027] + detected: [.....2] [ip4][..udp] [..192.168.2.100][33927] -> [..192.168.2.255][21027] [Syncthing][Download][Acceptable] + new: [.....3] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][47077] -> [.............................ff12::8384][21027] + detected: [.....3] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][47077] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + update: [.....1] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][42370] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.2.100][33927] -> [..192.168.2.255][21027] [Syncthing][Download][Acceptable] + update: [.....3] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][47077] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + update: [.....1] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][42370] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.2.100][33927] -> [..192.168.2.255][21027] [Syncthing][Download][Acceptable] + update: [.....3] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][47077] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + update: [.....1] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][42370] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.2.100][33927] -> [..192.168.2.255][21027] [Syncthing][Download][Acceptable] + idle: [.....1] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][42370] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + update: [.....3] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][47077] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + update: [.....3] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][47077] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + update: [.....3] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][47077] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + update: [.....3] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][47077] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + new: [.....4] [ip4][..udp] [..192.168.2.100][54977] -> [..192.168.2.255][21027] + detected: [.....4] [ip4][..udp] [..192.168.2.100][54977] -> [..192.168.2.255][21027] [Syncthing][Download][Acceptable] + idle: [.....4] [ip4][..udp] [..192.168.2.100][54977] -> [..192.168.2.255][21027] [Syncthing][Download][Acceptable] + idle: [.....3] [ip6][..udp] [..............fe80::6238:e0ff:fec5:35a0][47077] -> [.............................ff12::8384][21027] [Syncthing][Download][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/synscan.pcap.out b/test/results/flow-info/synscan.pcap.out new file mode 100644 index 000000000..c457eea38 --- /dev/null +++ b/test/results/flow-info/synscan.pcap.out @@ -0,0 +1,5998 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..443] + new: [.....2] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..143] + new: [.....3] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3306] + new: [.....4] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..199] + new: [.....5] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..111] + new: [.....6] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1025] + new: [.....7] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..995] + new: [.....8] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..587] + new: [.....9] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...53] + new: [....10] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5900] + new: [....11] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...21] + new: [....12] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..113] + new: [....13] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...80] + new: [....14] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..139] + new: [....15] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3389] + new: [....16] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...23] + new: [....17] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...23] + new: [....18] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3389] + new: [....19] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..139] + new: [....20] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...21] + new: [....21] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5900] + new: [....22] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..587] + new: [....23] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..995] + new: [....24] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1025] + new: [....25] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..111] + new: [....26] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..199] + new: [....27] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3306] + new: [....28] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..143] + new: [....29] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..443] + new: [....30] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1723] + new: [....31] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..993] + new: [....32] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..110] + new: [....33] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8080] + new: [....34] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1720] + new: [....35] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...25] + new: [....36] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..445] + new: [....37] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..256] + new: [....38] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..554] + new: [....39] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..135] + new: [....40] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...22] + new: [....41] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8888] + new: [....42] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..548] + new: [....43] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1056] + new: [....44] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10629] + new: [....45] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2605] + new: [....46] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10621] + new: [....47] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..990] + new: [....48] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5414] + new: [....49] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2222] + new: [....50] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6000] + new: [....51] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1687] + new: [....52] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1233] + new: [....53] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2030] + new: [....54] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....6] + new: [....55] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1417] + new: [....56] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8222] + new: [....57] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..683] + new: [....58] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3050] + new: [....59] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..548] + new: [....60] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8888] + new: [....61] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..135] + new: [....62] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..554] + new: [....63] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..256] + new: [....64] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..445] + new: [....65] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1720] + new: [....66] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8080] + new: [....67] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..110] + new: [....68] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..993] + new: [....69] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1723] + new: [....70] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3050] + new: [....71] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..683] + new: [....72] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8222] + new: [....73] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1417] + new: [....74] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....6] + new: [....75] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2030] + new: [....76] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1233] + new: [....77] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1687] + new: [....78] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6000] + new: [....79] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2222] + new: [....80] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5414] + new: [....81] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..990] + new: [....82] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10621] + new: [....83] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2605] + new: [....84] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10629] + new: [....85] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1056] + new: [....86] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2038] + new: [....87] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][14238] + new: [....88] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..514] + new: [....89] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3880] + new: [....90] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][17877] + new: [....91] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7777] + new: [....92] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4848] + new: [....93] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32778] + new: [....94] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16080] + new: [....95] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1594] + new: [....96] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][65000] + new: [....97] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1075] + new: [....98] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1300] + new: [....99] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2701] + new: [...100] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..843] + new: [...101] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2005] + new: [...102] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9200] + new: [...103] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5903] + new: [...104] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1067] + new: [...105] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4003] + new: [...106] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][33899] + new: [...107] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7676] + new: [...108] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][14442] + new: [...109] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][31337] + new: [...110] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1247] + new: [...111] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1311] + new: [...112] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9917] + new: [...113] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][65000] + new: [...114] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1594] + new: [...115] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16080] + new: [...116] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32778] + new: [...117] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4848] + new: [...118] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7777] + new: [...119] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][17877] + new: [...120] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3880] + new: [...121] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..514] + new: [...122] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][14238] + new: [...123] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2038] + new: [...124] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8291] + new: [...125] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3826] + new: [...126] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3077] + new: [...127] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1187] + new: [...128] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7200] + new: [...129] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5822] + new: [...130] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1024] + new: [...131] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10626] + new: [...132] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...32] + new: [...133] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15004] + new: [...134] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][52848] + new: [...135] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...24] + new: [...136] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5101] + new: [...137] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1296] + new: [...138] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9102] + new: [...139] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9917] + new: [...140] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1311] + new: [...141] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1247] + new: [...142] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][14442] + new: [...143] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7676] + new: [...144] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][33899] + new: [...145] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4003] + new: [...146] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1067] + new: [...147] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5903] + new: [...148] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9200] + new: [...149] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2005] + new: [...150] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..843] + new: [...151] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2701] + new: [...152] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1300] + new: [...153] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1075] + new: [...154] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9102] + new: [...155] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1296] + new: [...156] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5101] + new: [...157] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...24] + new: [...158] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][52848] + new: [...159] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15004] + new: [...160] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...32] + new: [...161] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10626] + new: [...162] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1024] + new: [...163] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5822] + new: [...164] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7200] + new: [...165] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1187] + new: [...166] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3077] + new: [...167] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3826] + new: [...168] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8291] + new: [...169] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5959] + new: [...170] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..425] + new: [...171] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9500] + new: [...172] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][14000] + new: [...173] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15660] + new: [...174] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][13456] + new: [...175] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1073] + new: [...176] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2106] + new: [...177] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][61532] + new: [...178] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..497] + new: [...179] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2869] + new: [...180] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6669] + new: [...181] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1433] + new: [...182] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4000] + new: [...183] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1043] + new: [...184] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9575] + new: [...185] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32768] + new: [...186] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1641] + new: [...187] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5825] + new: [...188] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9898] + new: [...189] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27355] + new: [...190] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1583] + new: [...191] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6580] + new: [...192] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3001] + new: [...193] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2190] + new: [...194] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49155] + new: [...195] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2869] + new: [...196] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..497] + new: [...197] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][61532] + new: [...198] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2106] + new: [...199] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1073] + new: [...200] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][13456] + new: [...201] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15660] + new: [...202] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][14000] + new: [...203] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9500] + new: [...204] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..425] + new: [...205] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5959] + new: [...206] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7496] + new: [...207] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1071] + new: [...208] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][30718] + new: [...209] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..808] + new: [...210] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6543] + new: [...211] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3071] + new: [...212] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5033] + new: [...213] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1095] + new: [...214] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1064] + new: [...215] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1111] + new: [...216] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8649] + new: [...217] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2099] + new: [...218] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..765] + new: [...219] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9010] + new: [...220] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9071] + new: [...221] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49155] + new: [...222] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2190] + new: [...223] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3001] + new: [...224] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6580] + new: [...225] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1583] + new: [...226] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27355] + new: [...227] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9898] + new: [...228] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5825] + new: [...229] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1641] + new: [...230] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32768] + new: [...231] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9575] + new: [...232] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1043] + new: [...233] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4000] + new: [...234] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1433] + new: [...235] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6669] + new: [...236] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9071] + new: [...237] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9010] + new: [...238] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..765] + new: [...239] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2099] + new: [...240] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8649] + new: [...241] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1111] + new: [...242] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1064] + new: [...243] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1095] + new: [...244] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5033] + new: [...245] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3071] + new: [...246] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6543] + new: [...247] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..808] + new: [...248] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][30718] + new: [...249] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1071] + new: [...250] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7496] + new: [...251] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][44176] + new: [...252] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1183] + new: [...253] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49999] + new: [...254] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8300] + new: [...255] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][11967] + new: [...256] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3945] + new: [...257] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5431] + new: [...258] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8045] + new: [...259] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6788] + new: [...260] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5190] + new: [...261] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1084] + new: [...262] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6839] + new: [...263] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][40911] + new: [...264] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9666] + new: [...265] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1123] + new: [...266] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6389] + new: [...267] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2525] + new: [...268] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7000] + new: [...269] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1840] + new: [...270] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..280] + new: [...271] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1131] + new: [...272] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10002] + new: [...273] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3017] + new: [...274] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..700] + new: [...275] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5500] + new: [...276] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32781] + new: [...277] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1084] + new: [...278] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5190] + new: [...279] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6788] + new: [...280] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8045] + new: [...281] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5431] + new: [...282] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3945] + new: [...283] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][11967] + new: [...284] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8300] + new: [...285] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49999] + new: [...286] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1183] + new: [...287] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][44176] + new: [...288] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5214] + new: [...289] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...17] + new: [...290] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6699] + new: [...291] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3814] + new: [...292] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][24444] + new: [...293] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...26] + new: [...294] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3369] + new: [...295] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2382] + new: [...296] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..666] + new: [...297] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1244] + new: [...298] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3052] + new: [...299] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][62078] + new: [...300] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3918] + new: [...301] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..801] + new: [...302] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19101] + new: [...303] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32781] + new: [...304] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5500] + new: [...305] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..700] + new: [...306] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3017] + new: [...307] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10002] + new: [...308] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1131] + new: [...309] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..280] + new: [...310] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1840] + new: [...311] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7000] + new: [...312] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2525] + new: [...313] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6389] + new: [...314] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1123] + new: [...315] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9666] + new: [...316] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][40911] + new: [...317] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6839] + new: [...318] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19101] + new: [...319] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..801] + new: [...320] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3918] + new: [...321] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][62078] + new: [...322] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3052] + new: [...323] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1244] + new: [...324] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..666] + new: [...325] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2382] + new: [...326] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3369] + new: [...327] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...26] + new: [...328] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][24444] + new: [...329] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3814] + new: [...330] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6699] + new: [...331] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...17] + new: [...332] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5214] + new: [...333] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4899] + new: [...334] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][52869] + new: [...335] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4006] + new: [...336] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3493] + new: [...337] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3737] + new: [...338] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5221] + new: [...339] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5080] + new: [...340] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2020] + new: [...341] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][48080] + new: [...342] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20222] + new: [...343] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5963] + new: [...344] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1524] + new: [...345] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1154] + new: [...346] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8086] + new: [...347] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1047] + new: [...348] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1060] + new: [...349] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2522] + new: [...350] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2046] + new: [...351] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3476] + new: [...352] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2811] + new: [...353] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4129] + new: [...354] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16001] + new: [...355] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2001] + new: [...356] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5631] + new: [...357] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3827] + new: [...358] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3809] + new: [...359] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5963] + new: [...360] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20222] + new: [...361] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][48080] + new: [...362] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2020] + new: [...363] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5080] + new: [...364] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5221] + new: [...365] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3737] + new: [...366] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3493] + new: [...367] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4006] + new: [...368] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][52869] + new: [...369] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4899] + new: [...370] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][44501] + new: [...371] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....9] + new: [...372] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1328] + new: [...373] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1166] + new: [...374] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4005] + new: [...375] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5800] + new: [...376] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1040] + new: [...377] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...99] + new: [...378] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5440] + new: [...379] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27356] + new: [...380] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4111] + new: [...381] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19780] + new: [...382] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7800] + new: [...383] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1087] + new: [...384] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1666] + new: [...385] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3809] + new: [...386] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3827] + new: [...387] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5631] + new: [...388] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2001] + new: [...389] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16001] + new: [...390] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4129] + new: [...391] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2811] + new: [...392] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3476] + new: [...393] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2046] + new: [...394] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2522] + new: [...395] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1060] + new: [...396] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1047] + new: [...397] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8086] + new: [...398] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1154] + new: [...399] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1524] + new: [...400] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1666] + new: [...401] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1087] + new: [...402] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7800] + new: [...403] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19780] + new: [...404] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4111] + new: [...405] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27356] + new: [...406] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5440] + new: [...407] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...99] + new: [...408] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1040] + new: [...409] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5800] + new: [...410] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4005] + new: [...411] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1166] + new: [...412] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1328] + new: [...413] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....9] + new: [...414] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][44501] + new: [...415] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2968] + new: [...416] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2909] + new: [...417] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2393] + new: [...418] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1070] + new: [...419] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..254] + new: [...420] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3784] + new: [...421] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10009] + new: [...422] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1097] + new: [...423] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9593] + new: [...424] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1151] + new: [...425] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4224] + new: [...426] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49176] + new: [...427] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8000] + new: [...428] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1027] + new: [...429] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...30] + new: [...430] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5811] + new: [...431] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2260] + new: [...432] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1461] + new: [...433] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3000] + new: [...434] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][60443] + new: [...435] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8400] + new: [...436] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32785] + new: [...437] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9110] + new: [...438] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5200] + new: [...439] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1048] + new: [...440] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1688] + new: [...441] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4224] + new: [...442] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1151] + new: [...443] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9593] + new: [...444] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1097] + new: [...445] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10009] + new: [...446] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3784] + new: [...447] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..254] + new: [...448] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1070] + new: [...449] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2393] + new: [...450] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2909] + new: [...451] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2968] + new: [...452] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8651] + new: [...453] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1805] + new: [...454] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][25734] + new: [...455] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15742] + new: [...456] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..912] + new: [...457] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..726] + new: [...458] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7741] + new: [...459] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4662] + new: [...460] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2800] + new: [...461] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6346] + new: [...462] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][57797] + new: [...463] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4126] + new: [...464] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9415] + new: [...465] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2161] + new: [...466] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...82] + new: [...467] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1688] + new: [...468] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1048] + new: [...469] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5200] + new: [...470] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9110] + new: [...471] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32785] + new: [...472] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8400] + new: [...473] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][60443] + new: [...474] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3000] + new: [...475] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1461] + new: [...476] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2260] + new: [...477] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5811] + new: [...478] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...30] + new: [...479] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1027] + new: [...480] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8000] + new: [...481] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49176] + new: [...482] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...82] + new: [...483] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2161] + new: [...484] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9415] + new: [...485] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4126] + new: [...486] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][57797] + new: [...487] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6346] + new: [...488] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2800] + new: [...489] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4662] + new: [...490] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7741] + new: [...491] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..726] + new: [...492] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..912] + new: [...493] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15742] + new: [...494] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][25734] + new: [...495] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1805] + new: [...496] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8651] + new: [...497] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..646] + new: [...498] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][11111] + new: [...499] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9944] + new: [...500] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1862] + new: [...501] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8100] + new: [...502] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7911] + new: [...503] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32780] + new: [...504] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..163] + new: [...505] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3301] + new: [...506] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2200] + new: [...507] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7070] + new: [...508] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1065] + new: [...509] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32776] + new: [...510] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1259] + new: [...511] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9595] + new: [...512] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][35500] + new: [...513] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10082] + new: [...514] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....7] + new: [...515] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2013] + new: [...516] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..464] + new: [...517] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6025] + new: [...518] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5730] + new: [...519] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8021] + new: [...520] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3517] + new: [...521] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1088] + new: [...522] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..999] + new: [...523] [ip4][..tcp] [.....172.16.0.8][36061] -> [...64.13.134.52][..113] + new: [...524] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7070] + new: [...525] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2200] + new: [...526] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3301] + new: [...527] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..163] + new: [...528] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32780] + new: [...529] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7911] + new: [...530] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8100] + new: [...531] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1862] + new: [...532] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9944] + new: [...533] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][11111] + new: [...534] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..646] + new: [...535] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5906] + new: [...536] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2288] + new: [...537] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1719] + new: [...538] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9418] + new: [...539] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10000] + new: [...540] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20031] + new: [...541] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4567] + new: [...542] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8193] + new: [...543] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1322] + new: [...544] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....3] + new: [...545] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1761] + new: [...546] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10566] + new: [...547] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1169] + new: [...548] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9220] + new: [...549] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..999] + new: [...550] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1088] + new: [...551] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3517] + new: [...552] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8021] + new: [...553] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5730] + new: [...554] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6025] + new: [...555] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..464] + new: [...556] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2013] + new: [...557] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....7] + new: [...558] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10082] + new: [...559] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][35500] + new: [...560] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9595] + new: [...561] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1259] + new: [...562] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32776] + new: [...563] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1065] + new: [...564] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..212] + new: [...565] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][65129] + new: [...566] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1185] + new: [...567] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9009] + new: [...568] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1248] + new: [...569] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1058] + new: [...570] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5988] + new: [...571] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1277] + new: [...572] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2126] + new: [...573] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1216] + new: [...574] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9091] + new: [...575] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1455] + new: [...576] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1009] + new: [...577] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10001] + new: [...578] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8292] + new: [...579] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][55600] + new: [...580] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20005] + new: [...581] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1036] + new: [...582] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6106] + new: [...583] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7201] + new: [...584] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1053] + new: [...585] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32774] + new: [...586] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2998] + new: [...587] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2047] + new: [...588] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8200] + new: [...589] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..888] + new: [...590] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][34572] + new: [...591] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1201] + new: [...592] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9003] + new: [...593] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3367] + new: [...594] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2196] + new: [...595] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2121] + new: [...596] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5850] + new: [...597] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7512] + new: [...598] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1096] + new: [...599] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9220] + new: [...600] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1169] + new: [...601] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10566] + new: [...602] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1761] + new: [...603] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....3] + new: [...604] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1322] + new: [...605] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8193] + new: [...606] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4567] + new: [...607] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20031] + new: [...608] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10000] + new: [...609] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9418] + new: [...610] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1719] + new: [...611] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2288] + new: [...612] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5906] + new: [...613] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7100] + new: [...614] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3851] + new: [...615] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10180] + new: [...616] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7001] + new: [...617] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4449] + new: [...618] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][54328] + new: [...619] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...83] + new: [...620] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1309] + new: [...621] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8009] + new: [...622] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4343] + new: [...623] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9050] + new: [...624] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3905] + new: [...625] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7625] + new: [...626] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10004] + new: [...627] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6779] + new: [...628] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5999] + new: [...629] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5810] + new: [...630] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9101] + new: [...631] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..749] + new: [...632] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1301] + new: [...633] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8002] + new: [...634] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8099] + new: [...635] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3030] + new: [...636] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1031] + new: [...637] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2048] + new: [...638] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6547] + new: [...639] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1036] + new: [...640] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20005] + new: [...641] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][55600] + new: [...642] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8292] + new: [...643] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10001] + new: [...644] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1009] + new: [...645] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1455] + new: [...646] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9091] + new: [...647] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1216] + new: [...648] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2126] + new: [...649] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1277] + new: [...650] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5988] + new: [...651] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1058] + new: [...652] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1248] + new: [...653] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9009] + new: [...654] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1185] + new: [...655] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][65129] + new: [...656] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..212] + new: [...657] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1096] + new: [...658] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7512] + new: [...659] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5850] + new: [...660] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2121] + new: [...661] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2196] + new: [...662] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3367] + new: [...663] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9003] + new: [...664] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1201] + new: [...665] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][34572] + new: [...666] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..888] + new: [...667] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8200] + new: [...668] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2047] + new: [...669] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2998] + new: [...670] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32774] + new: [...671] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1053] + new: [...672] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7201] + new: [...673] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6106] + new: [...674] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9050] + new: [...675] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4343] + new: [...676] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8009] + new: [...677] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1309] + new: [...678] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...83] + new: [...679] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][54328] + new: [...680] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4449] + new: [...681] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7001] + new: [...682] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10180] + new: [...683] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3851] + new: [...684] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7100] + new: [...685] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1218] + new: [...686] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19315] + new: [...687] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19842] + new: [...688] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3546] + new: [...689] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1086] + new: [...690] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1052] + new: [...691] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3995] + new: [...692] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4900] + new: [...693] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][30000] + new: [...694] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...42] + new: [...695] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][51493] + new: [...696] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8192] + new: [...697] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1271] + new: [...698] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16016] + new: [...699] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6547] + new: [...700] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2048] + new: [...701] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1031] + new: [...702] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3030] + new: [...703] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8099] + new: [...704] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8002] + new: [...705] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1301] + new: [...706] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..749] + new: [...707] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9101] + new: [...708] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5810] + new: [...709] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5999] + new: [...710] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6779] + new: [...711] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10004] + new: [...712] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7625] + new: [...713] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3905] + new: [...714] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1083] + new: [...715] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8701] + new: [...716] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3390] + new: [...717] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1875] + new: [...718] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1199] + new: [...719] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1721] + new: [...720] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10778] + new: [...721] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1718] + new: [...722] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16000] + new: [...723] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..125] + new: [...724] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1658] + new: [...725] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1148] + new: [...726] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..366] + new: [...727] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49165] + new: [...728] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1839] + new: [...729] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9943] + new: [...730] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2107] + new: [...731] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10617] + new: [...732] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2717] + new: [...733] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10003] + new: [...734] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1041] + new: [...735] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1042] + new: [...736] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8082] + new: [...737] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1165] + new: [...738] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5405] + new: [...739] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5051] + new: [...740] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2383] + new: [...741] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2022] + new: [...742] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6510] + new: [...743] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9876] + new: [...744] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1072] + new: [...745] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5001] + new: [...746] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8181] + new: [...747] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..301] + new: [...748] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1078] + new: [...749] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16016] + new: [...750] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1271] + new: [...751] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8192] + new: [...752] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][51493] + new: [...753] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...42] + new: [...754] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][30000] + new: [...755] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4900] + new: [...756] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3995] + new: [...757] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1052] + new: [...758] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1086] + new: [...759] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3546] + new: [...760] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19842] + new: [...761] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19315] + new: [...762] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1218] + new: [...763] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..109] + new: [...764] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1999] + new: [...765] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4125] + new: [...766] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][12265] + new: [...767] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49163] + new: [...768] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1085] + new: [...769] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5922] + new: [...770] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32782] + new: [...771] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1079] + new: [...772] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1141] + new: [...773] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..617] + new: [...774] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10617] + new: [...775] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2107] + new: [...776] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9943] + new: [...777] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1839] + new: [...778] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49165] + new: [...779] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..366] + new: [...780] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1148] + new: [...781] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1658] + new: [...782] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..125] + new: [...783] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16000] + new: [...784] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1718] + new: [...785] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10778] + new: [...786] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1721] + new: [...787] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1199] + new: [...788] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1875] + new: [...789] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3390] + new: [...790] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8701] + new: [...791] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1083] + new: [...792] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32779] + new: [...793] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49156] + new: [...794] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5510] + new: [...795] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5566] + new: [...796] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9999] + new: [...797] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9485] + new: [...798] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3878] + new: [...799] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...84] + new: [...800] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3801] + new: [...801] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][17988] + new: [...802] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49154] + new: [...803] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10010] + new: [...804] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5718] + new: [...805] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3168] + new: [...806] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3006] + new: [...807] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1078] + new: [...808] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..301] + new: [...809] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8181] + new: [...810] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5001] + new: [...811] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1072] + new: [...812] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9876] + new: [...813] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6510] + new: [...814] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2022] + new: [...815] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2383] + new: [...816] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5051] + new: [...817] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5405] + new: [...818] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1165] + new: [...819] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8082] + new: [...820] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1042] + new: [...821] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1041] + new: [...822] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10003] + new: [...823] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2717] + new: [...824] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..617] + new: [...825] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1141] + new: [...826] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1079] + new: [...827] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32782] + new: [...828] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5922] + new: [...829] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1085] + new: [...830] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49163] + new: [...831] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][12265] + new: [...832] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4125] + new: [...833] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1999] + new: [...834] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..109] + new: [...835] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5280] + new: [...836] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1066] + new: [...837] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..481] + new: [...838] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5901] + new: [...839] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8042] + new: [...840] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2967] + new: [...841] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....4] + new: [...842] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1082] + new: [...843] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1521] + new: [...844] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2100] + new: [...845] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1001] + new: [...846] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8090] + new: [...847] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1914] + new: [...848] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7937] + new: [...849] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3006] + new: [...850] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3168] + new: [...851] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5718] + new: [...852] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10010] + new: [...853] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49154] + new: [...854] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][17988] + new: [...855] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3801] + new: [...856] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...84] + new: [...857] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3878] + new: [...858] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9485] + new: [...859] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9999] + new: [...860] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5566] + new: [...861] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5510] + new: [...862] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49156] + new: [...863] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32779] + new: [...864] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1029] + new: [...865] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1864] + new: [...866] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..901] + new: [...867] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..981] + new: [...868] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5560] + new: [...869] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3007] + new: [...870] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1119] + new: [...871] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][55555] + new: [...872] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3766] + new: [...873] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1600] + new: [...874] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1192] + new: [...875] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][12174] + new: [...876] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][11110] + new: [...877] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15002] + new: [...878] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][12345] + new: [...879] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9968] + new: [...880] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1974] + new: [...881] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9900] + new: [...882] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1164] + new: [...883] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..898] + new: [...884] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6881] + new: [...885] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][34571] + new: [...886] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..500] + new: [...887] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5120] + new: [...888] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][18040] + new: [...889] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5060] + new: [...890] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3659] + new: [...891] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1051] + new: [...892] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..545] + new: [...893] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2004] + new: [...894] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1002] + new: [...895] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2601] + new: [...896] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1093] + new: [...897] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5989] + new: [...898] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4550] + new: [...899] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7937] + new: [...900] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1914] + new: [...901] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8090] + new: [...902] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1001] + new: [...903] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2100] + new: [...904] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1521] + new: [...905] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1082] + new: [...906] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....4] + new: [...907] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2967] + new: [...908] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8042] + new: [...909] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5901] + new: [...910] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..481] + new: [...911] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1066] + new: [...912] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5280] + new: [...913] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7778] + new: [...914] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..987] + new: [...915] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5679] + new: [...916] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8180] + new: [...917] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4279] + new: [...918] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][14441] + new: [...919] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][44443] + new: [...920] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9618] + new: [...921] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2301] + new: [...922] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50800] + new: [...923] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8010] + new: [...924] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9900] + new: [...925] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1974] + new: [...926] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9968] + new: [...927] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][12345] + new: [...928] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15002] + new: [...929] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][11110] + new: [...930] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][12174] + new: [...931] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1192] + new: [...932] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1600] + new: [...933] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3766] + new: [...934] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][55555] + new: [...935] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1119] + new: [...936] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3007] + new: [...937] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5560] + new: [...938] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..981] + new: [...939] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..901] + new: [...940] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1864] + new: [...941] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1029] + new: [...942] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5987] + new: [...943] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9502] + new: [...944] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....1] + new: [...945] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1046] + new: [...946] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27715] + new: [...947] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7002] + new: [...948] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][28201] + new: [...949] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1186] + new: [...950] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..705] + new: [...951] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2009] + new: [...952] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][64680] + new: [...953] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][18101] + new: [...954] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49158] + new: [...955] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3971] + new: [...956] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6689] + new: [...957] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4550] + new: [...958] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5989] + new: [...959] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1093] + new: [...960] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2601] + new: [...961] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1002] + new: [...962] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2004] + new: [...963] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..545] + new: [...964] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1051] + new: [...965] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3659] + new: [...966] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5060] + new: [...967] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][18040] + new: [...968] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5120] + new: [...969] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..500] + new: [...970] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][34571] + new: [...971] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6881] + new: [...972] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..898] + new: [...973] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1164] + new: [...974] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8010] + new: [...975] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50800] + new: [...976] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2301] + new: [...977] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9618] + new: [...978] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][44443] + new: [...979] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][14441] + new: [...980] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4279] + new: [...981] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8180] + new: [...982] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5679] + new: [...983] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..987] + new: [...984] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7778] + new: [...985] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][31038] + new: [...986] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][12000] + new: [...987] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10616] + new: [...988] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1059] + new: [...989] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2604] + new: [...990] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50500] + new: [...991] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4443] + new: [...992] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1900] + new: [...993] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1137] + new: [...994] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9081] + new: [...995] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5802] + new: [...996] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19801] + new: [...997] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1443] + new: [...998] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32783] + new: [...999] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6689] + new: [..1000] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3971] + new: [..1001] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49158] + new: [..1002] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][18101] + new: [..1003] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][64680] + new: [..1004] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2009] + new: [..1005] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..705] + new: [..1006] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1186] + new: [..1007] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][28201] + new: [..1008] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7002] + new: [..1009] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27715] + new: [..1010] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1046] + new: [..1011] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....1] + new: [..1012] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9502] + new: [..1013] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5987] + new: [..1014] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1783] + new: [..1015] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4445] + new: [..1016] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2381] + new: [..1017] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][45100] + new: [..1018] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7019] + new: [..1019] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16992] + new: [..1020] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1174] + new: [..1021] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][13782] + new: [..1022] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5902] + new: [..1023] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9878] + new: [..1024] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..667] + new: [..1025] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9080] + new: [..1026] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5102] + new: [..1027] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5877] + new: [..1028] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1037] + new: [..1029] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5907] + new: [..1030] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..211] + new: [..1031] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2035] + new: [..1032] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..144] + new: [..1033] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1112] + new: [..1034] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2170] + new: [..1035] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6101] + new: [..1036] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..800] + new: [..1037] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8994] + new: [..1038] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2399] + new: [..1039] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3580] + new: [..1040] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...89] + new: [..1041] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8873] + new: [..1042] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7106] + new: [..1043] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8087] + new: [..1044] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9594] + new: [..1045] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1099] + new: [..1046] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][34573] + new: [..1047] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5030] + new: [..1048] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2702] + new: [..1049] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32783] + new: [..1050] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1443] + new: [..1051] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19801] + new: [..1052] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5802] + new: [..1053] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9081] + new: [..1054] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1137] + new: [..1055] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1900] + new: [..1056] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4443] + new: [..1057] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50500] + new: [..1058] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2604] + new: [..1059] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1059] + new: [..1060] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10616] + new: [..1061] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][12000] + new: [..1062] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][31038] + new: [..1063] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9002] + new: [..1064] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5998] + new: [..1065] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9503] + new: [..1066] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1062] + new: [..1067] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1217] + new: [..1068] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50001] + new: [..1069] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3325] + new: [..1070] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1011] + new: [..1071] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1117] + new: [..1072] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1533] + new: [..1073] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3404] + new: [..1074] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2035] + new: [..1075] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..211] + new: [..1076] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5907] + new: [..1077] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1037] + new: [..1078] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5877] + new: [..1079] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5102] + new: [..1080] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9080] + new: [..1081] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..667] + new: [..1082] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9878] + new: [..1083] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5902] + new: [..1084] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][13782] + new: [..1085] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1174] + new: [..1086] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16992] + new: [..1087] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7019] + new: [..1088] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][45100] + new: [..1089] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2381] + new: [..1090] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4445] + new: [..1091] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1783] + new: [..1092] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..902] + new: [..1093] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3690] + new: [..1094] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8089] + new: [..1095] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1010] + new: [..1096] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8402] + new: [..1097] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9090] + new: [..1098] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3527] + new: [..1099] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..992] + new: [..1100] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8652] + new: [..1101] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..255] + new: [..1102] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][33354] + new: [..1103] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1050] + new: [..1104] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1782] + new: [..1105] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..406] + new: [..1106] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][22939] + new: [..1107] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2702] + new: [..1108] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5030] + new: [..1109] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][34573] + new: [..1110] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1099] + new: [..1111] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9594] + new: [..1112] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8087] + new: [..1113] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7106] + new: [..1114] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8873] + new: [..1115] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...89] + new: [..1116] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3580] + new: [..1117] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2399] + new: [..1118] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8994] + new: [..1119] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..800] + new: [..1120] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6101] + new: [..1121] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2170] + new: [..1122] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1112] + new: [..1123] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..144] + new: [..1124] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3404] + new: [..1125] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1533] + new: [..1126] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1117] + new: [..1127] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1011] + new: [..1128] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3325] + new: [..1129] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50001] + new: [..1130] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1217] + new: [..1131] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1062] + new: [..1132] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9503] + new: [..1133] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5998] + new: [..1134] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9002] + new: [..1135] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..524] + new: [..1136] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5100] + new: [..1137] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1091] + new: [..1138] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15000] + new: [..1139] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...19] + new: [..1140] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2042] + new: [..1141] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1138] + new: [..1142] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5960] + new: [..1143] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2144] + new: [..1144] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1106] + new: [..1145] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4446] + new: [..1146] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5432] + new: [..1147] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8085] + new: [..1148] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2119] + new: [..1149] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][22939] + new: [..1150] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..406] + new: [..1151] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1782] + new: [..1152] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1050] + new: [..1153] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][33354] + new: [..1154] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..255] + new: [..1155] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8652] + new: [..1156] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..992] + new: [..1157] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3527] + new: [..1158] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9090] + new: [..1159] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8402] + new: [..1160] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1010] + new: [..1161] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8089] + new: [..1162] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3690] + new: [..1163] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..902] + new: [..1164] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1971] + new: [..1165] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5222] + new: [..1166] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1100] + new: [..1167] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6668] + new: [..1168] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8600] + new: [..1169] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5000] + new: [..1170] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..714] + new: [..1171] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7921] + new: [..1172] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6112] + new: [..1173] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50300] + new: [..1174] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6156] + new: [..1175] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][13783] + new: [..1176] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8007] + new: [..1177] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32773] + new: [..1178] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1105] + new: [..1179] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5050] + new: [..1180] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1175] + new: [..1181] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3260] + new: [..1182] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9001] + new: [..1183] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15003] + new: [..1184] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...70] + new: [..1185] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2003] + new: [..1186] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1030] + new: [..1187] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..543] + new: [..1188] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1132] + new: [..1189] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][64623] + new: [..1190] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6007] + new: [..1191] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3300] + new: [..1192] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..222] + new: [..1193] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8194] + new: [..1194] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10628] + new: [..1195] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4444] + new: [..1196] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...79] + new: [..1197] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7938] + new: [..1198] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1032] + new: [..1199] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2119] + new: [..1200] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8085] + new: [..1201] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5432] + new: [..1202] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4446] + new: [..1203] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1106] + new: [..1204] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2144] + new: [..1205] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5960] + new: [..1206] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1138] + new: [..1207] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2042] + new: [..1208] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...19] + new: [..1209] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15000] + new: [..1210] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1091] + new: [..1211] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5100] + new: [..1212] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..524] + new: [..1213] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1272] + new: [..1214] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8899] + new: [..1215] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1121] + new: [..1216] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10024] + new: [..1217] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6003] + new: [..1218] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8088] + new: [..1219] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][41511] + new: [..1220] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5298] + new: [..1221] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1717] + new: [..1222] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...43] + new: [..1223] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1122] + new: [..1224] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..711] + new: [..1225] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32769] + new: [..1226] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3260] + new: [..1227] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1175] + new: [..1228] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5050] + new: [..1229] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1105] + new: [..1230] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32773] + new: [..1231] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8007] + new: [..1232] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][13783] + new: [..1233] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6156] + new: [..1234] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50300] + new: [..1235] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6112] + new: [..1236] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7921] + new: [..1237] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..714] + new: [..1238] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5000] + new: [..1239] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8600] + new: [..1240] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6668] + new: [..1241] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1100] + new: [..1242] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5222] + new: [..1243] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1971] + new: [..1244] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1501] + new: [..1245] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2602] + new: [..1246] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1163] + new: [..1247] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1045] + new: [..1248] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..106] + new: [..1249] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1061] + new: [..1250] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1972] + new: [..1251] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3800] + new: [..1252] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1124] + new: [..1253] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27000] + new: [..1254] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5544] + new: [..1255] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7025] + new: [..1256] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3551] + new: [..1257] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1098] + new: [..1258] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2041] + new: [..1259] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7938] + new: [..1260] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...79] + new: [..1261] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4444] + new: [..1262] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10628] + new: [..1263] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8194] + new: [..1264] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..222] + new: [..1265] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3300] + new: [..1266] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6007] + new: [..1267] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][64623] + new: [..1268] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1132] + new: [..1269] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..543] + new: [..1270] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1030] + new: [..1271] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2003] + new: [..1272] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15003] + new: [..1273] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9001] + new: [..1274] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1032] + new: [..1275] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1122] + new: [..1276] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...43] + new: [..1277] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1717] + new: [..1278] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5298] + new: [..1279] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][41511] + new: [..1280] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8088] + new: [..1281] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6003] + new: [..1282] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10024] + new: [..1283] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1121] + new: [..1284] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8899] + new: [..1285] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1272] + new: [..1286] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2179] + new: [..1287] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5087] + new: [..1288] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][44442] + new: [..1289] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..427] + new: [..1290] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4004] + new: [..1291] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2394] + new: [..1292] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5952] + new: [..1293] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2608] + new: [..1294] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..458] + new: [..1295] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1068] + new: [..1296] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1700] + new: [..1297] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..691] + new: [..1298] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5910] + new: [..1299] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9103] + new: [..1300] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32769] + new: [..1301] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..711] + new: [..1302] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2041] + new: [..1303] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1098] + new: [..1304] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3551] + new: [..1305] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7025] + new: [..1306] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5544] + new: [..1307] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27000] + new: [..1308] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1124] + new: [..1309] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3800] + new: [..1310] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1972] + new: [..1311] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1061] + new: [..1312] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..106] + new: [..1313] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1045] + new: [..1314] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1163] + new: [..1315] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2602] + new: [..1316] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1501] + new: [..1317] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][38292] + new: [..1318] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..416] + new: [..1319] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1998] + new: [..1320] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...20] + new: [..1321] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1287] + new: [..1322] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][57294] + new: [..1323] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..541] + new: [..1324] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1352] + new: [..1325] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3283] + new: [..1326] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1145] + new: [..1327] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2191] + new: [..1328] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20000] + new: [..1329] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1035] + new: [..1330] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...88] + new: [..1331] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1055] + new: [..1332] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32772] + new: [..1333] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1077] + new: [..1334] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6566] + new: [..1335] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][56737] + new: [..1336] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5961] + new: [..1337] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][58080] + new: [..1338] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9207] + new: [..1339] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1126] + new: [..1340] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19283] + new: [..1341] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..513] + new: [..1342] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..722] + new: [..1343] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49153] + new: [..1344] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8001] + new: [..1345] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3370] + new: [..1346] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4242] + new: [..1347] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6009] + new: [..1348] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3869] + new: [..1349] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1069] + new: [..1350] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16113] + new: [..1351] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9103] + new: [..1352] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5910] + new: [..1353] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..691] + new: [..1354] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1700] + new: [..1355] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1068] + new: [..1356] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..458] + new: [..1357] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2608] + new: [..1358] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5952] + new: [..1359] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2394] + new: [..1360] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4004] + new: [..1361] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..427] + new: [..1362] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][44442] + new: [..1363] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5087] + new: [..1364] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2179] + new: [..1365] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...81] + new: [..1366] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3221] + new: [..1367] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2557] + new: [..1368] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...37] + new: [..1369] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2135] + new: [..1370] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2809] + new: [..1371] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][51103] + new: [..1372] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3871] + new: [..1373] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...13] + new: [..1374] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5801] + new: [..1375] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3322] + new: [..1376] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2021] + new: [..1377] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3333] + new: [..1378] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1998] + new: [..1379] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..416] + new: [..1380] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][38292] + new: [..1381] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6100] + new: [..1382] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..720] + new: [..1383] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8031] + new: [..1384] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..146] + new: [..1385] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..407] + new: [..1386] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3323] + new: [..1387] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][24800] + new: [..1388] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7999] + new: [..1389] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19350] + new: [..1390] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][61900] + new: [..1391] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..593] + new: [..1392] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6002] + new: [..1393] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1310] + new: [..1394] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8008] + new: [..1395] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1114] + new: [..1396] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1069] + new: [..1397] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3869] + new: [..1398] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6009] + new: [..1399] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4242] + new: [..1400] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3370] + new: [..1401] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8001] + new: [..1402] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49153] + new: [..1403] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..722] + new: [..1404] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..513] + new: [..1405] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19283] + new: [..1406] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1126] + new: [..1407] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9207] + new: [..1408] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][58080] + new: [..1409] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5961] + new: [..1410] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][56737] + new: [..1411] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6566] + new: [..1412] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1077] + new: [..1413] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32772] + new: [..1414] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1055] + new: [..1415] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...88] + new: [..1416] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1035] + new: [..1417] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20000] + new: [..1418] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2191] + new: [..1419] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1145] + new: [..1420] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3283] + new: [..1421] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1352] + new: [..1422] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..541] + new: [..1423] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][57294] + new: [..1424] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1287] + new: [..1425] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...20] + new: [..1426] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16113] + new: [..1427] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2557] + new: [..1428] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3221] + new: [..1429] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...81] + new: [..1430] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3889] + new: [..1431] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6565] + new: [..1432] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2007] + new: [..1433] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3269] + new: [..1434] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1000] + new: [..1435] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2492] + new: [..1436] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2710] + new: [..1437] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5004] + new: [..1438] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7443] + new: [..1439] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27352] + new: [..1440] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7004] + new: [..1441] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][52673] + new: [..1442] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8081] + new: [..1443] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49175] + new: [..1444] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3322] + new: [..1445] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5801] + new: [..1446] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...13] + new: [..1447] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3871] + new: [..1448] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][51103] + new: [..1449] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2809] + new: [..1450] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2135] + new: [..1451] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...37] + new: [..1452] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3333] + new: [..1453] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2021] + new: [..1454] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1114] + new: [..1455] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8008] + new: [..1456] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1310] + new: [..1457] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6002] + new: [..1458] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..593] + new: [..1459] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][61900] + new: [..1460] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19350] + new: [..1461] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7999] + new: [..1462] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][24800] + new: [..1463] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3323] + new: [..1464] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..407] + new: [..1465] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..146] + new: [..1466] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8031] + new: [..1467] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..720] + new: [..1468] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6100] + new: [..1469] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5815] + new: [..1470] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8500] + new: [..1471] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1026] + new: [..1472] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16012] + new: [..1473] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][40193] + new: [..1474] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1947] + new: [..1475] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5666] + new: [..1476] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5226] + new: [..1477] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9040] + new: [..1478] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8011] + new: [..1479] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..417] + new: [..1480] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32771] + new: [..1481] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6001] + new: [..1482] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1503] + new: [..1483] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1076] + new: [..1484] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4002] + new: [..1485] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...49] + new: [..1486] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2111] + new: [..1487] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..264] + new: [..1488] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1500] + new: [..1489] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49161] + new: [..1490] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1081] + new: [..1491] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2500] + new: [..1492] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6567] + new: [..1493] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1033] + new: [..1494] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..631] + new: [..1495] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..648] + new: [..1496] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2002] + new: [..1497] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..340] + new: [..1498] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7435] + new: [..1499] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6792] + new: [..1500] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..783] + new: [..1501] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1147] + new: [..1502] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][54045] + new: [..1503] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49175] + new: [..1504] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8081] + new: [..1505] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][52673] + new: [..1506] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7004] + new: [..1507] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27352] + new: [..1508] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7443] + new: [..1509] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5004] + new: [..1510] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2710] + new: [..1511] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2492] + new: [..1512] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1000] + new: [..1513] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3269] + new: [..1514] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2007] + new: [..1515] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6565] + new: [..1516] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3889] + new: [..1517] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1113] + new: [..1518] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3986] + new: [..1519] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8443] + new: [..1520] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1054] + new: [..1521] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][21571] + new: [..1522] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5950] + new: [..1523] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9100] + new: [..1524] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49400] + new: [..1525] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1130] + new: [..1526] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2875] + new: [..1527] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32784] + new: [..1528] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1556] + new: [..1529] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1022] + new: [..1530] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1026] + new: [..1531] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8500] + new: [..1532] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5815] + new: [..1533] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1102] + new: [..1534] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][55055] + new: [..1535] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3371] + new: [..1536] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10025] + new: [..1537] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..616] + new: [..1538] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1039] + new: [..1539] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7627] + new: [..1540] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10215] + new: [..1541] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6692] + new: [..1542] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5009] + new: [..1543] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2323] + new: [..1544] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8290] + new: [..1545] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2043] + new: [..1546] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1034] + new: [..1547] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1935] + new: [..1548] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1147] + new: [..1549] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..783] + new: [..1550] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6792] + new: [..1551] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7435] + new: [..1552] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..340] + new: [..1553] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2002] + new: [..1554] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..648] + new: [..1555] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..631] + new: [..1556] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1033] + new: [..1557] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6567] + new: [..1558] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2500] + new: [..1559] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1081] + new: [..1560] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49161] + new: [..1561] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1500] + new: [..1562] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..264] + new: [..1563] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2111] + new: [..1564] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...49] + new: [..1565] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4002] + new: [..1566] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1076] + new: [..1567] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1503] + new: [..1568] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6001] + new: [..1569] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32771] + new: [..1570] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..417] + new: [..1571] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8011] + new: [..1572] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9040] + new: [..1573] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5226] + new: [..1574] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5666] + new: [..1575] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1947] + new: [..1576] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][40193] + new: [..1577] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16012] + new: [..1578] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][54045] + new: [..1579] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8443] + new: [..1580] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3986] + new: [..1581] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1113] + new: [..1582] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1107] + new: [..1583] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..636] + new: [..1584] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5054] + new: [..1585] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1334] + new: [..1586] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1023] + new: [..1587] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..903] + new: [..1588] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..100] + new: [..1589] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3703] + new: [..1590] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1028] + new: [..1591] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..900] + new: [..1592] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..873] + new: [..1593] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..119] + new: [..1594] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][26214] + new: [..1595] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20828] + new: [..1596] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32784] + new: [..1597] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2875] + new: [..1598] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1130] + new: [..1599] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49400] + new: [..1600] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9100] + new: [..1601] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5950] + new: [..1602] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][21571] + new: [..1603] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1054] + new: [..1604] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1022] + new: [..1605] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1556] + new: [..1606] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1935] + new: [..1607] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1034] + new: [..1608] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2043] + new: [..1609] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8290] + new: [..1610] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2323] + new: [..1611] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5009] + new: [..1612] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6692] + new: [..1613] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10215] + new: [..1614] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7627] + new: [..1615] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1039] + new: [..1616] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..616] + new: [..1617] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10025] + new: [..1618] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3371] + new: [..1619] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][55055] + new: [..1620] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1102] + new: [..1621] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5550] + new: [..1622] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2638] + new: [..1623] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..515] + new: [..1624] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..555] + new: [..1625] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..880] + new: [..1626] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1755] + new: [..1627] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49159] + new: [..1628] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8254] + new: [..1629] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1090] + new: [..1630] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3324] + new: [..1631] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2000] + new: [..1632] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50003] + new: [..1633] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9535] + new: [..1634] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..161] + new: [..1635] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9000] + new: [..1636] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2105] + new: [..1637] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1213] + new: [..1638] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][18988] + new: [..1639] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..668] + new: [..1640] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...33] + new: [..1641] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5859] + new: [..1642] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32777] + new: [..1643] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][56738] + new: [..1644] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9099] + new: [..1645] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4045] + new: [..1646] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1094] + new: [..1647] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2068] + new: [..1648] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8083] + new: [..1649] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..777] + new: [..1650] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1074] + new: [..1651] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][13722] + new: [..1652] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3920] + new: [..1653] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5904] + new: [..1654] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..787] + new: [..1655] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20828] + new: [..1656] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][26214] + new: [..1657] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..119] + new: [..1658] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..873] + new: [..1659] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..900] + new: [..1660] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1028] + new: [..1661] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3703] + new: [..1662] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..100] + new: [..1663] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..903] + new: [..1664] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1023] + new: [..1665] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1334] + new: [..1666] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5054] + new: [..1667] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..636] + new: [..1668] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1107] + new: [..1669] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8383] + new: [..1670] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..544] + new: [..1671] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9111] + new: [..1672] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..444] + new: [..1673] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3211] + new: [..1674] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20221] + new: [..1675] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6667] + new: [..1676] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7103] + new: [..1677] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2010] + new: [..1678] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][30951] + new: [..1679] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1089] + new: [..1680] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2910] + new: [..1681] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5357] + new: [..1682] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..515] + new: [..1683] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2638] + new: [..1684] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5550] + new: [..1685] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6901] + new: [..1686] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][25735] + new: [..1687] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6969] + new: [..1688] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3003] + new: [..1689] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3011] + new: [..1690] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50002] + new: [..1691] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9998] + new: [..1692] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3998] + new: [..1693] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2006] + new: [..1694] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1080] + new: [..1695] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6006] + new: [..1696] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3005] + new: [..1697] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5633] + new: [..1698] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7402] + new: [..1699] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4321] + new: [..1700] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5859] + new: [..1701] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...33] + new: [..1702] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..668] + new: [..1703] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][18988] + new: [..1704] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1213] + new: [..1705] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2105] + new: [..1706] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9000] + new: [..1707] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..161] + new: [..1708] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9535] + new: [..1709] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50003] + new: [..1710] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2000] + new: [..1711] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3324] + new: [..1712] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1090] + new: [..1713] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8254] + new: [..1714] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49159] + new: [..1715] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1755] + new: [..1716] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..880] + new: [..1717] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..555] + new: [..1718] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5904] + new: [..1719] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3920] + new: [..1720] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][13722] + new: [..1721] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1074] + new: [..1722] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..777] + new: [..1723] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8083] + new: [..1724] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2068] + new: [..1725] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1094] + new: [..1726] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4045] + new: [..1727] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9099] + new: [..1728] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][56738] + new: [..1729] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32777] + new: [..1730] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..787] + new: [..1731] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9111] + new: [..1732] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..544] + new: [..1733] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8383] + new: [..1734] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50000] + new: [..1735] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6129] + new: [..1736] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3351] + new: [..1737] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][52822] + new: [..1738] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16018] + new: [..1739] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49167] + new: [..1740] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6789] + new: [..1741] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6004] + new: [..1742] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1057] + new: [..1743] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3914] + new: [..1744] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][65389] + new: [..1745] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6502] + new: [..1746] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16993] + new: [..1747] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1149] + new: [..1748] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1089] + new: [..1749] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][30951] + new: [..1750] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2010] + new: [..1751] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7103] + new: [..1752] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6667] + new: [..1753] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20221] + new: [..1754] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3211] + new: [..1755] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..444] + new: [..1756] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5357] + new: [..1757] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2910] + new: [..1758] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4321] + new: [..1759] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7402] + new: [..1760] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5633] + new: [..1761] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3005] + new: [..1762] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6006] + new: [..1763] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1080] + new: [..1764] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2006] + new: [..1765] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3998] + new: [..1766] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9998] + new: [..1767] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50002] + new: [..1768] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3011] + new: [..1769] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3003] + new: [..1770] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6969] + new: [..1771] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][25735] + new: [..1772] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6901] + new: [..1773] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1494] + new: [..1774] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5911] + new: [..1775] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32770] + new: [..1776] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][63331] + new: [..1777] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1434] + new: [..1778] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5061] + new: [..1779] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2045] + new: [..1780] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..911] + new: [..1781] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6059] + new: [..1782] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1198] + new: [..1783] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9011] + new: [..1784] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1580] + new: [..1785] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2040] + new: [..1786] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6123] + new: [..1787] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3828] + new: [..1788] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8333] + new: [..1789] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8022] + new: [..1790] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5555] + new: [..1791] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][55056] + new: [..1792] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2160] + new: [..1793] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8654] + new: [..1794] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50006] + new: [..1795] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2366] + new: [..1796] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][23502] + new: [..1797] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1063] + new: [..1798] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5003] + new: [..1799] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50636] + new: [..1800] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1152] + new: [..1801] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27353] + new: [..1802] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7007] + new: [..1803] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5915] + new: [..1804] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1234] + new: [..1805] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5925] + new: [..1806] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50389] + new: [..1807] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1149] + new: [..1808] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16993] + new: [..1809] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6502] + new: [..1810] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][65389] + new: [..1811] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3914] + new: [..1812] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1057] + new: [..1813] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6004] + new: [..1814] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6789] + new: [..1815] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49167] + new: [..1816] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16018] + new: [..1817] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][52822] + new: [..1818] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3351] + new: [..1819] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6129] + new: [..1820] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50000] + new: [..1821] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1038] + new: [..1822] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2008] + new: [..1823] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1236] + new: [..1824] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...85] + new: [..1825] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2049] + new: [..1826] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6646] + new: [..1827] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1007] + new: [..1828] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1108] + new: [..1829] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][42510] + new: [..1830] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..465] + new: [..1831] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3128] + new: [..1832] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..625] + new: [..1833] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2065] + new: [..1834] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32770] + new: [..1835] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5911] + new: [..1836] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1494] + new: [..1837] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2920] + new: [..1838] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3689] + new: [..1839] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5678] + new: [..1840] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2607] + new: [..1841] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1801] + new: [..1842] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4001] + new: [..1843] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32775] + new: [..1844] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..389] + new: [..1845] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3372] + new: [..1846] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..687] + new: [..1847] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7920] + new: [..1848] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49160] + new: [..1849] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3013] + new: [..1850] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5225] + new: [..1851] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2251] + new: [..1852] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5925] + new: [..1853] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1234] + new: [..1854] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5915] + new: [..1855] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7007] + new: [..1856] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27353] + new: [..1857] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1152] + new: [..1858] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50636] + new: [..1859] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5003] + new: [..1860] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1063] + new: [..1861] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][23502] + new: [..1862] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2366] + new: [..1863] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50006] + new: [..1864] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8654] + new: [..1865] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2160] + new: [..1866] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][55056] + new: [..1867] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5555] + new: [..1868] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8022] + new: [..1869] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8333] + new: [..1870] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3828] + new: [..1871] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6123] + new: [..1872] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2040] + new: [..1873] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1580] + new: [..1874] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9011] + new: [..1875] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1198] + new: [..1876] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6059] + new: [..1877] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..911] + new: [..1878] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2045] + new: [..1879] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5061] + new: [..1880] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1434] + new: [..1881] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][63331] + new: [..1882] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50389] + new: [..1883] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1236] + new: [..1884] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2008] + new: [..1885] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1038] + new: [..1886] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..259] + new: [..1887] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10243] + new: [..1888] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2033] + new: [..1889] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5862] + new: [..1890] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8093] + new: [..1891] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..179] + new: [..1892] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1984] + new: [..1893] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9877] + new: [..1894] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..563] + new: [..1895] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...90] + new: [..1896] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8084] + new: [..1897] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2725] + new: [..1898] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..311] + new: [..1899] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6666] + new: [..1900] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3128] + new: [..1901] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..465] + new: [..1902] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][42510] + new: [..1903] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1108] + new: [..1904] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1007] + new: [..1905] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6646] + new: [..1906] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2049] + new: [..1907] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...85] + new: [..1908] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2065] + new: [..1909] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..625] + new: [..1910] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2251] + new: [..1911] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5225] + new: [..1912] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3013] + new: [..1913] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49160] + new: [..1914] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7920] + new: [..1915] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..687] + new: [..1916] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3372] + new: [..1917] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..389] + new: [..1918] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32775] + new: [..1919] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4001] + new: [..1920] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1801] + new: [..1921] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2607] + new: [..1922] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5678] + new: [..1923] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3689] + new: [..1924] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2920] + new: [..1925] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10012] + new: [..1926] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1021] + new: [..1927] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][60020] + new: [..1928] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4998] + new: [..1929] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5002] + new: [..1930] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1092] + new: [..1931] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2103] + new: [..1932] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1049] + new: [..1933] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8800] + new: [..1934] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9290] + new: [..1935] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49152] + new: [..1936] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1863] + new: [..1937] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2401] + new: [..1938] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3031] + new: [..1939] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..306] + new: [..1940] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1812] + new: [..1941] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1104] + new: [..1942] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2718] + new: [..1943] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1110] + new: [..1944] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6005] + new: [..1945] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2034] + new: [..1946] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5269] + new: [..1947] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5962] + new: [..1948] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3268] + new: [..1949] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1044] + new: [..1950] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..512] + new: [..1951] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49157] + new: [..1952] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3261] + new: [..1953] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6666] + new: [..1954] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..311] + new: [..1955] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2725] + new: [..1956] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8084] + new: [..1957] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...90] + new: [..1958] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..563] + new: [..1959] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9877] + new: [..1960] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1984] + new: [..1961] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..179] + new: [..1962] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8093] + new: [..1963] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5862] + new: [..1964] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2033] + new: [..1965] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10243] + new: [..1966] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..259] + new: [..1967] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][60020] + new: [..1968] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1021] + new: [..1969] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10012] + new: [..1970] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3261] + new: [..1971] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49157] + new: [..1972] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..512] + new: [..1973] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1044] + new: [..1974] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3268] + new: [..1975] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5962] + new: [..1976] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5269] + new: [..1977] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2034] + new: [..1978] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6005] + new: [..1979] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1110] + new: [..1980] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2718] + new: [..1981] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1104] + new: [..1982] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1812] + new: [..1983] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..306] + new: [..1984] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3031] + new: [..1985] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2401] + new: [..1986] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1863] + new: [..1987] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49152] + new: [..1988] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9290] + new: [..1989] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8800] + new: [..1990] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1049] + new: [..1991] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2103] + new: [..1992] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1092] + new: [..1993] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5002] + new: [..1994] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4998] + guessed: [....15] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3389] [RDP][RemoteAccess][Acceptable] + RISK: Desktop/File Sharing + idle: [....15] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3389] + not-detected: [...716] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3390] [Unknown][Unrated] + idle: [...716] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3390] + guessed: [....18] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3389] [RDP][RemoteAccess][Acceptable] + RISK: Desktop/File Sharing + idle: [....18] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3389] + not-detected: [..1633] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9535] [Unknown][Unrated] + idle: [..1633] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9535] + not-detected: [...789] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3390] [Unknown][Unrated] + idle: [...789] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3390] + not-detected: [..1708] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9535] [Unknown][Unrated] + idle: [..1708] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9535] + not-detected: [...378] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5440] [Unknown][Unrated] + idle: [...378] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5440] + not-detected: [...406] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5440] [Unknown][Unrated] + idle: [...406] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5440] + not-detected: [...990] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50500] [Unknown][Unrated] + idle: [...990] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50500] + not-detected: [...381] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19780] [Unknown][Unrated] + idle: [...381] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19780] + not-detected: [..1057] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50500] [Unknown][Unrated] + idle: [..1057] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50500] + not-detected: [...403] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19780] [Unknown][Unrated] + idle: [...403] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19780] + guessed: [..1324] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1352] [LotusNotes][Collaborative][Acceptable] + idle: [..1324] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1352] + not-detected: [...206] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7496] [Unknown][Unrated] + idle: [...206] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7496] + guessed: [..1421] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1352] [LotusNotes][Collaborative][Acceptable] + idle: [..1421] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1352] + not-detected: [...250] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7496] [Unknown][Unrated] + idle: [...250] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7496] + not-detected: [..1073] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3404] [Unknown][Unrated] + idle: [..1073] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3404] + not-detected: [..1124] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3404] [Unknown][Unrated] + idle: [..1124] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3404] + not-detected: [...597] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7512] [Unknown][Unrated] + idle: [...597] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7512] + not-detected: [...996] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19801] [Unknown][Unrated] + idle: [...996] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19801] + not-detected: [...658] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7512] [Unknown][Unrated] + idle: [...658] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7512] + not-detected: [..1051] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19801] [Unknown][Unrated] + idle: [..1051] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19801] + not-detected: [...184] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9575] [Unknown][Unrated] + idle: [...184] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9575] + not-detected: [...231] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9575] [Unknown][Unrated] + idle: [...231] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9575] + not-detected: [...423] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9593] [Unknown][Unrated] + idle: [...423] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9593] + not-detected: [..1044] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9594] [Unknown][Unrated] + idle: [..1044] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9594] + not-detected: [...443] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9593] [Unknown][Unrated] + idle: [...443] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9593] + not-detected: [..1111] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9594] [Unknown][Unrated] + idle: [..1111] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9594] + not-detected: [...511] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9595] [Unknown][Unrated] + idle: [...511] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9595] + not-detected: [...560] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9595] [Unknown][Unrated] + idle: [...560] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9595] + not-detected: [...275] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5500] [Unknown][Unrated] + idle: [...275] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5500] + not-detected: [...304] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5500] [Unknown][Unrated] + idle: [...304] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5500] + not-detected: [...455] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15742] [Unknown][Unrated] + idle: [...455] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15742] + not-detected: [...493] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15742] [Unknown][Unrated] + idle: [...493] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15742] + not-detected: [...687] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19842] [Unknown][Unrated] + idle: [...687] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19842] + not-detected: [...760] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19842] [Unknown][Unrated] + idle: [...760] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19842] + not-detected: [...794] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5510] [Unknown][Unrated] + idle: [...794] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5510] + not-detected: [...861] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5510] [Unknown][Unrated] + idle: [...861] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5510] + not-detected: [....55] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1417] [Unknown][Unrated] + idle: [....55] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1417] + not-detected: [....73] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1417] [Unknown][Unrated] + idle: [....73] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1417] + not-detected: [...920] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9618] [Unknown][Unrated] + idle: [...920] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9618] + not-detected: [...977] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9618] [Unknown][Unrated] + idle: [...977] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9618] + not-detected: [..1317] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][38292] [Unknown][Unrated] + idle: [..1317] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][38292] + not-detected: [...351] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3476] [Unknown][Unrated] + idle: [...351] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3476] + not-detected: [..1380] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][38292] [Unknown][Unrated] + idle: [..1380] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][38292] + not-detected: [...392] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3476] [Unknown][Unrated] + idle: [...392] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3476] + guessed: [...181] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [...181] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1433] + not-detected: [..1651] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][13722] [Unknown][Unrated] + idle: [..1651] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][13722] + not-detected: [..1288] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][44442] [Unknown][Unrated] + idle: [..1288] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][44442] + guessed: [..1777] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1434] [MsSQL-TDS][Database][Acceptable] + idle: [..1777] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1434] + guessed: [...234] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1433] [MsSQL-TDS][Database][Acceptable] + idle: [...234] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1433] + not-detected: [..1362] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][44442] [Unknown][Unrated] + idle: [..1362] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][44442] + guessed: [..1880] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1434] [MsSQL-TDS][Database][Acceptable] + idle: [..1880] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1434] + not-detected: [..1720] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][13722] [Unknown][Unrated] + idle: [..1720] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][13722] + not-detected: [...919] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][44443] [Unknown][Unrated] + idle: [...919] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][44443] + not-detected: [...978] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][44443] [Unknown][Unrated] + idle: [...978] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][44443] + not-detected: [..1335] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][56737] [Unknown][Unrated] + idle: [..1335] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][56737] + not-detected: [..1643] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][56738] [Unknown][Unrated] + idle: [..1643] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][56738] + not-detected: [..1410] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][56737] [Unknown][Unrated] + idle: [..1410] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][56737] + not-detected: [..1728] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][56738] [Unknown][Unrated] + idle: [..1728] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][56738] + not-detected: [...997] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1443] [Unknown][Unrated] + idle: [...997] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1443] + not-detected: [..1050] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1443] [Unknown][Unrated] + idle: [..1050] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1443] + not-detected: [...336] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3493] [Unknown][Unrated] + idle: [...336] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3493] + not-detected: [...366] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3493] [Unknown][Unrated] + idle: [...366] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3493] + not-detected: [..1254] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5544] [Unknown][Unrated] + idle: [..1254] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5544] + not-detected: [..1306] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5544] [Unknown][Unrated] + idle: [..1306] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5544] + not-detected: [..1621] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5550] [Unknown][Unrated] + idle: [..1621] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5550] + not-detected: [..1684] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5550] [Unknown][Unrated] + idle: [..1684] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5550] + not-detected: [...575] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1455] [Unknown][Unrated] + idle: [...575] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1455] + not-detected: [...645] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1455] [Unknown][Unrated] + idle: [...645] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1455] + not-detected: [..1790] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5555] [Unknown][Unrated] + idle: [..1790] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5555] + not-detected: [..1867] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5555] [Unknown][Unrated] + idle: [..1867] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5555] + not-detected: [...432] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1461] [Unknown][Unrated] + idle: [...432] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1461] + not-detected: [...475] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1461] [Unknown][Unrated] + idle: [...475] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1461] + not-detected: [...868] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5560] [Unknown][Unrated] + idle: [...868] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5560] + not-detected: [...937] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5560] [Unknown][Unrated] + idle: [...937] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5560] + not-detected: [...520] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3517] [Unknown][Unrated] + idle: [...520] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3517] + not-detected: [...795] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5566] [Unknown][Unrated] + idle: [...795] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5566] + not-detected: [...551] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3517] [Unknown][Unrated] + idle: [...551] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3517] + not-detected: [...860] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5566] [Unknown][Unrated] + idle: [...860] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5566] + not-detected: [..1441] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][52673] [Unknown][Unrated] + idle: [..1441] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][52673] + not-detected: [..1505] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][52673] [Unknown][Unrated] + idle: [..1505] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][52673] + not-detected: [...264] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9666] [Unknown][Unrated] + idle: [...264] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9666] + not-detected: [...315] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9666] [Unknown][Unrated] + idle: [...315] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9666] + not-detected: [..1098] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3527] [Unknown][Unrated] + idle: [..1098] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3527] + not-detected: [..1157] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3527] [Unknown][Unrated] + idle: [..1157] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3527] + not-detected: [...625] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7625] [Unknown][Unrated] + idle: [...625] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7625] + not-detected: [...712] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7625] [Unknown][Unrated] + idle: [...712] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7625] + not-detected: [..1539] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7627] [Unknown][Unrated] + idle: [..1539] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7627] + not-detected: [..1799] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50636] [Unknown][Unrated] + idle: [..1799] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50636] + not-detected: [..1614] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7627] [Unknown][Unrated] + idle: [..1614] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7627] + not-detected: [..1858] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50636] [Unknown][Unrated] + idle: [..1858] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50636] + not-detected: [...370] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][44501] [Unknown][Unrated] + idle: [...370] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][44501] + not-detected: [....90] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][17877] [Unknown][Unrated] + idle: [....90] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][17877] + not-detected: [...414] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][44501] [Unknown][Unrated] + idle: [...414] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][44501] + guessed: [..1773] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1494] [Citrix][Network][Acceptable] + idle: [..1773] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1494] + not-detected: [..1021] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][13782] [Unknown][Unrated] + idle: [..1021] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][13782] + not-detected: [...119] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][17877] [Unknown][Unrated] + idle: [...119] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][17877] + guessed: [..1836] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1494] [Citrix][Network][Acceptable] + idle: [..1836] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1494] + not-detected: [..1175] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][13783] [Unknown][Unrated] + idle: [..1175] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][13783] + not-detected: [..1084] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][13782] [Unknown][Unrated] + idle: [..1084] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][13782] + not-detected: [..1232] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][13783] [Unknown][Unrated] + idle: [..1232] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][13783] + not-detected: [...688] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3546] [Unknown][Unrated] + idle: [...688] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3546] + not-detected: [...759] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3546] [Unknown][Unrated] + idle: [...759] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3546] + not-detected: [..1488] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1500] [Unknown][Unrated] + idle: [..1488] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1500] + not-detected: [..1561] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1500] [Unknown][Unrated] + idle: [..1561] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1500] + not-detected: [..1244] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1501] [Unknown][Unrated] + idle: [..1244] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1501] + not-detected: [..1316] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1501] [Unknown][Unrated] + idle: [..1316] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1501] + not-detected: [..1482] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1503] [Unknown][Unrated] + idle: [..1482] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1503] + not-detected: [..1256] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3551] [Unknown][Unrated] + idle: [..1256] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3551] + not-detected: [..1567] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1503] [Unknown][Unrated] + idle: [..1567] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1503] + not-detected: [..1304] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3551] [Unknown][Unrated] + idle: [..1304] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3551] + not-detected: [....96] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][65000] [Unknown][Unrated] + idle: [....96] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][65000] + not-detected: [...113] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][65000] [Unknown][Unrated] + idle: [...113] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][65000] + guessed: [...843] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1521] [Oracle][Database][Acceptable] + idle: [...843] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1521] + guessed: [...904] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1521] [Oracle][Database][Acceptable] + idle: [...904] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1521] + not-detected: [...344] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1524] [Unknown][Unrated] + idle: [...344] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1524] + not-detected: [...399] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1524] [Unknown][Unrated] + idle: [...399] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1524] + not-detected: [..1039] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3580] [Unknown][Unrated] + idle: [..1039] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3580] + not-detected: [...107] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7676] [Unknown][Unrated] + idle: [...107] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7676] + not-detected: [..1116] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3580] [Unknown][Unrated] + idle: [..1116] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3580] + not-detected: [..1072] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1533] [Unknown][Unrated] + idle: [..1072] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1533] + not-detected: [...143] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7676] [Unknown][Unrated] + idle: [...143] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7676] + not-detected: [..1125] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1533] [Unknown][Unrated] + idle: [..1125] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1533] + not-detected: [...356] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5631] [Unknown][Unrated] + idle: [...356] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5631] + not-detected: [...387] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5631] [Unknown][Unrated] + idle: [...387] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5631] + not-detected: [..1697] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5633] [Unknown][Unrated] + idle: [..1697] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5633] + not-detected: [..1760] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5633] [Unknown][Unrated] + idle: [..1760] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5633] + not-detected: [..1829] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][42510] [Unknown][Unrated] + idle: [..1829] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][42510] + not-detected: [..1902] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][42510] [Unknown][Unrated] + idle: [..1902] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][42510] + not-detected: [..1528] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1556] [Unknown][Unrated] + idle: [..1528] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1556] + not-detected: [..1605] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1556] [Unknown][Unrated] + idle: [..1605] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1556] + guessed: [..1328] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20000] [DNP3][IoT-Scada][Acceptable] + idle: [..1328] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20000] + guessed: [..1417] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20000] [DNP3][IoT-Scada][Acceptable] + idle: [..1417] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20000] + not-detected: [..1475] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5666] [Unknown][Unrated] + idle: [..1475] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5666] + not-detected: [..1574] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5666] [Unknown][Unrated] + idle: [..1574] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5666] + not-detected: [...580] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20005] [Unknown][Unrated] + idle: [...580] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20005] + not-detected: [...640] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20005] [Unknown][Unrated] + idle: [...640] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20005] + not-detected: [...948] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][28201] [Unknown][Unrated] + idle: [...948] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][28201] + not-detected: [..1007] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][28201] [Unknown][Unrated] + idle: [..1007] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][28201] + not-detected: [..1784] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1580] [Unknown][Unrated] + idle: [..1784] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1580] + not-detected: [..1873] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1580] [Unknown][Unrated] + idle: [..1873] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1580] + not-detected: [..1839] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5678] [Unknown][Unrated] + idle: [..1839] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5678] + not-detected: [..1922] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5678] [Unknown][Unrated] + idle: [..1922] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5678] + not-detected: [...915] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5679] [Unknown][Unrated] + idle: [...915] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5679] + not-detected: [...190] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1583] [Unknown][Unrated] + idle: [...190] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1583] + not-detected: [...982] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5679] [Unknown][Unrated] + idle: [...982] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5679] + not-detected: [...225] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1583] [Unknown][Unrated] + idle: [...225] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1583] + not-detected: [....95] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1594] [Unknown][Unrated] + idle: [....95] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1594] + not-detected: [...114] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1594] [Unknown][Unrated] + idle: [...114] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1594] + not-detected: [...458] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7741] [Unknown][Unrated] + idle: [...458] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7741] + not-detected: [...490] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7741] [Unknown][Unrated] + idle: [...490] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7741] + not-detected: [...540] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20031] [Unknown][Unrated] + idle: [...540] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20031] + not-detected: [...873] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1600] [Unknown][Unrated] + idle: [...873] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1600] + not-detected: [...607] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20031] [Unknown][Unrated] + idle: [...607] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20031] + not-detected: [...932] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1600] [Unknown][Unrated] + idle: [...932] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1600] + not-detected: [...801] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][17988] [Unknown][Unrated] + idle: [...801] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][17988] + not-detected: [...854] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][17988] [Unknown][Unrated] + idle: [...854] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][17988] + not-detected: [...890] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3659] [Unknown][Unrated] + idle: [...890] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3659] + not-detected: [...965] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3659] [Unknown][Unrated] + idle: [...965] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3659] + not-detected: [..1737] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][52822] [Unknown][Unrated] + idle: [..1737] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][52822] + not-detected: [...804] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5718] [Unknown][Unrated] + idle: [...804] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5718] + not-detected: [..1817] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][52822] [Unknown][Unrated] + idle: [..1817] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][52822] + not-detected: [...851] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5718] [Unknown][Unrated] + idle: [...851] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5718] + not-detected: [....91] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7777] [Unknown][Unrated] + idle: [....91] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7777] + not-detected: [...913] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7778] [Unknown][Unrated] + idle: [...913] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7778] + not-detected: [...518] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5730] [Unknown][Unrated] + idle: [...518] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5730] + not-detected: [...118] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7777] [Unknown][Unrated] + idle: [...118] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7777] + not-detected: [...984] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7778] [Unknown][Unrated] + idle: [...984] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7778] + not-detected: [...553] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5730] [Unknown][Unrated] + idle: [...553] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5730] + not-detected: [..1594] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][26214] [Unknown][Unrated] + idle: [..1594] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][26214] + not-detected: [..1656] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][26214] [Unknown][Unrated] + idle: [..1656] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][26214] + not-detected: [..1838] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3689] [Unknown][Unrated] + idle: [..1838] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3689] + not-detected: [...565] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][65129] [Unknown][Unrated] + idle: [...565] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][65129] + not-detected: [...186] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1641] [Unknown][Unrated] + idle: [...186] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1641] + not-detected: [..1923] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3689] [Unknown][Unrated] + idle: [..1923] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3689] + not-detected: [..1093] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3690] [Unknown][Unrated] + idle: [..1093] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3690] + not-detected: [...655] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][65129] [Unknown][Unrated] + idle: [...655] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][65129] + not-detected: [...229] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1641] [Unknown][Unrated] + idle: [...229] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1641] + not-detected: [..1162] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3690] [Unknown][Unrated] + idle: [..1162] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3690] + not-detected: [...922] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50800] [Unknown][Unrated] + idle: [...922] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50800] + not-detected: [...134] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][52848] [Unknown][Unrated] + idle: [...134] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][52848] + not-detected: [...975] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50800] [Unknown][Unrated] + idle: [...975] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50800] + not-detected: [...158] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][52848] [Unknown][Unrated] + idle: [...158] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][52848] + not-detected: [..1589] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3703] [Unknown][Unrated] + idle: [..1589] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3703] + not-detected: [...888] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][18040] [Unknown][Unrated] + idle: [...888] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][18040] + not-detected: [..1661] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3703] [Unknown][Unrated] + idle: [..1661] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3703] + not-detected: [...382] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7800] [Unknown][Unrated] + idle: [...382] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7800] + not-detected: [...967] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][18040] [Unknown][Unrated] + idle: [...967] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][18040] + not-detected: [...402] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7800] [Unknown][Unrated] + idle: [...402] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7800] + not-detected: [...724] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1658] [Unknown][Unrated] + idle: [...724] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1658] + not-detected: [...781] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1658] [Unknown][Unrated] + idle: [...781] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1658] + not-detected: [...722] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16000] [Unknown][Unrated] + idle: [...722] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16000] + not-detected: [...783] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16000] [Unknown][Unrated] + idle: [...783] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16000] + not-detected: [...354] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16001] [Unknown][Unrated] + idle: [...354] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16001] + not-detected: [...389] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16001] [Unknown][Unrated] + idle: [...389] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16001] + not-detected: [...384] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1666] [Unknown][Unrated] + idle: [...384] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1666] + not-detected: [...400] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1666] [Unknown][Unrated] + idle: [...400] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1666] + not-detected: [...334] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][52869] [Unknown][Unrated] + idle: [...334] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][52869] + not-detected: [...368] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][52869] [Unknown][Unrated] + idle: [...368] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][52869] + not-detected: [..1472] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16012] [Unknown][Unrated] + idle: [..1472] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16012] + not-detected: [..1577] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16012] [Unknown][Unrated] + idle: [..1577] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16012] + not-detected: [...698] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16016] [Unknown][Unrated] + idle: [...698] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16016] + not-detected: [...749] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16016] [Unknown][Unrated] + idle: [...749] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16016] + not-detected: [..1738] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16018] [Unknown][Unrated] + idle: [..1738] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16018] + not-detected: [..1816] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16018] [Unknown][Unrated] + idle: [..1816] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16018] + not-detected: [...743] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9876] [Unknown][Unrated] + idle: [...743] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9876] + not-detected: [..1893] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9877] [Unknown][Unrated] + idle: [..1893] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9877] + not-detected: [...812] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9876] [Unknown][Unrated] + idle: [...812] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9876] + not-detected: [..1959] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9877] [Unknown][Unrated] + idle: [..1959] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9877] + not-detected: [..1023] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9878] [Unknown][Unrated] + idle: [..1023] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9878] + not-detected: [..1082] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9878] [Unknown][Unrated] + idle: [..1082] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9878] + not-detected: [....51] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1687] [Unknown][Unrated] + idle: [....51] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1687] + not-detected: [...440] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1688] [Unknown][Unrated] + idle: [...440] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1688] + not-detected: [....77] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1687] [Unknown][Unrated] + idle: [....77] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1687] + not-detected: [...467] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1688] [Unknown][Unrated] + idle: [...467] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1688] + not-detected: [...337] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3737] [Unknown][Unrated] + idle: [...337] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3737] + not-detected: [...365] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3737] [Unknown][Unrated] + idle: [...365] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3737] + not-detected: [..1296] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1700] [Unknown][Unrated] + idle: [..1296] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1700] + not-detected: [..1354] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1700] [Unknown][Unrated] + idle: [..1354] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1700] + guessed: [...375] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5800] [VNC][RemoteAccess][Acceptable] + idle: [...375] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5800] + not-detected: [..1374] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5801] [Unknown][Unrated] + idle: [..1374] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5801] + guessed: [...409] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5800] [VNC][RemoteAccess][Acceptable] + idle: [...409] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5800] + not-detected: [..1445] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5801] [Unknown][Unrated] + idle: [..1445] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5801] + not-detected: [...995] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5802] [Unknown][Unrated] + idle: [...995] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5802] + not-detected: [...188] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9898] [Unknown][Unrated] + idle: [...188] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9898] + not-detected: [..1052] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5802] [Unknown][Unrated] + idle: [..1052] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5802] + not-detected: [...227] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9898] [Unknown][Unrated] + idle: [...227] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9898] + not-detected: [...881] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9900] [Unknown][Unrated] + idle: [...881] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9900] + not-detected: [...924] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9900] [Unknown][Unrated] + idle: [...924] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9900] + not-detected: [...172] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][14000] [Unknown][Unrated] + idle: [...172] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][14000] + not-detected: [...202] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][14000] [Unknown][Unrated] + idle: [...202] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][14000] + not-detected: [...629] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5810] [Unknown][Unrated] + idle: [...629] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5810] + not-detected: [...708] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5810] [Unknown][Unrated] + idle: [...708] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5810] + not-detected: [...430] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5811] [Unknown][Unrated] + idle: [...430] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5811] + not-detected: [...477] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5811] [Unknown][Unrated] + idle: [...477] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5811] + not-detected: [..1221] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1717] [Unknown][Unrated] + idle: [..1221] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1717] + not-detected: [...953] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][18101] [Unknown][Unrated] + idle: [...953] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][18101] + not-detected: [..1002] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][18101] [Unknown][Unrated] + idle: [..1002] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][18101] + not-detected: [..1277] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1717] [Unknown][Unrated] + idle: [..1277] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1717] + not-detected: [...872] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3766] [Unknown][Unrated] + idle: [...872] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3766] + not-detected: [...721] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1718] [Unknown][Unrated] + idle: [...721] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1718] + not-detected: [..1469] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5815] [Unknown][Unrated] + idle: [..1469] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5815] + not-detected: [...933] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3766] [Unknown][Unrated] + idle: [...933] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3766] + not-detected: [...784] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1718] [Unknown][Unrated] + idle: [...784] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1718] + guessed: [...537] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1719] [H323][VoIP][Acceptable] + idle: [...537] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1719] + not-detected: [..1532] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5815] [Unknown][Unrated] + idle: [..1532] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5815] + guessed: [...610] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1719] [H323][VoIP][Acceptable] + idle: [...610] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1719] + guessed: [....34] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1720] [H323][VoIP][Acceptable] + idle: [....34] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1720] + not-detected: [...719] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1721] [Unknown][Unrated] + idle: [...719] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1721] + guessed: [....65] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1720] [H323][VoIP][Acceptable] + idle: [....65] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1720] + not-detected: [...786] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1721] [Unknown][Unrated] + idle: [...786] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1721] + not-detected: [....30] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1723] [Unknown][Unrated] + idle: [....30] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1723] + not-detected: [....69] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1723] [Unknown][Unrated] + idle: [....69] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1723] + not-detected: [...112] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9917] [Unknown][Unrated] + idle: [...112] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9917] + not-detected: [...139] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9917] [Unknown][Unrated] + idle: [...139] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9917] + not-detected: [...129] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5822] [Unknown][Unrated] + idle: [...129] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5822] + not-detected: [...255] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][11967] [Unknown][Unrated] + idle: [...255] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][11967] + not-detected: [...163] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5822] [Unknown][Unrated] + idle: [...163] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5822] + not-detected: [...283] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][11967] [Unknown][Unrated] + idle: [...283] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][11967] + not-detected: [...187] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5825] [Unknown][Unrated] + idle: [...187] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5825] + not-detected: [...228] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5825] [Unknown][Unrated] + idle: [...228] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5825] + not-detected: [...420] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3784] [Unknown][Unrated] + idle: [...420] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3784] + not-detected: [...446] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3784] [Unknown][Unrated] + idle: [...446] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3784] + not-detected: [....94] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16080] [Unknown][Unrated] + idle: [....94] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16080] + not-detected: [...115] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16080] [Unknown][Unrated] + idle: [...115] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16080] + not-detected: [...729] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9943] [Unknown][Unrated] + idle: [...729] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9943] + not-detected: [...776] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9943] [Unknown][Unrated] + idle: [...776] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9943] + not-detected: [..1251] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3800] [Unknown][Unrated] + idle: [..1251] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3800] + not-detected: [...499] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9944] [Unknown][Unrated] + idle: [...499] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9944] + not-detected: [..1309] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3800] [Unknown][Unrated] + idle: [..1309] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3800] + not-detected: [...800] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3801] [Unknown][Unrated] + idle: [...800] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3801] + not-detected: [...532] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9944] [Unknown][Unrated] + idle: [...532] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9944] + not-detected: [...855] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3801] [Unknown][Unrated] + idle: [...855] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3801] + not-detected: [...596] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5850] [Unknown][Unrated] + idle: [...596] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5850] + not-detected: [..1626] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1755] [Unknown][Unrated] + idle: [..1626] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1755] + not-detected: [...659] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5850] [Unknown][Unrated] + idle: [...659] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5850] + not-detected: [..1715] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1755] [Unknown][Unrated] + idle: [..1715] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1755] + not-detected: [...986] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][12000] [Unknown][Unrated] + idle: [...986] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][12000] + not-detected: [..1061] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][12000] [Unknown][Unrated] + idle: [..1061] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][12000] + not-detected: [...545] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1761] [Unknown][Unrated] + idle: [...545] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1761] + not-detected: [...358] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3809] [Unknown][Unrated] + idle: [...358] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3809] + not-detected: [...602] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1761] [Unknown][Unrated] + idle: [...602] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1761] + not-detected: [...385] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3809] [Unknown][Unrated] + idle: [...385] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3809] + not-detected: [..1641] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5859] [Unknown][Unrated] + idle: [..1641] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5859] + not-detected: [..1700] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5859] [Unknown][Unrated] + idle: [..1700] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5859] + not-detected: [..1889] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5862] [Unknown][Unrated] + idle: [..1889] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5862] + not-detected: [...291] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3814] [Unknown][Unrated] + idle: [...291] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3814] + not-detected: [..1963] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5862] [Unknown][Unrated] + idle: [..1963] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5862] + not-detected: [...502] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7911] [Unknown][Unrated] + idle: [...502] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7911] + not-detected: [...329] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3814] [Unknown][Unrated] + idle: [...329] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3814] + not-detected: [...529] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7911] [Unknown][Unrated] + idle: [...529] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7911] + not-detected: [..1847] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7920] [Unknown][Unrated] + idle: [..1847] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7920] + not-detected: [...879] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9968] [Unknown][Unrated] + idle: [...879] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9968] + not-detected: [..1350] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16113] [Unknown][Unrated] + idle: [..1350] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16113] + not-detected: [..1914] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7920] [Unknown][Unrated] + idle: [..1914] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7920] + not-detected: [..1171] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7921] [Unknown][Unrated] + idle: [..1171] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7921] + not-detected: [...926] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9968] [Unknown][Unrated] + idle: [...926] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9968] + not-detected: [..1426] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16113] [Unknown][Unrated] + idle: [..1426] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16113] + not-detected: [..1236] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7921] [Unknown][Unrated] + idle: [..1236] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7921] + not-detected: [...125] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3826] [Unknown][Unrated] + idle: [...125] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3826] + not-detected: [...357] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3827] [Unknown][Unrated] + idle: [...357] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3827] + not-detected: [...167] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3826] [Unknown][Unrated] + idle: [...167] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3826] + not-detected: [..1787] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3828] [Unknown][Unrated] + idle: [..1787] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3828] + not-detected: [...386] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3827] [Unknown][Unrated] + idle: [...386] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3827] + not-detected: [..1870] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3828] [Unknown][Unrated] + idle: [..1870] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3828] + not-detected: [..1027] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5877] [Unknown][Unrated] + idle: [..1027] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5877] + not-detected: [..1104] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1782] [Unknown][Unrated] + idle: [..1104] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1782] + not-detected: [..1078] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5877] [Unknown][Unrated] + idle: [..1078] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5877] + not-detected: [..1151] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1782] [Unknown][Unrated] + idle: [..1151] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1782] + not-detected: [..1014] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1783] [Unknown][Unrated] + idle: [..1014] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1783] + not-detected: [..1091] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1783] [Unknown][Unrated] + idle: [..1091] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1783] + not-detected: [..1674] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20221] [Unknown][Unrated] + idle: [..1674] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20221] + not-detected: [..1753] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20221] [Unknown][Unrated] + idle: [..1753] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20221] + not-detected: [...342] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20222] [Unknown][Unrated] + idle: [...342] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20222] + not-detected: [...360] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20222] [Unknown][Unrated] + idle: [...360] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20222] + not-detected: [...848] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7937] [Unknown][Unrated] + idle: [...848] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7937] + not-detected: [..1197] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7938] [Unknown][Unrated] + idle: [..1197] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7938] + not-detected: [...899] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7937] [Unknown][Unrated] + idle: [...899] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7937] + not-detected: [..1259] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7938] [Unknown][Unrated] + idle: [..1259] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7938] + not-detected: [..1841] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1801] [Unknown][Unrated] + idle: [..1841] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1801] + not-detected: [..1920] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1801] [Unknown][Unrated] + idle: [..1920] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1801] + not-detected: [...885] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][34571] [Unknown][Unrated] + idle: [...885] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][34571] + not-detected: [...614] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3851] [Unknown][Unrated] + idle: [...614] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3851] + not-detected: [...970] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][34571] [Unknown][Unrated] + idle: [...970] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][34571] + not-detected: [...590] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][34572] [Unknown][Unrated] + idle: [...590] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][34572] + not-detected: [...683] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3851] [Unknown][Unrated] + idle: [...683] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3851] + guessed: [....10] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5900] [VNC][RemoteAccess][Acceptable] + idle: [....10] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5900] + not-detected: [..1046] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][34573] [Unknown][Unrated] + idle: [..1046] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][34573] + not-detected: [...665] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][34572] [Unknown][Unrated] + idle: [...665] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][34572] + guessed: [...838] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5901] [VNC][RemoteAccess][Acceptable] + idle: [...838] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5901] + not-detected: [...453] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1805] [Unknown][Unrated] + idle: [...453] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1805] + guessed: [....21] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5900] [VNC][RemoteAccess][Acceptable] + idle: [....21] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5900] + not-detected: [..1691] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9998] [Unknown][Unrated] + idle: [..1691] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9998] + not-detected: [..1109] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][34573] [Unknown][Unrated] + idle: [..1109] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][34573] + not-detected: [..1022] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5902] [Unknown][Unrated] + idle: [..1022] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5902] + guessed: [...909] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5901] [VNC][RemoteAccess][Acceptable] + idle: [...909] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5901] + not-detected: [...495] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1805] [Unknown][Unrated] + idle: [...495] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1805] + not-detected: [..1766] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9998] [Unknown][Unrated] + idle: [..1766] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9998] + not-detected: [..1534] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][55055] [Unknown][Unrated] + idle: [..1534] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][55055] + not-detected: [..1083] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5902] [Unknown][Unrated] + idle: [..1083] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5902] + not-detected: [...796] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9999] [Unknown][Unrated] + idle: [...796] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9999] + not-detected: [...103] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5903] [Unknown][Unrated] + idle: [...103] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5903] + not-detected: [..1791] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][55056] [Unknown][Unrated] + idle: [..1791] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][55056] + not-detected: [..1619] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][55055] [Unknown][Unrated] + idle: [..1619] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][55055] + not-detected: [...859] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9999] [Unknown][Unrated] + idle: [...859] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9999] + guessed: [...539] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10000] [CiscoVPN][VPN][Acceptable] + idle: [...539] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10000] + not-detected: [..1653] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5904] [Unknown][Unrated] + idle: [..1653] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5904] + not-detected: [...147] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5903] [Unknown][Unrated] + idle: [...147] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5903] + not-detected: [..1866] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][55056] [Unknown][Unrated] + idle: [..1866] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][55056] + guessed: [...608] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10000] [CiscoVPN][VPN][Acceptable] + idle: [...608] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10000] + not-detected: [..1718] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5904] [Unknown][Unrated] + idle: [..1718] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5904] + not-detected: [...577] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10001] [Unknown][Unrated] + idle: [...577] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10001] + not-detected: [...643] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10001] [Unknown][Unrated] + idle: [...643] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10001] + not-detected: [...535] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5906] [Unknown][Unrated] + idle: [...535] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5906] + not-detected: [...272] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10002] [Unknown][Unrated] + idle: [...272] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10002] + not-detected: [...733] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10003] [Unknown][Unrated] + idle: [...733] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10003] + not-detected: [..1029] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5907] [Unknown][Unrated] + idle: [..1029] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5907] + not-detected: [...612] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5906] [Unknown][Unrated] + idle: [...612] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5906] + not-detected: [...307] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10002] [Unknown][Unrated] + idle: [...307] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10002] + not-detected: [...822] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10003] [Unknown][Unrated] + idle: [...822] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10003] + guessed: [..1940] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1812] [Radius][Network][Acceptable] + idle: [..1940] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1812] + not-detected: [..1076] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5907] [Unknown][Unrated] + idle: [..1076] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5907] + not-detected: [...626] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10004] [Unknown][Unrated] + idle: [...626] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10004] + guessed: [..1982] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1812] [Radius][Network][Acceptable] + idle: [..1982] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1812] + not-detected: [...711] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10004] [Unknown][Unrated] + idle: [...711] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10004] + not-detected: [..1298] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5910] [Unknown][Unrated] + idle: [..1298] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5910] + not-detected: [..1774] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5911] [Unknown][Unrated] + idle: [..1774] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5911] + not-detected: [..1352] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5910] [Unknown][Unrated] + idle: [..1352] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5910] + not-detected: [..1835] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5911] [Unknown][Unrated] + idle: [..1835] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5911] + not-detected: [...421] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10009] [Unknown][Unrated] + idle: [...421] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10009] + not-detected: [...803] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10010] [Unknown][Unrated] + idle: [...803] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10010] + not-detected: [...445] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10009] [Unknown][Unrated] + idle: [...445] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10009] + not-detected: [..1803] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5915] [Unknown][Unrated] + idle: [..1803] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5915] + not-detected: [...852] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10010] [Unknown][Unrated] + idle: [...852] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10010] + not-detected: [..1925] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10012] [Unknown][Unrated] + idle: [..1925] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10012] + not-detected: [..1854] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5915] [Unknown][Unrated] + idle: [..1854] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5915] + not-detected: [..1969] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10012] [Unknown][Unrated] + idle: [..1969] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10012] + not-detected: [..1348] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3869] [Unknown][Unrated] + idle: [..1348] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3869] + not-detected: [..1397] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3869] [Unknown][Unrated] + idle: [..1397] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3869] + not-detected: [..1372] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3871] [Unknown][Unrated] + idle: [..1372] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3871] + not-detected: [..1447] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3871] [Unknown][Unrated] + idle: [..1447] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3871] + not-detected: [...769] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5922] [Unknown][Unrated] + idle: [...769] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5922] + not-detected: [...828] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5922] [Unknown][Unrated] + idle: [...828] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5922] + not-detected: [..1805] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5925] [Unknown][Unrated] + idle: [..1805] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5925] + not-detected: [..1852] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5925] [Unknown][Unrated] + idle: [..1852] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5925] + not-detected: [...798] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3878] [Unknown][Unrated] + idle: [...798] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3878] + not-detected: [...857] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3878] [Unknown][Unrated] + idle: [...857] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3878] + not-detected: [..1216] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10024] [Unknown][Unrated] + idle: [..1216] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10024] + not-detected: [....89] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3880] [Unknown][Unrated] + idle: [....89] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3880] + not-detected: [..1536] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10025] [Unknown][Unrated] + idle: [..1536] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10025] + not-detected: [..1282] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10024] [Unknown][Unrated] + idle: [..1282] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10024] + not-detected: [...120] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3880] [Unknown][Unrated] + idle: [...120] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3880] + not-detected: [..1617] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10025] [Unknown][Unrated] + idle: [..1617] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10025] + not-detected: [...728] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1839] [Unknown][Unrated] + idle: [...728] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1839] + not-detected: [...777] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1839] [Unknown][Unrated] + idle: [...777] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1839] + not-detected: [...269] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1840] [Unknown][Unrated] + idle: [...269] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1840] + not-detected: [..1430] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3889] [Unknown][Unrated] + idle: [..1430] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3889] + not-detected: [...310] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1840] [Unknown][Unrated] + idle: [...310] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1840] + not-detected: [..1516] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3889] [Unknown][Unrated] + idle: [..1516] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3889] + not-detected: [..1522] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5950] [Unknown][Unrated] + idle: [..1522] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5950] + not-detected: [..1601] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5950] [Unknown][Unrated] + idle: [..1601] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5950] + not-detected: [..1388] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7999] [Unknown][Unrated] + idle: [..1388] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7999] + not-detected: [..1461] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7999] [Unknown][Unrated] + idle: [..1461] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7999] + not-detected: [..1292] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5952] [Unknown][Unrated] + idle: [..1292] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5952] + not-detected: [...427] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8000] [Unknown][Unrated] + idle: [...427] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8000] + not-detected: [..1358] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5952] [Unknown][Unrated] + idle: [..1358] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5952] + not-detected: [..1344] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8001] [Unknown][Unrated] + idle: [..1344] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8001] + not-detected: [...624] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3905] [Unknown][Unrated] + idle: [...624] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3905] + not-detected: [...480] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8000] [Unknown][Unrated] + idle: [...480] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8000] + not-detected: [..1401] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8001] [Unknown][Unrated] + idle: [..1401] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8001] + not-detected: [...713] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3905] [Unknown][Unrated] + idle: [...713] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3905] + not-detected: [...633] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8002] [Unknown][Unrated] + idle: [...633] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8002] + not-detected: [...704] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8002] [Unknown][Unrated] + idle: [...704] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8002] + not-detected: [...500] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1862] [Unknown][Unrated] + idle: [...500] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1862] + not-detected: [..1176] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8007] [Unknown][Unrated] + idle: [..1176] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8007] + not-detected: [..1936] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1863] [Unknown][Unrated] + idle: [..1936] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1863] + not-detected: [...531] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1862] [Unknown][Unrated] + idle: [...531] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1862] + not-detected: [...169] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5959] [Unknown][Unrated] + idle: [...169] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5959] + guessed: [..1394] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8008] [CiscoVPN][VPN][Acceptable] + idle: [..1394] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8008] + not-detected: [..1231] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8007] [Unknown][Unrated] + idle: [..1231] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8007] + not-detected: [..1986] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1863] [Unknown][Unrated] + idle: [..1986] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1863] + not-detected: [..1142] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5960] [Unknown][Unrated] + idle: [..1142] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5960] + not-detected: [...865] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1864] [Unknown][Unrated] + idle: [...865] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1864] + not-detected: [...205] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5959] [Unknown][Unrated] + idle: [...205] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5959] + guessed: [..1455] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8008] [CiscoVPN][VPN][Acceptable] + idle: [..1455] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8008] + not-detected: [..1336] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5961] [Unknown][Unrated] + idle: [..1336] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5961] + not-detected: [..1205] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5960] [Unknown][Unrated] + idle: [..1205] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5960] + not-detected: [...940] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1864] [Unknown][Unrated] + idle: [...940] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1864] + guessed: [...621] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8009] [AJP][Web][Acceptable] + idle: [...621] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8009] + not-detected: [..1947] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5962] [Unknown][Unrated] + idle: [..1947] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5962] + not-detected: [..1743] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3914] [Unknown][Unrated] + idle: [..1743] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3914] + not-detected: [..1409] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5961] [Unknown][Unrated] + idle: [..1409] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5961] + guessed: [...923] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8010] [AJP][Web][Acceptable] + idle: [...923] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8010] + guessed: [...676] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8009] [AJP][Web][Acceptable] + idle: [...676] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8009] + not-detected: [..1975] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5962] [Unknown][Unrated] + idle: [..1975] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5962] + not-detected: [..1478] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8011] [Unknown][Unrated] + idle: [..1478] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8011] + guessed: [...974] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8010] [AJP][Web][Acceptable] + idle: [...974] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8010] + not-detected: [..1811] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3914] [Unknown][Unrated] + idle: [..1811] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3914] + not-detected: [...343] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5963] [Unknown][Unrated] + idle: [...343] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5963] + not-detected: [..1571] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8011] [Unknown][Unrated] + idle: [..1571] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8011] + not-detected: [...359] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5963] [Unknown][Unrated] + idle: [...359] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5963] + not-detected: [...300] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3918] [Unknown][Unrated] + idle: [...300] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3918] + not-detected: [...320] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3918] [Unknown][Unrated] + idle: [...320] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3918] + not-detected: [..1652] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3920] [Unknown][Unrated] + idle: [..1652] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3920] + not-detected: [..1719] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3920] [Unknown][Unrated] + idle: [..1719] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3920] + not-detected: [...717] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1875] [Unknown][Unrated] + idle: [...717] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1875] + not-detected: [...788] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1875] [Unknown][Unrated] + idle: [...788] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1875] + not-detected: [...519] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8021] [Unknown][Unrated] + idle: [...519] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8021] + not-detected: [..1789] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8022] [Unknown][Unrated] + idle: [..1789] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8022] + not-detected: [...552] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8021] [Unknown][Unrated] + idle: [...552] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8021] + not-detected: [..1868] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8022] [Unknown][Unrated] + idle: [..1868] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8022] + not-detected: [..1383] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8031] [Unknown][Unrated] + idle: [..1383] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8031] + not-detected: [..1466] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8031] [Unknown][Unrated] + idle: [..1466] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8031] + not-detected: [...513] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10082] [Unknown][Unrated] + idle: [...513] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10082] + not-detected: [..1776] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][63331] [Unknown][Unrated] + idle: [..1776] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][63331] + not-detected: [...942] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5987] [Unknown][Unrated] + idle: [...942] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5987] + not-detected: [...558] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10082] [Unknown][Unrated] + idle: [...558] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10082] + not-detected: [..1881] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][63331] [Unknown][Unrated] + idle: [..1881] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][63331] + not-detected: [..1013] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5987] [Unknown][Unrated] + idle: [..1013] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5987] + not-detected: [...570] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5988] [Unknown][Unrated] + idle: [...570] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5988] + not-detected: [...897] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5989] [Unknown][Unrated] + idle: [...897] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5989] + not-detected: [...650] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5988] [Unknown][Unrated] + idle: [...650] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5988] + not-detected: [...958] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5989] [Unknown][Unrated] + idle: [...958] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5989] + not-detected: [...256] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3945] [Unknown][Unrated] + idle: [...256] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3945] + not-detected: [...839] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8042] [Unknown][Unrated] + idle: [...839] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8042] + not-detected: [...282] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3945] [Unknown][Unrated] + idle: [...282] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3945] + not-detected: [...908] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8042] [Unknown][Unrated] + idle: [...908] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8042] + not-detected: [...992] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1900] [Unknown][Unrated] + idle: [...992] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1900] + not-detected: [..1744] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][65389] [Unknown][Unrated] + idle: [..1744] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][65389] + not-detected: [..1055] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1900] [Unknown][Unrated] + idle: [..1055] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1900] + not-detected: [...258] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8045] [Unknown][Unrated] + idle: [...258] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8045] + not-detected: [..1810] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][65389] [Unknown][Unrated] + idle: [..1810] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][65389] + not-detected: [..1064] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5998] [Unknown][Unrated] + idle: [..1064] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5998] + not-detected: [...280] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8045] [Unknown][Unrated] + idle: [...280] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8045] + not-detected: [..1133] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5998] [Unknown][Unrated] + idle: [..1133] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5998] + not-detected: [...628] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5999] [Unknown][Unrated] + idle: [...628] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5999] + not-detected: [...709] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5999] [Unknown][Unrated] + idle: [...709] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5999] + not-detected: [....50] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6000] [Unknown][Unrated] + idle: [....50] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6000] + not-detected: [..1481] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6001] [Unknown][Unrated] + idle: [..1481] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6001] + not-detected: [....78] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6000] [Unknown][Unrated] + idle: [....78] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6000] + not-detected: [..1568] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6001] [Unknown][Unrated] + idle: [..1568] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6001] + not-detected: [..1392] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6002] [Unknown][Unrated] + idle: [..1392] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6002] + not-detected: [..1457] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6002] [Unknown][Unrated] + idle: [..1457] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6002] + not-detected: [..1217] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6003] [Unknown][Unrated] + idle: [..1217] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6003] + not-detected: [..1741] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6004] [Unknown][Unrated] + idle: [..1741] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6004] + not-detected: [..1281] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6003] [Unknown][Unrated] + idle: [..1281] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6003] + not-detected: [..1944] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6005] [Unknown][Unrated] + idle: [..1944] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6005] + not-detected: [..1813] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6004] [Unknown][Unrated] + idle: [..1813] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6004] + not-detected: [..1978] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6005] [Unknown][Unrated] + idle: [..1978] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6005] + not-detected: [..1695] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6006] [Unknown][Unrated] + idle: [..1695] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6006] + not-detected: [..1762] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6006] [Unknown][Unrated] + idle: [..1762] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6006] + not-detected: [..1190] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6007] [Unknown][Unrated] + idle: [..1190] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6007] + not-detected: [..1266] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6007] [Unknown][Unrated] + idle: [..1266] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6007] + not-detected: [..1347] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6009] [Unknown][Unrated] + idle: [..1347] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6009] + not-detected: [..1398] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6009] [Unknown][Unrated] + idle: [..1398] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6009] + not-detected: [...847] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1914] [Unknown][Unrated] + idle: [...847] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1914] + not-detected: [...900] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1914] [Unknown][Unrated] + idle: [...900] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1914] + not-detected: [...292] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][24444] [Unknown][Unrated] + idle: [...292] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][24444] + not-detected: [...328] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][24444] [Unknown][Unrated] + idle: [...328] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][24444] + not-detected: [...955] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3971] [Unknown][Unrated] + idle: [...955] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3971] + not-detected: [..1000] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3971] [Unknown][Unrated] + idle: [..1000] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3971] + not-detected: [...517] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6025] [Unknown][Unrated] + idle: [...517] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6025] + not-detected: [...554] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6025] [Unknown][Unrated] + idle: [...554] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6025] + not-detected: [...875] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][12174] [Unknown][Unrated] + idle: [...875] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][12174] + guessed: [..1547] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1935] [RTMP][Media][Acceptable] + idle: [..1547] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1935] + not-detected: [...930] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][12174] [Unknown][Unrated] + idle: [...930] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][12174] + guessed: [..1606] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1935] [RTMP][Media][Acceptable] + idle: [..1606] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1935] + guessed: [....33] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8080] [HTTP_Proxy][Web][Acceptable] + idle: [....33] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8080] + not-detected: [..1442] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8081] [Unknown][Unrated] + idle: [..1442] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8081] + guessed: [....66] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8080] [HTTP_Proxy][Web][Acceptable] + idle: [....66] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8080] + not-detected: [..1504] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8081] [Unknown][Unrated] + idle: [..1504] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8081] + not-detected: [..1518] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3986] [Unknown][Unrated] + idle: [..1518] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3986] + not-detected: [...736] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8082] [Unknown][Unrated] + idle: [...736] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8082] + not-detected: [..1648] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8083] [Unknown][Unrated] + idle: [..1648] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8083] + not-detected: [..1580] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3986] [Unknown][Unrated] + idle: [..1580] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3986] + not-detected: [...819] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8082] [Unknown][Unrated] + idle: [...819] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8082] + not-detected: [..1896] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8084] [Unknown][Unrated] + idle: [..1896] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8084] + not-detected: [..1723] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8083] [Unknown][Unrated] + idle: [..1723] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8083] + not-detected: [..1956] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8084] [Unknown][Unrated] + idle: [..1956] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8084] + not-detected: [..1147] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8085] [Unknown][Unrated] + idle: [..1147] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8085] + not-detected: [..1200] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8085] [Unknown][Unrated] + idle: [..1200] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8085] + not-detected: [...346] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8086] [Unknown][Unrated] + idle: [...346] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8086] + not-detected: [..1043] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8087] [Unknown][Unrated] + idle: [..1043] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8087] + not-detected: [...397] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8086] [Unknown][Unrated] + idle: [...397] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8086] + not-detected: [..1218] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8088] [Unknown][Unrated] + idle: [..1218] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8088] + not-detected: [..1112] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8087] [Unknown][Unrated] + idle: [..1112] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8087] + not-detected: [..1280] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8088] [Unknown][Unrated] + idle: [..1280] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8088] + not-detected: [..1094] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8089] [Unknown][Unrated] + idle: [..1094] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8089] + not-detected: [..1161] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8089] [Unknown][Unrated] + idle: [..1161] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8089] + not-detected: [...846] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8090] [Unknown][Unrated] + idle: [...846] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8090] + not-detected: [...901] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8090] [Unknown][Unrated] + idle: [...901] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8090] + not-detected: [..1474] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1947] [Unknown][Unrated] + idle: [..1474] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1947] + not-detected: [...691] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3995] [Unknown][Unrated] + idle: [...691] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3995] + not-detected: [..1575] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1947] [Unknown][Unrated] + idle: [..1575] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1947] + not-detected: [...756] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3995] [Unknown][Unrated] + idle: [...756] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3995] + not-detected: [..1890] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8093] [Unknown][Unrated] + idle: [..1890] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8093] + not-detected: [..1962] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8093] [Unknown][Unrated] + idle: [..1962] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8093] + not-detected: [..1692] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3998] [Unknown][Unrated] + idle: [..1692] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3998] + not-detected: [....87] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][14238] [Unknown][Unrated] + idle: [....87] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][14238] + not-detected: [..1371] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][51103] [Unknown][Unrated] + idle: [..1371] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][51103] + not-detected: [..1765] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3998] [Unknown][Unrated] + idle: [..1765] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3998] + not-detected: [...122] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][14238] [Unknown][Unrated] + idle: [...122] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][14238] + not-detected: [..1448] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][51103] [Unknown][Unrated] + idle: [..1448] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][51103] + not-detected: [...182] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4000] [Unknown][Unrated] + idle: [...182] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4000] + not-detected: [..1842] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4001] [Unknown][Unrated] + idle: [..1842] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4001] + not-detected: [...233] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4000] [Unknown][Unrated] + idle: [...233] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4000] + not-detected: [..1919] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4001] [Unknown][Unrated] + idle: [..1919] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4001] + not-detected: [..1484] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4002] [Unknown][Unrated] + idle: [..1484] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4002] + not-detected: [..1565] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4002] [Unknown][Unrated] + idle: [..1565] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4002] + not-detected: [...634] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8099] [Unknown][Unrated] + idle: [...634] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8099] + not-detected: [...105] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4003] [Unknown][Unrated] + idle: [...105] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4003] + not-detected: [...703] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8099] [Unknown][Unrated] + idle: [...703] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8099] + not-detected: [...501] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8100] [Unknown][Unrated] + idle: [...501] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8100] + not-detected: [..1290] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4004] [Unknown][Unrated] + idle: [..1290] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4004] + not-detected: [...145] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4003] [Unknown][Unrated] + idle: [...145] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4003] + not-detected: [..1360] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4004] [Unknown][Unrated] + idle: [..1360] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4004] + not-detected: [...530] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8100] [Unknown][Unrated] + idle: [...530] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8100] + not-detected: [...374] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4005] [Unknown][Unrated] + idle: [...374] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4005] + not-detected: [...410] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4005] [Unknown][Unrated] + idle: [...410] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4005] + not-detected: [...335] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4006] [Unknown][Unrated] + idle: [...335] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4006] + not-detected: [...367] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4006] [Unknown][Unrated] + idle: [...367] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4006] + not-detected: [..1781] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6059] [Unknown][Unrated] + idle: [..1781] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6059] + not-detected: [..1876] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6059] [Unknown][Unrated] + idle: [..1876] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6059] + not-detected: [..1164] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1971] [Unknown][Unrated] + idle: [..1164] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1971] + not-detected: [..1250] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1972] [Unknown][Unrated] + idle: [..1250] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1972] + not-detected: [..1243] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1971] [Unknown][Unrated] + idle: [..1243] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1971] + not-detected: [..1310] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1972] [Unknown][Unrated] + idle: [..1310] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1972] + not-detected: [...880] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1974] [Unknown][Unrated] + idle: [...880] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1974] + not-detected: [...925] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1974] [Unknown][Unrated] + idle: [...925] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1974] + not-detected: [..1892] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1984] [Unknown][Unrated] + idle: [..1892] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1984] + not-detected: [..1960] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1984] [Unknown][Unrated] + idle: [..1960] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1984] + not-detected: [...615] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10180] [Unknown][Unrated] + idle: [...615] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10180] + not-detected: [...682] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10180] [Unknown][Unrated] + idle: [...682] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10180] + not-detected: [..1645] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4045] [Unknown][Unrated] + idle: [..1645] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4045] + not-detected: [..1726] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4045] [Unknown][Unrated] + idle: [..1726] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4045] + not-detected: [..1322] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][57294] [Unknown][Unrated] + idle: [..1322] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][57294] + not-detected: [..1319] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1998] [Unknown][Unrated] + idle: [..1319] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1998] + not-detected: [..1423] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][57294] [Unknown][Unrated] + idle: [..1423] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][57294] + not-detected: [..1378] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1998] [Unknown][Unrated] + idle: [..1378] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1998] + not-detected: [...764] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1999] [Unknown][Unrated] + idle: [...764] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1999] + not-detected: [...263] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][40911] [Unknown][Unrated] + idle: [...263] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][40911] + guessed: [..1631] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2000] [CiscoSkinny][VoIP][Acceptable] + idle: [..1631] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2000] + not-detected: [...833] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1999] [Unknown][Unrated] + idle: [...833] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1999] + not-detected: [...316] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][40911] [Unknown][Unrated] + idle: [...316] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][40911] + guessed: [..1710] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2000] [CiscoSkinny][VoIP][Acceptable] + idle: [..1710] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2000] + not-detected: [...355] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2001] [Unknown][Unrated] + idle: [...355] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2001] + not-detected: [..1496] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2002] [Unknown][Unrated] + idle: [..1496] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2002] + not-detected: [...388] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2001] [Unknown][Unrated] + idle: [...388] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2001] + not-detected: [..1553] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2002] [Unknown][Unrated] + idle: [..1553] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2002] + not-detected: [..1185] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2003] [Unknown][Unrated] + idle: [..1185] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2003] + not-detected: [..1381] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6100] [Unknown][Unrated] + idle: [..1381] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6100] + not-detected: [..1271] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2003] [Unknown][Unrated] + idle: [..1271] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2003] + not-detected: [...893] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2004] [Unknown][Unrated] + idle: [...893] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2004] + not-detected: [..1468] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6100] [Unknown][Unrated] + idle: [..1468] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6100] + not-detected: [..1035] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6101] [Unknown][Unrated] + idle: [..1035] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6101] + not-detected: [...962] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2004] [Unknown][Unrated] + idle: [...962] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2004] + not-detected: [...101] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2005] [Unknown][Unrated] + idle: [...101] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2005] + not-detected: [..1120] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6101] [Unknown][Unrated] + idle: [..1120] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6101] + not-detected: [..1693] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2006] [Unknown][Unrated] + idle: [..1693] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2006] + not-detected: [...149] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2005] [Unknown][Unrated] + idle: [...149] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2005] + not-detected: [..1764] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2006] [Unknown][Unrated] + idle: [..1764] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2006] + not-detected: [..1432] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2007] [Unknown][Unrated] + idle: [..1432] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2007] + not-detected: [..1822] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2008] [Unknown][Unrated] + idle: [..1822] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2008] + not-detected: [..1514] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2007] [Unknown][Unrated] + idle: [..1514] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2007] + not-detected: [..1884] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2008] [Unknown][Unrated] + idle: [..1884] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2008] + not-detected: [...951] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2009] [Unknown][Unrated] + idle: [...951] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2009] + not-detected: [..1677] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2010] [Unknown][Unrated] + idle: [..1677] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2010] + not-detected: [..1004] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2009] [Unknown][Unrated] + idle: [..1004] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2009] + not-detected: [...582] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6106] [Unknown][Unrated] + idle: [...582] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6106] + not-detected: [..1750] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2010] [Unknown][Unrated] + idle: [..1750] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2010] + not-detected: [...673] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6106] [Unknown][Unrated] + idle: [...673] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6106] + not-detected: [...515] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2013] [Unknown][Unrated] + idle: [...515] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2013] + not-detected: [...556] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2013] [Unknown][Unrated] + idle: [...556] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2013] + not-detected: [..1172] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6112] [Unknown][Unrated] + idle: [..1172] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6112] + not-detected: [..1235] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6112] [Unknown][Unrated] + idle: [..1235] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6112] + not-detected: [...340] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2020] [Unknown][Unrated] + idle: [...340] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2020] + not-detected: [..1376] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2021] [Unknown][Unrated] + idle: [..1376] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2021] + not-detected: [...362] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2020] [Unknown][Unrated] + idle: [...362] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2020] + not-detected: [..1453] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2021] [Unknown][Unrated] + idle: [..1453] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2021] + not-detected: [...741] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2022] [Unknown][Unrated] + idle: [...741] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2022] + not-detected: [..1540] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10215] [Unknown][Unrated] + idle: [..1540] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10215] + not-detected: [...814] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2022] [Unknown][Unrated] + idle: [...814] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2022] + not-detected: [..1613] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10215] [Unknown][Unrated] + idle: [..1613] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10215] + not-detected: [...766] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][12265] [Unknown][Unrated] + idle: [...766] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][12265] + not-detected: [...831] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][12265] [Unknown][Unrated] + idle: [...831] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][12265] + not-detected: [..1786] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6123] [Unknown][Unrated] + idle: [..1786] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6123] + not-detected: [..1871] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6123] [Unknown][Unrated] + idle: [..1871] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6123] + not-detected: [....53] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2030] [Unknown][Unrated] + idle: [....53] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2030] + not-detected: [....75] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2030] [Unknown][Unrated] + idle: [....75] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2030] + not-detected: [..1888] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2033] [Unknown][Unrated] + idle: [..1888] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2033] + not-detected: [..1735] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6129] [Unknown][Unrated] + idle: [..1735] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6129] + not-detected: [..1964] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2033] [Unknown][Unrated] + idle: [..1964] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2033] + not-detected: [..1945] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2034] [Unknown][Unrated] + idle: [..1945] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2034] + not-detected: [..1819] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6129] [Unknown][Unrated] + idle: [..1819] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6129] + not-detected: [..1977] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2034] [Unknown][Unrated] + idle: [..1977] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2034] + not-detected: [..1031] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2035] [Unknown][Unrated] + idle: [..1031] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2035] + not-detected: [..1074] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2035] [Unknown][Unrated] + idle: [..1074] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2035] + not-detected: [...916] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8180] [Unknown][Unrated] + idle: [...916] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8180] + not-detected: [...981] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8180] [Unknown][Unrated] + idle: [...981] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8180] + not-detected: [...746] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8181] [Unknown][Unrated] + idle: [...746] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8181] + not-detected: [...809] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8181] [Unknown][Unrated] + idle: [...809] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8181] + not-detected: [....86] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2038] [Unknown][Unrated] + idle: [....86] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2038] + not-detected: [...123] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2038] [Unknown][Unrated] + idle: [...123] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2038] + not-detected: [..1785] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2040] [Unknown][Unrated] + idle: [..1785] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2040] + not-detected: [..1872] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2040] [Unknown][Unrated] + idle: [..1872] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2040] + not-detected: [..1258] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2041] [Unknown][Unrated] + idle: [..1258] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2041] + not-detected: [..1302] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2041] [Unknown][Unrated] + idle: [..1302] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2041] + not-detected: [..1140] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2042] [Unknown][Unrated] + idle: [..1140] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2042] + not-detected: [..1545] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2043] [Unknown][Unrated] + idle: [..1545] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2043] + not-detected: [..1207] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2042] [Unknown][Unrated] + idle: [..1207] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2042] + not-detected: [..1608] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2043] [Unknown][Unrated] + idle: [..1608] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2043] + not-detected: [..1779] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2045] [Unknown][Unrated] + idle: [..1779] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2045] + not-detected: [..1878] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2045] [Unknown][Unrated] + idle: [..1878] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2045] + not-detected: [...350] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2046] [Unknown][Unrated] + idle: [...350] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2046] + not-detected: [...208] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][30718] [Unknown][Unrated] + idle: [...208] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][30718] + not-detected: [...587] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2047] [Unknown][Unrated] + idle: [...587] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2047] + not-detected: [...393] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2046] [Unknown][Unrated] + idle: [...393] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2046] + not-detected: [...248] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][30718] [Unknown][Unrated] + idle: [...248] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][30718] + not-detected: [..1935] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49152] [Unknown][Unrated] + idle: [..1935] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49152] + not-detected: [...696] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8192] [Unknown][Unrated] + idle: [...696] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8192] + not-detected: [...668] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2047] [Unknown][Unrated] + idle: [...668] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2047] + not-detected: [...637] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2048] [Unknown][Unrated] + idle: [...637] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2048] + not-detected: [...185] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32768] [Unknown][Unrated] + idle: [...185] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32768] + not-detected: [..1987] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49152] [Unknown][Unrated] + idle: [..1987] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49152] + not-detected: [..1343] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49153] [Unknown][Unrated] + idle: [..1343] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49153] + not-detected: [..1225] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32769] [Unknown][Unrated] + idle: [..1225] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32769] + not-detected: [...751] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8192] [Unknown][Unrated] + idle: [...751] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8192] + guessed: [..1825] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2049] [NFS][DataTransfer][Acceptable] + idle: [..1825] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2049] + not-detected: [...944] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....1] [Unknown][Unrated] + idle: [...944] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....1] + not-detected: [...700] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2048] [Unknown][Unrated] + idle: [...700] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2048] + not-detected: [...542] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8193] [Unknown][Unrated] + idle: [...542] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8193] + not-detected: [...230] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32768] [Unknown][Unrated] + idle: [...230] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32768] + not-detected: [..1402] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49153] [Unknown][Unrated] + idle: [..1402] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49153] + not-detected: [..1775] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32770] [Unknown][Unrated] + idle: [..1775] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32770] + not-detected: [..1300] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32769] [Unknown][Unrated] + idle: [..1300] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32769] + not-detected: [...802] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49154] [Unknown][Unrated] + idle: [...802] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49154] + guessed: [..1906] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2049] [NFS][DataTransfer][Acceptable] + idle: [..1906] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2049] + not-detected: [..1193] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8194] [Unknown][Unrated] + idle: [..1193] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8194] + not-detected: [..1011] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....1] [Unknown][Unrated] + idle: [..1011] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....1] + not-detected: [...605] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8193] [Unknown][Unrated] + idle: [...605] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8193] + not-detected: [...853] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49154] [Unknown][Unrated] + idle: [...853] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49154] + not-detected: [..1834] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32770] [Unknown][Unrated] + idle: [..1834] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32770] + not-detected: [..1887] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10243] [Unknown][Unrated] + idle: [..1887] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10243] + not-detected: [..1480] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32771] [Unknown][Unrated] + idle: [..1480] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32771] + not-detected: [..1263] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8194] [Unknown][Unrated] + idle: [..1263] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8194] + not-detected: [...544] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....3] [Unknown][Unrated] + idle: [...544] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....3] + not-detected: [...194] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49155] [Unknown][Unrated] + idle: [...194] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49155] + not-detected: [..1569] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32771] [Unknown][Unrated] + idle: [..1569] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32771] + not-detected: [..1965] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10243] [Unknown][Unrated] + idle: [..1965] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10243] + not-detected: [..1332] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32772] [Unknown][Unrated] + idle: [..1332] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32772] + not-detected: [...793] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49156] [Unknown][Unrated] + idle: [...793] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49156] + not-detected: [...841] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....4] [Unknown][Unrated] + idle: [...841] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....4] + not-detected: [...603] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....3] [Unknown][Unrated] + idle: [...603] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....3] + not-detected: [...221] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49155] [Unknown][Unrated] + idle: [...221] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49155] + not-detected: [..1951] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49157] [Unknown][Unrated] + idle: [..1951] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49157] + not-detected: [..1413] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32772] [Unknown][Unrated] + idle: [..1413] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32772] + not-detected: [..1177] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32773] [Unknown][Unrated] + idle: [..1177] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32773] + not-detected: [...906] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....4] [Unknown][Unrated] + idle: [...906] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....4] + not-detected: [...862] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49156] [Unknown][Unrated] + idle: [...862] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49156] + not-detected: [..1971] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49157] [Unknown][Unrated] + idle: [..1971] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49157] + not-detected: [..1230] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32773] [Unknown][Unrated] + idle: [..1230] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32773] + not-detected: [...954] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49158] [Unknown][Unrated] + idle: [...954] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49158] + not-detected: [...585] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32774] [Unknown][Unrated] + idle: [...585] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32774] + not-detected: [....54] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....6] [Unknown][Unrated] + idle: [....54] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....6] + not-detected: [..1627] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49159] [Unknown][Unrated] + idle: [..1627] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49159] + not-detected: [..1001] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49158] [Unknown][Unrated] + idle: [..1001] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49158] + not-detected: [..1843] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32775] [Unknown][Unrated] + idle: [..1843] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32775] + not-detected: [...670] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32774] [Unknown][Unrated] + idle: [...670] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32774] + not-detected: [...514] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....7] [Unknown][Unrated] + idle: [...514] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....7] + not-detected: [....74] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....6] [Unknown][Unrated] + idle: [....74] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....6] + not-detected: [..1918] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32775] [Unknown][Unrated] + idle: [..1918] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32775] + not-detected: [..1848] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49160] [Unknown][Unrated] + idle: [..1848] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49160] + not-detected: [..1714] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49159] [Unknown][Unrated] + idle: [..1714] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49159] + not-detected: [...588] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8200] [Unknown][Unrated] + idle: [...588] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8200] + not-detected: [...557] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....7] [Unknown][Unrated] + idle: [...557] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....7] + not-detected: [...509] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32776] [Unknown][Unrated] + idle: [...509] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32776] + not-detected: [..1913] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49160] [Unknown][Unrated] + idle: [..1913] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49160] + not-detected: [..1489] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49161] [Unknown][Unrated] + idle: [..1489] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49161] + not-detected: [..1642] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32777] [Unknown][Unrated] + idle: [..1642] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32777] + not-detected: [...667] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8200] [Unknown][Unrated] + idle: [...667] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8200] + not-detected: [...562] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32776] [Unknown][Unrated] + idle: [...562] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32776] + not-detected: [...371] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....9] [Unknown][Unrated] + idle: [...371] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][....9] + not-detected: [..1729] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32777] [Unknown][Unrated] + idle: [..1729] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32777] + not-detected: [..1560] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49161] [Unknown][Unrated] + idle: [..1560] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49161] + not-detected: [...413] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....9] [Unknown][Unrated] + idle: [...413] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][....9] + not-detected: [....93] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32778] [Unknown][Unrated] + idle: [....93] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32778] + not-detected: [...767] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49163] [Unknown][Unrated] + idle: [...767] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49163] + not-detected: [...792] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32779] [Unknown][Unrated] + idle: [...792] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32779] + not-detected: [...116] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32778] [Unknown][Unrated] + idle: [...116] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32778] + not-detected: [...863] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32779] [Unknown][Unrated] + idle: [...863] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32779] + not-detected: [...830] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49163] [Unknown][Unrated] + idle: [...830] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49163] + not-detected: [..1174] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6156] [Unknown][Unrated] + idle: [..1174] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6156] + not-detected: [...503] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32780] [Unknown][Unrated] + idle: [...503] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32780] + not-detected: [...727] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49165] [Unknown][Unrated] + idle: [...727] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49165] + not-detected: [...528] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32780] [Unknown][Unrated] + idle: [...528] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32780] + not-detected: [..1373] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...13] [Unknown][Unrated] + idle: [..1373] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...13] + not-detected: [..1233] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6156] [Unknown][Unrated] + idle: [..1233] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6156] + not-detected: [...276] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32781] [Unknown][Unrated] + idle: [...276] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32781] + not-detected: [...778] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49165] [Unknown][Unrated] + idle: [...778] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49165] + not-detected: [..1446] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...13] [Unknown][Unrated] + idle: [..1446] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...13] + not-detected: [...770] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32782] [Unknown][Unrated] + idle: [...770] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32782] + not-detected: [...303] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32781] [Unknown][Unrated] + idle: [...303] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32781] + not-detected: [..1739] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49167] [Unknown][Unrated] + idle: [..1739] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49167] + not-detected: [...998] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32783] [Unknown][Unrated] + idle: [...998] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32783] + not-detected: [...827] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32782] [Unknown][Unrated] + idle: [...827] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32782] + not-detected: [...380] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4111] [Unknown][Unrated] + idle: [...380] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4111] + not-detected: [..1815] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49167] [Unknown][Unrated] + idle: [..1815] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49167] + not-detected: [..1527] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32784] [Unknown][Unrated] + idle: [..1527] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32784] + not-detected: [..1049] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32783] [Unknown][Unrated] + idle: [..1049] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32783] + not-detected: [...404] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4111] [Unknown][Unrated] + idle: [...404] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4111] + not-detected: [..1596] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32784] [Unknown][Unrated] + idle: [..1596] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32784] + not-detected: [..1833] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2065] [Unknown][Unrated] + idle: [..1833] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2065] + not-detected: [...436] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32785] [Unknown][Unrated] + idle: [...436] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][32785] + not-detected: [...289] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...17] [Unknown][Unrated] + idle: [...289] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...17] + not-detected: [..1908] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2065] [Unknown][Unrated] + idle: [..1908] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2065] + not-detected: [...471] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32785] [Unknown][Unrated] + idle: [...471] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][32785] + not-detected: [...331] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...17] [Unknown][Unrated] + idle: [...331] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...17] + not-detected: [..1139] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...19] [Unknown][Unrated] + idle: [..1139] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...19] + not-detected: [..1647] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2068] [Unknown][Unrated] + idle: [..1647] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2068] + guessed: [..1320] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...20] [FTP_DATA][Download][Acceptable] + idle: [..1320] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...20] + not-detected: [..1208] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...19] [Unknown][Unrated] + idle: [..1208] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...19] + not-detected: [..1724] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2068] [Unknown][Unrated] + idle: [..1724] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2068] + guessed: [..1425] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...20] [FTP_DATA][Download][Acceptable] + idle: [..1425] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...20] + guessed: [....11] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...21] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....11] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...21] + guessed: [....40] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...22] [SSH][RemoteAccess][Acceptable] + idle: [....40] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...22] + guessed: [....20] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...21] [FTP_CONTROL][Download][Unsafe] + RISK: Unsafe Protocol + idle: [....20] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...21] + not-detected: [..1443] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49175] [Unknown][Unrated] + idle: [..1443] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49175] + guessed: [....16] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...23] [Telnet][RemoteAccess][Unsafe] + RISK: Unsafe Protocol + idle: [....16] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...23] + not-detected: [..1503] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49175] [Unknown][Unrated] + idle: [..1503] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49175] + not-detected: [...426] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49176] [Unknown][Unrated] + idle: [...426] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49176] + not-detected: [...135] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...24] [Unknown][Unrated] + idle: [...135] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...24] + guessed: [....17] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...23] [Telnet][RemoteAccess][Unsafe] + RISK: Unsafe Protocol + idle: [....17] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...23] + not-detected: [...481] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49176] [Unknown][Unrated] + idle: [...481] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49176] + not-detected: [...157] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...24] [Unknown][Unrated] + idle: [...157] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...24] + guessed: [....35] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...25] [SMTP][Email][Acceptable] + end: [....35] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...25] + not-detected: [...293] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...26] [Unknown][Unrated] + idle: [...293] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...26] + not-detected: [...327] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...26] [Unknown][Unrated] + idle: [...327] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...26] + not-detected: [...765] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4125] [Unknown][Unrated] + idle: [...765] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4125] + not-detected: [...832] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4125] [Unknown][Unrated] + idle: [...832] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4125] + not-detected: [...463] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4126] [Unknown][Unrated] + idle: [...463] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4126] + not-detected: [...429] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...30] [Unknown][Unrated] + idle: [...429] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...30] + not-detected: [....56] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8222] [Unknown][Unrated] + idle: [....56] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8222] + not-detected: [...485] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4126] [Unknown][Unrated] + idle: [...485] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4126] + not-detected: [...478] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...30] [Unknown][Unrated] + idle: [...478] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...30] + not-detected: [....72] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8222] [Unknown][Unrated] + idle: [....72] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8222] + not-detected: [...132] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...32] [Unknown][Unrated] + idle: [...132] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...32] + not-detected: [...353] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4129] [Unknown][Unrated] + idle: [...353] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4129] + not-detected: [..1640] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...33] [Unknown][Unrated] + idle: [..1640] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...33] + not-detected: [...160] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...32] [Unknown][Unrated] + idle: [...160] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...32] + not-detected: [..1701] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...33] [Unknown][Unrated] + idle: [..1701] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...33] + not-detected: [...390] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4129] [Unknown][Unrated] + idle: [...390] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4129] + not-detected: [..1368] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...37] [Unknown][Unrated] + idle: [..1368] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...37] + not-detected: [..1451] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...37] [Unknown][Unrated] + idle: [..1451] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...37] + not-detected: [...694] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...42] [Unknown][Unrated] + idle: [...694] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...42] + guessed: [..1222] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...43] [Whois-DAS][Network][Acceptable] + idle: [..1222] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...43] + not-detected: [...753] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...42] [Unknown][Unrated] + idle: [...753] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...42] + guessed: [..1276] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...43] [Whois-DAS][Network][Acceptable] + idle: [..1276] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...43] + not-detected: [..1017] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][45100] [Unknown][Unrated] + idle: [..1017] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][45100] + not-detected: [..1088] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][45100] [Unknown][Unrated] + idle: [..1088] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][45100] + not-detected: [..1485] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...49] [Unknown][Unrated] + idle: [..1485] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...49] + not-detected: [..1564] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...49] [Unknown][Unrated] + idle: [..1564] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...49] + not-detected: [...217] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2099] [Unknown][Unrated] + idle: [...217] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2099] + not-detected: [...844] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2100] [Unknown][Unrated] + idle: [...844] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2100] + not-detected: [...239] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2099] [Unknown][Unrated] + idle: [...239] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2099] + not-detected: [...903] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2100] [Unknown][Unrated] + idle: [...903] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2100] + guessed: [.....9] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...53] [DNS][Network][Acceptable] + idle: [.....9] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...53] + not-detected: [..1931] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2103] [Unknown][Unrated] + idle: [..1931] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2103] + not-detected: [..1991] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2103] [Unknown][Unrated] + idle: [..1991] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2103] + not-detected: [..1636] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2105] [Unknown][Unrated] + idle: [..1636] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2105] + not-detected: [...878] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][12345] [Unknown][Unrated] + idle: [...878] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][12345] + not-detected: [..1705] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2105] [Unknown][Unrated] + idle: [..1705] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2105] + not-detected: [...927] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][12345] [Unknown][Unrated] + idle: [...927] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][12345] + not-detected: [...176] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2106] [Unknown][Unrated] + idle: [...176] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2106] + not-detected: [...730] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2107] [Unknown][Unrated] + idle: [...730] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2107] + not-detected: [...198] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2106] [Unknown][Unrated] + idle: [...198] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2106] + not-detected: [...775] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2107] [Unknown][Unrated] + idle: [...775] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2107] + not-detected: [..1628] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8254] [Unknown][Unrated] + idle: [..1628] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8254] + not-detected: [..1713] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8254] [Unknown][Unrated] + idle: [..1713] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8254] + not-detected: [..1486] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2111] [Unknown][Unrated] + idle: [..1486] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2111] + not-detected: [..1563] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2111] [Unknown][Unrated] + idle: [..1563] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2111] + not-detected: [..1184] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...70] [Unknown][Unrated] + end: [..1184] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...70] + not-detected: [..1148] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2119] [Unknown][Unrated] + idle: [..1148] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2119] + not-detected: [..1199] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2119] [Unknown][Unrated] + idle: [..1199] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2119] + not-detected: [...595] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2121] [Unknown][Unrated] + idle: [...595] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2121] + not-detected: [...660] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2121] [Unknown][Unrated] + idle: [...660] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2121] + not-detected: [...572] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2126] [Unknown][Unrated] + idle: [...572] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2126] + not-detected: [..1196] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...79] [Unknown][Unrated] + idle: [..1196] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...79] + not-detected: [...648] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2126] [Unknown][Unrated] + idle: [...648] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2126] + not-detected: [..1260] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...79] [Unknown][Unrated] + idle: [..1260] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...79] + guessed: [....13] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...80] [HTTP][Web][Acceptable] + idle: [....13] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...80] + not-detected: [..1365] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...81] [Unknown][Unrated] + idle: [..1365] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...81] + not-detected: [..1429] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...81] [Unknown][Unrated] + idle: [..1429] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...81] + not-detected: [...466] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...82] [Unknown][Unrated] + idle: [...466] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...82] + not-detected: [...619] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...83] [Unknown][Unrated] + idle: [...619] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...83] + not-detected: [...482] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...82] [Unknown][Unrated] + idle: [...482] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...82] + not-detected: [...799] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...84] [Unknown][Unrated] + idle: [...799] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...84] + not-detected: [...678] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...83] [Unknown][Unrated] + idle: [...678] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...83] + not-detected: [..1824] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...85] [Unknown][Unrated] + idle: [..1824] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...85] + not-detected: [...856] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...84] [Unknown][Unrated] + idle: [...856] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...84] + not-detected: [..1907] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...85] [Unknown][Unrated] + idle: [..1907] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...85] + not-detected: [..1369] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2135] [Unknown][Unrated] + idle: [..1369] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2135] + not-detected: [..1450] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2135] [Unknown][Unrated] + idle: [..1450] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2135] + guessed: [..1330] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...88] [Kerberos][Network][Acceptable] + idle: [..1330] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...88] + guessed: [..1415] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...88] [Kerberos][Network][Acceptable] + idle: [..1415] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...88] + not-detected: [..1040] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...89] [Unknown][Unrated] + idle: [..1040] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...89] + not-detected: [..1895] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...90] [Unknown][Unrated] + idle: [..1895] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...90] + not-detected: [..1115] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...89] [Unknown][Unrated] + idle: [..1115] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...89] + not-detected: [..1957] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...90] [Unknown][Unrated] + idle: [..1957] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...90] + not-detected: [...177] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][61532] [Unknown][Unrated] + idle: [...177] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][61532] + not-detected: [...197] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][61532] [Unknown][Unrated] + idle: [...197] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][61532] + not-detected: [..1143] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2144] [Unknown][Unrated] + idle: [..1143] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2144] + not-detected: [..1204] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2144] [Unknown][Unrated] + idle: [..1204] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2144] + not-detected: [..1544] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8290] [Unknown][Unrated] + idle: [..1544] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8290] + not-detected: [..1609] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8290] [Unknown][Unrated] + idle: [..1609] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8290] + not-detected: [...377] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...99] [Unknown][Unrated] + idle: [...377] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][...99] + not-detected: [...124] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8291] [Unknown][Unrated] + idle: [...124] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8291] + not-detected: [...578] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8292] [Unknown][Unrated] + idle: [...578] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8292] + not-detected: [..1588] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..100] [Unknown][Unrated] + idle: [..1588] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..100] + not-detected: [...407] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...99] [Unknown][Unrated] + idle: [...407] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][...99] + not-detected: [...168] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8291] [Unknown][Unrated] + idle: [...168] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8291] + not-detected: [..1662] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..100] [Unknown][Unrated] + idle: [..1662] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..100] + not-detected: [...642] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8292] [Unknown][Unrated] + idle: [...642] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8292] + not-detected: [...918] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][14441] [Unknown][Unrated] + idle: [...918] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][14441] + not-detected: [...979] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][14441] [Unknown][Unrated] + idle: [...979] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][14441] + not-detected: [..1248] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..106] [Unknown][Unrated] + idle: [..1248] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..106] + not-detected: [...108] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][14442] [Unknown][Unrated] + idle: [...108] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][14442] + not-detected: [..1312] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..106] [Unknown][Unrated] + idle: [..1312] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..106] + not-detected: [...142] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][14442] [Unknown][Unrated] + idle: [...142] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][14442] + not-detected: [...254] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8300] [Unknown][Unrated] + idle: [...254] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8300] + not-detected: [...763] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..109] [Unknown][Unrated] + idle: [...763] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..109] + not-detected: [...284] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8300] [Unknown][Unrated] + idle: [...284] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8300] + not-detected: [...834] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..109] [Unknown][Unrated] + idle: [...834] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..109] + guessed: [....32] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..110] [POP3][Email][Unsafe] + RISK: Unsafe Protocol + idle: [....32] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..110] + guessed: [....67] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..110] [POP3][Email][Unsafe] + RISK: Unsafe Protocol + idle: [....67] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..110] + not-detected: [.....5] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..111] [Unknown][Unrated] + idle: [.....5] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..111] + not-detected: [..1792] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2160] [Unknown][Unrated] + idle: [..1792] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2160] + not-detected: [....25] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..111] [Unknown][Unrated] + idle: [....25] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..111] + not-detected: [..1865] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2160] [Unknown][Unrated] + idle: [..1865] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2160] + not-detected: [...465] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2161] [Unknown][Unrated] + idle: [...465] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2161] + not-detected: [....12] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..113] [Unknown][Unrated] + end: [....12] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..113] + not-detected: [...483] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2161] [Unknown][Unrated] + idle: [...483] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2161] + not-detected: [..1593] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..119] [Unknown][Unrated] + idle: [..1593] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..119] + not-detected: [..1657] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..119] [Unknown][Unrated] + idle: [..1657] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..119] + not-detected: [..1034] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2170] [Unknown][Unrated] + idle: [..1034] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2170] + not-detected: [..1121] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2170] [Unknown][Unrated] + idle: [..1121] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2170] + not-detected: [...523] [ip4][..tcp] [.....172.16.0.8][36061] -> [...64.13.134.52][..113] [Unknown][Unrated] + end: [...523] [ip4][..tcp] [.....172.16.0.8][36061] -> [...64.13.134.52][..113] + not-detected: [...723] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..125] [Unknown][Unrated] + idle: [...723] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..125] + not-detected: [...782] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..125] [Unknown][Unrated] + idle: [...782] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..125] + not-detected: [...425] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4224] [Unknown][Unrated] + idle: [...425] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4224] + not-detected: [...441] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4224] [Unknown][Unrated] + idle: [...441] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4224] + not-detected: [..1286] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2179] [Unknown][Unrated] + idle: [..1286] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2179] + not-detected: [..1364] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2179] [Unknown][Unrated] + idle: [..1364] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2179] + guessed: [....39] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..135] [RPC][RPC][Acceptable] + idle: [....39] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..135] + guessed: [....61] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..135] [RPC][RPC][Acceptable] + idle: [....61] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..135] + guessed: [....14] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..139] [NetBIOS][System][Acceptable] + idle: [....14] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..139] + guessed: [....19] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..139] [NetBIOS][System][Acceptable] + idle: [....19] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..139] + guessed: [..1788] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [..1788] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8333] + guessed: [..1869] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8333] [Mining][Mining][Unsafe] + RISK: Unsafe Protocol + idle: [..1869] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8333] + guessed: [...193] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2190] [TiVoConnect][Network][Safe] + idle: [...193] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2190] + not-detected: [..1327] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2191] [Unknown][Unrated] + idle: [..1327] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2191] + guessed: [...222] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2190] [TiVoConnect][Network][Safe] + idle: [...222] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2190] + guessed: [.....2] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..143] [IMAP][Email][Unsafe] + RISK: Unsafe Protocol + idle: [.....2] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..143] + not-detected: [..1418] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2191] [Unknown][Unrated] + idle: [..1418] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2191] + not-detected: [..1032] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..144] [Unknown][Unrated] + idle: [..1032] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..144] + guessed: [....28] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..143] [IMAP][Email][Unsafe] + RISK: Unsafe Protocol + idle: [....28] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..143] + not-detected: [..1123] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..144] [Unknown][Unrated] + idle: [..1123] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..144] + not-detected: [..1384] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..146] [Unknown][Unrated] + idle: [..1384] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..146] + not-detected: [..1346] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4242] [Unknown][Unrated] + idle: [..1346] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4242] + not-detected: [..1465] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..146] [Unknown][Unrated] + idle: [..1465] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..146] + not-detected: [..1399] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4242] [Unknown][Unrated] + idle: [..1399] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4242] + not-detected: [...594] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2196] [Unknown][Unrated] + idle: [...594] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2196] + not-detected: [...661] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2196] [Unknown][Unrated] + idle: [...661] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2196] + not-detected: [...506] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2200] [Unknown][Unrated] + idle: [...506] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2200] + not-detected: [...525] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2200] [Unknown][Unrated] + idle: [...525] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2200] + not-detected: [..1634] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..161] [Unknown][Unrated] + idle: [..1634] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..161] + not-detected: [..1707] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..161] [Unknown][Unrated] + idle: [..1707] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..161] + not-detected: [...504] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..163] [Unknown][Unrated] + idle: [...504] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..163] + not-detected: [...527] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..163] [Unknown][Unrated] + idle: [...527] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..163] + not-detected: [....49] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2222] [Unknown][Unrated] + idle: [....49] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2222] + not-detected: [....79] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2222] [Unknown][Unrated] + idle: [....79] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2222] + guessed: [..1891] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..179] [BGP][Network][Acceptable] + idle: [..1891] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..179] + guessed: [..1961] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..179] [BGP][Network][Acceptable] + idle: [..1961] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..179] + not-detected: [...917] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4279] [Unknown][Unrated] + idle: [...917] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4279] + not-detected: [...980] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4279] [Unknown][Unrated] + idle: [...980] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4279] + not-detected: [..1669] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8383] [Unknown][Unrated] + idle: [..1669] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8383] + not-detected: [..1733] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8383] [Unknown][Unrated] + idle: [..1733] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8383] + not-detected: [.....4] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..199] [Unknown][Unrated] + idle: [.....4] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..199] + not-detected: [....26] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..199] [Unknown][Unrated] + idle: [....26] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..199] + not-detected: [...461] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6346] [Unknown][Unrated] + idle: [...461] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6346] + not-detected: [..1851] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2251] [Unknown][Unrated] + idle: [..1851] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2251] + not-detected: [...487] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6346] [Unknown][Unrated] + idle: [...487] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6346] + not-detected: [..1910] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2251] [Unknown][Unrated] + idle: [..1910] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2251] + not-detected: [...435] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8400] [Unknown][Unrated] + idle: [...435] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8400] + not-detected: [...472] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8400] [Unknown][Unrated] + idle: [...472] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8400] + not-detected: [..1096] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8402] [Unknown][Unrated] + idle: [..1096] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8402] + not-detected: [..1159] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8402] [Unknown][Unrated] + idle: [..1159] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8402] + not-detected: [..1030] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..211] [Unknown][Unrated] + idle: [..1030] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..211] + not-detected: [..1075] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..211] [Unknown][Unrated] + idle: [..1075] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..211] + not-detected: [...564] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..212] [Unknown][Unrated] + idle: [...564] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..212] + not-detected: [...431] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2260] [Unknown][Unrated] + idle: [...431] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2260] + not-detected: [...656] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..212] [Unknown][Unrated] + idle: [...656] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..212] + not-detected: [...476] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2260] [Unknown][Unrated] + idle: [...476] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2260] + not-detected: [..1192] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..222] [Unknown][Unrated] + idle: [..1192] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..222] + not-detected: [..1264] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..222] [Unknown][Unrated] + idle: [..1264] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..222] + not-detected: [..1387] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][24800] [Unknown][Unrated] + idle: [..1387] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][24800] + not-detected: [..1699] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4321] [Unknown][Unrated] + idle: [..1699] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4321] + not-detected: [..1462] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][24800] [Unknown][Unrated] + idle: [..1462] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][24800] + not-detected: [..1758] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4321] [Unknown][Unrated] + idle: [..1758] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4321] + not-detected: [..1678] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][30951] [Unknown][Unrated] + idle: [..1678] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][30951] + not-detected: [..1749] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][30951] [Unknown][Unrated] + idle: [..1749] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][30951] + not-detected: [...536] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2288] [Unknown][Unrated] + idle: [...536] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2288] + not-detected: [...611] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2288] [Unknown][Unrated] + idle: [...611] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2288] + not-detected: [...266] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6389] [Unknown][Unrated] + idle: [...266] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6389] + not-detected: [...313] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6389] [Unknown][Unrated] + idle: [...313] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6389] + guessed: [...622] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4343] [Whois-DAS][Network][Acceptable] + idle: [...622] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4343] + not-detected: [..1524] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49400] [Unknown][Unrated] + idle: [..1524] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49400] + guessed: [...675] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4343] [Whois-DAS][Network][Acceptable] + idle: [...675] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4343] + not-detected: [..1599] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49400] [Unknown][Unrated] + idle: [..1599] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49400] + not-detected: [..1519] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8443] [Unknown][Unrated] + idle: [..1519] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8443] + not-detected: [..1579] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8443] [Unknown][Unrated] + idle: [..1579] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8443] + not-detected: [...921] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2301] [Unknown][Unrated] + idle: [...921] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2301] + not-detected: [...976] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2301] [Unknown][Unrated] + idle: [...976] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2301] + not-detected: [...419] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..254] [Unknown][Unrated] + idle: [...419] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..254] + not-detected: [..1101] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..255] [Unknown][Unrated] + idle: [..1101] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..255] + not-detected: [...447] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..254] [Unknown][Unrated] + idle: [...447] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..254] + not-detected: [..1154] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..255] [Unknown][Unrated] + idle: [..1154] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..255] + not-detected: [....37] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..256] [Unknown][Unrated] + idle: [....37] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..256] + not-detected: [....63] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..256] [Unknown][Unrated] + idle: [....63] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..256] + not-detected: [..1886] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..259] [Unknown][Unrated] + idle: [..1886] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..259] + not-detected: [...871] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][55555] [Unknown][Unrated] + idle: [...871] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][55555] + not-detected: [..1966] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..259] [Unknown][Unrated] + idle: [..1966] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..259] + not-detected: [...934] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][55555] [Unknown][Unrated] + idle: [...934] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][55555] + not-detected: [..1487] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..264] [Unknown][Unrated] + idle: [..1487] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..264] + not-detected: [..1562] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..264] [Unknown][Unrated] + idle: [..1562] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..264] + not-detected: [..1543] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2323] [Unknown][Unrated] + idle: [..1543] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2323] + not-detected: [..1610] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2323] [Unknown][Unrated] + idle: [..1610] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2323] + not-detected: [...270] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..280] [Unknown][Unrated] + idle: [...270] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..280] + not-detected: [...309] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..280] [Unknown][Unrated] + idle: [...309] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..280] + not-detected: [...695] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][51493] [Unknown][Unrated] + idle: [...695] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][51493] + not-detected: [...752] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][51493] [Unknown][Unrated] + idle: [...752] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][51493] + not-detected: [...747] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..301] [Unknown][Unrated] + idle: [...747] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..301] + not-detected: [...808] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..301] [Unknown][Unrated] + idle: [...808] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..301] + not-detected: [...579] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][55600] [Unknown][Unrated] + idle: [...579] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][55600] + not-detected: [...641] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][55600] [Unknown][Unrated] + idle: [...641] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][55600] + not-detected: [..1939] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..306] [Unknown][Unrated] + idle: [..1939] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..306] + not-detected: [..1983] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..306] [Unknown][Unrated] + idle: [..1983] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..306] + not-detected: [..1470] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8500] [Unknown][Unrated] + idle: [..1470] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8500] + not-detected: [..1531] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8500] [Unknown][Unrated] + idle: [..1531] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8500] + not-detected: [..1898] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..311] [Unknown][Unrated] + idle: [..1898] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..311] + not-detected: [..1954] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..311] [Unknown][Unrated] + idle: [..1954] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..311] + not-detected: [..1795] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2366] [Unknown][Unrated] + idle: [..1795] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2366] + not-detected: [...985] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][31038] [Unknown][Unrated] + idle: [...985] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][31038] + not-detected: [..1862] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2366] [Unknown][Unrated] + idle: [..1862] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2366] + not-detected: [..1062] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][31038] [Unknown][Unrated] + idle: [..1062] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][31038] + not-detected: [...546] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10566] [Unknown][Unrated] + idle: [...546] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10566] + not-detected: [...601] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10566] [Unknown][Unrated] + idle: [...601] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10566] + not-detected: [..1016] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2381] [Unknown][Unrated] + idle: [..1016] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2381] + not-detected: [..1089] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2381] [Unknown][Unrated] + idle: [..1089] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2381] + not-detected: [...295] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2382] [Unknown][Unrated] + idle: [...295] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2382] + not-detected: [...740] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2383] [Unknown][Unrated] + idle: [...740] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2383] + not-detected: [...325] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2382] [Unknown][Unrated] + idle: [...325] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2382] + not-detected: [...815] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2383] [Unknown][Unrated] + idle: [...815] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2383] + not-detected: [..1497] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..340] [Unknown][Unrated] + idle: [..1497] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..340] + not-detected: [..1552] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..340] [Unknown][Unrated] + idle: [..1552] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..340] + not-detected: [...417] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2393] [Unknown][Unrated] + idle: [...417] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2393] + not-detected: [..1291] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2394] [Unknown][Unrated] + idle: [..1291] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2394] + not-detected: [...449] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2393] [Unknown][Unrated] + idle: [...449] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2393] + not-detected: [..1359] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2394] [Unknown][Unrated] + idle: [..1359] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2394] + not-detected: [...991] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4443] [Unknown][Unrated] + idle: [...991] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4443] + not-detected: [..1595] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20828] [Unknown][Unrated] + idle: [..1595] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][20828] + not-detected: [..1195] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4444] [Unknown][Unrated] + idle: [..1195] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4444] + not-detected: [..1056] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4443] [Unknown][Unrated] + idle: [..1056] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4443] + not-detected: [..1655] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20828] [Unknown][Unrated] + idle: [..1655] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][20828] + not-detected: [..1261] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4444] [Unknown][Unrated] + idle: [..1261] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4444] + not-detected: [..1015] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4445] [Unknown][Unrated] + idle: [..1015] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4445] + not-detected: [..1145] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4446] [Unknown][Unrated] + idle: [..1145] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4446] + not-detected: [..1090] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4445] [Unknown][Unrated] + idle: [..1090] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4445] + not-detected: [..1202] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4446] [Unknown][Unrated] + idle: [..1202] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4446] + not-detected: [..1038] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2399] [Unknown][Unrated] + idle: [..1038] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2399] + not-detected: [..1117] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2399] [Unknown][Unrated] + idle: [..1117] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2399] + not-detected: [..1937] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2401] [Unknown][Unrated] + idle: [..1937] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2401] + not-detected: [...617] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4449] [Unknown][Unrated] + idle: [...617] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4449] + not-detected: [..1985] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2401] [Unknown][Unrated] + idle: [..1985] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2401] + not-detected: [...680] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4449] [Unknown][Unrated] + idle: [...680] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4449] + not-detected: [..1745] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6502] [Unknown][Unrated] + idle: [..1745] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6502] + not-detected: [..1809] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6502] [Unknown][Unrated] + idle: [..1809] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6502] + not-detected: [...742] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6510] [Unknown][Unrated] + idle: [...742] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6510] + not-detected: [...726] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..366] [Unknown][Unrated] + idle: [...726] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..366] + not-detected: [...813] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6510] [Unknown][Unrated] + idle: [...813] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6510] + not-detected: [...779] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..366] [Unknown][Unrated] + idle: [...779] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..366] + not-detected: [..1253] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27000] [Unknown][Unrated] + idle: [..1253] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27000] + not-detected: [...987] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10616] [Unknown][Unrated] + idle: [...987] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10616] + not-detected: [..1307] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27000] [Unknown][Unrated] + idle: [..1307] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27000] + not-detected: [..1060] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10616] [Unknown][Unrated] + idle: [..1060] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10616] + not-detected: [...731] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10617] [Unknown][Unrated] + idle: [...731] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10617] + not-detected: [...774] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10617] [Unknown][Unrated] + idle: [...774] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10617] + not-detected: [....46] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10621] [Unknown][Unrated] + idle: [....46] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10621] + not-detected: [....82] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10621] [Unknown][Unrated] + idle: [....82] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10621] + not-detected: [...131] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10626] [Unknown][Unrated] + idle: [...131] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10626] + not-detected: [...161] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10626] [Unknown][Unrated] + idle: [...161] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10626] + not-detected: [..1194] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10628] [Unknown][Unrated] + idle: [..1194] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10628] + not-detected: [..1262] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10628] [Unknown][Unrated] + idle: [..1262] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10628] + guessed: [..1844] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..389] [LDAP][System][Acceptable] + idle: [..1844] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..389] + not-detected: [....44] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10629] [Unknown][Unrated] + idle: [....44] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10629] + guessed: [..1917] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..389] [LDAP][System][Acceptable] + idle: [..1917] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..389] + not-detected: [....84] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10629] [Unknown][Unrated] + idle: [....84] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10629] + not-detected: [...210] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6543] [Unknown][Unrated] + idle: [...210] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6543] + not-detected: [...246] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6543] [Unknown][Unrated] + idle: [...246] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6543] + not-detected: [...638] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6547] [Unknown][Unrated] + idle: [...638] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6547] + not-detected: [...699] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6547] [Unknown][Unrated] + idle: [...699] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6547] + not-detected: [..1105] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..406] [Unknown][Unrated] + idle: [..1105] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..406] + not-detected: [..1385] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..407] [Unknown][Unrated] + idle: [..1385] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..407] + not-detected: [..1150] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..406] [Unknown][Unrated] + idle: [..1150] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..406] + not-detected: [..1464] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..407] [Unknown][Unrated] + idle: [..1464] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..407] + not-detected: [..1168] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8600] [Unknown][Unrated] + idle: [..1168] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8600] + not-detected: [..1239] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8600] [Unknown][Unrated] + idle: [..1239] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8600] + not-detected: [..1106] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][22939] [Unknown][Unrated] + idle: [..1106] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][22939] + not-detected: [..1149] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][22939] [Unknown][Unrated] + idle: [..1149] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][22939] + not-detected: [..1318] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..416] [Unknown][Unrated] + idle: [..1318] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..416] + not-detected: [..1479] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..417] [Unknown][Unrated] + idle: [..1479] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..417] + not-detected: [..1379] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..416] [Unknown][Unrated] + idle: [..1379] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..416] + not-detected: [..1570] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..417] [Unknown][Unrated] + idle: [..1570] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..417] + not-detected: [..1431] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6565] [Unknown][Unrated] + idle: [..1431] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6565] + not-detected: [..1515] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6565] [Unknown][Unrated] + idle: [..1515] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6565] + not-detected: [..1334] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6566] [Unknown][Unrated] + idle: [..1334] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6566] + not-detected: [..1492] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6567] [Unknown][Unrated] + idle: [..1492] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6567] + not-detected: [..1411] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6566] [Unknown][Unrated] + idle: [..1411] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6566] + not-detected: [..1557] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6567] [Unknown][Unrated] + idle: [..1557] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6567] + not-detected: [...170] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..425] [Unknown][Unrated] + idle: [...170] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..425] + not-detected: [...204] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..425] [Unknown][Unrated] + idle: [...204] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..425] + not-detected: [..1289] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..427] [Unknown][Unrated] + idle: [..1289] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..427] + not-detected: [..1361] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..427] [Unknown][Unrated] + idle: [..1361] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..427] + not-detected: [...191] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6580] [Unknown][Unrated] + idle: [...191] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6580] + not-detected: [...224] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6580] [Unknown][Unrated] + idle: [...224] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6580] + guessed: [.....1] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..443] [TLS][Web][Safe] + idle: [.....1] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..443] + not-detected: [..1435] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2492] [Unknown][Unrated] + idle: [..1435] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2492] + not-detected: [..1672] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..444] [Unknown][Unrated] + idle: [..1672] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..444] + guessed: [....29] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..443] [TLS][Web][Safe] + idle: [....29] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..443] + not-detected: [..1755] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..444] [Unknown][Unrated] + idle: [..1755] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..444] + not-detected: [..1511] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2492] [Unknown][Unrated] + idle: [..1511] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2492] + guessed: [....36] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..445] [SMBv23][System][Acceptable] + idle: [....36] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..445] + guessed: [....64] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..445] [SMBv23][System][Acceptable] + idle: [....64] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..445] + not-detected: [..1491] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2500] [Unknown][Unrated] + idle: [..1491] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2500] + not-detected: [..1558] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2500] [Unknown][Unrated] + idle: [..1558] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2500] + not-detected: [...462] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][57797] [Unknown][Unrated] + idle: [...462] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][57797] + not-detected: [...898] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4550] [Unknown][Unrated] + idle: [...898] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4550] + not-detected: [...486] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][57797] [Unknown][Unrated] + idle: [...486] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][57797] + not-detected: [...957] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4550] [Unknown][Unrated] + idle: [...957] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4550] + not-detected: [...216] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8649] [Unknown][Unrated] + idle: [...216] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8649] + not-detected: [..1294] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..458] [Unknown][Unrated] + idle: [..1294] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..458] + not-detected: [...240] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8649] [Unknown][Unrated] + idle: [...240] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8649] + not-detected: [..1356] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..458] [Unknown][Unrated] + idle: [..1356] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..458] + not-detected: [...452] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8651] [Unknown][Unrated] + idle: [...452] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8651] + not-detected: [..1390] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][61900] [Unknown][Unrated] + idle: [..1390] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][61900] + not-detected: [..1100] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8652] [Unknown][Unrated] + idle: [..1100] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8652] + not-detected: [...496] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8651] [Unknown][Unrated] + idle: [...496] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8651] + not-detected: [..1459] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][61900] [Unknown][Unrated] + idle: [..1459] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][61900] + not-detected: [..1155] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8652] [Unknown][Unrated] + idle: [..1155] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8652] + not-detected: [..1793] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8654] [Unknown][Unrated] + idle: [..1793] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8654] + not-detected: [..1864] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8654] [Unknown][Unrated] + idle: [..1864] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8654] + not-detected: [...516] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..464] [Unknown][Unrated] + idle: [...516] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..464] + guessed: [..1830] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..465] [SMTPS][Email][Safe] + idle: [..1830] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..465] + not-detected: [...555] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..464] [Unknown][Unrated] + idle: [...555] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..464] + guessed: [..1901] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..465] [SMTPS][Email][Safe] + idle: [..1901] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..465] + not-detected: [...541] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4567] [Unknown][Unrated] + idle: [...541] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4567] + not-detected: [...606] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4567] [Unknown][Unrated] + idle: [...606] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4567] + not-detected: [...349] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2522] [Unknown][Unrated] + idle: [...349] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2522] + not-detected: [...394] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2522] [Unknown][Unrated] + idle: [...394] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2522] + not-detected: [...267] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2525] [Unknown][Unrated] + idle: [...267] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2525] + not-detected: [...312] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2525] [Unknown][Unrated] + idle: [...312] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2525] + not-detected: [...837] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..481] [Unknown][Unrated] + idle: [...837] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..481] + not-detected: [...910] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..481] [Unknown][Unrated] + idle: [...910] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..481] + not-detected: [...178] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..497] [Unknown][Unrated] + idle: [...178] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..497] + not-detected: [...196] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..497] [Unknown][Unrated] + idle: [...196] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..497] + guessed: [...886] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..500] [IPSec][VPN][Safe] + idle: [...886] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..500] + guessed: [...969] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..500] [IPSec][VPN][Safe] + idle: [...969] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..500] + not-detected: [..1826] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6646] [Unknown][Unrated] + idle: [..1826] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6646] + not-detected: [..1905] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6646] [Unknown][Unrated] + idle: [..1905] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6646] + not-detected: [..1367] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2557] [Unknown][Unrated] + idle: [..1367] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2557] + not-detected: [...715] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8701] [Unknown][Unrated] + idle: [...715] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8701] + not-detected: [..1427] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2557] [Unknown][Unrated] + idle: [..1427] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2557] + not-detected: [...790] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8701] [Unknown][Unrated] + idle: [...790] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8701] + not-detected: [..1950] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..512] [Unknown][Unrated] + idle: [..1950] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..512] + not-detected: [..1972] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..512] [Unknown][Unrated] + idle: [..1972] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..512] + not-detected: [..1341] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..513] [Unknown][Unrated] + idle: [..1341] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..513] + not-detected: [..1404] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..513] [Unknown][Unrated] + idle: [..1404] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..513] + guessed: [....88] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..514] [Syslog][System][Acceptable] + idle: [....88] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..514] + not-detected: [..1623] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..515] [Unknown][Unrated] + idle: [..1623] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..515] + guessed: [...121] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..514] [Syslog][System][Acceptable] + idle: [...121] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..514] + not-detected: [..1682] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..515] [Unknown][Unrated] + idle: [..1682] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..515] + not-detected: [..1899] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6666] [Unknown][Unrated] + idle: [..1899] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6666] + not-detected: [..1953] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6666] [Unknown][Unrated] + idle: [..1953] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6666] + not-detected: [..1675] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6667] [Unknown][Unrated] + idle: [..1675] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6667] + not-detected: [..1752] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6667] [Unknown][Unrated] + idle: [..1752] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6667] + not-detected: [..1167] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6668] [Unknown][Unrated] + idle: [..1167] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6668] + not-detected: [..1135] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..524] [Unknown][Unrated] + idle: [..1135] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..524] + not-detected: [..1240] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6668] [Unknown][Unrated] + idle: [..1240] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6668] + not-detected: [..1212] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..524] [Unknown][Unrated] + idle: [..1212] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..524] + not-detected: [...180] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6669] [Unknown][Unrated] + idle: [...180] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6669] + not-detected: [...235] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6669] [Unknown][Unrated] + idle: [...235] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6669] + not-detected: [...720] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10778] [Unknown][Unrated] + idle: [...720] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][10778] + not-detected: [...785] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10778] [Unknown][Unrated] + idle: [...785] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][10778] + not-detected: [..1323] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..541] [Unknown][Unrated] + idle: [..1323] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..541] + not-detected: [..1422] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..541] [Unknown][Unrated] + idle: [..1422] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..541] + not-detected: [..1187] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..543] [Unknown][Unrated] + idle: [..1187] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..543] + not-detected: [..1670] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..544] [Unknown][Unrated] + idle: [..1670] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..544] + not-detected: [..1269] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..543] [Unknown][Unrated] + idle: [..1269] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..543] + not-detected: [..1732] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..544] [Unknown][Unrated] + idle: [..1732] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..544] + not-detected: [...956] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6689] [Unknown][Unrated] + idle: [...956] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6689] + not-detected: [...892] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..545] [Unknown][Unrated] + idle: [...892] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..545] + not-detected: [...999] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6689] [Unknown][Unrated] + idle: [...999] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6689] + not-detected: [...963] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..545] [Unknown][Unrated] + idle: [...963] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..545] + not-detected: [..1541] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6692] [Unknown][Unrated] + idle: [..1541] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6692] + guessed: [....42] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..548] [AFP][DataTransfer][Acceptable] + idle: [....42] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..548] + not-detected: [..1612] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6692] [Unknown][Unrated] + idle: [..1612] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6692] + guessed: [....59] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..548] [AFP][DataTransfer][Acceptable] + idle: [....59] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..548] + not-detected: [..1219] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][41511] [Unknown][Unrated] + idle: [..1219] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][41511] + not-detected: [..1279] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][41511] [Unknown][Unrated] + idle: [..1279] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][41511] + not-detected: [...895] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2601] [Unknown][Unrated] + idle: [...895] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2601] + not-detected: [..1245] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2602] [Unknown][Unrated] + idle: [..1245] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2602] + not-detected: [...960] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2601] [Unknown][Unrated] + idle: [...960] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2601] + guessed: [....38] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..554] [RTSP][Media][Fun] + idle: [....38] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..554] + not-detected: [..1315] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2602] [Unknown][Unrated] + idle: [..1315] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2602] + not-detected: [...290] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6699] [Unknown][Unrated] + idle: [...290] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6699] + not-detected: [..1624] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..555] [Unknown][Unrated] + idle: [..1624] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..555] + guessed: [....62] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..554] [RTSP][Media][Fun] + idle: [....62] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..554] + not-detected: [..1638] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][18988] [Unknown][Unrated] + idle: [..1638] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][18988] + not-detected: [..1717] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..555] [Unknown][Unrated] + idle: [..1717] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..555] + guessed: [...989] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2604] [OSPF][Network][Acceptable] + idle: [...989] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2604] + not-detected: [...330] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6699] [Unknown][Unrated] + idle: [...330] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6699] + not-detected: [..1703] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][18988] [Unknown][Unrated] + idle: [..1703] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][18988] + guessed: [..1058] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2604] [OSPF][Network][Acceptable] + idle: [..1058] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2604] + guessed: [....45] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2605] [BGP][Network][Acceptable] + idle: [....45] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2605] + guessed: [....83] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2605] [BGP][Network][Acceptable] + idle: [....83] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2605] + not-detected: [..1840] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2607] [Unknown][Unrated] + idle: [..1840] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2607] + not-detected: [..1921] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2607] [Unknown][Unrated] + idle: [..1921] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2607] + not-detected: [..1293] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2608] [Unknown][Unrated] + idle: [..1293] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2608] + not-detected: [..1357] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2608] [Unknown][Unrated] + idle: [..1357] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2608] + not-detected: [..1894] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..563] [Unknown][Unrated] + idle: [..1894] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..563] + not-detected: [..1958] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..563] [Unknown][Unrated] + idle: [..1958] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..563] + not-detected: [...459] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4662] [Unknown][Unrated] + idle: [...459] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4662] + not-detected: [...489] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4662] [Unknown][Unrated] + idle: [...489] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4662] + not-detected: [..1102] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][33354] [Unknown][Unrated] + idle: [..1102] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][33354] + not-detected: [..1153] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][33354] [Unknown][Unrated] + idle: [..1153] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][33354] + guessed: [.....8] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..587] [SMTP][Email][Acceptable] + idle: [.....8] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..587] + guessed: [....22] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..587] [SMTP][Email][Acceptable] + idle: [....22] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..587] + not-detected: [..1622] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2638] [Unknown][Unrated] + idle: [..1622] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2638] + not-detected: [..1683] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2638] [Unknown][Unrated] + idle: [..1683] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2638] + not-detected: [..1391] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..593] [Unknown][Unrated] + idle: [..1391] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..593] + not-detected: [..1458] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..593] [Unknown][Unrated] + idle: [..1458] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..593] + not-detected: [..1933] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8800] [Unknown][Unrated] + idle: [..1933] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8800] + not-detected: [..1019] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16992] [Unknown][Unrated] + idle: [..1019] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16992] + not-detected: [..1989] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8800] [Unknown][Unrated] + idle: [..1989] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8800] + not-detected: [..1746] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16993] [Unknown][Unrated] + idle: [..1746] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][16993] + not-detected: [..1086] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16992] [Unknown][Unrated] + idle: [..1086] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16992] + not-detected: [..1808] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16993] [Unknown][Unrated] + idle: [..1808] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][16993] + not-detected: [..1537] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..616] [Unknown][Unrated] + idle: [..1537] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..616] + not-detected: [..1616] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..616] [Unknown][Unrated] + idle: [..1616] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..616] + not-detected: [...773] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..617] [Unknown][Unrated] + idle: [...773] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..617] + not-detected: [...109] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][31337] [Unknown][Unrated] + end: [...109] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][31337] + not-detected: [...824] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..617] [Unknown][Unrated] + idle: [...824] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..617] + not-detected: [..1832] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..625] [Unknown][Unrated] + idle: [..1832] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..625] + not-detected: [..1909] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..625] [Unknown][Unrated] + idle: [..1909] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..625] + not-detected: [..1927] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][60020] [Unknown][Unrated] + idle: [..1927] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][60020] + not-detected: [..1967] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][60020] [Unknown][Unrated] + idle: [..1967] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][60020] + not-detected: [..1494] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..631] [Unknown][Unrated] + idle: [..1494] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..631] + not-detected: [..1555] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..631] [Unknown][Unrated] + idle: [..1555] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..631] + not-detected: [...627] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6779] [Unknown][Unrated] + idle: [...627] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6779] + not-detected: [..1583] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..636] [Unknown][Unrated] + idle: [..1583] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..636] + not-detected: [...710] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6779] [Unknown][Unrated] + idle: [...710] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6779] + not-detected: [..1667] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..636] [Unknown][Unrated] + idle: [..1667] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..636] + not-detected: [...299] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][62078] [Unknown][Unrated] + idle: [...299] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][62078] + not-detected: [...321] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][62078] [Unknown][Unrated] + idle: [...321] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][62078] + not-detected: [...259] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6788] [Unknown][Unrated] + idle: [...259] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6788] + not-detected: [..1740] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6789] [Unknown][Unrated] + idle: [..1740] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6789] + not-detected: [...279] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6788] [Unknown][Unrated] + idle: [...279] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6788] + not-detected: [..1814] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6789] [Unknown][Unrated] + idle: [..1814] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6789] + not-detected: [...497] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..646] [Unknown][Unrated] + idle: [...497] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..646] + not-detected: [...534] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..646] [Unknown][Unrated] + idle: [...534] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..646] + not-detected: [..1499] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6792] [Unknown][Unrated] + idle: [..1499] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6792] + not-detected: [..1495] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..648] [Unknown][Unrated] + idle: [..1495] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..648] + not-detected: [..1554] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..648] [Unknown][Unrated] + idle: [..1554] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..648] + not-detected: [..1550] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6792] [Unknown][Unrated] + idle: [..1550] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6792] + not-detected: [....99] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2701] [Unknown][Unrated] + idle: [....99] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2701] + not-detected: [..1048] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2702] [Unknown][Unrated] + idle: [..1048] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2702] + not-detected: [...151] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2701] [Unknown][Unrated] + idle: [...151] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2701] + not-detected: [..1107] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2702] [Unknown][Unrated] + idle: [..1107] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2702] + not-detected: [..1436] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2710] [Unknown][Unrated] + idle: [..1436] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2710] + not-detected: [..1510] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2710] [Unknown][Unrated] + idle: [..1510] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2710] + not-detected: [..1138] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15000] [Unknown][Unrated] + idle: [..1138] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15000] + not-detected: [..1209] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15000] [Unknown][Unrated] + idle: [..1209] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15000] + not-detected: [...877] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15002] [Unknown][Unrated] + idle: [...877] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15002] + not-detected: [...296] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..666] [Unknown][Unrated] + idle: [...296] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..666] + not-detected: [..1183] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15003] [Unknown][Unrated] + idle: [..1183] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15003] + not-detected: [...928] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15002] [Unknown][Unrated] + idle: [...928] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15002] + not-detected: [..1024] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..667] [Unknown][Unrated] + idle: [..1024] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..667] + not-detected: [...324] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..666] [Unknown][Unrated] + idle: [...324] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..666] + not-detected: [..1272] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15003] [Unknown][Unrated] + idle: [..1272] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15003] + not-detected: [..1639] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..668] [Unknown][Unrated] + idle: [..1639] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..668] + not-detected: [..1081] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..667] [Unknown][Unrated] + idle: [..1081] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..667] + not-detected: [...133] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15004] [Unknown][Unrated] + idle: [...133] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15004] + not-detected: [...302] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19101] [Unknown][Unrated] + idle: [...302] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19101] + not-detected: [..1702] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..668] [Unknown][Unrated] + idle: [..1702] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..668] + not-detected: [...732] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2717] [Unknown][Unrated] + idle: [...732] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2717] + not-detected: [...159] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15004] [Unknown][Unrated] + idle: [...159] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15004] + not-detected: [..1942] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2718] [Unknown][Unrated] + idle: [..1942] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2718] + not-detected: [...823] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2717] [Unknown][Unrated] + idle: [...823] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2717] + not-detected: [...318] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19101] [Unknown][Unrated] + idle: [...318] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19101] + not-detected: [..1980] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2718] [Unknown][Unrated] + idle: [..1980] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2718] + not-detected: [..1897] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2725] [Unknown][Unrated] + idle: [..1897] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2725] + not-detected: [..1955] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2725] [Unknown][Unrated] + idle: [..1955] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2725] + not-detected: [..1041] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8873] [Unknown][Unrated] + idle: [..1041] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8873] + not-detected: [..1114] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8873] [Unknown][Unrated] + idle: [..1114] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8873] + not-detected: [....57] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..683] [Unknown][Unrated] + idle: [....57] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..683] + not-detected: [...512] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][35500] [Unknown][Unrated] + idle: [...512] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][35500] + not-detected: [....71] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..683] [Unknown][Unrated] + idle: [....71] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..683] + not-detected: [...559] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][35500] [Unknown][Unrated] + idle: [...559] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][35500] + not-detected: [..1846] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..687] [Unknown][Unrated] + idle: [..1846] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..687] + not-detected: [..1915] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..687] [Unknown][Unrated] + idle: [..1915] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..687] + not-detected: [..1297] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..691] [Unknown][Unrated] + idle: [..1297] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..691] + not-detected: [..1353] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..691] [Unknown][Unrated] + idle: [..1353] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..691] + not-detected: [...262] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6839] [Unknown][Unrated] + idle: [...262] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6839] + not-detected: [...317] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6839] [Unknown][Unrated] + idle: [...317] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6839] + not-detected: [....41] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8888] [Unknown][Unrated] + idle: [....41] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8888] + not-detected: [....60] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8888] [Unknown][Unrated] + idle: [....60] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8888] + not-detected: [...274] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..700] [Unknown][Unrated] + idle: [...274] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..700] + not-detected: [...305] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..700] [Unknown][Unrated] + idle: [...305] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..700] + not-detected: [...950] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..705] [Unknown][Unrated] + idle: [...950] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..705] + not-detected: [..1005] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..705] [Unknown][Unrated] + idle: [..1005] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..705] + not-detected: [..1214] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8899] [Unknown][Unrated] + idle: [..1214] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8899] + not-detected: [..1284] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8899] [Unknown][Unrated] + idle: [..1284] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8899] + not-detected: [..1224] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..711] [Unknown][Unrated] + idle: [..1224] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..711] + not-detected: [..1301] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..711] [Unknown][Unrated] + idle: [..1301] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..711] + not-detected: [..1170] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..714] [Unknown][Unrated] + idle: [..1170] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..714] + not-detected: [..1237] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..714] [Unknown][Unrated] + idle: [..1237] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..714] + not-detected: [..1382] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..720] [Unknown][Unrated] + idle: [..1382] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..720] + not-detected: [..1467] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..720] [Unknown][Unrated] + idle: [..1467] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..720] + not-detected: [..1342] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..722] [Unknown][Unrated] + idle: [..1342] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..722] + not-detected: [..1403] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..722] [Unknown][Unrated] + idle: [..1403] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..722] + not-detected: [...457] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..726] [Unknown][Unrated] + idle: [...457] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..726] + not-detected: [...491] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..726] [Unknown][Unrated] + idle: [...491] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..726] + not-detected: [..1439] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27352] [Unknown][Unrated] + idle: [..1439] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27352] + not-detected: [..1801] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27353] [Unknown][Unrated] + idle: [..1801] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27353] + not-detected: [..1507] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27352] [Unknown][Unrated] + idle: [..1507] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27352] + not-detected: [..1856] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27353] [Unknown][Unrated] + idle: [..1856] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27353] + not-detected: [...189] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27355] [Unknown][Unrated] + idle: [...189] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27355] + not-detected: [...379] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27356] [Unknown][Unrated] + idle: [...379] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27356] + not-detected: [...226] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27355] [Unknown][Unrated] + idle: [...226] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27355] + not-detected: [...405] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27356] [Unknown][Unrated] + idle: [...405] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27356] + not-detected: [..1337] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][58080] [Unknown][Unrated] + idle: [..1337] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][58080] + not-detected: [..1408] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][58080] [Unknown][Unrated] + idle: [..1408] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][58080] + not-detected: [...884] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6881] [Unknown][Unrated] + idle: [...884] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6881] + not-detected: [...971] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6881] [Unknown][Unrated] + idle: [...971] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6881] + not-detected: [...631] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..749] [Unknown][Unrated] + idle: [...631] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..749] + not-detected: [...706] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..749] [Unknown][Unrated] + idle: [...706] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..749] + not-detected: [...460] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2800] [Unknown][Unrated] + idle: [...460] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2800] + not-detected: [....92] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4848] [Unknown][Unrated] + idle: [....92] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4848] + not-detected: [...488] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2800] [Unknown][Unrated] + idle: [...488] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2800] + not-detected: [...117] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4848] [Unknown][Unrated] + idle: [...117] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4848] + not-detected: [..1685] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6901] [Unknown][Unrated] + idle: [..1685] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6901] + not-detected: [..1772] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6901] [Unknown][Unrated] + idle: [..1772] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6901] + not-detected: [..1370] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2809] [Unknown][Unrated] + idle: [..1370] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2809] + not-detected: [..1449] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2809] [Unknown][Unrated] + idle: [..1449] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2809] + not-detected: [...352] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2811] [Unknown][Unrated] + idle: [...352] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2811] + not-detected: [...391] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2811] [Unknown][Unrated] + idle: [...391] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2811] + not-detected: [...218] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..765] [Unknown][Unrated] + idle: [...218] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..765] + not-detected: [...238] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..765] [Unknown][Unrated] + idle: [...238] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..765] + not-detected: [..1649] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..777] [Unknown][Unrated] + idle: [..1649] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..777] + not-detected: [..1722] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..777] [Unknown][Unrated] + idle: [..1722] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..777] + not-detected: [..1500] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..783] [Unknown][Unrated] + idle: [..1500] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..783] + not-detected: [..1549] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..783] [Unknown][Unrated] + idle: [..1549] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..783] + not-detected: [..1654] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..787] [Unknown][Unrated] + idle: [..1654] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..787] + not-detected: [..1730] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..787] [Unknown][Unrated] + idle: [..1730] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..787] + not-detected: [..1502] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][54045] [Unknown][Unrated] + idle: [..1502] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][54045] + not-detected: [..1578] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][54045] [Unknown][Unrated] + idle: [..1578] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][54045] + not-detected: [..1036] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..800] [Unknown][Unrated] + idle: [..1036] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..800] + not-detected: [..1119] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..800] [Unknown][Unrated] + idle: [..1119] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..800] + not-detected: [...301] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..801] [Unknown][Unrated] + idle: [...301] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..801] + not-detected: [..1037] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8994] [Unknown][Unrated] + idle: [..1037] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.8994] + not-detected: [...319] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..801] [Unknown][Unrated] + idle: [...319] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..801] + not-detected: [..1118] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8994] [Unknown][Unrated] + idle: [..1118] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.8994] + not-detected: [...333] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4899] [Unknown][Unrated] + idle: [...333] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4899] + not-detected: [...692] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4900] [Unknown][Unrated] + idle: [...692] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4900] + not-detected: [...369] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4899] [Unknown][Unrated] + idle: [...369] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4899] + not-detected: [...755] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4900] [Unknown][Unrated] + idle: [...755] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4900] + not-detected: [..1635] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9000] [Unknown][Unrated] + idle: [..1635] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9000] + not-detected: [...209] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..808] [Unknown][Unrated] + idle: [...209] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..808] + not-detected: [..1706] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9000] [Unknown][Unrated] + idle: [..1706] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9000] + not-detected: [..1182] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9001] [Unknown][Unrated] + idle: [..1182] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9001] + not-detected: [...247] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..808] [Unknown][Unrated] + idle: [...247] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..808] + not-detected: [..1273] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9001] [Unknown][Unrated] + idle: [..1273] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9001] + not-detected: [..1063] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9002] [Unknown][Unrated] + idle: [..1063] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9002] + not-detected: [..1134] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9002] [Unknown][Unrated] + idle: [..1134] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9002] + not-detected: [...592] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9003] [Unknown][Unrated] + idle: [...592] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9003] + not-detected: [...663] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9003] [Unknown][Unrated] + idle: [...663] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9003] + not-detected: [...567] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9009] [Unknown][Unrated] + idle: [...567] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9009] + not-detected: [...653] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9009] [Unknown][Unrated] + idle: [...653] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9009] + not-detected: [...219] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9010] [Unknown][Unrated] + idle: [...219] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9010] + not-detected: [..1783] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9011] [Unknown][Unrated] + idle: [..1783] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9011] + not-detected: [...237] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9010] [Unknown][Unrated] + idle: [...237] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9010] + not-detected: [..1874] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9011] [Unknown][Unrated] + idle: [..1874] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9011] + not-detected: [...179] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2869] [Unknown][Unrated] + idle: [...179] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2869] + not-detected: [...195] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2869] [Unknown][Unrated] + idle: [...195] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2869] + not-detected: [..1687] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6969] [Unknown][Unrated] + idle: [..1687] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.6969] + not-detected: [..1770] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6969] [Unknown][Unrated] + idle: [..1770] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.6969] + not-detected: [..1526] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2875] [Unknown][Unrated] + idle: [..1526] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2875] + not-detected: [..1597] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2875] [Unknown][Unrated] + idle: [..1597] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2875] + not-detected: [...100] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..843] [Unknown][Unrated] + idle: [...100] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..843] + not-detected: [...150] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..843] [Unknown][Unrated] + idle: [...150] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..843] + not-detected: [...253] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49999] [Unknown][Unrated] + idle: [...253] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][49999] + not-detected: [..1734] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50000] [Unknown][Unrated] + idle: [..1734] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50000] + not-detected: [..1477] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9040] [Unknown][Unrated] + idle: [..1477] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9040] + not-detected: [...285] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49999] [Unknown][Unrated] + idle: [...285] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][49999] + not-detected: [..1820] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50000] [Unknown][Unrated] + idle: [..1820] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50000] + not-detected: [..1572] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9040] [Unknown][Unrated] + idle: [..1572] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9040] + not-detected: [..1068] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50001] [Unknown][Unrated] + idle: [..1068] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50001] + not-detected: [..1690] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50002] [Unknown][Unrated] + idle: [..1690] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50002] + not-detected: [..1129] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50001] [Unknown][Unrated] + idle: [..1129] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50001] + not-detected: [..1767] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50002] [Unknown][Unrated] + idle: [..1767] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50002] + not-detected: [..1632] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50003] [Unknown][Unrated] + idle: [..1632] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50003] + not-detected: [..1340] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19283] [Unknown][Unrated] + idle: [..1340] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19283] + not-detected: [..1709] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50003] [Unknown][Unrated] + idle: [..1709] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50003] + not-detected: [..1405] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19283] [Unknown][Unrated] + idle: [..1405] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19283] + not-detected: [..1794] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50006] [Unknown][Unrated] + idle: [..1794] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50006] + not-detected: [..1863] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50006] [Unknown][Unrated] + idle: [..1863] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50006] + not-detected: [...268] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7000] [Unknown][Unrated] + idle: [...268] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7000] + not-detected: [...616] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7001] [Unknown][Unrated] + idle: [...616] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7001] + not-detected: [...311] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7000] [Unknown][Unrated] + idle: [...311] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7000] + not-detected: [...947] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7002] [Unknown][Unrated] + idle: [...947] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7002] + not-detected: [...681] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7001] [Unknown][Unrated] + idle: [...681] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7001] + not-detected: [...623] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9050] [Unknown][Unrated] + idle: [...623] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9050] + not-detected: [..1008] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7002] [Unknown][Unrated] + idle: [..1008] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7002] + not-detected: [...674] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9050] [Unknown][Unrated] + idle: [...674] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9050] + not-detected: [..1440] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7004] [Unknown][Unrated] + idle: [..1440] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7004] + not-detected: [..1506] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7004] [Unknown][Unrated] + idle: [..1506] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7004] + not-detected: [...416] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2909] [Unknown][Unrated] + idle: [...416] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2909] + not-detected: [..1680] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2910] [Unknown][Unrated] + idle: [..1680] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2910] + not-detected: [...450] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2909] [Unknown][Unrated] + idle: [...450] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2909] + not-detected: [..1802] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7007] [Unknown][Unrated] + idle: [..1802] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7007] + not-detected: [..1757] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2910] [Unknown][Unrated] + idle: [..1757] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2910] + not-detected: [..1855] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7007] [Unknown][Unrated] + idle: [..1855] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7007] + not-detected: [...876] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][11110] [Unknown][Unrated] + idle: [...876] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][11110] + not-detected: [...929] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][11110] [Unknown][Unrated] + idle: [...929] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][11110] + not-detected: [...498] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][11111] [Unknown][Unrated] + idle: [...498] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][11111] + not-detected: [..1837] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2920] [Unknown][Unrated] + idle: [..1837] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2920] + not-detected: [...533] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][11111] [Unknown][Unrated] + idle: [...533] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][11111] + not-detected: [..1924] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2920] [Unknown][Unrated] + idle: [..1924] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2920] + guessed: [..1592] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..873] [RSYNC][DataTransfer][Acceptable] + idle: [..1592] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..873] + guessed: [..1658] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..873] [RSYNC][DataTransfer][Acceptable] + idle: [..1658] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..873] + not-detected: [..1018] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7019] [Unknown][Unrated] + idle: [..1018] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7019] + not-detected: [..1087] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7019] [Unknown][Unrated] + idle: [..1087] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7019] + not-detected: [...220] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9071] [Unknown][Unrated] + idle: [...220] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9071] + not-detected: [..1625] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..880] [Unknown][Unrated] + idle: [..1625] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..880] + not-detected: [...236] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9071] [Unknown][Unrated] + idle: [...236] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9071] + not-detected: [..1716] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..880] [Unknown][Unrated] + idle: [..1716] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..880] + not-detected: [..1255] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7025] [Unknown][Unrated] + idle: [..1255] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7025] + not-detected: [..1305] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7025] [Unknown][Unrated] + idle: [..1305] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7025] + not-detected: [...686] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19315] [Unknown][Unrated] + idle: [...686] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19315] + not-detected: [...761] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19315] [Unknown][Unrated] + idle: [...761] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19315] + not-detected: [..1025] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9080] [Unknown][Unrated] + idle: [..1025] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9080] + not-detected: [...589] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..888] [Unknown][Unrated] + idle: [...589] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..888] + not-detected: [..1080] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9080] [Unknown][Unrated] + idle: [..1080] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9080] + not-detected: [...994] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9081] [Unknown][Unrated] + idle: [...994] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9081] + not-detected: [...666] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..888] [Unknown][Unrated] + idle: [...666] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..888] + not-detected: [..1053] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9081] [Unknown][Unrated] + idle: [..1053] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9081] + not-detected: [..1097] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9090] [Unknown][Unrated] + idle: [..1097] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9090] + not-detected: [...883] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..898] [Unknown][Unrated] + idle: [...883] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..898] + not-detected: [..1158] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9090] [Unknown][Unrated] + idle: [..1158] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9090] + not-detected: [...972] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..898] [Unknown][Unrated] + idle: [...972] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..898] + not-detected: [...574] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9091] [Unknown][Unrated] + idle: [...574] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9091] + not-detected: [..1591] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..900] [Unknown][Unrated] + idle: [..1591] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..900] + not-detected: [...646] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9091] [Unknown][Unrated] + idle: [...646] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9091] + not-detected: [..1659] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..900] [Unknown][Unrated] + idle: [..1659] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..900] + not-detected: [...866] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..901] [Unknown][Unrated] + idle: [...866] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..901] + not-detected: [..1928] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4998] [Unknown][Unrated] + idle: [..1928] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.4998] + not-detected: [..1092] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..902] [Unknown][Unrated] + idle: [..1092] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..902] + not-detected: [...939] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..901] [Unknown][Unrated] + idle: [...939] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..901] + not-detected: [..1994] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4998] [Unknown][Unrated] + idle: [..1994] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.4998] + guessed: [..1587] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..903] [VMware][RemoteAccess][Acceptable] + idle: [..1587] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..903] + not-detected: [..1163] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..902] [Unknown][Unrated] + idle: [..1163] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..902] + guessed: [..1663] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..903] [VMware][RemoteAccess][Acceptable] + idle: [..1663] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..903] + not-detected: [..1169] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5000] [Unknown][Unrated] + idle: [..1169] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5000] + not-detected: [..1238] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5000] [Unknown][Unrated] + idle: [..1238] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5000] + guessed: [...745] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5001] [TargusDataspeed][Network][Acceptable] + idle: [...745] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5001] + not-detected: [..1929] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5002] [Unknown][Unrated] + idle: [..1929] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5002] + guessed: [...810] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5001] [TargusDataspeed][Network][Acceptable] + idle: [...810] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5001] + not-detected: [..1993] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5002] [Unknown][Unrated] + idle: [..1993] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5002] + not-detected: [..1798] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5003] [Unknown][Unrated] + idle: [..1798] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5003] + not-detected: [..1644] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9099] [Unknown][Unrated] + idle: [..1644] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9099] + not-detected: [..1727] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9099] [Unknown][Unrated] + idle: [..1727] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9099] + not-detected: [..1859] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5003] [Unknown][Unrated] + idle: [..1859] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5003] + not-detected: [..1523] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9100] [Unknown][Unrated] + idle: [..1523] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9100] + not-detected: [..1437] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5004] [Unknown][Unrated] + idle: [..1437] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5004] + not-detected: [..1600] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9100] [Unknown][Unrated] + idle: [..1600] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9100] + not-detected: [..1509] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5004] [Unknown][Unrated] + idle: [..1509] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5004] + not-detected: [...630] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9101] [Unknown][Unrated] + idle: [...630] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9101] + not-detected: [...707] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9101] [Unknown][Unrated] + idle: [...707] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9101] + not-detected: [...138] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9102] [Unknown][Unrated] + idle: [...138] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9102] + not-detected: [..1780] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..911] [Unknown][Unrated] + idle: [..1780] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..911] + not-detected: [..1299] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9103] [Unknown][Unrated] + idle: [..1299] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9103] + not-detected: [...154] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9102] [Unknown][Unrated] + idle: [...154] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9102] + not-detected: [..1877] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..911] [Unknown][Unrated] + idle: [..1877] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..911] + not-detected: [..1351] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9103] [Unknown][Unrated] + idle: [..1351] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9103] + not-detected: [...456] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..912] [Unknown][Unrated] + idle: [...456] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..912] + not-detected: [..1542] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5009] [Unknown][Unrated] + idle: [..1542] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5009] + not-detected: [...492] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..912] [Unknown][Unrated] + idle: [...492] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..912] + not-detected: [..1611] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5009] [Unknown][Unrated] + idle: [..1611] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5009] + not-detected: [..1389] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19350] [Unknown][Unrated] + idle: [..1389] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][19350] + not-detected: [...437] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9110] [Unknown][Unrated] + idle: [...437] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9110] + not-detected: [..1460] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19350] [Unknown][Unrated] + idle: [..1460] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][19350] + not-detected: [..1671] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9111] [Unknown][Unrated] + idle: [..1671] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9111] + not-detected: [...840] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2967] [Unknown][Unrated] + idle: [...840] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2967] + not-detected: [...470] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9110] [Unknown][Unrated] + idle: [...470] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9110] + not-detected: [..1731] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9111] [Unknown][Unrated] + idle: [..1731] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9111] + not-detected: [...907] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2967] [Unknown][Unrated] + idle: [...907] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2967] + not-detected: [...415] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2968] [Unknown][Unrated] + idle: [...415] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2968] + not-detected: [...451] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2968] [Unknown][Unrated] + idle: [...451] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2968] + not-detected: [...507] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7070] [Unknown][Unrated] + idle: [...507] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7070] + not-detected: [...524] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7070] [Unknown][Unrated] + idle: [...524] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7070] + not-detected: [..1047] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5030] [Unknown][Unrated] + idle: [..1047] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5030] + not-detected: [..1108] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5030] [Unknown][Unrated] + idle: [..1108] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5030] + not-detected: [...212] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5033] [Unknown][Unrated] + idle: [...212] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5033] + not-detected: [...244] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5033] [Unknown][Unrated] + idle: [...244] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5033] + not-detected: [...586] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2998] [Unknown][Unrated] + idle: [...586] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.2998] + not-detected: [...669] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2998] [Unknown][Unrated] + idle: [...669] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.2998] + not-detected: [...433] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3000] [Unknown][Unrated] + idle: [...433] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3000] + not-detected: [...474] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3000] [Unknown][Unrated] + idle: [...474] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3000] + not-detected: [...192] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3001] [Unknown][Unrated] + idle: [...192] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3001] + not-detected: [..1179] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5050] [Unknown][Unrated] + idle: [..1179] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5050] + not-detected: [...223] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3001] [Unknown][Unrated] + idle: [...223] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3001] + not-detected: [..1228] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5050] [Unknown][Unrated] + idle: [..1228] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5050] + not-detected: [..1688] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3003] [Unknown][Unrated] + idle: [..1688] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3003] + not-detected: [...739] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5051] [Unknown][Unrated] + idle: [...739] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5051] + not-detected: [..1769] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3003] [Unknown][Unrated] + idle: [..1769] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3003] + not-detected: [...816] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5051] [Unknown][Unrated] + idle: [...816] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5051] + not-detected: [...613] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7100] [Unknown][Unrated] + idle: [...613] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7100] + not-detected: [..1696] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3005] [Unknown][Unrated] + idle: [..1696] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3005] + not-detected: [...684] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7100] [Unknown][Unrated] + idle: [...684] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7100] + not-detected: [..1761] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3005] [Unknown][Unrated] + idle: [..1761] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3005] + not-detected: [..1584] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5054] [Unknown][Unrated] + idle: [..1584] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5054] + not-detected: [...806] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3006] [Unknown][Unrated] + idle: [...806] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3006] + not-detected: [..1676] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7103] [Unknown][Unrated] + idle: [..1676] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7103] + not-detected: [..1666] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5054] [Unknown][Unrated] + idle: [..1666] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5054] + not-detected: [...869] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3007] [Unknown][Unrated] + idle: [...869] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3007] + not-detected: [...849] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3006] [Unknown][Unrated] + idle: [...849] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3006] + not-detected: [..1751] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7103] [Unknown][Unrated] + idle: [..1751] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7103] + not-detected: [...936] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3007] [Unknown][Unrated] + idle: [...936] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3007] + not-detected: [..1042] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7106] [Unknown][Unrated] + idle: [..1042] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7106] + not-detected: [..1689] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3011] [Unknown][Unrated] + idle: [..1689] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3011] + not-detected: [..1113] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7106] [Unknown][Unrated] + idle: [..1113] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7106] + not-detected: [..1768] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3011] [Unknown][Unrated] + idle: [..1768] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3011] + guessed: [...889] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5060] [SIP][VoIP][Acceptable] + idle: [...889] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5060] + not-detected: [..1849] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3013] [Unknown][Unrated] + idle: [..1849] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3013] + guessed: [..1778] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5061] [SIP][VoIP][Acceptable] + idle: [..1778] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5061] + guessed: [...966] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5060] [SIP][VoIP][Acceptable] + idle: [...966] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5060] + not-detected: [..1912] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3013] [Unknown][Unrated] + idle: [..1912] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3013] + guessed: [..1879] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5061] [SIP][VoIP][Acceptable] + idle: [..1879] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5061] + not-detected: [...273] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3017] [Unknown][Unrated] + idle: [...273] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3017] + not-detected: [...306] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3017] [Unknown][Unrated] + idle: [...306] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3017] + not-detected: [..1796] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][23502] [Unknown][Unrated] + idle: [..1796] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][23502] + not-detected: [..1861] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][23502] [Unknown][Unrated] + idle: [..1861] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][23502] + not-detected: [...341] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][48080] [Unknown][Unrated] + idle: [...341] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][48080] + not-detected: [...361] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][48080] [Unknown][Unrated] + idle: [...361] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][48080] + not-detected: [...867] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..981] [Unknown][Unrated] + idle: [...867] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..981] + not-detected: [...938] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..981] [Unknown][Unrated] + idle: [...938] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..981] + not-detected: [...635] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3030] [Unknown][Unrated] + idle: [...635] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3030] + not-detected: [..1938] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3031] [Unknown][Unrated] + idle: [..1938] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3031] + not-detected: [...702] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3030] [Unknown][Unrated] + idle: [...702] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3030] + not-detected: [..1984] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3031] [Unknown][Unrated] + idle: [..1984] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3031] + not-detected: [...339] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5080] [Unknown][Unrated] + idle: [...339] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5080] + not-detected: [...363] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5080] [Unknown][Unrated] + idle: [...363] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5080] + not-detected: [...914] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..987] [Unknown][Unrated] + idle: [...914] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..987] + not-detected: [...983] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..987] [Unknown][Unrated] + idle: [...983] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..987] + not-detected: [....47] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..990] [Unknown][Unrated] + idle: [....47] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..990] + not-detected: [..1287] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5087] [Unknown][Unrated] + idle: [..1287] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5087] + not-detected: [....81] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..990] [Unknown][Unrated] + idle: [....81] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..990] + not-detected: [..1363] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5087] [Unknown][Unrated] + idle: [..1363] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5087] + not-detected: [..1099] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..992] [Unknown][Unrated] + idle: [..1099] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..992] + not-detected: [..1156] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..992] [Unknown][Unrated] + idle: [..1156] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..992] + guessed: [....31] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..993] [IMAPS][Email][Safe] + idle: [....31] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..993] + guessed: [....68] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..993] [IMAPS][Email][Safe] + idle: [....68] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..993] + guessed: [.....7] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..995] [POPS][Email][Safe] + idle: [.....7] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..995] + guessed: [....23] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..995] [POPS][Email][Safe] + idle: [....23] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..995] + not-detected: [...522] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..999] [Unknown][Unrated] + idle: [...522] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][..999] + not-detected: [..1434] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1000] [Unknown][Unrated] + idle: [..1434] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1000] + not-detected: [...549] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..999] [Unknown][Unrated] + idle: [...549] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][..999] + not-detected: [..1512] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1000] [Unknown][Unrated] + idle: [..1512] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1000] + not-detected: [...845] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1001] [Unknown][Unrated] + idle: [...845] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1001] + not-detected: [...902] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1001] [Unknown][Unrated] + idle: [...902] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1001] + not-detected: [...894] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1002] [Unknown][Unrated] + idle: [...894] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1002] + not-detected: [....58] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3050] [Unknown][Unrated] + idle: [....58] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3050] + not-detected: [...961] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1002] [Unknown][Unrated] + idle: [...961] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1002] + not-detected: [....70] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3050] [Unknown][Unrated] + idle: [....70] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3050] + not-detected: [..1136] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5100] [Unknown][Unrated] + idle: [..1136] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5100] + not-detected: [...298] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3052] [Unknown][Unrated] + idle: [...298] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3052] + not-detected: [..1211] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5100] [Unknown][Unrated] + idle: [..1211] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5100] + not-detected: [...322] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3052] [Unknown][Unrated] + idle: [...322] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3052] + not-detected: [...136] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5101] [Unknown][Unrated] + idle: [...136] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5101] + not-detected: [..1026] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5102] [Unknown][Unrated] + idle: [..1026] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5102] + not-detected: [...156] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5101] [Unknown][Unrated] + idle: [...156] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5101] + not-detected: [..1827] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1007] [Unknown][Unrated] + idle: [..1827] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1007] + not-detected: [..1079] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5102] [Unknown][Unrated] + idle: [..1079] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5102] + not-detected: [..1904] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1007] [Unknown][Unrated] + idle: [..1904] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1007] + not-detected: [...102] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9200] [Unknown][Unrated] + idle: [...102] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9200] + not-detected: [...576] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1009] [Unknown][Unrated] + idle: [...576] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1009] + not-detected: [...148] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9200] [Unknown][Unrated] + idle: [...148] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9200] + not-detected: [..1095] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1010] [Unknown][Unrated] + idle: [..1095] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1010] + not-detected: [...644] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1009] [Unknown][Unrated] + idle: [...644] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1009] + not-detected: [..1160] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1010] [Unknown][Unrated] + idle: [..1160] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1010] + not-detected: [..1070] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1011] [Unknown][Unrated] + idle: [..1070] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1011] + not-detected: [..1127] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1011] [Unknown][Unrated] + idle: [..1127] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1011] + not-detected: [..1338] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9207] [Unknown][Unrated] + idle: [..1338] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9207] + not-detected: [..1407] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9207] [Unknown][Unrated] + idle: [..1407] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9207] + not-detected: [..1926] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1021] [Unknown][Unrated] + idle: [..1926] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1021] + not-detected: [..1968] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1021] [Unknown][Unrated] + idle: [..1968] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1021] + not-detected: [..1529] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1022] [Unknown][Unrated] + idle: [..1529] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1022] + not-detected: [..1604] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1022] [Unknown][Unrated] + idle: [..1604] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1022] + not-detected: [..1586] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1023] [Unknown][Unrated] + idle: [..1586] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1023] + not-detected: [...211] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3071] [Unknown][Unrated] + idle: [...211] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3071] + not-detected: [...887] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5120] [Unknown][Unrated] + idle: [...887] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5120] + not-detected: [..1664] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1023] [Unknown][Unrated] + idle: [..1664] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1023] + not-detected: [...245] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3071] [Unknown][Unrated] + idle: [...245] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3071] + not-detected: [...130] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1024] [Unknown][Unrated] + idle: [...130] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1024] + not-detected: [...968] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5120] [Unknown][Unrated] + idle: [...968] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5120] + not-detected: [...162] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1024] [Unknown][Unrated] + idle: [...162] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1024] + not-detected: [.....6] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1025] [Unknown][Unrated] + idle: [.....6] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1025] + not-detected: [..1471] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1026] [Unknown][Unrated] + idle: [..1471] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1026] + not-detected: [....24] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1025] [Unknown][Unrated] + idle: [....24] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1025] + not-detected: [..1530] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1026] [Unknown][Unrated] + idle: [..1530] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1026] + not-detected: [...428] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1027] [Unknown][Unrated] + idle: [...428] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1027] + not-detected: [...548] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9220] [Unknown][Unrated] + idle: [...548] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9220] + not-detected: [..1590] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1028] [Unknown][Unrated] + idle: [..1590] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1028] + not-detected: [...479] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1027] [Unknown][Unrated] + idle: [...479] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1027] + not-detected: [...599] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9220] [Unknown][Unrated] + idle: [...599] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9220] + not-detected: [..1660] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1028] [Unknown][Unrated] + idle: [..1660] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1028] + not-detected: [...864] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1029] [Unknown][Unrated] + idle: [...864] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1029] + not-detected: [...126] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3077] [Unknown][Unrated] + idle: [...126] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3077] + not-detected: [..1186] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1030] [Unknown][Unrated] + idle: [..1186] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1030] + not-detected: [...941] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1029] [Unknown][Unrated] + idle: [...941] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1029] + not-detected: [...166] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3077] [Unknown][Unrated] + idle: [...166] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3077] + not-detected: [..1270] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1030] [Unknown][Unrated] + idle: [..1270] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1030] + not-detected: [...636] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1031] [Unknown][Unrated] + idle: [...636] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1031] + not-detected: [..1198] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1032] [Unknown][Unrated] + idle: [..1198] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1032] + not-detected: [...701] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1031] [Unknown][Unrated] + idle: [...701] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1031] + not-detected: [..1493] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1033] [Unknown][Unrated] + idle: [..1493] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1033] + not-detected: [..1274] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1032] [Unknown][Unrated] + idle: [..1274] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1032] + not-detected: [..1556] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1033] [Unknown][Unrated] + idle: [..1556] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1033] + not-detected: [..1546] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1034] [Unknown][Unrated] + idle: [..1546] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1034] + not-detected: [..1607] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1034] [Unknown][Unrated] + idle: [..1607] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1034] + not-detected: [..1329] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1035] [Unknown][Unrated] + idle: [..1329] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1035] + not-detected: [..1416] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1035] [Unknown][Unrated] + idle: [..1416] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1035] + not-detected: [...581] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1036] [Unknown][Unrated] + idle: [...581] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1036] + not-detected: [..1028] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1037] [Unknown][Unrated] + idle: [..1028] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1037] + not-detected: [...639] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1036] [Unknown][Unrated] + idle: [...639] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1036] + not-detected: [..1821] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1038] [Unknown][Unrated] + idle: [..1821] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1038] + not-detected: [..1077] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1037] [Unknown][Unrated] + idle: [..1077] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1037] + not-detected: [..1885] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1038] [Unknown][Unrated] + idle: [..1885] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1038] + not-detected: [..1538] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1039] [Unknown][Unrated] + idle: [..1538] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1039] + not-detected: [..1615] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1039] [Unknown][Unrated] + idle: [..1615] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1039] + not-detected: [...376] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1040] [Unknown][Unrated] + idle: [...376] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1040] + not-detected: [...734] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1041] [Unknown][Unrated] + idle: [...734] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1041] + not-detected: [...408] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1040] [Unknown][Unrated] + idle: [...408] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1040] + not-detected: [...821] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1041] [Unknown][Unrated] + idle: [...821] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1041] + not-detected: [...735] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1042] [Unknown][Unrated] + idle: [...735] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1042] + not-detected: [...820] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1042] [Unknown][Unrated] + idle: [...820] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1042] + not-detected: [...183] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1043] [Unknown][Unrated] + idle: [...183] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1043] + not-detected: [..1949] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1044] [Unknown][Unrated] + idle: [..1949] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1044] + not-detected: [...232] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1043] [Unknown][Unrated] + idle: [...232] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1043] + not-detected: [..1973] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1044] [Unknown][Unrated] + idle: [..1973] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1044] + not-detected: [..1247] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1045] [Unknown][Unrated] + idle: [..1247] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1045] + not-detected: [..1313] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1045] [Unknown][Unrated] + idle: [..1313] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1045] + not-detected: [...945] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1046] [Unknown][Unrated] + idle: [...945] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1046] + not-detected: [..1010] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1046] [Unknown][Unrated] + idle: [..1010] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1046] + not-detected: [...347] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1047] [Unknown][Unrated] + idle: [...347] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1047] + not-detected: [...439] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1048] [Unknown][Unrated] + idle: [...439] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1048] + not-detected: [...396] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1047] [Unknown][Unrated] + idle: [...396] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1047] + not-detected: [..1932] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1049] [Unknown][Unrated] + idle: [..1932] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1049] + not-detected: [...468] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1048] [Unknown][Unrated] + idle: [...468] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1048] + not-detected: [..1990] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1049] [Unknown][Unrated] + idle: [..1990] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1049] + not-detected: [..1103] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1050] [Unknown][Unrated] + idle: [..1103] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1050] + not-detected: [..1152] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1050] [Unknown][Unrated] + idle: [..1152] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1050] + not-detected: [...891] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1051] [Unknown][Unrated] + idle: [...891] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1051] + not-detected: [...434] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][60443] [Unknown][Unrated] + idle: [...434] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][60443] + not-detected: [...964] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1051] [Unknown][Unrated] + idle: [...964] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1051] + not-detected: [...690] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1052] [Unknown][Unrated] + idle: [...690] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1052] + not-detected: [...473] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][60443] [Unknown][Unrated] + idle: [...473] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][60443] + not-detected: [...757] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1052] [Unknown][Unrated] + idle: [...757] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1052] + not-detected: [...584] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1053] [Unknown][Unrated] + idle: [...584] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1053] + not-detected: [..1520] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1054] [Unknown][Unrated] + idle: [..1520] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1054] + not-detected: [...671] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1053] [Unknown][Unrated] + idle: [...671] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1053] + not-detected: [..1603] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1054] [Unknown][Unrated] + idle: [..1603] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1054] + not-detected: [..1331] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1055] [Unknown][Unrated] + idle: [..1331] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1055] + not-detected: [..1414] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1055] [Unknown][Unrated] + idle: [..1414] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1055] + not-detected: [...128] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7200] [Unknown][Unrated] + idle: [...128] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7200] + not-detected: [....43] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1056] [Unknown][Unrated] + idle: [....43] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1056] + not-detected: [...583] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7201] [Unknown][Unrated] + idle: [...583] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7201] + not-detected: [...164] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7200] [Unknown][Unrated] + idle: [...164] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7200] + not-detected: [..1742] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1057] [Unknown][Unrated] + idle: [..1742] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1057] + not-detected: [....85] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1056] [Unknown][Unrated] + idle: [....85] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1056] + not-detected: [..1812] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1057] [Unknown][Unrated] + idle: [..1812] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1057] + not-detected: [...672] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7201] [Unknown][Unrated] + idle: [...672] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7201] + not-detected: [...569] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1058] [Unknown][Unrated] + idle: [...569] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1058] + not-detected: [...988] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1059] [Unknown][Unrated] + idle: [...988] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1059] + not-detected: [...651] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1058] [Unknown][Unrated] + idle: [...651] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1058] + not-detected: [..1059] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1059] [Unknown][Unrated] + idle: [..1059] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1059] + not-detected: [...348] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1060] [Unknown][Unrated] + idle: [...348] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1060] + not-detected: [..1249] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1061] [Unknown][Unrated] + idle: [..1249] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1061] + not-detected: [...395] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1060] [Unknown][Unrated] + idle: [...395] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1060] + not-detected: [..1311] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1061] [Unknown][Unrated] + idle: [..1311] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1061] + not-detected: [..1066] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1062] [Unknown][Unrated] + idle: [..1066] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1062] + not-detected: [..1797] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1063] [Unknown][Unrated] + idle: [..1797] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1063] + not-detected: [..1131] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1062] [Unknown][Unrated] + idle: [..1131] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1062] + not-detected: [..1860] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1063] [Unknown][Unrated] + idle: [..1860] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1063] + not-detected: [...214] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1064] [Unknown][Unrated] + idle: [...214] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1064] + not-detected: [...508] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1065] [Unknown][Unrated] + idle: [...508] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1065] + not-detected: [...242] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1064] [Unknown][Unrated] + idle: [...242] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1064] + not-detected: [...836] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1066] [Unknown][Unrated] + idle: [...836] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1066] + not-detected: [...563] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1065] [Unknown][Unrated] + idle: [...563] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1065] + not-detected: [...911] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1066] [Unknown][Unrated] + idle: [...911] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1066] + not-detected: [...104] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1067] [Unknown][Unrated] + idle: [...104] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1067] + not-detected: [..1295] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1068] [Unknown][Unrated] + idle: [..1295] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1068] + not-detected: [...146] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1067] [Unknown][Unrated] + idle: [...146] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1067] + not-detected: [..1355] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1068] [Unknown][Unrated] + idle: [..1355] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1068] + not-detected: [..1349] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1069] [Unknown][Unrated] + idle: [..1349] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1069] + not-detected: [..1396] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1069] [Unknown][Unrated] + idle: [..1396] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1069] + not-detected: [...418] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1070] [Unknown][Unrated] + idle: [...418] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1070] + not-detected: [...448] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1070] [Unknown][Unrated] + idle: [...448] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1070] + not-detected: [...207] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1071] [Unknown][Unrated] + idle: [...207] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1071] + not-detected: [...744] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1072] [Unknown][Unrated] + idle: [...744] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1072] + not-detected: [...249] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1071] [Unknown][Unrated] + idle: [...249] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1071] + not-detected: [...811] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1072] [Unknown][Unrated] + idle: [...811] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1072] + not-detected: [...175] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1073] [Unknown][Unrated] + idle: [...175] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1073] + not-detected: [..1650] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1074] [Unknown][Unrated] + idle: [..1650] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1074] + not-detected: [...199] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1073] [Unknown][Unrated] + idle: [...199] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1073] + not-detected: [..1721] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1074] [Unknown][Unrated] + idle: [..1721] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1074] + not-detected: [....97] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1075] [Unknown][Unrated] + idle: [....97] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1075] + not-detected: [..1483] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1076] [Unknown][Unrated] + idle: [..1483] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1076] + not-detected: [...153] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1075] [Unknown][Unrated] + idle: [...153] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1075] + not-detected: [..1566] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1076] [Unknown][Unrated] + idle: [..1566] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1076] + not-detected: [..1333] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1077] [Unknown][Unrated] + idle: [..1333] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1077] + not-detected: [..1412] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1077] [Unknown][Unrated] + idle: [..1412] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1077] + not-detected: [...748] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1078] [Unknown][Unrated] + idle: [...748] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1078] + not-detected: [...807] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1078] [Unknown][Unrated] + idle: [...807] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1078] + not-detected: [...771] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1079] [Unknown][Unrated] + idle: [...771] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1079] + guessed: [..1831] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3128] [HTTP_Proxy][Web][Acceptable] + idle: [..1831] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3128] + guessed: [..1694] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1080] [SOCKS][Web][Acceptable] + idle: [..1694] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1080] + not-detected: [...826] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1079] [Unknown][Unrated] + idle: [...826] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1079] + not-detected: [...618] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][54328] [Unknown][Unrated] + idle: [...618] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][54328] + guessed: [..1900] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3128] [HTTP_Proxy][Web][Acceptable] + idle: [..1900] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3128] + guessed: [..1763] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1080] [SOCKS][Web][Acceptable] + idle: [..1763] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1080] + not-detected: [..1490] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1081] [Unknown][Unrated] + idle: [..1490] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1081] + not-detected: [...679] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][54328] [Unknown][Unrated] + idle: [...679] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][54328] + not-detected: [..1559] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1081] [Unknown][Unrated] + idle: [..1559] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1081] + not-detected: [...842] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1082] [Unknown][Unrated] + idle: [...842] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1082] + not-detected: [...905] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1082] [Unknown][Unrated] + idle: [...905] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1082] + not-detected: [...714] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1083] [Unknown][Unrated] + idle: [...714] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1083] + not-detected: [...791] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1083] [Unknown][Unrated] + idle: [...791] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1083] + not-detected: [...261] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1084] [Unknown][Unrated] + idle: [...261] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1084] + not-detected: [...768] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1085] [Unknown][Unrated] + idle: [...768] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1085] + not-detected: [...277] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1084] [Unknown][Unrated] + idle: [...277] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1084] + not-detected: [...829] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1085] [Unknown][Unrated] + idle: [...829] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1085] + not-detected: [...689] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1086] [Unknown][Unrated] + idle: [...689] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1086] + not-detected: [...758] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1086] [Unknown][Unrated] + idle: [...758] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1086] + not-detected: [...383] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1087] [Unknown][Unrated] + idle: [...383] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1087] + not-detected: [...521] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1088] [Unknown][Unrated] + idle: [...521] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1088] + not-detected: [...401] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1087] [Unknown][Unrated] + idle: [...401] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1087] + not-detected: [..1679] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1089] [Unknown][Unrated] + idle: [..1679] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1089] + not-detected: [...550] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1088] [Unknown][Unrated] + idle: [...550] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1088] + not-detected: [..1748] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1089] [Unknown][Unrated] + idle: [..1748] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1089] + not-detected: [..1629] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1090] [Unknown][Unrated] + idle: [..1629] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1090] + not-detected: [..1712] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1090] [Unknown][Unrated] + idle: [..1712] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1090] + not-detected: [..1521] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][21571] [Unknown][Unrated] + idle: [..1521] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][21571] + not-detected: [..1137] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1091] [Unknown][Unrated] + idle: [..1137] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1091] + not-detected: [...946] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27715] [Unknown][Unrated] + idle: [...946] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][27715] + not-detected: [..1602] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][21571] [Unknown][Unrated] + idle: [..1602] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][21571] + not-detected: [..1930] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1092] [Unknown][Unrated] + idle: [..1930] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1092] + not-detected: [..1210] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1091] [Unknown][Unrated] + idle: [..1210] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1091] + not-detected: [..1009] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27715] [Unknown][Unrated] + idle: [..1009] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][27715] + not-detected: [..1992] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1092] [Unknown][Unrated] + idle: [..1992] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1092] + not-detected: [...896] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1093] [Unknown][Unrated] + idle: [...896] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1093] + not-detected: [..1646] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1094] [Unknown][Unrated] + idle: [..1646] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1094] + not-detected: [...959] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1093] [Unknown][Unrated] + idle: [...959] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1093] + not-detected: [...260] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5190] [Unknown][Unrated] + idle: [...260] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5190] + not-detected: [..1725] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1094] [Unknown][Unrated] + idle: [..1725] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1094] + not-detected: [...278] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5190] [Unknown][Unrated] + idle: [...278] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5190] + not-detected: [...213] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1095] [Unknown][Unrated] + idle: [...213] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1095] + not-detected: [...598] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1096] [Unknown][Unrated] + idle: [...598] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1096] + not-detected: [...243] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1095] [Unknown][Unrated] + idle: [...243] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1095] + not-detected: [...657] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1096] [Unknown][Unrated] + idle: [...657] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1096] + not-detected: [...422] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1097] [Unknown][Unrated] + idle: [...422] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1097] + not-detected: [..1934] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9290] [Unknown][Unrated] + idle: [..1934] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9290] + not-detected: [..1257] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1098] [Unknown][Unrated] + idle: [..1257] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1098] + not-detected: [...444] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1097] [Unknown][Unrated] + idle: [...444] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1097] + not-detected: [..1988] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9290] [Unknown][Unrated] + idle: [..1988] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9290] + not-detected: [..1303] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1098] [Unknown][Unrated] + idle: [..1303] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1098] + not-detected: [..1045] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1099] [Unknown][Unrated] + idle: [..1045] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1099] + not-detected: [..1166] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1100] [Unknown][Unrated] + idle: [..1166] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1100] + not-detected: [..1110] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1099] [Unknown][Unrated] + idle: [..1110] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1099] + not-detected: [..1241] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1100] [Unknown][Unrated] + idle: [..1241] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1100] + not-detected: [..1533] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1102] [Unknown][Unrated] + idle: [..1533] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1102] + not-detected: [..1620] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1102] [Unknown][Unrated] + idle: [..1620] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1102] + not-detected: [..1941] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1104] [Unknown][Unrated] + idle: [..1941] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1104] + not-detected: [...438] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5200] [Unknown][Unrated] + idle: [...438] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5200] + not-detected: [..1981] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1104] [Unknown][Unrated] + idle: [..1981] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1104] + not-detected: [..1178] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1105] [Unknown][Unrated] + idle: [..1178] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1105] + not-detected: [...469] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5200] [Unknown][Unrated] + idle: [...469] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5200] + not-detected: [..1229] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1105] [Unknown][Unrated] + idle: [..1229] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1105] + not-detected: [..1144] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1106] [Unknown][Unrated] + idle: [..1144] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1106] + not-detected: [..1582] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1107] [Unknown][Unrated] + idle: [..1582] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1107] + not-detected: [..1203] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1106] [Unknown][Unrated] + idle: [..1203] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1106] + not-detected: [..1828] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1108] [Unknown][Unrated] + idle: [..1828] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1108] + not-detected: [..1668] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1107] [Unknown][Unrated] + idle: [..1668] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1107] + not-detected: [..1903] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1108] [Unknown][Unrated] + idle: [..1903] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1108] + not-detected: [..1943] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1110] [Unknown][Unrated] + idle: [..1943] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1110] + not-detected: [..1979] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1110] [Unknown][Unrated] + idle: [..1979] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1110] + not-detected: [...215] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1111] [Unknown][Unrated] + idle: [...215] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1111] + not-detected: [..1033] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1112] [Unknown][Unrated] + idle: [..1033] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1112] + not-detected: [...241] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1111] [Unknown][Unrated] + idle: [...241] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1111] + not-detected: [..1517] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1113] [Unknown][Unrated] + idle: [..1517] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1113] + not-detected: [..1122] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1112] [Unknown][Unrated] + idle: [..1122] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1112] + not-detected: [..1581] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1113] [Unknown][Unrated] + idle: [..1581] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1113] + not-detected: [..1395] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1114] [Unknown][Unrated] + idle: [..1395] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1114] + not-detected: [..1454] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1114] [Unknown][Unrated] + idle: [..1454] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1114] + not-detected: [..1071] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1117] [Unknown][Unrated] + idle: [..1071] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1117] + not-detected: [..1126] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1117] [Unknown][Unrated] + idle: [..1126] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1117] + not-detected: [...288] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5214] [Unknown][Unrated] + idle: [...288] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5214] + guessed: [...870] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1119] [Starcraft][Game][Fun] + idle: [...870] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1119] + not-detected: [...332] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5214] [Unknown][Unrated] + idle: [...332] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5214] + guessed: [...935] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1119] [Starcraft][Game][Fun] + idle: [...935] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1119] + not-detected: [...805] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3168] [Unknown][Unrated] + idle: [...805] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3168] + not-detected: [..1215] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1121] [Unknown][Unrated] + idle: [..1215] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1121] + not-detected: [...850] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3168] [Unknown][Unrated] + idle: [...850] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3168] + not-detected: [..1283] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1121] [Unknown][Unrated] + idle: [..1283] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1121] + not-detected: [..1223] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1122] [Unknown][Unrated] + idle: [..1223] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1122] + not-detected: [..1275] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1122] [Unknown][Unrated] + idle: [..1275] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1122] + not-detected: [...265] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1123] [Unknown][Unrated] + idle: [...265] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1123] + not-detected: [..1252] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1124] [Unknown][Unrated] + idle: [..1252] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1124] + not-detected: [...314] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1123] [Unknown][Unrated] + idle: [...314] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1123] + not-detected: [..1308] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1124] [Unknown][Unrated] + idle: [..1308] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1124] + not-detected: [...338] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5221] [Unknown][Unrated] + idle: [...338] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5221] + not-detected: [..1339] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1126] [Unknown][Unrated] + idle: [..1339] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1126] + not-detected: [..1165] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5222] [Unknown][Unrated] + idle: [..1165] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5222] + not-detected: [...364] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5221] [Unknown][Unrated] + idle: [...364] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5221] + not-detected: [..1406] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1126] [Unknown][Unrated] + idle: [..1406] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1126] + not-detected: [..1242] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5222] [Unknown][Unrated] + idle: [..1242] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5222] + not-detected: [..1850] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5225] [Unknown][Unrated] + idle: [..1850] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5225] + not-detected: [..1911] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5225] [Unknown][Unrated] + idle: [..1911] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5225] + not-detected: [..1525] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1130] [Unknown][Unrated] + idle: [..1525] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1130] + not-detected: [..1476] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5226] [Unknown][Unrated] + idle: [..1476] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5226] + not-detected: [..1598] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1130] [Unknown][Unrated] + idle: [..1598] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1130] + not-detected: [..1573] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5226] [Unknown][Unrated] + idle: [..1573] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5226] + not-detected: [...271] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1131] [Unknown][Unrated] + idle: [...271] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1131] + not-detected: [...106] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][33899] [Unknown][Unrated] + idle: [...106] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][33899] + not-detected: [..1188] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1132] [Unknown][Unrated] + idle: [..1188] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1132] + not-detected: [...308] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1131] [Unknown][Unrated] + idle: [...308] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1131] + not-detected: [...144] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][33899] [Unknown][Unrated] + idle: [...144] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][33899] + not-detected: [..1268] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1132] [Unknown][Unrated] + idle: [..1268] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1132] + not-detected: [..1189] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][64623] [Unknown][Unrated] + idle: [..1189] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][64623] + not-detected: [..1267] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][64623] [Unknown][Unrated] + idle: [..1267] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][64623] + not-detected: [...993] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1137] [Unknown][Unrated] + idle: [...993] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1137] + not-detected: [..1141] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1138] [Unknown][Unrated] + idle: [..1141] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1138] + not-detected: [..1054] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1137] [Unknown][Unrated] + idle: [..1054] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1137] + not-detected: [..1206] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1138] [Unknown][Unrated] + idle: [..1206] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1138] + not-detected: [...772] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1141] [Unknown][Unrated] + idle: [...772] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1141] + not-detected: [...825] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1141] [Unknown][Unrated] + idle: [...825] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1141] + not-detected: [..1326] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1145] [Unknown][Unrated] + idle: [..1326] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1145] + not-detected: [..1419] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1145] [Unknown][Unrated] + idle: [..1419] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1145] + not-detected: [..1501] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1147] [Unknown][Unrated] + idle: [..1501] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1147] + not-detected: [..1548] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1147] [Unknown][Unrated] + idle: [..1548] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1147] + not-detected: [..1173] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50300] [Unknown][Unrated] + idle: [..1173] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50300] + not-detected: [...725] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1148] [Unknown][Unrated] + idle: [...725] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1148] + not-detected: [..1234] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50300] [Unknown][Unrated] + idle: [..1234] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50300] + not-detected: [..1747] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1149] [Unknown][Unrated] + idle: [..1747] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1149] + not-detected: [...780] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1148] [Unknown][Unrated] + idle: [...780] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1148] + not-detected: [..1807] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1149] [Unknown][Unrated] + idle: [..1807] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1149] + not-detected: [...424] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1151] [Unknown][Unrated] + idle: [...424] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1151] + not-detected: [..1800] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1152] [Unknown][Unrated] + idle: [..1800] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1152] + not-detected: [...442] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1151] [Unknown][Unrated] + idle: [...442] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1151] + not-detected: [..1857] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1152] [Unknown][Unrated] + idle: [..1857] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1152] + not-detected: [...345] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1154] [Unknown][Unrated] + idle: [...345] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1154] + not-detected: [...398] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1154] [Unknown][Unrated] + idle: [...398] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1154] + not-detected: [...454] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][25734] [Unknown][Unrated] + idle: [...454] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][25734] + not-detected: [..1686] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][25735] [Unknown][Unrated] + idle: [..1686] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][25735] + not-detected: [...494] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][25734] [Unknown][Unrated] + idle: [...494] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][25734] + not-detected: [..1771] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][25735] [Unknown][Unrated] + idle: [..1771] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][25735] + not-detected: [..1673] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3211] [Unknown][Unrated] + idle: [..1673] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3211] + not-detected: [..1246] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1163] [Unknown][Unrated] + idle: [..1246] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1163] + not-detected: [..1754] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3211] [Unknown][Unrated] + idle: [..1754] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3211] + not-detected: [..1314] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1163] [Unknown][Unrated] + idle: [..1314] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1163] + not-detected: [...882] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1164] [Unknown][Unrated] + idle: [...882] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1164] + not-detected: [...973] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1164] [Unknown][Unrated] + idle: [...973] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1164] + not-detected: [...737] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1165] [Unknown][Unrated] + idle: [...737] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1165] + not-detected: [...818] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1165] [Unknown][Unrated] + idle: [...818] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1165] + not-detected: [...373] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1166] [Unknown][Unrated] + idle: [...373] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1166] + not-detected: [...411] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1166] [Unknown][Unrated] + idle: [...411] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1166] + not-detected: [...251] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][44176] [Unknown][Unrated] + idle: [...251] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][44176] + not-detected: [...174] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][13456] [Unknown][Unrated] + idle: [...174] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][13456] + not-detected: [...287] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][44176] [Unknown][Unrated] + idle: [...287] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][44176] + not-detected: [...547] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1169] [Unknown][Unrated] + idle: [...547] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1169] + not-detected: [...200] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][13456] [Unknown][Unrated] + idle: [...200] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][13456] + not-detected: [...600] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1169] [Unknown][Unrated] + idle: [...600] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1169] + not-detected: [..1946] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5269] [Unknown][Unrated] + idle: [..1946] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5269] + not-detected: [..1366] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3221] [Unknown][Unrated] + idle: [..1366] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3221] + not-detected: [..1976] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5269] [Unknown][Unrated] + idle: [..1976] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5269] + not-detected: [..1428] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3221] [Unknown][Unrated] + idle: [..1428] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3221] + not-detected: [..1020] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1174] [Unknown][Unrated] + idle: [..1020] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1174] + not-detected: [..1180] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1175] [Unknown][Unrated] + idle: [..1180] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1175] + not-detected: [..1085] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1174] [Unknown][Unrated] + idle: [..1085] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1174] + not-detected: [..1227] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1175] [Unknown][Unrated] + idle: [..1227] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1175] + not-detected: [...252] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1183] [Unknown][Unrated] + idle: [...252] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1183] + not-detected: [...835] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5280] [Unknown][Unrated] + idle: [...835] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5280] + not-detected: [...286] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1183] [Unknown][Unrated] + idle: [...286] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1183] + not-detected: [...912] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5280] [Unknown][Unrated] + idle: [...912] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5280] + not-detected: [...566] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1185] [Unknown][Unrated] + idle: [...566] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1185] + not-detected: [...949] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1186] [Unknown][Unrated] + idle: [...949] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1186] + not-detected: [...654] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1185] [Unknown][Unrated] + idle: [...654] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1185] + not-detected: [..1006] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1186] [Unknown][Unrated] + idle: [..1006] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1186] + not-detected: [...127] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1187] [Unknown][Unrated] + idle: [...127] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1187] + not-detected: [...165] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1187] [Unknown][Unrated] + idle: [...165] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1187] + not-detected: [...952] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][64680] [Unknown][Unrated] + idle: [...952] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][64680] + not-detected: [...874] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1192] [Unknown][Unrated] + idle: [...874] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1192] + not-detected: [..1003] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][64680] [Unknown][Unrated] + idle: [..1003] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][64680] + not-detected: [...931] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1192] [Unknown][Unrated] + idle: [...931] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1192] + not-detected: [..1782] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1198] [Unknown][Unrated] + idle: [..1782] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1198] + not-detected: [..1875] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1198] [Unknown][Unrated] + idle: [..1875] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1198] + not-detected: [...718] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1199] [Unknown][Unrated] + idle: [...718] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1199] + not-detected: [...787] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1199] [Unknown][Unrated] + idle: [...787] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1199] + not-detected: [...591] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1201] [Unknown][Unrated] + idle: [...591] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1201] + not-detected: [..1220] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5298] [Unknown][Unrated] + idle: [..1220] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5298] + not-detected: [...664] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1201] [Unknown][Unrated] + idle: [...664] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1201] + not-detected: [..1278] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5298] [Unknown][Unrated] + idle: [..1278] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5298] + not-detected: [..1181] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3260] [Unknown][Unrated] + idle: [..1181] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3260] + not-detected: [..1952] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3261] [Unknown][Unrated] + idle: [..1952] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3261] + not-detected: [..1637] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1213] [Unknown][Unrated] + idle: [..1637] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1213] + not-detected: [..1226] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3260] [Unknown][Unrated] + idle: [..1226] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3260] + not-detected: [..1970] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3261] [Unknown][Unrated] + idle: [..1970] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3261] + not-detected: [..1704] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1213] [Unknown][Unrated] + idle: [..1704] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1213] + not-detected: [...573] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1216] [Unknown][Unrated] + idle: [...573] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1216] + not-detected: [..1067] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1217] [Unknown][Unrated] + idle: [..1067] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1217] + not-detected: [...647] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1216] [Unknown][Unrated] + idle: [...647] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1216] + not-detected: [..1130] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1217] [Unknown][Unrated] + idle: [..1130] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1217] + not-detected: [...685] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1218] [Unknown][Unrated] + idle: [...685] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1218] + not-detected: [...762] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1218] [Unknown][Unrated] + idle: [...762] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1218] + not-detected: [..1948] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3268] [Unknown][Unrated] + idle: [..1948] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3268] + not-detected: [..1974] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3268] [Unknown][Unrated] + idle: [..1974] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3268] + not-detected: [..1433] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3269] [Unknown][Unrated] + idle: [..1433] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3269] + not-detected: [..1513] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3269] [Unknown][Unrated] + idle: [..1513] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3269] + not-detected: [...464] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9415] [Unknown][Unrated] + idle: [...464] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9415] + not-detected: [...484] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9415] [Unknown][Unrated] + idle: [...484] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9415] + guessed: [...538] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9418] [Git][Collaborative][Safe] + idle: [...538] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9418] + guessed: [...609] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9418] [Git][Collaborative][Safe] + idle: [...609] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9418] + not-detected: [....52] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1233] [Unknown][Unrated] + idle: [....52] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1233] + not-detected: [..1804] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1234] [Unknown][Unrated] + idle: [..1804] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1234] + not-detected: [....76] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1233] [Unknown][Unrated] + idle: [....76] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1233] + not-detected: [..1853] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1234] [Unknown][Unrated] + idle: [..1853] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1234] + not-detected: [..1325] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3283] [Unknown][Unrated] + idle: [..1325] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3283] + not-detected: [..1823] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1236] [Unknown][Unrated] + idle: [..1823] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1236] + not-detected: [..1420] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3283] [Unknown][Unrated] + idle: [..1420] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3283] + not-detected: [..1883] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1236] [Unknown][Unrated] + idle: [..1883] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1236] + not-detected: [..1806] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50389] [Unknown][Unrated] + idle: [..1806] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][50389] + not-detected: [..1882] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50389] [Unknown][Unrated] + idle: [..1882] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][50389] + not-detected: [...297] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1244] [Unknown][Unrated] + idle: [...297] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1244] + not-detected: [...323] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1244] [Unknown][Unrated] + idle: [...323] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1244] + not-detected: [...110] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1247] [Unknown][Unrated] + idle: [...110] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1247] + not-detected: [...568] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1248] [Unknown][Unrated] + idle: [...568] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1248] + not-detected: [...141] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1247] [Unknown][Unrated] + idle: [...141] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1247] + not-detected: [...652] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1248] [Unknown][Unrated] + idle: [...652] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1248] + not-detected: [..1191] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3300] [Unknown][Unrated] + idle: [..1191] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3300] + not-detected: [..1265] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3300] [Unknown][Unrated] + idle: [..1265] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3300] + not-detected: [...505] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3301] [Unknown][Unrated] + idle: [...505] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3301] + not-detected: [...526] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3301] [Unknown][Unrated] + idle: [...526] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3301] + not-detected: [..1698] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7402] [Unknown][Unrated] + idle: [..1698] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7402] + guessed: [.....3] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3306] [MySQL][Database][Acceptable] + idle: [.....3] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3306] + not-detected: [..1759] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7402] [Unknown][Unrated] + idle: [..1759] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7402] + not-detected: [...510] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1259] [Unknown][Unrated] + idle: [...510] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1259] + guessed: [....27] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3306] [MySQL][Database][Acceptable] + idle: [....27] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3306] + not-detected: [...561] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1259] [Unknown][Unrated] + idle: [...561] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1259] + not-detected: [..1681] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5357] [Unknown][Unrated] + idle: [..1681] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5357] + not-detected: [..1756] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5357] [Unknown][Unrated] + idle: [..1756] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5357] + not-detected: [...697] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1271] [Unknown][Unrated] + idle: [...697] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1271] + not-detected: [..1213] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1272] [Unknown][Unrated] + idle: [..1213] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1272] + not-detected: [...750] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1271] [Unknown][Unrated] + idle: [...750] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1271] + not-detected: [..1285] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1272] [Unknown][Unrated] + idle: [..1285] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1272] + not-detected: [..1375] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3322] [Unknown][Unrated] + idle: [..1375] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3322] + not-detected: [..1444] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3322] [Unknown][Unrated] + idle: [..1444] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3322] + not-detected: [..1386] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3323] [Unknown][Unrated] + idle: [..1386] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3323] + not-detected: [..1630] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3324] [Unknown][Unrated] + idle: [..1630] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3324] + not-detected: [..1463] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3323] [Unknown][Unrated] + idle: [..1463] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3323] + not-detected: [..1711] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3324] [Unknown][Unrated] + idle: [..1711] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3324] + not-detected: [..1069] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3325] [Unknown][Unrated] + idle: [..1069] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3325] + not-detected: [...571] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1277] [Unknown][Unrated] + idle: [...571] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1277] + not-detected: [..1128] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3325] [Unknown][Unrated] + idle: [..1128] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3325] + not-detected: [...649] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1277] [Unknown][Unrated] + idle: [...649] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1277] + not-detected: [..1473] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][40193] [Unknown][Unrated] + idle: [..1473] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][40193] + not-detected: [..1576] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][40193] [Unknown][Unrated] + idle: [..1576] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][40193] + not-detected: [..1377] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3333] [Unknown][Unrated] + idle: [..1377] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3333] + not-detected: [..1452] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3333] [Unknown][Unrated] + idle: [..1452] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3333] + not-detected: [..1321] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1287] [Unknown][Unrated] + idle: [..1321] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1287] + not-detected: [..1424] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1287] [Unknown][Unrated] + idle: [..1424] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1287] + not-detected: [..1498] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7435] [Unknown][Unrated] + idle: [..1498] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7435] + not-detected: [..1551] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7435] [Unknown][Unrated] + idle: [..1551] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7435] + not-detected: [...797] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9485] [Unknown][Unrated] + idle: [...797] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9485] + not-detected: [...858] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9485] [Unknown][Unrated] + idle: [...858] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9485] + not-detected: [...137] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1296] [Unknown][Unrated] + idle: [...137] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1296] + not-detected: [...155] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1296] [Unknown][Unrated] + idle: [...155] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1296] + not-detected: [..1438] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7443] [Unknown][Unrated] + idle: [..1438] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.7443] + not-detected: [..1508] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7443] [Unknown][Unrated] + idle: [..1508] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.7443] + not-detected: [....98] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1300] [Unknown][Unrated] + idle: [....98] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1300] + not-detected: [...632] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1301] [Unknown][Unrated] + idle: [...632] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1301] + not-detected: [...152] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1300] [Unknown][Unrated] + idle: [...152] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1300] + not-detected: [...705] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1301] [Unknown][Unrated] + idle: [...705] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1301] + not-detected: [..1736] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3351] [Unknown][Unrated] + idle: [..1736] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3351] + not-detected: [..1818] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3351] [Unknown][Unrated] + idle: [..1818] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3351] + not-detected: [...171] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9500] [Unknown][Unrated] + idle: [...171] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9500] + not-detected: [...738] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5405] [Unknown][Unrated] + idle: [...738] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5405] + not-detected: [...620] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1309] [Unknown][Unrated] + idle: [...620] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1309] + not-detected: [...203] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9500] [Unknown][Unrated] + idle: [...203] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9500] + not-detected: [...943] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9502] [Unknown][Unrated] + idle: [...943] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9502] + not-detected: [...817] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5405] [Unknown][Unrated] + idle: [...817] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5405] + not-detected: [..1393] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1310] [Unknown][Unrated] + idle: [..1393] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1310] + not-detected: [...677] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1309] [Unknown][Unrated] + idle: [...677] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1309] + not-detected: [..1456] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1310] [Unknown][Unrated] + idle: [..1456] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1310] + not-detected: [..1065] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9503] [Unknown][Unrated] + idle: [..1065] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.9503] + not-detected: [..1012] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9502] [Unknown][Unrated] + idle: [..1012] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9502] + not-detected: [...111] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1311] [Unknown][Unrated] + idle: [...111] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1311] + not-detected: [..1132] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9503] [Unknown][Unrated] + idle: [..1132] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.9503] + not-detected: [...140] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1311] [Unknown][Unrated] + idle: [...140] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1311] + not-detected: [....48] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5414] [Unknown][Unrated] + idle: [....48] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5414] + not-detected: [...593] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3367] [Unknown][Unrated] + idle: [...593] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3367] + not-detected: [....80] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5414] [Unknown][Unrated] + idle: [....80] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5414] + not-detected: [...662] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3367] [Unknown][Unrated] + idle: [...662] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3367] + not-detected: [...294] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3369] [Unknown][Unrated] + idle: [...294] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3369] + not-detected: [..1345] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3370] [Unknown][Unrated] + idle: [..1345] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3370] + not-detected: [...543] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1322] [Unknown][Unrated] + idle: [...543] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1322] + not-detected: [...326] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3369] [Unknown][Unrated] + idle: [...326] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3369] + not-detected: [..1535] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3371] [Unknown][Unrated] + idle: [..1535] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3371] + not-detected: [..1400] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3370] [Unknown][Unrated] + idle: [..1400] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3370] + not-detected: [...604] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1322] [Unknown][Unrated] + idle: [...604] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1322] + not-detected: [..1845] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3372] [Unknown][Unrated] + idle: [..1845] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.3372] + not-detected: [..1618] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3371] [Unknown][Unrated] + idle: [..1618] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3371] + not-detected: [...173] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15660] [Unknown][Unrated] + idle: [...173] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][15660] + not-detected: [..1916] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3372] [Unknown][Unrated] + idle: [..1916] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.3372] + not-detected: [...201] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15660] [Unknown][Unrated] + idle: [...201] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][15660] + not-detected: [...693] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][30000] [Unknown][Unrated] + idle: [...693] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][30000] + not-detected: [...372] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1328] [Unknown][Unrated] + idle: [...372] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1328] + not-detected: [...754] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][30000] [Unknown][Unrated] + idle: [...754] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][30000] + not-detected: [...412] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1328] [Unknown][Unrated] + idle: [...412] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1328] + not-detected: [..1585] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1334] [Unknown][Unrated] + idle: [..1585] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.1334] + not-detected: [..1665] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1334] [Unknown][Unrated] + idle: [..1665] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.1334] + not-detected: [...257] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5431] [Unknown][Unrated] + idle: [...257] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5431] + guessed: [..1146] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5432] [PostgreSQL][Database][Acceptable] + idle: [..1146] [ip4][..tcp] [.....172.16.0.8][36050] -> [...64.13.134.52][.5432] + not-detected: [...281] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5431] [Unknown][Unrated] + idle: [...281] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5431] + guessed: [..1201] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5432] [PostgreSQL][Database][Acceptable] + idle: [..1201] [ip4][..tcp] [.....172.16.0.8][36051] -> [...64.13.134.52][.5432] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/syslog.pcap.out b/test/results/flow-info/syslog.pcap.out new file mode 100644 index 000000000..2395cb8a0 --- /dev/null +++ b/test/results/flow-info/syslog.pcap.out @@ -0,0 +1,97 @@ + DAEMON-EVENT: init + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...172.20.51.54][..514] -> [..172.31.110.40][..514] + detected: [.....1] [ip4][..udp] [...172.20.51.54][..514] -> [..172.31.110.40][..514] [Syslog][System][Acceptable] + DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..udp] [..10.251.23.139][59194] -> [....62.39.3.142][..514] + detected: [.....2] [ip4][..udp] [..10.251.23.139][59194] -> [....62.39.3.142][..514] [Syslog][System][Acceptable] + idle: [.....1] [ip4][..udp] [...172.20.51.54][..514] -> [..172.31.110.40][..514] [Syslog][System][Acceptable] + update: [.....2] [ip4][..udp] [..10.251.23.139][59194] -> [....62.39.3.142][..514] [Syslog][System][Acceptable] + DAEMON-EVENT: [Processed: 17 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 1] + new: [.....3] [ip4][..udp] [.192.168.121.10][50080] -> [.192.168.120.10][..514] + detected: [.....3] [ip4][..udp] [.192.168.121.10][50080] -> [.192.168.120.10][..514] [Syslog][System][Acceptable] + idle: [.....2] [ip4][..udp] [..10.251.23.139][59194] -> [....62.39.3.142][..514] [Syslog][System][Acceptable] + update: [.....3] [ip4][..udp] [.192.168.121.10][50080] -> [.192.168.120.10][..514] [Syslog][System][Acceptable] + new: [.....4] [ip4][..udp] [..192.168.121.2][50352] -> [.192.168.120.10][..514] + detected: [.....4] [ip4][..udp] [..192.168.121.2][50352] -> [.192.168.120.10][..514] [Syslog][System][Acceptable] + update: [.....3] [ip4][..udp] [.192.168.121.10][50080] -> [.192.168.120.10][..514] [Syslog][System][Acceptable] + DAEMON-EVENT: [Processed: 23 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 3] + new: [.....5] [ip4][...41] [..193.24.227.10] -> [..216.66.86.114] + new: [.....6] [ip4][...41] [...216.66.80.30] -> [..193.24.227.12] + idle: [.....4] [ip4][..udp] [..192.168.121.2][50352] -> [.192.168.120.10][..514] [Syslog][System][Acceptable] + idle: [.....3] [ip4][..udp] [.192.168.121.10][50080] -> [.192.168.120.10][..514] [Syslog][System][Acceptable] + DAEMON-EVENT: [Processed: 29 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 3] + new: [.....7] [ip4][..udp] [..172.21.251.36][62679] -> [..172.19.196.11][..514] + detected: [.....7] [ip4][..udp] [..172.21.251.36][62679] -> [..172.19.196.11][..514] [Syslog][System][Acceptable] + not-detected: [.....6] [ip4][...41] [...216.66.80.30] -> [..193.24.227.12] [Unknown][Unrated] + idle: [.....6] [ip4][...41] [...216.66.80.30] -> [..193.24.227.12] + not-detected: [.....5] [ip4][...41] [..193.24.227.10] -> [..216.66.86.114] [Unknown][Unrated] + idle: [.....5] [ip4][...41] [..193.24.227.10] -> [..216.66.86.114] + new: [.....8] [ip4][..udp] [.192.168.72.140][62679] -> [192.168.178.148][..514] + detected: [.....8] [ip4][..udp] [.192.168.72.140][62679] -> [192.168.178.148][..514] [Syslog][System][Acceptable] + update: [.....7] [ip4][..udp] [..172.21.251.36][62679] -> [..172.19.196.11][..514] [Syslog][System][Acceptable] + new: [.....9] [ip4][..udp] [.192.168.67.241][62679] -> [....10.193.53.6][..514] + detected: [.....9] [ip4][..udp] [.192.168.67.241][62679] -> [....10.193.53.6][..514] [Syslog][System][Acceptable] + idle: [.....7] [ip4][..udp] [..172.21.251.36][62679] -> [..172.19.196.11][..514] [Syslog][System][Acceptable] + update: [.....8] [ip4][..udp] [.192.168.72.140][62679] -> [192.168.178.148][..514] [Syslog][System][Acceptable] + DAEMON-EVENT: [Processed: 35 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 9|skipped: 0|!detected: 2|guessed: 0|detection-updates: 0|updates: 5] + new: [....10] [ip4][..udp] [192.168.126.102][57166] -> [.172.19.177.230][..514] + detected: [....10] [ip4][..udp] [192.168.126.102][57166] -> [.172.19.177.230][..514] [Syslog][System][Acceptable] + idle: [.....8] [ip4][..udp] [.192.168.72.140][62679] -> [192.168.178.148][..514] [Syslog][System][Acceptable] + idle: [.....9] [ip4][..udp] [.192.168.67.241][62679] -> [....10.193.53.6][..514] [Syslog][System][Acceptable] + new: [....11] [ip4][..udp] [..10.22.179.215][57166] -> [...172.26.54.76][..514] + detected: [....11] [ip4][..udp] [..10.22.179.215][57166] -> [...172.26.54.76][..514] [Syslog][System][Acceptable] + update: [....10] [ip4][..udp] [192.168.126.102][57166] -> [.172.19.177.230][..514] [Syslog][System][Acceptable] + new: [....12] [ip4][..udp] [.192.168.45.162][57166] -> [..10.208.120.95][..514] + detected: [....12] [ip4][..udp] [.192.168.45.162][57166] -> [..10.208.120.95][..514] [Syslog][System][Acceptable] + update: [....11] [ip4][..udp] [..10.22.179.215][57166] -> [...172.26.54.76][..514] [Syslog][System][Acceptable] + new: [....13] [ip4][..udp] [..10.224.43.149][57166] -> [..172.23.243.89][..514] + detected: [....13] [ip4][..udp] [..10.224.43.149][57166] -> [..172.23.243.89][..514] [Syslog][System][Acceptable] + idle: [....10] [ip4][..udp] [192.168.126.102][57166] -> [.172.19.177.230][..514] [Syslog][System][Acceptable] + update: [....11] [ip4][..udp] [..10.22.179.215][57166] -> [...172.26.54.76][..514] [Syslog][System][Acceptable] + update: [....12] [ip4][..udp] [.192.168.45.162][57166] -> [..10.208.120.95][..514] [Syslog][System][Acceptable] + DAEMON-EVENT: [Processed: 49 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 13|skipped: 0|!detected: 2|guessed: 0|detection-updates: 0|updates: 9] + new: [....14] [ip4][..udp] [.172.26.229.190][..514] -> [..172.23.80.196][..514] + detected: [....14] [ip4][..udp] [.172.26.229.190][..514] -> [..172.23.80.196][..514] [Syslog][System][Acceptable] + idle: [....13] [ip4][..udp] [..10.224.43.149][57166] -> [..172.23.243.89][..514] [Syslog][System][Acceptable] + idle: [....11] [ip4][..udp] [..10.22.179.215][57166] -> [...172.26.54.76][..514] [Syslog][System][Acceptable] + idle: [....12] [ip4][..udp] [.192.168.45.162][57166] -> [..10.208.120.95][..514] [Syslog][System][Acceptable] + new: [....15] [ip4][..tcp] [.10.186.117.194][49948] -> [..169.46.82.162][52173] + update: [....14] [ip4][..udp] [.172.26.229.190][..514] -> [..172.23.80.196][..514] [Syslog][System][Acceptable] + detected: [....15] [ip4][..tcp] [.10.186.117.194][49948] -> [..169.46.82.162][52173] [Syslog][System][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....14] [ip4][..udp] [.172.26.229.190][..514] -> [..172.23.80.196][..514] [Syslog][System][Acceptable] + new: [....16] [ip4][..udp] [192.168.254.157][49611] -> [.196.240.66.148][..514] + detected: [....16] [ip4][..udp] [192.168.254.157][49611] -> [.196.240.66.148][..514] [Syslog][System][Acceptable] + DAEMON-EVENT: [Processed: 81 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 16|skipped: 0|!detected: 2|guessed: 0|detection-updates: 0|updates: 10] + new: [....17] [ip4][..udp] [..10.11.105.154][20627] -> [.....10.6.15.11][..514] + detected: [....17] [ip4][..udp] [..10.11.105.154][20627] -> [.....10.6.15.11][..514] [Syslog][System][Acceptable] + idle: [....16] [ip4][..udp] [192.168.254.157][49611] -> [.196.240.66.148][..514] [Syslog][System][Acceptable] + end: [....15] [ip4][..tcp] [.10.186.117.194][49948] -> [..169.46.82.162][52173] [Syslog][System][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: [Processed: 82 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 17|skipped: 0|!detected: 2|guessed: 0|detection-updates: 0|updates: 10] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + DAEMON-EVENT: [Processed: 82 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 17|skipped: 0|!detected: 2|guessed: 0|detection-updates: 0|updates: 10] + new: [....18] [ip4][..udp] [...10.94.232.21][57374] -> [...10.94.150.21][..514] + detected: [....18] [ip4][..udp] [...10.94.232.21][57374] -> [...10.94.150.21][..514] [Syslog][System][Acceptable] + new: [....19] [ip4][..udp] [....10.94.80.60][39438] -> [...10.94.150.22][..514] + detected: [....19] [ip4][..udp] [....10.94.80.60][39438] -> [...10.94.150.22][..514] [Syslog][System][Acceptable] + idle: [....19] [ip4][..udp] [....10.94.80.60][39438] -> [...10.94.150.22][..514] [Syslog][System][Acceptable] + idle: [....17] [ip4][..udp] [..10.11.105.154][20627] -> [.....10.6.15.11][..514] [Syslog][System][Acceptable] + idle: [....18] [ip4][..udp] [...10.94.232.21][57374] -> [...10.94.150.21][..514] [Syslog][System][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/targusdataspeed_false_positives.pcap.out b/test/results/flow-info/targusdataspeed_false_positives.pcap.out new file mode 100644 index 000000000..2c58d0de8 --- /dev/null +++ b/test/results/flow-info/targusdataspeed_false_positives.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + new: [.....1] [ip4][..udp] [......10.0.2.15][23994] -> [..79.164.55.123][.5001] + detected: [.....1] [ip4][..udp] [......10.0.2.15][23994] -> [..79.164.55.123][.5001] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....2] [ip4][..udp] [......10.0.2.15][23994] -> [...89.64.45.227][.5201] + detected: [.....2] [ip4][..udp] [......10.0.2.15][23994] -> [...89.64.45.227][.5201] [BitTorrent][Download][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....2] [ip4][..udp] [......10.0.2.15][23994] -> [...89.64.45.227][.5201] + idle: [.....1] [ip4][..udp] [......10.0.2.15][23994] -> [..79.164.55.123][.5001] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/teams.pcap.out b/test/results/flow-info/teams.pcap.out new file mode 100644 index 000000000..57df5d70c --- /dev/null +++ b/test/results/flow-info/teams.pcap.out @@ -0,0 +1,541 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] + detected: [.....1] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + ERROR-EVENT: Unknown packet type + new: [.....2] [ip4][..tcp] [....192.168.1.6][58533] -> [.149.154.167.91][..443] [MIDSTREAM] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [.....3] [ip4][..udp] [....192.168.1.6][60813] -> [....192.168.1.1][...53] + detected: [.....3] [ip4][..udp] [....192.168.1.6][60813] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [.....3] [ip4][..udp] [....192.168.1.6][60813] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [.....4] [ip4][..tcp] [....192.168.1.6][60532] -> [...52.114.77.33][..443] + new: [.....5] [ip4][..tcp] [....192.168.1.6][60533] -> [.52.113.194.132][..443] + detected: [.....5] [ip4][..tcp] [....192.168.1.6][60533] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + detection-update: [.....5] [ip4][..tcp] [....192.168.1.6][60533] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + detected: [.....4] [ip4][..tcp] [....192.168.1.6][60532] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [.....5] [ip4][..tcp] [....192.168.1.6][60533] -> [.52.113.194.132][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.030| 0.006| 0.009] + [IAT(c->s)...: 0.000| 0.030| 0.007| 0.008][IAT(s->c)...: 0.000| 0.029| 0.006| 0.009] + [PKTLEN(c->s): 54.000| 312.000| 106.100| 83.900][PKTLEN(s->c): 60.000|1506.000| 674.300| 638.600] + [BINS(c->s)..: 10,1,1,0,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,1,0,0,0,1,0,0,0,1,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0] + detection-update: [.....5] [ip4][..tcp] [....192.168.1.6][60533] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + detection-update: [.....4] [ip4][..tcp] [....192.168.1.6][60532] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + ERROR-EVENT: Unknown packet type + new: [.....6] [ip4][..tcp] [....192.168.1.6][60534] -> [.....40.126.9.5][..443] + detected: [.....6] [ip4][..tcp] [....192.168.1.6][60534] -> [.....40.126.9.5][..443] [TLS.Microsoft365][Collaborative][Acceptable] + detection-update: [.....6] [ip4][..tcp] [....192.168.1.6][60534] -> [.....40.126.9.5][..443] [TLS.Microsoft365][Collaborative][Acceptable] + analyse: [.....4] [ip4][..tcp] [....192.168.1.6][60532] -> [...52.114.77.33][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.221| 0.032| 0.054] + [IAT(c->s)...: 0.000| 0.177| 0.023| 0.042][IAT(s->c)...: 0.000| 0.221| 0.055| 0.072] + [PKTLEN(c->s): 66.000|1494.000|1071.500| 639.700][PKTLEN(s->c): 66.000|1506.000| 539.600| 656.800] + [BINS(c->s)..: 5,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,0,0,0] + [BINS(s->c)..: 5,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,2,0,0] + detection-update: [.....4] [ip4][..tcp] [....192.168.1.6][60532] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + new: [.....7] [ip4][..tcp] [....192.168.1.6][60535] -> [...52.114.77.33][..443] + detected: [.....7] [ip4][..tcp] [....192.168.1.6][60535] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + new: [.....8] [ip4][..tcp] [....192.168.1.6][60536] -> [.52.113.194.132][..443] + detected: [.....8] [ip4][..tcp] [....192.168.1.6][60536] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + detection-update: [.....8] [ip4][..tcp] [....192.168.1.6][60536] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + analyse: [.....7] [ip4][..tcp] [....192.168.1.6][60535] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.050| 0.018| 0.021] + [IAT(c->s)...: 0.000| 0.050| 0.015| 0.021][IAT(s->c)...: 0.000| 0.049| 0.024| 0.021] + [PKTLEN(c->s): 66.000|1494.000| 836.300| 677.200][PKTLEN(s->c): 66.000|1506.000| 458.200| 595.300] + [BINS(c->s)..: 7,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0,0] + [BINS(s->c)..: 7,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,2,0,0] + analyse: [.....8] [ip4][..tcp] [....192.168.1.6][60536] -> [.52.113.194.132][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.050| 0.005| 0.010] + [IAT(c->s)...: 0.000| 0.014| 0.004| 0.005][IAT(s->c)...: 0.000| 0.050| 0.006| 0.012] + [PKTLEN(c->s): 54.000|1494.000| 257.900| 412.500][PKTLEN(s->c): 60.000|1506.000| 581.800| 641.500] + [BINS(c->s)..: 8,1,2,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 7,1,1,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0] + detection-update: [.....8] [ip4][..tcp] [....192.168.1.6][60536] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [.....9] [ip4][..tcp] [....192.168.1.6][60537] -> [...52.114.77.33][..443] + detected: [.....9] [ip4][..tcp] [....192.168.1.6][60537] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....9] [ip4][..tcp] [....192.168.1.6][60537] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + ERROR-EVENT: Unknown packet type + new: [....10] [ip4][..udp] [....192.168.1.6][64046] -> [....192.168.1.1][...53] + detected: [....10] [ip4][..udp] [....192.168.1.6][64046] -> [....192.168.1.1][...53] [DNS.ntop][Network][Safe] + new: [....11] [ip4][..udp] [....192.168.1.6][17500] -> [255.255.255.255][17500] + detected: [....11] [ip4][..udp] [....192.168.1.6][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + new: [....12] [ip4][..udp] [....192.168.1.6][17500] -> [..192.168.1.255][17500] + detected: [....12] [ip4][..udp] [....192.168.1.6][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + detection-update: [....10] [ip4][..udp] [....192.168.1.6][64046] -> [....192.168.1.1][...53] [DNS.ntop][Network][Safe] + new: [....13] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [....13] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [....14] [ip4][..tcp] [..93.62.150.157][..443] -> [....192.168.1.6][60512] [MIDSTREAM] + detected: [....14] [ip4][..tcp] [..93.62.150.157][..443] -> [....192.168.1.6][60512] [TLS][Web][Safe] + ERROR-EVENT: Unknown packet type + new: [....15] [ip4][..udp] [....192.168.1.6][56634] -> [....192.168.1.1][...53] + detected: [....15] [ip4][..udp] [....192.168.1.6][56634] -> [....192.168.1.1][...53] [DNS][ConnCheck][Acceptable] + detection-update: [....15] [ip4][..udp] [....192.168.1.6][56634] -> [....192.168.1.1][...53] [DNS][ConnCheck][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [....16] [ip4][..udp] [....192.168.1.6][51033] -> [....192.168.1.1][...53] + detected: [....16] [ip4][..udp] [....192.168.1.6][51033] -> [....192.168.1.1][...53] [DNS.Teams][VoIP][Safe] + new: [....17] [ip4][..udp] [....192.168.1.6][63106] -> [....192.168.1.1][...53] + detected: [....17] [ip4][..udp] [....192.168.1.6][63106] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + detection-update: [....17] [ip4][..udp] [....192.168.1.6][63106] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + new: [....18] [ip4][..tcp] [....192.168.1.6][60538] -> [...52.114.75.70][..443] + detection-update: [....16] [ip4][..udp] [....192.168.1.6][51033] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + new: [....19] [ip4][..tcp] [....192.168.1.6][60539] -> [...52.114.75.69][..443] + detected: [....18] [ip4][..tcp] [....192.168.1.6][60538] -> [...52.114.75.70][..443] [TLS.Teams][Collaborative][Safe] + detected: [....19] [ip4][..tcp] [....192.168.1.6][60539] -> [...52.114.75.69][..443] [TLS.Skype_Teams][VoIP][Acceptable] + detection-update: [....18] [ip4][..tcp] [....192.168.1.6][60538] -> [...52.114.75.70][..443] [TLS.Teams][Collaborative][Safe] + detection-update: [....19] [ip4][..tcp] [....192.168.1.6][60539] -> [...52.114.75.69][..443] [TLS.Skype_Teams][VoIP][Acceptable] + new: [....20] [ip4][..tcp] [....192.168.1.6][60540] -> [...52.114.75.70][..443] + new: [....21] [ip4][..tcp] [....192.168.1.6][60541] -> [...52.114.75.69][..443] + detected: [....20] [ip4][..tcp] [....192.168.1.6][60540] -> [...52.114.75.70][..443] [TLS.Teams][Collaborative][Safe] + detected: [....21] [ip4][..tcp] [....192.168.1.6][60541] -> [...52.114.75.69][..443] [TLS.Skype_Teams][VoIP][Acceptable] + new: [....22] [ip4][..udp] [....192.168.1.6][49514] -> [....192.168.1.1][...53] + detected: [....22] [ip4][..udp] [....192.168.1.6][49514] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + detection-update: [....20] [ip4][..tcp] [....192.168.1.6][60540] -> [...52.114.75.70][..443] [TLS.Teams][Collaborative][Safe] + detection-update: [....21] [ip4][..tcp] [....192.168.1.6][60541] -> [...52.114.75.69][..443] [TLS.Skype_Teams][VoIP][Acceptable] + detection-update: [....22] [ip4][..udp] [....192.168.1.6][49514] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + new: [....23] [ip4][..tcp] [....192.168.1.6][60542] -> [.52.113.194.132][..443] + detected: [....23] [ip4][..tcp] [....192.168.1.6][60542] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + detection-update: [....23] [ip4][..tcp] [....192.168.1.6][60542] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + new: [....24] [ip4][..udp] [....192.168.1.6][65387] -> [....192.168.1.1][...53] + detected: [....24] [ip4][..udp] [....192.168.1.6][65387] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + new: [....25] [ip4][..tcp] [....192.168.1.6][60543] -> [...52.114.77.33][..443] + detection-update: [....24] [ip4][..udp] [....192.168.1.6][65387] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + new: [....26] [ip4][..tcp] [....192.168.1.6][60544] -> [...52.114.76.48][..443] + detected: [....25] [ip4][..tcp] [....192.168.1.6][60543] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....26] [ip4][..tcp] [....192.168.1.6][60544] -> [...52.114.76.48][..443] [TLS.Teams][Collaborative][Safe] + detection-update: [....26] [ip4][..tcp] [....192.168.1.6][60544] -> [...52.114.76.48][..443] [TLS.Teams][Collaborative][Safe] + detection-update: [....25] [ip4][..tcp] [....192.168.1.6][60543] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + ERROR-EVENT: Unknown packet type + new: [....27] [ip4][..udp] [....192.168.1.6][57530] -> [....192.168.1.1][...53] + detected: [....27] [ip4][..udp] [....192.168.1.6][57530] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + detection-update: [....27] [ip4][..udp] [....192.168.1.6][57530] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + new: [....28] [ip4][..tcp] [....192.168.1.6][60545] -> [...52.114.77.58][..443] + new: [....29] [ip4][..tcp] [.162.125.19.131][..443] -> [....192.168.1.6][60344] [MIDSTREAM] + detected: [....29] [ip4][..tcp] [.162.125.19.131][..443] -> [....192.168.1.6][60344] [TLS.Dropbox][Cloud][Acceptable] + detected: [....28] [ip4][..tcp] [....192.168.1.6][60545] -> [...52.114.77.58][..443] [TLS.Teams][Collaborative][Safe] + detection-update: [....28] [ip4][..tcp] [....192.168.1.6][60545] -> [...52.114.77.58][..443] [TLS.Teams][Collaborative][Safe] + analyse: [....25] [ip4][..tcp] [....192.168.1.6][60543] -> [...52.114.77.33][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.153| 0.028| 0.040] + [IAT(c->s)...: 0.000| 0.153| 0.022| 0.044][IAT(s->c)...: 0.000| 0.086| 0.039| 0.030] + [PKTLEN(c->s): 66.000|1494.000|1032.800| 653.600][PKTLEN(s->c): 66.000|1506.000| 453.500| 621.500] + [BINS(c->s)..: 5,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,0,0,0] + [BINS(s->c)..: 7,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,2,0,0] + detection-update: [....25] [ip4][..tcp] [....192.168.1.6][60543] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + new: [....30] [ip4][..tcp] [....192.168.1.6][60546] -> [.167.99.215.164][.4434] + detected: [....30] [ip4][..tcp] [....192.168.1.6][60546] -> [.167.99.215.164][.4434] [TLS.ntop][Network][Safe] + RISK: Known Proto on Non Std Port + detection-update: [....30] [ip4][..tcp] [....192.168.1.6][60546] -> [.167.99.215.164][.4434] [TLS.ntop][Network][Safe] + RISK: Known Proto on Non Std Port + analyse: [....28] [ip4][..tcp] [....192.168.1.6][60545] -> [...52.114.77.58][..443] [TLS.Teams][Collaborative][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.201| 0.025| 0.047] + [IAT(c->s)...: 0.000| 0.201| 0.020| 0.047][IAT(s->c)...: 0.000| 0.168| 0.032| 0.047] + [PKTLEN(c->s): 54.000|1494.000| 197.300| 326.200][PKTLEN(s->c): 60.000|1506.000| 583.500| 630.100] + [BINS(c->s)..: 11,1,1,1,1,1,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 3,3,1,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0] + new: [....31] [ip4][..udp] [....192.168.1.6][57504] -> [....192.168.1.1][...53] + detected: [....31] [ip4][..udp] [....192.168.1.6][57504] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + detection-update: [....31] [ip4][..udp] [....192.168.1.6][57504] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + new: [....32] [ip4][..tcp] [....192.168.1.6][60547] -> [...52.114.88.59][..443] + detected: [....32] [ip4][..tcp] [....192.168.1.6][60547] -> [...52.114.88.59][..443] [TLS.Teams][Collaborative][Safe] + new: [....33] [ip4][..tcp] [....192.168.1.6][60548] -> [...52.114.77.33][..443] + detected: [....33] [ip4][..tcp] [....192.168.1.6][60548] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + ERROR-EVENT: Unknown packet type + detection-update: [....33] [ip4][..tcp] [....192.168.1.6][60548] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [....32] [ip4][..tcp] [....192.168.1.6][60547] -> [...52.114.88.59][..443] [TLS.Teams][Collaborative][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.115| 0.021| 0.031] + [IAT(c->s)...: 0.000| 0.115| 0.019| 0.033][IAT(s->c)...: 0.000| 0.080| 0.023| 0.028] + [PKTLEN(c->s): 66.000|1494.000| 210.800| 333.900][PKTLEN(s->c): 66.000|1506.000| 623.100| 618.900] + [BINS(c->s)..: 11,1,1,1,0,0,2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0] + [BINS(s->c)..: 3,2,1,0,0,1,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,4,0,0] + ERROR-EVENT: Unknown packet type + new: [....34] [ip4][..udp] [....192.168.1.6][59403] -> [....192.168.1.1][...53] + detected: [....34] [ip4][..udp] [....192.168.1.6][59403] -> [....192.168.1.1][...53] [DNS.Microsoft365][Collaborative][Acceptable] + detection-update: [....34] [ip4][..udp] [....192.168.1.6][59403] -> [....192.168.1.1][...53] [DNS.Microsoft365][Collaborative][Acceptable] + new: [....35] [ip4][..tcp] [....192.168.1.6][60549] -> [...13.107.18.11][..443] + detected: [....35] [ip4][..tcp] [....192.168.1.6][60549] -> [...13.107.18.11][..443] [TLS.Microsoft365][Collaborative][Acceptable] + detection-update: [....35] [ip4][..tcp] [....192.168.1.6][60549] -> [...13.107.18.11][..443] [TLS.Microsoft365][Collaborative][Acceptable] + analyse: [....23] [ip4][..tcp] [....192.168.1.6][60542] -> [.52.113.194.132][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.010| 0.146| 0.490] + [IAT(c->s)...: 0.000| 1.998| 0.155| 0.512][IAT(s->c)...: 0.000| 2.010| 0.139| 0.470] + [PKTLEN(c->s): 54.000| 575.000| 144.200| 146.800][PKTLEN(s->c): 60.000|1506.000| 473.700| 585.300] + [BINS(c->s)..: 9,1,1,0,1,0,1,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,1,1,0,1,0,0,0,0,1,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0] + detection-update: [....23] [ip4][..tcp] [....192.168.1.6][60542] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + ERROR-EVENT: Unknown packet type + analyse: [....35] [ip4][..tcp] [....192.168.1.6][60549] -> [...13.107.18.11][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.540| 0.024| 0.095] + [IAT(c->s)...: 0.000| 0.540| 0.038| 0.126][IAT(s->c)...: 0.000| 0.033| 0.007| 0.009] + [PKTLEN(c->s): 54.000|1494.000| 248.200| 353.800][PKTLEN(s->c): 60.000|1506.000| 470.600| 569.000] + [BINS(c->s)..: 9,1,1,0,2,0,2,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 5,2,1,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + detection-update: [....35] [ip4][..tcp] [....192.168.1.6][60549] -> [...13.107.18.11][..443] [TLS.Microsoft365][Collaborative][Acceptable] + new: [....36] [ip4][..udp] [....192.168.1.6][61245] -> [....192.168.1.1][...53] + detected: [....36] [ip4][..udp] [....192.168.1.6][61245] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + new: [....37] [ip4][..udp] [....192.168.1.6][53678] -> [....192.168.1.1][...53] + detected: [....37] [ip4][..udp] [....192.168.1.6][53678] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + new: [....38] [ip4][..udp] [....192.168.1.6][65230] -> [....192.168.1.1][...53] + detected: [....38] [ip4][..udp] [....192.168.1.6][65230] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + new: [....39] [ip4][..udp] [....192.168.1.6][50653] -> [....192.168.1.1][...53] + detected: [....39] [ip4][..udp] [....192.168.1.6][50653] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + detection-update: [....37] [ip4][..udp] [....192.168.1.6][53678] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + detection-update: [....38] [ip4][..udp] [....192.168.1.6][65230] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + new: [....40] [ip4][..tcp] [....192.168.1.6][60551] -> [...52.114.15.45][..443] + detection-update: [....39] [ip4][..udp] [....192.168.1.6][50653] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + detection-update: [....36] [ip4][..udp] [....192.168.1.6][61245] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + RISK: Suspicious DNS Traffic + new: [....41] [ip4][..udp] [....192.168.1.6][58457] -> [....192.168.1.1][...53] + detected: [....41] [ip4][..udp] [....192.168.1.6][58457] -> [....192.168.1.1][...53] [DNS.Microsoft365][Collaborative][Acceptable] + detection-update: [....41] [ip4][..udp] [....192.168.1.6][58457] -> [....192.168.1.1][...53] [DNS.Microsoft365][Collaborative][Acceptable] + new: [....42] [ip4][..tcp] [....192.168.1.6][60552] -> [...52.114.77.33][..443] + new: [....43] [ip4][..tcp] [....192.168.1.6][60554] -> [.52.113.194.132][..443] + new: [....44] [ip4][..udp] [....192.168.1.6][51309] -> [....192.168.1.1][...53] + detected: [....44] [ip4][..udp] [....192.168.1.6][51309] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....45] [ip4][..tcp] [....192.168.1.6][60555] -> [...52.114.77.33][..443] + new: [....46] [ip4][..tcp] [....192.168.1.6][60556] -> [.....40.126.9.7][..443] + detected: [....43] [ip4][..tcp] [....192.168.1.6][60554] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....44] [ip4][..udp] [....192.168.1.6][51309] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detected: [....40] [ip4][..tcp] [....192.168.1.6][60551] -> [...52.114.15.45][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....43] [ip4][..tcp] [....192.168.1.6][60554] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....42] [ip4][..tcp] [....192.168.1.6][60552] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....46] [ip4][..tcp] [....192.168.1.6][60556] -> [.....40.126.9.7][..443] [TLS.Microsoft365][Collaborative][Acceptable] + detected: [....45] [ip4][..tcp] [....192.168.1.6][60555] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....46] [ip4][..tcp] [....192.168.1.6][60556] -> [.....40.126.9.7][..443] [TLS.Microsoft365][Collaborative][Acceptable] + detection-update: [....42] [ip4][..tcp] [....192.168.1.6][60552] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....45] [ip4][..tcp] [....192.168.1.6][60555] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + ERROR-EVENT: Unknown packet type + detection-update: [....40] [ip4][..tcp] [....192.168.1.6][60551] -> [...52.114.15.45][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [....43] [ip4][..tcp] [....192.168.1.6][60554] -> [.52.113.194.132][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.154| 0.015| 0.036] + [IAT(c->s)...: 0.000| 0.154| 0.018| 0.040][IAT(s->c)...: 0.000| 0.140| 0.013| 0.032] + [PKTLEN(c->s): 54.000|1136.000| 157.600| 276.400][PKTLEN(s->c): 60.000|1506.000| 943.600| 686.800] + [BINS(c->s)..: 10,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,10,0,0] + detection-update: [....43] [ip4][..tcp] [....192.168.1.6][60554] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + ERROR-EVENT: Unknown packet type + new: [....47] [ip4][..tcp] [....192.168.1.6][60557] -> [.52.113.194.132][..443] + detected: [....47] [ip4][..tcp] [....192.168.1.6][60557] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....47] [ip4][..tcp] [....192.168.1.6][60557] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + new: [....48] [ip4][..tcp] [....192.168.1.6][60559] -> [...52.114.77.33][..443] + detected: [....48] [ip4][..tcp] [....192.168.1.6][60559] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....48] [ip4][..tcp] [....192.168.1.6][60559] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [....48] [ip4][..tcp] [....192.168.1.6][60559] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.053| 0.020| 0.022] + [IAT(c->s)...: 0.000| 0.053| 0.015| 0.022][IAT(s->c)...: 0.000| 0.051| 0.027| 0.021] + [PKTLEN(c->s): 66.000|1494.000| 739.300| 681.600][PKTLEN(s->c): 66.000|1506.000| 493.900| 609.300] + [BINS(c->s)..: 9,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,0,0,0] + [BINS(s->c)..: 6,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,2,0,0] + ERROR-EVENT: Unknown packet type + new: [....49] [ip4][..udp] [..192.168.1.112][57621] -> [..192.168.1.255][57621] + detected: [....49] [ip4][..udp] [..192.168.1.112][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] + new: [....50] [ip4][..tcp] [....192.168.1.6][60560] -> [....40.126.9.67][..443] + detected: [....50] [ip4][..tcp] [....192.168.1.6][60560] -> [....40.126.9.67][..443] [TLS.Microsoft365][Collaborative][Acceptable] + detection-update: [....50] [ip4][..tcp] [....192.168.1.6][60560] -> [....40.126.9.67][..443] [TLS.Microsoft365][Collaborative][Acceptable] + new: [....51] [ip4][..tcp] [....192.168.1.6][60561] -> [...52.114.77.33][..443] + detected: [....51] [ip4][..tcp] [....192.168.1.6][60561] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + new: [....52] [ip4][..udp] [....192.168.1.6][54069] -> [....192.168.1.1][...53] + detected: [....52] [ip4][..udp] [....192.168.1.6][54069] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + ERROR-EVENT: Unknown packet type + detection-update: [....52] [ip4][..udp] [....192.168.1.6][54069] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....53] [ip4][..tcp] [....192.168.1.6][60562] -> [.104.40.187.151][..443] + detected: [....53] [ip4][..tcp] [....192.168.1.6][60562] -> [.104.40.187.151][..443] [TLS.Azure][Cloud][Acceptable] + detection-update: [....51] [ip4][..tcp] [....192.168.1.6][60561] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + ERROR-EVENT: Unknown packet type + analyse: [....53] [ip4][..tcp] [....192.168.1.6][60562] -> [.104.40.187.151][..443] [TLS.Azure][Cloud][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.126| 0.019| 0.032] + [IAT(c->s)...: 0.000| 0.126| 0.016| 0.030][IAT(s->c)...: 0.000| 0.126| 0.022| 0.034] + [PKTLEN(c->s): 66.000|1379.000| 183.400| 296.700][PKTLEN(s->c): 66.000|1506.000| 616.100| 612.700] + [BINS(c->s)..: 12,1,3,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0] + [BINS(s->c)..: 2,3,1,0,0,0,0,1,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0] + new: [....54] [ip4][..udp] [....192.168.1.6][62735] -> [....192.168.1.1][...53] + detected: [....54] [ip4][..udp] [....192.168.1.6][62735] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....54] [ip4][..udp] [....192.168.1.6][62735] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....55] [ip4][..tcp] [....192.168.1.6][60563] -> [.52.169.186.119][..443] + analyse: [....51] [ip4][..tcp] [....192.168.1.6][60561] -> [...52.114.77.33][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.162| 0.032| 0.044] + [IAT(c->s)...: 0.000| 0.162| 0.025| 0.043][IAT(s->c)...: 0.000| 0.136| 0.044| 0.044] + [PKTLEN(c->s): 66.000|1494.000| 947.800| 669.400][PKTLEN(s->c): 66.000|1506.000| 422.200| 604.000] + [BINS(c->s)..: 5,0,1,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,0,0,0] + [BINS(s->c)..: 8,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,2,0,0] + detection-update: [....51] [ip4][..tcp] [....192.168.1.6][60561] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....55] [ip4][..tcp] [....192.168.1.6][60563] -> [.52.169.186.119][..443] [TLS.Azure][Cloud][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [....56] [ip4][..udp] [....192.168.1.6][63930] -> [....192.168.1.1][...53] + detected: [....56] [ip4][..udp] [....192.168.1.6][63930] -> [....192.168.1.1][...53] [DNS.Microsoft][Cloud][Safe] + detection-update: [....56] [ip4][..udp] [....192.168.1.6][63930] -> [....192.168.1.1][...53] [DNS.Microsoft][Cloud][Safe] + new: [....57] [ip4][..tcp] [....192.168.1.6][60564] -> [...40.79.138.41][..443] + detected: [....57] [ip4][..tcp] [....192.168.1.6][60564] -> [...40.79.138.41][..443] [TLS.Azure][Cloud][Acceptable] + detection-update: [....57] [ip4][..tcp] [....192.168.1.6][60564] -> [...40.79.138.41][..443] [TLS.Azure][Cloud][Acceptable] + new: [....58] [ip4][..udp] [....192.168.1.6][62863] -> [....192.168.1.1][...53] + detected: [....58] [ip4][..udp] [....192.168.1.6][62863] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + detection-update: [....58] [ip4][..udp] [....192.168.1.6][62863] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + new: [....59] [ip4][..tcp] [....192.168.1.6][60565] -> [...52.114.108.8][..443] + detected: [....59] [ip4][..tcp] [....192.168.1.6][60565] -> [...52.114.108.8][..443] [TLS.Teams][Collaborative][Safe] + detection-update: [....59] [ip4][..tcp] [....192.168.1.6][60565] -> [...52.114.108.8][..443] [TLS.Teams][Collaborative][Safe] + ERROR-EVENT: Unknown packet type + analyse: [....59] [ip4][..tcp] [....192.168.1.6][60565] -> [...52.114.108.8][..443] [TLS.Teams][Collaborative][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.277| 0.019| 0.049] + [IAT(c->s)...: 0.000| 0.062| 0.009| 0.015][IAT(s->c)...: 0.000| 0.277| 0.031| 0.070] + [PKTLEN(c->s): 66.000|1060.000| 180.000| 242.700][PKTLEN(s->c): 66.000|1506.000| 646.600| 633.400] + [BINS(c->s)..: 11,1,2,1,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,3,1,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,4,0,0] + ERROR-EVENT: Unknown packet type + analyse: [....26] [ip4][..tcp] [....192.168.1.6][60544] -> [...52.114.76.48][..443] [TLS.Teams][Collaborative][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 8.978| 0.329| 1.582] + [IAT(c->s)...: 0.000| 0.403| 0.037| 0.099][IAT(s->c)...: 0.000| 8.978| 0.602| 2.165] + [PKTLEN(c->s): 54.000|1114.000| 188.300| 274.500][PKTLEN(s->c): 60.000|1506.000| 518.100| 585.500] + [BINS(c->s)..: 10,1,1,0,1,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,3,1,0,0,0,0,0,1,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0] + new: [....60] [ip4][..tcp] [..151.11.50.139][.2222] -> [....192.168.1.6][54750] [MIDSTREAM] + ERROR-EVENT: Unknown packet type + new: [....61] [ip4][..tcp] [....192.168.1.6][60566] -> [.167.99.215.164][.4434] + detected: [....61] [ip4][..tcp] [....192.168.1.6][60566] -> [.167.99.215.164][.4434] [TLS.ntop][Network][Safe] + RISK: Known Proto on Non Std Port + detection-update: [....61] [ip4][..tcp] [....192.168.1.6][60566] -> [.167.99.215.164][.4434] [TLS.ntop][Network][Safe] + RISK: Known Proto on Non Std Port + ERROR-EVENT: Unknown packet type + new: [....62] [ip4][..udp] [....192.168.1.6][51681] -> [..52.114.77.136][.3478] + new: [....63] [ip4][..udp] [....192.168.1.6][50016] -> [.52.114.250.123][.3478] + detected: [....63] [ip4][..udp] [....192.168.1.6][50016] -> [.52.114.250.123][.3478] [STUN.Teams][VoIP][Safe] + new: [....64] [ip4][..tcp] [....192.168.1.6][50018] -> [.52.114.250.123][..443] + new: [....65] [ip4][..udp] [....192.168.1.6][55765] -> [....192.168.1.1][...53] + detected: [....65] [ip4][..udp] [....192.168.1.6][55765] -> [....192.168.1.1][...53] [DNS.Azure][Cloud][Acceptable] + detection-update: [....65] [ip4][..udp] [....192.168.1.6][55765] -> [....192.168.1.1][...53] [DNS.Azure][Cloud][Acceptable] + detected: [....64] [ip4][..tcp] [....192.168.1.6][50018] -> [.52.114.250.123][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + new: [....66] [ip4][..udp] [....192.168.1.6][50036] -> [.52.114.250.123][.3478] + detected: [....66] [ip4][..udp] [....192.168.1.6][50036] -> [.52.114.250.123][.3478] [STUN.Teams][VoIP][Safe] + new: [....67] [ip4][..tcp] [....192.168.1.6][50021] -> [.52.114.250.123][..443] + new: [....68] [ip4][..udp] [....192.168.1.6][50016] -> [.52.114.250.141][.3478] + detected: [....68] [ip4][..udp] [....192.168.1.6][50016] -> [.52.114.250.141][.3478] [STUN.Teams][VoIP][Safe] + detection-update: [....64] [ip4][..tcp] [....192.168.1.6][50018] -> [.52.114.250.123][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + ERROR-EVENT: Unknown packet type + new: [....69] [ip4][..udp] [....192.168.1.6][50017] -> [.52.114.250.141][.3478] + detected: [....69] [ip4][..udp] [....192.168.1.6][50017] -> [.52.114.250.141][.3478] [STUN.Teams][VoIP][Safe] + detected: [....67] [ip4][..tcp] [....192.168.1.6][50021] -> [.52.114.250.123][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + new: [....70] [ip4][..udp] [....192.168.1.6][50036] -> [.52.114.250.137][.3478] + detected: [....70] [ip4][..udp] [....192.168.1.6][50036] -> [.52.114.250.137][.3478] [STUN.Teams][VoIP][Safe] + new: [....71] [ip4][..udp] [....192.168.1.6][50037] -> [.52.114.250.137][.3478] + detected: [....71] [ip4][..udp] [....192.168.1.6][50037] -> [.52.114.250.137][.3478] [STUN.Teams][VoIP][Safe] + detection-update: [....67] [ip4][..tcp] [....192.168.1.6][50021] -> [.52.114.250.123][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + new: [....72] [ip4][..tcp] [....192.168.1.6][50014] -> [.52.114.250.152][..443] + new: [....73] [ip4][..tcp] [....192.168.1.6][50036] -> [.52.114.250.153][..443] + detected: [....72] [ip4][..tcp] [....192.168.1.6][50014] -> [.52.114.250.152][..443] [TLS.Azure][Cloud][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....73] [ip4][..tcp] [....192.168.1.6][50036] -> [.52.114.250.153][..443] [TLS.Azure][Cloud][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....72] [ip4][..tcp] [....192.168.1.6][50014] -> [.52.114.250.152][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS Cert Mismatch, TLS (probably) Not Carrying HTTPS + detection-update: [....73] [ip4][..tcp] [....192.168.1.6][50036] -> [.52.114.250.153][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS Cert Mismatch, TLS (probably) Not Carrying HTTPS + new: [....74] [ip4][..tcp] [....192.168.1.6][60567] -> [..52.114.77.136][..443] + new: [....75] [ip4][..udp] [....192.168.1.6][60837] -> [....192.168.1.1][...53] + detected: [....75] [ip4][..udp] [....192.168.1.6][60837] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + detection-update: [....75] [ip4][..udp] [....192.168.1.6][60837] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + detected: [....74] [ip4][..tcp] [....192.168.1.6][60567] -> [..52.114.77.136][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....74] [ip4][..tcp] [....192.168.1.6][60567] -> [..52.114.77.136][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + ERROR-EVENT: Unknown packet type + new: [....76] [ip4][..udp] [....192.168.1.6][50016] -> [....192.168.0.4][50005] + detected: [....76] [ip4][..udp] [....192.168.1.6][50016] -> [....192.168.0.4][50005] [STUN.Teams][VoIP][Safe] + RISK: Known Proto on Non Std Port + new: [....77] [ip4][..udp] [....192.168.1.6][50036] -> [....192.168.0.4][50020] + detected: [....77] [ip4][..udp] [....192.168.1.6][50036] -> [....192.168.0.4][50020] [STUN.Teams][VoIP][Safe] + RISK: Known Proto on Non Std Port + new: [....78] [ip4][..udp] [..93.71.110.205][16332] -> [....192.168.1.6][50016] + detected: [....78] [ip4][..udp] [..93.71.110.205][16332] -> [....192.168.1.6][50016] [STUN.Skype_TeamsCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + new: [....79] [ip4][..udp] [..93.71.110.205][16333] -> [....192.168.1.6][50036] + detected: [....79] [ip4][..udp] [..93.71.110.205][16333] -> [....192.168.1.6][50036] [STUN.Skype_TeamsCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + ERROR-EVENT: Unknown packet type + new: [....80] [ip4][..udp] [..52.114.252.21][.3480] -> [....192.168.1.6][50036] + detected: [....80] [ip4][..udp] [..52.114.252.21][.3480] -> [....192.168.1.6][50036] [STUN.Skype_TeamsCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + new: [....81] [ip4][..udp] [...52.114.252.8][.3479] -> [....192.168.1.6][50016] + detected: [....81] [ip4][..udp] [...52.114.252.8][.3479] -> [....192.168.1.6][50016] [STUN.Skype_TeamsCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [....64] [ip4][..tcp] [....192.168.1.6][50018] -> [.52.114.250.123][..443] [TLS.Teams][Collaborative][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.567| 0.072| 0.275] + [IAT(c->s)...: 0.000| 0.069| 0.017| 0.024][IAT(s->c)...: 0.000| 1.567| 0.148| 0.411] + [PKTLEN(c->s): 54.000| 241.000| 82.900| 48.600][PKTLEN(s->c): 60.000|1506.000| 545.600| 564.100] + [BINS(c->s)..: 15,1,0,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [....82] [ip4][..tcp] [....192.168.1.6][60568] -> [...40.79.138.41][..443] + detected: [....82] [ip4][..tcp] [....192.168.1.6][60568] -> [...40.79.138.41][..443] [TLS.Azure][Cloud][Acceptable] + detection-update: [....82] [ip4][..tcp] [....192.168.1.6][60568] -> [...40.79.138.41][..443] [TLS.Azure][Cloud][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [....83] [ip4][.icmp] [..93.71.110.205] -> [....192.168.1.6] + detected: [....83] [ip4][.icmp] [..93.71.110.205] -> [....192.168.1.6] [ICMP][Network][Acceptable] + analyse: [....78] [ip4][..udp] [..93.71.110.205][16332] -> [....192.168.1.6][50016] [STUN.Skype_TeamsCall][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.168| 0.160| 0.366] + [IAT(c->s)...: 0.000| 1.167| 0.109| 0.291][IAT(s->c)...: 0.000| 1.168| 0.338| 0.510] + [PKTLEN(c->s): 80.000|1256.000| 215.000| 307.900][PKTLEN(s->c): 80.000|1256.000| 454.900| 507.300] + [BINS(c->s)..: 0,2,16,4,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,1,1,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0] + idle: [....72] [ip4][..tcp] [....192.168.1.6][50014] -> [.52.114.250.152][..443] + end: [....64] [ip4][..tcp] [....192.168.1.6][50018] -> [.52.114.250.123][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + end: [....67] [ip4][..tcp] [....192.168.1.6][50021] -> [.52.114.250.123][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [....83] [ip4][.icmp] [..93.71.110.205] -> [....192.168.1.6] [ICMP][Network][Acceptable] + end: [....73] [ip4][..tcp] [....192.168.1.6][50036] -> [.52.114.250.153][..443] + idle: [.....5] [ip4][..tcp] [....192.168.1.6][60533] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + idle: [.....8] [ip4][..tcp] [....192.168.1.6][60536] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + idle: [....23] [ip4][..tcp] [....192.168.1.6][60542] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + idle: [....43] [ip4][..tcp] [....192.168.1.6][60554] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [....47] [ip4][..tcp] [....192.168.1.6][60557] -> [.52.113.194.132][..443] + idle: [....76] [ip4][..udp] [....192.168.1.6][50016] -> [....192.168.0.4][50005] [STUN.Teams][VoIP][Safe] + RISK: Known Proto on Non Std Port + idle: [....55] [ip4][..tcp] [....192.168.1.6][60563] -> [.52.169.186.119][..443] [TLS.Azure][Cloud][Acceptable] + idle: [....17] [ip4][..udp] [....192.168.1.6][63106] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + idle: [....77] [ip4][..udp] [....192.168.1.6][50036] -> [....192.168.0.4][50020] [STUN.Teams][VoIP][Safe] + RISK: Known Proto on Non Std Port + idle: [....38] [ip4][..udp] [....192.168.1.6][65230] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + idle: [....13] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [....36] [ip4][..udp] [....192.168.1.6][61245] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + RISK: Suspicious DNS Traffic + idle: [....16] [ip4][..udp] [....192.168.1.6][51033] -> [....192.168.1.1][...53] [DNS.Skype_Teams][VoIP][Acceptable] + end: [.....4] [ip4][..tcp] [....192.168.1.6][60532] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + end: [.....7] [ip4][..tcp] [....192.168.1.6][60535] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + end: [.....9] [ip4][..tcp] [....192.168.1.6][60537] -> [...52.114.77.33][..443] + idle: [....18] [ip4][..tcp] [....192.168.1.6][60538] -> [...52.114.75.70][..443] [TLS.Teams][Collaborative][Safe] + idle: [....19] [ip4][..tcp] [....192.168.1.6][60539] -> [...52.114.75.69][..443] [TLS.Skype_Teams][VoIP][Acceptable] + idle: [....24] [ip4][..udp] [....192.168.1.6][65387] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + idle: [....20] [ip4][..tcp] [....192.168.1.6][60540] -> [...52.114.75.70][..443] [TLS.Teams][Collaborative][Safe] + idle: [....21] [ip4][..tcp] [....192.168.1.6][60541] -> [...52.114.75.69][..443] + end: [....25] [ip4][..tcp] [....192.168.1.6][60543] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [....26] [ip4][..tcp] [....192.168.1.6][60544] -> [...52.114.76.48][..443] [TLS.Teams][Collaborative][Safe] + idle: [....28] [ip4][..tcp] [....192.168.1.6][60545] -> [...52.114.77.58][..443] [TLS.Teams][Collaborative][Safe] + idle: [....32] [ip4][..tcp] [....192.168.1.6][60547] -> [...52.114.88.59][..443] [TLS.Teams][Collaborative][Safe] + end: [....33] [ip4][..tcp] [....192.168.1.6][60548] -> [...52.114.77.33][..443] + idle: [....40] [ip4][..tcp] [....192.168.1.6][60551] -> [...52.114.15.45][..443] + end: [....42] [ip4][..tcp] [....192.168.1.6][60552] -> [...52.114.77.33][..443] + idle: [....45] [ip4][..tcp] [....192.168.1.6][60555] -> [...52.114.77.33][..443] + end: [....48] [ip4][..tcp] [....192.168.1.6][60559] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + end: [....51] [ip4][..tcp] [....192.168.1.6][60561] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [....59] [ip4][..tcp] [....192.168.1.6][60565] -> [...52.114.108.8][..443] [TLS.Teams][Collaborative][Safe] + idle: [....74] [ip4][..tcp] [....192.168.1.6][60567] -> [..52.114.77.136][..443] [TLS.Teams][Collaborative][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....1] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [....11] [ip4][..udp] [....192.168.1.6][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + guessed: [.....2] [ip4][..tcp] [....192.168.1.6][58533] -> [.149.154.167.91][..443] [TLS.Telegram][Chat][Acceptable] + end: [.....2] [ip4][..tcp] [....192.168.1.6][58533] -> [.149.154.167.91][..443] + idle: [....34] [ip4][..udp] [....192.168.1.6][59403] -> [....192.168.1.1][...53] [DNS.Microsoft365][Collaborative][Acceptable] + idle: [....35] [ip4][..tcp] [....192.168.1.6][60549] -> [...13.107.18.11][..443] [TLS.Microsoft365][Collaborative][Acceptable] + idle: [....44] [ip4][..udp] [....192.168.1.6][51309] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + end: [....30] [ip4][..tcp] [....192.168.1.6][60546] -> [.167.99.215.164][.4434] [TLS.ntop][Network][Safe] + RISK: Known Proto on Non Std Port + idle: [....12] [ip4][..udp] [....192.168.1.6][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....61] [ip4][..tcp] [....192.168.1.6][60566] -> [.167.99.215.164][.4434] [TLS.ntop][Network][Safe] + RISK: Known Proto on Non Std Port + idle: [....31] [ip4][..udp] [....192.168.1.6][57504] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + guessed: [....62] [ip4][..udp] [....192.168.1.6][51681] -> [..52.114.77.136][.3478] [STUN.Azure][Cloud][Acceptable] + idle: [....62] [ip4][..udp] [....192.168.1.6][51681] -> [..52.114.77.136][.3478] + idle: [....27] [ip4][..udp] [....192.168.1.6][57530] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe] + not-detected: [....60] [ip4][..tcp] [..151.11.50.139][.2222] -> [....192.168.1.6][54750] [Unknown][Unrated] + idle: [....60] [ip4][..tcp] [..151.11.50.139][.2222] -> [....192.168.1.6][54750] + idle: [....22] [ip4][..udp] [....192.168.1.6][49514] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + idle: [....78] [ip4][..udp] [..93.71.110.205][16332] -> [....192.168.1.6][50016] [STUN.Skype_TeamsCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....79] [ip4][..udp] [..93.71.110.205][16333] -> [....192.168.1.6][50036] [STUN.Skype_TeamsCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....37] [ip4][..udp] [....192.168.1.6][53678] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + idle: [....56] [ip4][..udp] [....192.168.1.6][63930] -> [....192.168.1.1][...53] [DNS.Microsoft][Cloud][Safe] + idle: [....65] [ip4][..udp] [....192.168.1.6][55765] -> [....192.168.1.1][...53] [DNS.Azure][Cloud][Acceptable] + idle: [....49] [ip4][..udp] [..192.168.1.112][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] + idle: [....29] [ip4][..tcp] [.162.125.19.131][..443] -> [....192.168.1.6][60344] + idle: [....10] [ip4][..udp] [....192.168.1.6][64046] -> [....192.168.1.1][...53] [DNS.ntop][Network][Safe] + idle: [....68] [ip4][..udp] [....192.168.1.6][50016] -> [.52.114.250.141][.3478] [STUN.Teams][VoIP][Safe] + idle: [....63] [ip4][..udp] [....192.168.1.6][50016] -> [.52.114.250.123][.3478] [STUN.Teams][VoIP][Safe] + idle: [....81] [ip4][..udp] [...52.114.252.8][.3479] -> [....192.168.1.6][50016] [STUN.Skype_TeamsCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....69] [ip4][..udp] [....192.168.1.6][50017] -> [.52.114.250.141][.3478] [STUN.Teams][VoIP][Safe] + idle: [....70] [ip4][..udp] [....192.168.1.6][50036] -> [.52.114.250.137][.3478] [STUN.Teams][VoIP][Safe] + idle: [....66] [ip4][..udp] [....192.168.1.6][50036] -> [.52.114.250.123][.3478] [STUN.Teams][VoIP][Safe] + idle: [....71] [ip4][..udp] [....192.168.1.6][50037] -> [.52.114.250.137][.3478] [STUN.Teams][VoIP][Safe] + idle: [....80] [ip4][..udp] [..52.114.252.21][.3480] -> [....192.168.1.6][50036] [STUN.Skype_TeamsCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....52] [ip4][..udp] [....192.168.1.6][54069] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + end: [.....6] [ip4][..tcp] [....192.168.1.6][60534] -> [.....40.126.9.5][..443] [TLS.Microsoft365][Collaborative][Acceptable] + end: [....46] [ip4][..tcp] [....192.168.1.6][60556] -> [.....40.126.9.7][..443] [TLS.Microsoft365][Collaborative][Acceptable] + end: [....50] [ip4][..tcp] [....192.168.1.6][60560] -> [....40.126.9.67][..443] + end: [....14] [ip4][..tcp] [..93.62.150.157][..443] -> [....192.168.1.6][60512] + idle: [....41] [ip4][..udp] [....192.168.1.6][58457] -> [....192.168.1.1][...53] [DNS.Microsoft365][Collaborative][Acceptable] + idle: [....57] [ip4][..tcp] [....192.168.1.6][60564] -> [...40.79.138.41][..443] [TLS.Azure][Cloud][Acceptable] + idle: [....82] [ip4][..tcp] [....192.168.1.6][60568] -> [...40.79.138.41][..443] [TLS.Azure][Cloud][Acceptable] + idle: [....54] [ip4][..udp] [....192.168.1.6][62735] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....15] [ip4][..udp] [....192.168.1.6][56634] -> [....192.168.1.1][...53] [DNS][ConnCheck][Acceptable] + idle: [.....3] [ip4][..udp] [....192.168.1.6][60813] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....58] [ip4][..udp] [....192.168.1.6][62863] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + idle: [....75] [ip4][..udp] [....192.168.1.6][60837] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + idle: [....53] [ip4][..tcp] [....192.168.1.6][60562] -> [.104.40.187.151][..443] [TLS.Azure][Cloud][Acceptable] + idle: [....39] [ip4][..udp] [....192.168.1.6][50653] -> [....192.168.1.1][...53] [DNS.Teams][Collaborative][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/teamspeak3.pcap.out b/test/results/flow-info/teamspeak3.pcap.out new file mode 100644 index 000000000..46d345a4e --- /dev/null +++ b/test/results/flow-info/teamspeak3.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.......10.0.0.1][53187] -> [.......10.0.0.2][.9987] + detected: [.....1] [ip4][..udp] [.......10.0.0.1][53187] -> [.......10.0.0.2][.9987] [TeamSpeak][VoIP][Acceptable] + idle: [.....1] [ip4][..udp] [.......10.0.0.1][53187] -> [.......10.0.0.2][.9987] [TeamSpeak][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/teamviewer.pcap.out b/test/results/flow-info/teamviewer.pcap.out new file mode 100644 index 000000000..3a6d24931 --- /dev/null +++ b/test/results/flow-info/teamviewer.pcap.out @@ -0,0 +1,30 @@ + DAEMON-EVENT: init + new: [.....1] [ip4][..tcp] [......10.0.2.15][35732] -> [..162.250.2.170][.5938] + detected: [.....1] [ip4][..tcp] [......10.0.2.15][35732] -> [..162.250.2.170][.5938] [TeamViewer][RemoteAccess][Acceptable] + analyse: [.....1] [ip4][..tcp] [......10.0.2.15][35732] -> [..162.250.2.170][.5938] [TeamViewer][RemoteAccess][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.274| 0.067| 0.088] + [IAT(c->s)...: 0.000| 0.274| 0.074| 0.092][IAT(s->c)...: 0.000| 0.256| 0.061| 0.085] + [PKTLEN(c->s): 60.000|1514.000| 460.900| 544.600][PKTLEN(s->c): 54.000|1514.000| 314.200| 479.700] + [BINS(c->s)..: 5,3,1,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 11,1,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,1,0,0] + new: [.....2] [ip4][..udp] [......10.0.2.15][34417] -> [..93.47.224.241][36037] + detected: [.....2] [ip4][..udp] [......10.0.2.15][34417] -> [..93.47.224.241][36037] [TeamViewer][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, Desktop/File Sharing + analyse: [.....2] [ip4][..udp] [......10.0.2.15][34417] -> [..93.47.224.241][36037] [TeamViewer][RemoteAccess][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.443| 0.037| 0.097] + [IAT(c->s)...: 0.000| 0.000| 0.000| 0.000][IAT(s->c)...: 0.000| 0.443| 0.037| 0.097] + [PKTLEN(c->s): 138.000| 138.000| 138.000| 0.000][PKTLEN(s->c): 58.000|1066.000| 463.000| 454.000] + [BINS(c->s)..: 0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,7,4,1,2,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....2] [ip4][..udp] [......10.0.2.15][34417] -> [..93.47.224.241][36037] [TeamViewer][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, Desktop/File Sharing + DAEMON-EVENT: [Processed: 1282 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 1] + update: [.....2] [ip4][..udp] [......10.0.2.15][34417] -> [..93.47.224.241][36037] [TeamViewer][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, Desktop/File Sharing + idle: [.....2] [ip4][..udp] [......10.0.2.15][34417] -> [..93.47.224.241][36037] [TeamViewer][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, Desktop/File Sharing + idle: [.....1] [ip4][..tcp] [......10.0.2.15][35732] -> [..162.250.2.170][.5938] [TeamViewer][RemoteAccess][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/telegram.pcap.out b/test/results/flow-info/telegram.pcap.out new file mode 100644 index 000000000..2f5bfbcc3 --- /dev/null +++ b/test/results/flow-info/telegram.pcap.out @@ -0,0 +1,221 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] + detected: [.....1] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [.....2] [ip4][..udp] [...192.168.1.53][54306] -> [239.255.255.250][.1900] + detected: [.....2] [ip4][..udp] [...192.168.1.53][54306] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [.....3] [ip4][..udp] [...192.168.1.53][.5353] -> [....224.0.0.251][.5353] + detected: [.....3] [ip4][..udp] [...192.168.1.53][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [.....4] [ip4][..udp] [...192.168.1.69][.5353] -> [....224.0.0.251][.5353] + detected: [.....4] [ip4][..udp] [...192.168.1.69][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [.....5] [ip4][..udp] [...192.168.1.75][.5353] -> [....224.0.0.251][.5353] + detected: [.....5] [ip4][..udp] [...192.168.1.75][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [.....6] [ip6][..udp] [................fe80::4ba:91a:7817:e318][.5353] -> [...............................ff02::fb][.5353] + detected: [.....6] [ip6][..udp] [................fe80::4ba:91a:7817:e318][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [.....7] [ip4][..udp] [...192.168.1.77][.5353] -> [...192.168.1.75][.5353] + detected: [.....7] [ip4][..udp] [...192.168.1.77][.5353] -> [...192.168.1.75][.5353] [MDNS][Network][Acceptable] + new: [.....8] [ip4][..udp] [...192.168.1.77][61631] -> [....192.168.1.1][...53] + detected: [.....8] [ip4][..udp] [...192.168.1.77][61631] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [.....8] [ip4][..udp] [...192.168.1.77][61631] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [.....9] [ip4][..udp] [...192.168.1.77][17500] -> [255.255.255.255][17500] + detected: [.....9] [ip4][..udp] [...192.168.1.77][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + new: [....10] [ip4][..udp] [...192.168.1.77][17500] -> [..192.168.1.255][17500] + detected: [....10] [ip4][..udp] [...192.168.1.77][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + detection-update: [.....3] [ip4][..udp] [...192.168.1.53][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....11] [ip6][..udp] [..............fe80::18a0:a412:8935:c01b][.5353] -> [...............................ff02::fb][.5353] + detected: [....11] [ip6][..udp] [..............fe80::18a0:a412:8935:c01b][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....12] [ip4][..udp] [...192.168.1.77][.5353] -> [...192.168.1.53][.5353] + detected: [....12] [ip4][..udp] [...192.168.1.77][.5353] -> [...192.168.1.53][.5353] [MDNS][Network][Acceptable] + analyse: [.....5] [ip4][..udp] [...192.168.1.75][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.089| 0.260| 0.238] + [IAT(c->s)...: 0.000| 1.089| 0.260| 0.238][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 142.000| 308.000| 198.700| 56.400][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,0,18,2,6,0,1,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....6] [ip6][..udp] [................fe80::4ba:91a:7817:e318][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.089| 0.260| 0.238] + [IAT(c->s)...: 0.000| 1.089| 0.260| 0.238][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 162.000| 328.000| 218.700| 56.400][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,0,18,2,6,0,1,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [.....3] [ip4][..udp] [...192.168.1.53][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + detection-update: [....11] [ip6][..udp] [..............fe80::18a0:a412:8935:c01b][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....13] [ip4][..udp] [...192.168.1.77][52118] -> [....192.168.1.1][...53] + detected: [....13] [ip4][..udp] [...192.168.1.77][52118] -> [....192.168.1.1][...53] [DNS.Microsoft][Cloud][Safe] + detection-update: [....13] [ip4][..udp] [...192.168.1.77][52118] -> [....192.168.1.1][...53] [DNS.Microsoft][Cloud][Safe] + new: [....14] [ip4][..udp] [...192.168.1.53][57621] -> [..192.168.1.255][57621] + detected: [....14] [ip4][..udp] [...192.168.1.53][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] + new: [....15] [ip4][..udp] [...192.168.1.75][57916] -> [239.255.255.250][.1900] + detected: [....15] [ip4][..udp] [...192.168.1.75][57916] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....16] [ip4][..udp] [...192.168.1.77][61120] -> [....192.168.1.1][...53] + detected: [....16] [ip4][..udp] [...192.168.1.77][61120] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....16] [ip4][..udp] [...192.168.1.77][61120] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....17] [ip4][..udp] [...192.168.1.52][.5353] -> [....224.0.0.251][.5353] + detected: [....17] [ip4][..udp] [...192.168.1.52][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....18] [ip6][..udp] [...............fe80::4dc:edec:5b0c:a661][.5353] -> [...............................ff02::fb][.5353] + detected: [....18] [ip6][..udp] [...............fe80::4dc:edec:5b0c:a661][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....19] [ip4][..udp] [...192.168.1.77][23174] -> [.....91.108.8.7][..521] + detected: [....19] [ip4][..udp] [...192.168.1.77][23174] -> [.....91.108.8.7][..521] [Telegram][Chat][Acceptable] + new: [....20] [ip4][..udp] [...192.168.1.77][23174] -> [....91.108.12.5][..523] + detected: [....20] [ip4][..udp] [...192.168.1.77][23174] -> [....91.108.12.5][..523] [Telegram][Chat][Acceptable] + new: [....21] [ip4][..udp] [...192.168.1.77][23174] -> [....91.108.16.1][..527] + detected: [....21] [ip4][..udp] [...192.168.1.77][23174] -> [....91.108.16.1][..527] [Telegram][Chat][Acceptable] + new: [....22] [ip4][..udp] [...192.168.1.77][23174] -> [....91.108.12.1][..536] + detected: [....22] [ip4][..udp] [...192.168.1.77][23174] -> [....91.108.12.1][..536] [Telegram][Chat][Acceptable] + new: [....23] [ip4][..udp] [...192.168.1.77][23174] -> [.....91.108.8.8][..538] + detected: [....23] [ip4][..udp] [...192.168.1.77][23174] -> [.....91.108.8.8][..538] [Telegram][Chat][Acceptable] + new: [....24] [ip4][..udp] [...192.168.1.77][23174] -> [....91.108.16.4][..538] + detected: [....24] [ip4][..udp] [...192.168.1.77][23174] -> [....91.108.16.4][..538] [Telegram][Chat][Acceptable] + new: [....25] [ip4][..udp] [...192.168.1.77][23174] -> [...192.168.1.52][31480] + new: [....26] [ip4][..udp] [...192.168.1.77][23174] -> [..87.11.205.195][60723] + detected: [....26] [ip4][..udp] [...192.168.1.77][23174] -> [..87.11.205.195][60723] [OpenVPN][VPN][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [....19] [ip4][..udp] [...192.168.1.77][23174] -> [.....91.108.8.7][..521] [Telegram][Chat][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 0.501| 0.118| 0.112] + [IAT(c->s)...: 0.001| 0.501| 0.202| 0.131][IAT(s->c)...: 0.004| 0.308| 0.084| 0.081] + [PKTLEN(c->s): 74.000| 138.000| 109.200| 28.900][PKTLEN(s->c): 90.000| 234.000| 180.200| 53.200] + [BINS(c->s)..: 0,5,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,1,4,4,0,8,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....27] [ip4][..udp] [...192.168.1.77][47127] -> [....192.168.1.1][...53] + detected: [....27] [ip4][..udp] [...192.168.1.77][47127] -> [....192.168.1.1][...53] [DNS.GoogleServices][Web][Acceptable] + detection-update: [....27] [ip4][..udp] [...192.168.1.77][47127] -> [....192.168.1.1][...53] [DNS.GoogleServices][Web][Acceptable] + RISK: Suspicious DNS Traffic + analyse: [....25] [ip4][..udp] [...192.168.1.77][23174] -> [...192.168.1.52][31480] + [min|max|avg|stddev] + [IAT(flow)...: 0.042| 1.999| 0.261| 0.473] + [IAT(c->s)...: 0.058| 1.999| 0.337| 0.588][IAT(s->c)...: 0.042| 1.681| 0.213| 0.374] + [PKTLEN(c->s): 90.000| 234.000| 197.100| 50.700][PKTLEN(s->c): 90.000| 282.000| 211.300| 56.200] + [BINS(c->s)..: 0,1,2,0,0,6,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,1,3,0,0,5,6,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + not-detected: [....25] [ip4][..udp] [...192.168.1.77][23174] -> [...192.168.1.52][31480] [Unknown][Unrated] + new: [....28] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [....28] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [....29] [ip4][..udp] [...192.168.1.43][..138] -> [..192.168.1.255][..138] + detected: [....29] [ip4][..udp] [...192.168.1.43][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [....30] [ip4][..udp] [...192.168.1.77][..137] -> [..192.168.1.255][..137] + detected: [....30] [ip4][..udp] [...192.168.1.77][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + new: [....31] [ip4][..udp] [...192.168.1.77][49764] -> [....192.168.1.1][...53] + detected: [....31] [ip4][..udp] [...192.168.1.77][49764] -> [....192.168.1.1][...53] [DNS.ntop][Network][Safe] + detection-update: [....31] [ip4][..udp] [...192.168.1.77][49764] -> [....192.168.1.1][...53] [DNS.ntop][Network][Safe] + new: [....32] [ip4][..udp] [...192.168.1.77][.5812] -> [....192.168.1.1][...53] + detected: [....32] [ip4][..udp] [...192.168.1.77][.5812] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....32] [ip4][..udp] [...192.168.1.77][.5812] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Suspicious DNS Traffic + new: [....33] [ip4][..udp] [...192.168.1.77][54595] -> [....192.168.1.1][...53] + detected: [....33] [ip4][..udp] [...192.168.1.77][54595] -> [....192.168.1.1][...53] [DNS.ntop][Network][Safe] + detection-update: [.....3] [ip4][..udp] [...192.168.1.53][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....34] [ip4][..udp] [...192.168.1.77][61974] -> [..216.58.205.68][..443] + detected: [....34] [ip4][..udp] [...192.168.1.77][61974] -> [..216.58.205.68][..443] [QUIC.Google][Web][Acceptable] + new: [....35] [ip4][..udp] [...192.168.1.77][50822] -> [..216.58.205.68][..443] + detected: [....35] [ip4][..udp] [...192.168.1.77][50822] -> [..216.58.205.68][..443] [QUIC.Google][Web][Acceptable] + new: [....36] [ip4][..udp] [...192.168.1.77][57621] -> [..192.168.1.255][57621] + detected: [....36] [ip4][..udp] [...192.168.1.77][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] + new: [....37] [ip4][..udp] [...192.168.1.77][28150] -> [.....91.108.8.8][..529] + detected: [....37] [ip4][..udp] [...192.168.1.77][28150] -> [.....91.108.8.8][..529] [Telegram][Chat][Acceptable] + new: [....38] [ip4][..udp] [...192.168.1.77][28150] -> [....91.108.16.1][..529] + detected: [....38] [ip4][..udp] [...192.168.1.77][28150] -> [....91.108.16.1][..529] [Telegram][Chat][Acceptable] + new: [....39] [ip4][..udp] [...192.168.1.77][28150] -> [....91.108.12.3][..530] + detected: [....39] [ip4][..udp] [...192.168.1.77][28150] -> [....91.108.12.3][..530] [Telegram][Chat][Acceptable] + new: [....40] [ip4][..udp] [...192.168.1.77][28150] -> [.....91.108.8.1][..533] + detected: [....40] [ip4][..udp] [...192.168.1.77][28150] -> [.....91.108.8.1][..533] [Telegram][Chat][Acceptable] + new: [....41] [ip4][..udp] [...192.168.1.77][28150] -> [....91.108.12.5][..537] + detected: [....41] [ip4][..udp] [...192.168.1.77][28150] -> [....91.108.12.5][..537] [Telegram][Chat][Acceptable] + new: [....42] [ip4][..udp] [...192.168.1.77][28150] -> [....91.108.16.3][..537] + detected: [....42] [ip4][..udp] [...192.168.1.77][28150] -> [....91.108.16.3][..537] [Telegram][Chat][Acceptable] + detection-update: [....33] [ip4][..udp] [...192.168.1.77][54595] -> [....192.168.1.1][...53] [DNS.ntop][Network][Safe] + new: [....43] [ip4][..udp] [...192.168.1.77][52127] -> [239.255.255.250][.1900] + detected: [....43] [ip4][..udp] [...192.168.1.77][52127] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + analyse: [....37] [ip4][..udp] [...192.168.1.77][28150] -> [.....91.108.8.8][..529] [Telegram][Chat][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.008| 0.505| 0.099| 0.138] + [IAT(c->s)...: 0.008| 0.505| 0.069| 0.098][IAT(s->c)...: 0.026| 0.472| 0.171| 0.186] + [PKTLEN(c->s): 74.000| 234.000| 173.500| 57.300][PKTLEN(s->c): 90.000| 138.000| 118.400| 18.100] + [BINS(c->s)..: 0,5,0,4,0,13,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,1,4,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....44] [ip4][..udp] [...192.168.1.77][28150] -> [..87.11.205.195][59772] + analyse: [....40] [ip4][..udp] [...192.168.1.77][28150] -> [.....91.108.8.1][..533] [Telegram][Chat][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.007| 0.505| 0.113| 0.151] + [IAT(c->s)...: 0.049| 0.505| 0.223| 0.190][IAT(s->c)...: 0.007| 0.477| 0.082| 0.120] + [PKTLEN(c->s): 74.000| 138.000| 102.000| 28.000][PKTLEN(s->c): 90.000| 218.000| 175.300| 48.100] + [BINS(c->s)..: 0,5,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,1,4,5,0,14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....45] [ip4][..udp] [...192.168.1.53][50698] -> [239.255.255.250][.1900] + detected: [....45] [ip4][..udp] [...192.168.1.53][50698] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [.....1] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + update: [.....9] [ip4][..udp] [...192.168.1.77][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + update: [....10] [ip4][..udp] [...192.168.1.77][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + update: [.....8] [ip4][..udp] [...192.168.1.77][61631] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + update: [.....7] [ip4][..udp] [...192.168.1.77][.5353] -> [...192.168.1.75][.5353] [MDNS][Network][Acceptable] + update: [.....3] [ip4][..udp] [...192.168.1.53][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [.....4] [ip4][..udp] [...192.168.1.69][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [.....5] [ip4][..udp] [...192.168.1.75][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [.....2] [ip4][..udp] [...192.168.1.53][54306] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + update: [.....6] [ip6][..udp] [................fe80::4ba:91a:7817:e318][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....46] [ip4][..udp] [...192.168.1.53][56384] -> [239.255.255.250][.1900] + detected: [....46] [ip4][..udp] [...192.168.1.53][56384] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....47] [ip4][..udp] [...192.168.1.77][58615] -> [....192.168.1.1][...53] + detected: [....47] [ip4][..udp] [...192.168.1.77][58615] -> [....192.168.1.1][...53] [DNS.Dropbox][Cloud][Acceptable] + new: [....48] [ip4][..udp] [...192.168.1.77][49533] -> [....192.168.1.1][...53] + detected: [....48] [ip4][..udp] [...192.168.1.77][49533] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....48] [ip4][..udp] [...192.168.1.77][49533] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [....47] [ip4][..udp] [...192.168.1.77][58615] -> [....192.168.1.1][...53] [DNS.Dropbox][Cloud][Acceptable] + idle: [....32] [ip4][..udp] [...192.168.1.77][.5812] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Suspicious DNS Traffic + idle: [....16] [ip4][..udp] [...192.168.1.77][61120] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....28] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [.....1] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [.....9] [ip4][..udp] [...192.168.1.77][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....19] [ip4][..udp] [...192.168.1.77][23174] -> [.....91.108.8.7][..521] [Telegram][Chat][Acceptable] + idle: [....20] [ip4][..udp] [...192.168.1.77][23174] -> [....91.108.12.5][..523] [Telegram][Chat][Acceptable] + idle: [....21] [ip4][..udp] [...192.168.1.77][23174] -> [....91.108.16.1][..527] [Telegram][Chat][Acceptable] + idle: [....22] [ip4][..udp] [...192.168.1.77][23174] -> [....91.108.12.1][..536] [Telegram][Chat][Acceptable] + idle: [....24] [ip4][..udp] [...192.168.1.77][23174] -> [....91.108.16.4][..538] [Telegram][Chat][Acceptable] + idle: [....23] [ip4][..udp] [...192.168.1.77][23174] -> [.....91.108.8.8][..538] [Telegram][Chat][Acceptable] + idle: [....27] [ip4][..udp] [...192.168.1.77][47127] -> [....192.168.1.1][...53] [DNS.GoogleServices][Web][Acceptable] + RISK: Suspicious DNS Traffic + idle: [....18] [ip6][..udp] [...............fe80::4dc:edec:5b0c:a661][.5353] -> [...............................ff02::fb][.5353] + idle: [....10] [ip4][..udp] [...192.168.1.77][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....15] [ip4][..udp] [...192.168.1.75][57916] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [.....8] [ip4][..udp] [...192.168.1.77][61631] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....30] [ip4][..udp] [...192.168.1.77][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [....29] [ip4][..udp] [...192.168.1.43][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [....48] [ip4][..udp] [...192.168.1.77][49533] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....12] [ip4][..udp] [...192.168.1.77][.5353] -> [...192.168.1.53][.5353] [MDNS][Network][Acceptable] + idle: [.....7] [ip4][..udp] [...192.168.1.77][.5353] -> [...192.168.1.75][.5353] [MDNS][Network][Acceptable] + idle: [.....5] [ip4][..udp] [...192.168.1.75][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + idle: [.....4] [ip4][..udp] [...192.168.1.69][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + idle: [....17] [ip4][..udp] [...192.168.1.52][.5353] -> [....224.0.0.251][.5353] + idle: [.....3] [ip4][..udp] [...192.168.1.53][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + not-detected: [....44] [ip4][..udp] [...192.168.1.77][28150] -> [..87.11.205.195][59772] [Unknown][Unrated] + idle: [....44] [ip4][..udp] [...192.168.1.77][28150] -> [..87.11.205.195][59772] + idle: [....36] [ip4][..udp] [...192.168.1.77][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] + idle: [....14] [ip4][..udp] [...192.168.1.53][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] + idle: [....43] [ip4][..udp] [...192.168.1.77][52127] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....26] [ip4][..udp] [...192.168.1.77][23174] -> [..87.11.205.195][60723] [OpenVPN][VPN][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....35] [ip4][..udp] [...192.168.1.77][50822] -> [..216.58.205.68][..443] [QUIC.Google][Web][Acceptable] + idle: [....31] [ip4][..udp] [...192.168.1.77][49764] -> [....192.168.1.1][...53] [DNS.ntop][Network][Safe] + idle: [.....2] [ip4][..udp] [...192.168.1.53][54306] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....46] [ip4][..udp] [...192.168.1.53][56384] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....38] [ip4][..udp] [...192.168.1.77][28150] -> [....91.108.16.1][..529] [Telegram][Chat][Acceptable] + idle: [....37] [ip4][..udp] [...192.168.1.77][28150] -> [.....91.108.8.8][..529] [Telegram][Chat][Acceptable] + idle: [....39] [ip4][..udp] [...192.168.1.77][28150] -> [....91.108.12.3][..530] [Telegram][Chat][Acceptable] + idle: [....40] [ip4][..udp] [...192.168.1.77][28150] -> [.....91.108.8.1][..533] [Telegram][Chat][Acceptable] + idle: [....42] [ip4][..udp] [...192.168.1.77][28150] -> [....91.108.16.3][..537] [Telegram][Chat][Acceptable] + idle: [....41] [ip4][..udp] [...192.168.1.77][28150] -> [....91.108.12.5][..537] [Telegram][Chat][Acceptable] + idle: [....13] [ip4][..udp] [...192.168.1.77][52118] -> [....192.168.1.1][...53] [DNS.Microsoft][Cloud][Safe] + idle: [....11] [ip6][..udp] [..............fe80::18a0:a412:8935:c01b][.5353] -> [...............................ff02::fb][.5353] + idle: [....45] [ip4][..udp] [...192.168.1.53][50698] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....47] [ip4][..udp] [...192.168.1.77][58615] -> [....192.168.1.1][...53] [DNS.Dropbox][Cloud][Acceptable] + idle: [....33] [ip4][..udp] [...192.168.1.77][54595] -> [....192.168.1.1][...53] [DNS.ntop][Network][Safe] + idle: [....25] [ip4][..udp] [...192.168.1.77][23174] -> [...192.168.1.52][31480] [Unknown][Unrated] + idle: [....34] [ip4][..udp] [...192.168.1.77][61974] -> [..216.58.205.68][..443] [QUIC.Google][Web][Acceptable] + idle: [.....6] [ip6][..udp] [................fe80::4ba:91a:7817:e318][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/telnet.pcap.out b/test/results/flow-info/telnet.pcap.out new file mode 100644 index 000000000..02a936136 --- /dev/null +++ b/test/results/flow-info/telnet.pcap.out @@ -0,0 +1,22 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....192.168.0.2][.1550] -> [....192.168.0.1][...23] + detected: [.....1] [ip4][..tcp] [....192.168.0.2][.1550] -> [....192.168.0.1][...23] [Telnet][RemoteAccess][Unsafe] + RISK: Unsafe Protocol + detection-update: [.....1] [ip4][..tcp] [....192.168.0.2][.1550] -> [....192.168.0.1][...23] [Telnet][RemoteAccess][Unsafe] + RISK: Unsafe Protocol + detection-update: [.....1] [ip4][..tcp] [....192.168.0.2][.1550] -> [....192.168.0.1][...23] [Telnet][RemoteAccess][Unsafe] + RISK: Unsafe Protocol + analyse: [.....1] [ip4][..tcp] [....192.168.0.2][.1550] -> [....192.168.0.1][...23] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.233| 0.125| 0.337] + [IAT(c->s)...: 0.000| 1.233| 0.160| 0.383][IAT(s->c)...: 0.001| 1.107| 0.088| 0.275] + [PKTLEN(c->s): 66.000| 151.000| 78.400| 23.800][PKTLEN(s->c): 66.000| 98.000| 75.800| 10.400] + [BINS(c->s)..: 15,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 14,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [.....1] [ip4][..tcp] [....192.168.0.2][.1550] -> [....192.168.0.1][...23] [Telnet][RemoteAccess][Unsafe] + RISK: Unsafe Protocol + end: [.....1] [ip4][..tcp] [....192.168.0.2][.1550] -> [....192.168.0.1][...23] [Telnet][RemoteAccess][Unsafe] + RISK: Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/teredo.pcap.out b/test/results/flow-info/teredo.pcap.out new file mode 100644 index 000000000..f61eb7211 --- /dev/null +++ b/test/results/flow-info/teredo.pcap.out @@ -0,0 +1,19 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..10.112.16.106][52513] -> [..194.136.28.76][.3544] + detected: [.....1] [ip4][..udp] [..10.112.16.106][52513] -> [..194.136.28.76][.3544] [Teredo][Network][Acceptable] + new: [.....2] [ip4][..udp] [...10.112.16.89][60381] -> [..194.136.28.76][.3544] + detected: [.....2] [ip4][..udp] [...10.112.16.89][60381] -> [..194.136.28.76][.3544] [Teredo][Network][Acceptable] + new: [.....3] [ip4][..udp] [...10.112.16.92][63448] -> [..194.136.28.76][.3544] + detected: [.....3] [ip4][..udp] [...10.112.16.92][63448] -> [..194.136.28.76][.3544] [Teredo][Network][Acceptable] + new: [.....4] [ip4][..udp] [...10.112.16.64][56154] -> [..194.136.28.76][.3544] + detected: [.....4] [ip4][..udp] [...10.112.16.64][56154] -> [..194.136.28.76][.3544] [Teredo][Network][Acceptable] + new: [.....5] [ip4][..udp] [...10.112.16.67][51812] -> [..194.136.28.76][.3544] + detected: [.....5] [ip4][..udp] [...10.112.16.67][51812] -> [..194.136.28.76][.3544] [Teredo][Network][Acceptable] + idle: [.....5] [ip4][..udp] [...10.112.16.67][51812] -> [..194.136.28.76][.3544] [Teredo][Network][Acceptable] + idle: [.....4] [ip4][..udp] [...10.112.16.64][56154] -> [..194.136.28.76][.3544] [Teredo][Network][Acceptable] + idle: [.....2] [ip4][..udp] [...10.112.16.89][60381] -> [..194.136.28.76][.3544] [Teredo][Network][Acceptable] + idle: [.....1] [ip4][..udp] [..10.112.16.106][52513] -> [..194.136.28.76][.3544] [Teredo][Network][Acceptable] + idle: [.....3] [ip4][..udp] [...10.112.16.92][63448] -> [..194.136.28.76][.3544] [Teredo][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tftp.pcap.out b/test/results/flow-info/tftp.pcap.out new file mode 100644 index 000000000..3fd04331c --- /dev/null +++ b/test/results/flow-info/tftp.pcap.out @@ -0,0 +1,44 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....172.28.4.53][54626] -> [...172.16.5.170][...69] + detected: [.....1] [ip4][..udp] [....172.28.4.53][54626] -> [...172.16.5.170][...69] [TFTP][DataTransfer][Acceptable] + RISK: Malformed Packet + new: [.....2] [ip4][..udp] [....172.28.4.53][54632] -> [...172.16.5.170][...69] + detected: [.....2] [ip4][..udp] [....172.28.4.53][54632] -> [...172.16.5.170][...69] [TFTP][DataTransfer][Acceptable] + RISK: Malformed Packet + new: [.....3] [ip4][..udp] [..192.168.0.253][50618] -> [...192.168.0.10][...69] + detected: [.....3] [ip4][..udp] [..192.168.0.253][50618] -> [...192.168.0.10][...69] [TFTP][DataTransfer][Acceptable] + new: [.....4] [ip4][..udp] [...192.168.0.10][.3445] -> [..192.168.0.253][50618] + detected: [.....4] [ip4][..udp] [...192.168.0.10][.3445] -> [..192.168.0.253][50618] [TFTP][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [.....4] [ip4][..udp] [...192.168.0.10][.3445] -> [..192.168.0.253][50618] [TFTP][DataTransfer][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.000| 0.000| 0.000] + [IAT(c->s)...: 0.000| 0.000| 0.000| 0.000][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 558.000| 558.000| 558.000| 0.000][PKTLEN(s->c): 60.000| 60.000| 60.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 101 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..udp] [....172.28.4.53][54627] -> [...172.16.5.170][...69] + detected: [.....5] [ip4][..udp] [....172.28.4.53][54627] -> [...172.16.5.170][...69] [TFTP][DataTransfer][Acceptable] + idle: [.....1] [ip4][..udp] [....172.28.4.53][54626] -> [...172.16.5.170][...69] [TFTP][DataTransfer][Acceptable] + RISK: Malformed Packet + idle: [.....2] [ip4][..udp] [....172.28.4.53][54632] -> [...172.16.5.170][...69] [TFTP][DataTransfer][Acceptable] + RISK: Malformed Packet + idle: [.....4] [ip4][..udp] [...192.168.0.10][.3445] -> [..192.168.0.253][50618] [TFTP][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....3] [ip4][..udp] [..192.168.0.253][50618] -> [...192.168.0.10][...69] [TFTP][DataTransfer][Acceptable] + DAEMON-EVENT: [Processed: 102 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....6] [ip4][..udp] [....172.28.5.91][44618] -> [...172.28.5.170][...69] + detected: [.....6] [ip4][..udp] [....172.28.5.91][44618] -> [...172.28.5.170][...69] [TFTP][DataTransfer][Acceptable] + new: [.....7] [ip4][..udp] [...172.28.5.170][62058] -> [....172.28.5.91][44618] + detected: [.....7] [ip4][..udp] [...172.28.5.170][62058] -> [....172.28.5.91][44618] [TFTP][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....7] [ip4][..udp] [...172.28.5.170][62058] -> [....172.28.5.91][44618] [TFTP][DataTransfer][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....5] [ip4][..udp] [....172.28.4.53][54627] -> [...172.16.5.170][...69] [TFTP][DataTransfer][Acceptable] + idle: [.....6] [ip4][..udp] [....172.28.5.91][44618] -> [...172.28.5.170][...69] [TFTP][DataTransfer][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/threema.pcap.out b/test/results/flow-info/threema.pcap.out new file mode 100644 index 000000000..645f9da06 --- /dev/null +++ b/test/results/flow-info/threema.pcap.out @@ -0,0 +1,28 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.2.100][50298] -> [.185.88.236.110][.5222] + detected: [.....1] [ip4][..tcp] [..192.168.2.100][50298] -> [.185.88.236.110][.5222] [Threema][Chat][Acceptable] + new: [.....2] [ip4][..tcp] [..192.168.2.100][50484] -> [.185.88.236.110][.5222] + detected: [.....2] [ip4][..tcp] [..192.168.2.100][50484] -> [.185.88.236.110][.5222] [Threema][Chat][Acceptable] + new: [.....3] [ip4][..tcp] [..192.168.2.100][50500] -> [.185.88.236.110][.5222] + detected: [.....3] [ip4][..tcp] [..192.168.2.100][50500] -> [.185.88.236.110][.5222] [Threema][Chat][Acceptable] + DAEMON-EVENT: [Processed: 42 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....4] [ip4][..tcp] [..192.168.2.100][50618] -> [.185.88.236.110][.5222] + detected: [.....4] [ip4][..tcp] [..192.168.2.100][50618] -> [.185.88.236.110][.5222] [Threema][Chat][Acceptable] + end: [.....3] [ip4][..tcp] [..192.168.2.100][50500] -> [.185.88.236.110][.5222] [Threema][Chat][Acceptable] + DAEMON-EVENT: [Processed: 57 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..tcp] [..192.168.2.100][50718] -> [.185.88.236.110][.5222] + idle: [.....1] [ip4][..tcp] [..192.168.2.100][50298] -> [.185.88.236.110][.5222] [Threema][Chat][Acceptable] + idle: [.....2] [ip4][..tcp] [..192.168.2.100][50484] -> [.185.88.236.110][.5222] [Threema][Chat][Acceptable] + end: [.....4] [ip4][..tcp] [..192.168.2.100][50618] -> [.185.88.236.110][.5222] [Threema][Chat][Acceptable] + DAEMON-EVENT: [Processed: 70 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....6] [ip4][..tcp] [..192.168.2.100][50860] -> [.185.88.236.110][.5222] + guessed: [.....5] [ip4][..tcp] [..192.168.2.100][50718] -> [.185.88.236.110][.5222] [Threema][Chat][Acceptable] + end: [.....5] [ip4][..tcp] [..192.168.2.100][50718] -> [.185.88.236.110][.5222] + guessed: [.....6] [ip4][..tcp] [..192.168.2.100][50860] -> [.185.88.236.110][.5222] [Threema][Chat][Acceptable] + end: [.....6] [ip4][..tcp] [..192.168.2.100][50860] -> [.185.88.236.110][.5222] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tinc.pcap.out b/test/results/flow-info/tinc.pcap.out new file mode 100644 index 000000000..ecbccce87 --- /dev/null +++ b/test/results/flow-info/tinc.pcap.out @@ -0,0 +1,38 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.131.114.168.27][59244] -> [.185.83.218.112][55655] + new: [.....2] [ip4][..tcp] [.131.114.168.27][49290] -> [.185.83.218.112][55656] + detected: [.....1] [ip4][..tcp] [.131.114.168.27][59244] -> [.185.83.218.112][55655] [TINC][VPN][Acceptable] + RISK: Known Proto on Non Std Port + detected: [.....2] [ip4][..tcp] [.131.114.168.27][49290] -> [.185.83.218.112][55656] [TINC][VPN][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....3] [ip4][..udp] [.131.114.168.27][55655] -> [.185.83.218.112][55655] + detected: [.....3] [ip4][..udp] [.131.114.168.27][55655] -> [.185.83.218.112][55655] [TINC][VPN][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....4] [ip4][..udp] [.185.83.218.112][55656] -> [.131.114.168.27][55656] + detected: [.....4] [ip4][..udp] [.185.83.218.112][55656] -> [.131.114.168.27][55656] [TINC][VPN][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [.....3] [ip4][..udp] [.131.114.168.27][55655] -> [.185.83.218.112][55655] [TINC][VPN][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.070| 0.172| 0.377] + [IAT(c->s)...: 0.000| 1.070| 0.198| 0.406][IAT(s->c)...: 0.000| 1.024| 0.144| 0.342] + [PKTLEN(c->s): 190.000|1510.000|1168.400| 444.700][PKTLEN(s->c): 190.000|1502.000|1127.600| 455.700] + [BINS(c->s)..: 0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,2,0,0,2,6,0,0] + [BINS(s->c)..: 0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,2,0,0,0,6,0,0] + analyse: [.....4] [ip4][..udp] [.185.83.218.112][55656] -> [.131.114.168.27][55656] [TINC][VPN][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.412| 0.291| 0.559] + [IAT(c->s)...: 0.000| 2.412| 0.412| 0.745][IAT(s->c)...: 0.000| 1.048| 0.224| 0.408] + [PKTLEN(c->s): 190.000|1486.000| 954.000| 431.400][PKTLEN(s->c): 118.000|1494.000|1067.600| 456.000] + [BINS(c->s)..: 0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,1,0,0,0,1,0,0,1,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,1,0,2,1,0,0,1,0,0] + [BINS(s->c)..: 0,0,1,0,1,0,0,0,0,1,0,0,0,0,0,1,0,0,0,1,0,1,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,1,2,2,2,0,0,2,3,0,0] + end: [.....2] [ip4][..tcp] [.131.114.168.27][49290] -> [.185.83.218.112][55656] [TINC][VPN][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....3] [ip4][..udp] [.131.114.168.27][55655] -> [.185.83.218.112][55655] [TINC][VPN][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....4] [ip4][..udp] [.185.83.218.112][55656] -> [.131.114.168.27][55656] [TINC][VPN][Acceptable] + RISK: Known Proto on Non Std Port + end: [.....1] [ip4][..tcp] [.131.114.168.27][59244] -> [.185.83.218.112][55655] [TINC][VPN][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tk.pcap.out b/test/results/flow-info/tk.pcap.out new file mode 100644 index 000000000..0556da058 --- /dev/null +++ b/test/results/flow-info/tk.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.1.178][51954] -> [....192.168.1.1][...53] + detected: [.....1] [ip4][..udp] [..192.168.1.178][51954] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [.....1] [ip4][..udp] [..192.168.1.178][51954] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [.....2] [ip4][..udp] [..192.168.1.178][55591] -> [....192.168.1.1][...53] + detected: [.....2] [ip4][..udp] [..192.168.1.178][55591] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [.....2] [ip4][..udp] [..192.168.1.178][55591] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [.....3] [ip4][..udp] [..192.168.1.178][53820] -> [....192.168.1.1][...53] + detected: [.....3] [ip4][..udp] [..192.168.1.178][53820] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [.....3] [ip4][..udp] [..192.168.1.178][53820] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.1.178][55591] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [.....3] [ip4][..udp] [..192.168.1.178][53820] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [.....1] [ip4][..udp] [..192.168.1.178][51954] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls-appdata.pcap.out b/test/results/flow-info/tls-appdata.pcap.out new file mode 100644 index 000000000..899609605 --- /dev/null +++ b/test/results/flow-info/tls-appdata.pcap.out @@ -0,0 +1,26 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.179.60.195.173][..443] -> [..192.168.2.100][60636] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [.179.60.195.173][..443] -> [..192.168.2.100][60636] [TLS.Facebook][SocialNetwork][Fun] + DAEMON-EVENT: [Processed: 6 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [..192.168.2.100][58976] -> [...52.223.198.7][..443] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [..192.168.2.100][58976] -> [...52.223.198.7][..443] [TLS.Twitch][Video][Fun] + end: [.....1] [ip4][..tcp] [.179.60.195.173][..443] -> [..192.168.2.100][60636] + analyse: [.....2] [ip4][..tcp] [..192.168.2.100][58976] -> [...52.223.198.7][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 15.956| 2.459| 5.752] + [IAT(c->s)...: 0.001| 15.941| 2.283| 5.576][IAT(s->c)...: 0.001| 15.956| 2.663| 5.945] + [PKTLEN(c->s): 54.000|1506.000| 313.800| 551.900][PKTLEN(s->c): 60.000|2958.000|2083.100|1156.000] + [BINS(c->s)..: 14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + [BINS(s->c)..: 3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,9] + detection-update: [.....2] [ip4][..tcp] [..192.168.2.100][58976] -> [...52.223.198.7][..443] [TLS.Twitch][Video][Fun] + DAEMON-EVENT: [Processed: 45 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 1|updates: 0] + DAEMON-EVENT: [Processed: 75 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 1|updates: 0] + DAEMON-EVENT: [Processed: 105 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 1|updates: 0] + idle: [.....2] [ip4][..tcp] [..192.168.2.100][58976] -> [...52.223.198.7][..443] [TLS.Twitch][Video][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls-esni-fuzzed.pcap.out b/test/results/flow-info/tls-esni-fuzzed.pcap.out new file mode 100644 index 000000000..9361457bf --- /dev/null +++ b/test/results/flow-info/tls-esni-fuzzed.pcap.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.1.12][49886] -> [..104.27.129.77][..443] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [...192.168.1.12][49886] -> [..104.27.129.77][..443] [TLS.Cloudflare][Web][Acceptable] + new: [.....2] [ip4][..tcp] [...192.168.1.12][49887] -> [.104.16.125.175][..443] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [...192.168.1.12][49887] -> [.104.16.125.175][..443] [TLS.Cloudflare][Web][Acceptable] + new: [.....3] [ip4][..tcp] [...192.168.1.12][49897] -> [..104.22.71.197][..443] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [...192.168.1.12][49897] -> [..104.22.71.197][..443] [TLS.Cloudflare][Web][Acceptable] + RISK: Missing SNI TLS Extn + idle: [.....1] [ip4][..tcp] [...192.168.1.12][49886] -> [..104.27.129.77][..443] + idle: [.....3] [ip4][..tcp] [...192.168.1.12][49897] -> [..104.22.71.197][..443] + idle: [.....2] [ip4][..tcp] [...192.168.1.12][49887] -> [.104.16.125.175][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls-rdn-extract.pcap.out b/test/results/flow-info/tls-rdn-extract.pcap.out new file mode 100644 index 000000000..86c2d401e --- /dev/null +++ b/test/results/flow-info/tls-rdn-extract.pcap.out @@ -0,0 +1,12 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.......10.0.0.1][31337] -> [213.199.149.251][..443] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [.......10.0.0.1][31337] -> [213.199.149.251][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....1] [ip4][..tcp] [.......10.0.0.1][31337] -> [213.199.149.251][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [.....1] [ip4][..tcp] [.......10.0.0.1][31337] -> [213.199.149.251][..443] [TLS.Microsoft][Web][Safe] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher, TLS Cert Expired + idle: [.....1] [ip4][..tcp] [.......10.0.0.1][31337] -> [213.199.149.251][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_2_reasms.pcapng.out b/test/results/flow-info/tls_2_reasms.pcapng.out new file mode 100644 index 000000000..0c3b7164b --- /dev/null +++ b/test/results/flow-info/tls_2_reasms.pcapng.out @@ -0,0 +1,8 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.192.91.186.174][..443] -> [...25.137.80.32][38134] + detected: [.....1] [ip4][..tcp] [.192.91.186.174][..443] -> [...25.137.80.32][38134] [TLS.Instagram][SocialNetwork][Fun] + detection-update: [.....1] [ip4][..tcp] [.192.91.186.174][..443] -> [...25.137.80.32][38134] [TLS.Instagram][SocialNetwork][Fun] + idle: [.....1] [ip4][..tcp] [.192.91.186.174][..443] -> [...25.137.80.32][38134] [TLS.Instagram][SocialNetwork][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_2_reasms_b.pcapng.out b/test/results/flow-info/tls_2_reasms_b.pcapng.out new file mode 100644 index 000000000..fca20dcd1 --- /dev/null +++ b/test/results/flow-info/tls_2_reasms_b.pcapng.out @@ -0,0 +1,8 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..88.14.137.195][..443] -> [196.234.165.216][37658] + detected: [.....1] [ip4][..tcp] [..88.14.137.195][..443] -> [196.234.165.216][37658] [TLS.Facebook][SocialNetwork][Fun] + detection-update: [.....1] [ip4][..tcp] [..88.14.137.195][..443] -> [196.234.165.216][37658] [TLS.Facebook][SocialNetwork][Fun] + idle: [.....1] [ip4][..tcp] [..88.14.137.195][..443] -> [196.234.165.216][37658] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_alert.pcap.out b/test/results/flow-info/tls_alert.pcap.out new file mode 100644 index 000000000..97c7db282 --- /dev/null +++ b/test/results/flow-info/tls_alert.pcap.out @@ -0,0 +1,13 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.192][63158] -> [...192.168.1.20][..443] + detected: [.....1] [ip4][..tcp] [..192.168.1.192][63158] -> [...192.168.1.20][..443] [TLS.Google][Advertisement][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + DAEMON-EVENT: [Processed: 11 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [..192.168.2.100][37780] -> [.160.44.202.202][..443] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [..192.168.2.100][37780] -> [.160.44.202.202][..443] [TLS][Web][Safe] + end: [.....1] [ip4][..tcp] [..192.168.1.192][63158] -> [...192.168.1.20][..443] + end: [.....2] [ip4][..tcp] [..192.168.2.100][37780] -> [.160.44.202.202][..443] [TLS][Web][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_certificate_too_long.pcap.out b/test/results/flow-info/tls_certificate_too_long.pcap.out new file mode 100644 index 000000000..f4efda2b8 --- /dev/null +++ b/test/results/flow-info/tls_certificate_too_long.pcap.out @@ -0,0 +1,151 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.121][52746] -> [...52.149.21.60][..443] [MIDSTREAM] + new: [.....2] [ip4][..tcp] [..192.168.1.121][52721] -> [..192.168.1.139][55367] [MIDSTREAM] + new: [.....3] [ip4][..udp] [..192.168.1.121][52251] -> [........8.8.8.8][...53] + detected: [.....3] [ip4][..udp] [..192.168.1.121][52251] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....3] [ip4][..udp] [..192.168.1.121][52251] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....3] [ip4][..udp] [..192.168.1.121][52251] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....3] [ip4][..udp] [..192.168.1.121][52251] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....3] [ip4][..udp] [..192.168.1.121][52251] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + new: [.....4] [ip4][..udp] [..192.168.1.139][.5353] -> [....224.0.0.251][.5353] + detected: [.....4] [ip4][..udp] [..192.168.1.139][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [.....5] [ip6][..udp] [..............fe80::1059:a858:f9e7:cf94][.5353] -> [...............................ff02::fb][.5353] + detected: [.....5] [ip6][..udp] [..............fe80::1059:a858:f9e7:cf94][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [.....6] [ip4][..udp] [..192.168.1.121][.5353] -> [..192.168.1.139][.5353] + detected: [.....6] [ip4][..udp] [..192.168.1.121][.5353] -> [..192.168.1.139][.5353] [MDNS][Network][Acceptable] + new: [.....7] [ip4][....2] [..192.168.1.139] -> [......224.0.0.2] + detected: [.....7] [ip4][....2] [..192.168.1.139] -> [......224.0.0.2] [IGMP][Network][Acceptable] + new: [.....8] [ip4][....2] [..192.168.1.139] -> [....224.0.0.251] + detected: [.....8] [ip4][....2] [..192.168.1.139] -> [....224.0.0.251] [IGMP][Network][Acceptable] + new: [.....9] [ip4][..udp] [..192.168.1.121][55567] -> [........8.8.8.8][...53] + detected: [.....9] [ip4][..udp] [..192.168.1.121][55567] -> [........8.8.8.8][...53] [DNS.Microsoft][Cloud][Safe] + new: [....10] [ip4][..udp] [..192.168.1.121][53884] -> [........8.8.8.8][...53] + detected: [....10] [ip4][..udp] [..192.168.1.121][53884] -> [........8.8.8.8][...53] [DNS.Microsoft][Cloud][Safe] + detection-update: [....10] [ip4][..udp] [..192.168.1.121][53884] -> [........8.8.8.8][...53] [DNS.Microsoft][Cloud][Safe] + new: [....11] [ip4][..udp] [..192.168.1.121][65492] -> [........8.8.8.8][...53] + detected: [....11] [ip4][..udp] [..192.168.1.121][65492] -> [........8.8.8.8][...53] [DNS.Azure][Cloud][Acceptable] + new: [....12] [ip4][..tcp] [..192.168.1.121][53910] -> [...40.113.10.47][..443] + detection-update: [.....9] [ip4][..udp] [..192.168.1.121][55567] -> [........8.8.8.8][...53] [DNS.Microsoft][Cloud][Safe] + new: [....13] [ip4][..tcp] [..192.168.1.121][53911] -> [...40.113.10.47][..443] + detection-update: [....11] [ip4][..udp] [..192.168.1.121][65492] -> [........8.8.8.8][...53] [DNS.Azure][Cloud][Acceptable] + detected: [....12] [ip4][..tcp] [..192.168.1.121][53910] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + detected: [....13] [ip4][..tcp] [..192.168.1.121][53911] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + detection-update: [....12] [ip4][..tcp] [..192.168.1.121][53910] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + new: [....14] [ip4][..udp] [..192.168.1.121][51364] -> [........8.8.8.8][...53] + detected: [....14] [ip4][..udp] [..192.168.1.121][51364] -> [........8.8.8.8][...53] [DNS.Microsoft][Cloud][Safe] + new: [....15] [ip4][..udp] [..192.168.1.121][58161] -> [........8.8.8.8][...53] + detected: [....15] [ip4][..udp] [..192.168.1.121][58161] -> [........8.8.8.8][...53] [DNS.Microsoft][Cloud][Safe] + detection-update: [....14] [ip4][..udp] [..192.168.1.121][51364] -> [........8.8.8.8][...53] [DNS.Microsoft][Cloud][Safe] + new: [....16] [ip4][..udp] [..192.168.1.121][55578] -> [........8.8.8.8][...53] + detected: [....16] [ip4][..udp] [..192.168.1.121][55578] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + new: [....17] [ip4][..udp] [..192.168.1.121][54561] -> [........8.8.8.8][...53] + detected: [....17] [ip4][..udp] [..192.168.1.121][54561] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + detection-update: [....13] [ip4][..tcp] [..192.168.1.121][53911] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + detection-update: [....16] [ip4][..udp] [..192.168.1.121][55578] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + new: [....18] [ip4][..tcp] [..192.168.1.121][53912] -> [....2.22.33.235][...80] + detection-update: [....15] [ip4][..udp] [..192.168.1.121][58161] -> [........8.8.8.8][...53] [DNS.Microsoft][Cloud][Safe] + detected: [....18] [ip4][..tcp] [..192.168.1.121][53912] -> [....2.22.33.235][...80] [HTTP.Microsoft][Cloud][Safe] + detection-update: [....17] [ip4][..udp] [..192.168.1.121][54561] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + detection-update: [....18] [ip4][..tcp] [..192.168.1.121][53912] -> [....2.22.33.235][...80] [HTTP.Microsoft][Download][Safe] + RISK: Binary App Transfer + new: [....19] [ip4][..tcp] [..192.168.1.121][53913] -> [....2.22.33.235][...80] + detected: [....19] [ip4][..tcp] [..192.168.1.121][53913] -> [....2.22.33.235][...80] [HTTP.Microsoft][Cloud][Safe] + detection-update: [....19] [ip4][..tcp] [..192.168.1.121][53913] -> [....2.22.33.235][...80] [HTTP.Microsoft][Download][Safe] + RISK: Binary App Transfer + new: [....20] [ip4][..tcp] [..192.168.1.121][53905] -> [..140.82.113.26][..443] [MIDSTREAM] + new: [....21] [ip4][..udp] [..192.168.1.121][65213] -> [........8.8.8.8][...53] + detected: [....21] [ip4][..udp] [..192.168.1.121][65213] -> [........8.8.8.8][...53] [DNS.Apple][Web][Safe] + detection-update: [....21] [ip4][..udp] [..192.168.1.121][65213] -> [........8.8.8.8][...53] [DNS.Apple][Web][Safe] + new: [....22] [ip4][..udp] [..192.168.1.121][49216] -> [..17.253.54.251][..123] + detected: [....22] [ip4][..udp] [..192.168.1.121][49216] -> [..17.253.54.251][..123] [NTP][System][Acceptable] + detected: [....20] [ip4][..tcp] [..192.168.1.121][53905] -> [..140.82.113.26][..443] [TLS.Github][Collaborative][Acceptable] + new: [....23] [ip4][..udp] [..192.168.1.121][51998] -> [........8.8.8.8][...53] + detected: [....23] [ip4][..udp] [..192.168.1.121][51998] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + detection-update: [....23] [ip4][..udp] [..192.168.1.121][51998] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + new: [....24] [ip4][..tcp] [..192.168.1.121][53429] -> [...52.98.163.18][..443] [MIDSTREAM] + detected: [....24] [ip4][..tcp] [..192.168.1.121][53429] -> [...52.98.163.18][..443] [TLS.Outlook][Email][Acceptable] + new: [....25] [ip4][..tcp] [..192.168.1.121][53428] -> [...52.98.163.18][..443] [MIDSTREAM] + detected: [....25] [ip4][..tcp] [..192.168.1.121][53428] -> [...52.98.163.18][..443] [TLS.Outlook][Email][Acceptable] + detection-update: [....23] [ip4][..udp] [..192.168.1.121][51998] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + analyse: [....24] [ip4][..tcp] [..192.168.1.121][53429] -> [...52.98.163.18][..443] [TLS.Outlook][Email][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.067| 0.005| 0.015] + [IAT(c->s)...: 0.000| 0.067| 0.017| 0.029][IAT(s->c)...: 0.000| 0.042| 0.003| 0.009] + [PKTLEN(c->s): 54.000|1502.000| 938.600| 600.500][PKTLEN(s->c): 54.000|1372.000| 279.400| 236.800] + [BINS(c->s)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0] + [BINS(s->c)..: 2,3,0,1,0,0,11,6,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0] + analyse: [....25] [ip4][..tcp] [..192.168.1.121][53428] -> [...52.98.163.18][..443] [TLS.Outlook][Email][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.048| 0.009| 0.014] + [IAT(c->s)...: 0.000| 0.048| 0.012| 0.018][IAT(s->c)...: 0.000| 0.037| 0.007| 0.012] + [PKTLEN(c->s): 54.000|1502.000| 757.600| 557.400][PKTLEN(s->c): 54.000|1366.000| 270.600| 331.300] + [BINS(c->s)..: 4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 4,6,1,0,2,0,2,1,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0] + new: [....26] [ip4][..tcp] [..192.168.1.121][53914] -> [...40.113.10.47][..443] + new: [....27] [ip4][..tcp] [..192.168.1.121][53915] -> [...40.113.10.47][..443] + detected: [....26] [ip4][..tcp] [..192.168.1.121][53914] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + detected: [....27] [ip4][..tcp] [..192.168.1.121][53915] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + detection-update: [....26] [ip4][..tcp] [..192.168.1.121][53914] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + detection-update: [....27] [ip4][..tcp] [..192.168.1.121][53915] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + new: [....28] [ip4][..udp] [..192.168.1.121][50288] -> [..17.253.54.251][..123] + detected: [....28] [ip4][..udp] [..192.168.1.121][50288] -> [..17.253.54.251][..123] [NTP][System][Acceptable] + new: [....29] [ip4][..tcp] [..192.168.1.121][53916] -> [...40.113.10.47][..443] + new: [....30] [ip4][..tcp] [..192.168.1.121][53917] -> [...40.113.10.47][..443] + detected: [....29] [ip4][..tcp] [..192.168.1.121][53916] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + detected: [....30] [ip4][..tcp] [..192.168.1.121][53917] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + detection-update: [....29] [ip4][..tcp] [..192.168.1.121][53916] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + detection-update: [....30] [ip4][..tcp] [..192.168.1.121][53917] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + new: [....31] [ip4][..udp] [..192.168.1.121][65099] -> [..17.253.54.251][..123] + detected: [....31] [ip4][..udp] [..192.168.1.121][65099] -> [..17.253.54.251][..123] [NTP][System][Acceptable] + new: [....32] [ip4][..tcp] [..192.168.1.121][53918] -> [...40.113.10.47][..443] + new: [....33] [ip4][..tcp] [..192.168.1.121][53919] -> [...40.113.10.47][..443] + detected: [....32] [ip4][..tcp] [..192.168.1.121][53918] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + detected: [....33] [ip4][..tcp] [..192.168.1.121][53919] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + detection-update: [....32] [ip4][..tcp] [..192.168.1.121][53918] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + detection-update: [....33] [ip4][..tcp] [..192.168.1.121][53919] -> [...40.113.10.47][..443] [TLS.Microsoft][Cloud][Safe] + new: [....34] [ip4][..udp] [..192.168.1.121][56865] -> [..17.253.54.251][..123] + detected: [....34] [ip4][..udp] [..192.168.1.121][56865] -> [..17.253.54.251][..123] [NTP][System][Acceptable] + new: [....35] [ip4][..tcp] [.130.211.33.145][..443] -> [..192.168.1.121][53432] [MIDSTREAM] + detected: [....35] [ip4][..tcp] [.130.211.33.145][..443] -> [..192.168.1.121][53432] [TLS.GoogleCloud][Cloud][Acceptable] + idle: [....11] [ip4][..udp] [..192.168.1.121][65492] -> [........8.8.8.8][...53] [DNS.Azure][Cloud][Acceptable] + idle: [.....8] [ip4][....2] [..192.168.1.139] -> [....224.0.0.251] [IGMP][Network][Acceptable] + idle: [.....7] [ip4][....2] [..192.168.1.139] -> [......224.0.0.2] [IGMP][Network][Acceptable] + end: [....18] [ip4][..tcp] [..192.168.1.121][53912] -> [....2.22.33.235][...80] [HTTP.Microsoft][Download][Safe] + RISK: Binary App Transfer + end: [....19] [ip4][..tcp] [..192.168.1.121][53913] -> [....2.22.33.235][...80] [HTTP.Microsoft][Download][Safe] + RISK: Binary App Transfer + idle: [....14] [ip4][..udp] [..192.168.1.121][51364] -> [........8.8.8.8][...53] [DNS.Microsoft][Cloud][Safe] + idle: [.....9] [ip4][..udp] [..192.168.1.121][55567] -> [........8.8.8.8][...53] [DNS.Microsoft][Cloud][Safe] + idle: [....16] [ip4][..udp] [..192.168.1.121][55578] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + idle: [....28] [ip4][..udp] [..192.168.1.121][50288] -> [..17.253.54.251][..123] [NTP][System][Acceptable] + idle: [.....6] [ip4][..udp] [..192.168.1.121][.5353] -> [..192.168.1.139][.5353] [MDNS][Network][Acceptable] + idle: [.....4] [ip4][..udp] [..192.168.1.139][.5353] -> [....224.0.0.251][.5353] + idle: [....10] [ip4][..udp] [..192.168.1.121][53884] -> [........8.8.8.8][...53] [DNS.Microsoft][Cloud][Safe] + idle: [....23] [ip4][..udp] [..192.168.1.121][51998] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + idle: [....15] [ip4][..udp] [..192.168.1.121][58161] -> [........8.8.8.8][...53] [DNS.Microsoft][Cloud][Safe] + idle: [....34] [ip4][..udp] [..192.168.1.121][56865] -> [..17.253.54.251][..123] [NTP][System][Acceptable] + idle: [....31] [ip4][..udp] [..192.168.1.121][65099] -> [..17.253.54.251][..123] [NTP][System][Acceptable] + idle: [.....3] [ip4][..udp] [..192.168.1.121][52251] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + idle: [....25] [ip4][..tcp] [..192.168.1.121][53428] -> [...52.98.163.18][..443] [TLS.Outlook][Email][Acceptable] + idle: [....24] [ip4][..tcp] [..192.168.1.121][53429] -> [...52.98.163.18][..443] [TLS.Outlook][Email][Acceptable] + guessed: [.....1] [ip4][..tcp] [..192.168.1.121][52746] -> [...52.149.21.60][..443] [TLS.Azure][Cloud][Acceptable] + idle: [.....1] [ip4][..tcp] [..192.168.1.121][52746] -> [...52.149.21.60][..443] + idle: [....17] [ip4][..udp] [..192.168.1.121][54561] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + end: [....12] [ip4][..tcp] [..192.168.1.121][53910] -> [...40.113.10.47][..443] + end: [....13] [ip4][..tcp] [..192.168.1.121][53911] -> [...40.113.10.47][..443] + end: [....26] [ip4][..tcp] [..192.168.1.121][53914] -> [...40.113.10.47][..443] + end: [....27] [ip4][..tcp] [..192.168.1.121][53915] -> [...40.113.10.47][..443] + end: [....29] [ip4][..tcp] [..192.168.1.121][53916] -> [...40.113.10.47][..443] + end: [....30] [ip4][..tcp] [..192.168.1.121][53917] -> [...40.113.10.47][..443] + end: [....32] [ip4][..tcp] [..192.168.1.121][53918] -> [...40.113.10.47][..443] + end: [....33] [ip4][..tcp] [..192.168.1.121][53919] -> [...40.113.10.47][..443] + idle: [....22] [ip4][..udp] [..192.168.1.121][49216] -> [..17.253.54.251][..123] [NTP][System][Acceptable] + idle: [....35] [ip4][..tcp] [.130.211.33.145][..443] -> [..192.168.1.121][53432] + idle: [.....5] [ip6][..udp] [..............fe80::1059:a858:f9e7:cf94][.5353] -> [...............................ff02::fb][.5353] + end: [....20] [ip4][..tcp] [..192.168.1.121][53905] -> [..140.82.113.26][..443] [TLS.Github][Collaborative][Acceptable] + not-detected: [.....2] [ip4][..tcp] [..192.168.1.121][52721] -> [..192.168.1.139][55367] [Unknown][Unrated] + idle: [.....2] [ip4][..tcp] [..192.168.1.121][52721] -> [..192.168.1.139][55367] + idle: [....21] [ip4][..udp] [..192.168.1.121][65213] -> [........8.8.8.8][...53] [DNS.Apple][Web][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_cipher_lens.pcap.out b/test/results/flow-info/tls_cipher_lens.pcap.out new file mode 100644 index 000000000..7167d0510 --- /dev/null +++ b/test/results/flow-info/tls_cipher_lens.pcap.out @@ -0,0 +1,24 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.11.11][51587] -> [.173.194.35.191][..443] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [..192.168.11.11][51587] -> [.173.194.35.191][..443] [TLS.Google][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [.....2] [ip4][..tcp] [..192.168.11.11][51590] -> [.173.194.35.191][..443] [MIDSTREAM] + detected: [.....2] [ip4][..tcp] [..192.168.11.11][51590] -> [.173.194.35.191][..443] [TLS.Google][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [.....3] [ip4][..tcp] [..192.168.11.11][51589] -> [.173.194.35.191][..443] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [..192.168.11.11][51589] -> [.173.194.35.191][..443] [TLS.Google][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [.....4] [ip4][..tcp] [..192.168.11.11][51588] -> [.173.194.35.191][..443] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [..192.168.11.11][51588] -> [.173.194.35.191][..443] [TLS.Google][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [.....5] [ip4][..tcp] [..192.168.11.11][51591] -> [.173.194.35.191][..443] [MIDSTREAM] + detected: [.....5] [ip4][..tcp] [..192.168.11.11][51591] -> [.173.194.35.191][..443] [TLS.Google][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + idle: [.....1] [ip4][..tcp] [..192.168.11.11][51587] -> [.173.194.35.191][..443] + idle: [.....4] [ip4][..tcp] [..192.168.11.11][51588] -> [.173.194.35.191][..443] + idle: [.....3] [ip4][..tcp] [..192.168.11.11][51589] -> [.173.194.35.191][..443] + idle: [.....2] [ip4][..tcp] [..192.168.11.11][51590] -> [.173.194.35.191][..443] + idle: [.....5] [ip4][..tcp] [..192.168.11.11][51591] -> [.173.194.35.191][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_esni_sni_both.pcap.out b/test/results/flow-info/tls_esni_sni_both.pcap.out new file mode 100644 index 000000000..0b41947af --- /dev/null +++ b/test/results/flow-info/tls_esni_sni_both.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.1.21][55500] -> [..104.17.175.85][..443] + detected: [.....1] [ip4][..tcp] [...192.168.1.21][55500] -> [..104.17.175.85][..443] [TLS.Cloudflare][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, TLS Suspicious ESNI Usage + detection-update: [.....1] [ip4][..tcp] [...192.168.1.21][55500] -> [..104.17.175.85][..443] [TLS.Cloudflare][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, TLS Suspicious ESNI Usage + new: [.....2] [ip4][..tcp] [...192.168.1.21][55514] -> [..104.17.175.85][..443] + detected: [.....2] [ip4][..tcp] [...192.168.1.21][55514] -> [..104.17.175.85][..443] [TLS.Cloudflare][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, TLS Suspicious ESNI Usage + detection-update: [.....2] [ip4][..tcp] [...192.168.1.21][55514] -> [..104.17.175.85][..443] [TLS.Cloudflare][Web][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS, TLS Suspicious ESNI Usage + end: [.....1] [ip4][..tcp] [...192.168.1.21][55500] -> [..104.17.175.85][..443] + end: [.....2] [ip4][..tcp] [...192.168.1.21][55514] -> [..104.17.175.85][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_false_positives.pcapng.out b/test/results/flow-info/tls_false_positives.pcapng.out new file mode 100644 index 000000000..f77b6afc8 --- /dev/null +++ b/test/results/flow-info/tls_false_positives.pcapng.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.10.10.1][.1445] -> [....192.168.0.1][20979] + not-detected: [.....1] [ip4][..tcp] [.....10.10.10.1][.1445] -> [....192.168.0.1][20979] [Unknown][Unrated] + idle: [.....1] [ip4][..tcp] [.....10.10.10.1][.1445] -> [....192.168.0.1][20979] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_invalid_reads.pcap.out b/test/results/flow-info/tls_invalid_reads.pcap.out new file mode 100644 index 000000000..85b4bcd92 --- /dev/null +++ b/test/results/flow-info/tls_invalid_reads.pcap.out @@ -0,0 +1,23 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.192.168.10.101][.3967] -> [..206.33.61.113][..443] + detected: [.....1] [ip4][..tcp] [.192.168.10.101][.3967] -> [..206.33.61.113][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....1] [ip4][..tcp] [.192.168.10.101][.3967] -> [..206.33.61.113][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....1] [ip4][..tcp] [.192.168.10.101][.3967] -> [..206.33.61.113][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + DAEMON-EVENT: [Processed: 8 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 2|updates: 0] + new: [.....2] [ip4][..tcp] [...74.80.160.99][.3258] -> [...67.217.77.28][..443] [MIDSTREAM] + idle: [.....1] [ip4][..tcp] [.192.168.10.101][.3967] -> [..206.33.61.113][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + DAEMON-EVENT: [Processed: 9 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 2|updates: 0] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + guessed: [.....2] [ip4][..tcp] [...74.80.160.99][.3258] -> [...67.217.77.28][..443] [TLS.GoTo][VoIP][Acceptable] + idle: [.....2] [ip4][..tcp] [...74.80.160.99][.3258] -> [...67.217.77.28][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_long_cert.pcap.out b/test/results/flow-info/tls_long_cert.pcap.out new file mode 100644 index 000000000..022add874 --- /dev/null +++ b/test/results/flow-info/tls_long_cert.pcap.out @@ -0,0 +1,16 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.2.126][60174] -> [.104.111.215.93][..443] + detected: [.....1] [ip4][..tcp] [..192.168.2.126][60174] -> [.104.111.215.93][..443] [TLS][Web][Safe] + detection-update: [.....1] [ip4][..tcp] [..192.168.2.126][60174] -> [.104.111.215.93][..443] [TLS][Web][Safe] + detection-update: [.....1] [ip4][..tcp] [..192.168.2.126][60174] -> [.104.111.215.93][..443] [TLS][Web][Safe] + analyse: [.....1] [ip4][..tcp] [..192.168.2.126][60174] -> [.104.111.215.93][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.034| 0.008| 0.011] + [IAT(c->s)...: 0.000| 0.034| 0.008| 0.011][IAT(s->c)...: 0.000| 0.030| 0.008| 0.011] + [PKTLEN(c->s): 66.000| 902.000| 167.400| 227.500][PKTLEN(s->c): 66.000|1514.000| 926.500| 586.900] + [BINS(c->s)..: 11,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,2,0,0,0,0,1,0,0,0,0,0,0,0,6,0,0] + end: [.....1] [ip4][..tcp] [..192.168.2.126][60174] -> [.104.111.215.93][..443] [TLS][Web][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_missing_ch_frag.pcap.out b/test/results/flow-info/tls_missing_ch_frag.pcap.out new file mode 100644 index 000000000..624f6c792 --- /dev/null +++ b/test/results/flow-info/tls_missing_ch_frag.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][33063] + detected: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][33063] [TLS][Web][Safe] + end: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][33063] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_multiple_synack_different_seq.pcapng.out b/test/results/flow-info/tls_multiple_synack_different_seq.pcapng.out new file mode 100644 index 000000000..61f48410c --- /dev/null +++ b/test/results/flow-info/tls_multiple_synack_different_seq.pcapng.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][59927] + detected: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][59927] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][59927] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][59927] [TLS.AmazonAWS][Cloud][Acceptable] + idle: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][59927] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_port_80.pcapng.out b/test/results/flow-info/tls_port_80.pcapng.out new file mode 100644 index 000000000..dca271de5 --- /dev/null +++ b/test/results/flow-info/tls_port_80.pcapng.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..57.91.202.194][50541] -> [..132.49.141.56][...80] + detected: [.....1] [ip4][..tcp] [..57.91.202.194][50541] -> [..132.49.141.56][...80] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + detection-update: [.....1] [ip4][..tcp] [..57.91.202.194][50541] -> [..132.49.141.56][...80] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS, Missing SNI TLS Extn + idle: [.....1] [ip4][..tcp] [..57.91.202.194][50541] -> [..132.49.141.56][...80] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_torrent.pcapng.out b/test/results/flow-info/tls_torrent.pcapng.out new file mode 100644 index 000000000..cf0840379 --- /dev/null +++ b/test/results/flow-info/tls_torrent.pcapng.out @@ -0,0 +1,12 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][58842] + detected: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][58842] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][58842] [TLS][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][58842] [TLS.BitTorrent][Download][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....1] [ip4][..tcp] [.....10.10.10.1][..443] -> [....192.168.0.1][58842] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tls_verylong_certificate.pcap.out b/test/results/flow-info/tls_verylong_certificate.pcap.out new file mode 100644 index 000000000..08ea17e0c --- /dev/null +++ b/test/results/flow-info/tls_verylong_certificate.pcap.out @@ -0,0 +1,17 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.160][54804] -> [..151.101.66.49][..443] + detected: [.....1] [ip4][..tcp] [..192.168.1.160][54804] -> [..151.101.66.49][..443] [TLS][Web][Safe] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.160][54804] -> [..151.101.66.49][..443] [TLS][Web][Safe] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.160][54804] -> [..151.101.66.49][..443] [TLS][Media][Safe] + analyse: [.....1] [ip4][..tcp] [..192.168.1.160][54804] -> [..151.101.66.49][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.022| 0.005| 0.007] + [IAT(c->s)...: 0.000| 0.015| 0.005| 0.006][IAT(s->c)...: 0.000| 0.022| 0.004| 0.007] + [PKTLEN(c->s): 66.000| 583.000| 121.000| 133.400][PKTLEN(s->c): 66.000|1434.000| 895.700| 644.700] + [BINS(c->s)..: 12,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,4,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0,0,0,0] + detection-update: [.....1] [ip4][..tcp] [..192.168.1.160][54804] -> [..151.101.66.49][..443] [TLS][Media][Safe] + end: [.....1] [ip4][..tcp] [..192.168.1.160][54804] -> [..151.101.66.49][..443] [TLS][Media][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/toca-boca.pcap.out b/test/results/flow-info/toca-boca.pcap.out new file mode 100644 index 000000000..2302a4eb7 --- /dev/null +++ b/test/results/flow-info/toca-boca.pcap.out @@ -0,0 +1,92 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..192.168.2.100][50173] -> [..91.199.81.225][.5055] + detected: [.....1] [ip4][..udp] [..192.168.2.100][50173] -> [..91.199.81.225][.5055] [TocaBoca][Game][Fun] + DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..udp] [..192.168.2.100][42022] -> [...92.38.154.49][.5055] + detected: [.....2] [ip4][..udp] [..192.168.2.100][42022] -> [...92.38.154.49][.5055] [TocaBoca][Game][Fun] + idle: [.....1] [ip4][..udp] [..192.168.2.100][50173] -> [..91.199.81.225][.5055] [TocaBoca][Game][Fun] + DAEMON-EVENT: [Processed: 16 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....3] [ip4][..udp] [..192.168.2.100][55544] -> [...92.38.154.49][.5055] + detected: [.....3] [ip4][..udp] [..192.168.2.100][55544] -> [...92.38.154.49][.5055] [TocaBoca][Game][Fun] + idle: [.....2] [ip4][..udp] [..192.168.2.100][42022] -> [...92.38.154.49][.5055] [TocaBoca][Game][Fun] + new: [.....4] [ip4][..udp] [...92.38.154.49][.5055] -> [..192.168.2.100][32867] + detected: [.....4] [ip4][..udp] [...92.38.154.49][.5055] -> [..192.168.2.100][32867] [TocaBoca][Game][Fun] + DAEMON-EVENT: [Processed: 32 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..udp] [..192.168.2.100][54983] -> [..91.199.81.123][.5055] + detected: [.....5] [ip4][..udp] [..192.168.2.100][54983] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + new: [.....6] [ip4][..udp] [..91.199.81.130][.5055] -> [..192.168.2.100][43064] + detected: [.....6] [ip4][..udp] [..91.199.81.130][.5055] -> [..192.168.2.100][43064] [TocaBoca][Game][Fun] + idle: [.....4] [ip4][..udp] [...92.38.154.49][.5055] -> [..192.168.2.100][32867] [TocaBoca][Game][Fun] + idle: [.....3] [ip4][..udp] [..192.168.2.100][55544] -> [...92.38.154.49][.5055] [TocaBoca][Game][Fun] + new: [.....7] [ip4][..udp] [..192.168.2.100][44818] -> [..91.199.81.123][.5055] + detected: [.....7] [ip4][..udp] [..192.168.2.100][44818] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + update: [.....5] [ip4][..udp] [..192.168.2.100][54983] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + update: [.....6] [ip4][..udp] [..91.199.81.130][.5055] -> [..192.168.2.100][43064] [TocaBoca][Game][Fun] + new: [.....8] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][60837] + detected: [.....8] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][60837] [TocaBoca][Game][Fun] + idle: [.....5] [ip4][..udp] [..192.168.2.100][54983] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + idle: [.....7] [ip4][..udp] [..192.168.2.100][44818] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + idle: [.....6] [ip4][..udp] [..91.199.81.130][.5055] -> [..192.168.2.100][43064] [TocaBoca][Game][Fun] + new: [.....9] [ip4][..udp] [..192.168.2.100][37218] -> [..91.199.81.123][.5055] + detected: [.....9] [ip4][..udp] [..192.168.2.100][37218] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + update: [.....8] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][60837] [TocaBoca][Game][Fun] + DAEMON-EVENT: [Processed: 51 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 9|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 3] + new: [....10] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][33311] + detected: [....10] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][33311] [TocaBoca][Game][Fun] + idle: [.....8] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][60837] [TocaBoca][Game][Fun] + idle: [.....9] [ip4][..udp] [..192.168.2.100][37218] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + DAEMON-EVENT: [Processed: 52 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 10|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 3] + new: [....11] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][40290] + detected: [....11] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][40290] [TocaBoca][Game][Fun] + idle: [....10] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][33311] [TocaBoca][Game][Fun] + new: [....12] [ip4][..udp] [..192.168.2.100][33024] -> [..91.199.81.123][.5055] + detected: [....12] [ip4][..udp] [..192.168.2.100][33024] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + idle: [....11] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][40290] [TocaBoca][Game][Fun] + new: [....13] [ip4][..udp] [..192.168.2.100][56864] -> [..91.199.81.123][.5055] + detected: [....13] [ip4][..udp] [..192.168.2.100][56864] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + DAEMON-EVENT: [Processed: 55 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 13|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 3] + new: [....14] [ip4][..udp] [..192.168.2.100][50600] -> [..91.199.81.123][.5055] + detected: [....14] [ip4][..udp] [..192.168.2.100][50600] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + idle: [....13] [ip4][..udp] [..192.168.2.100][56864] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + idle: [....12] [ip4][..udp] [..192.168.2.100][33024] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + new: [....15] [ip4][..udp] [..192.168.2.100][35671] -> [..91.199.81.123][.5055] + detected: [....15] [ip4][..udp] [..192.168.2.100][35671] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + update: [....14] [ip4][..udp] [..192.168.2.100][50600] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + new: [....16] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][37167] + idle: [....14] [ip4][..udp] [..192.168.2.100][50600] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + update: [....15] [ip4][..udp] [..192.168.2.100][35671] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + DAEMON-EVENT: [Processed: 72 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 16|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 5] + new: [....17] [ip4][..udp] [..91.199.81.122][.5055] -> [..192.168.2.100][34503] + detected: [....17] [ip4][..udp] [..91.199.81.122][.5055] -> [..192.168.2.100][34503] [TocaBoca][Game][Fun] + guessed: [....16] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][37167] [TocaBoca][Game][Fun] + idle: [....16] [ip4][..udp] [..91.199.81.123][.5055] -> [..192.168.2.100][37167] + idle: [....15] [ip4][..udp] [..192.168.2.100][35671] -> [..91.199.81.123][.5055] [TocaBoca][Game][Fun] + DAEMON-EVENT: [Processed: 73 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 17|skipped: 0|!detected: 0|guessed: 1|detection-updates: 0|updates: 5] + new: [....18] [ip4][..udp] [..91.199.81.225][.5055] -> [..192.168.2.100][50337] + idle: [....17] [ip4][..udp] [..91.199.81.122][.5055] -> [..192.168.2.100][34503] [TocaBoca][Game][Fun] + DAEMON-EVENT: [Processed: 74 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 18|skipped: 0|!detected: 0|guessed: 1|detection-updates: 0|updates: 5] + new: [....19] [ip4][..udp] [..91.199.81.122][.5055] -> [..192.168.2.100][56920] + new: [....20] [ip4][..udp] [..192.168.2.100][45096] -> [..91.199.81.208][.5055] + detected: [....20] [ip4][..udp] [..192.168.2.100][45096] -> [..91.199.81.208][.5055] [TocaBoca][Game][Fun] + guessed: [....18] [ip4][..udp] [..91.199.81.225][.5055] -> [..192.168.2.100][50337] [TocaBoca][Game][Fun] + idle: [....18] [ip4][..udp] [..91.199.81.225][.5055] -> [..192.168.2.100][50337] + DAEMON-EVENT: [Processed: 76 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 20|skipped: 0|!detected: 0|guessed: 2|detection-updates: 0|updates: 5] + new: [....21] [ip4][..udp] [..91.199.81.225][.5055] -> [..192.168.2.100][43151] + guessed: [....19] [ip4][..udp] [..91.199.81.122][.5055] -> [..192.168.2.100][56920] [TocaBoca][Game][Fun] + idle: [....19] [ip4][..udp] [..91.199.81.122][.5055] -> [..192.168.2.100][56920] + idle: [....20] [ip4][..udp] [..192.168.2.100][45096] -> [..91.199.81.208][.5055] [TocaBoca][Game][Fun] + guessed: [....21] [ip4][..udp] [..91.199.81.225][.5055] -> [..192.168.2.100][43151] [TocaBoca][Game][Fun] + idle: [....21] [ip4][..udp] [..91.199.81.225][.5055] -> [..192.168.2.100][43151] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tor.pcap.out b/test/results/flow-info/tor.pcap.out new file mode 100644 index 000000000..bd254e57b --- /dev/null +++ b/test/results/flow-info/tor.pcap.out @@ -0,0 +1,259 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [.....1] [ip4][..tcp] [..192.168.1.252][51110] -> [..91.143.93.242][..443] + detected: [.....1] [ip4][..tcp] [..192.168.1.252][51110] -> [..91.143.93.242][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....1] [ip4][..tcp] [..192.168.1.252][51110] -> [..91.143.93.242][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + ERROR-EVENT: Unknown packet type + new: [.....2] [ip4][..tcp] [..192.168.1.252][51111] -> [....46.59.52.31][..443] + detected: [.....2] [ip4][..tcp] [..192.168.1.252][51111] -> [....46.59.52.31][..443] [TLS.Tor][VPN][Potentially Dangerous] + RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol + detection-update: [.....2] [ip4][..tcp] [..192.168.1.252][51111] -> [....46.59.52.31][..443] [TLS.Tor][VPN][Potentially Dangerous] + RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol + ERROR-EVENT: Unknown packet type + new: [.....3] [ip4][..tcp] [..192.168.1.252][51112] -> [...38.229.70.53][..443] + detected: [.....3] [ip4][..tcp] [..192.168.1.252][51112] -> [...38.229.70.53][..443] [TLS.Tor][VPN][Potentially Dangerous] + RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol + detection-update: [.....3] [ip4][..tcp] [..192.168.1.252][51112] -> [...38.229.70.53][..443] [TLS.Tor][VPN][Potentially Dangerous] + RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] + detected: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [.....5] [ip4][..udp] [..192.168.1.252][..138] -> [..192.168.1.255][..138] + detected: [.....5] [ip4][..udp] [..192.168.1.252][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + analyse: [.....3] [ip4][..tcp] [..192.168.1.252][51112] -> [...38.229.70.53][..443] [TLS.Tor][VPN][Potentially Dangerous] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 31.166| 2.329| 7.550] + [IAT(c->s)...: 0.000| 30.771| 2.771| 8.118][IAT(s->c)...: 0.000| 31.166| 2.009| 7.094] + [PKTLEN(c->s): 60.000| 640.000| 384.600| 263.100][PKTLEN(s->c): 54.000|1514.000| 358.200| 412.100] + [BINS(c->s)..: 4,0,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + analyse: [.....1] [ip4][..tcp] [..192.168.1.252][51110] -> [..91.143.93.242][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 37.996| 2.549| 9.274] + [IAT(c->s)...: 0.001| 37.720| 3.036| 10.014][IAT(s->c)...: 0.000| 37.996| 2.197| 8.683] + [PKTLEN(c->s): 60.000| 640.000| 337.900| 267.500][PKTLEN(s->c): 54.000|1514.000| 559.800| 571.000] + [BINS(c->s)..: 5,0,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + update: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + ERROR-EVENT: Unknown packet type + new: [.....6] [ip4][..tcp] [..192.168.1.252][51104] -> [...157.56.30.46][..443] [MIDSTREAM] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + update: [.....5] [ip4][..udp] [..192.168.1.252][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + analyse: [.....2] [ip4][..tcp] [..192.168.1.252][51111] -> [....46.59.52.31][..443] [TLS.Tor][VPN][Potentially Dangerous] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 71.328| 4.658| 14.789] + [IAT(c->s)...: 0.000| 71.328| 7.713| 19.711][IAT(s->c)...: 0.000| 34.353| 2.142| 8.054] + [PKTLEN(c->s): 60.000| 640.000| 319.900| 267.500][PKTLEN(s->c): 54.000|1514.000| 366.500| 403.200] + [BINS(c->s)..: 6,0,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [.....7] [ip4][..tcp] [..192.168.1.252][51174] -> [.212.83.155.250][..443] + new: [.....8] [ip4][..tcp] [..192.168.1.252][51175] -> [..91.143.93.242][..443] + detected: [.....7] [ip4][..tcp] [..192.168.1.252][51174] -> [.212.83.155.250][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detected: [.....8] [ip4][..tcp] [..192.168.1.252][51175] -> [..91.143.93.242][..443] [TLS.Tor][VPN][Potentially Dangerous] + RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol + detection-update: [.....7] [ip4][..tcp] [..192.168.1.252][51174] -> [.212.83.155.250][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....8] [ip4][..tcp] [..192.168.1.252][51175] -> [..91.143.93.242][..443] [TLS.Tor][VPN][Potentially Dangerous] + RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol + ERROR-EVENT: Unknown packet type + new: [.....9] [ip4][..tcp] [..192.168.1.252][51176] -> [...38.229.70.53][..443] + detected: [.....9] [ip4][..tcp] [..192.168.1.252][51176] -> [...38.229.70.53][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....9] [ip4][..tcp] [..192.168.1.252][51176] -> [...38.229.70.53][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + analyse: [.....8] [ip4][..tcp] [..192.168.1.252][51175] -> [..91.143.93.242][..443] [TLS.Tor][VPN][Potentially Dangerous] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.991| 0.147| 0.220] + [IAT(c->s)...: 0.001| 0.694| 0.172| 0.215][IAT(s->c)...: 0.000| 0.991| 0.128| 0.222] + [PKTLEN(c->s): 60.000| 640.000| 379.200| 266.200][PKTLEN(s->c): 54.000|1514.000| 349.100| 398.300] + [BINS(c->s)..: 4,0,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + ERROR-EVENT: Unknown packet type + analyse: [.....9] [ip4][..tcp] [..192.168.1.252][51176] -> [...38.229.70.53][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.755| 0.186| 0.164] + [IAT(c->s)...: 0.001| 0.755| 0.221| 0.193][IAT(s->c)...: 0.000| 0.608| 0.160| 0.133] + [PKTLEN(c->s): 60.000| 640.000| 342.600| 265.100][PKTLEN(s->c): 54.000|1514.000| 358.200| 412.100] + [BINS(c->s)..: 5,0,1,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + end: [.....1] [ip4][..tcp] [..192.168.1.252][51110] -> [..91.143.93.242][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + idle: [.....5] [ip4][..udp] [..192.168.1.252][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + guessed: [.....6] [ip4][..tcp] [..192.168.1.252][51104] -> [...157.56.30.46][..443] [TLS.Azure][Cloud][Acceptable] + end: [.....6] [ip4][..tcp] [..192.168.1.252][51104] -> [...157.56.30.46][..443] + end: [.....2] [ip4][..tcp] [..192.168.1.252][51111] -> [....46.59.52.31][..443] [TLS.Tor][VPN][Potentially Dangerous] + RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol + end: [.....3] [ip4][..tcp] [..192.168.1.252][51112] -> [...38.229.70.53][..443] [TLS.Tor][VPN][Potentially Dangerous] + RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol + update: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + update: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + ERROR-EVENT: Unknown packet type + new: [....10] [ip4][..tcp] [..192.168.1.252][51185] -> [.62.210.137.230][..443] + detected: [....10] [ip4][..tcp] [..192.168.1.252][51185] -> [.62.210.137.230][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....10] [ip4][..tcp] [..192.168.1.252][51185] -> [.62.210.137.230][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + new: [....11] [ip6][..udp] [..............fe80::c583:1972:5728:7323][..546] -> [..............................ff02::1:2][..547] + detected: [....11] [ip6][..udp] [..............fe80::c583:1972:5728:7323][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + update: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + DAEMON-EVENT: [Processed: 3664 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 6 / 11|skipped: 0|!detected: 0|guessed: 1|detection-updates: 7|updates: 5] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + analyse: [.....7] [ip4][..tcp] [..192.168.1.252][51174] -> [.212.83.155.250][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 72.890| 8.727| 22.569] + [IAT(c->s)...: 0.002| 72.591| 9.018| 22.849][IAT(s->c)...: 0.000| 72.890| 8.454| 22.300] + [PKTLEN(c->s): 60.000| 640.000| 230.700| 242.600][PKTLEN(s->c): 54.000|1514.000| 421.200| 402.900] + [BINS(c->s)..: 9,0,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + update: [....11] [ip6][..udp] [..............fe80::c583:1972:5728:7323][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type + end: [.....8] [ip4][..tcp] [..192.168.1.252][51175] -> [..91.143.93.242][..443] [TLS.Tor][VPN][Potentially Dangerous] + RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol + idle: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....11] [ip6][..udp] [..............fe80::c583:1972:5728:7323][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] + end: [....10] [ip4][..tcp] [..192.168.1.252][51185] -> [.62.210.137.230][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + end: [.....7] [ip4][..tcp] [..192.168.1.252][51174] -> [.212.83.155.250][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + end: [.....9] [ip4][..tcp] [..192.168.1.252][51176] -> [...38.229.70.53][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/trickbot.pcap.out b/test/results/flow-info/trickbot.pcap.out new file mode 100644 index 000000000..da14251f3 --- /dev/null +++ b/test/results/flow-info/trickbot.pcap.out @@ -0,0 +1,18 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...10.12.29.101][61318] -> [.82.118.225.196][.7080] + detected: [.....1] [ip4][..tcp] [...10.12.29.101][61318] -> [.82.118.225.196][.7080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address + detection-update: [.....1] [ip4][..tcp] [...10.12.29.101][61318] -> [.82.118.225.196][.7080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address, HTTP Suspicious Content + analyse: [.....1] [ip4][..tcp] [...10.12.29.101][61318] -> [.82.118.225.196][.7080] [HTTP][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.931| 0.157| 0.258] + [IAT(c->s)...: 0.000| 0.931| 0.273| 0.296][IAT(s->c)...: 0.000| 0.931| 0.116| 0.230] + [PKTLEN(c->s): 54.000| 982.000| 197.200| 297.900][PKTLEN(s->c): 54.000|1514.000|1236.200| 521.800] + [BINS(c->s)..: 7,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,3,0,0,14,0,0] + end: [.....1] [ip4][..tcp] [...10.12.29.101][61318] -> [.82.118.225.196][.7080] [HTTP][Web][Acceptable] + RISK: Known Proto on Non Std Port, HTTP Numeric IP Address, HTTP Suspicious Content + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tumblr.pcap.out b/test/results/flow-info/tumblr.pcap.out new file mode 100644 index 000000000..4385a500c --- /dev/null +++ b/test/results/flow-info/tumblr.pcap.out @@ -0,0 +1,237 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56592] -> [.....................64:ff9b::9765:798c][..443] [MIDSTREAM] + new: [.....2] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48240] -> [.....................64:ff9b::9765:789d][..443] [MIDSTREAM] + new: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56640] -> [.....................64:ff9b::9765:798c][..443] [MIDSTREAM] + new: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][41266] -> [....2620:116:800d:21:8c6e:cf2c:8d6:9fb5][..443] [MIDSTREAM] + detected: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][41266] -> [....2620:116:800d:21:8c6e:cf2c:8d6:9fb5][..443] [TLS][Web][Safe] + new: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57286] -> [.....................64:ff9b::8fcc:d927][..443] [MIDSTREAM] + detected: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57286] -> [.....................64:ff9b::8fcc:d927][..443] [TLS][Web][Safe] + new: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][42908] -> [.....................64:ff9b::98c7:1593][..443] [MIDSTREAM] + detected: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][42908] -> [.....................64:ff9b::98c7:1593][..443] [TLS][Web][Safe] + new: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56782] -> [.....................64:ff9b::68f4:2ac8][..443] [MIDSTREAM] + analyse: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][42908] -> [.....................64:ff9b::98c7:1593][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.701| 0.084| 0.189] + [IAT(c->s)...: 0.000| 0.701| 0.087| 0.192][IAT(s->c)...: 0.000| 0.701| 0.081| 0.186] + [PKTLEN(c->s): 86.000| 468.000| 123.900| 93.400][PKTLEN(s->c): 86.000|1486.000| 803.100| 652.000] + [BINS(c->s)..: 11,3,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0] + new: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43420] -> [.....................64:ff9b::c000:4d28][..443] [MIDSTREAM] + detected: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43420] -> [.....................64:ff9b::c000:4d28][..443] [TLS][Web][Safe] + new: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43434] -> [.....................64:ff9b::c000:4d28][..443] [MIDSTREAM] + detected: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43434] -> [.....................64:ff9b::c000:4d28][..443] [TLS][Web][Safe] + new: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58380] -> [..2606:2800:135:155a:23ba:b2a:25ff:122d][..443] + analyse: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43420] -> [.....................64:ff9b::c000:4d28][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.037| 0.003| 0.008] + [IAT(c->s)...: 0.000| 0.037| 0.003| 0.009][IAT(s->c)...: 0.000| 0.026| 0.003| 0.007] + [PKTLEN(c->s): 86.000| 246.000| 105.400| 51.500][PKTLEN(s->c): 86.000|1486.000| 839.600| 667.600] + [BINS(c->s)..: 14,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,0,0] + detection-update: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43420] -> [.....................64:ff9b::c000:4d28][..443] [TLS][Web][Safe] + detected: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58380] -> [..2606:2800:135:155a:23ba:b2a:25ff:122d][..443] [TLS][Web][Safe] + analyse: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43434] -> [.....................64:ff9b::c000:4d28][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.045| 0.004| 0.009] + [IAT(c->s)...: 0.000| 0.045| 0.004| 0.011][IAT(s->c)...: 0.000| 0.027| 0.004| 0.007] + [PKTLEN(c->s): 86.000| 198.000| 108.600| 42.000][PKTLEN(s->c): 86.000|1486.000|1136.000| 606.200] + [BINS(c->s)..: 12,1,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,0,0,0,0] + detection-update: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43434] -> [.....................64:ff9b::c000:4d28][..443] [TLS][Web][Safe] + new: [....11] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58382] -> [..2606:2800:135:155a:23ba:b2a:25ff:122d][..443] + detection-update: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58380] -> [..2606:2800:135:155a:23ba:b2a:25ff:122d][..443] [TLS][Web][Safe] + detected: [....11] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58382] -> [..2606:2800:135:155a:23ba:b2a:25ff:122d][..443] [TLS][Web][Safe] + detection-update: [....11] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58382] -> [..2606:2800:135:155a:23ba:b2a:25ff:122d][..443] [TLS][Web][Safe] + analyse: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58380] -> [..2606:2800:135:155a:23ba:b2a:25ff:122d][..443] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.048| 0.012| 0.017] + [IAT(c->s)...: 0.000| 0.047| 0.010| 0.016][IAT(s->c)...: 0.000| 0.048| 0.014| 0.018] + [PKTLEN(c->s): 86.000| 609.000| 181.400| 172.900][PKTLEN(s->c): 86.000|1294.000| 448.000| 475.600] + [BINS(c->s)..: 10,1,2,0,0,0,0,0,1,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,2,0,0,0,2,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0] + new: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39152] -> [......................64:ff9b::6006:749][..443] + new: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47118] -> [.................2001:4998:14:800::1001][..443] + detected: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39152] -> [......................64:ff9b::6006:749][..443] [TLS][Advertisement][Safe] + detected: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47118] -> [.................2001:4998:14:800::1001][..443] [TLS.Yahoo][Web][Safe] + detection-update: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39152] -> [......................64:ff9b::6006:749][..443] [TLS][Advertisement][Safe] + new: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56794] -> [.....................64:ff9b::c000:4d03][..443] [MIDSTREAM] + detected: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56794] -> [.....................64:ff9b::c000:4d03][..443] [TLS][Web][Safe] + analyse: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56794] -> [.....................64:ff9b::c000:4d03][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.037| 0.004| 0.009] + [IAT(c->s)...: 0.000| 0.026| 0.004| 0.009][IAT(s->c)...: 0.000| 0.037| 0.004| 0.009] + [PKTLEN(c->s): 86.000| 216.000| 123.500| 50.800][PKTLEN(s->c): 86.000|1486.000| 703.400| 679.200] + [BINS(c->s)..: 8,2,1,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,7,0,0,0,0] + detection-update: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56794] -> [.....................64:ff9b::c000:4d03][..443] [TLS][Web][Safe] + new: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51874] -> [.....................64:ff9b::c000:4c03][..443] [MIDSTREAM] + detected: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51874] -> [.....................64:ff9b::c000:4c03][..443] [TLS][Web][Safe] + detection-update: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47118] -> [.................2001:4998:14:800::1001][..443] [TLS.Yahoo][Web][Safe] + new: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56582] -> [.....................64:ff9b::9765:798c][..443] [MIDSTREAM] + new: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56564] -> [.....................64:ff9b::9765:798c][..443] [MIDSTREAM] + new: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56594] -> [.....................64:ff9b::9765:798c][..443] [MIDSTREAM] + new: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56578] -> [.....................64:ff9b::9765:798c][..443] [MIDSTREAM] + new: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56842] -> [.....................64:ff9b::c000:4d03][..443] + detected: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56842] -> [.....................64:ff9b::c000:4d03][..443] [TLS.Tumblr][SocialNetwork][Fun] + detection-update: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56842] -> [.....................64:ff9b::c000:4d03][..443] [TLS.Tumblr][SocialNetwork][Fun] + analyse: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56842] -> [.....................64:ff9b::c000:4d03][..443] [TLS.Tumblr][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.070| 0.013| 0.021] + [IAT(c->s)...: 0.000| 0.060| 0.012| 0.021][IAT(s->c)...: 0.000| 0.070| 0.015| 0.021] + [PKTLEN(c->s): 86.000| 603.000| 169.900| 155.400][PKTLEN(s->c): 86.000|1486.000| 585.800| 602.200] + [BINS(c->s)..: 11,0,2,0,0,0,0,0,0,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,0,1,0,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,4,0,0,0,0] + new: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56558] -> [.....................64:ff9b::9765:798c][..443] [MIDSTREAM] + new: [....22] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][50960] -> [...............2a00:1450:4007:805::2002][..443] [MIDSTREAM] + new: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49496] -> [...............2a00:1450:4007:815::2003][..443] [MIDSTREAM] + new: [....24] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43602] -> [......................64:ff9b::df9:21c6][..443] [MIDSTREAM] + new: [....25] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][35892] -> [...............2a00:1450:4007:815::2002][..443] [MIDSTREAM] + new: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][45706] -> [...............2a00:1450:4007:80a::200e][..443] [MIDSTREAM] + new: [....27] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49464] -> [...............2a00:1450:4007:809::200e][..443] [MIDSTREAM] + new: [....28] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49462] -> [...............2a00:1450:4007:809::200e][..443] [MIDSTREAM] + new: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57788] -> [...............2a00:1450:4007:80b::200e][..443] [MIDSTREAM] + new: [....30] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49546] -> [...............2a00:1450:4007:815::2003][..443] [MIDSTREAM] + new: [....31] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][44164] -> [...............2a00:1450:4007:805::2003][..443] [MIDSTREAM] + new: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58618] -> [...............2a00:1450:4007:805::200e][..443] [MIDSTREAM] + new: [....33] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58616] -> [...............2a00:1450:4007:805::200e][..443] [MIDSTREAM] + new: [....34] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58614] -> [...............2a00:1450:4007:805::200e][..443] [MIDSTREAM] + new: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][50906] -> [.....................64:ff9b::d83a:d582][..443] [MIDSTREAM] + new: [....36] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48988] -> [...............2a00:1450:4007:811::2004][..443] [MIDSTREAM] + new: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57770] -> [...............2a00:1450:4007:80b::200e][..443] [MIDSTREAM] + new: [....38] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58004] -> [...............2a00:1450:4007:808::200e][..443] [MIDSTREAM] + new: [....39] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][55014] -> [...............2a00:1450:4007:806::200e][..443] [MIDSTREAM] + new: [....40] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49002] -> [...............2a00:1450:4007:811::2004][..443] [MIDSTREAM] + new: [....41] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43328] -> [.....................64:ff9b::4a72:9a16][..443] + detected: [....41] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43328] -> [.....................64:ff9b::4a72:9a16][..443] [TLS.Tumblr][SocialNetwork][Fun] + new: [....42] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][55560] -> [...............2a00:1450:4007:817::200a][..443] [MIDSTREAM] + detection-update: [....41] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43328] -> [.....................64:ff9b::4a72:9a16][..443] [TLS.Tumblr][SocialNetwork][Fun] + detection-update: [....41] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43328] -> [.....................64:ff9b::4a72:9a16][..443] [TLS.Tumblr][SocialNetwork][Fun] + analyse: [....41] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43328] -> [.....................64:ff9b::4a72:9a16][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.189| 0.029| 0.050] + [IAT(c->s)...: 0.000| 0.189| 0.029| 0.056][IAT(s->c)...: 0.000| 0.160| 0.029| 0.044] + [PKTLEN(c->s): 86.000| 603.000| 159.900| 158.100][PKTLEN(s->c): 86.000|1486.000| 776.100| 656.600] + [BINS(c->s)..: 12,0,2,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,6,0,0,0,0] + detection-update: [....41] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43328] -> [.....................64:ff9b::4a72:9a16][..443] [TLS.Tumblr][SocialNetwork][Fun] + new: [....43] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49548] -> [...............2a00:1450:4007:809::200e][..443] + detected: [.....2] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48240] -> [.....................64:ff9b::9765:789d][..443] [TLS][Web][Safe] + detected: [....43] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49548] -> [...............2a00:1450:4007:809::200e][..443] [TLS.Google][Web][Acceptable] + new: [....44] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38608] -> [...............2a00:1450:4007:80b::200a][..443] + analyse: [.....2] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48240] -> [.....................64:ff9b::9765:789d][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 19.514| 1.561| 5.288] + [IAT(c->s)...: 0.000| 19.473| 1.394| 5.014][IAT(s->c)...: 0.000| 19.514| 1.774| 5.610] + [PKTLEN(c->s): 86.000| 172.000| 94.800| 23.600][PKTLEN(s->c): 86.000|1134.000|1072.400| 246.600] + [BINS(c->s)..: 13,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [.....2] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48240] -> [.....................64:ff9b::9765:789d][..443] [TLS][Web][Safe] + detected: [....44] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38608] -> [...............2a00:1450:4007:80b::200a][..443] [TLS.GoogleServices][Web][Acceptable] + detection-update: [....43] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49548] -> [...............2a00:1450:4007:809::200e][..443] [TLS.Google][Web][Acceptable] + detection-update: [....44] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38608] -> [...............2a00:1450:4007:80b::200a][..443] [TLS.GoogleServices][Web][Acceptable] + analyse: [....44] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38608] -> [...............2a00:1450:4007:80b::200a][..443] [TLS.GoogleServices][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.067| 0.012| 0.020] + [IAT(c->s)...: 0.000| 0.067| 0.011| 0.019][IAT(s->c)...: 0.000| 0.067| 0.014| 0.022] + [PKTLEN(c->s): 86.000| 603.000| 144.200| 133.000][PKTLEN(s->c): 86.000|1294.000| 673.700| 539.300] + [BINS(c->s)..: 13,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0] + analyse: [....43] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49548] -> [...............2a00:1450:4007:809::200e][..443] [TLS.Google][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.083| 0.015| 0.021] + [IAT(c->s)...: 0.000| 0.083| 0.014| 0.022][IAT(s->c)...: 0.000| 0.071| 0.016| 0.020] + [PKTLEN(c->s): 86.000| 603.000| 146.600| 134.300][PKTLEN(s->c): 86.000|1294.000| 649.700| 553.400] + [BINS(c->s)..: 12,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0] + detected: [....42] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][55560] -> [...............2a00:1450:4007:817::200a][..443] [TLS][Web][Safe] + detected: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56782] -> [.....................64:ff9b::68f4:2ac8][..443] [TLS][Web][Safe] + new: [....45] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39164] -> [......................64:ff9b::6006:749][..443] + detected: [....45] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39164] -> [......................64:ff9b::6006:749][..443] [TLS][Advertisement][Safe] + new: [....46] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][42674] -> [.....................64:ff9b::4a72:9a15][..443] [MIDSTREAM] + detection-update: [....45] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39164] -> [......................64:ff9b::6006:749][..443] [TLS][Advertisement][Safe] + analyse: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39152] -> [......................64:ff9b::6006:749][..443] [TLS][Advertisement][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 16.589| 1.119| 4.059] + [IAT(c->s)...: 0.000| 16.557| 1.087| 3.995][IAT(s->c)...: 0.002| 16.589| 1.154| 4.126] + [PKTLEN(c->s): 86.000| 850.000| 334.500| 298.600][PKTLEN(s->c): 86.000|1365.000| 398.300| 430.800] + [BINS(c->s)..: 9,0,1,0,0,0,0,0,0,0,0,0,0,2,0,0,0,1,1,1,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0] + new: [....47] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40190] -> [...............2a00:1450:4007:80a::200a][..443] [MIDSTREAM] + guessed: [....36] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48988] -> [...............2a00:1450:4007:811::2004][..443] [TLS][Web][Safe] + idle: [....36] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48988] -> [...............2a00:1450:4007:811::2004][..443] + guessed: [....40] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49002] -> [...............2a00:1450:4007:811::2004][..443] [TLS][Web][Safe] + idle: [....40] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49002] -> [...............2a00:1450:4007:811::2004][..443] + idle: [.....4] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][41266] -> [....2620:116:800d:21:8c6e:cf2c:8d6:9fb5][..443] + idle: [.....2] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][48240] -> [.....................64:ff9b::9765:789d][..443] [TLS][Web][Safe] + guessed: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56558] -> [.....................64:ff9b::9765:798c][..443] [TLS][Web][Safe] + idle: [....21] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56558] -> [.....................64:ff9b::9765:798c][..443] + guessed: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56564] -> [.....................64:ff9b::9765:798c][..443] [TLS][Web][Safe] + idle: [....17] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56564] -> [.....................64:ff9b::9765:798c][..443] + guessed: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56578] -> [.....................64:ff9b::9765:798c][..443] [TLS][Web][Safe] + idle: [....19] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56578] -> [.....................64:ff9b::9765:798c][..443] + guessed: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56582] -> [.....................64:ff9b::9765:798c][..443] [TLS][Web][Safe] + idle: [....16] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56582] -> [.....................64:ff9b::9765:798c][..443] + guessed: [.....1] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56592] -> [.....................64:ff9b::9765:798c][..443] [TLS][Web][Safe] + idle: [.....1] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56592] -> [.....................64:ff9b::9765:798c][..443] + guessed: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56594] -> [.....................64:ff9b::9765:798c][..443] [TLS][Web][Safe] + idle: [....18] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56594] -> [.....................64:ff9b::9765:798c][..443] + idle: [....13] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][47118] -> [.................2001:4998:14:800::1001][..443] [TLS.Yahoo][Web][Safe] + idle: [....42] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][55560] -> [...............2a00:1450:4007:817::200a][..443] + guessed: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56640] -> [.....................64:ff9b::9765:798c][..443] [TLS][Web][Safe] + idle: [.....3] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56640] -> [.....................64:ff9b::9765:798c][..443] + guessed: [....28] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49462] -> [...............2a00:1450:4007:809::200e][..443] [TLS][Web][Safe] + idle: [....28] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49462] -> [...............2a00:1450:4007:809::200e][..443] + guessed: [....27] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49464] -> [...............2a00:1450:4007:809::200e][..443] [TLS][Web][Safe] + idle: [....27] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49464] -> [...............2a00:1450:4007:809::200e][..443] + guessed: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49496] -> [...............2a00:1450:4007:815::2003][..443] [TLS][Web][Safe] + idle: [....23] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49496] -> [...............2a00:1450:4007:815::2003][..443] + guessed: [....30] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49546] -> [...............2a00:1450:4007:815::2003][..443] [TLS][Web][Safe] + idle: [....30] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49546] -> [...............2a00:1450:4007:815::2003][..443] + idle: [....43] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][49548] -> [...............2a00:1450:4007:809::200e][..443] [TLS.Google][Web][Acceptable] + idle: [.....7] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56782] -> [.....................64:ff9b::68f4:2ac8][..443] + guessed: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57770] -> [...............2a00:1450:4007:80b::200e][..443] [TLS][Web][Safe] + idle: [....37] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57770] -> [...............2a00:1450:4007:80b::200e][..443] + idle: [....14] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56794] -> [.....................64:ff9b::c000:4d03][..443] [TLS][Web][Safe] + guessed: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57788] -> [...............2a00:1450:4007:80b::200e][..443] [TLS][Web][Safe] + idle: [....29] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57788] -> [...............2a00:1450:4007:80b::200e][..443] + idle: [....20] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][56842] -> [.....................64:ff9b::c000:4d03][..443] [TLS.Tumblr][SocialNetwork][Fun] + guessed: [....46] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][42674] -> [.....................64:ff9b::4a72:9a15][..443] [TLS][Web][Safe] + idle: [....46] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][42674] -> [.....................64:ff9b::4a72:9a15][..443] + guessed: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][45706] -> [...............2a00:1450:4007:80a::200e][..443] [TLS][Web][Safe] + idle: [....26] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][45706] -> [...............2a00:1450:4007:80a::200e][..443] + guessed: [....38] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58004] -> [...............2a00:1450:4007:808::200e][..443] [TLS][Web][Safe] + idle: [....38] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58004] -> [...............2a00:1450:4007:808::200e][..443] + guessed: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][50906] -> [.....................64:ff9b::d83a:d582][..443] [TLS][Web][Safe] + idle: [....35] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][50906] -> [.....................64:ff9b::d83a:d582][..443] + idle: [.....6] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][42908] -> [.....................64:ff9b::98c7:1593][..443] [TLS][Web][Safe] + idle: [.....5] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][57286] -> [.....................64:ff9b::8fcc:d927][..443] + idle: [....10] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58380] -> [..2606:2800:135:155a:23ba:b2a:25ff:122d][..443] [TLS][Web][Safe] + end: [....11] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58382] -> [..2606:2800:135:155a:23ba:b2a:25ff:122d][..443] + guessed: [....25] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][35892] -> [...............2a00:1450:4007:815::2002][..443] [TLS][Web][Safe] + idle: [....25] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][35892] -> [...............2a00:1450:4007:815::2002][..443] + guessed: [....31] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][44164] -> [...............2a00:1450:4007:805::2003][..443] [TLS][Web][Safe] + idle: [....31] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][44164] -> [...............2a00:1450:4007:805::2003][..443] + idle: [....12] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39152] -> [......................64:ff9b::6006:749][..443] [TLS][Advertisement][Safe] + idle: [....45] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][39164] -> [......................64:ff9b::6006:749][..443] + guessed: [....34] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58614] -> [...............2a00:1450:4007:805::200e][..443] [TLS][Web][Safe] + idle: [....34] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58614] -> [...............2a00:1450:4007:805::200e][..443] + guessed: [....33] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58616] -> [...............2a00:1450:4007:805::200e][..443] [TLS][Web][Safe] + idle: [....33] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58616] -> [...............2a00:1450:4007:805::200e][..443] + guessed: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58618] -> [...............2a00:1450:4007:805::200e][..443] [TLS][Web][Safe] + idle: [....32] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][58618] -> [...............2a00:1450:4007:805::200e][..443] + guessed: [....47] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40190] -> [...............2a00:1450:4007:80a::200a][..443] [TLS][Web][Safe] + idle: [....47] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][40190] -> [...............2a00:1450:4007:80a::200a][..443] + idle: [....41] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43328] -> [.....................64:ff9b::4a72:9a16][..443] [TLS.Tumblr][SocialNetwork][Fun] + idle: [.....8] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43420] -> [.....................64:ff9b::c000:4d28][..443] [TLS][Web][Safe] + idle: [.....9] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43434] -> [.....................64:ff9b::c000:4d28][..443] [TLS][Web][Safe] + guessed: [....24] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43602] -> [......................64:ff9b::df9:21c6][..443] [TLS][Web][Safe] + idle: [....24] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][43602] -> [......................64:ff9b::df9:21c6][..443] + idle: [....15] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][51874] -> [.....................64:ff9b::c000:4c03][..443] [TLS][Web][Safe] + idle: [....44] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][38608] -> [...............2a00:1450:4007:80b::200a][..443] [TLS.GoogleServices][Web][Acceptable] + guessed: [....39] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][55014] -> [...............2a00:1450:4007:806::200e][..443] [TLS][Web][Safe] + idle: [....39] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][55014] -> [...............2a00:1450:4007:806::200e][..443] + guessed: [....22] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][50960] -> [...............2a00:1450:4007:805::2002][..443] [TLS][Web][Safe] + idle: [....22] [ip6][..tcp] [2a01:cb01:2049:8b07:991d:ec85:28df:f629][50960] -> [...............2a00:1450:4007:805::2002][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tunnelbear.pcap.out b/test/results/flow-info/tunnelbear.pcap.out new file mode 100644 index 000000000..188ff1a25 --- /dev/null +++ b/test/results/flow-info/tunnelbear.pcap.out @@ -0,0 +1,114 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.......10.8.0.1][50178] -> [.104.17.154.236][..443] + detected: [.....1] [ip4][..tcp] [.......10.8.0.1][50178] -> [.104.17.154.236][..443] [TLS.TunnelBear][VPN][Acceptable] + new: [.....2] [ip4][..tcp] [.......10.8.0.1][45104] -> [..104.17.115.40][..443] + new: [.....3] [ip4][..tcp] [.......10.8.0.1][45106] -> [..104.17.115.40][..443] + new: [.....4] [ip4][..tcp] [.......10.8.0.1][45108] -> [..104.17.115.40][..443] + detected: [.....2] [ip4][..tcp] [.......10.8.0.1][45104] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + new: [.....5] [ip4][..tcp] [.......10.8.0.1][45114] -> [..104.17.115.40][..443] + detected: [.....3] [ip4][..tcp] [.......10.8.0.1][45106] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detected: [.....4] [ip4][..tcp] [.......10.8.0.1][45108] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detected: [.....5] [ip4][..tcp] [.......10.8.0.1][45114] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [.....2] [ip4][..tcp] [.......10.8.0.1][45104] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [.....1] [ip4][..tcp] [.......10.8.0.1][50178] -> [.104.17.154.236][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [.....3] [ip4][..tcp] [.......10.8.0.1][45106] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [.....4] [ip4][..tcp] [.......10.8.0.1][45108] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [.....5] [ip4][..tcp] [.......10.8.0.1][45114] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + new: [.....6] [ip4][..tcp] [.......10.8.0.1][47496] -> [162.247.243.188][..443] + detected: [.....6] [ip4][..tcp] [.......10.8.0.1][47496] -> [162.247.243.188][..443] [TLS][Web][Safe] + detection-update: [.....6] [ip4][..tcp] [.......10.8.0.1][47496] -> [162.247.243.188][..443] [TLS][Web][Safe] + analyse: [.....2] [ip4][..tcp] [.......10.8.0.1][45104] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.266| 0.037| 0.060] + [IAT(c->s)...: 0.000| 0.266| 0.039| 0.067][IAT(s->c)...: 0.000| 0.214| 0.036| 0.054] + [PKTLEN(c->s): 54.000| 590.000| 239.800| 219.800][PKTLEN(s->c): 54.000|3711.000| 640.200|1091.400] + [BINS(c->s)..: 7,1,1,1,0,0,0,0,1,0,1,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 10,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3] + new: [.....7] [ip4][..tcp] [.......10.8.0.1][45124] -> [..104.17.115.40][..443] + new: [.....8] [ip4][..tcp] [.......10.8.0.1][45126] -> [..104.17.115.40][..443] + detected: [.....7] [ip4][..tcp] [.......10.8.0.1][45124] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detected: [.....8] [ip4][..tcp] [.......10.8.0.1][45126] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [.....8] [ip4][..tcp] [.......10.8.0.1][45126] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [.....7] [ip4][..tcp] [.......10.8.0.1][45124] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + analyse: [.....8] [ip4][..tcp] [.......10.8.0.1][45126] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.234| 0.036| 0.055] + [IAT(c->s)...: 0.000| 0.234| 0.037| 0.061][IAT(s->c)...: 0.000| 0.197| 0.035| 0.048] + [PKTLEN(c->s): 54.000| 590.000| 198.700| 207.000][PKTLEN(s->c): 54.000| 803.000| 128.600| 182.600] + [BINS(c->s)..: 9,2,0,0,0,0,0,0,1,0,1,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 11,1,1,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....9] [ip4][..tcp] [..10.158.132.91][38398] -> [..104.17.114.40][..443] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [..10.158.132.91][38398] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + new: [....10] [ip4][..tcp] [..10.158.132.91][51120] -> [........8.8.8.8][...53] [MIDSTREAM] + new: [....11] [ip4][..tcp] [.......10.8.0.1][60224] -> [...157.240.7.32][..443] + detected: [....11] [ip4][..tcp] [.......10.8.0.1][60224] -> [...157.240.7.32][..443] [TLS.Messenger][Chat][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....11] [ip4][..tcp] [.......10.8.0.1][60224] -> [...157.240.7.32][..443] [TLS.Messenger][Chat][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [....12] [ip4][..tcp] [.......10.8.0.1][47594] -> [..99.83.135.170][..443] + detected: [....12] [ip4][..tcp] [.......10.8.0.1][47594] -> [..99.83.135.170][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....12] [ip4][..tcp] [.......10.8.0.1][47594] -> [..99.83.135.170][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....12] [ip4][..tcp] [.......10.8.0.1][47594] -> [..99.83.135.170][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [....13] [ip4][..tcp] [.......10.8.0.1][47046] -> [.74.125.200.188][.5228] + detected: [....13] [ip4][..tcp] [.......10.8.0.1][47046] -> [.74.125.200.188][.5228] [TLS.GoogleServices][Web][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + end: [.....2] [ip4][..tcp] [.......10.8.0.1][45104] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + end: [.....3] [ip4][..tcp] [.......10.8.0.1][45106] -> [..104.17.115.40][..443] + end: [.....4] [ip4][..tcp] [.......10.8.0.1][45108] -> [..104.17.115.40][..443] + end: [.....5] [ip4][..tcp] [.......10.8.0.1][45114] -> [..104.17.115.40][..443] + end: [.....7] [ip4][..tcp] [.......10.8.0.1][45124] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + end: [.....8] [ip4][..tcp] [.......10.8.0.1][45126] -> [..104.17.115.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [....13] [ip4][..tcp] [.......10.8.0.1][47046] -> [.74.125.200.188][.5228] [TLS.GoogleServices][Web][Acceptable] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + new: [....14] [ip4][..tcp] [.......10.8.0.1][33830] -> [..104.17.114.40][..443] + detected: [....14] [ip4][..tcp] [.......10.8.0.1][33830] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + new: [....15] [ip4][..tcp] [.......10.8.0.1][50904] -> [.104.17.154.236][..443] + new: [....16] [ip4][..tcp] [.......10.8.0.1][33838] -> [..104.17.114.40][..443] + detected: [....16] [ip4][..tcp] [.......10.8.0.1][33838] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + new: [....17] [ip4][..tcp] [.......10.8.0.1][33842] -> [..104.17.114.40][..443] + new: [....18] [ip4][..tcp] [.......10.8.0.1][33846] -> [..104.17.114.40][..443] + detected: [....15] [ip4][..tcp] [.......10.8.0.1][50904] -> [.104.17.154.236][..443] [TLS.TunnelBear][VPN][Acceptable] + new: [....19] [ip4][..tcp] [.......10.8.0.1][33848] -> [..104.17.114.40][..443] + detected: [....17] [ip4][..tcp] [.......10.8.0.1][33842] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detected: [....18] [ip4][..tcp] [.......10.8.0.1][33846] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detected: [....19] [ip4][..tcp] [.......10.8.0.1][33848] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [....14] [ip4][..tcp] [.......10.8.0.1][33830] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + new: [....20] [ip4][..tcp] [.......10.8.0.1][48222] -> [162.247.243.188][..443] + detected: [....20] [ip4][..tcp] [.......10.8.0.1][48222] -> [162.247.243.188][..443] [TLS][Web][Safe] + detection-update: [....18] [ip4][..tcp] [.......10.8.0.1][33846] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [....17] [ip4][..tcp] [.......10.8.0.1][33842] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [....16] [ip4][..tcp] [.......10.8.0.1][33838] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [....19] [ip4][..tcp] [.......10.8.0.1][33848] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [....15] [ip4][..tcp] [.......10.8.0.1][50904] -> [.104.17.154.236][..443] [TLS.TunnelBear][VPN][Acceptable] + detection-update: [....20] [ip4][..tcp] [.......10.8.0.1][48222] -> [162.247.243.188][..443] [TLS][Web][Safe] + analyse: [....14] [ip4][..tcp] [.......10.8.0.1][33830] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.340| 0.040| 0.084] + [IAT(c->s)...: 0.000| 0.240| 0.032| 0.069][IAT(s->c)...: 0.000| 0.340| 0.046| 0.094] + [PKTLEN(c->s): 54.000| 590.000| 270.700| 212.000][PKTLEN(s->c): 54.000|2954.000| 240.100| 679.600] + [BINS(c->s)..: 3,3,1,2,0,0,0,0,0,0,2,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 13,1,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1] + new: [....21] [ip4][..tcp] [.......10.8.0.1][33858] -> [..104.17.114.40][..443] + detected: [....21] [ip4][..tcp] [.......10.8.0.1][33858] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + idle: [....13] [ip4][..tcp] [.......10.8.0.1][47046] -> [.74.125.200.188][.5228] + idle: [....15] [ip4][..tcp] [.......10.8.0.1][50904] -> [.104.17.154.236][..443] + idle: [.....6] [ip4][..tcp] [.......10.8.0.1][47496] -> [162.247.243.188][..443] + idle: [....11] [ip4][..tcp] [.......10.8.0.1][60224] -> [...157.240.7.32][..443] + idle: [....20] [ip4][..tcp] [.......10.8.0.1][48222] -> [162.247.243.188][..443] + guessed: [....10] [ip4][..tcp] [..10.158.132.91][51120] -> [........8.8.8.8][...53] [DNS.Google][Web][Acceptable] + end: [....10] [ip4][..tcp] [..10.158.132.91][51120] -> [........8.8.8.8][...53] + idle: [....12] [ip4][..tcp] [.......10.8.0.1][47594] -> [..99.83.135.170][..443] + end: [.....9] [ip4][..tcp] [..10.158.132.91][38398] -> [..104.17.114.40][..443] + idle: [.....1] [ip4][..tcp] [.......10.8.0.1][50178] -> [.104.17.154.236][..443] [TLS.TunnelBear][VPN][Acceptable] + end: [....14] [ip4][..tcp] [.......10.8.0.1][33830] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + end: [....16] [ip4][..tcp] [.......10.8.0.1][33838] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + end: [....17] [ip4][..tcp] [.......10.8.0.1][33842] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + end: [....18] [ip4][..tcp] [.......10.8.0.1][33846] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + end: [....19] [ip4][..tcp] [.......10.8.0.1][33848] -> [..104.17.114.40][..443] [TLS.TunnelBear][VPN][Acceptable] + idle: [....21] [ip4][..tcp] [.......10.8.0.1][33858] -> [..104.17.114.40][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ubntac2.pcap.out b/test/results/flow-info/ubntac2.pcap.out new file mode 100644 index 000000000..a6e56a8af --- /dev/null +++ b/test/results/flow-info/ubntac2.pcap.out @@ -0,0 +1,30 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.1.1][34085] -> [255.255.255.255][10001] + detected: [.....1] [ip4][..udp] [....192.168.1.1][34085] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + new: [.....2] [ip4][..udp] [....192.168.1.1][44641] -> [255.255.255.255][10001] + detected: [.....2] [ip4][..udp] [....192.168.1.1][44641] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + new: [.....3] [ip4][..udp] [....192.168.1.1][55321] -> [255.255.255.255][10001] + detected: [.....3] [ip4][..udp] [....192.168.1.1][55321] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + new: [.....4] [ip4][..udp] [....192.168.1.1][47871] -> [255.255.255.255][10001] + detected: [.....4] [ip4][..udp] [....192.168.1.1][47871] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + new: [.....5] [ip4][..udp] [....192.168.1.1][59772] -> [255.255.255.255][10001] + detected: [.....5] [ip4][..udp] [....192.168.1.1][59772] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + new: [.....6] [ip4][..udp] [....192.168.1.1][52220] -> [255.255.255.255][10001] + detected: [.....6] [ip4][..udp] [....192.168.1.1][52220] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + update: [.....1] [ip4][..udp] [....192.168.1.1][34085] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + new: [.....7] [ip4][..udp] [....192.168.1.1][47746] -> [255.255.255.255][10001] + detected: [.....7] [ip4][..udp] [....192.168.1.1][47746] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + update: [.....2] [ip4][..udp] [....192.168.1.1][44641] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + new: [.....8] [ip4][..udp] [....192.168.1.1][42838] -> [255.255.255.255][10001] + detected: [.....8] [ip4][..udp] [....192.168.1.1][42838] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + idle: [.....5] [ip4][..udp] [....192.168.1.1][59772] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + idle: [.....7] [ip4][..udp] [....192.168.1.1][47746] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + idle: [.....4] [ip4][..udp] [....192.168.1.1][47871] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + idle: [.....6] [ip4][..udp] [....192.168.1.1][52220] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + idle: [.....1] [ip4][..udp] [....192.168.1.1][34085] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + idle: [.....2] [ip4][..udp] [....192.168.1.1][44641] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + idle: [.....8] [ip4][..udp] [....192.168.1.1][42838] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + idle: [.....3] [ip4][..udp] [....192.168.1.1][55321] -> [255.255.255.255][10001] [UBNTAC2][Network][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ultrasurf.pcap.out b/test/results/flow-info/ultrasurf.pcap.out new file mode 100644 index 000000000..c36c73051 --- /dev/null +++ b/test/results/flow-info/ultrasurf.pcap.out @@ -0,0 +1,42 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....65.49.68.25][50053] -> [....10.132.0.23][37898] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [....65.49.68.25][50053] -> [....10.132.0.23][37898] [UltraSurf][VPN][Acceptable] + analyse: [.....1] [ip4][..tcp] [....65.49.68.25][50053] -> [....10.132.0.23][37898] [UltraSurf][VPN][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.150| 0.021| 0.036] + [IAT(c->s)...: 0.000| 0.150| 0.017| 0.031][IAT(s->c)...: 0.000| 0.142| 0.029| 0.042] + [PKTLEN(c->s): 1350.000|2646.000|1943.100| 641.700][PKTLEN(s->c): 98.000| 98.000| 98.000| 0.000] + [BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,0,0,0,0,0,0,10] + [BINS(s->c)..: 10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....2] [ip4][..tcp] [....10.132.0.23][38120] -> [....65.49.68.25][50053] + detected: [.....2] [ip4][..tcp] [....10.132.0.23][38120] -> [....65.49.68.25][50053] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + detection-update: [.....2] [ip4][..tcp] [....10.132.0.23][38120] -> [....65.49.68.25][50053] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + analyse: [.....2] [ip4][..tcp] [....10.132.0.23][38120] -> [....65.49.68.25][50053] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.271| 0.063| 0.099] + [IAT(c->s)...: 0.000| 0.260| 0.063| 0.099][IAT(s->c)...: 0.000| 0.271| 0.062| 0.100] + [PKTLEN(c->s): 70.000|1418.000| 404.300| 430.600][PKTLEN(s->c): 70.000|1358.000| 334.600| 463.300] + [BINS(c->s)..: 7,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0] + [BINS(s->c)..: 4,8,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,2,0,0,0,0,0,0,0] + new: [.....3] [ip4][..tcp] [....10.132.0.23][38152] -> [....65.49.68.25][50053] + detected: [.....3] [ip4][..tcp] [....10.132.0.23][38152] -> [....65.49.68.25][50053] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + detection-update: [.....3] [ip4][..tcp] [....10.132.0.23][38152] -> [....65.49.68.25][50053] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + analyse: [.....3] [ip4][..tcp] [....10.132.0.23][38152] -> [....65.49.68.25][50053] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.269| 0.059| 0.101] + [IAT(c->s)...: 0.000| 0.261| 0.053| 0.096][IAT(s->c)...: 0.000| 0.269| 0.064| 0.105] + [PKTLEN(c->s): 70.000|1418.000| 371.000| 429.700][PKTLEN(s->c): 70.000|1358.000| 436.200| 523.000] + [BINS(c->s)..: 7,0,1,0,0,1,1,0,0,1,0,1,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0] + [BINS(s->c)..: 3,5,1,0,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,3,0,0,0,0,0,0,0] + end: [.....1] [ip4][..tcp] [....65.49.68.25][50053] -> [....10.132.0.23][37898] [UltraSurf][VPN][Acceptable] + end: [.....2] [ip4][..tcp] [....10.132.0.23][38120] -> [....65.49.68.25][50053] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + end: [.....3] [ip4][..tcp] [....10.132.0.23][38152] -> [....65.49.68.25][50053] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/upnp.pcap.out b/test/results/flow-info/upnp.pcap.out new file mode 100644 index 000000000..e42c826fd --- /dev/null +++ b/test/results/flow-info/upnp.pcap.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..udp] [..............fe80::3441:3d24:6d30:a807][58932] -> [................................ff02::c][.3702] + detected: [.....1] [ip6][..udp] [..............fe80::3441:3d24:6d30:a807][58932] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + new: [.....2] [ip4][..udp] [..192.168.61.66][58931] -> [239.255.255.250][.3702] + detected: [.....2] [ip4][..udp] [..192.168.61.66][58931] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + idle: [.....1] [ip6][..udp] [..............fe80::3441:3d24:6d30:a807][58932] -> [................................ff02::c][.3702] [WSD][Network][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.61.66][58931] -> [239.255.255.250][.3702] [WSD][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/viber.pcap.out b/test/results/flow-info/viber.pcap.out new file mode 100644 index 000000000..698ddeb71 --- /dev/null +++ b/test/results/flow-info/viber.pcap.out @@ -0,0 +1,150 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.0.17][33208] -> [...52.0.253.101][.4244] [MIDSTREAM] + new: [.....2] [ip4][..udp] [...192.168.0.17][45743] -> [...192.168.0.15][...53] + detected: [.....2] [ip4][..udp] [...192.168.0.17][45743] -> [...192.168.0.15][...53] [DNS.Facebook][SocialNetwork][Fun] + detection-update: [.....2] [ip4][..udp] [...192.168.0.17][45743] -> [...192.168.0.15][...53] [DNS.Facebook][SocialNetwork][Fun] + new: [.....3] [ip4][..udp] [...192.168.0.17][35283] -> [...192.168.0.15][...53] + detected: [.....3] [ip4][..udp] [...192.168.0.17][35283] -> [...192.168.0.15][...53] [DNS][Advertisement][Acceptable] + detection-update: [.....3] [ip4][..udp] [...192.168.0.17][35283] -> [...192.168.0.15][...53] [DNS][Advertisement][Acceptable] + new: [.....4] [ip4][..udp] [...192.168.0.17][62872] -> [...192.168.0.15][...53] + detected: [.....4] [ip4][..udp] [...192.168.0.17][62872] -> [...192.168.0.15][...53] [DNS][Network][Acceptable] + detection-update: [.....4] [ip4][..udp] [...192.168.0.17][62872] -> [...192.168.0.15][...53] [DNS][Network][Acceptable] + new: [.....5] [ip4][..tcp] [...192.168.0.17][36986] -> [..54.69.166.226][..443] + detected: [.....5] [ip4][..tcp] [...192.168.0.17][36986] -> [..54.69.166.226][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [.....5] [ip4][..tcp] [...192.168.0.17][36986] -> [..54.69.166.226][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [.....5] [ip4][..tcp] [...192.168.0.17][36986] -> [..54.69.166.226][..443] [TLS.AmazonAWS][Cloud][Acceptable] + new: [.....6] [ip4][..tcp] [...192.168.0.17][36988] -> [..54.69.166.226][..443] + detected: [.....6] [ip4][..tcp] [...192.168.0.17][36988] -> [..54.69.166.226][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [.....6] [ip4][..tcp] [...192.168.0.17][36988] -> [..54.69.166.226][..443] [TLS.AmazonAWS][Cloud][Acceptable] + new: [.....7] [ip4][..udp] [...192.168.0.17][37418] -> [...192.168.0.15][...53] + detected: [.....7] [ip4][..udp] [...192.168.0.17][37418] -> [...192.168.0.15][...53] [DNS.Viber][Chat][Acceptable] + detection-update: [.....7] [ip4][..udp] [...192.168.0.17][37418] -> [...192.168.0.15][...53] [DNS.Viber][Chat][Acceptable] + new: [.....8] [ip4][..tcp] [...192.168.0.17][57520] -> [...54.230.93.96][..443] + detected: [.....8] [ip4][..tcp] [...192.168.0.17][57520] -> [...54.230.93.96][..443] [TLS.Viber][Chat][Acceptable] + detection-update: [.....8] [ip4][..tcp] [...192.168.0.17][57520] -> [...54.230.93.96][..443] [TLS.Viber][Chat][Acceptable] + detection-update: [.....8] [ip4][..tcp] [...192.168.0.17][57520] -> [...54.230.93.96][..443] [TLS.Viber][Chat][Acceptable] + new: [.....9] [ip4][..udp] [...192.168.0.17][40445] -> [...192.168.0.15][...53] + detected: [.....9] [ip4][..udp] [...192.168.0.17][40445] -> [...192.168.0.15][...53] [DNS.Viber][Chat][Acceptable] + detection-update: [.....9] [ip4][..udp] [...192.168.0.17][40445] -> [...192.168.0.15][...53] [DNS.Viber][Chat][Acceptable] + new: [....10] [ip4][..tcp] [...192.168.0.17][53934] -> [...54.230.93.53][..443] + detected: [....10] [ip4][..tcp] [...192.168.0.17][53934] -> [...54.230.93.53][..443] [TLS.Viber][Chat][Acceptable] + detection-update: [....10] [ip4][..tcp] [...192.168.0.17][53934] -> [...54.230.93.53][..443] [TLS.Viber][Chat][Acceptable] + detection-update: [....10] [ip4][..tcp] [...192.168.0.17][53934] -> [...54.230.93.53][..443] [TLS.Viber][Chat][Acceptable] + analyse: [....10] [ip4][..tcp] [...192.168.0.17][53934] -> [...54.230.93.53][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.048| 0.009| 0.015] + [IAT(c->s)...: 0.000| 0.041| 0.011| 0.015][IAT(s->c)...: 0.000| 0.048| 0.008| 0.015] + [PKTLEN(c->s): 66.000| 774.000| 139.200| 184.300][PKTLEN(s->c): 66.000|1514.000|1186.100| 547.900] + [BINS(c->s)..: 11,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,0,0] + detection-update: [....10] [ip4][..tcp] [...192.168.0.17][53934] -> [...54.230.93.53][..443] [TLS.Viber][Chat][Acceptable] + new: [....11] [ip4][..udp] [...192.168.0.17][41993] -> [.172.217.23.106][..443] + new: [....12] [ip4][..udp] [...192.168.0.17][35331] -> [...192.168.0.15][...53] + detected: [....12] [ip4][..udp] [...192.168.0.17][35331] -> [...192.168.0.15][...53] [DNS][Network][Acceptable] + detection-update: [....12] [ip4][..udp] [...192.168.0.17][35331] -> [...192.168.0.15][...53] [DNS][Network][Acceptable] + new: [....13] [ip4][..tcp] [...192.168.0.17][43702] -> [..172.217.23.78][..443] + detected: [....13] [ip4][..tcp] [...192.168.0.17][43702] -> [..172.217.23.78][..443] [TLS.Google][Web][Acceptable] + detection-update: [....13] [ip4][..tcp] [...192.168.0.17][43702] -> [..172.217.23.78][..443] [TLS.Google][Web][Acceptable] + new: [....14] [ip4][..udp] [...192.168.0.17][.5353] -> [....224.0.0.251][.5353] + detected: [....14] [ip4][..udp] [...192.168.0.17][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....15] [ip6][icmp6] [..............fe80::3207:4dff:fea3:5fa7] -> [................................ff02::2] + detected: [....15] [ip6][icmp6] [..............fe80::3207:4dff:fea3:5fa7] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + new: [....16] [ip4][..udp] [...192.168.0.17][44376] -> [...192.168.0.15][...53] + detected: [....16] [ip4][..udp] [...192.168.0.17][44376] -> [...192.168.0.15][...53] [DNS][Network][Acceptable] + detection-update: [....16] [ip4][..udp] [...192.168.0.17][44376] -> [...192.168.0.15][...53] [DNS][Network][Acceptable] + new: [....17] [ip4][..tcp] [...192.168.0.17][55746] -> [..151.101.1.130][..443] + detected: [....17] [ip4][..tcp] [...192.168.0.17][55746] -> [..151.101.1.130][..443] [TLS][Web][Safe] + detection-update: [....17] [ip4][..tcp] [...192.168.0.17][55746] -> [..151.101.1.130][..443] [TLS][Web][Safe] + analyse: [.....1] [ip4][..tcp] [...192.168.0.17][33208] -> [...52.0.253.101][.4244] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 10.702| 1.934| 2.902] + [IAT(c->s)...: 0.000| 10.564| 2.006| 2.878][IAT(s->c)...: 0.000| 10.702| 1.858| 2.926] + [PKTLEN(c->s): 66.000| 596.000| 211.100| 159.700][PKTLEN(s->c): 66.000| 164.000| 92.900| 39.000] + [BINS(c->s)..: 4,1,6,2,0,0,0,0,0,0,1,1,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 10,0,3,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + guessed: [.....1] [ip4][..tcp] [...192.168.0.17][33208] -> [...52.0.253.101][.4244] [Viber][VoIP][Acceptable] + detected: [.....1] [ip4][..tcp] [...192.168.0.17][33208] -> [...52.0.253.101][.4244] [Viber][VoIP][Acceptable] + new: [....18] [ip4][..tcp] [...192.168.0.17][45424] -> [....18.201.4.32][..443] + new: [....19] [ip4][..udp] [...192.168.0.17][47171] -> [....18.201.4.32][.7985] + detected: [....19] [ip4][..udp] [...192.168.0.17][47171] -> [....18.201.4.32][.7985] [Viber][VoIP][Acceptable] + new: [....20] [ip4][..udp] [...192.168.0.17][47171] -> [....18.201.4.32][.7987] + detected: [....20] [ip4][..udp] [...192.168.0.17][47171] -> [....18.201.4.32][.7987] [Viber][VoIP][Acceptable] + new: [....21] [ip4][..tcp] [...192.168.0.17][49048] -> [..54.187.91.182][..443] + detected: [....21] [ip4][..tcp] [...192.168.0.17][49048] -> [..54.187.91.182][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....21] [ip4][..tcp] [...192.168.0.17][49048] -> [..54.187.91.182][..443] [TLS.AmazonAWS][Cloud][Acceptable] + detection-update: [....21] [ip4][..tcp] [...192.168.0.17][49048] -> [..54.187.91.182][..443] [TLS.AmazonAWS][Cloud][Acceptable] + analyse: [....19] [ip4][..udp] [...192.168.0.17][47171] -> [....18.201.4.32][.7985] [Viber][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.525| 0.329| 0.210] + [IAT(c->s)...: 0.000| 0.525| 0.321| 0.212][IAT(s->c)...: 0.015| 0.525| 0.337| 0.208] + [PKTLEN(c->s): 62.000| 299.000| 215.400| 113.300][PKTLEN(s->c): 76.000| 118.000| 104.000| 19.800] + [BINS(c->s)..: 6,0,0,0,0,0,0,0,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,5,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....22] [ip4][..tcp] [...192.168.0.17][33744] -> [.....18.201.4.3][..443] + new: [....23] [ip4][..udp] [...192.168.0.17][38190] -> [.....18.201.4.3][.7985] + detected: [....23] [ip4][..udp] [...192.168.0.17][38190] -> [.....18.201.4.3][.7985] [Viber][VoIP][Acceptable] + new: [....24] [ip4][..udp] [...192.168.0.17][38190] -> [.....18.201.4.3][.7987] + detected: [....24] [ip4][..udp] [...192.168.0.17][38190] -> [.....18.201.4.3][.7987] [Viber][VoIP][Acceptable] + update: [....15] [ip6][icmp6] [..............fe80::3207:4dff:fea3:5fa7] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + analyse: [....23] [ip4][..udp] [...192.168.0.17][38190] -> [.....18.201.4.3][.7985] [Viber][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.531| 0.262| 0.245] + [IAT(c->s)...: 0.000| 0.531| 0.226| 0.244][IAT(s->c)...: 0.000| 0.531| 0.311| 0.237] + [PKTLEN(c->s): 54.000| 299.000| 172.500| 120.100][PKTLEN(s->c): 76.000| 118.000| 101.800| 20.400] + [BINS(c->s)..: 10,0,0,0,0,0,0,0,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,5,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....25] [ip4][..udp] [...192.168.0.17][50097] -> [...192.168.0.15][...53] + detected: [....25] [ip4][..udp] [...192.168.0.17][50097] -> [...192.168.0.15][...53] [DNS.Google][Web][Acceptable] + detection-update: [....25] [ip4][..udp] [...192.168.0.17][50097] -> [...192.168.0.15][...53] [DNS.Google][Web][Acceptable] + new: [....26] [ip4][.icmp] [...192.168.0.17] -> [...192.168.0.15] + detected: [....26] [ip4][.icmp] [...192.168.0.17] -> [...192.168.0.15] [ICMP][Network][Acceptable] + update: [.....3] [ip4][..udp] [...192.168.0.17][35283] -> [...192.168.0.15][...53] [DNS][Advertisement][Acceptable] + update: [.....2] [ip4][..udp] [...192.168.0.17][45743] -> [...192.168.0.15][...53] [DNS.Facebook][SocialNetwork][Fun] + update: [.....4] [ip4][..udp] [...192.168.0.17][62872] -> [...192.168.0.15][...53] [DNS][Network][Acceptable] + DAEMON-EVENT: [Processed: 420 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 26 / 26|skipped: 0|!detected: 0|guessed: 1|detection-updates: 20|updates: 4] + new: [....27] [ip4][..tcp] [..192.168.2.100][48690] -> [...52.0.252.145][.4244] + detected: [....27] [ip4][..tcp] [..192.168.2.100][48690] -> [...52.0.252.145][.4244] [Viber][VoIP][Acceptable] + end: [.....5] [ip4][..tcp] [...192.168.0.17][36986] -> [..54.69.166.226][..443] + end: [.....6] [ip4][..tcp] [...192.168.0.17][36988] -> [..54.69.166.226][..443] [TLS.AmazonAWS][Cloud][Acceptable] + guessed: [....11] [ip4][..udp] [...192.168.0.17][41993] -> [.172.217.23.106][..443] [Google][Web][Acceptable] + idle: [....11] [ip4][..udp] [...192.168.0.17][41993] -> [.172.217.23.106][..443] + idle: [....19] [ip4][..udp] [...192.168.0.17][47171] -> [....18.201.4.32][.7985] [Viber][VoIP][Acceptable] + idle: [....20] [ip4][..udp] [...192.168.0.17][47171] -> [....18.201.4.32][.7987] [Viber][VoIP][Acceptable] + idle: [.....8] [ip4][..tcp] [...192.168.0.17][57520] -> [...54.230.93.96][..443] + idle: [....26] [ip4][.icmp] [...192.168.0.17] -> [...192.168.0.15] [ICMP][Network][Acceptable] + idle: [....17] [ip4][..tcp] [...192.168.0.17][55746] -> [..151.101.1.130][..443] [TLS][Web][Safe] + idle: [.....1] [ip4][..tcp] [...192.168.0.17][33208] -> [...52.0.253.101][.4244] [Viber][VoIP][Acceptable] + idle: [....10] [ip4][..tcp] [...192.168.0.17][53934] -> [...54.230.93.53][..443] [TLS.Viber][Chat][Acceptable] + idle: [....15] [ip6][icmp6] [..............fe80::3207:4dff:fea3:5fa7] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + idle: [....14] [ip4][..udp] [...192.168.0.17][.5353] -> [....224.0.0.251][.5353] + idle: [.....3] [ip4][..udp] [...192.168.0.17][35283] -> [...192.168.0.15][...53] [DNS][Advertisement][Acceptable] + idle: [....12] [ip4][..udp] [...192.168.0.17][35331] -> [...192.168.0.15][...53] [DNS][Network][Acceptable] + idle: [.....7] [ip4][..udp] [...192.168.0.17][37418] -> [...192.168.0.15][...53] [DNS.Viber][Chat][Acceptable] + idle: [.....2] [ip4][..udp] [...192.168.0.17][45743] -> [...192.168.0.15][...53] [DNS.Facebook][SocialNetwork][Fun] + guessed: [....18] [ip4][..tcp] [...192.168.0.17][45424] -> [....18.201.4.32][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [....18] [ip4][..tcp] [...192.168.0.17][45424] -> [....18.201.4.32][..443] + end: [....21] [ip4][..tcp] [...192.168.0.17][49048] -> [..54.187.91.182][..443] + idle: [....25] [ip4][..udp] [...192.168.0.17][50097] -> [...192.168.0.15][...53] [DNS.Google][Web][Acceptable] + idle: [....23] [ip4][..udp] [...192.168.0.17][38190] -> [.....18.201.4.3][.7985] [Viber][VoIP][Acceptable] + idle: [....24] [ip4][..udp] [...192.168.0.17][38190] -> [.....18.201.4.3][.7987] [Viber][VoIP][Acceptable] + idle: [....13] [ip4][..tcp] [...192.168.0.17][43702] -> [..172.217.23.78][..443] [TLS.Google][Web][Acceptable] + idle: [....16] [ip4][..udp] [...192.168.0.17][44376] -> [...192.168.0.15][...53] [DNS][Network][Acceptable] + idle: [.....4] [ip4][..udp] [...192.168.0.17][62872] -> [...192.168.0.15][...53] [DNS][Network][Acceptable] + guessed: [....22] [ip4][..tcp] [...192.168.0.17][33744] -> [.....18.201.4.3][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [....22] [ip4][..tcp] [...192.168.0.17][33744] -> [.....18.201.4.3][..443] + idle: [.....9] [ip4][..udp] [...192.168.0.17][40445] -> [...192.168.0.15][...53] [DNS.Viber][Chat][Acceptable] + DAEMON-EVENT: [Processed: 435 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 27|skipped: 0|!detected: 0|guessed: 4|detection-updates: 20|updates: 4] + new: [....28] [ip4][..tcp] [..192.168.2.100][41184] -> [.....52.0.252.2][.5242] + detected: [....28] [ip4][..tcp] [..192.168.2.100][41184] -> [.....52.0.252.2][.5242] [Viber][VoIP][Acceptable] + DAEMON-EVENT: [Processed: 446 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 28|skipped: 0|!detected: 0|guessed: 4|detection-updates: 20|updates: 4] + new: [....29] [ip4][..tcp] [..192.168.2.100][42900] -> [..44.192.202.74][.4244] [MIDSTREAM] + detected: [....29] [ip4][..tcp] [..192.168.2.100][42900] -> [..44.192.202.74][.4244] [Viber][VoIP][Acceptable] + idle: [....29] [ip4][..tcp] [..192.168.2.100][42900] -> [..44.192.202.74][.4244] [Viber][VoIP][Acceptable] + end: [....28] [ip4][..tcp] [..192.168.2.100][41184] -> [.....52.0.252.2][.5242] [Viber][VoIP][Acceptable] + idle: [....27] [ip4][..tcp] [..192.168.2.100][48690] -> [...52.0.252.145][.4244] [Viber][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/vnc.pcap.out b/test/results/flow-info/vnc.pcap.out new file mode 100644 index 000000000..773a5ef10 --- /dev/null +++ b/test/results/flow-info/vnc.pcap.out @@ -0,0 +1,28 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..95.237.48.208][59791] -> [..192.168.2.110][.6900] + detected: [.....1] [ip4][..tcp] [..95.237.48.208][59791] -> [..192.168.2.110][.6900] [VNC][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, Desktop/File Sharing + analyse: [.....1] [ip4][..tcp] [..95.237.48.208][59791] -> [..192.168.2.110][.6900] [VNC][RemoteAccess][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.545| 0.058| 0.113] + [IAT(c->s)...: 0.000| 0.545| 0.056| 0.133][IAT(s->c)...: 0.000| 0.310| 0.060| 0.088] + [PKTLEN(c->s): 60.000| 89.000| 73.600| 11.900][PKTLEN(s->c): 54.000| 88.000| 67.100| 12.800] + [BINS(c->s)..: 12,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 13,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....2] [ip4][..tcp] [..95.237.48.208][51559] -> [..192.168.2.110][.6900] + detected: [.....2] [ip4][..tcp] [..95.237.48.208][51559] -> [..192.168.2.110][.6900] [VNC][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, Desktop/File Sharing + analyse: [.....2] [ip4][..tcp] [..95.237.48.208][51559] -> [..192.168.2.110][.6900] [VNC][RemoteAccess][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.539| 0.054| 0.125] + [IAT(c->s)...: 0.000| 0.539| 0.053| 0.125][IAT(s->c)...: 0.000| 0.502| 0.054| 0.126] + [PKTLEN(c->s): 60.000| 89.000| 72.900| 12.000][PKTLEN(s->c): 54.000| 88.000| 68.100| 12.800] + [BINS(c->s)..: 13,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....2] [ip4][..tcp] [..95.237.48.208][51559] -> [..192.168.2.110][.6900] [VNC][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, Desktop/File Sharing + end: [.....1] [ip4][..tcp] [..95.237.48.208][59791] -> [..192.168.2.110][.6900] [VNC][RemoteAccess][Acceptable] + RISK: Known Proto on Non Std Port, Desktop/File Sharing + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/vrrp3.pcapng.out b/test/results/flow-info/vrrp3.pcapng.out new file mode 100644 index 000000000..0ad826ae8 --- /dev/null +++ b/test/results/flow-info/vrrp3.pcapng.out @@ -0,0 +1,10 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip6][..112] [................................fe80::2] -> [...............................ff02::12] + detected: [.....1] [ip6][..112] [................................fe80::2] -> [...............................ff02::12] [VRRP][Network][Acceptable] + new: [.....2] [ip6][..112] [................................fe80::1] -> [...............................ff02::12] + detected: [.....2] [ip6][..112] [................................fe80::1] -> [...............................ff02::12] [VRRP][Network][Acceptable] + idle: [.....2] [ip6][..112] [................................fe80::1] -> [...............................ff02::12] [VRRP][Network][Acceptable] + idle: [.....1] [ip6][..112] [................................fe80::2] -> [...............................ff02::12] [VRRP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/vxlan.pcap.out b/test/results/flow-info/vxlan.pcap.out new file mode 100644 index 000000000..69f169477 --- /dev/null +++ b/test/results/flow-info/vxlan.pcap.out @@ -0,0 +1,45 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...192.168.22.4][60887] -> [...192.168.22.5][.4789] + detected: [.....1] [ip4][..udp] [...192.168.22.4][60887] -> [...192.168.22.5][.4789] [VXLAN][Network][Acceptable] + new: [.....2] [ip4][..udp] [...192.168.22.5][43866] -> [...192.168.22.4][.4789] + detected: [.....2] [ip4][..udp] [...192.168.22.5][43866] -> [...192.168.22.4][.4789] [VXLAN][Network][Acceptable] + new: [.....3] [ip4][..udp] [...192.168.22.4][49762] -> [...192.168.22.5][.4789] + detected: [.....3] [ip4][..udp] [...192.168.22.4][49762] -> [...192.168.22.5][.4789] [VXLAN][Network][Acceptable] + new: [.....4] [ip4][..udp] [...192.168.22.5][60230] -> [...192.168.22.4][.4789] + detected: [.....4] [ip4][..udp] [...192.168.22.5][60230] -> [...192.168.22.4][.4789] [VXLAN][Network][Acceptable] + new: [.....5] [ip4][..udp] [...192.168.22.4][60351] -> [...192.168.22.5][.4789] + detected: [.....5] [ip4][..udp] [...192.168.22.4][60351] -> [...192.168.22.5][.4789] [VXLAN][Network][Acceptable] + new: [.....6] [ip4][..udp] [...192.168.22.5][50251] -> [...192.168.22.4][.4789] + detected: [.....6] [ip4][..udp] [...192.168.22.5][50251] -> [...192.168.22.4][.4789] [VXLAN][Network][Acceptable] + new: [.....7] [ip4][..udp] [...192.168.22.4][40646] -> [...192.168.22.5][.4789] + detected: [.....7] [ip4][..udp] [...192.168.22.4][40646] -> [...192.168.22.5][.4789] [VXLAN][Network][Acceptable] + new: [.....8] [ip4][..udp] [...192.168.22.5][36286] -> [...192.168.22.4][.4789] + detected: [.....8] [ip4][..udp] [...192.168.22.5][36286] -> [...192.168.22.4][.4789] [VXLAN][Network][Acceptable] + new: [.....9] [ip4][..udp] [...192.168.22.4][60230] -> [...192.168.22.5][.4789] + detected: [.....9] [ip4][..udp] [...192.168.22.4][60230] -> [...192.168.22.5][.4789] [VXLAN][Network][Acceptable] + analyse: [.....8] [ip4][..udp] [...192.168.22.5][36286] -> [...192.168.22.4][.4789] [VXLAN][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.141| 0.010| 0.031] + [IAT(c->s)...: 0.000| 0.141| 0.010| 0.031][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 120.000|1500.000|1169.700| 546.600][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,5,0,0,0,0,1,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,23,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....7] [ip4][..udp] [...192.168.22.4][40646] -> [...192.168.22.5][.4789] [VXLAN][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.151| 0.011| 0.030] + [IAT(c->s)...: 0.000| 0.151| 0.011| 0.030][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 120.000| 438.000| 143.100| 68.200][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,0,28,0,1,0,0,1,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + idle: [.....5] [ip4][..udp] [...192.168.22.4][60351] -> [...192.168.22.5][.4789] [VXLAN][Network][Acceptable] + idle: [.....6] [ip4][..udp] [...192.168.22.5][50251] -> [...192.168.22.4][.4789] [VXLAN][Network][Acceptable] + idle: [.....8] [ip4][..udp] [...192.168.22.5][36286] -> [...192.168.22.4][.4789] [VXLAN][Network][Acceptable] + idle: [.....1] [ip4][..udp] [...192.168.22.4][60887] -> [...192.168.22.5][.4789] [VXLAN][Network][Acceptable] + idle: [.....7] [ip4][..udp] [...192.168.22.4][40646] -> [...192.168.22.5][.4789] [VXLAN][Network][Acceptable] + idle: [.....3] [ip4][..udp] [...192.168.22.4][49762] -> [...192.168.22.5][.4789] [VXLAN][Network][Acceptable] + idle: [.....9] [ip4][..udp] [...192.168.22.4][60230] -> [...192.168.22.5][.4789] [VXLAN][Network][Acceptable] + idle: [.....4] [ip4][..udp] [...192.168.22.5][60230] -> [...192.168.22.4][.4789] [VXLAN][Network][Acceptable] + idle: [.....2] [ip4][..udp] [...192.168.22.5][43866] -> [...192.168.22.4][.4789] [VXLAN][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/wa_video.pcap.out b/test/results/flow-info/wa_video.pcap.out new file mode 100644 index 000000000..5814b5410 --- /dev/null +++ b/test/results/flow-info/wa_video.pcap.out @@ -0,0 +1,72 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] + detected: [.....1] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + new: [.....2] [ip4][..tcp] [...192.168.2.12][49355] -> [..157.240.20.53][.5222] [MIDSTREAM] + new: [.....3] [ip4][..udp] [...192.168.2.12][53688] -> [....31.13.86.48][.3478] + detected: [.....3] [ip4][..udp] [...192.168.2.12][53688] -> [....31.13.86.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [.....4] [ip4][..udp] [...192.168.2.12][53688] -> [..185.60.216.51][.3478] + detected: [.....4] [ip4][..udp] [...192.168.2.12][53688] -> [..185.60.216.51][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [.....5] [ip4][..udp] [...192.168.2.12][53688] -> [.157.240.193.48][.3478] + detected: [.....5] [ip4][..udp] [...192.168.2.12][53688] -> [.157.240.193.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [.....6] [ip4][..udp] [...192.168.2.12][53688] -> [..179.60.192.48][.3478] + detected: [.....6] [ip4][..udp] [...192.168.2.12][53688] -> [..179.60.192.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [.....7] [ip4][..udp] [...192.168.2.12][53688] -> [.157.240.196.62][.3478] + detected: [.....7] [ip4][..udp] [...192.168.2.12][53688] -> [.157.240.196.62][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [.....8] [ip4][..udp] [...192.168.2.12][51277] -> [239.255.255.250][.1900] + detected: [.....8] [ip4][..udp] [...192.168.2.12][51277] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + analyse: [.....2] [ip4][..tcp] [...192.168.2.12][49355] -> [..157.240.20.53][.5222] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.404| 0.182| 0.481] + [IAT(c->s)...: 0.000| 2.404| 0.166| 0.556][IAT(s->c)...: 0.000| 1.228| 0.205| 0.336] + [PKTLEN(c->s): 66.000| 614.000| 153.600| 130.800][PKTLEN(s->c): 66.000|1454.000| 470.700| 438.000] + [BINS(c->s)..: 11,0,0,0,5,2,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,0,0,1,1,4,0,0,1,0,0,1,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0] + guessed: [.....2] [ip4][..tcp] [...192.168.2.12][49355] -> [..157.240.20.53][.5222] [WhatsApp][Chat][Acceptable] + detected: [.....2] [ip4][..tcp] [...192.168.2.12][49355] -> [..157.240.20.53][.5222] [WhatsApp][Chat][Acceptable] + analyse: [.....3] [ip4][..udp] [...192.168.2.12][53688] -> [....31.13.86.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.550| 0.064| 0.136] + [IAT(c->s)...: 0.000| 0.548| 0.045| 0.117][IAT(s->c)...: 0.001| 0.550| 0.110| 0.163] + [PKTLEN(c->s): 48.000| 514.000| 394.300| 183.500][PKTLEN(s->c): 44.000| 514.000| 221.300| 207.400] + [BINS(c->s)..: 3,0,0,4,0,0,0,0,0,0,0,0,0,0,16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,4,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....9] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [.....9] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [....10] [ip4][..udp] [...192.168.2.12][53688] -> [.....1.60.78.64][59491] + detected: [....10] [ip4][..udp] [...192.168.2.12][53688] -> [.....1.60.78.64][59491] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + new: [....11] [ip4][..udp] [...192.168.2.12][53688] -> [...91.252.56.51][32641] + detected: [....11] [ip4][..udp] [...192.168.2.12][53688] -> [...91.252.56.51][32641] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [....11] [ip4][..udp] [...192.168.2.12][53688] -> [...91.252.56.51][32641] [STUN.WhatsAppCall][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.979| 0.150| 0.383] + [IAT(c->s)...: 0.000| 0.707| 0.093| 0.208][IAT(s->c)...: 0.026| 1.979| 0.389| 0.713] + [PKTLEN(c->s): 86.000|1160.000| 628.200| 430.500][PKTLEN(s->c): 86.000| 224.000| 144.500| 48.300] + [BINS(c->s)..: 0,6,0,2,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,7,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,2,0,2,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....12] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] + detected: [....12] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + new: [....13] [ip4][..udp] [...192.168.2.12][65025] -> [239.255.255.250][.1900] + detected: [....13] [ip4][..udp] [...192.168.2.12][65025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....14] [ip4][..udp] [...192.168.2.12][51458] -> [239.255.255.250][.1900] + detected: [....14] [ip4][..udp] [...192.168.2.12][51458] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [.....8] [ip4][..udp] [...192.168.2.12][51277] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [.....9] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [.....7] [ip4][..udp] [...192.168.2.12][53688] -> [.157.240.196.62][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [.....5] [ip4][..udp] [...192.168.2.12][53688] -> [.157.240.193.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....14] [ip4][..udp] [...192.168.2.12][51458] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....12] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + idle: [.....1] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + idle: [.....6] [ip4][..udp] [...192.168.2.12][53688] -> [..179.60.192.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [.....4] [ip4][..udp] [...192.168.2.12][53688] -> [..185.60.216.51][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [.....3] [ip4][..udp] [...192.168.2.12][53688] -> [....31.13.86.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....13] [ip4][..udp] [...192.168.2.12][65025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....11] [ip4][..udp] [...192.168.2.12][53688] -> [...91.252.56.51][32641] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....2] [ip4][..tcp] [...192.168.2.12][49355] -> [..157.240.20.53][.5222] [WhatsApp][Chat][Acceptable] + idle: [....10] [ip4][..udp] [...192.168.2.12][53688] -> [.....1.60.78.64][59491] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/wa_voice.pcap.out b/test/results/flow-info/wa_voice.pcap.out new file mode 100644 index 000000000..131c2735f --- /dev/null +++ b/test/results/flow-info/wa_voice.pcap.out @@ -0,0 +1,139 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...192.168.2.12][51431] -> [....192.168.2.1][...53] + detected: [.....1] [ip4][..udp] [...192.168.2.12][51431] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....1] [ip4][..udp] [...192.168.2.12][51431] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + new: [.....2] [ip4][..udp] [...192.168.2.12][60765] -> [....192.168.2.1][...53] + detected: [.....2] [ip4][..udp] [...192.168.2.12][60765] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + detection-update: [.....2] [ip4][..udp] [...192.168.2.12][60765] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + new: [.....3] [ip4][..tcp] [...192.168.2.12][49354] -> [...17.242.60.84][.5223] [MIDSTREAM] + detected: [.....3] [ip4][..tcp] [...192.168.2.12][49354] -> [...17.242.60.84][.5223] [ApplePush][Cloud][Acceptable] + new: [.....4] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] + detected: [.....4] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + new: [.....5] [ip4][..tcp] [...192.168.2.12][49355] -> [..157.240.20.53][.5222] + detected: [.....5] [ip4][..tcp] [...192.168.2.12][49355] -> [..157.240.20.53][.5222] [WhatsApp][Chat][Acceptable] + analyse: [.....5] [ip4][..tcp] [...192.168.2.12][49355] -> [..157.240.20.53][.5222] [WhatsApp][Chat][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.304| 0.044| 0.076] + [IAT(c->s)...: 0.000| 0.210| 0.042| 0.071][IAT(s->c)...: 0.000| 0.304| 0.046| 0.082] + [PKTLEN(c->s): 66.000| 352.000| 112.400| 85.000][PKTLEN(s->c): 66.000|1454.000| 532.700| 603.500] + [BINS(c->s)..: 11,3,1,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,3,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0] + new: [.....6] [ip4][..udp] [...192.168.2.12][55296] -> [....192.168.2.1][...53] + detected: [.....6] [ip4][..udp] [...192.168.2.12][55296] -> [....192.168.2.1][...53] [DNS.WhatsAppFiles][Download][Acceptable] + detection-update: [.....6] [ip4][..udp] [...192.168.2.12][55296] -> [....192.168.2.1][...53] [DNS.WhatsAppFiles][Download][Acceptable] + new: [.....7] [ip4][..tcp] [...192.168.2.12][50503] -> [....31.13.86.51][..443] + detected: [.....7] [ip4][..tcp] [...192.168.2.12][50503] -> [....31.13.86.51][..443] [TLS.WhatsAppFiles][Download][Acceptable] + detection-update: [.....7] [ip4][..tcp] [...192.168.2.12][50503] -> [....31.13.86.51][..443] [TLS.WhatsAppFiles][Download][Acceptable] + analyse: [.....7] [ip4][..tcp] [...192.168.2.12][50503] -> [....31.13.86.51][..443] [TLS.WhatsAppFiles][Download][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.163| 0.021| 0.048] + [IAT(c->s)...: 0.000| 0.145| 0.020| 0.045][IAT(s->c)...: 0.000| 0.163| 0.023| 0.051] + [PKTLEN(c->s): 66.000| 583.000| 145.000| 143.800][PKTLEN(s->c): 66.000|1454.000| 598.500| 615.600] + [BINS(c->s)..: 10,3,1,0,0,0,0,0,1,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,1,0,0,1,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0] + new: [.....8] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] + detected: [.....8] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + new: [.....9] [ip4][..tcp] [...17.171.47.85][..443] -> [...192.168.2.12][50502] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [...17.171.47.85][..443] -> [...192.168.2.12][50502] [TLS.Apple][Web][Safe] + new: [....10] [ip4][..udp] [169.254.162.244][50384] -> [239.255.255.250][.1900] + detected: [....10] [ip4][..udp] [169.254.162.244][50384] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....11] [ip4][..udp] [....192.168.2.1][50384] -> [239.255.255.250][.1900] + detected: [....11] [ip4][..udp] [....192.168.2.1][50384] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....12] [ip4][..udp] [...192.168.2.12][.5353] -> [....224.0.0.251][.5353] + detected: [....12] [ip4][..udp] [...192.168.2.12][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....13] [ip6][..udp] [...............fe80::414:409d:8afd:9f05][.5353] -> [...............................ff02::fb][.5353] + detected: [....13] [ip6][..udp] [...............fe80::414:409d:8afd:9f05][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....14] [ip4][..udp] [...192.168.2.12][56328] -> [....31.13.86.48][.3478] + detected: [....14] [ip4][..udp] [...192.168.2.12][56328] -> [....31.13.86.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....15] [ip4][..udp] [...192.168.2.12][56328] -> [..185.60.216.51][.3478] + detected: [....15] [ip4][..udp] [...192.168.2.12][56328] -> [..185.60.216.51][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....16] [ip4][..udp] [...192.168.2.12][56328] -> [.157.240.193.48][.3478] + detected: [....16] [ip4][..udp] [...192.168.2.12][56328] -> [.157.240.193.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....17] [ip4][..udp] [...192.168.2.12][56328] -> [..179.60.192.48][.3478] + detected: [....17] [ip4][..udp] [...192.168.2.12][56328] -> [..179.60.192.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....18] [ip4][..udp] [...192.168.2.12][56328] -> [.157.240.196.62][.3478] + detected: [....18] [ip4][..udp] [...192.168.2.12][56328] -> [.157.240.196.62][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....19] [ip4][..udp] [...192.168.2.12][64716] -> [239.255.255.250][.1900] + detected: [....19] [ip4][..udp] [...192.168.2.12][64716] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....20] [ip4][..udp] [...192.168.2.12][60549] -> [....192.168.2.1][...53] + detected: [....20] [ip4][..udp] [...192.168.2.12][60549] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + detection-update: [....20] [ip4][..udp] [...192.168.2.12][60549] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + new: [....21] [ip4][..tcp] [...192.168.2.12][50504] -> [..157.240.20.52][..443] + detected: [....21] [ip4][..tcp] [...192.168.2.12][50504] -> [..157.240.20.52][..443] [TLS.WhatsApp][Chat][Acceptable] + detection-update: [....21] [ip4][..tcp] [...192.168.2.12][50504] -> [..157.240.20.52][..443] [TLS.WhatsApp][Chat][Acceptable] + analyse: [....21] [ip4][..tcp] [...192.168.2.12][50504] -> [..157.240.20.52][..443] [TLS.WhatsApp][Chat][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.129| 0.020| 0.031] + [IAT(c->s)...: 0.000| 0.129| 0.020| 0.033][IAT(s->c)...: 0.000| 0.077| 0.019| 0.028] + [PKTLEN(c->s): 66.000| 583.000| 124.800| 127.300][PKTLEN(s->c): 66.000|1454.000| 652.100| 631.500] + [BINS(c->s)..: 10,3,1,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,1,0,0,1,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0] + new: [....22] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [....22] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [....23] [ip4][..udp] [...91.252.56.51][32704] -> [...192.168.2.12][56328] + detected: [....23] [ip4][..udp] [...91.252.56.51][32704] -> [...192.168.2.12][56328] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [....14] [ip4][..udp] [...192.168.2.12][56328] -> [....31.13.86.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 12.196| 1.588| 3.050] + [IAT(c->s)...: 0.000| 12.194| 2.237| 3.447][IAT(s->c)...: 0.000| 12.196| 1.231| 2.744] + [PKTLEN(c->s): 48.000| 168.000| 108.000| 60.000][PKTLEN(s->c): 44.000| 320.000| 133.600| 98.700] + [BINS(c->s)..: 6,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,6,0,1,0,0,3,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....24] [ip4][..udp] [...192.168.2.12][56328] -> [.....1.60.78.64][64282] + detected: [....24] [ip4][..udp] [...192.168.2.12][56328] -> [.....1.60.78.64][64282] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [....23] [ip4][..udp] [...91.252.56.51][32704] -> [...192.168.2.12][56328] [STUN.WhatsAppCall][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.204| 0.182| 0.229] + [IAT(c->s)...: 0.000| 0.624| 0.166| 0.171][IAT(s->c)...: 0.003| 1.204| 0.202| 0.283] + [PKTLEN(c->s): 68.000| 213.000| 146.100| 41.700][PKTLEN(s->c): 86.000| 315.000| 175.500| 58.100] + [BINS(c->s)..: 1,4,0,8,4,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,2,0,4,6,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detection-update: [....12] [ip4][..udp] [...192.168.2.12][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + detection-update: [....13] [ip6][..udp] [...............fe80::414:409d:8afd:9f05][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....25] [ip4][..tcp] [...192.168.2.12][49352] -> [169.254.162.244][49159] [MIDSTREAM] + update: [.....6] [ip4][..udp] [...192.168.2.12][55296] -> [....192.168.2.1][...53] [DNS.WhatsAppFiles][Download][Acceptable] + update: [.....1] [ip4][..udp] [...192.168.2.12][51431] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + update: [.....4] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + update: [.....2] [ip4][..udp] [...192.168.2.12][60765] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + new: [....26] [ip4][..udp] [...192.168.2.12][50191] -> [239.255.255.250][.1900] + detected: [....26] [ip4][..udp] [...192.168.2.12][50191] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....27] [ip4][..udp] [...192.168.2.12][57546] -> [239.255.255.250][.1900] + detected: [....27] [ip4][..udp] [...192.168.2.12][57546] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [....28] [ip4][.icmp] [...192.168.2.12] -> [...91.252.56.51] + detected: [....28] [ip4][.icmp] [...192.168.2.12] -> [...91.252.56.51] [ICMP][Network][Acceptable] + idle: [.....3] [ip4][..tcp] [...192.168.2.12][49354] -> [...17.242.60.84][.5223] [ApplePush][Cloud][Acceptable] + not-detected: [....25] [ip4][..tcp] [...192.168.2.12][49352] -> [169.254.162.244][49159] [Unknown][Unrated] + idle: [....25] [ip4][..tcp] [...192.168.2.12][49352] -> [169.254.162.244][49159] + end: [....21] [ip4][..tcp] [...192.168.2.12][50504] -> [..157.240.20.52][..443] [TLS.WhatsApp][Chat][Acceptable] + idle: [....22] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [....23] [ip4][..udp] [...91.252.56.51][32704] -> [...192.168.2.12][56328] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....27] [ip4][..udp] [...192.168.2.12][57546] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [.....6] [ip4][..udp] [...192.168.2.12][55296] -> [....192.168.2.1][...53] [DNS.WhatsAppFiles][Download][Acceptable] + idle: [....13] [ip6][..udp] [...............fe80::414:409d:8afd:9f05][.5353] -> [...............................ff02::fb][.5353] + idle: [.....8] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + idle: [.....1] [ip4][..udp] [...192.168.2.12][51431] -> [....192.168.2.1][...53] [DNS.Google][Web][Acceptable] + end: [.....9] [ip4][..tcp] [...17.171.47.85][..443] -> [...192.168.2.12][50502] [TLS.Apple][Web][Safe] + idle: [....10] [ip4][..udp] [169.254.162.244][50384] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....18] [ip4][..udp] [...192.168.2.12][56328] -> [.157.240.196.62][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....16] [ip4][..udp] [...192.168.2.12][56328] -> [.157.240.193.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....12] [ip4][..udp] [...192.168.2.12][.5353] -> [....224.0.0.251][.5353] + idle: [.....4] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + idle: [....24] [ip4][..udp] [...192.168.2.12][56328] -> [.....1.60.78.64][64282] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....26] [ip4][..udp] [...192.168.2.12][50191] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [.....7] [ip4][..tcp] [...192.168.2.12][50503] -> [....31.13.86.51][..443] [TLS.WhatsAppFiles][Download][Acceptable] + idle: [....19] [ip4][..udp] [...192.168.2.12][64716] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....11] [ip4][..udp] [....192.168.2.1][50384] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....28] [ip4][.icmp] [...192.168.2.12] -> [...91.252.56.51] [ICMP][Network][Acceptable] + idle: [....20] [ip4][..udp] [...192.168.2.12][60549] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + idle: [.....5] [ip4][..tcp] [...192.168.2.12][49355] -> [..157.240.20.53][.5222] [WhatsApp][Chat][Acceptable] + idle: [....17] [ip4][..udp] [...192.168.2.12][56328] -> [..179.60.192.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [.....2] [ip4][..udp] [...192.168.2.12][60765] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + idle: [....15] [ip4][..udp] [...192.168.2.12][56328] -> [..185.60.216.51][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....14] [ip4][..udp] [...192.168.2.12][56328] -> [....31.13.86.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/waze.pcap.out b/test/results/flow-info/waze.pcap.out new file mode 100644 index 000000000..11ab22042 --- /dev/null +++ b/test/results/flow-info/waze.pcap.out @@ -0,0 +1,212 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...10.16.37.157][42256] -> [..174.37.231.81][.5222] [MIDSTREAM] + new: [.....2] [ip4][..udp] [.......10.8.0.1][46214] -> [..200.89.75.198][..123] + detected: [.....2] [ip4][..udp] [.......10.8.0.1][46214] -> [..200.89.75.198][..123] [NTP][System][Acceptable] + new: [.....3] [ip4][..tcp] [.......10.8.0.1][54915] -> [..65.39.128.135][...80] + detected: [.....3] [ip4][..tcp] [.......10.8.0.1][54915] -> [..65.39.128.135][...80] [HTTP][Web][Acceptable] + new: [.....4] [ip4][..tcp] [.......10.8.0.1][45529] -> [.54.230.227.172][...80] + new: [.....5] [ip4][..tcp] [.......10.8.0.1][36100] -> [..46.51.173.182][..443] + new: [.....6] [ip4][..tcp] [.......10.8.0.1][36102] -> [..46.51.173.182][..443] + detected: [.....4] [ip4][..tcp] [.......10.8.0.1][45529] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + detection-update: [.....4] [ip4][..tcp] [.......10.8.0.1][45529] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + new: [.....7] [ip4][..tcp] [.......10.8.0.1][36585] -> [.173.194.118.48][..443] + detected: [.....5] [ip4][..tcp] [.......10.8.0.1][36100] -> [..46.51.173.182][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [.....7] [ip4][..tcp] [.......10.8.0.1][36585] -> [.173.194.118.48][..443] [TLS.Google][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [.....6] [ip4][..tcp] [.......10.8.0.1][36102] -> [..46.51.173.182][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....7] [ip4][..tcp] [.......10.8.0.1][36585] -> [.173.194.118.48][..443] [TLS.Google][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [.....8] [ip4][..tcp] [.......10.8.0.1][45536] -> [.54.230.227.172][...80] + detected: [.....8] [ip4][..tcp] [.......10.8.0.1][45536] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + detection-update: [.....8] [ip4][..tcp] [.......10.8.0.1][45536] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + detection-update: [.....6] [ip4][..tcp] [.......10.8.0.1][36102] -> [..46.51.173.182][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [.....5] [ip4][..tcp] [.......10.8.0.1][36100] -> [..46.51.173.182][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [.....6] [ip4][..tcp] [.......10.8.0.1][36102] -> [..46.51.173.182][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [.....3] [ip4][..tcp] [.......10.8.0.1][54915] -> [..65.39.128.135][...80] [HTTP][Download][Acceptable] + RISK: Binary App Transfer + new: [.....9] [ip4][..tcp] [.......10.8.0.1][45538] -> [.54.230.227.172][...80] + new: [....10] [ip4][..tcp] [.......10.8.0.1][45540] -> [.54.230.227.172][...80] + detected: [.....9] [ip4][..tcp] [.......10.8.0.1][45538] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + detection-update: [.....9] [ip4][..tcp] [.......10.8.0.1][45538] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + detected: [....10] [ip4][..tcp] [.......10.8.0.1][45540] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + detection-update: [....10] [ip4][..tcp] [.......10.8.0.1][45540] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + new: [....11] [ip4][..tcp] [.......10.8.0.1][51049] -> [.176.34.103.105][..443] + new: [....12] [ip4][..tcp] [.......10.8.0.1][51050] -> [.176.34.103.105][..443] + new: [....13] [ip4][..tcp] [.......10.8.0.1][51051] -> [.176.34.103.105][..443] + new: [....14] [ip4][..tcp] [.......10.8.0.1][39010] -> [..52.17.114.219][..443] + new: [....15] [ip4][..tcp] [.......10.8.0.1][45546] -> [.54.230.227.172][...80] + detected: [....11] [ip4][..tcp] [.......10.8.0.1][51049] -> [.176.34.103.105][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....12] [ip4][..tcp] [.......10.8.0.1][51050] -> [.176.34.103.105][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....13] [ip4][..tcp] [.......10.8.0.1][51051] -> [.176.34.103.105][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....14] [ip4][..tcp] [.......10.8.0.1][39010] -> [..52.17.114.219][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....15] [ip4][..tcp] [.......10.8.0.1][45546] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + detection-update: [....15] [ip4][..tcp] [.......10.8.0.1][45546] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + new: [....16] [ip4][..tcp] [.......10.8.0.1][45552] -> [.54.230.227.172][...80] + detected: [....16] [ip4][..tcp] [.......10.8.0.1][45552] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + detection-update: [....16] [ip4][..tcp] [.......10.8.0.1][45552] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + detection-update: [....13] [ip4][..tcp] [.......10.8.0.1][51051] -> [.176.34.103.105][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....11] [ip4][..tcp] [.......10.8.0.1][51049] -> [.176.34.103.105][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....14] [ip4][..tcp] [.......10.8.0.1][39010] -> [..52.17.114.219][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....17] [ip4][..tcp] [.......10.8.0.1][45554] -> [.54.230.227.172][...80] + detected: [....17] [ip4][..tcp] [.......10.8.0.1][45554] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + detection-update: [....17] [ip4][..tcp] [.......10.8.0.1][45554] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + analyse: [.....3] [ip4][..tcp] [.......10.8.0.1][54915] -> [..65.39.128.135][...80] [HTTP][Download][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.002| 3.681| 0.340| 0.885] + [IAT(c->s)...: 0.002| 3.681| 0.351| 0.898][IAT(s->c)...: 0.003| 3.678| 0.329| 0.872] + [PKTLEN(c->s): 54.000| 317.000| 71.700| 63.500][PKTLEN(s->c): 54.000|11833.000|3861.800|3452.000] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,10] + analyse: [.....5] [ip4][..tcp] [.......10.8.0.1][36100] -> [..46.51.173.182][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.659| 0.289| 0.505] + [IAT(c->s)...: 0.000| 1.659| 0.299| 0.522][IAT(s->c)...: 0.000| 1.602| 0.280| 0.489] + [PKTLEN(c->s): 54.000| 590.000| 256.600| 210.100][PKTLEN(s->c): 54.000|5515.000| 878.900|1729.800] + [BINS(c->s)..: 5,2,0,0,3,1,0,0,0,0,1,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3] + detection-update: [.....5] [ip4][..tcp] [.......10.8.0.1][36100] -> [..46.51.173.182][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....12] [ip4][..tcp] [.......10.8.0.1][51050] -> [.176.34.103.105][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....13] [ip4][..tcp] [.......10.8.0.1][51051] -> [.176.34.103.105][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....12] [ip4][..tcp] [.......10.8.0.1][51050] -> [.176.34.103.105][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....11] [ip4][..tcp] [.......10.8.0.1][51049] -> [.176.34.103.105][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....18] [ip4][..tcp] [.......10.8.0.1][39021] -> [..52.17.114.219][..443] + detected: [....18] [ip4][..tcp] [.......10.8.0.1][39021] -> [..52.17.114.219][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....19] [ip4][..tcp] [.......10.8.0.1][36312] -> [.176.34.186.180][..443] + detection-update: [....18] [ip4][..tcp] [.......10.8.0.1][39021] -> [..52.17.114.219][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....18] [ip4][..tcp] [.......10.8.0.1][39021] -> [..52.17.114.219][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....19] [ip4][..tcp] [.......10.8.0.1][36312] -> [.176.34.186.180][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....20] [ip4][..tcp] [.......10.8.0.1][36314] -> [.176.34.186.180][..443] + detection-update: [....19] [ip4][..tcp] [.......10.8.0.1][36312] -> [.176.34.186.180][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....19] [ip4][..tcp] [.......10.8.0.1][36312] -> [.176.34.186.180][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....20] [ip4][..tcp] [.......10.8.0.1][36314] -> [.176.34.186.180][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....21] [ip4][..tcp] [.......10.8.0.1][36316] -> [.176.34.186.180][..443] + detection-update: [....20] [ip4][..tcp] [.......10.8.0.1][36314] -> [.176.34.186.180][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....20] [ip4][..tcp] [.......10.8.0.1][36314] -> [.176.34.186.180][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....21] [ip4][..tcp] [.......10.8.0.1][36316] -> [.176.34.186.180][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....21] [ip4][..tcp] [.......10.8.0.1][36316] -> [.176.34.186.180][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....22] [ip4][..tcp] [...10.16.37.157][43991] -> [...200.160.4.31][...80] [MIDSTREAM] + new: [....23] [ip4][..tcp] [...10.16.37.157][46473] -> [...200.160.4.49][...80] [MIDSTREAM] + new: [....24] [ip4][..tcp] [...10.16.37.157][41823] -> [...200.160.4.49][...80] [MIDSTREAM] + new: [....25] [ip4][..tcp] [.......10.8.0.1][45169] -> [..200.160.4.198][...80] [MIDSTREAM] + new: [....26] [ip4][..tcp] [...10.16.37.157][52953] -> [...200.160.4.49][...80] [MIDSTREAM] + new: [....27] [ip4][..tcp] [...10.16.37.157][52746] -> [...200.160.4.49][...80] [MIDSTREAM] + new: [....28] [ip4][..tcp] [.......10.8.0.1][60574] -> [...200.160.4.49][...80] [MIDSTREAM] + new: [....29] [ip4][..tcp] [.......10.8.0.1][43089] -> [..200.160.4.198][..443] [MIDSTREAM] + new: [....30] [ip4][..tcp] [.......10.8.0.1][60479] -> [...200.160.4.49][..443] [MIDSTREAM] + analyse: [....18] [ip4][..tcp] [.......10.8.0.1][39021] -> [..52.17.114.219][..443] [TLS.Waze][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.416| 0.170| 0.135] + [IAT(c->s)...: 0.000| 0.387| 0.176| 0.137][IAT(s->c)...: 0.000| 0.416| 0.165| 0.133] + [PKTLEN(c->s): 54.000| 590.000| 119.200| 135.400][PKTLEN(s->c): 54.000|21942.000|3558.400|6124.900] + [BINS(c->s)..: 12,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,5] + analyse: [....19] [ip4][..tcp] [.......10.8.0.1][36312] -> [.176.34.186.180][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.449| 0.192| 0.280] + [IAT(c->s)...: 0.000| 1.449| 0.231| 0.359][IAT(s->c)...: 0.000| 0.476| 0.150| 0.143] + [PKTLEN(c->s): 54.000| 590.000| 128.000| 147.300][PKTLEN(s->c): 54.000|11186.000|2829.500|3901.400] + [BINS(c->s)..: 12,1,0,0,1,1,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5] + detection-update: [....19] [ip4][..tcp] [.......10.8.0.1][36312] -> [.176.34.186.180][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + analyse: [.....6] [ip4][..tcp] [.......10.8.0.1][36102] -> [..46.51.173.182][..443] [TLS.Waze][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 5.891| 1.026| 1.779] + [IAT(c->s)...: 0.001| 5.839| 1.061| 1.794][IAT(s->c)...: 0.000| 5.891| 0.994| 1.764] + [PKTLEN(c->s): 54.000| 555.000| 155.200| 147.900][PKTLEN(s->c): 54.000|3660.000| 576.900| 980.100] + [BINS(c->s)..: 10,0,0,0,1,2,0,0,1,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,2,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2] + new: [....31] [ip4][..tcp] [.......10.8.0.1][36134] -> [..46.51.173.182][..443] + detected: [....31] [ip4][..tcp] [.......10.8.0.1][36134] -> [..46.51.173.182][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....31] [ip4][..tcp] [.......10.8.0.1][36134] -> [..46.51.173.182][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [....32] [ip4][..tcp] [.......10.8.0.1][50828] -> [108.168.176.228][..443] + detected: [....32] [ip4][..tcp] [.......10.8.0.1][50828] -> [108.168.176.228][..443] [WhatsApp][Chat][Acceptable] + new: [....33] [ip4][..tcp] [.......10.8.0.1][36137] -> [..46.51.173.182][..443] + detected: [....33] [ip4][..tcp] [.......10.8.0.1][36137] -> [..46.51.173.182][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....33] [ip4][..tcp] [.......10.8.0.1][36137] -> [..46.51.173.182][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....33] [ip4][..tcp] [.......10.8.0.1][36137] -> [..46.51.173.182][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + guessed: [....26] [ip4][..tcp] [...10.16.37.157][52953] -> [...200.160.4.49][...80] [HTTP][Web][Acceptable] + end: [....26] [ip4][..tcp] [...10.16.37.157][52953] -> [...200.160.4.49][...80] + end: [.....4] [ip4][..tcp] [.......10.8.0.1][45529] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + end: [.....8] [ip4][..tcp] [.......10.8.0.1][45536] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + end: [.....9] [ip4][..tcp] [.......10.8.0.1][45538] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + end: [....10] [ip4][..tcp] [.......10.8.0.1][45540] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + end: [....15] [ip4][..tcp] [.......10.8.0.1][45546] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + end: [....16] [ip4][..tcp] [.......10.8.0.1][45552] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + end: [....17] [ip4][..tcp] [.......10.8.0.1][45554] -> [.54.230.227.172][...80] [HTTP.Waze][Web][Acceptable] + idle: [....32] [ip4][..tcp] [.......10.8.0.1][50828] -> [108.168.176.228][..443] [WhatsApp][Chat][Acceptable] + guessed: [....25] [ip4][..tcp] [.......10.8.0.1][45169] -> [..200.160.4.198][...80] [HTTP][Web][Acceptable] + end: [....25] [ip4][..tcp] [.......10.8.0.1][45169] -> [..200.160.4.198][...80] + end: [.....5] [ip4][..tcp] [.......10.8.0.1][36100] -> [..46.51.173.182][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + end: [.....6] [ip4][..tcp] [.......10.8.0.1][36102] -> [..46.51.173.182][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + end: [....31] [ip4][..tcp] [.......10.8.0.1][36134] -> [..46.51.173.182][..443] + end: [....33] [ip4][..tcp] [.......10.8.0.1][36137] -> [..46.51.173.182][..443] + end: [....19] [ip4][..tcp] [.......10.8.0.1][36312] -> [.176.34.186.180][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + end: [....20] [ip4][..tcp] [.......10.8.0.1][36314] -> [.176.34.186.180][..443] + end: [....21] [ip4][..tcp] [.......10.8.0.1][36316] -> [.176.34.186.180][..443] + guessed: [....29] [ip4][..tcp] [.......10.8.0.1][43089] -> [..200.160.4.198][..443] [TLS][Web][Safe] + end: [....29] [ip4][..tcp] [.......10.8.0.1][43089] -> [..200.160.4.198][..443] + end: [....14] [ip4][..tcp] [.......10.8.0.1][39010] -> [..52.17.114.219][..443] + idle: [.....7] [ip4][..tcp] [.......10.8.0.1][36585] -> [.173.194.118.48][..443] [TLS.Google][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + end: [....18] [ip4][..tcp] [.......10.8.0.1][39021] -> [..52.17.114.219][..443] [TLS.Waze][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + end: [....11] [ip4][..tcp] [.......10.8.0.1][51049] -> [.176.34.103.105][..443] + end: [....12] [ip4][..tcp] [.......10.8.0.1][51050] -> [.176.34.103.105][..443] + end: [....13] [ip4][..tcp] [.......10.8.0.1][51051] -> [.176.34.103.105][..443] + guessed: [....24] [ip4][..tcp] [...10.16.37.157][41823] -> [...200.160.4.49][...80] [HTTP][Web][Acceptable] + end: [....24] [ip4][..tcp] [...10.16.37.157][41823] -> [...200.160.4.49][...80] + guessed: [....22] [ip4][..tcp] [...10.16.37.157][43991] -> [...200.160.4.31][...80] [HTTP][Web][Acceptable] + end: [....22] [ip4][..tcp] [...10.16.37.157][43991] -> [...200.160.4.31][...80] + guessed: [....28] [ip4][..tcp] [.......10.8.0.1][60574] -> [...200.160.4.49][...80] [HTTP][Web][Acceptable] + end: [....28] [ip4][..tcp] [.......10.8.0.1][60574] -> [...200.160.4.49][...80] + end: [.....3] [ip4][..tcp] [.......10.8.0.1][54915] -> [..65.39.128.135][...80] [HTTP][Download][Acceptable] + RISK: Binary App Transfer + guessed: [....23] [ip4][..tcp] [...10.16.37.157][46473] -> [...200.160.4.49][...80] [HTTP][Web][Acceptable] + end: [....23] [ip4][..tcp] [...10.16.37.157][46473] -> [...200.160.4.49][...80] + guessed: [....30] [ip4][..tcp] [.......10.8.0.1][60479] -> [...200.160.4.49][..443] [TLS][Web][Safe] + end: [....30] [ip4][..tcp] [.......10.8.0.1][60479] -> [...200.160.4.49][..443] + idle: [.....2] [ip4][..udp] [.......10.8.0.1][46214] -> [..200.89.75.198][..123] [NTP][System][Acceptable] + guessed: [....27] [ip4][..tcp] [...10.16.37.157][52746] -> [...200.160.4.49][...80] [HTTP][Web][Acceptable] + end: [....27] [ip4][..tcp] [...10.16.37.157][52746] -> [...200.160.4.49][...80] + not-detected: [.....1] [ip4][..tcp] [...10.16.37.157][42256] -> [..174.37.231.81][.5222] [Unknown][Unrated] + end: [.....1] [ip4][..tcp] [...10.16.37.157][42256] -> [..174.37.231.81][.5222] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/webex.pcap.out b/test/results/flow-info/webex.pcap.out new file mode 100644 index 000000000..c8755d68e --- /dev/null +++ b/test/results/flow-info/webex.pcap.out @@ -0,0 +1,360 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.......10.8.0.1][41346] -> [..64.68.105.103][..443] + detected: [.....1] [ip4][..tcp] [.......10.8.0.1][41346] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....1] [ip4][..tcp] [.......10.8.0.1][41346] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [.....1] [ip4][..tcp] [.......10.8.0.1][41346] -> [..64.68.105.103][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.557| 0.113| 0.156] + [IAT(c->s)...: 0.000| 0.557| 0.109| 0.168][IAT(s->c)...: 0.001| 0.506| 0.116| 0.142] + [PKTLEN(c->s): 54.000| 590.000| 227.800| 214.200][PKTLEN(s->c): 54.000|2774.000| 599.300| 783.900] + [BINS(c->s)..: 9,0,1,0,0,0,1,0,1,1,0,0,0,0,1,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,2,0,0,0,0,1] + detection-update: [.....1] [ip4][..tcp] [.......10.8.0.1][41346] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [.....2] [ip4][..tcp] [.......10.8.0.1][41348] -> [..64.68.105.103][..443] + detected: [.....2] [ip4][..tcp] [.......10.8.0.1][41348] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....2] [ip4][..tcp] [.......10.8.0.1][41348] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [.....3] [ip4][..tcp] [.......10.8.0.1][41350] -> [..64.68.105.103][..443] + new: [.....4] [ip4][..tcp] [.......10.8.0.1][41351] -> [..64.68.105.103][..443] + detected: [.....3] [ip4][..tcp] [.......10.8.0.1][41350] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detected: [.....4] [ip4][..tcp] [.......10.8.0.1][41351] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....3] [ip4][..tcp] [.......10.8.0.1][41350] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....4] [ip4][..tcp] [.......10.8.0.1][41351] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [.....2] [ip4][..tcp] [.......10.8.0.1][41348] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.455| 0.115| 0.126] + [IAT(c->s)...: 0.000| 0.455| 0.121| 0.134][IAT(s->c)...: 0.000| 0.405| 0.109| 0.117] + [PKTLEN(c->s): 54.000| 590.000| 197.100| 213.800][PKTLEN(s->c): 54.000|18020.000|2980.200|4843.900] + [BINS(c->s)..: 10,1,0,0,0,0,0,1,0,0,0,0,0,0,2,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,5] + new: [.....5] [ip4][..tcp] [..10.133.206.47][54651] -> [..185.63.147.10][..443] [MIDSTREAM] + new: [.....6] [ip4][..tcp] [..10.133.206.47][59447] -> [..107.20.242.44][..443] [MIDSTREAM] + new: [.....7] [ip4][..tcp] [.......10.8.0.1][41354] -> [..64.68.105.103][..443] + detected: [.....7] [ip4][..tcp] [.......10.8.0.1][41354] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....7] [ip4][..tcp] [.......10.8.0.1][41354] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [.....8] [ip4][..tcp] [.......10.8.0.1][49048] -> [..23.44.253.243][..443] + detected: [.....8] [ip4][..tcp] [.......10.8.0.1][49048] -> [..23.44.253.243][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....8] [ip4][..tcp] [.......10.8.0.1][49048] -> [..23.44.253.243][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [.....9] [ip4][..tcp] [.......10.8.0.1][41358] -> [..64.68.105.103][..443] + detected: [.....9] [ip4][..tcp] [.......10.8.0.1][41358] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....9] [ip4][..tcp] [.......10.8.0.1][41358] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + analyse: [.....9] [ip4][..tcp] [.......10.8.0.1][41358] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.031| 0.154| 0.247] + [IAT(c->s)...: 0.000| 1.031| 0.161| 0.259][IAT(s->c)...: 0.001| 0.980| 0.148| 0.235] + [PKTLEN(c->s): 54.000| 590.000| 115.200| 145.600][PKTLEN(s->c): 54.000|8901.000|2129.800|2912.500] + [BINS(c->s)..: 12,2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,4] + new: [....10] [ip4][..tcp] [.......10.8.0.1][41726] -> [.114.29.213.212][..443] + new: [....11] [ip4][..tcp] [.......10.8.0.1][51646] -> [..114.29.204.49][..443] + detected: [....10] [ip4][..tcp] [.......10.8.0.1][41726] -> [.114.29.213.212][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....11] [ip4][..tcp] [.......10.8.0.1][51646] -> [..114.29.204.49][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....12] [ip4][..tcp] [.......10.8.0.1][47498] -> [209.197.222.159][..443] + detected: [....12] [ip4][..tcp] [.......10.8.0.1][47498] -> [209.197.222.159][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....13] [ip4][..tcp] [.......10.8.0.1][57647] -> [..64.68.121.153][..443] + detected: [....13] [ip4][..tcp] [.......10.8.0.1][57647] -> [..64.68.121.153][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....14] [ip4][..tcp] [.......10.8.0.1][45814] -> [...62.109.231.3][..443] + detected: [....14] [ip4][..tcp] [.......10.8.0.1][45814] -> [...62.109.231.3][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....15] [ip4][..tcp] [.......10.8.0.1][44492] -> [..64.68.104.140][..443] + new: [....16] [ip4][..tcp] [.......10.8.0.1][47116] -> [.114.29.202.139][..443] + new: [....17] [ip4][..tcp] [.......10.8.0.1][52730] -> [...173.243.4.76][..443] + new: [....18] [ip4][..tcp] [.......10.8.0.1][52219] -> [..64.68.121.100][..443] + new: [....19] [ip4][..tcp] [.......10.8.0.1][55969] -> [...64.68.121.99][..443] + detected: [....15] [ip4][..tcp] [.......10.8.0.1][44492] -> [..64.68.104.140][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....16] [ip4][..tcp] [.......10.8.0.1][47116] -> [.114.29.202.139][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....17] [ip4][..tcp] [.......10.8.0.1][52730] -> [...173.243.4.76][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....20] [ip4][..tcp] [.......10.8.0.1][47841] -> [..114.29.200.11][..443] + detected: [....18] [ip4][..tcp] [.......10.8.0.1][52219] -> [..64.68.121.100][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....19] [ip4][..tcp] [.......10.8.0.1][55969] -> [...64.68.121.99][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....20] [ip4][..tcp] [.......10.8.0.1][47841] -> [..114.29.200.11][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....21] [ip4][..tcp] [.......10.8.0.1][51370] -> [...64.68.105.97][..443] + new: [....22] [ip4][..tcp] [.......10.8.0.1][37129] -> [...64.68.105.98][..443] + detected: [....21] [ip4][..tcp] [.......10.8.0.1][51370] -> [...64.68.105.97][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....22] [ip4][..tcp] [.......10.8.0.1][37129] -> [...64.68.105.98][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....23] [ip4][..tcp] [.......10.8.0.1][41386] -> [..64.68.105.103][..443] + detected: [....23] [ip4][..tcp] [.......10.8.0.1][41386] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....14] [ip4][..tcp] [.......10.8.0.1][45814] -> [...62.109.231.3][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....12] [ip4][..tcp] [.......10.8.0.1][47498] -> [209.197.222.159][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....15] [ip4][..tcp] [.......10.8.0.1][44492] -> [..64.68.104.140][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....17] [ip4][..tcp] [.......10.8.0.1][52730] -> [...173.243.4.76][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....13] [ip4][..tcp] [.......10.8.0.1][57647] -> [..64.68.121.153][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....22] [ip4][..tcp] [.......10.8.0.1][37129] -> [...64.68.105.98][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....23] [ip4][..tcp] [.......10.8.0.1][41386] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....21] [ip4][..tcp] [.......10.8.0.1][51370] -> [...64.68.105.97][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....18] [ip4][..tcp] [.......10.8.0.1][52219] -> [..64.68.121.100][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....19] [ip4][..tcp] [.......10.8.0.1][55969] -> [...64.68.121.99][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....11] [ip4][..tcp] [.......10.8.0.1][51646] -> [..114.29.204.49][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [....24] [ip4][..udp] [.......10.8.0.1][64538] -> [....172.16.1.75][.5060] + detected: [....24] [ip4][..udp] [.......10.8.0.1][64538] -> [....172.16.1.75][.5060] [SIP][VoIP][Acceptable] + detection-update: [....16] [ip4][..tcp] [.......10.8.0.1][47116] -> [.114.29.202.139][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....20] [ip4][..tcp] [.......10.8.0.1][47841] -> [..114.29.200.11][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [....25] [ip4][..tcp] [.......10.8.0.1][43433] -> [..216.58.208.40][..443] + detected: [....25] [ip4][..tcp] [.......10.8.0.1][43433] -> [..216.58.208.40][..443] [TLS.Google][Advertisement][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [....26] [ip4][..tcp] [.......10.8.0.1][47135] -> [.114.29.202.139][..443] + new: [....27] [ip4][..tcp] [.......10.8.0.1][41757] -> [.114.29.213.212][..443] + new: [....28] [ip4][..tcp] [.......10.8.0.1][51676] -> [..114.29.204.49][..443] + new: [....29] [ip4][..tcp] [.......10.8.0.1][37139] -> [...64.68.105.98][..443] + new: [....30] [ip4][..tcp] [.......10.8.0.1][41394] -> [..64.68.105.103][..443] + new: [....31] [ip4][..tcp] [.......10.8.0.1][51134] -> [.62.109.224.120][..443] + new: [....32] [ip4][..tcp] [.......10.8.0.1][51135] -> [.62.109.224.120][..443] + new: [....33] [ip4][..tcp] [..10.133.206.47][33459] -> [...80.74.110.68][..443] [MIDSTREAM] + detected: [....33] [ip4][..tcp] [..10.133.206.47][33459] -> [...80.74.110.68][..443] [TLS][Web][Safe] + new: [....34] [ip4][..tcp] [.......10.8.0.1][33511] -> [...80.74.110.68][..443] + new: [....35] [ip4][..tcp] [.......10.8.0.1][33512] -> [...80.74.110.68][..443] + detected: [....26] [ip4][..tcp] [.......10.8.0.1][47135] -> [.114.29.202.139][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....27] [ip4][..tcp] [.......10.8.0.1][41757] -> [.114.29.213.212][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....28] [ip4][..tcp] [.......10.8.0.1][51676] -> [..114.29.204.49][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....29] [ip4][..tcp] [.......10.8.0.1][37139] -> [...64.68.105.98][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....30] [ip4][..tcp] [.......10.8.0.1][41394] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....31] [ip4][..tcp] [.......10.8.0.1][51134] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....32] [ip4][..tcp] [.......10.8.0.1][51135] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....34] [ip4][..tcp] [.......10.8.0.1][33511] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detected: [....35] [ip4][..tcp] [.......10.8.0.1][33512] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....25] [ip4][..tcp] [.......10.8.0.1][43433] -> [..216.58.208.40][..443] [TLS.Google][Advertisement][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....35] [ip4][..tcp] [.......10.8.0.1][33512] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + new: [....36] [ip4][..tcp] [.......10.8.0.1][51154] -> [.62.109.224.120][..443] + new: [....37] [ip4][..tcp] [.......10.8.0.1][51155] -> [.62.109.224.120][..443] + detected: [....36] [ip4][..tcp] [.......10.8.0.1][51154] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....37] [ip4][..tcp] [.......10.8.0.1][51155] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....36] [ip4][..tcp] [.......10.8.0.1][51154] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + detection-update: [....37] [ip4][..tcp] [.......10.8.0.1][51155] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [....38] [ip4][..tcp] [.......10.8.0.1][41419] -> [..64.68.105.103][..443] + detected: [....38] [ip4][..tcp] [.......10.8.0.1][41419] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....38] [ip4][..tcp] [.......10.8.0.1][41419] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [....39] [ip4][..tcp] [.......10.8.0.1][55665] -> [..173.243.0.110][..443] + detected: [....39] [ip4][..tcp] [.......10.8.0.1][55665] -> [..173.243.0.110][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + analyse: [....37] [ip4][..tcp] [.......10.8.0.1][51155] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.215| 0.340| 0.548] + [IAT(c->s)...: 0.000| 2.165| 0.351| 0.548][IAT(s->c)...: 0.003| 2.215| 0.329| 0.547] + [PKTLEN(c->s): 54.000| 528.000| 109.200| 133.800][PKTLEN(s->c): 54.000|10581.000|1158.100|2602.200] + [BINS(c->s)..: 13,1,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,1,1,1,0,1,1,1,0,0,1,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2] + detection-update: [....39] [ip4][..tcp] [.......10.8.0.1][55665] -> [..173.243.0.110][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + analyse: [....36] [ip4][..tcp] [.......10.8.0.1][51154] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.270| 0.347| 0.598] + [IAT(c->s)...: 0.000| 2.270| 0.358| 0.605][IAT(s->c)...: 0.000| 2.270| 0.336| 0.591] + [PKTLEN(c->s): 54.000| 590.000| 347.300| 213.600][PKTLEN(s->c): 54.000|3961.000| 301.900| 944.900] + [BINS(c->s)..: 3,1,1,1,0,0,1,0,0,0,3,0,0,0,0,1,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 14,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1] + new: [....40] [ip4][..tcp] [.......10.8.0.1][51833] -> [.62.109.229.158][..443] + detected: [....40] [ip4][..tcp] [.......10.8.0.1][51833] -> [.62.109.229.158][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....41] [ip4][..tcp] [.......10.8.0.1][55669] -> [..173.243.0.110][..443] + detected: [....41] [ip4][..tcp] [.......10.8.0.1][55669] -> [..173.243.0.110][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....41] [ip4][..tcp] [.......10.8.0.1][55669] -> [..173.243.0.110][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + update: [....24] [ip4][..udp] [.......10.8.0.1][64538] -> [....172.16.1.75][.5060] [SIP][VoIP][Acceptable] + new: [....42] [ip4][..tcp] [.......10.8.0.1][55671] -> [..173.243.0.110][..443] + detected: [....42] [ip4][..tcp] [.......10.8.0.1][55671] -> [..173.243.0.110][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....42] [ip4][..tcp] [.......10.8.0.1][55671] -> [..173.243.0.110][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [....43] [ip4][..tcp] [.......10.8.0.1][51839] -> [.62.109.229.158][..443] + detected: [....43] [ip4][..tcp] [.......10.8.0.1][51839] -> [.62.109.229.158][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....44] [ip4][..tcp] [.......10.8.0.1][46211] -> [...54.241.32.14][..443] + detected: [....44] [ip4][..tcp] [.......10.8.0.1][46211] -> [...54.241.32.14][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....45] [ip4][..tcp] [.......10.8.0.1][59756] -> [...78.46.237.91][...80] + new: [....46] [ip4][..tcp] [.......10.8.0.1][59757] -> [...78.46.237.91][...80] + detected: [....45] [ip4][..tcp] [.......10.8.0.1][59756] -> [...78.46.237.91][...80] [HTTP][Web][Acceptable] + detection-update: [....45] [ip4][..tcp] [.......10.8.0.1][59756] -> [...78.46.237.91][...80] [HTTP][Web][Acceptable] + detected: [....46] [ip4][..tcp] [.......10.8.0.1][59757] -> [...78.46.237.91][...80] [HTTP][Web][Acceptable] + detection-update: [....44] [ip4][..tcp] [.......10.8.0.1][46211] -> [...54.241.32.14][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....44] [ip4][..tcp] [.......10.8.0.1][46211] -> [...54.241.32.14][..443] [TLS.AmazonAWS][Cloud][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....47] [ip4][..tcp] [.......10.8.0.1][33551] -> [...80.74.110.68][..443] + detected: [....47] [ip4][..tcp] [.......10.8.0.1][33551] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....47] [ip4][..tcp] [.......10.8.0.1][33551] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + new: [....48] [ip4][..tcp] [.......10.8.0.1][33553] -> [...80.74.110.68][..443] + new: [....49] [ip4][..tcp] [.......10.8.0.1][33554] -> [...80.74.110.68][..443] + detected: [....48] [ip4][..tcp] [.......10.8.0.1][33553] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detected: [....49] [ip4][..tcp] [.......10.8.0.1][33554] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....48] [ip4][..tcp] [.......10.8.0.1][33553] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....49] [ip4][..tcp] [.......10.8.0.1][33554] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + new: [....50] [ip4][..tcp] [.......10.8.0.1][55687] -> [..173.243.0.110][..443] + detected: [....50] [ip4][..tcp] [.......10.8.0.1][55687] -> [..173.243.0.110][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....50] [ip4][..tcp] [.......10.8.0.1][55687] -> [..173.243.0.110][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [....51] [ip4][..tcp] [.......10.8.0.1][33559] -> [...80.74.110.68][..443] + detected: [....51] [ip4][..tcp] [.......10.8.0.1][33559] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....51] [ip4][..tcp] [.......10.8.0.1][33559] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + new: [....52] [ip4][..tcp] [.......10.8.0.1][51857] -> [.62.109.229.158][..443] + detected: [....52] [ip4][..tcp] [.......10.8.0.1][51857] -> [.62.109.229.158][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detection-update: [....52] [ip4][..tcp] [.......10.8.0.1][51857] -> [.62.109.229.158][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + new: [....53] [ip4][..udp] [.......10.8.0.1][51772] -> [.62.109.229.158][.9000] + new: [....54] [ip4][..tcp] [.......10.8.0.1][51859] -> [.62.109.229.158][..443] + analyse: [....52] [ip4][..tcp] [.......10.8.0.1][51857] -> [.62.109.229.158][..443] [TLS.Webex][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.367| 0.190| 0.352] + [IAT(c->s)...: 0.000| 1.367| 0.163| 0.333][IAT(s->c)...: 0.001| 1.313| 0.216| 0.368] + [PKTLEN(c->s): 54.000| 432.000| 152.700| 113.700][PKTLEN(s->c): 54.000|3961.000| 343.400| 941.400] + [BINS(c->s)..: 7,0,2,3,1,1,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 10,2,2,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1] + new: [....55] [ip4][..tcp] [.......10.8.0.1][51190] -> [.62.109.224.120][..443] + detected: [....55] [ip4][..tcp] [.......10.8.0.1][51190] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [....56] [ip4][..tcp] [.......10.8.0.1][51194] -> [.62.109.224.120][..443] + new: [....57] [ip4][..tcp] [.......10.8.0.1][51195] -> [.62.109.224.120][..443] + detected: [....56] [ip4][..tcp] [.......10.8.0.1][51194] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + detected: [....57] [ip4][..tcp] [.......10.8.0.1][51195] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + update: [....24] [ip4][..udp] [.......10.8.0.1][64538] -> [....172.16.1.75][.5060] [SIP][VoIP][Acceptable] + detection-update: [....56] [ip4][..tcp] [.......10.8.0.1][51194] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + end: [....45] [ip4][..tcp] [.......10.8.0.1][59756] -> [...78.46.237.91][...80] [HTTP][Web][Acceptable] + end: [....46] [ip4][..tcp] [.......10.8.0.1][59757] -> [...78.46.237.91][...80] [HTTP][Web][Acceptable] + idle: [....24] [ip4][..udp] [.......10.8.0.1][64538] -> [....172.16.1.75][.5060] [SIP][VoIP][Acceptable] + end: [....19] [ip4][..tcp] [.......10.8.0.1][55969] -> [...64.68.121.99][..443] + end: [....11] [ip4][..tcp] [.......10.8.0.1][51646] -> [..114.29.204.49][..443] + end: [....28] [ip4][..tcp] [.......10.8.0.1][51676] -> [..114.29.204.49][..443] + end: [....12] [ip4][..tcp] [.......10.8.0.1][47498] -> [209.197.222.159][..443] + end: [....40] [ip4][..tcp] [.......10.8.0.1][51833] -> [.62.109.229.158][..443] + end: [....43] [ip4][..tcp] [.......10.8.0.1][51839] -> [.62.109.229.158][..443] + end: [....52] [ip4][..tcp] [.......10.8.0.1][51857] -> [.62.109.229.158][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + guessed: [....54] [ip4][..tcp] [.......10.8.0.1][51859] -> [.62.109.229.158][..443] [TLS.Webex][VoIP][Acceptable] + end: [....54] [ip4][..tcp] [.......10.8.0.1][51859] -> [.62.109.229.158][..443] + end: [....14] [ip4][..tcp] [.......10.8.0.1][45814] -> [...62.109.231.3][..443] + end: [....18] [ip4][..tcp] [.......10.8.0.1][52219] -> [..64.68.121.100][..443] + end: [....20] [ip4][..tcp] [.......10.8.0.1][47841] -> [..114.29.200.11][..443] + end: [....10] [ip4][..tcp] [.......10.8.0.1][41726] -> [.114.29.213.212][..443] + end: [....27] [ip4][..tcp] [.......10.8.0.1][41757] -> [.114.29.213.212][..443] + guessed: [....53] [ip4][..udp] [.......10.8.0.1][51772] -> [.62.109.229.158][.9000] [Webex][VoIP][Acceptable] + idle: [....53] [ip4][..udp] [.......10.8.0.1][51772] -> [.62.109.229.158][.9000] + guessed: [.....6] [ip4][..tcp] [..10.133.206.47][59447] -> [..107.20.242.44][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [.....6] [ip4][..tcp] [..10.133.206.47][59447] -> [..107.20.242.44][..443] + end: [....17] [ip4][..tcp] [.......10.8.0.1][52730] -> [...173.243.4.76][..443] + end: [....33] [ip4][..tcp] [..10.133.206.47][33459] -> [...80.74.110.68][..443] [TLS][Web][Safe] + end: [....15] [ip4][..tcp] [.......10.8.0.1][44492] -> [..64.68.104.140][..443] + guessed: [.....5] [ip4][..tcp] [..10.133.206.47][54651] -> [..185.63.147.10][..443] [TLS][Web][Safe] + end: [.....5] [ip4][..tcp] [..10.133.206.47][54651] -> [..185.63.147.10][..443] + end: [.....8] [ip4][..tcp] [.......10.8.0.1][49048] -> [..23.44.253.243][..443] + idle: [....25] [ip4][..tcp] [.......10.8.0.1][43433] -> [..216.58.208.40][..443] + end: [....21] [ip4][..tcp] [.......10.8.0.1][51370] -> [...64.68.105.97][..443] + end: [....31] [ip4][..tcp] [.......10.8.0.1][51134] -> [.62.109.224.120][..443] + end: [....32] [ip4][..tcp] [.......10.8.0.1][51135] -> [.62.109.224.120][..443] + end: [....36] [ip4][..tcp] [.......10.8.0.1][51154] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + end: [....37] [ip4][..tcp] [.......10.8.0.1][51155] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + end: [....39] [ip4][..tcp] [.......10.8.0.1][55665] -> [..173.243.0.110][..443] + end: [....41] [ip4][..tcp] [.......10.8.0.1][55669] -> [..173.243.0.110][..443] + end: [....42] [ip4][..tcp] [.......10.8.0.1][55671] -> [..173.243.0.110][..443] + idle: [....55] [ip4][..tcp] [.......10.8.0.1][51190] -> [.62.109.224.120][..443] + end: [....50] [ip4][..tcp] [.......10.8.0.1][55687] -> [..173.243.0.110][..443] + end: [....34] [ip4][..tcp] [.......10.8.0.1][33511] -> [...80.74.110.68][..443] + idle: [....56] [ip4][..tcp] [.......10.8.0.1][51194] -> [.62.109.224.120][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + end: [....35] [ip4][..tcp] [.......10.8.0.1][33512] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + idle: [....57] [ip4][..tcp] [.......10.8.0.1][51195] -> [.62.109.224.120][..443] + end: [....22] [ip4][..tcp] [.......10.8.0.1][37129] -> [...64.68.105.98][..443] + end: [....29] [ip4][..tcp] [.......10.8.0.1][37139] -> [...64.68.105.98][..443] + end: [....47] [ip4][..tcp] [.......10.8.0.1][33551] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + end: [....48] [ip4][..tcp] [.......10.8.0.1][33553] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + end: [....49] [ip4][..tcp] [.......10.8.0.1][33554] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + idle: [....51] [ip4][..tcp] [.......10.8.0.1][33559] -> [...80.74.110.68][..443] [TLS][Web][Safe] + RISK: Obsolete TLS (v1.1 or older) + end: [....13] [ip4][..tcp] [.......10.8.0.1][57647] -> [..64.68.121.153][..443] + end: [....16] [ip4][..tcp] [.......10.8.0.1][47116] -> [.114.29.202.139][..443] + end: [....26] [ip4][..tcp] [.......10.8.0.1][47135] -> [.114.29.202.139][..443] + end: [....44] [ip4][..tcp] [.......10.8.0.1][46211] -> [...54.241.32.14][..443] + idle: [.....1] [ip4][..tcp] [.......10.8.0.1][41346] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....2] [ip4][..tcp] [.......10.8.0.1][41348] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....3] [ip4][..tcp] [.......10.8.0.1][41350] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....4] [ip4][..tcp] [.......10.8.0.1][41351] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + end: [.....7] [ip4][..tcp] [.......10.8.0.1][41354] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + end: [.....9] [ip4][..tcp] [.......10.8.0.1][41358] -> [..64.68.105.103][..443] [TLS.Webex][VoIP][Acceptable] + RISK: Obsolete TLS (v1.1 or older), Weak TLS Cipher + end: [....23] [ip4][..tcp] [.......10.8.0.1][41386] -> [..64.68.105.103][..443] + end: [....30] [ip4][..tcp] [.......10.8.0.1][41394] -> [..64.68.105.103][..443] + end: [....38] [ip4][..tcp] [.......10.8.0.1][41419] -> [..64.68.105.103][..443] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/websocket.pcap.out b/test/results/flow-info/websocket.pcap.out new file mode 100644 index 000000000..67e9f1c99 --- /dev/null +++ b/test/results/flow-info/websocket.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.192.168.43.135][12345] -> [...192.168.43.1][50999] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [.192.168.43.135][12345] -> [...192.168.43.1][50999] [WebSocket][Web][Acceptable] + idle: [.....1] [ip4][..tcp] [.192.168.43.135][12345] -> [...192.168.43.1][50999] [WebSocket][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/wechat.pcap.out b/test/results/flow-info/wechat.pcap.out new file mode 100644 index 000000000..cd8aae425 --- /dev/null +++ b/test/results/flow-info/wechat.pcap.out @@ -0,0 +1,605 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [203.205.151.162][..443] -> [..192.168.1.103][54084] [MIDSTREAM] + new: [.....2] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] + detected: [.....2] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [.....3] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] + detected: [.....3] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [.....4] [ip4][..udp] [..192.168.1.103][53734] -> [..192.168.1.254][...53] + detected: [.....4] [ip4][..udp] [..192.168.1.103][53734] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....4] [ip4][..udp] [..192.168.1.103][53734] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + new: [.....5] [ip4][..tcp] [..192.168.1.103][38657] -> [..172.217.22.14][..443] + detected: [.....5] [ip4][..tcp] [..192.168.1.103][38657] -> [..172.217.22.14][..443] [TLS.Google][Web][Acceptable] + detection-update: [.....5] [ip4][..tcp] [..192.168.1.103][38657] -> [..172.217.22.14][..443] [TLS.Google][Web][Acceptable] + detection-update: [.....5] [ip4][..tcp] [..192.168.1.103][38657] -> [..172.217.22.14][..443] [TLS.Google][Web][Acceptable] + new: [.....6] [ip4][..tcp] [..192.168.1.103][47627] -> [..216.58.205.78][..443] [MIDSTREAM] + new: [.....7] [ip4][..tcp] [..192.168.1.103][53220] -> [..172.217.23.78][..443] [MIDSTREAM] + new: [.....8] [ip4][..udp] [..192.168.1.103][46078] -> [..192.168.1.254][...53] + detected: [.....8] [ip4][..udp] [..192.168.1.103][46078] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + detection-update: [.....8] [ip4][..udp] [..192.168.1.103][46078] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + new: [.....9] [ip4][..udp] [..192.168.1.103][51507] -> [..172.217.23.67][..443] + detected: [.....9] [ip4][..udp] [..192.168.1.103][51507] -> [..172.217.23.67][..443] [QUIC.Google][Web][Acceptable] + new: [....10] [ip4][..udp] [..192.168.1.103][55862] -> [..192.168.1.254][...53] + detected: [....10] [ip4][..udp] [..192.168.1.103][55862] -> [..192.168.1.254][...53] [DNS.GoogleDocs][Collaborative][Acceptable] + detection-update: [....10] [ip4][..udp] [..192.168.1.103][55862] -> [..192.168.1.254][...53] [DNS.GoogleDocs][Collaborative][Acceptable] + new: [....11] [ip4][..udp] [..192.168.1.103][57591] -> [..216.58.198.46][..443] + detected: [....11] [ip4][..udp] [..192.168.1.103][57591] -> [..216.58.198.46][..443] [QUIC.GoogleDocs][Collaborative][Acceptable] + new: [....12] [ip4][..tcp] [..192.168.1.103][36017] -> [.64.233.167.188][.5228] [MIDSTREAM] + new: [....13] [ip4][..tcp] [203.205.151.162][..443] -> [..192.168.1.103][54058] [MIDSTREAM] + detected: [....13] [ip4][..tcp] [203.205.151.162][..443] -> [..192.168.1.103][54058] [TLS][Web][Safe] + new: [....14] [ip4][..tcp] [..192.168.1.103][40741] -> [203.205.151.211][..443] [MIDSTREAM] + new: [....15] [ip4][..tcp] [..192.168.1.103][54085] -> [203.205.151.162][..443] [MIDSTREAM] + new: [....16] [ip4][..tcp] [..192.168.1.103][54089] -> [203.205.151.162][..443] + new: [....17] [ip4][..tcp] [..192.168.1.103][54090] -> [203.205.151.162][..443] + detected: [....16] [ip4][..tcp] [..192.168.1.103][54089] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....16] [ip4][..tcp] [..192.168.1.103][54089] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....16] [ip4][..tcp] [..192.168.1.103][54089] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detected: [....17] [ip4][..tcp] [..192.168.1.103][54090] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + new: [....18] [ip4][..tcp] [..192.168.1.103][54091] -> [203.205.151.162][..443] + detection-update: [....17] [ip4][..tcp] [..192.168.1.103][54090] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....17] [ip4][..tcp] [..192.168.1.103][54090] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detected: [....18] [ip4][..tcp] [..192.168.1.103][54091] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + analyse: [....16] [ip4][..tcp] [..192.168.1.103][54089] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.411| 0.155| 0.181] + [IAT(c->s)...: 0.000| 0.411| 0.161| 0.184][IAT(s->c)...: 0.000| 0.393| 0.150| 0.177] + [PKTLEN(c->s): 66.000|1306.000| 361.300| 443.200][PKTLEN(s->c): 66.000|5892.000|1097.600|1399.200] + [BINS(c->s)..: 9,0,0,1,0,0,0,1,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,1,0,0,0,1,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,1] + detection-update: [....18] [ip4][..tcp] [..192.168.1.103][54091] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....18] [ip4][..tcp] [..192.168.1.103][54091] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detected: [.....6] [ip4][..tcp] [..192.168.1.103][47627] -> [..216.58.205.78][..443] [TLS.Google][Web][Acceptable] + detected: [.....7] [ip4][..tcp] [..192.168.1.103][53220] -> [..172.217.23.78][..443] [TLS.Google][Web][Acceptable] + new: [....19] [ip4][..tcp] [..192.168.1.103][54092] -> [203.205.151.162][..443] + new: [....20] [ip4][..tcp] [..192.168.1.103][54093] -> [203.205.151.162][..443] + detected: [....19] [ip4][..tcp] [..192.168.1.103][54092] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....19] [ip4][..tcp] [..192.168.1.103][54092] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....19] [ip4][..tcp] [..192.168.1.103][54092] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + new: [....21] [ip4][..tcp] [..192.168.1.103][49787] -> [.216.58.205.142][..443] [MIDSTREAM] + new: [....22] [ip4][..tcp] [..192.168.1.103][54094] -> [203.205.151.162][..443] + new: [....23] [ip4][..tcp] [..192.168.1.103][54095] -> [203.205.151.162][..443] + detected: [....22] [ip4][..tcp] [..192.168.1.103][54094] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....22] [ip4][..tcp] [..192.168.1.103][54094] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....22] [ip4][..tcp] [..192.168.1.103][54094] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detected: [....23] [ip4][..tcp] [..192.168.1.103][54095] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + new: [....24] [ip4][..tcp] [..192.168.1.103][54096] -> [203.205.151.162][..443] + detection-update: [....23] [ip4][..tcp] [..192.168.1.103][54095] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....23] [ip4][..tcp] [..192.168.1.103][54095] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detected: [....24] [ip4][..tcp] [..192.168.1.103][54096] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....24] [ip4][..tcp] [..192.168.1.103][54096] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....24] [ip4][..tcp] [..192.168.1.103][54096] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + new: [....25] [ip4][..tcp] [..192.168.1.103][40740] -> [203.205.151.211][..443] [MIDSTREAM] + analyse: [....22] [ip4][..tcp] [..192.168.1.103][54094] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 4.544| 0.482| 1.044] + [IAT(c->s)...: 0.000| 4.140| 0.473| 0.962][IAT(s->c)...: 0.000| 4.544| 0.492| 1.136] + [PKTLEN(c->s): 66.000|1306.000| 523.500| 498.700][PKTLEN(s->c): 66.000|1754.000| 554.800| 621.500] + [BINS(c->s)..: 7,0,0,1,0,0,0,1,0,0,0,1,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,3,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,1] + analyse: [....23] [ip4][..tcp] [..192.168.1.103][54095] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.384| 0.466| 0.827] + [IAT(c->s)...: 0.000| 3.018| 0.483| 0.789][IAT(s->c)...: 0.000| 3.384| 0.446| 0.871] + [PKTLEN(c->s): 66.000|1306.000| 423.700| 471.100][PKTLEN(s->c): 66.000|8291.000|1192.600|2067.900] + [BINS(c->s)..: 9,0,0,1,0,0,0,1,0,0,0,1,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,2,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,4,0,0,1] + analyse: [....13] [ip4][..tcp] [203.205.151.162][..443] -> [..192.168.1.103][54058] [TLS][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 11.774| 2.195| 3.338] + [IAT(c->s)...: 0.006| 11.415| 2.279| 3.297][IAT(s->c)...: 0.000| 11.774| 2.116| 3.373] + [PKTLEN(c->s): 66.000| 264.000| 165.000| 99.000][PKTLEN(s->c): 66.000|1254.000| 660.000| 594.000] + [BINS(c->s)..: 8,0,0,0,0,0,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,0,0,0,0,0,0,0,0] + update: [.....3] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [.....4] [ip4][..udp] [..192.168.1.103][53734] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + update: [....10] [ip4][..udp] [..192.168.1.103][55862] -> [..192.168.1.254][...53] [DNS.GoogleDocs][Collaborative][Acceptable] + update: [.....9] [ip4][..udp] [..192.168.1.103][51507] -> [..172.217.23.67][..443] [QUIC.Google][Web][Acceptable] + update: [.....8] [ip4][..udp] [..192.168.1.103][46078] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + update: [....11] [ip4][..udp] [..192.168.1.103][57591] -> [..216.58.198.46][..443] [QUIC.GoogleDocs][Collaborative][Acceptable] + new: [....26] [ip4][..tcp] [..192.168.1.103][54097] -> [203.205.151.162][..443] + new: [....27] [ip4][..tcp] [..192.168.1.103][54098] -> [203.205.151.162][..443] + detected: [....26] [ip4][..tcp] [..192.168.1.103][54097] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....26] [ip4][..tcp] [..192.168.1.103][54097] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....26] [ip4][..tcp] [..192.168.1.103][54097] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detected: [....25] [ip4][..tcp] [..192.168.1.103][40740] -> [203.205.151.211][..443] [TLS][Web][Safe] + detected: [....27] [ip4][..tcp] [..192.168.1.103][54098] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....27] [ip4][..tcp] [..192.168.1.103][54098] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....27] [ip4][..tcp] [..192.168.1.103][54098] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + analyse: [....26] [ip4][..tcp] [..192.168.1.103][54097] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 6.862| 1.014| 1.948] + [IAT(c->s)...: 0.001| 6.494| 1.004| 1.882][IAT(s->c)...: 0.001| 6.862| 1.027| 2.035] + [PKTLEN(c->s): 66.000|1306.000| 523.800| 478.800][PKTLEN(s->c): 66.000|1754.000| 489.800| 582.900] + [BINS(c->s)..: 7,0,0,1,0,0,0,1,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,2,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1] + analyse: [....27] [ip4][..tcp] [..192.168.1.103][54098] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.001| 6.095| 1.335| 2.042] + [IAT(c->s)...: 0.001| 5.734| 1.139| 1.860][IAT(s->c)...: 0.001| 6.095| 1.605| 2.242] + [PKTLEN(c->s): 66.000|1306.000| 437.300| 466.100][PKTLEN(s->c): 66.000|1754.000| 472.800| 591.600] + [BINS(c->s)..: 9,0,0,1,0,0,0,1,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,2,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1] + analyse: [.....5] [ip4][..tcp] [..192.168.1.103][38657] -> [..172.217.22.14][..443] [TLS.Google][Web][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 45.056| 5.827| 15.097] + [IAT(c->s)...: 0.000| 45.056| 6.020| 15.309][IAT(s->c)...: 0.000| 45.053| 5.647| 14.893] + [PKTLEN(c->s): 66.000| 895.000| 146.700| 200.800][PKTLEN(s->c): 66.000|1484.000| 387.600| 535.900] + [BINS(c->s)..: 10,3,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 8,3,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0,0,0] + new: [....28] [ip4][....2] [..192.168.1.254] -> [......224.0.0.1] + detected: [....28] [ip4][....2] [..192.168.1.254] -> [......224.0.0.1] [IGMP][Network][Acceptable] + new: [....29] [ip4][....2] [..192.168.1.100] -> [.....224.0.0.22] + detected: [....29] [ip4][....2] [..192.168.1.100] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + update: [.....3] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....30] [ip4][....2] [..192.168.1.103] -> [.....224.0.0.22] + detected: [....30] [ip4][....2] [..192.168.1.103] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + update: [.....4] [ip4][..udp] [..192.168.1.103][53734] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + update: [....10] [ip4][..udp] [..192.168.1.103][55862] -> [..192.168.1.254][...53] [DNS.GoogleDocs][Collaborative][Acceptable] + update: [.....9] [ip4][..udp] [..192.168.1.103][51507] -> [..172.217.23.67][..443] [QUIC.Google][Web][Acceptable] + update: [.....8] [ip4][..udp] [..192.168.1.103][46078] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + update: [....11] [ip4][..udp] [..192.168.1.103][57591] -> [..216.58.198.46][..443] [QUIC.GoogleDocs][Collaborative][Acceptable] + new: [....31] [ip4][..tcp] [..192.168.1.103][54099] -> [203.205.151.162][..443] + new: [....32] [ip4][..tcp] [..192.168.1.103][54100] -> [203.205.151.162][..443] + detected: [....31] [ip4][..tcp] [..192.168.1.103][54099] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....31] [ip4][..tcp] [..192.168.1.103][54099] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....31] [ip4][..tcp] [..192.168.1.103][54099] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detected: [....32] [ip4][..tcp] [..192.168.1.103][54100] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + new: [....33] [ip4][..tcp] [..192.168.1.103][54101] -> [203.205.151.162][..443] + new: [....34] [ip4][..tcp] [..192.168.1.103][54102] -> [203.205.151.162][..443] + detection-update: [....32] [ip4][..tcp] [..192.168.1.103][54100] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....32] [ip4][..tcp] [..192.168.1.103][54100] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detected: [....34] [ip4][..tcp] [..192.168.1.103][54102] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + new: [....35] [ip4][..tcp] [..192.168.1.103][54103] -> [203.205.151.162][..443] + detected: [....33] [ip4][..tcp] [..192.168.1.103][54101] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....34] [ip4][..tcp] [..192.168.1.103][54102] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detected: [....35] [ip4][..tcp] [..192.168.1.103][54103] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....33] [ip4][..tcp] [..192.168.1.103][54101] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....33] [ip4][..tcp] [..192.168.1.103][54101] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....35] [ip4][..tcp] [..192.168.1.103][54103] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....35] [ip4][..tcp] [..192.168.1.103][54103] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + new: [....36] [ip4][..tcp] [..192.168.1.103][54104] -> [203.205.151.162][..443] + analyse: [....31] [ip4][..tcp] [..192.168.1.103][54099] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.469| 0.183| 0.190] + [IAT(c->s)...: 0.000| 0.469| 0.189| 0.196][IAT(s->c)...: 0.001| 0.407| 0.177| 0.184] + [PKTLEN(c->s): 66.000|1306.000| 458.200| 474.000][PKTLEN(s->c): 66.000|1754.000| 752.800| 693.500] + [BINS(c->s)..: 7,0,0,1,0,0,0,1,0,0,0,2,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,2,0,1,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,0,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0,1] + detected: [....36] [ip4][..tcp] [..192.168.1.103][54104] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....36] [ip4][..tcp] [..192.168.1.103][54104] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....36] [ip4][..tcp] [..192.168.1.103][54104] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + analyse: [....35] [ip4][..tcp] [..192.168.1.103][54103] -> [203.205.151.162][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.647| 0.130| 0.182] + [IAT(c->s)...: 0.000| 0.376| 0.144| 0.165][IAT(s->c)...: 0.000| 0.647| 0.119| 0.194] + [PKTLEN(c->s): 66.000|1154.000| 235.900| 365.800][PKTLEN(s->c): 66.000|3134.000|1357.200| 830.500] + [BINS(c->s)..: 11,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0,2] + detection-update: [....35] [ip4][..tcp] [..192.168.1.103][54103] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + analyse: [....33] [ip4][..tcp] [..192.168.1.103][54101] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.952| 0.213| 0.233] + [IAT(c->s)...: 0.000| 0.543| 0.206| 0.206][IAT(s->c)...: 0.001| 0.952| 0.220| 0.259] + [PKTLEN(c->s): 66.000|1306.000| 435.100| 469.000][PKTLEN(s->c): 66.000|1754.000| 695.800| 693.000] + [BINS(c->s)..: 8,0,0,1,0,0,0,1,0,0,0,2,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,2,0,1,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,1,0,0,0,1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,1] + guessed: [.....1] [ip4][..tcp] [203.205.151.162][..443] -> [..192.168.1.103][54084] [TLS][Web][Safe] + end: [.....1] [ip4][..tcp] [203.205.151.162][..443] -> [..192.168.1.103][54084] + guessed: [....15] [ip4][..tcp] [..192.168.1.103][54085] -> [203.205.151.162][..443] [TLS][Web][Safe] + end: [....15] [ip4][..tcp] [..192.168.1.103][54085] -> [203.205.151.162][..443] + guessed: [....14] [ip4][..tcp] [..192.168.1.103][40741] -> [203.205.151.211][..443] [TLS][Web][Safe] + end: [....14] [ip4][..tcp] [..192.168.1.103][40741] -> [203.205.151.211][..443] + new: [....37] [ip4][..tcp] [..192.168.1.103][54109] -> [203.205.151.162][..443] [MIDSTREAM] + new: [....38] [ip4][..tcp] [..192.168.1.103][54110] -> [203.205.151.162][..443] [MIDSTREAM] + new: [....39] [ip4][..tcp] [..192.168.1.103][54111] -> [203.205.151.162][..443] + new: [....40] [ip4][..tcp] [..192.168.1.103][54112] -> [203.205.151.162][..443] + detected: [....39] [ip4][..tcp] [..192.168.1.103][54111] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....39] [ip4][..tcp] [..192.168.1.103][54111] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....39] [ip4][..tcp] [..192.168.1.103][54111] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + new: [....41] [ip4][..tcp] [..192.168.1.103][54106] -> [203.205.151.162][..443] [MIDSTREAM] + end: [....16] [ip4][..tcp] [..192.168.1.103][54089] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + end: [....17] [ip4][..tcp] [..192.168.1.103][54090] -> [203.205.151.162][..443] + end: [....18] [ip4][..tcp] [..192.168.1.103][54091] -> [203.205.151.162][..443] + end: [....19] [ip4][..tcp] [..192.168.1.103][54092] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + guessed: [....20] [ip4][..tcp] [..192.168.1.103][54093] -> [203.205.151.162][..443] [TLS][Web][Safe] + end: [....20] [ip4][..tcp] [..192.168.1.103][54093] -> [203.205.151.162][..443] + end: [....22] [ip4][..tcp] [..192.168.1.103][54094] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + end: [....23] [ip4][..tcp] [..192.168.1.103][54095] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + end: [....24] [ip4][..tcp] [..192.168.1.103][54096] -> [203.205.151.162][..443] + end: [....26] [ip4][..tcp] [..192.168.1.103][54097] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + end: [....27] [ip4][..tcp] [..192.168.1.103][54098] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + end: [....31] [ip4][..tcp] [..192.168.1.103][54099] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + end: [....32] [ip4][..tcp] [..192.168.1.103][54100] -> [203.205.151.162][..443] + end: [....33] [ip4][..tcp] [..192.168.1.103][54101] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + end: [....34] [ip4][..tcp] [..192.168.1.103][54102] -> [203.205.151.162][..443] + end: [....35] [ip4][..tcp] [..192.168.1.103][54103] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + end: [....36] [ip4][..tcp] [..192.168.1.103][54104] -> [203.205.151.162][..443] + idle: [.....4] [ip4][..udp] [..192.168.1.103][53734] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + idle: [....10] [ip4][..udp] [..192.168.1.103][55862] -> [..192.168.1.254][...53] [DNS.GoogleDocs][Collaborative][Acceptable] + end: [.....7] [ip4][..tcp] [..192.168.1.103][53220] -> [..172.217.23.78][..443] + idle: [.....9] [ip4][..udp] [..192.168.1.103][51507] -> [..172.217.23.67][..443] [QUIC.Google][Web][Acceptable] + idle: [.....8] [ip4][..udp] [..192.168.1.103][46078] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + idle: [....11] [ip4][..udp] [..192.168.1.103][57591] -> [..216.58.198.46][..443] [QUIC.GoogleDocs][Collaborative][Acceptable] + end: [.....6] [ip4][..tcp] [..192.168.1.103][47627] -> [..216.58.205.78][..443] + end: [....25] [ip4][..tcp] [..192.168.1.103][40740] -> [203.205.151.211][..443] [TLS][Web][Safe] + update: [.....3] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [....28] [ip4][....2] [..192.168.1.254] -> [......224.0.0.1] [IGMP][Network][Acceptable] + update: [....29] [ip4][....2] [..192.168.1.100] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + update: [....30] [ip4][....2] [..192.168.1.103] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....42] [ip4][..tcp] [..192.168.1.103][54113] -> [203.205.151.162][..443] + new: [....43] [ip4][..tcp] [..192.168.1.103][54114] -> [203.205.151.162][..443] + detected: [....42] [ip4][..tcp] [..192.168.1.103][54113] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....42] [ip4][..tcp] [..192.168.1.103][54113] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....42] [ip4][..tcp] [..192.168.1.103][54113] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + new: [....44] [ip4][..udp] [..192.168.1.103][19041] -> [..192.168.1.254][...53] + detected: [....44] [ip4][..udp] [..192.168.1.103][19041] -> [..192.168.1.254][...53] [DNS.QQ][Chat][Fun] + detection-update: [....44] [ip4][..udp] [..192.168.1.103][19041] -> [..192.168.1.254][...53] [DNS.QQ][Chat][Fun] + new: [....45] [ip4][..tcp] [..192.168.1.103][43850] -> [.203.205.158.34][..443] + new: [....46] [ip4][..tcp] [..192.168.1.103][43851] -> [.203.205.158.34][..443] + detected: [....45] [ip4][..tcp] [..192.168.1.103][43850] -> [.203.205.158.34][..443] [TLS.QQ][Chat][Fun] + analyse: [....42] [ip4][..tcp] [..192.168.1.103][54113] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 6.615| 0.560| 1.552] + [IAT(c->s)...: 0.000| 6.259| 0.523| 1.490][IAT(s->c)...: 0.000| 6.615| 0.600| 1.615] + [PKTLEN(c->s): 66.000|1306.000| 443.200| 474.300][PKTLEN(s->c): 66.000|1494.000| 547.700| 614.600] + [BINS(c->s)..: 8,0,0,1,0,0,0,1,0,0,0,1,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,2,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,2,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0] + detection-update: [....45] [ip4][..tcp] [..192.168.1.103][43850] -> [.203.205.158.34][..443] [TLS.QQ][Chat][Fun] + RISK: Weak TLS Cipher + detection-update: [....45] [ip4][..tcp] [..192.168.1.103][43850] -> [.203.205.158.34][..443] [TLS.QQ][Chat][Fun] + RISK: Weak TLS Cipher + new: [....47] [ip4][..udp] [..192.168.1.103][60562] -> [..192.168.1.254][...53] + detected: [....47] [ip4][..udp] [..192.168.1.103][60562] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + detection-update: [....47] [ip4][..udp] [..192.168.1.103][60562] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + new: [....48] [ip4][..udp] [..192.168.1.103][35601] -> [..172.217.23.67][..443] + detected: [....48] [ip4][..udp] [..192.168.1.103][35601] -> [..172.217.23.67][..443] [QUIC.Google][Web][Acceptable] + new: [....49] [ip4][..udp] [..192.168.1.100][..138] -> [..192.168.1.255][..138] + detected: [....49] [ip4][..udp] [..192.168.1.100][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [.....3] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....50] [ip4][..tcp] [..192.168.1.103][54117] -> [203.205.151.162][..443] + new: [....51] [ip4][..tcp] [..192.168.1.103][54118] -> [203.205.151.162][..443] + detected: [....50] [ip4][..tcp] [..192.168.1.103][54117] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....50] [ip4][..tcp] [..192.168.1.103][54117] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....50] [ip4][..tcp] [..192.168.1.103][54117] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detected: [....51] [ip4][..tcp] [..192.168.1.103][54118] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....51] [ip4][..tcp] [..192.168.1.103][54118] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....51] [ip4][..tcp] [..192.168.1.103][54118] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + update: [....44] [ip4][..udp] [..192.168.1.103][19041] -> [..192.168.1.254][...53] [DNS.QQ][Chat][Fun] + update: [....47] [ip4][..udp] [..192.168.1.103][60562] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + update: [....48] [ip4][..udp] [..192.168.1.103][35601] -> [..172.217.23.67][..443] [QUIC.Google][Web][Acceptable] + analyse: [....50] [ip4][..tcp] [..192.168.1.103][54117] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 7.807| 0.648| 1.839] + [IAT(c->s)...: 0.000| 7.431| 0.592| 1.719][IAT(s->c)...: 0.000| 7.807| 0.716| 1.972] + [PKTLEN(c->s): 66.000|1306.000| 459.200| 470.600][PKTLEN(s->c): 66.000|1494.000| 459.600| 523.800] + [BINS(c->s)..: 8,0,0,1,0,0,0,1,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,2,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0] + analyse: [.....2] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 183.801| 12.094| 33.303] + [IAT(c->s)...: 0.000| 183.801| 12.094| 33.303][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 82.000| 82.000| 82.000| 0.000][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + analyse: [.....3] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 183.800| 12.094| 33.303] + [IAT(c->s)...: 0.000| 183.800| 12.094| 33.303][IAT(s->c)...: 0.000| 0.000| 0.000| 0.000] + [PKTLEN(c->s): 102.000| 102.000| 102.000| 0.000][PKTLEN(s->c): 0.000| 0.000| 0.000| 0.000] + [BINS(c->s)..: 0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....52] [ip4][..tcp] [..192.168.1.103][54119] -> [203.205.151.162][..443] + new: [....53] [ip4][..tcp] [..192.168.1.103][54120] -> [203.205.151.162][..443] + detected: [....52] [ip4][..tcp] [..192.168.1.103][54119] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....52] [ip4][..tcp] [..192.168.1.103][54119] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....52] [ip4][..tcp] [..192.168.1.103][54119] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detected: [....53] [ip4][..tcp] [..192.168.1.103][54120] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....53] [ip4][..tcp] [..192.168.1.103][54120] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....53] [ip4][..tcp] [..192.168.1.103][54120] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + update: [.....3] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [....49] [ip4][..udp] [..192.168.1.100][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [.....2] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + analyse: [....52] [ip4][..tcp] [..192.168.1.103][54119] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 7.133| 0.619| 1.664] + [IAT(c->s)...: 0.000| 6.696| 0.600| 1.587][IAT(s->c)...: 0.000| 7.133| 0.640| 1.743] + [PKTLEN(c->s): 66.000|1306.000| 443.200| 474.300][PKTLEN(s->c): 66.000|1494.000| 547.700| 614.700] + [BINS(c->s)..: 8,0,0,1,0,0,0,1,0,0,0,1,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,2,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,2,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0] + guessed: [....37] [ip4][..tcp] [..192.168.1.103][54109] -> [203.205.151.162][..443] [TLS][Web][Safe] + end: [....37] [ip4][..tcp] [..192.168.1.103][54109] -> [203.205.151.162][..443] + guessed: [....38] [ip4][..tcp] [..192.168.1.103][54110] -> [203.205.151.162][..443] [TLS][Web][Safe] + end: [....38] [ip4][..tcp] [..192.168.1.103][54110] -> [203.205.151.162][..443] + update: [....44] [ip4][..udp] [..192.168.1.103][19041] -> [..192.168.1.254][...53] [DNS.QQ][Chat][Fun] + update: [....47] [ip4][..udp] [..192.168.1.103][60562] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + update: [....48] [ip4][..udp] [..192.168.1.103][35601] -> [..172.217.23.67][..443] [QUIC.Google][Web][Acceptable] + new: [....54] [ip4][..udp] [..192.168.1.103][60356] -> [..192.168.1.254][...53] + detected: [....54] [ip4][..udp] [..192.168.1.103][60356] -> [..192.168.1.254][...53] [DNS.WeChat][Chat][Fun] + detection-update: [....54] [ip4][..udp] [..192.168.1.103][60356] -> [..192.168.1.254][...53] [DNS.WeChat][Chat][Fun] + new: [....55] [ip4][..tcp] [..192.168.1.103][58036] -> [203.205.147.171][..443] + new: [....56] [ip4][..tcp] [..192.168.1.103][58037] -> [203.205.147.171][..443] + detected: [....55] [ip4][..tcp] [..192.168.1.103][58036] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....55] [ip4][..tcp] [..192.168.1.103][58036] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....55] [ip4][..tcp] [..192.168.1.103][58036] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + end: [....39] [ip4][..tcp] [..192.168.1.103][54111] -> [203.205.151.162][..443] + guessed: [....40] [ip4][..tcp] [..192.168.1.103][54112] -> [203.205.151.162][..443] [TLS][Web][Safe] + end: [....40] [ip4][..tcp] [..192.168.1.103][54112] -> [203.205.151.162][..443] + new: [....57] [ip4][..tcp] [..192.168.1.103][58038] -> [203.205.147.171][..443] + new: [....58] [ip4][..tcp] [..192.168.1.103][58039] -> [203.205.147.171][..443] + detected: [....57] [ip4][..tcp] [..192.168.1.103][58038] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....57] [ip4][..tcp] [..192.168.1.103][58038] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....57] [ip4][..tcp] [..192.168.1.103][58038] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + analyse: [....57] [ip4][..tcp] [..192.168.1.103][58038] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 2.509| 0.286| 0.565] + [IAT(c->s)...: 0.000| 2.228| 0.247| 0.501][IAT(s->c)...: 0.001| 2.509| 0.340| 0.640] + [PKTLEN(c->s): 66.000|1306.000| 519.500| 486.100][PKTLEN(s->c): 66.000|1754.000| 599.200| 653.200] + [BINS(c->s)..: 7,0,0,1,0,0,0,1,0,0,0,2,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,3,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0,0,1,0,0,1] + guessed: [....41] [ip4][..tcp] [..192.168.1.103][54106] -> [203.205.151.162][..443] [TLS][Web][Safe] + end: [....41] [ip4][..tcp] [..192.168.1.103][54106] -> [203.205.151.162][..443] + update: [.....3] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [....28] [ip4][....2] [..192.168.1.254] -> [......224.0.0.1] [IGMP][Network][Acceptable] + update: [....29] [ip4][....2] [..192.168.1.100] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + update: [....30] [ip4][....2] [..192.168.1.103] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + update: [....49] [ip4][..udp] [..192.168.1.100][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [.....2] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....59] [ip4][..udp] [..192.168.1.100][.5353] -> [....224.0.0.251][.5353] + detected: [....59] [ip4][..udp] [..192.168.1.100][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....60] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][.5353] -> [...............................ff02::fb][.5353] + detected: [....60] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....61] [ip4][..udp] [..192.168.1.100][54124] -> [....224.0.0.252][.5355] + detected: [....61] [ip4][..udp] [..192.168.1.100][54124] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....62] [ip4][..udp] [..192.168.1.100][49832] -> [....224.0.0.252][.5355] + detected: [....62] [ip4][..udp] [..192.168.1.100][49832] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....63] [ip4][..udp] [..192.168.1.100][57401] -> [....224.0.0.252][.5355] + detected: [....63] [ip4][..udp] [..192.168.1.100][57401] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + new: [....64] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][50440] -> [..............................ff02::1:3][.5355] + detected: [....64] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][50440] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....65] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][49195] -> [..............................ff02::1:3][.5355] + detected: [....65] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][49195] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....66] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][50577] -> [..............................ff02::1:3][.5355] + detected: [....66] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][50577] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....67] [ip4][..udp] [..192.168.1.100][..137] -> [..192.168.1.255][..137] + detected: [....67] [ip4][..udp] [..192.168.1.100][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + end: [....42] [ip4][..tcp] [..192.168.1.103][54113] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + update: [....44] [ip4][..udp] [..192.168.1.103][19041] -> [..192.168.1.254][...53] [DNS.QQ][Chat][Fun] + update: [....47] [ip4][..udp] [..192.168.1.103][60562] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + update: [....48] [ip4][..udp] [..192.168.1.103][35601] -> [..172.217.23.67][..443] [QUIC.Google][Web][Acceptable] + guessed: [....46] [ip4][..tcp] [..192.168.1.103][43851] -> [.203.205.158.34][..443] [TLS.Tencent][SocialNetwork][Acceptable] + end: [....46] [ip4][..tcp] [..192.168.1.103][43851] -> [.203.205.158.34][..443] + guessed: [....43] [ip4][..tcp] [..192.168.1.103][54114] -> [203.205.151.162][..443] [TLS][Web][Safe] + end: [....43] [ip4][..tcp] [..192.168.1.103][54114] -> [203.205.151.162][..443] + update: [....54] [ip4][..udp] [..192.168.1.103][60356] -> [..192.168.1.254][...53] [DNS.WeChat][Chat][Fun] + end: [....45] [ip4][..tcp] [..192.168.1.103][43850] -> [.203.205.158.34][..443] + end: [....50] [ip4][..tcp] [..192.168.1.103][54117] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + end: [....51] [ip4][..tcp] [..192.168.1.103][54118] -> [203.205.151.162][..443] + idle: [....44] [ip4][..udp] [..192.168.1.103][19041] -> [..192.168.1.254][...53] [DNS.QQ][Chat][Fun] + idle: [....47] [ip4][..udp] [..192.168.1.103][60562] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + idle: [....48] [ip4][..udp] [..192.168.1.103][35601] -> [..172.217.23.67][..443] [QUIC.Google][Web][Acceptable] + update: [....66] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][50577] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [.....3] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [....62] [ip4][..udp] [..192.168.1.100][49832] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....61] [ip4][..udp] [..192.168.1.100][54124] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....67] [ip4][..udp] [..192.168.1.100][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....49] [ip4][..udp] [..192.168.1.100][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [....65] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][49195] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [....59] [ip4][..udp] [..192.168.1.100][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [....63] [ip4][..udp] [..192.168.1.100][57401] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....60] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [....64] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][50440] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....68] [ip6][icmp6] [...............fe80::842:a3f3:a286:6c5b] -> [................................ff02::2] + detected: [....68] [ip6][icmp6] [...............fe80::842:a3f3:a286:6c5b] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + new: [....69] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [....69] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [....70] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ff86:6c5b] + detected: [....70] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ff86:6c5b] [ICMPV6][Network][Acceptable] + new: [....71] [ip6][icmp6] [...............fe80::842:a3f3:a286:6c5b] -> [...............................ff02::16] + detected: [....71] [ip6][icmp6] [...............fe80::842:a3f3:a286:6c5b] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + new: [....72] [ip4][..tcp] [..192.168.1.103][58040] -> [203.205.147.171][..443] + new: [....73] [ip4][..tcp] [..192.168.1.103][58041] -> [203.205.147.171][..443] + detected: [....72] [ip4][..tcp] [..192.168.1.103][58040] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....72] [ip4][..tcp] [..192.168.1.103][58040] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....72] [ip4][..tcp] [..192.168.1.103][58040] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + analyse: [....72] [ip4][..tcp] [..192.168.1.103][58040] -> [203.205.147.171][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.577| 0.182| 0.352] + [IAT(c->s)...: 0.000| 1.256| 0.148| 0.294][IAT(s->c)...: 0.000| 1.577| 0.234| 0.422] + [PKTLEN(c->s): 66.000|1494.000| 681.000| 612.600][PKTLEN(s->c): 66.000|1494.000| 357.400| 515.700] + [BINS(c->s)..: 7,0,0,1,0,0,0,1,1,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,1,0,0,0,0,0,5,0,0,0] + [BINS(s->c)..: 6,1,1,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0] + detection-update: [....72] [ip4][..tcp] [..192.168.1.103][58040] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + detected: [....73] [ip4][..tcp] [..192.168.1.103][58041] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....73] [ip4][..tcp] [..192.168.1.103][58041] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....73] [ip4][..tcp] [..192.168.1.103][58041] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + end: [....52] [ip4][..tcp] [..192.168.1.103][54119] -> [203.205.151.162][..443] [TLS.WeChat][Chat][Fun] + end: [....53] [ip4][..tcp] [..192.168.1.103][54120] -> [203.205.151.162][..443] + update: [....54] [ip4][..udp] [..192.168.1.103][60356] -> [..192.168.1.254][...53] [DNS.WeChat][Chat][Fun] + update: [....70] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ff86:6c5b] [ICMPV6][Network][Acceptable] + update: [....68] [ip6][icmp6] [...............fe80::842:a3f3:a286:6c5b] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + end: [....55] [ip4][..tcp] [..192.168.1.103][58036] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + update: [....66] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][50577] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [.....3] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [....69] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + update: [....62] [ip4][..udp] [..192.168.1.100][49832] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....61] [ip4][..udp] [..192.168.1.100][54124] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....67] [ip4][..udp] [..192.168.1.100][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + update: [....49] [ip4][..udp] [..192.168.1.100][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + update: [....65] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][49195] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + update: [.....2] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [....59] [ip4][..udp] [..192.168.1.100][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [....71] [ip6][icmp6] [...............fe80::842:a3f3:a286:6c5b] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + update: [....63] [ip4][..udp] [..192.168.1.100][57401] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + update: [....60] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [....64] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][50440] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + new: [....74] [ip4][..tcp] [..192.168.1.103][58042] -> [203.205.147.171][..443] + new: [....75] [ip4][..tcp] [..192.168.1.103][58043] -> [203.205.147.171][..443] + detected: [....74] [ip4][..tcp] [..192.168.1.103][58042] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....74] [ip4][..tcp] [..192.168.1.103][58042] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + detection-update: [....74] [ip4][..tcp] [..192.168.1.103][58042] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + guessed: [....56] [ip4][..tcp] [..192.168.1.103][58037] -> [203.205.147.171][..443] [TLS.Tencent][SocialNetwork][Acceptable] + end: [....56] [ip4][..tcp] [..192.168.1.103][58037] -> [203.205.147.171][..443] + update: [....70] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ff86:6c5b] [ICMPV6][Network][Acceptable] + update: [....54] [ip4][..udp] [..192.168.1.103][60356] -> [..192.168.1.254][...53] [DNS.WeChat][Chat][Fun] + update: [....68] [ip6][icmp6] [...............fe80::842:a3f3:a286:6c5b] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + DAEMON-EVENT: [Processed: 1552 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 30 / 75|skipped: 0|!detected: 0|guessed: 11|detection-updates: 63|updates: 72] + new: [....76] [ip4][..tcp] [..192.168.1.103][54183] -> [203.205.151.162][..443] [MIDSTREAM] + detected: [....76] [ip4][..tcp] [..192.168.1.103][54183] -> [203.205.151.162][..443] [TLS][Web][Safe] + new: [....77] [ip4][..tcp] [..192.168.1.103][54205] -> [.64.233.167.188][..443] [MIDSTREAM] + idle: [....66] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][50577] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + idle: [.....3] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + idle: [....69] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [....62] [ip4][..udp] [..192.168.1.100][49832] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....30] [ip4][....2] [..192.168.1.103] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + idle: [....29] [ip4][....2] [..192.168.1.100] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + idle: [....28] [ip4][....2] [..192.168.1.254] -> [......224.0.0.1] [IGMP][Network][Acceptable] + idle: [....61] [ip4][..udp] [..192.168.1.100][54124] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....67] [ip4][..udp] [..192.168.1.100][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [....49] [ip4][..udp] [..192.168.1.100][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [....65] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][49195] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + end: [....57] [ip4][..tcp] [..192.168.1.103][58038] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + guessed: [....58] [ip4][..tcp] [..192.168.1.103][58039] -> [203.205.147.171][..443] [TLS.Tencent][SocialNetwork][Acceptable] + end: [....58] [ip4][..tcp] [..192.168.1.103][58039] -> [203.205.147.171][..443] + end: [....72] [ip4][..tcp] [..192.168.1.103][58040] -> [203.205.147.171][..443] [TLS.WeChat][Chat][Fun] + end: [....73] [ip4][..tcp] [..192.168.1.103][58041] -> [203.205.147.171][..443] + end: [....74] [ip4][..tcp] [..192.168.1.103][58042] -> [203.205.147.171][..443] + guessed: [....75] [ip4][..tcp] [..192.168.1.103][58043] -> [203.205.147.171][..443] [TLS.Tencent][SocialNetwork][Acceptable] + idle: [....75] [ip4][..tcp] [..192.168.1.103][58043] -> [203.205.147.171][..443] + guessed: [....12] [ip4][..tcp] [..192.168.1.103][36017] -> [.64.233.167.188][.5228] [Google][Web][Acceptable] + idle: [....12] [ip4][..tcp] [..192.168.1.103][36017] -> [.64.233.167.188][.5228] + idle: [.....5] [ip4][..tcp] [..192.168.1.103][38657] -> [..172.217.22.14][..443] [TLS.Google][Web][Acceptable] + idle: [....70] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ff86:6c5b] [ICMPV6][Network][Acceptable] + idle: [....13] [ip4][..tcp] [203.205.151.162][..443] -> [..192.168.1.103][54058] [TLS][Web][Safe] + idle: [....59] [ip4][..udp] [..192.168.1.100][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + idle: [....54] [ip4][..udp] [..192.168.1.103][60356] -> [..192.168.1.254][...53] [DNS.WeChat][Chat][Fun] + idle: [....71] [ip6][icmp6] [...............fe80::842:a3f3:a286:6c5b] -> [...............................ff02::16] [ICMPV6][Network][Acceptable] + idle: [....68] [ip6][icmp6] [...............fe80::842:a3f3:a286:6c5b] -> [................................ff02::2] [ICMPV6][Network][Acceptable] + idle: [....63] [ip4][..udp] [..192.168.1.100][57401] -> [....224.0.0.252][.5355] [LLMNR][Network][Acceptable] + idle: [....60] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + idle: [....64] [ip6][..udp] [..............fe80::91f9:3df3:7436:6cd6][50440] -> [..............................ff02::1:3][.5355] [LLMNR][Network][Acceptable] + guessed: [....21] [ip4][..tcp] [..192.168.1.103][49787] -> [.216.58.205.142][..443] [TLS.Google][Web][Acceptable] + idle: [....21] [ip4][..tcp] [..192.168.1.103][49787] -> [.216.58.205.142][..443] + new: [....78] [ip4][..tcp] [..192.168.1.103][39207] -> [...95.101.34.34][...80] [MIDSTREAM] + new: [....79] [ip4][..tcp] [..192.168.1.103][34996] -> [...95.101.34.33][...80] [MIDSTREAM] + new: [....80] [ip4][..tcp] [..192.168.1.103][34999] -> [...95.101.34.33][...80] [MIDSTREAM] + new: [....81] [ip4][..tcp] [..192.168.1.103][35000] -> [...95.101.34.33][...80] [MIDSTREAM] + new: [....82] [ip4][..tcp] [..192.168.1.103][39231] -> [...95.101.34.34][...80] [MIDSTREAM] + new: [....83] [ip4][..tcp] [..192.168.1.103][34981] -> [...95.101.34.33][...80] [MIDSTREAM] + new: [....84] [ip4][..udp] [..192.168.1.103][37578] -> [193.204.114.233][..123] + detected: [....84] [ip4][..udp] [..192.168.1.103][37578] -> [193.204.114.233][..123] [NTP][System][Acceptable] + new: [....85] [ip4][..tcp] [..192.168.1.103][58143] -> [.216.58.205.131][..443] [MIDSTREAM] + new: [....86] [ip4][..tcp] [..192.168.1.103][39195] -> [...95.101.34.34][...80] [MIDSTREAM] + new: [....87] [ip4][..tcp] [..192.168.1.103][52020] -> [.95.101.180.179][...80] [MIDSTREAM] + new: [....88] [ip4][..tcp] [..192.168.1.103][58226] -> [203.205.147.171][..443] [MIDSTREAM] + new: [....89] [ip4][..udp] [..192.168.1.103][58165] -> [..192.168.1.254][...53] + detected: [....89] [ip4][..udp] [..192.168.1.103][58165] -> [..192.168.1.254][...53] [DNS.WeChat][Chat][Fun] + new: [....90] [ip4][..udp] [..192.168.1.103][43317] -> [..192.168.1.254][...53] + detected: [....90] [ip4][..udp] [..192.168.1.103][43317] -> [..192.168.1.254][...53] [DNS.WeChat][Chat][Fun] + new: [....91] [ip4][..udp] [..192.168.1.103][56367] -> [..192.168.1.254][...53] + detected: [....91] [ip4][..udp] [..192.168.1.103][56367] -> [..192.168.1.254][...53] [DNS.WeChat][Chat][Fun] + new: [....92] [ip4][..udp] [..192.168.1.103][33915] -> [..192.168.1.254][...53] + detected: [....92] [ip4][..udp] [..192.168.1.103][33915] -> [..192.168.1.254][...53] [DNS.WeChat][Chat][Fun] + new: [....93] [ip4][....2] [..192.168.1.254] -> [......224.0.0.1] + detected: [....93] [ip4][....2] [..192.168.1.254] -> [......224.0.0.1] [IGMP][Network][Acceptable] + new: [....94] [ip4][....2] [..192.168.1.103] -> [.....224.0.0.22] + detected: [....94] [ip4][....2] [..192.168.1.103] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + new: [....95] [ip4][....2] [..192.168.1.100] -> [.....224.0.0.22] + detected: [....95] [ip4][....2] [..192.168.1.100] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + new: [....96] [ip4][....2] [..192.168.1.108] -> [.....224.0.0.22] + detected: [....96] [ip4][....2] [..192.168.1.108] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + new: [....97] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] + detected: [....97] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....98] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] + detected: [....98] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [....84] [ip4][..udp] [..192.168.1.103][37578] -> [193.204.114.233][..123] [NTP][System][Acceptable] + update: [....90] [ip4][..udp] [..192.168.1.103][43317] -> [..192.168.1.254][...53] + update: [....89] [ip4][..udp] [..192.168.1.103][58165] -> [..192.168.1.254][...53] + update: [....91] [ip4][..udp] [..192.168.1.103][56367] -> [..192.168.1.254][...53] + update: [....92] [ip4][..udp] [..192.168.1.103][33915] -> [..192.168.1.254][...53] + detected: [....85] [ip4][..tcp] [..192.168.1.103][58143] -> [.216.58.205.131][..443] [TLS.Google][Web][Acceptable] + new: [....99] [ip4][..udp] [..192.168.1.103][45366] -> [..192.168.1.254][...53] + detected: [....99] [ip4][..udp] [..192.168.1.103][45366] -> [..192.168.1.254][...53] [DNS.WeChat][Chat][Fun] + new: [...100] [ip4][..udp] [..192.168.1.103][59567] -> [..192.168.1.254][...53] + detected: [...100] [ip4][..udp] [..192.168.1.103][59567] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + new: [...101] [ip4][..udp] [..192.168.1.103][42074] -> [..192.168.1.254][...53] + detected: [...101] [ip4][..udp] [..192.168.1.103][42074] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + new: [...102] [ip4][..udp] [..192.168.1.103][43705] -> [..192.168.1.254][...53] + detected: [...102] [ip4][..udp] [..192.168.1.103][43705] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + new: [...103] [ip4][..udp] [..192.168.1.103][44063] -> [..192.168.1.254][...53] + detected: [...103] [ip4][..udp] [..192.168.1.103][44063] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [...103] [ip4][..udp] [..192.168.1.103][44063] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + new: [...104] [ip4][..udp] [..192.168.1.100][..138] -> [..192.168.1.255][..138] + detected: [...104] [ip4][..udp] [..192.168.1.100][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + new: [...105] [ip4][..udp] [..192.168.1.103][42589] -> [..192.168.1.254][...53] + detected: [...105] [ip4][..udp] [..192.168.1.103][42589] -> [..192.168.1.254][...53] [DNS.Google][Web][Acceptable] + new: [...106] [ip4][..udp] [..192.168.1.103][42856] -> [..192.168.1.254][...53] + detected: [...106] [ip4][..udp] [..192.168.1.103][42856] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [...106] [ip4][..udp] [..192.168.1.103][42856] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + new: [...107] [ip4][..udp] [..192.168.1.103][44346] -> [..192.168.1.254][...53] + detected: [...107] [ip4][..udp] [..192.168.1.103][44346] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + new: [...108] [ip4][..udp] [..192.168.1.103][41759] -> [..192.168.1.254][...53] + detected: [...108] [ip4][..udp] [..192.168.1.103][41759] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + detection-update: [...108] [ip4][..udp] [..192.168.1.103][41759] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + new: [...109] [ip4][..udp] [..192.168.1.103][53515] -> [..192.168.1.254][...53] + detected: [...109] [ip4][..udp] [..192.168.1.103][53515] -> [..192.168.1.254][...53] [DNS][Network][Acceptable] + idle: [...105] [ip4][..udp] [..192.168.1.103][42589] -> [..192.168.1.254][...53] + idle: [....98] [ip6][..udp] [..............fe80::7a92:9cff:fe0f:a88e][.5353] -> [...............................ff02::fb][.5353] + end: [....85] [ip4][..tcp] [..192.168.1.103][58143] -> [.216.58.205.131][..443] + idle: [....84] [ip4][..udp] [..192.168.1.103][37578] -> [193.204.114.233][..123] [NTP][System][Acceptable] + idle: [...106] [ip4][..udp] [..192.168.1.103][42856] -> [..192.168.1.254][...53] + idle: [....96] [ip4][....2] [..192.168.1.108] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + idle: [....95] [ip4][....2] [..192.168.1.100] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + idle: [....94] [ip4][....2] [..192.168.1.103] -> [.....224.0.0.22] [IGMP][Network][Acceptable] + idle: [....93] [ip4][....2] [..192.168.1.254] -> [......224.0.0.1] [IGMP][Network][Acceptable] + guessed: [....87] [ip4][..tcp] [..192.168.1.103][52020] -> [.95.101.180.179][...80] [HTTP][Web][Acceptable] + end: [....87] [ip4][..tcp] [..192.168.1.103][52020] -> [.95.101.180.179][...80] + idle: [...100] [ip4][..udp] [..192.168.1.103][59567] -> [..192.168.1.254][...53] + idle: [...104] [ip4][..udp] [..192.168.1.100][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] + RISK: Unsafe Protocol + idle: [...109] [ip4][..udp] [..192.168.1.103][53515] -> [..192.168.1.254][...53] + idle: [....90] [ip4][..udp] [..192.168.1.103][43317] -> [..192.168.1.254][...53] + idle: [....99] [ip4][..udp] [..192.168.1.103][45366] -> [..192.168.1.254][...53] + idle: [....97] [ip4][..udp] [..192.168.1.103][.5353] -> [....224.0.0.251][.5353] + guessed: [....88] [ip4][..tcp] [..192.168.1.103][58226] -> [203.205.147.171][..443] [TLS.Tencent][SocialNetwork][Acceptable] + end: [....88] [ip4][..tcp] [..192.168.1.103][58226] -> [203.205.147.171][..443] + idle: [....76] [ip4][..tcp] [..192.168.1.103][54183] -> [203.205.151.162][..443] + idle: [...102] [ip4][..udp] [..192.168.1.103][43705] -> [..192.168.1.254][...53] + idle: [...108] [ip4][..udp] [..192.168.1.103][41759] -> [..192.168.1.254][...53] + idle: [....89] [ip4][..udp] [..192.168.1.103][58165] -> [..192.168.1.254][...53] + idle: [...103] [ip4][..udp] [..192.168.1.103][44063] -> [..192.168.1.254][...53] + idle: [....91] [ip4][..udp] [..192.168.1.103][56367] -> [..192.168.1.254][...53] + idle: [...101] [ip4][..udp] [..192.168.1.103][42074] -> [..192.168.1.254][...53] + idle: [....92] [ip4][..udp] [..192.168.1.103][33915] -> [..192.168.1.254][...53] + idle: [...107] [ip4][..udp] [..192.168.1.103][44346] -> [..192.168.1.254][...53] + guessed: [....83] [ip4][..tcp] [..192.168.1.103][34981] -> [...95.101.34.33][...80] [HTTP][Web][Acceptable] + end: [....83] [ip4][..tcp] [..192.168.1.103][34981] -> [...95.101.34.33][...80] + guessed: [....79] [ip4][..tcp] [..192.168.1.103][34996] -> [...95.101.34.33][...80] [HTTP][Web][Acceptable] + end: [....79] [ip4][..tcp] [..192.168.1.103][34996] -> [...95.101.34.33][...80] + guessed: [....80] [ip4][..tcp] [..192.168.1.103][34999] -> [...95.101.34.33][...80] [HTTP][Web][Acceptable] + end: [....80] [ip4][..tcp] [..192.168.1.103][34999] -> [...95.101.34.33][...80] + guessed: [....81] [ip4][..tcp] [..192.168.1.103][35000] -> [...95.101.34.33][...80] [HTTP][Web][Acceptable] + end: [....81] [ip4][..tcp] [..192.168.1.103][35000] -> [...95.101.34.33][...80] + guessed: [....77] [ip4][..tcp] [..192.168.1.103][54205] -> [.64.233.167.188][..443] [TLS.Google][Web][Acceptable] + idle: [....77] [ip4][..tcp] [..192.168.1.103][54205] -> [.64.233.167.188][..443] + guessed: [....86] [ip4][..tcp] [..192.168.1.103][39195] -> [...95.101.34.34][...80] [HTTP][Web][Acceptable] + end: [....86] [ip4][..tcp] [..192.168.1.103][39195] -> [...95.101.34.34][...80] + guessed: [....78] [ip4][..tcp] [..192.168.1.103][39207] -> [...95.101.34.34][...80] [HTTP][Web][Acceptable] + end: [....78] [ip4][..tcp] [..192.168.1.103][39207] -> [...95.101.34.34][...80] + guessed: [....82] [ip4][..tcp] [..192.168.1.103][39231] -> [...95.101.34.34][...80] [HTTP][Web][Acceptable] + end: [....82] [ip4][..tcp] [..192.168.1.103][39231] -> [...95.101.34.34][...80] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/weibo.pcap.out b/test/results/flow-info/weibo.pcap.out new file mode 100644 index 000000000..4ddbf10fc --- /dev/null +++ b/test/results/flow-info/weibo.pcap.out @@ -0,0 +1,193 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [..216.58.210.14][..443] -> [..192.168.1.105][49361] + new: [.....2] [ip4][..tcp] [..192.168.1.105][58480] -> [..216.58.214.78][..443] [MIDSTREAM] + new: [.....3] [ip4][..tcp] [..192.168.1.105][58481] -> [..216.58.214.78][..443] [MIDSTREAM] + new: [.....4] [ip4][..udp] [..192.168.1.105][53656] -> [.216.58.210.227][..443] + new: [.....5] [ip4][..udp] [..192.168.1.105][54988] -> [....192.168.1.1][...53] + detected: [.....5] [ip4][..udp] [..192.168.1.105][54988] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [.....5] [ip4][..udp] [..192.168.1.105][54988] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [.....6] [ip4][..tcp] [..192.168.1.105][59119] -> [.114.134.80.162][...80] + new: [.....7] [ip4][..tcp] [..192.168.1.105][59120] -> [.114.134.80.162][...80] + new: [.....8] [ip4][..tcp] [..192.168.1.105][59121] -> [.114.134.80.162][...80] + new: [.....9] [ip4][..tcp] [..192.168.1.105][35154] -> [.216.58.210.206][..443] [MIDSTREAM] + detected: [.....6] [ip4][..tcp] [..192.168.1.105][59119] -> [.114.134.80.162][...80] [HTTP][Web][Acceptable] + new: [....10] [ip4][..udp] [..192.168.1.105][.7148] -> [....192.168.1.1][...53] + detected: [....10] [ip4][..udp] [..192.168.1.105][.7148] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + detection-update: [....10] [ip4][..udp] [..192.168.1.105][.7148] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + new: [....11] [ip4][..tcp] [..192.168.1.105][51698] -> [.93.188.134.137][...80] + detected: [....11] [ip4][..tcp] [..192.168.1.105][51698] -> [.93.188.134.137][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + new: [....12] [ip4][..tcp] [..192.168.1.105][37802] -> [..216.58.212.69][..443] [MIDSTREAM] + new: [....13] [ip4][..tcp] [..192.168.1.105][40440] -> [.54.225.163.210][..443] [MIDSTREAM] + new: [....14] [ip4][..tcp] [..192.168.1.105][34699] -> [..216.58.212.65][..443] [MIDSTREAM] + detection-update: [....11] [ip4][..tcp] [..192.168.1.105][51698] -> [.93.188.134.137][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + analyse: [....11] [ip4][..tcp] [..192.168.1.105][51698] -> [.93.188.134.137][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.482| 0.042| 0.114] + [IAT(c->s)...: 0.000| 0.482| 0.041| 0.119][IAT(s->c)...: 0.000| 0.454| 0.042| 0.108] + [PKTLEN(c->s): 66.000| 516.000| 103.600| 106.700][PKTLEN(s->c): 66.000|2938.000| 820.600| 832.600] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 7,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,1] + new: [....15] [ip4][..udp] [..192.168.1.105][53543] -> [....192.168.1.1][...53] + detected: [....15] [ip4][..udp] [..192.168.1.105][53543] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + detection-update: [....15] [ip4][..udp] [..192.168.1.105][53543] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + RISK: Suspicious DNS Traffic + new: [....16] [ip4][..tcp] [..192.168.1.105][35803] -> [.93.188.134.246][...80] + new: [....17] [ip4][..tcp] [..192.168.1.105][35804] -> [.93.188.134.246][...80] + new: [....18] [ip4][..tcp] [..192.168.1.105][35805] -> [.93.188.134.246][...80] + detected: [....16] [ip4][..tcp] [..192.168.1.105][35803] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + detected: [....17] [ip4][..tcp] [..192.168.1.105][35804] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + detected: [....18] [ip4][..tcp] [..192.168.1.105][35805] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + new: [....19] [ip4][..udp] [..192.168.1.105][41352] -> [....192.168.1.1][...53] + detected: [....19] [ip4][..udp] [..192.168.1.105][41352] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + analyse: [....17] [ip4][..tcp] [..192.168.1.105][35804] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.314| 0.038| 0.072] + [IAT(c->s)...: 0.000| 0.314| 0.039| 0.076][IAT(s->c)...: 0.000| 0.283| 0.037| 0.067] + [PKTLEN(c->s): 66.000| 498.000| 98.800| 103.200][PKTLEN(s->c): 66.000|2938.000|1322.700| 789.100] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,2] + analyse: [....16] [ip4][..tcp] [..192.168.1.105][35803] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.401| 0.041| 0.093] + [IAT(c->s)...: 0.000| 0.401| 0.042| 0.098][IAT(s->c)...: 0.003| 0.372| 0.040| 0.088] + [PKTLEN(c->s): 66.000| 486.000| 96.500| 100.700][PKTLEN(s->c): 66.000|4374.000|1599.100|1251.400] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,3] + new: [....20] [ip4][..udp] [..192.168.1.105][18035] -> [....192.168.1.1][...53] + detected: [....20] [ip4][..udp] [..192.168.1.105][18035] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + new: [....21] [ip4][..udp] [..192.168.1.105][50640] -> [....192.168.1.1][...53] + detected: [....21] [ip4][..udp] [..192.168.1.105][50640] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name + new: [....22] [ip4][..udp] [..192.168.1.105][51440] -> [....192.168.1.1][...53] + detected: [....22] [ip4][..udp] [..192.168.1.105][51440] -> [....192.168.1.1][...53] [DNS.Alibaba][Web][Acceptable] + new: [....23] [ip4][..udp] [..192.168.1.105][53466] -> [....192.168.1.1][...53] + detected: [....23] [ip4][..udp] [..192.168.1.105][53466] -> [....192.168.1.1][...53] [DNS.Alibaba][Web][Acceptable] + new: [....24] [ip4][..udp] [..192.168.1.105][33822] -> [....192.168.1.1][...53] + detected: [....24] [ip4][..udp] [..192.168.1.105][33822] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....25] [ip4][..tcp] [..192.168.1.105][35806] -> [.93.188.134.246][...80] + new: [....26] [ip4][..tcp] [..192.168.1.105][35807] -> [.93.188.134.246][...80] + new: [....27] [ip4][..tcp] [..192.168.1.105][35808] -> [.93.188.134.246][...80] + new: [....28] [ip4][..tcp] [..192.168.1.105][35809] -> [.93.188.134.246][...80] + detected: [....25] [ip4][..tcp] [..192.168.1.105][35806] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + detected: [....26] [ip4][..tcp] [..192.168.1.105][35807] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + detected: [....28] [ip4][..tcp] [..192.168.1.105][35809] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + detection-update: [....20] [ip4][..udp] [..192.168.1.105][18035] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + new: [....29] [ip4][..udp] [..192.168.1.105][11798] -> [....192.168.1.1][...53] + detected: [....29] [ip4][..udp] [..192.168.1.105][11798] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + new: [....30] [ip4][..tcp] [..192.168.1.105][42275] -> [...222.73.28.96][...80] + detection-update: [....19] [ip4][..udp] [..192.168.1.105][41352] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + new: [....31] [ip4][..udp] [..192.168.1.105][16804] -> [....192.168.1.1][...53] + detected: [....31] [ip4][..udp] [..192.168.1.105][16804] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + new: [....32] [ip4][..tcp] [..192.168.1.105][35811] -> [.93.188.134.246][...80] + detection-update: [....22] [ip4][..udp] [..192.168.1.105][51440] -> [....192.168.1.1][...53] [DNS.Alibaba][Web][Acceptable] + new: [....33] [ip4][..udp] [..192.168.1.105][50533] -> [....192.168.1.1][...53] + detected: [....33] [ip4][..udp] [..192.168.1.105][50533] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + new: [....34] [ip4][..tcp] [..192.168.1.105][50827] -> [...47.89.65.229][..443] + detection-update: [....23] [ip4][..udp] [..192.168.1.105][53466] -> [....192.168.1.1][...53] [DNS.Alibaba][Web][Acceptable] + new: [....35] [ip4][..tcp] [..192.168.1.105][48352] -> [..140.205.174.1][..443] + new: [....36] [ip4][..tcp] [..192.168.1.105][48353] -> [..140.205.174.1][..443] + new: [....37] [ip4][..tcp] [..192.168.1.105][42280] -> [...222.73.28.96][...80] + new: [....38] [ip4][..tcp] [..192.168.1.105][50831] -> [...47.89.65.229][..443] + new: [....39] [ip4][..tcp] [..192.168.1.105][48356] -> [..140.205.174.1][..443] + detected: [....32] [ip4][..tcp] [..192.168.1.105][35811] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + detected: [....34] [ip4][..tcp] [..192.168.1.105][50827] -> [...47.89.65.229][..443] [TLS.Alibaba][Web][Acceptable] + detection-update: [....21] [ip4][..udp] [..192.168.1.105][50640] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + new: [....40] [ip4][..tcp] [..192.168.1.105][52271] -> [..42.156.184.19][..443] + new: [....41] [ip4][..tcp] [..192.168.1.105][52272] -> [..42.156.184.19][..443] + detection-update: [....24] [ip4][..udp] [..192.168.1.105][33822] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....42] [ip4][..tcp] [..192.168.1.105][47721] -> [.140.205.170.63][..443] + detected: [....30] [ip4][..tcp] [..192.168.1.105][42275] -> [...222.73.28.96][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + new: [....43] [ip4][..tcp] [..192.168.1.105][52274] -> [..42.156.184.19][..443] + new: [....44] [ip4][..tcp] [..192.168.1.105][47723] -> [.140.205.170.63][..443] + analyse: [....18] [ip4][..tcp] [..192.168.1.105][35805] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.439| 0.087| 0.119] + [IAT(c->s)...: 0.000| 0.376| 0.090| 0.116][IAT(s->c)...: 0.003| 0.439| 0.084| 0.122] + [PKTLEN(c->s): 66.000| 525.000| 123.800| 142.700][PKTLEN(s->c): 66.000|1502.000| 932.100| 568.100] + [BINS(c->s)..: 14,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,0,0,0,0,0,0,0,0,0,0,0,0,2,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0] + analyse: [....26] [ip4][..tcp] [..192.168.1.105][35807] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.184| 0.031| 0.055] + [IAT(c->s)...: 0.000| 0.184| 0.032| 0.057][IAT(s->c)...: 0.002| 0.162| 0.030| 0.052] + [PKTLEN(c->s): 66.000| 550.000| 97.500| 116.900][PKTLEN(s->c): 66.000|1502.000|1196.900| 539.000] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,0,0,0] + analyse: [....28] [ip4][..tcp] [..192.168.1.105][35809] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.252| 0.036| 0.056] + [IAT(c->s)...: 0.000| 0.252| 0.037| 0.063][IAT(s->c)...: 0.003| 0.181| 0.035| 0.047] + [PKTLEN(c->s): 66.000| 539.000| 96.800| 114.200][PKTLEN(s->c): 66.000|1502.000|1198.600| 536.700] + [BINS(c->s)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,0,0,0] + idle: [....30] [ip4][..tcp] [..192.168.1.105][42275] -> [...222.73.28.96][...80] + guessed: [....37] [ip4][..tcp] [..192.168.1.105][42280] -> [...222.73.28.96][...80] [HTTP][Web][Acceptable] + idle: [....37] [ip4][..tcp] [..192.168.1.105][42280] -> [...222.73.28.96][...80] + idle: [....20] [ip4][..udp] [..192.168.1.105][18035] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + idle: [.....5] [ip4][..udp] [..192.168.1.105][54988] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + guessed: [....12] [ip4][..tcp] [..192.168.1.105][37802] -> [..216.58.212.69][..443] [TLS.Google][Web][Acceptable] + idle: [....12] [ip4][..tcp] [..192.168.1.105][37802] -> [..216.58.212.69][..443] + idle: [....16] [ip4][..tcp] [..192.168.1.105][35803] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + idle: [....17] [ip4][..tcp] [..192.168.1.105][35804] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + idle: [....18] [ip4][..tcp] [..192.168.1.105][35805] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + idle: [....25] [ip4][..tcp] [..192.168.1.105][35806] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + idle: [....26] [ip4][..tcp] [..192.168.1.105][35807] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + guessed: [....27] [ip4][..tcp] [..192.168.1.105][35808] -> [.93.188.134.246][...80] [HTTP][Web][Acceptable] + idle: [....27] [ip4][..tcp] [..192.168.1.105][35808] -> [.93.188.134.246][...80] + idle: [....28] [ip4][..tcp] [..192.168.1.105][35809] -> [.93.188.134.246][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + idle: [....32] [ip4][..tcp] [..192.168.1.105][35811] -> [.93.188.134.246][...80] + guessed: [....13] [ip4][..tcp] [..192.168.1.105][40440] -> [.54.225.163.210][..443] [TLS.AmazonAWS][Cloud][Acceptable] + idle: [....13] [ip4][..tcp] [..192.168.1.105][40440] -> [.54.225.163.210][..443] + guessed: [.....2] [ip4][..tcp] [..192.168.1.105][58480] -> [..216.58.214.78][..443] [TLS.Google][Web][Acceptable] + idle: [.....2] [ip4][..tcp] [..192.168.1.105][58480] -> [..216.58.214.78][..443] + guessed: [.....3] [ip4][..tcp] [..192.168.1.105][58481] -> [..216.58.214.78][..443] [TLS.Google][Web][Acceptable] + idle: [.....3] [ip4][..tcp] [..192.168.1.105][58481] -> [..216.58.214.78][..443] + idle: [....34] [ip4][..tcp] [..192.168.1.105][50827] -> [...47.89.65.229][..443] + guessed: [....38] [ip4][..tcp] [..192.168.1.105][50831] -> [...47.89.65.229][..443] [TLS][Web][Safe] + idle: [....38] [ip4][..tcp] [..192.168.1.105][50831] -> [...47.89.65.229][..443] + guessed: [....42] [ip4][..tcp] [..192.168.1.105][47721] -> [.140.205.170.63][..443] [TLS][Web][Safe] + idle: [....42] [ip4][..tcp] [..192.168.1.105][47721] -> [.140.205.170.63][..443] + guessed: [....44] [ip4][..tcp] [..192.168.1.105][47723] -> [.140.205.170.63][..443] [TLS][Web][Safe] + idle: [....44] [ip4][..tcp] [..192.168.1.105][47723] -> [.140.205.170.63][..443] + idle: [....23] [ip4][..udp] [..192.168.1.105][53466] -> [....192.168.1.1][...53] [DNS.Alibaba][Web][Acceptable] + idle: [....22] [ip4][..udp] [..192.168.1.105][51440] -> [....192.168.1.1][...53] [DNS.Alibaba][Web][Acceptable] + guessed: [....40] [ip4][..tcp] [..192.168.1.105][52271] -> [..42.156.184.19][..443] [TLS][Web][Safe] + idle: [....40] [ip4][..tcp] [..192.168.1.105][52271] -> [..42.156.184.19][..443] + guessed: [....41] [ip4][..tcp] [..192.168.1.105][52272] -> [..42.156.184.19][..443] [TLS][Web][Safe] + idle: [....41] [ip4][..tcp] [..192.168.1.105][52272] -> [..42.156.184.19][..443] + guessed: [....43] [ip4][..tcp] [..192.168.1.105][52274] -> [..42.156.184.19][..443] [TLS][Web][Safe] + idle: [....43] [ip4][..tcp] [..192.168.1.105][52274] -> [..42.156.184.19][..443] + idle: [....15] [ip4][..udp] [..192.168.1.105][53543] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + RISK: Suspicious DNS Traffic + idle: [....19] [ip4][..udp] [..192.168.1.105][41352] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + idle: [....31] [ip4][..udp] [..192.168.1.105][16804] -> [....192.168.1.1][...53] + guessed: [....14] [ip4][..tcp] [..192.168.1.105][34699] -> [..216.58.212.65][..443] [TLS.Google][Web][Acceptable] + idle: [....14] [ip4][..tcp] [..192.168.1.105][34699] -> [..216.58.212.65][..443] + guessed: [....35] [ip4][..tcp] [..192.168.1.105][48352] -> [..140.205.174.1][..443] [TLS][Web][Safe] + idle: [....35] [ip4][..tcp] [..192.168.1.105][48352] -> [..140.205.174.1][..443] + guessed: [....36] [ip4][..tcp] [..192.168.1.105][48353] -> [..140.205.174.1][..443] [TLS][Web][Safe] + idle: [....36] [ip4][..tcp] [..192.168.1.105][48353] -> [..140.205.174.1][..443] + guessed: [....39] [ip4][..tcp] [..192.168.1.105][48356] -> [..140.205.174.1][..443] [TLS][Web][Safe] + idle: [....39] [ip4][..tcp] [..192.168.1.105][48356] -> [..140.205.174.1][..443] + idle: [....10] [ip4][..udp] [..192.168.1.105][.7148] -> [....192.168.1.1][...53] [DNS.Sina(Weibo)][SocialNetwork][Fun] + idle: [....24] [ip4][..udp] [..192.168.1.105][33822] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + guessed: [.....1] [ip4][..udp] [..216.58.210.14][..443] -> [..192.168.1.105][49361] [Google][Web][Acceptable] + idle: [.....1] [ip4][..udp] [..216.58.210.14][..443] -> [..192.168.1.105][49361] + end: [.....6] [ip4][..tcp] [..192.168.1.105][59119] -> [.114.134.80.162][...80] [HTTP][Web][Acceptable] + guessed: [.....7] [ip4][..tcp] [..192.168.1.105][59120] -> [.114.134.80.162][...80] [HTTP][Web][Acceptable] + idle: [.....7] [ip4][..tcp] [..192.168.1.105][59120] -> [.114.134.80.162][...80] + guessed: [.....8] [ip4][..tcp] [..192.168.1.105][59121] -> [.114.134.80.162][...80] [HTTP][Web][Acceptable] + idle: [.....8] [ip4][..tcp] [..192.168.1.105][59121] -> [.114.134.80.162][...80] + guessed: [.....9] [ip4][..tcp] [..192.168.1.105][35154] -> [.216.58.210.206][..443] [TLS.Google][Web][Acceptable] + idle: [.....9] [ip4][..tcp] [..192.168.1.105][35154] -> [.216.58.210.206][..443] + guessed: [.....4] [ip4][..udp] [..192.168.1.105][53656] -> [.216.58.210.227][..443] [Google][Web][Acceptable] + idle: [.....4] [ip4][..udp] [..192.168.1.105][53656] -> [.216.58.210.227][..443] + idle: [....33] [ip4][..udp] [..192.168.1.105][50533] -> [....192.168.1.1][...53] + idle: [....11] [ip4][..tcp] [..192.168.1.105][51698] -> [.93.188.134.137][...80] [HTTP.Sina(Weibo)][SocialNetwork][Fun] + idle: [....21] [ip4][..udp] [..192.168.1.105][50640] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + RISK: Suspicious DGA Domain name, Risky Domain Name + idle: [....29] [ip4][..udp] [..192.168.1.105][11798] -> [....192.168.1.1][...53] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/whatsapp.pcap.out b/test/results/flow-info/whatsapp.pcap.out new file mode 100644 index 000000000..f56009bcf --- /dev/null +++ b/test/results/flow-info/whatsapp.pcap.out @@ -0,0 +1,382 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.2.100][44804] -> [..179.60.195.49][.5222] + detected: [.....1] [ip4][..tcp] [..192.168.2.100][44804] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 9 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [..192.168.2.100][40084] -> [..179.60.195.49][.5222] + detected: [.....2] [ip4][..tcp] [..192.168.2.100][40084] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [.....3] [ip4][..tcp] [..192.168.2.100][42272] -> [..179.60.195.49][.5222] + detected: [.....3] [ip4][..tcp] [..192.168.2.100][42272] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 25 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 3|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....4] [ip4][..tcp] [..192.168.2.100][42436] -> [..179.60.195.49][.5222] + detected: [.....4] [ip4][..tcp] [..192.168.2.100][42436] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 33 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..tcp] [..192.168.2.100][40178] -> [..179.60.195.49][.5222] + detected: [.....5] [ip4][..tcp] [..192.168.2.100][40178] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [.....6] [ip4][..tcp] [..192.168.2.100][42646] -> [..179.60.195.49][.5222] + detected: [.....6] [ip4][..tcp] [..192.168.2.100][42646] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [.....7] [ip4][..tcp] [..192.168.2.100][40204] -> [..179.60.195.49][.5222] + detected: [.....7] [ip4][..tcp] [..192.168.2.100][40204] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 57 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 7 / 7|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....8] [ip4][..tcp] [..192.168.2.100][45932] -> [..179.60.195.49][.5222] + detected: [.....8] [ip4][..tcp] [..192.168.2.100][45932] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [.....1] [ip4][..tcp] [..192.168.2.100][44804] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 65 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 7 / 8|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....9] [ip4][..tcp] [..192.168.2.100][40954] -> [..179.60.195.49][.5222] + detected: [.....9] [ip4][..tcp] [..192.168.2.100][40954] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [.....2] [ip4][..tcp] [..192.168.2.100][40084] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [.....5] [ip4][..tcp] [..192.168.2.100][40178] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [.....3] [ip4][..tcp] [..192.168.2.100][42272] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [.....4] [ip4][..tcp] [..192.168.2.100][42436] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 73 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 9|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....10] [ip4][..tcp] [..192.168.2.100][41214] -> [..179.60.195.49][.5222] + detected: [....10] [ip4][..tcp] [..192.168.2.100][41214] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [.....6] [ip4][..tcp] [..192.168.2.100][42646] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [.....8] [ip4][..tcp] [..192.168.2.100][45932] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [.....7] [ip4][..tcp] [..192.168.2.100][40204] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....11] [ip4][..tcp] [..192.168.2.100][49026] -> [..179.60.195.33][.5222] + detected: [....11] [ip4][..tcp] [..192.168.2.100][49026] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 89 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 11|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....12] [ip4][..tcp] [..192.168.2.100][41288] -> [..179.60.195.49][.5222] + detected: [....12] [ip4][..tcp] [..192.168.2.100][41288] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 97 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 12|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....13] [ip4][..tcp] [..192.168.2.100][41610] -> [..179.60.195.49][.5222] + detected: [....13] [ip4][..tcp] [..192.168.2.100][41610] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....11] [ip4][..tcp] [..192.168.2.100][49026] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [.....9] [ip4][..tcp] [..192.168.2.100][40954] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....10] [ip4][..tcp] [..192.168.2.100][41214] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 105 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 13|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....14] [ip4][..tcp] [..192.168.2.100][41808] -> [..179.60.195.49][.5222] + detected: [....14] [ip4][..tcp] [..192.168.2.100][41808] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....12] [ip4][..tcp] [..192.168.2.100][41288] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 113 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 14|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....15] [ip4][..tcp] [..192.168.2.100][37482] -> [..179.60.195.33][.5222] + detected: [....15] [ip4][..tcp] [..192.168.2.100][37482] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 121 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 15|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....16] [ip4][..tcp] [..192.168.2.100][37582] -> [..179.60.195.33][.5222] + detected: [....16] [ip4][..tcp] [..192.168.2.100][37582] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 129 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 16|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....17] [ip4][..tcp] [..192.168.2.100][45754] -> [..179.60.195.49][.5222] + detected: [....17] [ip4][..tcp] [..192.168.2.100][45754] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....13] [ip4][..tcp] [..192.168.2.100][41610] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 137 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 17|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....18] [ip4][..tcp] [..192.168.2.100][45824] -> [..179.60.195.49][.5222] + detected: [....18] [ip4][..tcp] [..192.168.2.100][45824] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 145 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 18|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....19] [ip4][..tcp] [..192.168.2.100][46406] -> [..179.60.195.49][.5222] + detected: [....19] [ip4][..tcp] [..192.168.2.100][46406] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....15] [ip4][..tcp] [..192.168.2.100][37482] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....17] [ip4][..tcp] [..192.168.2.100][45754] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....16] [ip4][..tcp] [..192.168.2.100][37582] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....18] [ip4][..tcp] [..192.168.2.100][45824] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....14] [ip4][..tcp] [..192.168.2.100][41808] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 153 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 19|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....20] [ip4][..tcp] [..192.168.2.100][40224] -> [....31.13.83.49][.5222] + detected: [....20] [ip4][..tcp] [..192.168.2.100][40224] -> [....31.13.83.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....21] [ip4][..tcp] [..192.168.2.100][45470] -> [..179.60.195.33][.5222] + detected: [....21] [ip4][..tcp] [..192.168.2.100][45470] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 169 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 21|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....22] [ip4][..tcp] [..192.168.2.100][43084] -> [..179.60.195.49][.5222] + detected: [....22] [ip4][..tcp] [..192.168.2.100][43084] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....23] [ip4][..tcp] [..192.168.2.100][45602] -> [..179.60.195.33][.5222] + detected: [....23] [ip4][..tcp] [..192.168.2.100][45602] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 184 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 23|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....24] [ip4][..tcp] [..192.168.2.100][43152] -> [..179.60.195.49][.5222] + detected: [....24] [ip4][..tcp] [..192.168.2.100][43152] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....25] [ip4][..tcp] [..192.168.2.100][46042] -> [..179.60.195.33][.5222] + detected: [....25] [ip4][..tcp] [..192.168.2.100][46042] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 200 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 7 / 25|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....26] [ip4][..tcp] [..192.168.2.100][43206] -> [..179.60.195.49][.5222] + detected: [....26] [ip4][..tcp] [..192.168.2.100][43206] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....19] [ip4][..tcp] [..192.168.2.100][46406] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 208 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 7 / 26|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....27] [ip4][..tcp] [..192.168.2.100][43230] -> [..179.60.195.49][.5222] + detected: [....27] [ip4][..tcp] [..192.168.2.100][43230] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 216 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 8 / 27|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....28] [ip4][..tcp] [..192.168.2.100][46468] -> [..179.60.195.33][.5222] + detected: [....28] [ip4][..tcp] [..192.168.2.100][46468] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....21] [ip4][..tcp] [..192.168.2.100][45470] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....20] [ip4][..tcp] [..192.168.2.100][40224] -> [....31.13.83.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 224 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 7 / 28|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....29] [ip4][..tcp] [..192.168.2.100][47360] -> [..179.60.195.33][.5222] + detected: [....29] [ip4][..tcp] [..192.168.2.100][47360] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....22] [ip4][..tcp] [..192.168.2.100][43084] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....24] [ip4][..tcp] [..192.168.2.100][43152] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....26] [ip4][..tcp] [..192.168.2.100][43206] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....23] [ip4][..tcp] [..192.168.2.100][45602] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....25] [ip4][..tcp] [..192.168.2.100][46042] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 232 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 29|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....30] [ip4][..tcp] [..192.168.2.100][39828] -> [..179.60.195.33][.5222] + detected: [....30] [ip4][..tcp] [..192.168.2.100][39828] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....27] [ip4][..tcp] [..192.168.2.100][43230] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....28] [ip4][..tcp] [..192.168.2.100][46468] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 240 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 30|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....31] [ip4][..tcp] [..192.168.2.100][40108] -> [..179.60.195.33][.5222] + detected: [....31] [ip4][..tcp] [..192.168.2.100][40108] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....29] [ip4][..tcp] [..192.168.2.100][47360] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 249 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 31|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....32] [ip4][..tcp] [..192.168.2.100][43954] -> [..179.60.195.49][.5222] + detected: [....32] [ip4][..tcp] [..192.168.2.100][43954] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....33] [ip4][..tcp] [..192.168.2.100][49096] -> [....31.13.93.54][.5222] + detected: [....33] [ip4][..tcp] [..192.168.2.100][49096] -> [....31.13.93.54][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 265 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 33|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....34] [ip4][..tcp] [..192.168.2.100][43978] -> [..179.60.195.49][.5222] + detected: [....34] [ip4][..tcp] [..192.168.2.100][43978] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 273 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 34|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....35] [ip4][..tcp] [..192.168.2.100][40990] -> [..179.60.195.33][.5222] + detected: [....35] [ip4][..tcp] [..192.168.2.100][40990] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....30] [ip4][..tcp] [..192.168.2.100][39828] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....31] [ip4][..tcp] [..192.168.2.100][40108] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 281 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 35|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....36] [ip4][..tcp] [..192.168.2.100][45290] -> [..179.60.195.49][.5222] + detected: [....36] [ip4][..tcp] [..192.168.2.100][45290] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 289 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 36|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....37] [ip4][..tcp] [..192.168.2.100][51544] -> [..179.60.195.49][.5222] + detected: [....37] [ip4][..tcp] [..192.168.2.100][51544] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....33] [ip4][..tcp] [..192.168.2.100][49096] -> [....31.13.93.54][.5222] [WhatsApp][Chat][Acceptable] + idle: [....32] [ip4][..tcp] [..192.168.2.100][43954] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 297 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 37|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....38] [ip4][..tcp] [..192.168.2.100][47948] -> [..179.60.195.49][.5222] + detected: [....38] [ip4][..tcp] [..192.168.2.100][47948] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....39] [ip4][..tcp] [..192.168.2.100][51724] -> [..179.60.195.49][.5222] + detected: [....39] [ip4][..tcp] [..192.168.2.100][51724] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....34] [ip4][..tcp] [..192.168.2.100][43978] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 312 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 39|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....40] [ip4][..tcp] [..192.168.2.100][45334] -> [..179.60.195.49][.5222] + detected: [....40] [ip4][..tcp] [..192.168.2.100][45334] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....35] [ip4][..tcp] [..192.168.2.100][40990] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + new: [....41] [ip4][..tcp] [..192.168.2.100][52152] -> [..179.60.195.49][.5222] + detected: [....41] [ip4][..tcp] [..192.168.2.100][52152] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....36] [ip4][..tcp] [..192.168.2.100][45290] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 328 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 41|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....42] [ip4][..tcp] [..192.168.2.100][41664] -> [..179.60.195.33][.5222] + detected: [....42] [ip4][..tcp] [..192.168.2.100][41664] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + new: [....43] [ip4][..tcp] [..192.168.2.100][52294] -> [..179.60.195.49][.5222] + detected: [....43] [ip4][..tcp] [..192.168.2.100][52294] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....37] [ip4][..tcp] [..192.168.2.100][51544] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 344 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 6 / 43|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....44] [ip4][..tcp] [..192.168.2.100][41722] -> [..179.60.195.33][.5222] + detected: [....44] [ip4][..tcp] [..192.168.2.100][41722] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....39] [ip4][..tcp] [..192.168.2.100][51724] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....38] [ip4][..tcp] [..192.168.2.100][47948] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 352 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 44|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....45] [ip4][..tcp] [..192.168.2.100][48234] -> [..179.60.195.49][.5222] + detected: [....45] [ip4][..tcp] [..192.168.2.100][48234] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....40] [ip4][..tcp] [..192.168.2.100][45334] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....46] [ip4][..tcp] [..192.168.2.100][55038] -> [..179.60.195.49][.5222] + detected: [....46] [ip4][..tcp] [..192.168.2.100][55038] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....47] [ip4][..tcp] [..192.168.2.100][55476] -> [....31.13.70.50][.5222] + detected: [....47] [ip4][..tcp] [..192.168.2.100][55476] -> [....31.13.70.50][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 373 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 7 / 47|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....48] [ip4][..tcp] [..192.168.2.100][48538] -> [..179.60.195.49][.5222] + detected: [....48] [ip4][..tcp] [..192.168.2.100][48538] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....42] [ip4][..tcp] [..192.168.2.100][41664] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....44] [ip4][..tcp] [..192.168.2.100][41722] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....41] [ip4][..tcp] [..192.168.2.100][52152] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....43] [ip4][..tcp] [..192.168.2.100][52294] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 381 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 48|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....49] [ip4][..tcp] [..192.168.2.100][45850] -> [..179.60.195.49][.5222] + detected: [....49] [ip4][..tcp] [..192.168.2.100][45850] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....50] [ip4][..tcp] [..192.168.2.100][42622] -> [..179.60.195.33][.5222] + detected: [....50] [ip4][..tcp] [..192.168.2.100][42622] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....46] [ip4][..tcp] [..192.168.2.100][55038] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....47] [ip4][..tcp] [..192.168.2.100][55476] -> [....31.13.70.50][.5222] [WhatsApp][Chat][Acceptable] + idle: [....45] [ip4][..tcp] [..192.168.2.100][48234] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....51] [ip4][..tcp] [..192.168.2.100][58198] -> [..179.60.195.49][.5222] + detected: [....51] [ip4][..tcp] [..192.168.2.100][58198] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 405 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 51|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....52] [ip4][..tcp] [..192.168.2.100][42796] -> [..179.60.195.33][.5222] + detected: [....52] [ip4][..tcp] [..192.168.2.100][42796] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 413 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 52|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....53] [ip4][..tcp] [..192.168.2.100][43152] -> [..179.60.195.33][.5222] + detected: [....53] [ip4][..tcp] [..192.168.2.100][43152] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 421 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 6 / 53|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....54] [ip4][..tcp] [..192.168.2.100][46732] -> [..179.60.195.49][.5222] + detected: [....54] [ip4][..tcp] [..192.168.2.100][46732] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....55] [ip4][..tcp] [..192.168.2.100][58882] -> [..179.60.195.49][.5222] + detected: [....55] [ip4][..tcp] [..192.168.2.100][58882] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....56] [ip4][..tcp] [..192.168.2.100][46598] -> [..179.60.195.49][.5222] + detected: [....56] [ip4][..tcp] [..192.168.2.100][46598] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....50] [ip4][..tcp] [..192.168.2.100][42622] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....52] [ip4][..tcp] [..192.168.2.100][42796] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....49] [ip4][..tcp] [..192.168.2.100][45850] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....51] [ip4][..tcp] [..192.168.2.100][58198] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....48] [ip4][..tcp] [..192.168.2.100][48538] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 441 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 56|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....57] [ip4][..tcp] [..192.168.2.100][46768] -> [..179.60.195.49][.5222] + detected: [....57] [ip4][..tcp] [..192.168.2.100][46768] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....53] [ip4][..tcp] [..192.168.2.100][43152] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + new: [....58] [ip4][..tcp] [..192.168.2.100][45130] -> [..179.60.195.33][.5222] + detected: [....58] [ip4][..tcp] [..192.168.2.100][45130] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 457 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 58|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....59] [ip4][..tcp] [..192.168.2.100][60328] -> [..179.60.195.49][.5222] + detected: [....59] [ip4][..tcp] [..192.168.2.100][60328] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....54] [ip4][..tcp] [..192.168.2.100][46732] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....57] [ip4][..tcp] [..192.168.2.100][46768] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....58] [ip4][..tcp] [..192.168.2.100][45130] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....55] [ip4][..tcp] [..192.168.2.100][58882] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....56] [ip4][..tcp] [..192.168.2.100][46598] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 465 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 59|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....60] [ip4][..tcp] [..192.168.2.100][32798] -> [..179.60.195.49][.5222] + detected: [....60] [ip4][..tcp] [..192.168.2.100][32798] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....59] [ip4][..tcp] [..192.168.2.100][60328] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 473 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 60|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....61] [ip4][..tcp] [..192.168.2.100][47086] -> [..179.60.195.49][.5222] + detected: [....61] [ip4][..tcp] [..192.168.2.100][47086] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 481 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 61|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....62] [ip4][..tcp] [..192.168.2.100][49182] -> [..179.60.195.49][.5222] + detected: [....62] [ip4][..tcp] [..192.168.2.100][49182] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 488 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 62|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....63] [ip4][..tcp] [..192.168.2.100][49232] -> [..179.60.195.49][.5222] + detected: [....63] [ip4][..tcp] [..192.168.2.100][49232] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....61] [ip4][..tcp] [..192.168.2.100][47086] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....62] [ip4][..tcp] [..192.168.2.100][49182] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....60] [ip4][..tcp] [..192.168.2.100][32798] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 496 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 63|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....64] [ip4][..tcp] [..192.168.2.100][47350] -> [..179.60.195.49][.5222] + detected: [....64] [ip4][..tcp] [..192.168.2.100][47350] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 504 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 64|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....65] [ip4][..tcp] [..192.168.2.100][49238] -> [..179.60.195.49][.5222] + detected: [....65] [ip4][..tcp] [..192.168.2.100][49238] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....63] [ip4][..tcp] [..192.168.2.100][49232] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 512 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 65|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....66] [ip4][..tcp] [..192.168.2.100][49250] -> [..179.60.195.49][.5222] + detected: [....66] [ip4][..tcp] [..192.168.2.100][49250] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 520 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 66|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....67] [ip4][..tcp] [..192.168.2.100][47296] -> [..179.60.195.49][.5222] + detected: [....67] [ip4][..tcp] [..192.168.2.100][47296] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....64] [ip4][..tcp] [..192.168.2.100][47350] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 528 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 67|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....68] [ip4][..tcp] [..192.168.2.100][47900] -> [..179.60.195.49][.5222] + detected: [....68] [ip4][..tcp] [..192.168.2.100][47900] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....65] [ip4][..tcp] [..192.168.2.100][49238] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....66] [ip4][..tcp] [..192.168.2.100][49250] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 536 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 2 / 68|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....69] [ip4][..tcp] [..192.168.2.100][47590] -> [..179.60.195.49][.5222] + detected: [....69] [ip4][..tcp] [..192.168.2.100][47590] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....67] [ip4][..tcp] [..192.168.2.100][47296] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....70] [ip4][..tcp] [..192.168.2.100][49428] -> [..179.60.195.49][.5222] + detected: [....70] [ip4][..tcp] [..192.168.2.100][49428] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 552 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 70|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....71] [ip4][..tcp] [..192.168.2.100][47634] -> [..179.60.195.49][.5222] + detected: [....71] [ip4][..tcp] [..192.168.2.100][47634] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 560 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 71|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....72] [ip4][..tcp] [..192.168.2.100][49610] -> [..179.60.195.49][.5222] + detected: [....72] [ip4][..tcp] [..192.168.2.100][49610] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....68] [ip4][..tcp] [..192.168.2.100][47900] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....73] [ip4][..tcp] [..192.168.2.100][37378] -> [..179.60.195.49][.5222] + detected: [....73] [ip4][..tcp] [..192.168.2.100][37378] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....69] [ip4][..tcp] [..192.168.2.100][47590] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....74] [ip4][..tcp] [..192.168.2.100][47738] -> [..179.60.195.49][.5222] + detected: [....74] [ip4][..tcp] [..192.168.2.100][47738] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 584 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 74|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....75] [ip4][..tcp] [..192.168.2.100][37404] -> [..179.60.195.49][.5222] + detected: [....75] [ip4][..tcp] [..192.168.2.100][37404] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....70] [ip4][..tcp] [..192.168.2.100][49428] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....71] [ip4][..tcp] [..192.168.2.100][47634] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 592 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 75|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....76] [ip4][..tcp] [..192.168.2.100][47776] -> [..179.60.195.49][.5222] + detected: [....76] [ip4][..tcp] [..192.168.2.100][47776] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 600 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 5 / 76|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....77] [ip4][..tcp] [..192.168.2.100][37766] -> [..179.60.195.49][.5222] + detected: [....77] [ip4][..tcp] [..192.168.2.100][37766] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....78] [ip4][..tcp] [..192.168.2.100][37674] -> [..179.60.195.49][.5222] + detected: [....78] [ip4][..tcp] [..192.168.2.100][37674] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....72] [ip4][..tcp] [..192.168.2.100][49610] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 616 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 6 / 78|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....79] [ip4][..tcp] [..192.168.2.100][47810] -> [..179.60.195.49][.5222] + detected: [....79] [ip4][..tcp] [..192.168.2.100][47810] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....73] [ip4][..tcp] [..192.168.2.100][37378] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....74] [ip4][..tcp] [..192.168.2.100][47738] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....80] [ip4][..tcp] [..192.168.2.100][46394] -> [..179.60.195.33][.5222] + detected: [....80] [ip4][..tcp] [..192.168.2.100][46394] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + new: [....81] [ip4][..tcp] [..192.168.2.100][37822] -> [..179.60.195.49][.5222] + detected: [....81] [ip4][..tcp] [..192.168.2.100][37822] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + new: [....82] [ip4][..tcp] [..192.168.2.100][46576] -> [..179.60.195.33][.5222] + detected: [....82] [ip4][..tcp] [..192.168.2.100][46576] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 647 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 8 / 82|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....83] [ip4][..tcp] [..192.168.2.100][38234] -> [..179.60.195.49][.5222] + detected: [....83] [ip4][..tcp] [..192.168.2.100][38234] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....75] [ip4][..tcp] [..192.168.2.100][37404] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....76] [ip4][..tcp] [..192.168.2.100][47776] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 655 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 7 / 83|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....84] [ip4][..tcp] [..192.168.2.100][47284] -> [..179.60.195.33][.5222] + detected: [....84] [ip4][..tcp] [..192.168.2.100][47284] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....78] [ip4][..tcp] [..192.168.2.100][37674] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....77] [ip4][..tcp] [..192.168.2.100][37766] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 663 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 6 / 84|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....85] [ip4][..tcp] [..192.168.2.100][39334] -> [..179.60.195.49][.5222] + detected: [....85] [ip4][..tcp] [..192.168.2.100][39334] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....79] [ip4][..tcp] [..192.168.2.100][47810] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....81] [ip4][..tcp] [..192.168.2.100][37822] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....80] [ip4][..tcp] [..192.168.2.100][46394] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....82] [ip4][..tcp] [..192.168.2.100][46576] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: [Processed: 671 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 85|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [....86] [ip4][..tcp] [..192.168.2.100][40006] -> [..179.60.195.49][.5222] + detected: [....86] [ip4][..tcp] [..192.168.2.100][40006] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....84] [ip4][..tcp] [..192.168.2.100][47284] -> [..179.60.195.33][.5222] [WhatsApp][Chat][Acceptable] + idle: [....85] [ip4][..tcp] [..192.168.2.100][39334] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....86] [ip4][..tcp] [..192.168.2.100][40006] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + idle: [....83] [ip4][..tcp] [..192.168.2.100][38234] -> [..179.60.195.49][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/whatsapp_login_call.pcap.out b/test/results/flow-info/whatsapp_login_call.pcap.out new file mode 100644 index 000000000..1c1e3a89b --- /dev/null +++ b/test/results/flow-info/whatsapp_login_call.pcap.out @@ -0,0 +1,296 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....192.168.2.4][49199] -> [..17.172.100.70][..993] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [....192.168.2.4][49199] -> [..17.172.100.70][..993] [IMAPS][Email][Safe] + new: [.....2] [ip4][..tcp] [....192.168.2.4][49166] -> [..17.154.66.121][..443] [MIDSTREAM] + new: [.....3] [ip4][..tcp] [....192.168.2.4][49163] -> [..17.154.66.111][..443] [MIDSTREAM] + new: [.....4] [ip4][..tcp] [....192.168.2.4][49169] -> [..17.173.66.102][..443] [MIDSTREAM] + new: [.....5] [ip4][..tcp] [....192.168.2.4][49173] -> [..93.186.135.82][...80] [MIDSTREAM] + new: [.....6] [ip4][..tcp] [....192.168.2.4][49172] -> [..23.50.148.228][..443] [MIDSTREAM] + new: [.....7] [ip4][..tcp] [....192.168.2.4][49174] -> [....5.178.42.26][...80] [MIDSTREAM] + detected: [.....6] [ip4][..tcp] [....192.168.2.4][49172] -> [..23.50.148.228][..443] [TLS][Web][Safe] + new: [.....8] [ip4][..tcp] [....192.168.2.4][49175] -> [..17.172.100.53][..443] [MIDSTREAM] + new: [.....9] [ip4][..tcp] [....192.168.2.4][49165] -> [..17.172.100.55][..443] [MIDSTREAM] + new: [....10] [ip4][..tcp] [....192.168.2.4][49176] -> [..17.130.137.77][..443] [MIDSTREAM] + new: [....11] [ip4][..udp] [....192.168.2.4][51897] -> [....192.168.2.1][...53] + detected: [....11] [ip4][..udp] [....192.168.2.4][51897] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + detection-update: [....11] [ip4][..udp] [....192.168.2.4][51897] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + new: [....12] [ip4][..udp] [....192.168.2.4][52190] -> [....192.168.2.1][...53] + detected: [....12] [ip4][..udp] [....192.168.2.4][52190] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + new: [....13] [ip4][..tcp] [....192.168.2.4][49201] -> [..17.178.104.12][..443] + detection-update: [....12] [ip4][..udp] [....192.168.2.4][52190] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + new: [....14] [ip4][..tcp] [....192.168.2.4][49202] -> [.184.173.179.37][.5222] + new: [....15] [ip4][..tcp] [....192.168.2.4][49203] -> [..17.178.104.14][..443] + detected: [....13] [ip4][..tcp] [....192.168.2.4][49201] -> [..17.178.104.12][..443] [TLS.Apple][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....13] [ip4][..tcp] [....192.168.2.4][49201] -> [..17.178.104.12][..443] [TLS.Apple][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + new: [....16] [ip4][..tcp] [....192.168.2.4][49193] -> [..17.110.229.14][.5223] [MIDSTREAM] + detected: [....16] [ip4][..tcp] [....192.168.2.4][49193] -> [..17.110.229.14][.5223] [ApplePush][Cloud][Acceptable] + detected: [....14] [ip4][..tcp] [....192.168.2.4][49202] -> [.184.173.179.37][.5222] [WhatsApp][Chat][Acceptable] + analyse: [....13] [ip4][..tcp] [....192.168.2.4][49201] -> [..17.178.104.12][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.712| 0.120| 0.179] + [IAT(c->s)...: 0.000| 0.405| 0.100| 0.151][IAT(s->c)...: 0.000| 0.712| 0.144| 0.206] + [PKTLEN(c->s): 54.000|1494.000| 415.700| 580.900][PKTLEN(s->c): 54.000|1494.000| 487.000| 610.400] + [BINS(c->s)..: 9,1,0,2,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0] + [BINS(s->c)..: 8,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,3,0,0] + detection-update: [....13] [ip4][..tcp] [....192.168.2.4][49201] -> [..17.178.104.12][..443] [TLS.Apple][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + new: [....17] [ip4][..tcp] [....192.168.2.4][49204] -> [..17.173.66.102][..443] + analyse: [....14] [ip4][..tcp] [....192.168.2.4][49202] -> [.184.173.179.37][.5222] [WhatsApp][Chat][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.709| 0.199| 0.171] + [IAT(c->s)...: 0.000| 0.708| 0.188| 0.160][IAT(s->c)...: 0.000| 0.709| 0.212| 0.182] + [PKTLEN(c->s): 66.000| 267.000| 134.900| 77.700][PKTLEN(s->c): 66.000| 144.000| 96.200| 16.200] + [BINS(c->s)..: 9,0,2,0,2,2,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 4,10,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + detected: [....17] [ip4][..tcp] [....192.168.2.4][49204] -> [..17.173.66.102][..443] [TLS.AppleStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....17] [ip4][..tcp] [....192.168.2.4][49204] -> [..17.173.66.102][..443] [TLS.AppleStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [....17] [ip4][..tcp] [....192.168.2.4][49204] -> [..17.173.66.102][..443] [TLS.AppleStore][SoftwareUpdate][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.246| 0.057| 0.089] + [IAT(c->s)...: 0.000| 0.241| 0.058| 0.090][IAT(s->c)...: 0.000| 0.246| 0.057| 0.088] + [PKTLEN(c->s): 54.000|1494.000| 362.800| 464.100][PKTLEN(s->c): 54.000|1002.000| 235.900| 321.500] + [BINS(c->s)..: 9,1,0,0,0,0,0,1,0,0,0,0,0,0,1,1,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 9,1,1,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....18] [ip4][..tcp] [....192.168.2.4][49192] -> [...93.186.135.8][...80] [MIDSTREAM] + new: [....19] [ip4][..tcp] [....192.168.2.4][49191] -> [..17.172.100.49][..443] [MIDSTREAM] + new: [....20] [ip4][..tcp] [....192.168.2.4][49182] -> [..17.172.100.52][..443] [MIDSTREAM] + new: [....21] [ip4][..tcp] [....192.168.2.4][49181] -> [..17.172.100.37][..443] [MIDSTREAM] + new: [....22] [ip4][..tcp] [....192.168.2.4][49180] -> [..17.172.100.59][..443] [MIDSTREAM] + new: [....23] [ip4][..udp] [....192.168.2.4][51518] -> [...31.13.100.14][.3478] + detected: [....23] [ip4][..udp] [....192.168.2.4][51518] -> [...31.13.100.14][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....24] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.70.48][.3478] + detected: [....24] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.70.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....25] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.64.48][.3478] + detected: [....25] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.64.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....26] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.85.48][.3478] + detected: [....26] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.85.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....27] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.91.48][.3478] + detected: [....27] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.91.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....28] [ip4][..udp] [....192.168.2.4][51518] -> [...31.13.79.192][.3478] + detected: [....28] [ip4][..udp] [....192.168.2.4][51518] -> [...31.13.79.192][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....29] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.93.48][.3478] + detected: [....29] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.93.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....30] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.73.48][.3478] + detected: [....30] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.73.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....31] [ip4][..tcp] [....192.168.2.4][49164] -> [..17.167.142.31][..443] [MIDSTREAM] + new: [....32] [ip4][..tcp] [....192.168.2.4][49167] -> [...17.172.100.8][..443] [MIDSTREAM] + new: [....33] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] + detected: [....33] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + new: [....34] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] + detected: [....34] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + new: [....35] [ip4][..tcp] [....192.168.2.4][49194] -> [..93.62.150.157][..443] [MIDSTREAM] + new: [....36] [ip4][..tcp] [....192.168.2.4][49198] -> [..17.167.142.13][..443] [MIDSTREAM] + new: [....37] [ip4][..tcp] [....192.168.2.4][49200] -> [..17.167.142.13][..443] [MIDSTREAM] + new: [....38] [ip4][..udp] [....192.168.2.4][51518] -> [...1.194.90.191][60312] + detected: [....38] [ip4][..udp] [....192.168.2.4][51518] -> [...1.194.90.191][60312] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + new: [....39] [ip4][..udp] [....192.168.2.4][51518] -> [..91.253.176.65][.9344] + detected: [....39] [ip4][..udp] [....192.168.2.4][51518] -> [..91.253.176.65][.9344] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [....39] [ip4][..udp] [....192.168.2.4][51518] -> [..91.253.176.65][.9344] [STUN.WhatsAppCall][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.352| 0.131| 0.070] + [IAT(c->s)...: 0.000| 0.189| 0.127| 0.056][IAT(s->c)...: 0.000| 0.352| 0.136| 0.083] + [PKTLEN(c->s): 68.000| 351.000| 246.200| 97.700][PKTLEN(s->c): 64.000| 331.000| 175.400| 85.700] + [BINS(c->s)..: 1,2,1,1,0,1,1,1,7,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,2,3,1,1,1,3,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....40] [ip4][.icmp] [....192.168.2.4] -> [..91.253.176.65] + detected: [....40] [ip4][.icmp] [....192.168.2.4] -> [..91.253.176.65] [ICMP][Network][Acceptable] + new: [....41] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [....41] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + update: [....11] [ip4][..udp] [....192.168.2.4][51897] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + update: [....12] [ip4][..udp] [....192.168.2.4][52190] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + new: [....42] [ip4][..udp] [169.254.166.207][.5353] -> [....224.0.0.251][.5353] + detected: [....42] [ip4][..udp] [169.254.166.207][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....43] [ip6][..udp] [................fe80::da30:62ff:fe56:1c][.5353] -> [...............................ff02::fb][.5353] + detected: [....43] [ip6][..udp] [................fe80::da30:62ff:fe56:1c][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....44] [ip4][..udp] [....192.168.2.1][.5353] -> [....224.0.0.251][.5353] + detected: [....44] [ip4][..udp] [....192.168.2.1][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [....45] [ip6][..udp] [...............fe80::c42c:3ff:fe60:6a64][.5353] -> [...............................ff02::fb][.5353] + detected: [....45] [ip6][..udp] [...............fe80::c42c:3ff:fe60:6a64][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + detection-update: [....42] [ip4][..udp] [169.254.166.207][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + detection-update: [....44] [ip4][..udp] [....192.168.2.1][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + detection-update: [....45] [ip6][..udp] [...............fe80::c42c:3ff:fe60:6a64][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + detection-update: [....43] [ip6][..udp] [................fe80::da30:62ff:fe56:1c][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [....23] [ip4][..udp] [....192.168.2.4][51518] -> [...31.13.100.14][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....24] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.70.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....25] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.64.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....26] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.85.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....30] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.73.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....27] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.91.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....28] [ip4][..udp] [....192.168.2.4][51518] -> [...31.13.79.192][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....29] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.93.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....46] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.73.48][.3478] + detected: [....46] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.73.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....47] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.93.48][.3478] + detected: [....47] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.93.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....48] [ip4][..udp] [....192.168.2.4][52794] -> [...31.13.79.192][.3478] + detected: [....48] [ip4][..udp] [....192.168.2.4][52794] -> [...31.13.79.192][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....49] [ip4][..udp] [....192.168.2.4][52794] -> [..179.60.192.48][.3478] + detected: [....49] [ip4][..udp] [....192.168.2.4][52794] -> [..179.60.192.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....50] [ip4][..udp] [....192.168.2.4][52794] -> [..173.252.114.1][.3478] + detected: [....50] [ip4][..udp] [....192.168.2.4][52794] -> [..173.252.114.1][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....51] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.90.48][.3478] + detected: [....51] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.90.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....52] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.74.48][.3478] + detected: [....52] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.74.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....53] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.84.48][.3478] + detected: [....53] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.84.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....33] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + update: [....34] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + new: [....54] [ip4][..udp] [....192.168.2.4][52794] -> [...1.194.90.191][51727] + detected: [....54] [ip4][..udp] [....192.168.2.4][52794] -> [...1.194.90.191][51727] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + new: [....55] [ip4][..udp] [....192.168.2.4][52794] -> [..91.253.176.65][.9665] + detected: [....55] [ip4][..udp] [....192.168.2.4][52794] -> [..91.253.176.65][.9665] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + analyse: [....55] [ip4][..udp] [....192.168.2.4][52794] -> [..91.253.176.65][.9665] [STUN.WhatsAppCall][VoIP][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.307| 0.114| 0.086] + [IAT(c->s)...: 0.000| 0.307| 0.121| 0.090][IAT(s->c)...: 0.000| 0.304| 0.107| 0.082] + [PKTLEN(c->s): 68.000| 320.000| 160.000| 63.000][PKTLEN(s->c): 68.000| 242.000| 149.900| 53.700] + [BINS(c->s)..: 1,3,0,6,3,1,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,2,2,3,4,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [....39] [ip4][..udp] [....192.168.2.4][51518] -> [..91.253.176.65][.9344] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + update: [....40] [ip4][.icmp] [....192.168.2.4] -> [..91.253.176.65] [ICMP][Network][Acceptable] + update: [....38] [ip4][..udp] [....192.168.2.4][51518] -> [...1.194.90.191][60312] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + new: [....56] [ip4][..tcp] [....192.168.2.4][49197] -> [..17.167.142.39][..443] [MIDSTREAM] + update: [....41] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + update: [....42] [ip4][..udp] [169.254.166.207][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [....45] [ip6][..udp] [...............fe80::c42c:3ff:fe60:6a64][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + update: [....44] [ip4][..udp] [....192.168.2.1][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + update: [....11] [ip4][..udp] [....192.168.2.4][51897] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + update: [....23] [ip4][..udp] [....192.168.2.4][51518] -> [...31.13.100.14][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....24] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.70.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....25] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.64.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....26] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.85.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....30] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.73.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....27] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.91.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....28] [ip4][..udp] [....192.168.2.4][51518] -> [...31.13.79.192][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....29] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.93.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....12] [ip4][..udp] [....192.168.2.4][52190] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + update: [....43] [ip6][..udp] [................fe80::da30:62ff:fe56:1c][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [....57] [ip4][..tcp] [....192.168.2.4][49205] -> [..17.173.66.102][..443] + detected: [....57] [ip4][..tcp] [....192.168.2.4][49205] -> [..17.173.66.102][..443] [TLS.AppleStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....57] [ip4][..tcp] [....192.168.2.4][49205] -> [..17.173.66.102][..443] [TLS.AppleStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [....57] [ip4][..tcp] [....192.168.2.4][49205] -> [..17.173.66.102][..443] [TLS.AppleStore][SoftwareUpdate][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.272| 0.058| 0.092] + [IAT(c->s)...: 0.000| 0.272| 0.059| 0.097][IAT(s->c)...: 0.000| 0.229| 0.056| 0.086] + [PKTLEN(c->s): 54.000|1494.000| 362.700| 464.100][PKTLEN(s->c): 54.000|1002.000| 235.900| 321.500] + [BINS(c->s)..: 9,1,0,0,0,0,0,1,0,0,0,0,0,0,1,1,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0] + [BINS(s->c)..: 9,1,1,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + guessed: [.....7] [ip4][..tcp] [....192.168.2.4][49174] -> [....5.178.42.26][...80] [HTTP][Web][Acceptable] + end: [.....7] [ip4][..tcp] [....192.168.2.4][49174] -> [....5.178.42.26][...80] + guessed: [.....5] [ip4][..tcp] [....192.168.2.4][49173] -> [..93.186.135.82][...80] [HTTP][Web][Acceptable] + end: [.....5] [ip4][..tcp] [....192.168.2.4][49173] -> [..93.186.135.82][...80] + guessed: [....18] [ip4][..tcp] [....192.168.2.4][49192] -> [...93.186.135.8][...80] [HTTP][Web][Acceptable] + end: [....18] [ip4][..tcp] [....192.168.2.4][49192] -> [...93.186.135.8][...80] + guessed: [.....3] [ip4][..tcp] [....192.168.2.4][49163] -> [..17.154.66.111][..443] [TLS.Apple][Web][Safe] + end: [.....3] [ip4][..tcp] [....192.168.2.4][49163] -> [..17.154.66.111][..443] + guessed: [.....2] [ip4][..tcp] [....192.168.2.4][49166] -> [..17.154.66.121][..443] [TLS.Apple][Web][Safe] + end: [.....2] [ip4][..tcp] [....192.168.2.4][49166] -> [..17.154.66.121][..443] + guessed: [....10] [ip4][..tcp] [....192.168.2.4][49176] -> [..17.130.137.77][..443] [TLS.Apple][Web][Safe] + end: [....10] [ip4][..tcp] [....192.168.2.4][49176] -> [..17.130.137.77][..443] + end: [.....6] [ip4][..tcp] [....192.168.2.4][49172] -> [..23.50.148.228][..443] [TLS][Web][Safe] + guessed: [....15] [ip4][..tcp] [....192.168.2.4][49203] -> [..17.178.104.14][..443] [TLS.Apple][Web][Safe] + end: [....15] [ip4][..tcp] [....192.168.2.4][49203] -> [..17.178.104.14][..443] + guessed: [.....9] [ip4][..tcp] [....192.168.2.4][49165] -> [..17.172.100.55][..443] [TLS.Apple][Web][Safe] + end: [.....9] [ip4][..tcp] [....192.168.2.4][49165] -> [..17.172.100.55][..443] + guessed: [.....8] [ip4][..tcp] [....192.168.2.4][49175] -> [..17.172.100.53][..443] [TLS.Apple][Web][Safe] + end: [.....8] [ip4][..tcp] [....192.168.2.4][49175] -> [..17.172.100.53][..443] + guessed: [....20] [ip4][..tcp] [....192.168.2.4][49182] -> [..17.172.100.52][..443] [TLS.Apple][Web][Safe] + end: [....20] [ip4][..tcp] [....192.168.2.4][49182] -> [..17.172.100.52][..443] + guessed: [....19] [ip4][..tcp] [....192.168.2.4][49191] -> [..17.172.100.49][..443] [TLS.Apple][Web][Safe] + end: [....19] [ip4][..tcp] [....192.168.2.4][49191] -> [..17.172.100.49][..443] + guessed: [.....4] [ip4][..tcp] [....192.168.2.4][49169] -> [..17.173.66.102][..443] [TLS.Apple][Web][Safe] + end: [.....4] [ip4][..tcp] [....192.168.2.4][49169] -> [..17.173.66.102][..443] + update: [....50] [ip4][..udp] [....192.168.2.4][52794] -> [..173.252.114.1][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....49] [ip4][..udp] [....192.168.2.4][52794] -> [..179.60.192.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....46] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.73.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....47] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.93.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....51] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.90.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....52] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.74.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....53] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.84.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....48] [ip4][..udp] [....192.168.2.4][52794] -> [...31.13.79.192][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [....55] [ip4][..udp] [....192.168.2.4][52794] -> [..91.253.176.65][.9665] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + update: [....33] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + update: [....54] [ip4][..udp] [....192.168.2.4][52794] -> [...1.194.90.191][51727] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + update: [....34] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + update: [....39] [ip4][..udp] [....192.168.2.4][51518] -> [..91.253.176.65][.9344] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + update: [....40] [ip4][.icmp] [....192.168.2.4] -> [..91.253.176.65] [ICMP][Network][Acceptable] + update: [....38] [ip4][..udp] [....192.168.2.4][51518] -> [...1.194.90.191][60312] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....41] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [.....1] [ip4][..tcp] [....192.168.2.4][49199] -> [..17.172.100.70][..993] [IMAPS][Email][Safe] + guessed: [....35] [ip4][..tcp] [....192.168.2.4][49194] -> [..93.62.150.157][..443] [TLS][Web][Safe] + end: [....35] [ip4][..tcp] [....192.168.2.4][49194] -> [..93.62.150.157][..443] + idle: [....50] [ip4][..udp] [....192.168.2.4][52794] -> [..173.252.114.1][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....49] [ip4][..udp] [....192.168.2.4][52794] -> [..179.60.192.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....42] [ip4][..udp] [169.254.166.207][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + guessed: [....31] [ip4][..tcp] [....192.168.2.4][49164] -> [..17.167.142.31][..443] [TLS.Apple][Web][Safe] + end: [....31] [ip4][..tcp] [....192.168.2.4][49164] -> [..17.167.142.31][..443] + guessed: [....56] [ip4][..tcp] [....192.168.2.4][49197] -> [..17.167.142.39][..443] [TLS.Apple][Web][Safe] + end: [....56] [ip4][..tcp] [....192.168.2.4][49197] -> [..17.167.142.39][..443] + idle: [....48] [ip4][..udp] [....192.168.2.4][52794] -> [...31.13.79.192][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....53] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.84.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....52] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.74.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....51] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.90.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....47] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.93.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....46] [ip4][..udp] [....192.168.2.4][52794] -> [....31.13.73.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + guessed: [....36] [ip4][..tcp] [....192.168.2.4][49198] -> [..17.167.142.13][..443] [TLS.Apple][Web][Safe] + end: [....36] [ip4][..tcp] [....192.168.2.4][49198] -> [..17.167.142.13][..443] + guessed: [....37] [ip4][..tcp] [....192.168.2.4][49200] -> [..17.167.142.13][..443] [TLS.Apple][Web][Safe] + end: [....37] [ip4][..tcp] [....192.168.2.4][49200] -> [..17.167.142.13][..443] + idle: [....55] [ip4][..udp] [....192.168.2.4][52794] -> [..91.253.176.65][.9665] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....33] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + idle: [....45] [ip6][..udp] [...............fe80::c42c:3ff:fe60:6a64][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + end: [....14] [ip4][..tcp] [....192.168.2.4][49202] -> [.184.173.179.37][.5222] [WhatsApp][Chat][Acceptable] + idle: [....54] [ip4][..udp] [....192.168.2.4][52794] -> [...1.194.90.191][51727] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....16] [ip4][..tcp] [....192.168.2.4][49193] -> [..17.110.229.14][.5223] [ApplePush][Cloud][Acceptable] + idle: [....44] [ip4][..udp] [....192.168.2.1][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + idle: [....34] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + idle: [....39] [ip4][..udp] [....192.168.2.4][51518] -> [..91.253.176.65][.9344] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + idle: [....11] [ip4][..udp] [....192.168.2.4][51897] -> [....192.168.2.1][...53] [DNS.Apple][Web][Safe] + end: [....13] [ip4][..tcp] [....192.168.2.4][49201] -> [..17.178.104.12][..443] [TLS.Apple][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [....29] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.93.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....28] [ip4][..udp] [....192.168.2.4][51518] -> [...31.13.79.192][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....27] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.91.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....30] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.73.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....26] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.85.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....25] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.64.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....24] [ip4][..udp] [....192.168.2.4][51518] -> [....31.13.70.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....23] [ip4][..udp] [....192.168.2.4][51518] -> [...31.13.100.14][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [....12] [ip4][..udp] [....192.168.2.4][52190] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + idle: [....40] [ip4][.icmp] [....192.168.2.4] -> [..91.253.176.65] [ICMP][Network][Acceptable] + guessed: [....32] [ip4][..tcp] [....192.168.2.4][49167] -> [...17.172.100.8][..443] [TLS.Apple][Web][Safe] + end: [....32] [ip4][..tcp] [....192.168.2.4][49167] -> [...17.172.100.8][..443] + guessed: [....22] [ip4][..tcp] [....192.168.2.4][49180] -> [..17.172.100.59][..443] [TLS.Apple][Web][Safe] + end: [....22] [ip4][..tcp] [....192.168.2.4][49180] -> [..17.172.100.59][..443] + guessed: [....21] [ip4][..tcp] [....192.168.2.4][49181] -> [..17.172.100.37][..443] [TLS.Apple][Web][Safe] + end: [....21] [ip4][..tcp] [....192.168.2.4][49181] -> [..17.172.100.37][..443] + idle: [....43] [ip6][..udp] [................fe80::da30:62ff:fe56:1c][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + idle: [....38] [ip4][..udp] [....192.168.2.4][51518] -> [...1.194.90.191][60312] [STUN.WhatsAppCall][VoIP][Acceptable] + RISK: Known Proto on Non Std Port + end: [....17] [ip4][..tcp] [....192.168.2.4][49204] -> [..17.173.66.102][..443] [TLS.AppleStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + idle: [....57] [ip4][..tcp] [....192.168.2.4][49205] -> [..17.173.66.102][..443] [TLS.AppleStore][SoftwareUpdate][Safe] + RISK: TLS (probably) Not Carrying HTTPS + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/whatsapp_login_chat.pcap.out b/test/results/flow-info/whatsapp_login_chat.pcap.out new file mode 100644 index 000000000..0801158b9 --- /dev/null +++ b/test/results/flow-info/whatsapp_login_chat.pcap.out @@ -0,0 +1,41 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] + detected: [.....1] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + new: [.....2] [ip4][..udp] [....192.168.2.4][61697] -> [....192.168.2.1][...53] + detected: [.....2] [ip4][..udp] [....192.168.2.4][61697] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + detection-update: [.....2] [ip4][..udp] [....192.168.2.4][61697] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + new: [.....3] [ip4][..tcp] [....192.168.2.4][49206] -> [...158.85.58.15][.5222] + detected: [.....3] [ip4][..tcp] [....192.168.2.4][49206] -> [...158.85.58.15][.5222] [WhatsApp][Chat][Acceptable] + new: [.....4] [ip4][..tcp] [....192.168.2.4][49205] -> [..17.173.66.102][..443] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [....192.168.2.4][49205] -> [..17.173.66.102][..443] [TLS.Apple][Web][Safe] + analyse: [.....4] [ip4][..tcp] [....192.168.2.4][49205] -> [..17.173.66.102][..443] [TLS.Apple][Web][Safe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 3.031| 0.229| 0.711] + [IAT(c->s)...: 0.000| 2.803| 0.224| 0.672][IAT(s->c)...: 0.000| 3.031| 0.234| 0.750] + [PKTLEN(c->s): 54.000|1494.000| 721.000| 554.800][PKTLEN(s->c): 54.000|1002.000| 312.700| 369.500] + [BINS(c->s)..: 4,0,1,0,0,0,0,0,0,0,0,0,0,0,2,1,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,4,0,0] + [BINS(s->c)..: 9,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [.....5] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] + detected: [.....5] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + new: [.....6] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] + detected: [.....6] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [.....7] [ip4][..udp] [....192.168.2.4][.5353] -> [....224.0.0.251][.5353] + detected: [.....7] [ip4][..udp] [....192.168.2.4][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [.....8] [ip6][..udp] [...............fe80::189c:c31b:1298:224][.5353] -> [...............................ff02::fb][.5353] + detected: [.....8] [ip6][..udp] [...............fe80::189c:c31b:1298:224][.5353] -> [...............................ff02::fb][.5353] [MDNS][Network][Acceptable] + new: [.....9] [ip4][..tcp] [..17.110.229.14][.5223] -> [....192.168.2.4][49193] [MIDSTREAM] + detected: [.....9] [ip4][..tcp] [..17.110.229.14][.5223] -> [....192.168.2.4][49193] [TLS.Apple][Web][Safe] + RISK: Known Proto on Non Std Port + idle: [.....6] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [.....8] [ip6][..udp] [...............fe80::189c:c31b:1298:224][.5353] -> [...............................ff02::fb][.5353] + idle: [.....5] [ip4][..udp] [....192.168.2.1][17500] -> [..192.168.2.255][17500] [Dropbox][Cloud][Acceptable] + idle: [.....2] [ip4][..udp] [....192.168.2.4][61697] -> [....192.168.2.1][...53] [DNS.WhatsApp][Chat][Acceptable] + end: [.....3] [ip4][..tcp] [....192.168.2.4][49206] -> [...158.85.58.15][.5222] [WhatsApp][Chat][Acceptable] + end: [.....9] [ip4][..tcp] [..17.110.229.14][.5223] -> [....192.168.2.4][49193] [TLS.Apple][Web][Safe] + RISK: Known Proto on Non Std Port + idle: [.....7] [ip4][..udp] [....192.168.2.4][.5353] -> [....224.0.0.251][.5353] + idle: [.....1] [ip4][..udp] [....192.168.2.1][57621] -> [..192.168.2.255][57621] [Spotify][Music][Acceptable] + idle: [.....4] [ip4][..tcp] [....192.168.2.4][49205] -> [..17.173.66.102][..443] [TLS.Apple][Web][Safe] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/whatsapp_voice_and_message.pcap.out b/test/results/flow-info/whatsapp_voice_and_message.pcap.out new file mode 100644 index 000000000..d83dab9cf --- /dev/null +++ b/test/results/flow-info/whatsapp_voice_and_message.pcap.out @@ -0,0 +1,80 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.......10.8.0.1][35480] -> [.184.173.179.46][..443] + detected: [.....1] [ip4][..tcp] [.......10.8.0.1][35480] -> [.184.173.179.46][..443] [WhatsApp][Chat][Acceptable] + new: [.....2] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.84.48][.3478] + detected: [.....2] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.84.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [.....3] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.74.48][.3478] + detected: [.....3] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.74.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [.....4] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.64.48][.3478] + detected: [.....4] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.64.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [.....5] [ip4][..udp] [.......10.8.0.1][53620] -> [..173.252.121.1][.3478] + detected: [.....5] [ip4][..udp] [.......10.8.0.1][53620] -> [..173.252.121.1][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [.....6] [ip4][..udp] [.......10.8.0.1][53620] -> [..179.60.192.48][.3478] + detected: [.....6] [ip4][..udp] [.......10.8.0.1][53620] -> [..179.60.192.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [.....7] [ip4][..udp] [.......10.8.0.1][53620] -> [...31.13.79.192][.3478] + detected: [.....7] [ip4][..udp] [.......10.8.0.1][53620] -> [...31.13.79.192][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [.....8] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.93.48][.3478] + detected: [.....8] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.93.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [.....9] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.73.48][.3478] + detected: [.....9] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.73.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + analyse: [.....1] [ip4][..tcp] [.......10.8.0.1][35480] -> [.184.173.179.46][..443] [WhatsApp][Chat][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 10.749| 0.839| 2.600] + [IAT(c->s)...: 0.000| 10.697| 0.813| 2.557][IAT(s->c)...: 0.000| 10.749| 0.867| 2.645] + [PKTLEN(c->s): 54.000| 410.000| 113.100| 87.100][PKTLEN(s->c): 54.000| 469.000| 101.100| 107.900] + [BINS(c->s)..: 9,2,4,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 12,0,1,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....10] [ip4][..tcp] [.......10.8.0.1][44819] -> [...158.85.58.42][.5222] + detected: [....10] [ip4][..tcp] [.......10.8.0.1][44819] -> [...158.85.58.42][.5222] [WhatsApp][Chat][Acceptable] + new: [....11] [ip4][..tcp] [.......10.8.0.1][42241] -> [173.192.222.189][.5222] + detected: [....11] [ip4][..tcp] [.......10.8.0.1][42241] -> [173.192.222.189][.5222] [WhatsApp][Chat][Acceptable] + analyse: [....11] [ip4][..tcp] [.......10.8.0.1][42241] -> [173.192.222.189][.5222] [WhatsApp][Chat][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.458| 0.064| 0.104] + [IAT(c->s)...: 0.000| 0.458| 0.071| 0.114][IAT(s->c)...: 0.000| 0.401| 0.058| 0.094] + [PKTLEN(c->s): 54.000| 299.000| 102.500| 68.400][PKTLEN(s->c): 54.000| 559.000| 101.900| 121.700] + [BINS(c->s)..: 10,2,1,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 14,0,1,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....5] [ip4][..udp] [.......10.8.0.1][53620] -> [..173.252.121.1][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....6] [ip4][..udp] [.......10.8.0.1][53620] -> [..179.60.192.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....2] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.84.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....3] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.74.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....4] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.64.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....9] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.73.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....7] [ip4][..udp] [.......10.8.0.1][53620] -> [...31.13.79.192][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....8] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.93.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....12] [ip4][..tcp] [.......10.8.0.1][49721] -> [..158.85.58.109][.5222] + detected: [....12] [ip4][..tcp] [.......10.8.0.1][49721] -> [..158.85.58.109][.5222] [WhatsApp][Chat][Acceptable] + analyse: [....12] [ip4][..tcp] [.......10.8.0.1][49721] -> [..158.85.58.109][.5222] [WhatsApp][Chat][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.768| 0.148| 0.316] + [IAT(c->s)...: 0.000| 1.768| 0.214| 0.432][IAT(s->c)...: 0.000| 0.390| 0.087| 0.104] + [PKTLEN(c->s): 54.000| 299.000| 97.200| 68.000][PKTLEN(s->c): 54.000| 308.000| 100.900| 72.700] + [BINS(c->s)..: 11,2,1,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 11,1,1,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....5] [ip4][..udp] [.......10.8.0.1][53620] -> [..173.252.121.1][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....6] [ip4][..udp] [.......10.8.0.1][53620] -> [..179.60.192.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....2] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.84.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....3] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.74.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....4] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.64.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....9] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.73.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....7] [ip4][..udp] [.......10.8.0.1][53620] -> [...31.13.79.192][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + update: [.....8] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.93.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + new: [....13] [ip4][..tcp] [.......10.8.0.1][51570] -> [...158.85.5.199][..443] + detected: [....13] [ip4][..tcp] [.......10.8.0.1][51570] -> [...158.85.5.199][..443] [WhatsApp][Chat][Acceptable] + idle: [....13] [ip4][..tcp] [.......10.8.0.1][51570] -> [...158.85.5.199][..443] [WhatsApp][Chat][Acceptable] + end: [....10] [ip4][..tcp] [.......10.8.0.1][44819] -> [...158.85.58.42][.5222] [WhatsApp][Chat][Acceptable] + end: [.....1] [ip4][..tcp] [.......10.8.0.1][35480] -> [.184.173.179.46][..443] [WhatsApp][Chat][Acceptable] + end: [....11] [ip4][..tcp] [.......10.8.0.1][42241] -> [173.192.222.189][.5222] [WhatsApp][Chat][Acceptable] + idle: [.....5] [ip4][..udp] [.......10.8.0.1][53620] -> [..173.252.121.1][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [.....6] [ip4][..udp] [.......10.8.0.1][53620] -> [..179.60.192.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [.....8] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.93.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [.....7] [ip4][..udp] [.......10.8.0.1][53620] -> [...31.13.79.192][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [.....9] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.73.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [.....4] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.64.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [.....3] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.74.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + idle: [.....2] [ip4][..udp] [.......10.8.0.1][53620] -> [....31.13.84.48][.3478] [STUN.WhatsAppCall][VoIP][Acceptable] + end: [....12] [ip4][..tcp] [.......10.8.0.1][49721] -> [..158.85.58.109][.5222] [WhatsApp][Chat][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/whatsappfiles.pcap.out b/test/results/flow-info/whatsappfiles.pcap.out new file mode 100644 index 000000000..ec0354039 --- /dev/null +++ b/test/results/flow-info/whatsappfiles.pcap.out @@ -0,0 +1,27 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.2.29][49674] -> [..185.60.216.53][..443] + detected: [.....1] [ip4][..tcp] [...192.168.2.29][49674] -> [..185.60.216.53][..443] [TLS.WhatsAppFiles][Download][Acceptable] + detection-update: [.....1] [ip4][..tcp] [...192.168.2.29][49674] -> [..185.60.216.53][..443] [TLS.WhatsAppFiles][Download][Acceptable] + detection-update: [.....1] [ip4][..tcp] [...192.168.2.29][49674] -> [..185.60.216.53][..443] [TLS.WhatsAppFiles][Download][Acceptable] + analyse: [.....1] [ip4][..tcp] [...192.168.2.29][49674] -> [..185.60.216.53][..443] [TLS.WhatsAppFiles][Download][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 24.640| 0.846| 4.345] + [IAT(c->s)...: 0.000| 24.640| 1.338| 5.493][IAT(s->c)...: 0.000| 0.461| 0.067| 0.126] + [PKTLEN(c->s): 66.000|1464.000| 324.200| 484.600][PKTLEN(s->c): 66.000|1464.000| 374.600| 501.900] + [BINS(c->s)..: 9,4,0,1,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0] + [BINS(s->c)..: 5,1,1,1,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0] + new: [.....2] [ip4][..tcp] [...192.168.2.29][49698] -> [..185.60.216.53][..443] + detected: [.....2] [ip4][..tcp] [...192.168.2.29][49698] -> [..185.60.216.53][..443] [TLS.WhatsAppFiles][Download][Acceptable] + detection-update: [.....2] [ip4][..tcp] [...192.168.2.29][49698] -> [..185.60.216.53][..443] [TLS.WhatsAppFiles][Download][Acceptable] + analyse: [.....2] [ip4][..tcp] [...192.168.2.29][49698] -> [..185.60.216.53][..443] [TLS.WhatsAppFiles][Download][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.108| 0.019| 0.031] + [IAT(c->s)...: 0.000| 0.065| 0.016| 0.025][IAT(s->c)...: 0.000| 0.108| 0.021| 0.034] + [PKTLEN(c->s): 66.000| 583.000| 141.900| 139.700][PKTLEN(s->c): 66.000|1464.000| 744.100| 666.400] + [BINS(c->s)..: 6,5,0,0,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 5,2,1,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,8,0,0,0,0] + end: [.....1] [ip4][..tcp] [...192.168.2.29][49674] -> [..185.60.216.53][..443] [TLS.WhatsAppFiles][Download][Acceptable] + idle: [.....2] [ip4][..tcp] [...192.168.2.29][49698] -> [..185.60.216.53][..443] [TLS.WhatsAppFiles][Download][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/whois.pcapng.out b/test/results/flow-info/whois.pcapng.out new file mode 100644 index 000000000..856aa3adb --- /dev/null +++ b/test/results/flow-info/whois.pcapng.out @@ -0,0 +1,20 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [......10.0.2.15][44188] -> [....192.0.47.59][...43] + detected: [.....1] [ip4][..tcp] [......10.0.2.15][44188] -> [....192.0.47.59][...43] [Whois-DAS][Network][Acceptable] + DAEMON-EVENT: [Processed: 11 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [...10.17.34.139][64016] -> [.....10.17.51.8][.4343] + detected: [.....2] [ip4][..tcp] [...10.17.34.139][64016] -> [.....10.17.51.8][.4343] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + detection-update: [.....2] [ip4][..tcp] [...10.17.34.139][64016] -> [.....10.17.51.8][.4343] [TLS][Web][Safe] + RISK: Known Proto on Non Std Port, Missing SNI TLS Extn + end: [.....1] [ip4][..tcp] [......10.0.2.15][44188] -> [....192.0.47.59][...43] [Whois-DAS][Network][Acceptable] + DAEMON-EVENT: [Processed: 18 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 1|updates: 0] + new: [.....3] [ip4][..tcp] [...192.30.45.30][...43] -> [..10.160.63.128][53217] + idle: [.....2] [ip4][..tcp] [...10.17.34.139][64016] -> [.....10.17.51.8][.4343] + guessed: [.....3] [ip4][..tcp] [...192.30.45.30][...43] -> [..10.160.63.128][53217] [Whois-DAS][Network][Acceptable] + end: [.....3] [ip4][..tcp] [...192.30.45.30][...43] -> [..10.160.63.128][53217] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/windowsupdate_over_http.pcap.out b/test/results/flow-info/windowsupdate_over_http.pcap.out new file mode 100644 index 000000000..d7dd4aa91 --- /dev/null +++ b/test/results/flow-info/windowsupdate_over_http.pcap.out @@ -0,0 +1,9 @@ + DAEMON-EVENT: init + new: [.....1] [ip4][..tcp] [......10.0.2.15][49815] -> [..151.99.72.125][...80] + detected: [.....1] [ip4][..tcp] [......10.0.2.15][49815] -> [..151.99.72.125][...80] [HTTP.WindowsUpdate][SoftwareUpdate][Safe] + RISK: HTTP Numeric IP Address + detection-update: [.....1] [ip4][..tcp] [......10.0.2.15][49815] -> [..151.99.72.125][...80] [HTTP.WindowsUpdate][Download][Safe] + RISK: Binary App Transfer, HTTP Numeric IP Address + idle: [.....1] [ip4][..tcp] [......10.0.2.15][49815] -> [..151.99.72.125][...80] [HTTP.WindowsUpdate][Download][Safe] + RISK: Binary App Transfer, HTTP Numeric IP Address + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/wireguard.pcap.out b/test/results/flow-info/wireguard.pcap.out new file mode 100644 index 000000000..991765440 --- /dev/null +++ b/test/results/flow-info/wireguard.pcap.out @@ -0,0 +1,21 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [139.162.192.157][51820] -> [...192.168.0.14][36116] + detected: [.....1] [ip4][..udp] [139.162.192.157][51820] -> [...192.168.0.14][36116] [WireGuard][VPN][Acceptable] + analyse: [.....1] [ip4][..udp] [139.162.192.157][51820] -> [...192.168.0.14][36116] [WireGuard][VPN][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 5.526| 0.606| 1.489] + [IAT(c->s)...: 0.000| 5.526| 0.522| 1.396][IAT(s->c)...: 0.000| 5.526| 0.723| 1.603] + [PKTLEN(c->s): 138.000| 842.000| 295.500| 218.500][PKTLEN(s->c): 138.000| 314.000| 208.200| 79.800] + [BINS(c->s)..: 0,0,0,6,7,0,0,0,0,1,1,0,0,0,0,0,1,0,0,1,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 0,0,0,7,1,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + update: [.....1] [ip4][..udp] [139.162.192.157][51820] -> [...192.168.0.14][36116] [WireGuard][VPN][Acceptable] + update: [.....1] [ip4][..udp] [139.162.192.157][51820] -> [...192.168.0.14][36116] [WireGuard][VPN][Acceptable] + update: [.....1] [ip4][..udp] [139.162.192.157][51820] -> [...192.168.0.14][36116] [WireGuard][VPN][Acceptable] + update: [.....1] [ip4][..udp] [139.162.192.157][51820] -> [...192.168.0.14][36116] [WireGuard][VPN][Acceptable] + update: [.....1] [ip4][..udp] [139.162.192.157][51820] -> [...192.168.0.14][36116] [WireGuard][VPN][Acceptable] + update: [.....1] [ip4][..udp] [139.162.192.157][51820] -> [...192.168.0.14][36116] [WireGuard][VPN][Acceptable] + update: [.....1] [ip4][..udp] [139.162.192.157][51820] -> [...192.168.0.14][36116] [WireGuard][VPN][Acceptable] + idle: [.....1] [ip4][..udp] [139.162.192.157][51820] -> [...192.168.0.14][36116] [WireGuard][VPN][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/wow.pcap.out b/test/results/flow-info/wow.pcap.out new file mode 100644 index 000000000..76706fc0d --- /dev/null +++ b/test/results/flow-info/wow.pcap.out @@ -0,0 +1,21 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.192.168.178.20][39309] -> [..12.129.222.53][...80] + new: [.....2] [ip4][..tcp] [.192.168.178.20][39312] -> [...24.105.29.21][...80] + detected: [.....1] [ip4][..tcp] [.192.168.178.20][39309] -> [..12.129.222.53][...80] [HTTP.WorldOfWarcraft][Game][Fun] + detected: [.....2] [ip4][..tcp] [.192.168.178.20][39312] -> [...24.105.29.21][...80] [HTTP.WorldOfWarcraft][Game][Fun] + new: [.....3] [ip4][..tcp] [.192.168.178.20][39329] -> [.12.129.228.153][.3724] + detected: [.....3] [ip4][..tcp] [.192.168.178.20][39329] -> [.12.129.228.153][.3724] [WorldOfWarcraft][Game][Fun] + new: [.....4] [ip4][..tcp] [.192.168.178.20][39364] -> [.12.129.228.153][.3724] + detected: [.....4] [ip4][..tcp] [.192.168.178.20][39364] -> [.12.129.228.153][.3724] [WorldOfWarcraft][Game][Fun] + DAEMON-EVENT: [Processed: 82 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 4 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..tcp] [.192.168.178.20][39593] -> [.12.129.228.152][.3724] + detected: [.....5] [ip4][..tcp] [.192.168.178.20][39593] -> [.12.129.228.152][.3724] [WorldOfWarcraft][Game][Fun] + idle: [.....3] [ip4][..tcp] [.192.168.178.20][39329] -> [.12.129.228.153][.3724] [WorldOfWarcraft][Game][Fun] + idle: [.....4] [ip4][..tcp] [.192.168.178.20][39364] -> [.12.129.228.153][.3724] [WorldOfWarcraft][Game][Fun] + idle: [.....5] [ip4][..tcp] [.192.168.178.20][39593] -> [.12.129.228.152][.3724] [WorldOfWarcraft][Game][Fun] + end: [.....1] [ip4][..tcp] [.192.168.178.20][39309] -> [..12.129.222.53][...80] [HTTP.WorldOfWarcraft][Game][Fun] + end: [.....2] [ip4][..tcp] [.192.168.178.20][39312] -> [...24.105.29.21][...80] [HTTP.WorldOfWarcraft][Game][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/xdmcp.pcap.out b/test/results/flow-info/xdmcp.pcap.out new file mode 100644 index 000000000..1e98a78d0 --- /dev/null +++ b/test/results/flow-info/xdmcp.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [.......10.1.2.2][61426] -> [.......10.1.2.4][..177] + detected: [.....1] [ip4][..udp] [.......10.1.2.2][61426] -> [.......10.1.2.4][..177] [XDMCP][RemoteAccess][Acceptable] + idle: [.....1] [ip4][..udp] [.......10.1.2.2][61426] -> [.......10.1.2.4][..177] [XDMCP][RemoteAccess][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/xiaomi.pcap.out b/test/results/flow-info/xiaomi.pcap.out new file mode 100644 index 000000000..00d057785 --- /dev/null +++ b/test/results/flow-info/xiaomi.pcap.out @@ -0,0 +1,34 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [....47.241.7.88][.5222] -> [..10.52.151.160][39180] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [....47.241.7.88][.5222] -> [..10.52.151.160][39180] [Xiaomi][Web][Acceptable] + DAEMON-EVENT: [Processed: 1 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [.115.164.74.232][.5222] -> [192.168.244.219][45904] + detected: [.....2] [ip4][..tcp] [.115.164.74.232][.5222] -> [192.168.244.219][45904] [Xiaomi][Web][Acceptable] + new: [.....3] [ip4][..tcp] [.115.164.74.232][.5222] -> [.192.168.247.13][38018] + detected: [.....3] [ip4][..tcp] [.115.164.74.232][.5222] -> [.192.168.247.13][38018] [Xiaomi][Web][Acceptable] + idle: [.....1] [ip4][..tcp] [....47.241.7.88][.5222] -> [..10.52.151.160][39180] [Xiaomi][Web][Acceptable] + new: [.....4] [ip4][..tcp] [..97.39.119.172][.5222] -> [..192.168.93.59][51488] + detected: [.....4] [ip4][..tcp] [..97.39.119.172][.5222] -> [..192.168.93.59][51488] [Xiaomi][Web][Acceptable] + DAEMON-EVENT: [Processed: 18 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 3 / 4|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....5] [ip4][..tcp] [..192.168.2.100][37708] -> [...3.127.176.74][.5222] + detected: [.....5] [ip4][..tcp] [..192.168.2.100][37708] -> [...3.127.176.74][.5222] [Xiaomi][Web][Acceptable] + idle: [.....2] [ip4][..tcp] [.115.164.74.232][.5222] -> [192.168.244.219][45904] [Xiaomi][Web][Acceptable] + idle: [.....4] [ip4][..tcp] [..97.39.119.172][.5222] -> [..192.168.93.59][51488] [Xiaomi][Web][Acceptable] + idle: [.....3] [ip4][..tcp] [.115.164.74.232][.5222] -> [.192.168.247.13][38018] [Xiaomi][Web][Acceptable] + DAEMON-EVENT: [Processed: 33 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 5|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....6] [ip4][..tcp] [..192.168.2.100][45106] -> [.18.193.233.122][.5222] + detected: [.....6] [ip4][..tcp] [..192.168.2.100][45106] -> [.18.193.233.122][.5222] [Xiaomi][Web][Acceptable] + idle: [.....5] [ip4][..tcp] [..192.168.2.100][37708] -> [...3.127.176.74][.5222] [Xiaomi][Web][Acceptable] + DAEMON-EVENT: [Processed: 48 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....7] [ip4][..tcp] [..192.168.2.100][48698] -> [...203.107.1.65][...80] + detected: [.....7] [ip4][..tcp] [..192.168.2.100][48698] -> [...203.107.1.65][...80] [HTTP.Xiaomi][Web][Acceptable] + RISK: HTTP Numeric IP Address + idle: [.....7] [ip4][..tcp] [..192.168.2.100][48698] -> [...203.107.1.65][...80] + idle: [.....6] [ip4][..tcp] [..192.168.2.100][45106] -> [.18.193.233.122][.5222] [Xiaomi][Web][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/xss.pcap.out b/test/results/flow-info/xss.pcap.out new file mode 100644 index 000000000..c2c916fac --- /dev/null +++ b/test/results/flow-info/xss.pcap.out @@ -0,0 +1,12 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.3.109][53514] -> [..192.168.3.107][...80] + new: [.....2] [ip4][..tcp] [..192.168.3.109][53516] -> [..192.168.3.107][...80] + detected: [.....1] [ip4][..tcp] [..192.168.3.109][53514] -> [..192.168.3.107][...80] [HTTP][Web][Acceptable] + RISK: HTTP Numeric IP Address + idle: [.....1] [ip4][..tcp] [..192.168.3.109][53514] -> [..192.168.3.107][...80] [HTTP][Web][Acceptable] + RISK: XSS Attack, HTTP Numeric IP Address + guessed: [.....2] [ip4][..tcp] [..192.168.3.109][53516] -> [..192.168.3.107][...80] [HTTP][Web][Acceptable] + idle: [.....2] [ip4][..tcp] [..192.168.3.109][53516] -> [..192.168.3.107][...80] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/youtube_quic.pcap.out b/test/results/flow-info/youtube_quic.pcap.out new file mode 100644 index 000000000..e48d41a1d --- /dev/null +++ b/test/results/flow-info/youtube_quic.pcap.out @@ -0,0 +1,20 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [....192.168.1.7][54997] -> [..216.58.205.66][..443] + detected: [.....1] [ip4][..udp] [....192.168.1.7][54997] -> [..216.58.205.66][..443] [QUIC.Google][Advertisement][Acceptable] + new: [.....2] [ip4][..udp] [....192.168.1.7][56074] -> [..216.58.198.33][..443] + detected: [.....2] [ip4][..udp] [....192.168.1.7][56074] -> [..216.58.198.33][..443] [QUIC.YouTube][Media][Fun] + analyse: [.....2] [ip4][..udp] [....192.168.1.7][56074] -> [..216.58.198.33][..443] [QUIC.YouTube][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.047| 0.007| 0.013] + [IAT(c->s)...: 0.000| 0.047| 0.009| 0.016][IAT(s->c)...: 0.000| 0.044| 0.006| 0.011] + [PKTLEN(c->s): 80.000|1392.000| 326.500| 465.400][PKTLEN(s->c): 73.000|1392.000|1234.300| 405.700] + [BINS(c->s)..: 0,8,0,0,2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0] + [BINS(s->c)..: 1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,16,0,0,0,0,0] + new: [.....3] [ip4][..udp] [....192.168.1.7][53859] -> [..216.58.205.66][..443] + detected: [.....3] [ip4][..udp] [....192.168.1.7][53859] -> [..216.58.205.66][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [.....2] [ip4][..udp] [....192.168.1.7][56074] -> [..216.58.198.33][..443] [QUIC.YouTube][Media][Fun] + idle: [.....1] [ip4][..udp] [....192.168.1.7][54997] -> [..216.58.205.66][..443] [QUIC.Google][Advertisement][Acceptable] + idle: [.....3] [ip4][..udp] [....192.168.1.7][53859] -> [..216.58.205.66][..443] [QUIC.Google][Advertisement][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/youtubeupload.pcap.out b/test/results/flow-info/youtubeupload.pcap.out new file mode 100644 index 000000000..b9044fa35 --- /dev/null +++ b/test/results/flow-info/youtubeupload.pcap.out @@ -0,0 +1,22 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...192.168.2.27][51925] -> [.172.217.23.111][..443] + detected: [.....1] [ip4][..udp] [...192.168.2.27][51925] -> [.172.217.23.111][..443] [QUIC.YouTubeUpload][Media][Fun] + new: [.....2] [ip4][..tcp] [...192.168.2.27][57452] -> [.172.217.23.111][..443] + detected: [.....2] [ip4][..tcp] [...192.168.2.27][57452] -> [.172.217.23.111][..443] [TLS.YouTubeUpload][Media][Fun] + detection-update: [.....2] [ip4][..tcp] [...192.168.2.27][57452] -> [.172.217.23.111][..443] [TLS.YouTubeUpload][Media][Fun] + detection-update: [.....2] [ip4][..tcp] [...192.168.2.27][57452] -> [.172.217.23.111][..443] [TLS.YouTubeUpload][Media][Fun] + new: [.....3] [ip4][..udp] [...192.168.2.27][62232] -> [.172.217.23.111][..443] + detected: [.....3] [ip4][..udp] [...192.168.2.27][62232] -> [.172.217.23.111][..443] [QUIC.YouTubeUpload][Media][Fun] + analyse: [.....1] [ip4][..udp] [...192.168.2.27][51925] -> [.172.217.23.111][..443] [QUIC.YouTubeUpload][Media][Fun] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 1.883| 0.207| 0.510] + [IAT(c->s)...: 0.000| 1.826| 0.153| 0.444][IAT(s->c)...: 0.000| 1.883| 0.320| 0.611] + [PKTLEN(c->s): 77.000|1392.000| 897.100| 601.900][PKTLEN(s->c): 58.000|1392.000| 528.000| 587.000] + [BINS(c->s)..: 0,6,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,0,0,0,0,0] + [BINS(s->c)..: 4,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0] + idle: [.....2] [ip4][..tcp] [...192.168.2.27][57452] -> [.172.217.23.111][..443] + idle: [.....1] [ip4][..udp] [...192.168.2.27][51925] -> [.172.217.23.111][..443] [QUIC.YouTubeUpload][Media][Fun] + idle: [.....3] [ip4][..udp] [...192.168.2.27][62232] -> [.172.217.23.111][..443] [QUIC.YouTubeUpload][Media][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/z3950.pcapng.out b/test/results/flow-info/z3950.pcapng.out new file mode 100644 index 000000000..d41aed199 --- /dev/null +++ b/test/results/flow-info/z3950.pcapng.out @@ -0,0 +1,14 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.2.100][58921] -> [.193.174.240.93][..210] + DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....2] [ip4][..tcp] [...192.168.0.20][46524] -> [.129.187.139.43][.9991] + guessed: [.....1] [ip4][..tcp] [..192.168.2.100][58921] -> [.193.174.240.93][..210] [Z3950][Network][Acceptable] + end: [.....1] [ip4][..tcp] [..192.168.2.100][58921] -> [.193.174.240.93][..210] + detected: [.....2] [ip4][..tcp] [...192.168.0.20][46524] -> [.129.187.139.43][.9991] [Z3950][Network][Acceptable] + RISK: Known Proto on Non Std Port + end: [.....2] [ip4][..tcp] [...192.168.0.20][46524] -> [.129.187.139.43][.9991] [Z3950][Network][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/zabbix.pcap.out b/test/results/flow-info/zabbix.pcap.out new file mode 100644 index 000000000..e30682c08 --- /dev/null +++ b/test/results/flow-info/zabbix.pcap.out @@ -0,0 +1,7 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.67.98][57162] -> [..192.168.67.25][10050] + detected: [.....1] [ip4][..tcp] [..192.168.67.98][57162] -> [..192.168.67.25][10050] [Zabbix][Network][Acceptable] + end: [.....1] [ip4][..tcp] [..192.168.67.98][57162] -> [..192.168.67.25][10050] [Zabbix][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/zattoo.pcap.out b/test/results/flow-info/zattoo.pcap.out new file mode 100644 index 000000000..af672b0ee --- /dev/null +++ b/test/results/flow-info/zattoo.pcap.out @@ -0,0 +1,13 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [.....10.101.0.2][.2930] -> [.....10.102.0.2][..443] + detected: [.....1] [ip4][..tcp] [.....10.101.0.2][.2930] -> [.....10.102.0.2][..443] [TLS.Zattoo][Video][Fun] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....1] [ip4][..tcp] [.....10.101.0.2][.2930] -> [.....10.102.0.2][..443] [TLS.Zattoo][Video][Fun] + RISK: Weak TLS Cipher, TLS (probably) Not Carrying HTTPS + new: [.....2] [ip4][..tcp] [.....10.101.0.2][.2936] -> [.....10.102.0.2][...80] + detected: [.....2] [ip4][..tcp] [.....10.101.0.2][.2936] -> [.....10.102.0.2][...80] [HTTP.Zattoo][Video][Fun] + end: [.....1] [ip4][..tcp] [.....10.101.0.2][.2930] -> [.....10.102.0.2][..443] + end: [.....2] [ip4][..tcp] [.....10.101.0.2][.2936] -> [.....10.102.0.2][...80] [HTTP.Zattoo][Video][Fun] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/zcash.pcap.out b/test/results/flow-info/zcash.pcap.out new file mode 100644 index 000000000..763b4052e --- /dev/null +++ b/test/results/flow-info/zcash.pcap.out @@ -0,0 +1,18 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [...192.168.2.92][55190] -> [.178.32.196.217][.9050] + detected: [.....1] [ip4][..tcp] [...192.168.2.92][55190] -> [.178.32.196.217][.9050] [Mining][Mining][Unsafe] + RISK: Known Proto on Non Std Port, Unsafe Protocol + analyse: [.....1] [ip4][..tcp] [...192.168.2.92][55190] -> [.178.32.196.217][.9050] [Mining][Mining][Unsafe] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 50.191| 6.014| 12.034] + [IAT(c->s)...: 0.000| 48.786| 5.480| 11.434][IAT(s->c)...: 0.000| 50.191| 6.663| 12.694] + [PKTLEN(c->s): 66.000| 326.000| 162.200| 96.900][PKTLEN(s->c): 66.000| 369.000| 149.400| 101.000] + [BINS(c->s)..: 9,0,0,0,0,8,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 6,5,0,0,0,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + DAEMON-EVENT: [Processed: 87 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + idle: [.....1] [ip4][..tcp] [...192.168.2.92][55190] -> [.178.32.196.217][.9050] [Mining][Mining][Unsafe] + RISK: Known Proto on Non Std Port, Unsafe Protocol + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/zoom.pcap.out b/test/results/flow-info/zoom.pcap.out new file mode 100644 index 000000000..966c04af9 --- /dev/null +++ b/test/results/flow-info/zoom.pcap.out @@ -0,0 +1,173 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.117][54854] -> [..172.217.21.72][..443] [MIDSTREAM] + detected: [.....1] [ip4][..tcp] [..192.168.1.117][54854] -> [..172.217.21.72][..443] [TLS.GoogleServices][Web][Acceptable] + RISK: Obsolete TLS (v1.1 or older) + new: [.....2] [ip4][..udp] [..192.168.1.117][.5353] -> [....224.0.0.251][.5353] + detected: [.....2] [ip4][..udp] [..192.168.1.117][.5353] -> [....224.0.0.251][.5353] [MDNS][Network][Acceptable] + new: [.....3] [ip4][..tcp] [..192.168.1.117][54863] -> [.167.99.215.164][.4434] + detected: [.....3] [ip4][..tcp] [..192.168.1.117][54863] -> [.167.99.215.164][.4434] [TLS.ntop][Network][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + detection-update: [.....3] [ip4][..tcp] [..192.168.1.117][54863] -> [.167.99.215.164][.4434] [TLS.ntop][Network][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + ERROR-EVENT: Unknown packet type + new: [.....4] [ip4][..tcp] [..192.168.1.117][54341] -> [.62.149.152.153][..993] [MIDSTREAM] + detected: [.....4] [ip4][..tcp] [..192.168.1.117][54341] -> [.62.149.152.153][..993] [IMAPS][Email][Safe] + new: [.....5] [ip4][..udp] [..192.168.1.117][57025] -> [239.255.255.250][.1900] + detected: [.....5] [ip4][..udp] [..192.168.1.117][57025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + new: [.....6] [ip4][..udp] [..192.168.1.117][..137] -> [..192.168.1.255][..137] + detected: [.....6] [ip4][..udp] [..192.168.1.117][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + new: [.....7] [ip4][..udp] [..192.168.1.117][64352] -> [....192.168.1.1][...53] + detected: [.....7] [ip4][..udp] [..192.168.1.117][64352] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + detection-update: [.....7] [ip4][..udp] [..192.168.1.117][64352] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + new: [.....8] [ip4][..tcp] [..192.168.1.117][54864] -> [..52.202.62.238][..443] + new: [.....9] [ip4][..udp] [..192.168.1.117][65394] -> [....192.168.1.1][...53] + detected: [.....9] [ip4][..udp] [..192.168.1.117][65394] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + detection-update: [.....9] [ip4][..udp] [..192.168.1.117][65394] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + new: [....10] [ip4][.icmp] [..192.168.1.117] -> [....192.168.1.1] + detected: [....10] [ip4][.icmp] [..192.168.1.117] -> [....192.168.1.1] [ICMP][Network][Acceptable] + new: [....11] [ip4][..tcp] [..192.168.1.117][54798] -> [..13.225.84.182][..443] [MIDSTREAM] + detected: [.....8] [ip4][..tcp] [..192.168.1.117][54864] -> [..52.202.62.238][..443] [TLS.Zoom][Video][Acceptable] + new: [....12] [ip4][..udp] [..192.168.1.117][23903] -> [..162.255.37.14][.3478] + detection-update: [.....8] [ip4][..tcp] [..192.168.1.117][54864] -> [..52.202.62.238][..443] [TLS.Zoom][Video][Acceptable] + detection-update: [.....8] [ip4][..tcp] [..192.168.1.117][54864] -> [..52.202.62.238][..443] [TLS.Zoom][Video][Acceptable] + detected: [....12] [ip4][..udp] [..192.168.1.117][23903] -> [..162.255.37.14][.3478] [STUN.Zoom][Video][Acceptable] + new: [....13] [ip4][..udp] [..192.168.1.117][23903] -> [..162.255.38.14][.3478] + detected: [....13] [ip4][..udp] [..192.168.1.117][23903] -> [..162.255.38.14][.3478] [STUN.Zoom][Video][Acceptable] + new: [....14] [ip4][..udp] [..192.168.1.117][23903] -> [..162.255.38.14][.3479] + detected: [....14] [ip4][..udp] [..192.168.1.117][23903] -> [..162.255.38.14][.3479] [STUN.Zoom][Video][Acceptable] + RISK: Known Proto on Non Std Port + new: [....15] [ip4][..tcp] [..192.168.1.117][53867] -> [..104.199.65.42][...80] [MIDSTREAM] + new: [....16] [ip4][..tcp] [..192.168.1.117][53872] -> [..35.186.224.53][..443] [MIDSTREAM] + detected: [....16] [ip4][..tcp] [..192.168.1.117][53872] -> [..35.186.224.53][..443] [TLS.GoogleCloud][Cloud][Acceptable] + new: [....17] [ip4][.icmp] [..192.168.1.117] -> [..162.255.38.14] + detected: [....17] [ip4][.icmp] [..192.168.1.117] -> [..162.255.38.14] [ICMP][Network][Acceptable] + ERROR-EVENT: Unknown packet type + new: [....18] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] + detected: [....18] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + new: [....19] [ip4][..tcp] [..192.168.1.117][54865] -> [..52.202.62.196][..443] + new: [....20] [ip4][..udp] [..192.168.1.117][62988] -> [....192.168.1.1][...53] + detected: [....20] [ip4][..udp] [..192.168.1.117][62988] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + detection-update: [....20] [ip4][..udp] [..192.168.1.117][62988] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + new: [....21] [ip4][..tcp] [..192.168.1.117][54866] -> [..52.202.62.236][..443] + detected: [....19] [ip4][..tcp] [..192.168.1.117][54865] -> [..52.202.62.196][..443] [TLS.Zoom][Video][Acceptable] + detected: [....21] [ip4][..tcp] [..192.168.1.117][54866] -> [..52.202.62.236][..443] [TLS.Zoom][Video][Acceptable] + detection-update: [....19] [ip4][..tcp] [..192.168.1.117][54865] -> [..52.202.62.196][..443] [TLS.Zoom][Video][Acceptable] + detection-update: [....19] [ip4][..tcp] [..192.168.1.117][54865] -> [..52.202.62.196][..443] [TLS.Zoom][Video][Acceptable] + detection-update: [....21] [ip4][..tcp] [..192.168.1.117][54866] -> [..52.202.62.236][..443] [TLS.Zoom][Video][Acceptable] + detection-update: [....21] [ip4][..tcp] [..192.168.1.117][54866] -> [..52.202.62.236][..443] [TLS.Zoom][Video][Acceptable] + analyse: [....21] [ip4][..tcp] [..192.168.1.117][54866] -> [..52.202.62.236][..443] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.211| 0.038| 0.059] + [IAT(c->s)...: 0.000| 0.211| 0.043| 0.065][IAT(s->c)...: 0.000| 0.144| 0.035| 0.055] + [PKTLEN(c->s): 54.000| 864.000| 202.900| 271.500][PKTLEN(s->c): 60.000|1506.000|1095.400| 617.800] + [BINS(c->s)..: 11,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 3,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,11,0,0] + detection-update: [....21] [ip4][..tcp] [..192.168.1.117][54866] -> [..52.202.62.236][..443] [TLS.Zoom][Video][Acceptable] + new: [....22] [ip4][..udp] [..192.168.1.117][57621] -> [..192.168.1.255][57621] + detected: [....22] [ip4][..udp] [..192.168.1.117][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] + new: [....23] [ip4][..udp] [..192.168.1.117][62563] -> [....192.168.1.1][...53] + detected: [....23] [ip4][..udp] [..192.168.1.117][62563] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + new: [....24] [ip4][..udp] [..192.168.1.117][58063] -> [....192.168.1.1][...53] + detected: [....24] [ip4][..udp] [..192.168.1.117][58063] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + new: [....25] [ip4][..tcp] [..192.168.1.117][54867] -> [.213.19.144.105][..443] + new: [....26] [ip4][..tcp] [..192.168.1.117][54868] -> [.213.19.144.104][..443] + detection-update: [....23] [ip4][..udp] [..192.168.1.117][62563] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + new: [....27] [ip4][..tcp] [..192.168.1.117][54869] -> [.213.244.140.85][..443] + detected: [....25] [ip4][..tcp] [..192.168.1.117][54867] -> [.213.19.144.105][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....24] [ip4][..udp] [..192.168.1.117][58063] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + new: [....28] [ip4][..tcp] [..192.168.1.117][54870] -> [.213.244.140.84][..443] + detected: [....26] [ip4][..tcp] [..192.168.1.117][54868] -> [.213.19.144.104][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....27] [ip4][..tcp] [..192.168.1.117][54869] -> [.213.244.140.85][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detected: [....28] [ip4][..tcp] [..192.168.1.117][54870] -> [.213.244.140.84][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....25] [ip4][..tcp] [..192.168.1.117][54867] -> [.213.19.144.105][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....27] [ip4][..tcp] [..192.168.1.117][54869] -> [.213.244.140.85][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....25] [ip4][..tcp] [..192.168.1.117][54867] -> [.213.19.144.105][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....26] [ip4][..tcp] [..192.168.1.117][54868] -> [.213.19.144.104][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....27] [ip4][..tcp] [..192.168.1.117][54869] -> [.213.244.140.85][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....28] [ip4][..tcp] [..192.168.1.117][54870] -> [.213.244.140.84][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....26] [ip4][..tcp] [..192.168.1.117][54868] -> [.213.19.144.104][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....28] [ip4][..tcp] [..192.168.1.117][54870] -> [.213.244.140.84][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + new: [....29] [ip4][..udp] [..192.168.1.117][51185] -> [....192.168.1.1][...53] + detected: [....29] [ip4][..udp] [..192.168.1.117][51185] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + detection-update: [....29] [ip4][..udp] [..192.168.1.117][51185] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + new: [....30] [ip4][..tcp] [..192.168.1.117][54871] -> [..109.94.160.99][..443] + detected: [....30] [ip4][..tcp] [..192.168.1.117][54871] -> [..109.94.160.99][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....30] [ip4][..tcp] [..192.168.1.117][54871] -> [..109.94.160.99][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [....30] [ip4][..tcp] [..192.168.1.117][54871] -> [..109.94.160.99][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [....30] [ip4][..tcp] [..192.168.1.117][54871] -> [..109.94.160.99][..443] [TLS.Zoom][Video][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.156| 0.028| 0.040] + [IAT(c->s)...: 0.000| 0.156| 0.028| 0.038][IAT(s->c)...: 0.000| 0.156| 0.029| 0.043] + [PKTLEN(c->s): 66.000|1506.000| 236.800| 344.500][PKTLEN(s->c): 66.000|1506.000| 688.600| 655.800] + [BINS(c->s)..: 10,1,0,1,2,1,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 4,1,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,4,0,0] + new: [....31] [ip4][..udp] [..192.168.1.117][58327] -> [..109.94.160.99][.8801] + detected: [....31] [ip4][..udp] [..192.168.1.117][58327] -> [..109.94.160.99][.8801] [Zoom][Video][Acceptable] + ERROR-EVENT: Unknown packet type + new: [....32] [ip4][..udp] [..192.168.1.117][60620] -> [..109.94.160.99][.8801] + detected: [....32] [ip4][..udp] [..192.168.1.117][60620] -> [..109.94.160.99][.8801] [Zoom][Video][Acceptable] + analyse: [....31] [ip4][..udp] [..192.168.1.117][58327] -> [..109.94.160.99][.8801] [Zoom][Video][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.036| 0.010| 0.009] + [IAT(c->s)...: 0.005| 0.032| 0.018| 0.014][IAT(s->c)...: 0.000| 0.036| 0.010| 0.008] + [PKTLEN(c->s): 55.000| 149.000| 103.000| 38.400][PKTLEN(s->c): 60.000|1071.000| 967.900| 303.600] + [BINS(c->s)..: 1,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 1,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + new: [....33] [ip4][..udp] [..192.168.1.117][61731] -> [..109.94.160.99][.8801] + detected: [....33] [ip4][..udp] [..192.168.1.117][61731] -> [..109.94.160.99][.8801] [Zoom][Video][Acceptable] + idle: [....17] [ip4][.icmp] [..192.168.1.117] -> [..162.255.38.14] [ICMP][Network][Acceptable] + idle: [.....9] [ip4][..udp] [..192.168.1.117][65394] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] + idle: [....18] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable] + idle: [....10] [ip4][.icmp] [..192.168.1.117] -> [....192.168.1.1] [ICMP][Network][Acceptable] + guessed: [....11] [ip4][..tcp] [..192.168.1.117][54798] -> [..13.225.84.182][..443] [TLS.AmazonAWS][Cloud][Acceptable] + end: [....11] [ip4][..tcp] [..192.168.1.117][54798] -> [..13.225.84.182][..443] + idle: [....29] [ip4][..udp] [..192.168.1.117][51185] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + idle: [.....1] [ip4][..tcp] [..192.168.1.117][54854] -> [..172.217.21.72][..443] + idle: [.....6] [ip4][..udp] [..192.168.1.117][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] + idle: [....33] [ip4][..udp] [..192.168.1.117][61731] -> [..109.94.160.99][.8801] [Zoom][Video][Acceptable] + guessed: [....15] [ip4][..tcp] [..192.168.1.117][53867] -> [..104.199.65.42][...80] [HTTP.Google][Web][Acceptable] + idle: [....15] [ip4][..tcp] [..192.168.1.117][53867] -> [..104.199.65.42][...80] + idle: [.....8] [ip4][..tcp] [..192.168.1.117][54864] -> [..52.202.62.238][..443] + idle: [....19] [ip4][..tcp] [..192.168.1.117][54865] -> [..52.202.62.196][..443] + idle: [....21] [ip4][..tcp] [..192.168.1.117][54866] -> [..52.202.62.236][..443] [TLS.Zoom][Video][Acceptable] + idle: [....13] [ip4][..udp] [..192.168.1.117][23903] -> [..162.255.38.14][.3478] [STUN.Zoom][Video][Acceptable] + idle: [....12] [ip4][..udp] [..192.168.1.117][23903] -> [..162.255.37.14][.3478] [STUN.Zoom][Video][Acceptable] + idle: [....14] [ip4][..udp] [..192.168.1.117][23903] -> [..162.255.38.14][.3479] [STUN.Zoom][Video][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....2] [ip4][..udp] [..192.168.1.117][.5353] -> [....224.0.0.251][.5353] + idle: [....22] [ip4][..udp] [..192.168.1.117][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] + end: [.....3] [ip4][..tcp] [..192.168.1.117][54863] -> [.167.99.215.164][.4434] [TLS.ntop][Network][Safe] + RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS + idle: [....24] [ip4][..udp] [..192.168.1.117][58063] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + end: [....25] [ip4][..tcp] [..192.168.1.117][54867] -> [.213.19.144.105][..443] + end: [....26] [ip4][..tcp] [..192.168.1.117][54868] -> [.213.19.144.104][..443] + idle: [.....7] [ip4][..udp] [..192.168.1.117][64352] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + idle: [....31] [ip4][..udp] [..192.168.1.117][58327] -> [..109.94.160.99][.8801] [Zoom][Video][Acceptable] + end: [....27] [ip4][..tcp] [..192.168.1.117][54869] -> [.213.244.140.85][..443] + end: [....28] [ip4][..tcp] [..192.168.1.117][54870] -> [.213.244.140.84][..443] + idle: [....23] [ip4][..udp] [..192.168.1.117][62563] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + idle: [.....4] [ip4][..tcp] [..192.168.1.117][54341] -> [.62.149.152.153][..993] + idle: [....32] [ip4][..udp] [..192.168.1.117][60620] -> [..109.94.160.99][.8801] [Zoom][Video][Acceptable] + idle: [.....5] [ip4][..udp] [..192.168.1.117][57025] -> [239.255.255.250][.1900] [SSDP][System][Acceptable] + idle: [....16] [ip4][..tcp] [..192.168.1.117][53872] -> [..35.186.224.53][..443] [TLS.GoogleCloud][Cloud][Acceptable] + idle: [....30] [ip4][..tcp] [..192.168.1.117][54871] -> [..109.94.160.99][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + idle: [....20] [ip4][..udp] [..192.168.1.117][62988] -> [....192.168.1.1][...53] [DNS.Zoom][Video][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/zoom2.pcap.out b/test/results/flow-info/zoom2.pcap.out new file mode 100644 index 000000000..11cf229fc --- /dev/null +++ b/test/results/flow-info/zoom2.pcap.out @@ -0,0 +1,56 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..tcp] [..192.168.1.178][50076] -> [.144.195.73.154][..443] + detected: [.....1] [ip4][..tcp] [..192.168.1.178][50076] -> [.144.195.73.154][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....1] [ip4][..tcp] [..192.168.1.178][50076] -> [.144.195.73.154][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + detection-update: [.....1] [ip4][..tcp] [..192.168.1.178][50076] -> [.144.195.73.154][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + analyse: [.....1] [ip4][..tcp] [..192.168.1.178][50076] -> [.144.195.73.154][..443] [TLS.Zoom][Video][Acceptable] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.199| 0.059| 0.083] + [IAT(c->s)...: 0.000| 0.182| 0.057| 0.080][IAT(s->c)...: 0.000| 0.199| 0.061| 0.086] + [PKTLEN(c->s): 66.000|1506.000| 243.400| 372.600][PKTLEN(s->c): 66.000|1506.000| 714.700| 603.300] + [BINS(c->s)..: 11,1,0,1,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0] + [BINS(s->c)..: 3,1,1,0,1,0,1,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,2,0,0,0,0,0,3,0,0] + new: [.....2] [ip4][..udp] [..192.168.1.178][60653] -> [.144.195.73.154][.8801] + analyse: [.....2] [ip4][..udp] [..192.168.1.178][60653] -> [.144.195.73.154][.8801] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.167| 0.025| 0.040] + [IAT(c->s)...: 0.012| 0.102| 0.072| 0.036][IAT(s->c)...: 0.000| 0.167| 0.018| 0.036] + [PKTLEN(c->s): 165.000| 170.000| 168.000| 2.400][PKTLEN(s->c): 60.000|1078.000| 820.700| 435.100] + [BINS(c->s)..: 0,0,0,2,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + guessed: [.....2] [ip4][..udp] [..192.168.1.178][60653] -> [.144.195.73.154][.8801] [Zoom][Video][Acceptable] + detected: [.....2] [ip4][..udp] [..192.168.1.178][60653] -> [.144.195.73.154][.8801] [Zoom][Video][Acceptable] + new: [.....3] [ip4][..udp] [..192.168.1.178][58117] -> [.144.195.73.154][.8801] + new: [.....4] [ip4][..udp] [..192.168.1.178][57953] -> [.144.195.73.154][.8801] + analyse: [.....3] [ip4][..udp] [..192.168.1.178][58117] -> [.144.195.73.154][.8801] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.176| 0.043| 0.049] + [IAT(c->s)...: 0.000| 0.168| 0.060| 0.053][IAT(s->c)...: 0.000| 0.176| 0.033| 0.044] + [PKTLEN(c->s): 130.000| 203.000| 166.200| 16.000][PKTLEN(s->c): 60.000| 178.000| 129.100| 37.100] + [BINS(c->s)..: 0,0,1,6,4,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 2,5,3,8,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + guessed: [.....3] [ip4][..udp] [..192.168.1.178][58117] -> [.144.195.73.154][.8801] [Zoom][Video][Acceptable] + detected: [.....3] [ip4][..udp] [..192.168.1.178][58117] -> [.144.195.73.154][.8801] [Zoom][Video][Acceptable] + analyse: [.....4] [ip4][..udp] [..192.168.1.178][57953] -> [.144.195.73.154][.8801] + [min|max|avg|stddev] + [IAT(flow)...: 0.000| 0.188| 0.047| 0.043] + [IAT(c->s)...: 0.000| 0.106| 0.052| 0.034][IAT(s->c)...: 0.000| 0.188| 0.042| 0.049] + [PKTLEN(c->s): 69.000| 185.000| 125.800| 53.300][PKTLEN(s->c): 60.000| 117.000| 86.900| 23.200] + [BINS(c->s)..: 7,0,0,2,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + [BINS(s->c)..: 9,2,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + guessed: [.....4] [ip4][..udp] [..192.168.1.178][57953] -> [.144.195.73.154][.8801] [Zoom][Video][Acceptable] + detected: [.....4] [ip4][..udp] [..192.168.1.178][57953] -> [.144.195.73.154][.8801] [Zoom][Video][Acceptable] + new: [.....5] [ip4][.icmp] [..192.168.1.178] -> [.144.195.73.154] + detected: [.....5] [ip4][.icmp] [..192.168.1.178] -> [.144.195.73.154] [ICMP][Network][Acceptable] + idle: [.....4] [ip4][..udp] [..192.168.1.178][57953] -> [.144.195.73.154][.8801] [Zoom][Video][Acceptable] + end: [.....1] [ip4][..tcp] [..192.168.1.178][50076] -> [.144.195.73.154][..443] [TLS.Zoom][Video][Acceptable] + RISK: TLS (probably) Not Carrying HTTPS + idle: [.....3] [ip4][..udp] [..192.168.1.178][58117] -> [.144.195.73.154][.8801] [Zoom][Video][Acceptable] + idle: [.....2] [ip4][..udp] [..192.168.1.178][60653] -> [.144.195.73.154][.8801] [Zoom][Video][Acceptable] + idle: [.....5] [ip4][.icmp] [..192.168.1.178] -> [.144.195.73.154] [ICMP][Network][Acceptable] + DAEMON-EVENT: shutdown diff --git a/test/run_tests.sh b/test/run_tests.sh index 25a247a87..b333fb44c 100755 --- a/test/run_tests.sh +++ b/test/run_tests.sh @@ -8,6 +8,7 @@ nDPId_test_EXEC="$(realpath "${2:-"${MYDIR}/../nDPId-test"}")" NETCAT_EXEC="$(which nc) -q 0 -l 127.0.0.1 9000" JSON_VALIDATOR="$(realpath "${3:-"${MYDIR}/../examples/py-schema-validation/py-schema-validation.py"}")" SEMN_VALIDATOR="$(realpath "${4:-"${MYDIR}/../examples/py-semantic-validation/py-semantic-validation.py"}")" +FLOW_INFO="$(realpath "${5:-"${MYDIR}/../examples/py-flow-info/flow-info.py"}")" IS_GIT=$(test -d "${MYDIR}/../.git" -o -f "${MYDIR}/../.git" && printf '1' || printf '0') function usage() @@ -19,6 +20,7 @@ usage: ${0} [path-to-nDPI-source-root] \\ path-to-nDPId-test-exec defaults to ${nDPId_test_EXEC} path-to-nDPId-JSON-validator defaults to ${JSON_VALIDATOR} path-to-nDPId-SEMANTIC-validator default to ${SEMN_VALIDATOR} + path-to-nDPId-flow-info defaults to ${FLOW_INFO} EOF return 0 } @@ -138,6 +140,14 @@ for pcap_file in *.pcap *.pcapng *.cap; do fi done +for out_file in ${MYDIR}/results/*.out; do + pcap_file="$(basename ${out_file%.out})" + if [ ! -r "${pcap_file}" ]; then + printf "%-${LINE_SPACES}s\t%s\n" "${pcap_file}" "[MISSING]" + TESTS_FAILED=$((TESTS_FAILED + 1)) + fi +done + function validate_results() { prefix_str="${1}" @@ -175,6 +185,54 @@ function validate_results() cat <<EOF +-------------------- +-- Flow Info DIFF -- +-------------------- + +EOF + +cd "${MYDIR}" +for out_file in results/*.out; do + result_file="$(basename ${out_file})" + printf "%-${LINE_SPACES}s\t" "${result_file}" + cat "${out_file}" | grep -vE '^~~.*$' | ${NETCAT_EXEC} & + nc_pid=$! + ${FLOW_INFO} --host 127.0.0.1 --port 9000 \ + --no-color --no-statusbar --hide-instance-info \ + --print-analyse-results >"/tmp/nDPId-test-stdout/${result_file}.new" 2>/dev/null + kill -SIGTERM ${nc_pid} 2>/dev/null + wait ${nc_pid} 2>/dev/null + if [ ! -r "${MYDIR}/results/flow-info/${result_file}" ]; then + printf '%s\n' '[NEW]' + test ${IS_GIT} -eq 1 && \ + mv -v "/tmp/nDPId-test-stdout/${result_file}.new" \ + "${MYDIR}/results/flow-info/${result_file}" + TESTS_FAILED=$((TESTS_FAILED + 1)) + elif diff -u0 "${MYDIR}/results/flow-info/${result_file}" \ + "/tmp/nDPId-test-stdout/${result_file}.new" >/dev/null; then + printf '%s\n' '[OK]' + rm -f "/tmp/nDPId-test-stdout/${result_file}.new" + else + printf '%s\n' '[DIFF]' + diff -u0 "${MYDIR}/results/flow-info/${result_file}" \ + "/tmp/nDPId-test-stdout/${result_file}.new" + test ${IS_GIT} -eq 1 && \ + mv -v "/tmp/nDPId-test-stdout/${result_file}.new" \ + "${MYDIR}/results/flow-info/${result_file}" + TESTS_FAILED=$((TESTS_FAILED + 1)) + fi +done + +for out_file in ${MYDIR}/results/flow-info/*.out; do + result_file="$(basename ${out_file})" + if [ ! -r "${MYDIR}/results/${result_file}" ]; then + printf "%-${LINE_SPACES}s\t%s\n" "${result_file}" "[MISSING]" + TESTS_FAILED=$((TESTS_FAILED + 1)) + fi +done + +cat <<EOF + -------------------------------- -- SCHEMA/SEMANTIC Validation -- -------------------------------- |