From d80ea84d2ebebe29761f3727fbc5295ba3cb81b8 Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Wed, 8 Nov 2023 01:27:42 +0100 Subject: Reset `Unidirectional Traffc` risk if packets from both directions processed. * Fixed risk hash value calculation, which was only done lower 32 bits. * Reduced default reader threads count to two if cross compiling. Signed-off-by: Toni Uhlig --- test/results/flow-info/default/modbus.pcap.out | 1 - 1 file changed, 1 deletion(-) (limited to 'test/results/flow-info/default/modbus.pcap.out') diff --git a/test/results/flow-info/default/modbus.pcap.out b/test/results/flow-info/default/modbus.pcap.out index 66fee0c39..25896ebe4 100644 --- a/test/results/flow-info/default/modbus.pcap.out +++ b/test/results/flow-info/default/modbus.pcap.out @@ -15,5 +15,4 @@ [PKTLENS.....: 52,51,52,51,52,51,52,51,52,51,52,51,52,51,52,51,52,51,52,51,52,51,52,51,52,51,52,51,52,51,52,51] [ENTROPIES...: 4.5,4.7,4.4,4.9,4.4,4.6,4.4,4.9,4.6,4.7,4.6,4.8,4.6,4.7,4.6,4.9,4.6,4.8,4.6,4.9,4.6,4.7,4.6,4.9,4.6,4.8,4.6,4.9,4.6,4.8,4.6,4.9] idle: [.....1] [ip4][..tcp] [192.168.110.131][.2074] -> [192.168.110.138][..502] [Modbus][Unknown][IoT-Scada][Acceptable] - RISK: Unidirectional Traffic DAEMON-EVENT: shutdown -- cgit v1.2.3