From d80ea84d2ebebe29761f3727fbc5295ba3cb81b8 Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Wed, 8 Nov 2023 01:27:42 +0100 Subject: Reset `Unidirectional Traffc` risk if packets from both directions processed. * Fixed risk hash value calculation, which was only done lower 32 bits. * Reduced default reader threads count to two if cross compiling. Signed-off-by: Toni Uhlig --- test/results/flow-info/default/tls_esni_sni_both.pcap.out | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'test/results/flow-info/default/tls_esni_sni_both.pcap.out') diff --git a/test/results/flow-info/default/tls_esni_sni_both.pcap.out b/test/results/flow-info/default/tls_esni_sni_both.pcap.out index e65574a95..a08c7b272 100644 --- a/test/results/flow-info/default/tls_esni_sni_both.pcap.out +++ b/test/results/flow-info/default/tls_esni_sni_both.pcap.out @@ -11,6 +11,8 @@ RISK: TLS (probably) Not Carrying HTTPS, TLS Susp ESNI Usage detection-update: [.....2] [ip4][..tcp] [...192.168.1.21][55514] -> [..104.17.175.85][..443] [TLS][Cloudflare][Web][Safe][you-think-thats-normal-tls-traffic-youre-seeing.com] RISK: TLS (probably) Not Carrying HTTPS, TLS Susp ESNI Usage - end: [.....1] [ip4][..tcp] [...192.168.1.21][55500] -> [..104.17.175.85][..443] - end: [.....2] [ip4][..tcp] [...192.168.1.21][55514] -> [..104.17.175.85][..443] + end: [.....1] [ip4][..tcp] [...192.168.1.21][55500] -> [..104.17.175.85][..443] [TLS][Cloudflare][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS, TLS Susp ESNI Usage + end: [.....2] [ip4][..tcp] [...192.168.1.21][55514] -> [..104.17.175.85][..443] [TLS][Cloudflare][Web][Safe] + RISK: TLS (probably) Not Carrying HTTPS, TLS Susp ESNI Usage DAEMON-EVENT: shutdown -- cgit v1.2.3