diff options
Diffstat (limited to 'test/results/stats/tls_heuristics_enabled')
5 files changed, 27 insertions, 27 deletions
diff --git a/test/results/stats/tls_heuristics_enabled/tls_heur__shadowsocks-tcp.pcapng.out b/test/results/stats/tls_heuristics_enabled/tls_heur__shadowsocks-tcp.pcapng.out index a93257176..71818d8a2 100644 --- a/test/results/stats/tls_heuristics_enabled/tls_heur__shadowsocks-tcp.pcapng.out +++ b/test/results/stats/tls_heuristics_enabled/tls_heur__shadowsocks-tcp.pcapng.out @@ -1,5 +1,5 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:38 -PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:33902 +PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:33784 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4 @@ -11,7 +11,7 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:1 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:2832 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:70769 -PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:1 +PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-packet_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-packet_flow_count" interval=60 N:19 PUTVAL "localhost/exec-nDPIsrvd/counter-init_count" interval=60 N:1 @@ -36,8 +36,8 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-error_capture_size_smaller_than_packet" PUTVAL "localhost/exec-nDPIsrvd/counter-error_max_flows_to_track" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-error_flow_memory_alloc" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_safe_count" interval=60 N:0 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:1 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:2 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:2 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:1 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unsafe_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_potentially_dangerous_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_tracker_ads_count" interval=60 N:0 @@ -95,7 +95,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:1 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0 @@ -159,7 +159,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:1 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:0 diff --git a/test/results/stats/tls_heuristics_enabled/tls_heur__trojan-tcp-tls.pcapng.out b/test/results/stats/tls_heuristics_enabled/tls_heur__trojan-tcp-tls.pcapng.out index fa522651c..9684e5d5a 100644 --- a/test/results/stats/tls_heuristics_enabled/tls_heur__trojan-tcp-tls.pcapng.out +++ b/test/results/stats/tls_heuristics_enabled/tls_heur__trojan-tcp-tls.pcapng.out @@ -1,5 +1,5 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:75 -PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:68413 +PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:68236 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:10 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:10 @@ -11,7 +11,7 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:3321 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:29989 -PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:4 +PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:3 PUTVAL "localhost/exec-nDPIsrvd/counter-packet_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-packet_flow_count" interval=60 N:31 PUTVAL "localhost/exec-nDPIsrvd/counter-init_count" interval=60 N:1 @@ -36,8 +36,8 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-error_capture_size_smaller_than_packet" PUTVAL "localhost/exec-nDPIsrvd/counter-error_max_flows_to_track" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-error_flow_memory_alloc" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_safe_count" interval=60 N:1 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:5 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:4 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:8 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:1 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unsafe_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_potentially_dangerous_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_tracker_ads_count" interval=60 N:0 @@ -95,7 +95,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:3 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:2 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:2 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0 @@ -159,7 +159,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:1 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:2 diff --git a/test/results/stats/tls_heuristics_enabled/tls_heur__vmess-tcp-tls.pcapng.out b/test/results/stats/tls_heuristics_enabled/tls_heur__vmess-tcp-tls.pcapng.out index e2b4200db..65723632b 100644 --- a/test/results/stats/tls_heuristics_enabled/tls_heur__vmess-tcp-tls.pcapng.out +++ b/test/results/stats/tls_heuristics_enabled/tls_heur__vmess-tcp-tls.pcapng.out @@ -1,5 +1,5 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:74 -PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:65773 +PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:65596 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:10 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:10 @@ -11,7 +11,7 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:3385 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:37346 -PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:4 +PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:3 PUTVAL "localhost/exec-nDPIsrvd/counter-packet_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-packet_flow_count" interval=60 N:31 PUTVAL "localhost/exec-nDPIsrvd/counter-init_count" interval=60 N:1 @@ -36,8 +36,8 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-error_capture_size_smaller_than_packet" PUTVAL "localhost/exec-nDPIsrvd/counter-error_max_flows_to_track" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-error_flow_memory_alloc" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_safe_count" interval=60 N:1 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:5 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:4 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:8 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:1 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unsafe_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_potentially_dangerous_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_tracker_ads_count" interval=60 N:0 @@ -95,7 +95,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:3 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:2 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:2 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0 @@ -159,7 +159,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:1 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:2 diff --git a/test/results/stats/tls_heuristics_enabled/tls_heur__vmess-tcp.pcapng.out b/test/results/stats/tls_heuristics_enabled/tls_heur__vmess-tcp.pcapng.out index cf89e3b4c..b9deb206f 100644 --- a/test/results/stats/tls_heuristics_enabled/tls_heur__vmess-tcp.pcapng.out +++ b/test/results/stats/tls_heuristics_enabled/tls_heur__vmess-tcp.pcapng.out @@ -1,5 +1,5 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:38 -PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:33257 +PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:33024 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4 @@ -11,7 +11,7 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:1 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:2990 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:59245 -PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:1 +PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-packet_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-packet_flow_count" interval=60 N:19 PUTVAL "localhost/exec-nDPIsrvd/counter-init_count" interval=60 N:1 @@ -36,8 +36,8 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-error_capture_size_smaller_than_packet" PUTVAL "localhost/exec-nDPIsrvd/counter-error_max_flows_to_track" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-error_flow_memory_alloc" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_safe_count" interval=60 N:0 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:1 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:2 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:2 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:1 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unsafe_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_potentially_dangerous_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_tracker_ads_count" interval=60 N:0 @@ -95,7 +95,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:1 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0 @@ -159,7 +159,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:1 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:0 diff --git a/test/results/stats/tls_heuristics_enabled/tls_heur__vmess-websocket.pcapng.out b/test/results/stats/tls_heuristics_enabled/tls_heur__vmess-websocket.pcapng.out index 157ea5b7f..60f1d3bbb 100644 --- a/test/results/stats/tls_heuristics_enabled/tls_heur__vmess-websocket.pcapng.out +++ b/test/results/stats/tls_heuristics_enabled/tls_heur__vmess-websocket.pcapng.out @@ -1,5 +1,5 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:38 -PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:34974 +PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:34959 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4 @@ -36,8 +36,8 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-error_capture_size_smaller_than_packet" PUTVAL "localhost/exec-nDPIsrvd/counter-error_max_flows_to_track" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/counter-error_flow_memory_alloc" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_safe_count" interval=60 N:0 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:2 -PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:2 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:3 +PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:1 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unsafe_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_potentially_dangerous_count" interval=60 N:0 PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_tracker_ads_count" interval=60 N:0 |