diff options
Diffstat (limited to 'test/results/flow-info/tls_heuristics_enabled')
4 files changed, 3 insertions, 8 deletions
diff --git a/test/results/flow-info/tls_heuristics_enabled/tls_heur__shadowsocks-tcp.pcapng.out b/test/results/flow-info/tls_heuristics_enabled/tls_heur__shadowsocks-tcp.pcapng.out index aeef38a2b..b1354a790 100644 --- a/test/results/flow-info/tls_heuristics_enabled/tls_heur__shadowsocks-tcp.pcapng.out +++ b/test/results/flow-info/tls_heuristics_enabled/tls_heur__shadowsocks-tcp.pcapng.out @@ -6,7 +6,6 @@ new: [.....2] [ip4][..udp] [......127.0.0.1][41182] -> [.....127.0.0.53][...53] detected: [.....2] [ip4][..udp] [......127.0.0.1][41182] -> [.....127.0.0.53][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] detection-update: [.....2] [ip4][..udp] [......127.0.0.1][41182] -> [.....127.0.0.53][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] - RISK: Unidirectional Traffic detection-update: [.....2] [ip4][..udp] [......127.0.0.1][41182] -> [.....127.0.0.53][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] new: [.....3] [ip4][..tcp] [......127.0.0.1][40164] -> [......127.0.0.1][.1234] new: [.....4] [ip6][..tcp] [..2001:b07:a3d:c112:8628:88aa:8b00:913c][45334] -> [...............2a00:1450:4002:416::200e][..443] @@ -23,8 +22,8 @@ [PKTLENS.....: 80,80,72,589,72,1280,72,4904,631,72,72,345,720,103,103,72,1280,293,1280,72,72,72,1280,1280,1280,4948,72,72,1280,72,1280,1280] [ENTROPIES...: 4.8,5.3,5.2,4.8,5.2,7.8,5.2,8.0,7.6,5.2,5.2,7.1,7.7,5.8,5.8,5.1,7.8,7.1,7.9,5.2,5.2,5.2,7.8,7.9,7.8,8.0,5.1,5.2,7.9,5.2,7.8,7.8] idle: [.....2] [ip4][..udp] [......127.0.0.1][41182] -> [.....127.0.0.53][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] - not-detected: [.....3] [ip4][..tcp] [......127.0.0.1][40164] -> [......127.0.0.1][.1234] [Unknown][Unknown][Unrated] - RISK: Fully Encrypted Flow + not-detected: [.....3] [ip4][..tcp] [......127.0.0.1][40164] -> [......127.0.0.1][.1234] [Unknown][Unknown][Unspecified][Unrated] + RISK: Susp Entropy idle: [.....3] [ip4][..tcp] [......127.0.0.1][40164] -> [......127.0.0.1][.1234] idle: [.....1] [ip4][..tcp] [......127.0.0.1][44424] -> [......127.0.0.1][.1080] [SOCKS][Unknown][Web][Acceptable] idle: [.....4] [ip6][..tcp] [..2001:b07:a3d:c112:8628:88aa:8b00:913c][45334] -> [...............2a00:1450:4002:416::200e][..443] [TLS.YouTube][Google][Media][Fun][www.youtube.com] diff --git a/test/results/flow-info/tls_heuristics_enabled/tls_heur__trojan-tcp-tls.pcapng.out b/test/results/flow-info/tls_heuristics_enabled/tls_heur__trojan-tcp-tls.pcapng.out index bd5580d15..5bbd31a96 100644 --- a/test/results/flow-info/tls_heuristics_enabled/tls_heur__trojan-tcp-tls.pcapng.out +++ b/test/results/flow-info/tls_heuristics_enabled/tls_heur__trojan-tcp-tls.pcapng.out @@ -6,7 +6,6 @@ new: [.....2] [ip4][..udp] [......127.0.0.1][52786] -> [.....127.0.0.53][...53] detected: [.....2] [ip4][..udp] [......127.0.0.1][52786] -> [.....127.0.0.53][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] detection-update: [.....2] [ip4][..udp] [......127.0.0.1][52786] -> [.....127.0.0.53][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] - RISK: Unidirectional Traffic new: [.....3] [ip4][..udp] [..192.168.1.183][46451] -> [..192.168.1.253][...53] detected: [.....3] [ip4][..udp] [..192.168.1.183][46451] -> [..192.168.1.253][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] new: [.....4] [ip4][..udp] [..192.168.1.183][54260] -> [..192.168.1.253][...53] diff --git a/test/results/flow-info/tls_heuristics_enabled/tls_heur__vmess-tcp-tls.pcapng.out b/test/results/flow-info/tls_heuristics_enabled/tls_heur__vmess-tcp-tls.pcapng.out index 0a70f42ea..74170721f 100644 --- a/test/results/flow-info/tls_heuristics_enabled/tls_heur__vmess-tcp-tls.pcapng.out +++ b/test/results/flow-info/tls_heuristics_enabled/tls_heur__vmess-tcp-tls.pcapng.out @@ -6,7 +6,6 @@ new: [.....2] [ip4][..udp] [......127.0.0.1][46548] -> [.....127.0.0.53][...53] detected: [.....2] [ip4][..udp] [......127.0.0.1][46548] -> [.....127.0.0.53][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] detection-update: [.....2] [ip4][..udp] [......127.0.0.1][46548] -> [.....127.0.0.53][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] - RISK: Unidirectional Traffic new: [.....3] [ip4][..udp] [..192.168.1.183][49817] -> [..192.168.1.253][...53] detected: [.....3] [ip4][..udp] [..192.168.1.183][49817] -> [..192.168.1.253][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] new: [.....4] [ip4][..udp] [..192.168.1.183][41933] -> [..192.168.1.253][...53] diff --git a/test/results/flow-info/tls_heuristics_enabled/tls_heur__vmess-tcp.pcapng.out b/test/results/flow-info/tls_heuristics_enabled/tls_heur__vmess-tcp.pcapng.out index a5f713be1..84c76a6fd 100644 --- a/test/results/flow-info/tls_heuristics_enabled/tls_heur__vmess-tcp.pcapng.out +++ b/test/results/flow-info/tls_heuristics_enabled/tls_heur__vmess-tcp.pcapng.out @@ -6,7 +6,6 @@ new: [.....2] [ip4][..udp] [......127.0.0.1][35957] -> [.....127.0.0.53][...53] detected: [.....2] [ip4][..udp] [......127.0.0.1][35957] -> [.....127.0.0.53][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] detection-update: [.....2] [ip4][..udp] [......127.0.0.1][35957] -> [.....127.0.0.53][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] - RISK: Unidirectional Traffic detection-update: [.....2] [ip4][..udp] [......127.0.0.1][35957] -> [.....127.0.0.53][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] new: [.....3] [ip4][..tcp] [......127.0.0.1][40818] -> [......127.0.0.1][.1234] new: [.....4] [ip6][..tcp] [..2001:b07:a3d:c112:8628:88aa:8b00:913c][48302] -> [...............2a00:1450:4006:80d::200e][..443] @@ -24,8 +23,7 @@ [ENTROPIES...: 4.9,4.8,4.9,5.4,5.2,4.8,5.2,7.9,7.8,5.2,5.2,7.8,7.9,5.2,5.2,6.4,6.6,7.7,5.9,6.4,5.9,5.2,7.9,7.2,7.9,5.2,7.9,5.2,7.9,5.2,7.9,5.2] idle: [.....2] [ip4][..udp] [......127.0.0.1][35957] -> [.....127.0.0.53][...53] [DNS][Unknown][Network][Acceptable][www.youtube.com] idle: [.....1] [ip4][..tcp] [......127.0.0.1][37218] -> [......127.0.0.1][.1080] [SOCKS][Unknown][Web][Acceptable] - not-detected: [.....3] [ip4][..tcp] [......127.0.0.1][40818] -> [......127.0.0.1][.1234] [Unknown][Unknown][Unrated] - RISK: Fully Encrypted Flow + not-detected: [.....3] [ip4][..tcp] [......127.0.0.1][40818] -> [......127.0.0.1][.1234] [Unknown][Unknown][Unspecified][Unrated] idle: [.....3] [ip4][..tcp] [......127.0.0.1][40818] -> [......127.0.0.1][.1234] idle: [.....4] [ip6][..tcp] [..2001:b07:a3d:c112:8628:88aa:8b00:913c][48302] -> [...............2a00:1450:4006:80d::200e][..443] [TLS.YouTube][Google][Media][Fun][www.youtube.com] DAEMON-EVENT: shutdown |