From d80ea84d2ebebe29761f3727fbc5295ba3cb81b8 Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Wed, 8 Nov 2023 01:27:42 +0100 Subject: Reset `Unidirectional Traffc` risk if packets from both directions processed. * Fixed risk hash value calculation, which was only done lower 32 bits. * Reduced default reader threads count to two if cross compiling. Signed-off-by: Toni Uhlig --- test/results/flow-info/default/tls_alert.pcap.out | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) (limited to 'test/results/flow-info/default/tls_alert.pcap.out') diff --git a/test/results/flow-info/default/tls_alert.pcap.out b/test/results/flow-info/default/tls_alert.pcap.out index c7cffc462..3a3049ced 100644 --- a/test/results/flow-info/default/tls_alert.pcap.out +++ b/test/results/flow-info/default/tls_alert.pcap.out @@ -4,12 +4,14 @@ new: [.....1] [ip4][..tcp] [..192.168.1.192][63158] -> [...192.168.1.20][..443] detected: [.....1] [ip4][..tcp] [..192.168.1.192][63158] -> [...192.168.1.20][..443] [TLS.Google][Unknown][Advertisement][Acceptable][www.google-analytics.com] RISK: Obsolete TLS (v1.1 or older) + detection-update: [.....1] [ip4][..tcp] [..192.168.1.192][63158] -> [...192.168.1.20][..443] [TLS.Google][Unknown][Advertisement][Acceptable][www.google-analytics.com] + RISK: Obsolete TLS (v1.1 or older), TLS Fatal Alert DAEMON-EVENT: [Processed: 11 pkts][ZLib][compressions: 0|diff: 0 / 0] - DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] + DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 1|updates: 0] new: [.....2] [ip4][..tcp] [..192.168.2.100][37780] -> [.160.44.202.202][..443] [MIDSTREAM] detected: [.....2] [ip4][..tcp] [..192.168.2.100][37780] -> [.160.44.202.202][..443] [TLS][Unknown][Web][Safe] RISK: Unidirectional Traffic - end: [.....1] [ip4][..tcp] [..192.168.1.192][63158] -> [...192.168.1.20][..443] + end: [.....1] [ip4][..tcp] [..192.168.1.192][63158] -> [...192.168.1.20][..443] [TLS.Google][Unknown][Advertisement][Acceptable] + RISK: Obsolete TLS (v1.1 or older), TLS Fatal Alert end: [.....2] [ip4][..tcp] [..192.168.2.100][37780] -> [.160.44.202.202][..443] [TLS][Unknown][Web][Safe] - RISK: Unidirectional Traffic DAEMON-EVENT: shutdown -- cgit v1.2.3