diff options
Diffstat (limited to 'test/results/default/nexon.pcapng.out')
| -rw-r--r-- | test/results/default/nexon.pcapng.out | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/test/results/default/nexon.pcapng.out b/test/results/default/nexon.pcapng.out new file mode 100644 index 000000000..d3bfc42b2 --- /dev/null +++ b/test/results/default/nexon.pcapng.out @@ -0,0 +1,35 @@ +00612{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"max-flows-per-thread":32768,"max-idle-flows-per-thread":1024,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} +00833{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":1,"packets-processed":0,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":2,"global_ts_usec":1742389906169830} +00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1742389906169830,"flow_src_last_pkt_time":1742389906169830,"flow_dst_last_pkt_time":1742389906169830,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1742389906169830,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"54.64.252.215","src_port":46824,"dst_port":9995,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1742389906169830,"flow_dst_last_pkt_time":1742389906169830,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1742389906169830,"pkt":"dNo47VMyYhO2esBpCABFAAA86N5AAEAGUdrAqAxDNkD817boJwvbrMopAAAAAKAC\/\/8djgAAAgQFtAQCCApapEv+AAAAAAEDAwk="} +00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1742389906169830,"flow_dst_last_pkt_time":1742389906433489,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1742389906433489,"pkt":"YhO2esBpdNo47VMyCABFAAA8AABAAO4GjLg2QPzXwKgMQycLtugTaPaR26zKKqASaN\/x+wAAAgQFtAQCCAo6uH3xWqRL\/gEDAwc="} +00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1742389906475959,"flow_dst_last_pkt_time":1742389906433489,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1742389906475959,"pkt":"dNo47VMyYhO2esBpCABFAAA06N9AAEAGUeHAqAxDNkD817boJwvbrMoqE2j2koAQAKyHyAAAAQEIClqkTTE6uH3x"} +00572{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_src_last_pkt_time":1742389906476780,"flow_dst_last_pkt_time":1742389906433489,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"thread_ts_usec":1742389906476780,"pkt":"dNo47VMyYhO2esBpCABFAABM6OBAAEAGUcjAqAxDNkD817boJwvbrMoqE2j2koAYAKz7bQAAAQEIClqkTTI6uH3xGAAAAGQAAAC0NDDjE3C1GyyE9ny3hIgP"} +00921{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1742389906169830,"flow_src_last_pkt_time":1742389906476780,"flow_dst_last_pkt_time":1742389906433489,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":24,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":24,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1742389906476780,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"54.64.252.215","src_port":46824,"dst_port":9995,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Nexon","proto_id":"113","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_src_last_pkt_time":1742389906476780,"flow_dst_last_pkt_time":1742389906740075,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1742389906740075,"pkt":"YhO2esBpdNo47VMyCABFAAA0MAJAAO4GXL42QPzXwKgMQycLtugTaPaS26zKQoAQANKGVwAAAQEICjq4fyNapE0y"} +00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1742389980610107,"flow_src_last_pkt_time":1742389980610107,"flow_dst_last_pkt_time":1742389980610107,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1742389980610107,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"18.185.38.147","src_port":39908,"dst_port":7500,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +00556{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1742389980610107,"flow_dst_last_pkt_time":1742389980610107,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1742389980610107,"pkt":"dNo47VMyYhO2esBpCABFAAA8cBMAAEAGBHLAqAxDErkmk5vkHUz673FcAAAAAKAC\/\/8ocgAAAgQFtAQCCAr\/kPRGAAAAAAEDAwk="} +00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1742389980610107,"flow_dst_last_pkt_time":1742389980623920,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1742389980623920,"pkt":"YhO2esBpdNo47VMyCABFAAA0ycFAAHcGM8sSuSaTwKgMQx1Mm+THenoX+u9xXYAS\/\/8BuQAAAgQFtAEDAwgBAQQC"} +00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1742389980630918,"flow_dst_last_pkt_time":1742389980623920,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1742389980630918,"pkt":"dNo47VMyYhO2esBpCABFAAAocBQAAEAGBIXAqAxDErkmk5vkHUz673Fdx3p6GFAQAKxB4AAA"} +00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_src_last_pkt_time":1742389980732321,"flow_dst_last_pkt_time":1742389980623920,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1742389980732321,"pkt":"dNo47VMyYhO2esBpCABFAAA8cBUAAEAGBHDAqAxDErkmk5vkHUz673Fdx3p6GFAYAKw6OgAAhLVv+xY6mS5Z13X38NvT+vV62U8="} +00922{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1742389980610107,"flow_src_last_pkt_time":1742389980732321,"flow_dst_last_pkt_time":1742389980623920,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":20,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":20,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1742389980732321,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"18.185.38.147","src_port":39908,"dst_port":7500,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Nexon","proto_id":"113","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00574{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":5,"flow_src_last_pkt_time":1742389980732321,"flow_dst_last_pkt_time":1742389980745494,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"thread_ts_usec":1742389980745494,"pkt":"YhO2esBpdNo47VMyCABFAABMycJAAHcGM7ISuSaTwKgMQx1Mm+THenoY+u9xcVAYBAK+IQAAlhgj0hY6mS9Z1nXHQGzOb1uMItFcd39WoyyPGQ1P\/k451GZ2"} +02229{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":62,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":15,"flow_first_seen":1742389906169830,"flow_src_last_pkt_time":1742390001417221,"flow_dst_last_pkt_time":1742390001680430,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":224,"flow_dst_max_l4_payload_len":28,"flow_src_tot_l4_payload_len":880,"flow_dst_tot_l4_payload_len":36,"midstream":0,"thread_ts_usec":1742390001680430,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"54.64.252.215","src_port":46824,"dst_port":9995,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"data_analysis": {"iat": {"min":44,"avg":6153483.5,"max":43050817,"stddev":11570571.0,"var":133878106816512.0,"ent":3.3,"data": [263659,306129,821,306586,44,307390,74,307185,313383,2118528,2477124,7517181,7472379,291234,291203,25327845,25327915,1611489,1610944,265504,265357,43050071,43050817,266877,266488,9059166,9059123,289475,289534,4522224,4522242]},"pktlen": {"min":52,"avg":81.1,"max":276,"stddev":43.7,"var":1910.2,"ent":4.8,"data": [60,60,52,76,52,60,100,52,80,52,108,52,108,52,108,52,276,52,108,52,116,52,116,52,108,52,108,52,108,52,116,52]},"bins": {"c_to_s": [5,8,3,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]},"directions": [0,1,0,0,1,1,0,0,1,0,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1],"entropies": [4.813301563,5.346035480,5.195351124,5.435106754,5.325253010,5.093415737,6.106114388,5.156889439,5.743621826,5.118427753,6.171375751,5.286791325,6.270958900,5.209868431,6.164386272,5.248329639,7.040317535,5.171406746,6.261518478,5.248329639,6.273720264,5.118427753,6.418159008,5.171406746,6.134338379,5.171406746,6.159847260,5.209868431,6.194433689,5.171406269,6.331952095,5.130219936]},"ndpi": {"confidence": {"6":"DPI"},"proto":"Nexon","proto_id":"113","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00970{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":128,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":13,"flow_first_seen":1742389980610107,"flow_src_last_pkt_time":1742389994061799,"flow_dst_last_pkt_time":1742389992891608,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":271,"flow_dst_max_l4_payload_len":837,"flow_src_tot_l4_payload_len":369,"flow_dst_tot_l4_payload_len":1079,"midstream":0,"thread_ts_usec":1742390106138218,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"18.185.38.147","src_port":39908,"dst_port":7500,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Nexon","proto_id":"113","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00969{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":128,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":50,"flow_dst_packets_processed":48,"flow_first_seen":1742389906169830,"flow_src_last_pkt_time":1742390105875118,"flow_dst_last_pkt_time":1742390106138218,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":224,"flow_dst_max_l4_payload_len":28,"flow_src_tot_l4_payload_len":4120,"flow_dst_tot_l4_payload_len":36,"midstream":0,"thread_ts_usec":1742390106138218,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"54.64.252.215","src_port":46824,"dst_port":9995,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Nexon","proto_id":"113","proto_by_ip":"AmazonAWS","proto_by_ip_id":265,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00845{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":128,"source":"cfgs\/default\/pcap\/nexon.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":128,"packets-processed":128,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":5604,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":2,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":2,"total-idle-flows":2,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":20,"global_ts_usec":1742390106138218} +~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ +~~ packets captured/processed: 128/128 +~~ skipped flows.............: 0 +~~ total layer4 data length..: 5604 bytes +~~ total detected protocols..: 2 +~~ total active/idle flows...: 2/2 +~~ total timeout flows.......: 0 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +~~ total memory allocated....: 9215109 bytes +~~ total memory freed........: 9215109 bytes +~~ total allocations/frees...: 149917/149917 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +~~ json message min len.......: 530 chars +~~ json message max len.......: 2234 chars +~~ json message avg len.......: 1341 chars |