diff options
Diffstat (limited to 'test/results/flow-info/default/dcerpc.pcap.out')
| -rw-r--r-- | test/results/flow-info/default/dcerpc.pcap.out | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/test/results/flow-info/default/dcerpc.pcap.out b/test/results/flow-info/default/dcerpc.pcap.out new file mode 100644 index 000000000..2e89a37e8 --- /dev/null +++ b/test/results/flow-info/default/dcerpc.pcap.out @@ -0,0 +1,24 @@ + DAEMON-EVENT: init + DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] + DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + new: [.....1] [ip4][..udp] [...192.168.1.11][49155] -> [...192.168.1.20][34964] + detected: [.....1] [ip4][..udp] [...192.168.1.11][49155] -> [...192.168.1.20][34964] [DCERPC.PROFINET_IO][Unknown][IoT-Scada][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....2] [ip4][..udp] [...192.168.1.20][49161] -> [...192.168.1.11][49155] + detected: [.....2] [ip4][..udp] [...192.168.1.20][49161] -> [...192.168.1.11][49155] [DCERPC.PROFINET_IO][Unknown][IoT-Scada][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....3] [ip4][..udp] [...192.168.1.20][49162] -> [...192.168.1.11][34964] + detected: [.....3] [ip4][..udp] [...192.168.1.20][49162] -> [...192.168.1.11][34964] [DCERPC.PROFINET_IO][Unknown][IoT-Scada][Acceptable] + RISK: Known Proto on Non Std Port + new: [.....4] [ip4][..udp] [...192.168.1.11][49154] -> [...192.168.1.20][49162] + detected: [.....4] [ip4][..udp] [...192.168.1.11][49154] -> [...192.168.1.20][49162] [DCERPC.PROFINET_IO][Unknown][IoT-Scada][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....4] [ip4][..udp] [...192.168.1.11][49154] -> [...192.168.1.20][49162] [DCERPC.PROFINET_IO][Unknown][IoT-Scada][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....2] [ip4][..udp] [...192.168.1.20][49161] -> [...192.168.1.11][49155] [DCERPC.PROFINET_IO][Unknown][IoT-Scada][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....1] [ip4][..udp] [...192.168.1.11][49155] -> [...192.168.1.20][34964] [DCERPC.PROFINET_IO][Unknown][IoT-Scada][Acceptable] + RISK: Known Proto on Non Std Port + idle: [.....3] [ip4][..udp] [...192.168.1.20][49162] -> [...192.168.1.11][34964] [DCERPC.PROFINET_IO][Unknown][IoT-Scada][Acceptable] + RISK: Known Proto on Non Std Port + DAEMON-EVENT: shutdown |