aboutsummaryrefslogtreecommitdiff
path: root/test/results/flow-info/WebattackXSS.pcap.out
diff options
context:
space:
mode:
Diffstat (limited to 'test/results/flow-info/WebattackXSS.pcap.out')
-rw-r--r--test/results/flow-info/WebattackXSS.pcap.out190
1 files changed, 114 insertions, 76 deletions
diff --git a/test/results/flow-info/WebattackXSS.pcap.out b/test/results/flow-info/WebattackXSS.pcap.out
index 1649e16f3..85f12758b 100644
--- a/test/results/flow-info/WebattackXSS.pcap.out
+++ b/test/results/flow-info/WebattackXSS.pcap.out
@@ -14,12 +14,14 @@
new: [.....7] [ip4][..tcp] [.....172.16.0.1][52220] -> [..192.168.10.50][...80]
new: [.....8] [ip4][..tcp] [.....172.16.0.1][52222] -> [..192.168.10.50][...80]
analyse: [.....5] [ip4][..tcp] [.....172.16.0.1][52200] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 2.805| 0.259| 0.699]
- [IAT(c->s)...: 0.000| 2.804| 0.212| 0.639][IAT(s->c)...: 0.000| 2.805| 0.335| 0.779]
- [PKTLEN(c->s): 66.000| 625.000| 215.000| 187.800][PKTLEN(s->c): 66.000|7992.000|1204.400|2089.100]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 2.805| 0.259| 0.699|488344.093| 0.000]
+ [PKTLEN......: 66.000| 7992.000| 586.000| 1374.100|1888110.100| 3.500]
[BINS(c->s)..: 12,0,0,0,0,0,0,0,0,2,2,2,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 3,0,0,0,0,0,0,0,0,0,0,1,0,0,0,2,2,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,1]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,1,0,1,1,0,0,0,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1]
+ [IATS........: 124,911,4,880,1546,2266,23623,26506,34185,32207,1143,1040,156,926,221,412,39847,69861,111250,1094,61600,62698,1083,842694,846614,3833,131682,132698,1100,2804194,2805230,0]
+ [PKTLENS.....: 74,74,66,375,66,578,66,408,1198,431,807,454,1514,7992,66,66,66,66,377,571,66,407,571,66,625,429,66,423,587,66,66,66]
new: [.....9] [ip4][..tcp] [.....172.16.0.1][52298] -> [..192.168.10.50][...80]
detected: [.....9] [ip4][..tcp] [.....172.16.0.1][52298] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
RISK: HTTP Numeric IP Address
@@ -27,12 +29,14 @@
new: [....11] [ip4][..tcp] [.....172.16.0.1][52318] -> [..192.168.10.50][...80]
new: [....12] [ip4][..tcp] [.....172.16.0.1][52320] -> [..192.168.10.50][...80]
analyse: [.....9] [ip4][..tcp] [.....172.16.0.1][52298] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 0.856| 0.080| 0.207]
- [IAT(c->s)...: 0.000| 0.852| 0.065| 0.188][IAT(s->c)...: 0.000| 0.856| 0.103| 0.231]
- [PKTLEN(c->s): 66.000| 625.000| 216.300| 189.300][PKTLEN(s->c): 66.000|4410.000|1311.500|1460.300]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 0.856| 0.080| 0.207|42651.251| 0.000]
+ [PKTLEN......: 66.000| 4410.000| 627.000| 1050.300|1103191.500| 3.800]
[BINS(c->s)..: 12,0,0,0,0,0,0,0,0,2,2,2,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,1,0,0,0,2,1,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,3]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,1,1,0,0,0,0,1,0,0,1,0,0,1,0,0,1,0]
+ [IATS........: 152,921,4,863,1492,2144,20680,25919,42487,6012,44423,1321,232,1259,67,51,1208,273,437,68644,70522,37847,60433,98253,1091,851698,856251,4579,109710,139259,29522,0]
+ [PKTLENS.....: 74,74,66,375,66,578,66,408,1200,66,431,807,66,454,4410,4410,752,66,66,66,377,571,66,407,571,66,625,429,66,449,1870,66]
detected: [....10] [ip4][..tcp] [.....172.16.0.1][52300] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
RISK: HTTP Numeric IP Address
detected: [....11] [ip4][..tcp] [.....172.16.0.1][52318] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
@@ -74,12 +78,14 @@
new: [....45] [ip4][..tcp] [.....172.16.0.1][52978] -> [..192.168.10.50][...80]
new: [....46] [ip4][..tcp] [.....172.16.0.1][53004] -> [..192.168.10.50][...80]
analyse: [....41] [ip4][..tcp] [.....172.16.0.1][52910] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 3.809| 0.610| 0.941]
- [IAT(c->s)...: 0.001| 3.808| 0.498| 0.866][IAT(s->c)...: 0.000| 3.809| 0.814| 1.032]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1559.300| 703.400]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 3.809| 0.610| 0.941|885441.823| 0.000]
+ [PKTLEN......: 66.000| 1935.000| 730.800| 755.700|571022.800| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 97,845,3808060,3808906,3088,3867,1010444,1014181,3805,246952,250608,3613,1037920,1041646,3765,265406,269174,3736,1020088,1024520,4409,240929,244611,3693,1033112,1036761,3674,252788,256472,3667,1006191,0]
+ [PKTLENS.....: 74,74,66,651,66,1933,66,449,1836,66,651,1934,66,449,1836,66,651,1935,66,449,1836,66,651,1934,66,449,1836,66,651,1932,66,449]
new: [....47] [ip4][..tcp] [.....172.16.0.1][53018] -> [..192.168.10.50][...80]
new: [....48] [ip4][..tcp] [.....172.16.0.1][53032] -> [..192.168.10.50][...80]
new: [....49] [ip4][..tcp] [.....172.16.0.1][53058] -> [..192.168.10.50][...80]
@@ -137,12 +143,14 @@
new: [....83] [ip4][..tcp] [.....172.16.0.1][53678] -> [..192.168.10.50][...80]
new: [....84] [ip4][..tcp] [.....172.16.0.1][53692] -> [..192.168.10.50][...80]
analyse: [....78] [ip4][..tcp] [.....172.16.0.1][53584] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 4.899| 0.653| 1.186]
- [IAT(c->s)...: 0.001| 4.898| 0.513| 1.076][IAT(s->c)...: 0.000| 4.899| 0.909| 1.326]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1934.000|1550.300| 699.200]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 4.899| 0.653| 1.186|1406566.662| 0.000]
+ [PKTLEN......: 66.000| 1934.000| 727.700| 750.900|563862.600| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 127,684,4897818,4898512,8582,9379,243178,246717,3562,1041173,1044833,3840,241167,245261,3969,1005489,1009493,3958,240995,244588,3615,1008862,1012541,3693,268328,273700,5337,1005565,1009604,4099,266047,0]
+ [PKTLENS.....: 74,74,66,449,66,1837,66,651,1933,66,449,1836,66,651,1934,66,449,1836,66,651,1932,66,449,1836,66,651,1933,66,449,1836,66,651]
end: [....10] [ip4][..tcp] [.....172.16.0.1][52300] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
RISK: HTTP Numeric IP Address
end: [....11] [ip4][..tcp] [.....172.16.0.1][52318] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
@@ -259,12 +267,14 @@
end: [....48] [ip4][..tcp] [.....172.16.0.1][53032] -> [..192.168.10.50][...80]
new: [...119] [ip4][..tcp] [.....172.16.0.1][54362] -> [..192.168.10.50][...80]
analyse: [...114] [ip4][..tcp] [.....172.16.0.1][54268] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 3.827| 0.609| 0.943]
- [IAT(c->s)...: 0.001| 3.826| 0.497| 0.869][IAT(s->c)...: 0.000| 3.827| 0.811| 1.036]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1559.200| 703.400]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 3.827| 0.609| 0.943|889903.972| 0.000]
+ [PKTLEN......: 66.000| 1935.000| 730.800| 755.600|570947.800| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 107,901,3826349,3827235,3096,3895,1023011,1026934,3928,268230,273681,5427,1005208,1009216,4030,256246,259862,3614,1006897,1010591,3696,250084,253817,3763,1011263,1016096,4808,241019,244651,3645,1020517,0]
+ [PKTLENS.....: 74,74,66,651,66,1935,66,449,1836,66,651,1934,66,449,1836,66,651,1934,66,449,1836,66,651,1933,66,449,1836,66,651,1931,66,449]
new: [...120] [ip4][..tcp] [.....172.16.0.1][54376] -> [..192.168.10.50][...80]
new: [...121] [ip4][..tcp] [.....172.16.0.1][54390] -> [..192.168.10.50][...80]
new: [...122] [ip4][..tcp] [.....172.16.0.1][54416] -> [..192.168.10.50][...80]
@@ -376,12 +386,14 @@
new: [...156] [ip4][..tcp] [.....172.16.0.1][55024] -> [..192.168.10.50][...80]
new: [...157] [ip4][..tcp] [.....172.16.0.1][55038] -> [..192.168.10.50][...80]
analyse: [...152] [ip4][..tcp] [.....172.16.0.1][54956] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 3.643| 0.568| 0.904]
- [IAT(c->s)...: 0.001| 3.642| 0.446| 0.827][IAT(s->c)...: 0.000| 3.643| 0.788| 0.991]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1550.100| 699.100]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 3.643| 0.568| 0.904|816455.025| 0.000]
+ [PKTLEN......: 66.000| 1935.000| 727.700| 750.800|563712.500| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 95,698,3641887,3642588,3124,4095,234104,238457,4183,1006077,1010963,4878,233120,236850,3778,1005601,1010652,5027,236201,239833,3605,1006827,1010500,3683,232616,236267,3614,1034871,1038879,4091,256266,0]
+ [PKTLENS.....: 74,74,66,449,66,1837,66,651,1933,66,449,1836,66,651,1929,66,449,1836,66,651,1935,66,449,1836,66,651,1933,66,449,1836,66,651]
new: [...158] [ip4][..tcp] [.....172.16.0.1][55064] -> [..192.168.10.50][...80]
new: [...159] [ip4][..tcp] [.....172.16.0.1][55078] -> [..192.168.10.50][...80]
new: [...160] [ip4][..tcp] [.....172.16.0.1][55092] -> [..192.168.10.50][...80]
@@ -489,12 +501,14 @@
new: [...194] [ip4][..tcp] [.....172.16.0.1][55700] -> [..192.168.10.50][...80]
new: [...195] [ip4][..tcp] [.....172.16.0.1][55726] -> [..192.168.10.50][...80]
analyse: [...190] [ip4][..tcp] [.....172.16.0.1][55632] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 3.785| 0.602| 0.936]
- [IAT(c->s)...: 0.001| 3.784| 0.492| 0.861][IAT(s->c)...: 0.000| 3.785| 0.802| 1.028]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1559.600| 703.600]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 3.785| 0.602| 0.936|875951.489| 0.000]
+ [PKTLEN......: 66.000| 1935.000| 730.900| 755.900|571323.500| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 124,875,3784070,3784925,3065,3805,1003969,1007602,3694,223699,227380,3680,1007795,1011581,3778,255776,259460,3650,1007868,1011955,4221,230369,234793,4295,1037481,1041928,4473,238345,242041,3668,1009864,0]
+ [PKTLENS.....: 74,74,66,651,66,1935,66,449,1836,66,651,1934,66,449,1836,66,651,1935,66,449,1836,66,651,1934,66,449,1836,66,651,1934,66,449]
new: [...196] [ip4][..tcp] [.....172.16.0.1][55740] -> [..192.168.10.50][...80]
guessed: [...117] [ip4][..tcp] [.....172.16.0.1][54322] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
end: [...117] [ip4][..tcp] [.....172.16.0.1][54322] -> [..192.168.10.50][...80]
@@ -619,12 +633,14 @@
guessed: [...158] [ip4][..tcp] [.....172.16.0.1][55064] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
end: [...158] [ip4][..tcp] [.....172.16.0.1][55064] -> [..192.168.10.50][...80]
analyse: [...227] [ip4][..tcp] [.....172.16.0.1][56306] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 4.805| 0.635| 1.170]
- [IAT(c->s)...: 0.001| 4.805| 0.547| 1.107][IAT(s->c)...: 0.000| 4.805| 0.757| 1.241]
- [PKTLEN(c->s): 66.000| 651.000| 290.400| 245.600][PKTLEN(s->c): 66.000|1934.000|1322.200| 716.700]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 4.805| 0.635| 1.170|1368332.173| 0.000]
+ [PKTLEN......: 66.000| 1934.000| 709.600| 708.000|501313.900| 4.300]
[BINS(c->s)..: 10,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,7]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,1,0,0,1,0,0,1,1,0,0,1,0,0,1,0,0,1]
+ [IATS........: 124,694,4804702,4805402,3052,3844,248597,252202,3707,1022416,1026219,3805,225184,229157,49,3959,1026815,1030902,4151,232536,236200,80,3611,1006031,1010739,4812,233237,236850,3621,1007952,1011661,0]
+ [PKTLENS.....: 74,74,66,449,66,1837,66,651,1934,66,449,1836,66,651,1514,486,66,449,1836,66,651,1514,486,66,449,1836,66,651,1934,66,449,1836]
new: [...233] [ip4][..tcp] [.....172.16.0.1][56414] -> [..192.168.10.50][...80]
new: [...234] [ip4][..tcp] [.....172.16.0.1][56428] -> [..192.168.10.50][...80]
new: [...235] [ip4][..tcp] [.....172.16.0.1][56454] -> [..192.168.10.50][...80]
@@ -739,12 +755,14 @@
new: [...270] [ip4][..tcp] [.....172.16.0.1][57076] -> [..192.168.10.50][...80]
new: [...271] [ip4][..tcp] [.....172.16.0.1][57090] -> [..192.168.10.50][...80]
analyse: [...265] [ip4][..tcp] [.....172.16.0.1][56994] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 3.819| 0.606| 0.944]
- [IAT(c->s)...: 0.001| 3.818| 0.495| 0.869][IAT(s->c)...: 0.000| 3.819| 0.808| 1.038]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1934.000|1559.000| 703.300]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 3.819| 0.606| 0.944|891595.915| 0.000]
+ [PKTLEN......: 66.000| 1934.000| 730.700| 755.500|570797.200| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 126,889,3818133,3818967,2889,3638,1026811,1031184,4412,231903,235642,3751,1006981,1010745,3756,236240,239931,3646,1008869,1012823,4179,228551,232759,4019,1040911,1048342,7412,251595,255221,3632,1017670,0]
+ [PKTLENS.....: 74,74,66,651,66,1933,66,449,1836,66,651,1933,66,449,1836,66,651,1933,66,449,1836,66,651,1934,66,449,1836,66,651,1932,66,449]
new: [...272] [ip4][..tcp] [.....172.16.0.1][57116] -> [..192.168.10.50][...80]
new: [...273] [ip4][..tcp] [.....172.16.0.1][57130] -> [..192.168.10.50][...80]
new: [...274] [ip4][..tcp] [.....172.16.0.1][57144] -> [..192.168.10.50][...80]
@@ -858,12 +876,14 @@
new: [...308] [ip4][..tcp] [.....172.16.0.1][57752] -> [..192.168.10.50][...80]
new: [...309] [ip4][..tcp] [.....172.16.0.1][57778] -> [..192.168.10.50][...80]
analyse: [...304] [ip4][..tcp] [.....172.16.0.1][57684] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 3.536| 0.567| 0.877]
- [IAT(c->s)...: 0.001| 3.535| 0.445| 0.805][IAT(s->c)...: 0.000| 3.536| 0.788| 0.957]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1934.000|1550.300| 699.200]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 3.536| 0.567| 0.877|769788.412| 0.000]
+ [PKTLEN......: 66.000| 1934.000| 727.700| 750.900|563862.600| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 126,910,3535287,3536204,3041,3865,353475,357566,4142,1009473,1013529,4051,235924,239646,3697,1007485,1011210,3722,236124,239766,3661,1007627,1011378,3776,240922,244715,3743,1011730,1015517,3791,232129,0]
+ [PKTLENS.....: 74,74,66,449,66,1837,66,651,1932,66,449,1836,66,651,1933,66,449,1836,66,651,1933,66,449,1836,66,651,1934,66,449,1836,66,651]
new: [...310] [ip4][..tcp] [.....172.16.0.1][57792] -> [..192.168.10.50][...80]
new: [...311] [ip4][..tcp] [.....172.16.0.1][57806] -> [..192.168.10.50][...80]
guessed: [...231] [ip4][..tcp] [.....172.16.0.1][56374] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
@@ -991,12 +1011,14 @@
guessed: [...272] [ip4][..tcp] [.....172.16.0.1][57116] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
end: [...272] [ip4][..tcp] [.....172.16.0.1][57116] -> [..192.168.10.50][...80]
analyse: [...342] [ip4][..tcp] [.....172.16.0.1][58360] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 3.810| 0.603| 0.941]
- [IAT(c->s)...: 0.001| 3.809| 0.492| 0.866][IAT(s->c)...: 0.000| 3.810| 0.804| 1.034]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1559.400| 703.500]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 3.810| 0.603| 0.941|884966.883| 0.000]
+ [PKTLEN......: 66.000| 1935.000| 730.800| 755.700|571097.900| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 124,686,3808906,3809547,3416,4144,1007073,1011285,4302,225901,229521,3769,1021770,1025776,4116,233969,238478,4482,1006263,1010669,4325,238452,243200,4543,1006668,1011166,4498,253524,257102,3581,1008005,0]
+ [PKTLENS.....: 74,74,66,651,66,1934,66,449,1836,66,651,1934,66,449,1836,66,651,1933,66,449,1836,66,651,1933,66,449,1836,66,651,1935,66,449]
new: [...348] [ip4][..tcp] [.....172.16.0.1][58468] -> [..192.168.10.50][...80]
new: [...349] [ip4][..tcp] [.....172.16.0.1][58482] -> [..192.168.10.50][...80]
new: [...350] [ip4][..tcp] [.....172.16.0.1][58496] -> [..192.168.10.50][...80]
@@ -1110,12 +1132,14 @@
end: [...308] [ip4][..tcp] [.....172.16.0.1][57752] -> [..192.168.10.50][...80]
new: [...385] [ip4][..tcp] [.....172.16.0.1][59124] -> [..192.168.10.50][...80]
analyse: [...380] [ip4][..tcp] [.....172.16.0.1][59042] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 4.823| 0.637| 1.173]
- [IAT(c->s)...: 0.001| 4.822| 0.494| 1.065][IAT(s->c)...: 0.000| 4.823| 0.897| 1.306]
- [PKTLEN(c->s): 66.000| 651.000| 269.000| 242.700][PKTLEN(s->c): 66.000|1935.000|1550.600| 699.400]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 4.823| 0.637| 1.173|1374936.236| 0.000]
+ [PKTLEN......: 66.000| 1935.000| 709.600| 759.800|577334.100| 4.200]
[BINS(c->s)..: 12,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0]
+ [IATS........: 143,1062,4821803,4822860,2874,5990,221999,227886,4985,1013,1004953,1011219,4071,265484,269299,3619,1019861,1023488,4016,238184,242252,4785,1005968,1010668,4015,237942,242400,5048,1010956,1015950,5036,0]
+ [PKTLENS.....: 74,74,66,449,66,1837,66,651,1935,66,66,449,1836,66,651,1933,66,449,1836,66,651,1935,66,449,1836,66,651,1933,66,449,1836,66]
new: [...386] [ip4][..tcp] [.....172.16.0.1][59150] -> [..192.168.10.50][...80]
new: [...387] [ip4][..tcp] [.....172.16.0.1][59164] -> [..192.168.10.50][...80]
new: [...388] [ip4][..tcp] [.....172.16.0.1][59178] -> [..192.168.10.50][...80]
@@ -1232,12 +1256,14 @@
new: [...423] [ip4][..tcp] [.....172.16.0.1][59812] -> [..192.168.10.50][...80]
new: [...424] [ip4][..tcp] [.....172.16.0.1][59826] -> [..192.168.10.50][...80]
analyse: [...419] [ip4][..tcp] [.....172.16.0.1][59732] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 3.767| 0.604| 0.933]
- [IAT(c->s)...: 0.001| 3.766| 0.494| 0.860][IAT(s->c)...: 0.000| 3.767| 0.806| 1.024]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1559.300| 703.400]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 3.767| 0.604| 0.933|871184.138| 0.000]
+ [PKTLEN......: 66.000| 1935.000| 730.800| 755.700|571022.800| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 122,677,3766369,3767000,3476,4237,1039907,1045427,5545,227268,230918,3646,1037098,1040865,3812,252859,256647,3763,1024020,1027777,3716,237350,240983,3608,1007832,1011497,3720,234952,238656,3696,1007191,0]
+ [PKTLENS.....: 74,74,66,651,66,1934,66,449,1836,66,651,1932,66,449,1836,66,651,1935,66,449,1836,66,651,1933,66,449,1836,66,651,1934,66,449]
new: [...425] [ip4][..tcp] [.....172.16.0.1][59852] -> [..192.168.10.50][...80]
new: [...426] [ip4][..tcp] [.....172.16.0.1][59866] -> [..192.168.10.50][...80]
guessed: [...346] [ip4][..tcp] [.....172.16.0.1][58440] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
@@ -1368,12 +1394,14 @@
end: [...389] [ip4][..tcp] [.....172.16.0.1][59192] -> [..192.168.10.50][...80]
new: [...463] [ip4][..tcp] [.....172.16.0.1][60558] -> [..192.168.10.50][...80]
analyse: [...458] [ip4][..tcp] [.....172.16.0.1][60464] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 3.582| 0.571| 0.887]
- [IAT(c->s)...: 0.001| 3.581| 0.449| 0.813][IAT(s->c)...: 0.000| 3.582| 0.793| 0.969]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1934.000|1550.300| 699.200]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 3.582| 0.571| 0.887|786468.045| 0.000]
+ [PKTLEN......: 66.000| 1934.000| 727.700| 750.900|563862.700| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 130,887,3581223,3582115,3304,4122,271038,275625,4605,1007486,1011252,3777,268863,273004,4125,1007482,1011640,4170,263574,267468,3888,1019754,1023735,4007,253226,261155,7923,1002871,1011773,8903,255870,0]
+ [PKTLENS.....: 74,74,66,449,66,1837,66,651,1933,66,449,1836,66,651,1934,66,449,1836,66,651,1931,66,449,1836,66,651,1934,66,449,1836,66,651]
new: [...464] [ip4][..tcp] [.....172.16.0.1][60572] -> [..192.168.10.50][...80]
new: [...465] [ip4][..tcp] [.....172.16.0.1][60598] -> [..192.168.10.50][...80]
new: [...466] [ip4][..tcp] [.....172.16.0.1][60612] -> [..192.168.10.50][...80]
@@ -1485,12 +1513,14 @@
new: [...500] [ip4][..tcp] [.....172.16.0.1][32988] -> [..192.168.10.50][...80]
new: [...501] [ip4][..tcp] [.....172.16.0.1][33002] -> [..192.168.10.50][...80]
analyse: [...495] [ip4][..tcp] [.....172.16.0.1][32906] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 3.862| 0.614| 0.953]
- [IAT(c->s)...: 0.001| 3.861| 0.502| 0.878][IAT(s->c)...: 0.000| 3.862| 0.818| 1.046]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1559.200| 703.400]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 3.862| 0.614| 0.953|908128.223| 0.000]
+ [PKTLEN......: 66.000| 1935.000| 730.800| 755.600|570948.000| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 158,871,3861200,3861987,3248,3959,1007386,1010966,3670,256861,260494,3559,1018334,1021980,3614,243418,246972,3620,1033482,1037187,3726,244230,248333,4100,1037495,1041661,4162,261455,265110,3630,1039015,0]
+ [PKTLENS.....: 74,74,66,651,66,1934,66,449,1836,66,651,1934,66,449,1836,66,651,1934,66,449,1836,66,651,1930,66,449,1836,66,651,1935,66,449]
new: [...502] [ip4][..tcp] [.....172.16.0.1][33028] -> [..192.168.10.50][...80]
new: [...503] [ip4][..tcp] [.....172.16.0.1][33042] -> [..192.168.10.50][...80]
new: [...504] [ip4][..tcp] [.....172.16.0.1][33068] -> [..192.168.10.50][...80]
@@ -1606,12 +1636,14 @@
new: [...536] [ip4][..tcp] [.....172.16.0.1][33648] -> [..192.168.10.50][...80]
new: [...537] [ip4][..tcp] [.....172.16.0.1][33674] -> [..192.168.10.50][...80]
analyse: [...532] [ip4][..tcp] [.....172.16.0.1][33580] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 4.841| 0.651| 1.171]
- [IAT(c->s)...: 0.001| 4.840| 0.511| 1.064][IAT(s->c)...: 0.000| 4.841| 0.906| 1.307]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1935.000|1550.500| 699.300]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 4.841| 0.651| 1.171|1372280.717| 0.000]
+ [PKTLEN......: 66.000| 1935.000| 727.800| 751.000|564013.300| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 126,862,4839753,4840595,3674,4464,263225,266840,3672,1005298,1009118,3796,260614,264369,3758,1024972,1028663,3708,266053,269708,3666,1007636,1011884,4257,260865,265134,4231,1006690,1010841,4181,244813,0]
+ [PKTLENS.....: 74,74,66,449,66,1837,66,651,1933,66,449,1836,66,651,1935,66,449,1836,66,651,1932,66,449,1836,66,651,1934,66,449,1836,66,651]
new: [...538] [ip4][..tcp] [.....172.16.0.1][33688] -> [..192.168.10.50][...80]
new: [...539] [ip4][..tcp] [.....172.16.0.1][33702] -> [..192.168.10.50][...80]
guessed: [...463] [ip4][..tcp] [.....172.16.0.1][60558] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
@@ -1721,12 +1753,14 @@
new: [...572] [ip4][..tcp] [.....172.16.0.1][34332] -> [..192.168.10.50][...80]
new: [...573] [ip4][..tcp] [.....172.16.0.1][34346] -> [..192.168.10.50][...80]
analyse: [...569] [ip4][..tcp] [.....172.16.0.1][34278] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 2.588| 0.498| 0.689]
- [IAT(c->s)...: 0.000| 2.588| 0.386| 0.640][IAT(s->c)...: 0.000| 2.588| 0.702| 0.726]
- [PKTLEN(c->s): 66.000| 651.000| 278.600| 253.400][PKTLEN(s->c): 66.000|1934.000|1558.800| 703.200]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 2.588| 0.498| 0.689|474371.129| 0.000]
+ [PKTLEN......: 66.000| 1934.000| 718.700| 762.800|581830.000| 4.200]
[BINS(c->s)..: 12,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,0,1,0,0,1,0]
+ [IATS........: 171,739,2587661,2588369,3663,4498,1020517,1024859,4382,244684,248374,3703,1042345,1046980,4607,242309,245980,3660,1031191,1034926,3726,241353,245065,3596,495,1025211,1029311,3750,251257,255524,4221,0]
+ [PKTLENS.....: 74,74,66,651,66,1932,66,449,1836,66,651,1932,66,449,1836,66,651,1933,66,449,1836,66,651,1934,66,66,449,1836,66,651,1932,66]
guessed: [...498] [ip4][..tcp] [.....172.16.0.1][32960] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
end: [...498] [ip4][..tcp] [.....172.16.0.1][32960] -> [..192.168.10.50][...80]
guessed: [...499] [ip4][..tcp] [.....172.16.0.1][32974] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
@@ -1853,12 +1887,14 @@
new: [...611] [ip4][..tcp] [.....172.16.0.1][35034] -> [..192.168.10.50][...80]
new: [...612] [ip4][..tcp] [.....172.16.0.1][35048] -> [..192.168.10.50][...80]
analyse: [...606] [ip4][..tcp] [.....172.16.0.1][34940] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 4.897| 0.655| 1.187]
- [IAT(c->s)...: 0.001| 4.896| 0.514| 1.077][IAT(s->c)...: 0.000| 4.897| 0.912| 1.325]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1934.000|1550.500| 699.300]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 4.897| 0.655| 1.187|1408178.323| 0.000]
+ [PKTLEN......: 66.000| 1934.000| 727.800| 751.000|564013.200| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 168,874,4896388,4897215,3139,3939,250433,254530,4103,1006878,1011034,4128,267330,271177,3882,1007953,1011957,4030,246777,250412,3605,1038702,1042399,3673,241578,245223,3629,1046261,1049943,3750,242035,0]
+ [PKTLENS.....: 74,74,66,449,66,1837,66,651,1934,66,449,1836,66,651,1933,66,449,1836,66,651,1933,66,449,1836,66,651,1934,66,449,1836,66,651]
new: [...613] [ip4][..tcp] [.....172.16.0.1][35074] -> [..192.168.10.50][...80]
new: [...614] [ip4][..tcp] [.....172.16.0.1][35088] -> [..192.168.10.50][...80]
new: [...615] [ip4][..tcp] [.....172.16.0.1][35114] -> [..192.168.10.50][...80]
@@ -1967,12 +2003,14 @@
new: [...648] [ip4][..tcp] [.....172.16.0.1][35696] -> [..192.168.10.50][...80]
new: [...649] [ip4][..tcp] [.....172.16.0.1][35722] -> [..192.168.10.50][...80]
analyse: [...643] [ip4][..tcp] [.....172.16.0.1][35626] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]
- [min|max|avg|stddev]
- [IAT(flow)...: 0.000| 3.954| 0.620| 0.972]
- [IAT(c->s)...: 0.001| 3.953| 0.506| 0.895][IAT(s->c)...: 0.000| 3.954| 0.826| 1.070]
- [PKTLEN(c->s): 66.000| 651.000| 296.900| 251.200][PKTLEN(s->c): 66.000|1934.000|1559.000| 703.300]
+ [min|max|avg|stddev|variance|entropy]
+ [IAT.........: 0.000| 3.954| 0.620| 0.972|945707.024| 0.000]
+ [PKTLEN......: 66.000| 1934.000| 730.700| 755.500|570797.200| 4.200]
[BINS(c->s)..: 11,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9]
+ [DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0,1,0,0]
+ [IATS........: 124,706,3953188,3953842,3024,3763,1020630,1024309,3710,248238,252345,4156,1041683,1045979,4295,255096,258771,3649,1007135,1010804,3655,252666,256217,3575,1010481,1014239,3761,262869,266680,3784,1039870,0]
+ [PKTLENS.....: 74,74,66,651,66,1934,66,449,1836,66,651,1932,66,449,1836,66,651,1933,66,449,1836,66,651,1933,66,449,1836,66,651,1933,66,449]
new: [...650] [ip4][..tcp] [.....172.16.0.1][35736] -> [..192.168.10.50][...80]
new: [...651] [ip4][..tcp] [.....172.16.0.1][35762] -> [..192.168.10.50][...80]
guessed: [...574] [ip4][..tcp] [.....172.16.0.1][34372] -> [..192.168.10.50][...80] [HTTP][Web][Acceptable]