1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
|
DAEMON-EVENT: init
DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0]
DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
new: [.....1] [ip4][..tcp] [....192.168.0.4][54317] -> [192.254.189.169][...80]
new: [.....2] [ip4][..tcp] [....192.168.0.4][54318] -> [192.254.189.169][...80]
new: [.....3] [ip4][..tcp] [....192.168.0.4][54319] -> [192.254.189.169][...80]
new: [.....4] [ip4][..tcp] [....192.168.0.4][54320] -> [192.254.189.169][...80]
new: [.....5] [ip4][..tcp] [....192.168.0.4][54321] -> [192.254.189.169][...80]
new: [.....6] [ip4][..tcp] [....192.168.0.4][54322] -> [192.254.189.169][...80]
detected: [.....1] [ip4][..tcp] [....192.168.0.4][54317] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
detection-update: [.....1] [ip4][..tcp] [....192.168.0.4][54317] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Error Code
analyse: [.....1] [ip4][..tcp] [....192.168.0.4][54317] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
min| max| avg| stddev| variance| entropy
[IAT.........: < 0.001| 4.822| 0.486| 1.309| 1713882.661| 2.300]
[PKTLEN......: 52.000| 1500.000| 626.500| 665.800| 443276.400| 4.100]
[BINS(c->s)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 3,0,1,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0]
[DIRECTIONS..: 0,1,0,0,1,1,1,0,1,0,1,0,1,1,0,1,1,0,1,1,0,1,1,0,1,1,0,1,0,1,0,0]
[IATS(ms)....: 243.2,243.3,0.1,201.9,227.4,1.3,430.4,0.6,0.6,0.7,0.7,3.6,3.8,7.4,3.7,8.0,11.6,0.7,3.2,3.9,163.9,2.4,166.3,3.7,3.9,7.6,2.9,2.9,4822.3,4822.3,3673.5]
[PKTLENS.....: 64,60,52,752,52,1500,537,52,131,52,274,52,1500,1500,52,1500,1500,52,1500,1500,52,1500,1500,52,1500,1500,52,1001,52,52,52,52]
[ENTROPIES...: 4.4,5.1,5.0,5.8,5.0,5.4,5.6,4.9,5.4,5.0,5.6,5.0,5.4,5.1,5.0,5.0,5.1,5.0,5.1,5.1,5.0,5.1,5.2,5.0,5.4,5.4,5.0,5.7,5.0,5.0,4.9,5.0]
detected: [.....2] [ip4][..tcp] [....192.168.0.4][54318] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
detection-update: [.....2] [ip4][..tcp] [....192.168.0.4][54318] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials, Error Code
analyse: [.....2] [ip4][..tcp] [....192.168.0.4][54318] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
min| max| avg| stddev| variance| entropy
[IAT.........: < 0.001| 7.939| 0.797| 2.054| 4220874.654| 2.400]
[PKTLEN......: 52.000| 1500.000| 627.900| 665.600| 443017.800| 4.100]
[BINS(c->s)..: 12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 4,0,1,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0]
[DIRECTIONS..: 0,1,0,1,0,0,1,1,1,0,1,0,1,0,1,1,0,1,1,0,1,1,0,1,1,0,1,1,0,1,0,1]
[IATS(ms)....: 244.2,244.3,1383.3,1383.3,7743.3,7938.9,165.1,1.2,361.9,0.6,0.6,0.7,0.7,4.1,3.6,7.8,4.0,4.1,8.0,3.8,3.9,7.7,159.5,3.9,163.4,3.6,6.0,9.5,0.6,0.6,4835.5]
[PKTLENS.....: 64,60,52,60,52,787,58,1500,537,52,131,52,274,52,1500,1500,52,1500,1500,52,1500,1500,52,1500,1500,52,1500,1500,52,998,52,52]
[ENTROPIES...: 4.4,5.1,5.2,5.0,5.2,5.9,5.3,5.5,5.6,5.1,5.4,5.1,5.7,5.0,5.4,5.1,5.1,5.0,5.1,5.1,5.1,5.1,5.1,5.1,5.2,5.1,5.4,5.4,5.1,5.7,5.1,5.1]
new: [.....7] [ip4][..tcp] [....192.168.0.4][54337] -> [192.254.189.169][...80]
detected: [.....7] [ip4][..tcp] [....192.168.0.4][54337] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
new: [.....8] [ip4][..tcp] [....192.168.0.4][54338] -> [192.254.189.169][...80]
detection-update: [.....7] [ip4][..tcp] [....192.168.0.4][54337] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials, Error Code
analyse: [.....7] [ip4][..tcp] [....192.168.0.4][54337] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
min| max| avg| stddev| variance| entropy
[IAT.........: < 0.001| 4.862| 0.405| 1.194| 1424465.723| 2.200]
[PKTLEN......: 52.000| 1500.000| 626.900| 665.600| 443042.200| 4.100]
[BINS(c->s)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 3,0,1,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0]
[DIRECTIONS..: 0,1,0,0,1,1,1,0,1,0,1,0,1,1,0,1,1,0,1,1,0,1,1,0,1,1,0,1,0,1,0,0]
[IATS(ms)....: 180.0,180.1,0.1,194.0,206.4,1.3,401.5,0.6,0.6,0.7,0.7,4.0,4.6,8.7,4.6,3.0,7.6,3.3,5.3,8.6,159.0,4.0,163.0,3.6,4.2,7.9,2.6,2.6,4861.8,4861.8,1269.0]
[PKTLENS.....: 64,60,52,791,52,1500,537,52,131,52,274,52,1500,1500,52,1500,1500,52,1500,1500,52,1500,1500,52,1500,1500,52,975,52,52,52,52]
[ENTROPIES...: 4.4,5.1,5.1,5.9,5.0,5.4,5.6,5.1,5.4,5.0,5.6,5.1,5.4,5.1,5.0,5.0,5.1,5.1,5.1,5.1,5.1,5.1,5.2,5.1,5.4,5.4,5.0,5.7,5.0,5.0,5.1,5.1]
detected: [.....8] [ip4][..tcp] [....192.168.0.4][54338] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
detection-update: [.....8] [ip4][..tcp] [....192.168.0.4][54338] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials, Error Code
analyse: [.....8] [ip4][..tcp] [....192.168.0.4][54338] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
min| max| avg| stddev| variance| entropy
[IAT.........: < 0.001| 5.591| 0.470| 1.348| 1817151.799| 2.200]
[PKTLEN......: 52.000| 1500.000| 627.500| 656.200| 430625.700| 4.100]
[BINS(c->s)..: 12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 3,0,1,0,0,0,1,0,0,1,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0]
[DIRECTIONS..: 0,1,0,1,0,0,1,1,1,0,1,0,1,0,1,0,1,1,0,1,1,0,1,1,0,1,1,0,1,1,0,1]
[IATS(ms)....: 181.5,181.5,1115.4,1115.4,5396.0,5591.1,193.0,1.4,389.4,1.1,1.1,0.6,0.6,0.7,0.7,7.1,0.8,7.9,3.9,3.5,7.3,4.2,161.7,166.0,3.9,4.0,7.9,3.9,3.7,7.7,1.8]
[PKTLENS.....: 64,60,52,60,52,791,58,1500,537,52,131,52,274,52,365,52,1500,1500,52,1500,1500,52,1500,1500,52,1500,1500,52,1500,1500,52,669]
[ENTROPIES...: 4.5,5.1,5.1,5.2,5.2,5.9,5.1,5.4,5.6,5.1,5.4,5.1,5.6,5.1,5.8,4.9,5.3,5.0,5.0,5.1,5.1,5.2,5.1,5.1,5.2,5.1,5.2,5.1,5.4,5.4,5.2,5.8]
new: [.....9] [ip4][..tcp] [....192.168.0.4][54340] -> [192.254.189.169][...80]
new: [....10] [ip4][..tcp] [....192.168.0.4][54341] -> [192.254.189.169][...80]
new: [....11] [ip4][..tcp] [....192.168.0.4][54342] -> [192.254.189.169][...80]
new: [....12] [ip4][..tcp] [....192.168.0.4][54343] -> [192.254.189.169][...80]
detected: [.....9] [ip4][..tcp] [....192.168.0.4][54340] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
detected: [....10] [ip4][..tcp] [....192.168.0.4][54341] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
detected: [....11] [ip4][..tcp] [....192.168.0.4][54342] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
detected: [....12] [ip4][..tcp] [....192.168.0.4][54343] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
new: [....13] [ip4][..tcp] [....192.168.0.4][54354] -> [192.254.189.169][...80]
analyse: [.....9] [ip4][..tcp] [....192.168.0.4][54340] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
min| max| avg| stddev| variance| entropy
[IAT.........: < 0.001| 4.812| 0.386| 1.140| 1299265.487| 2.300]
[PKTLEN......: 52.000| 1500.000| 464.500| 552.500| 305249.300| 4.100]
[BINS(c->s)..: 12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 3,0,1,0,3,0,1,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0]
[DIRECTIONS..: 0,1,0,0,1,1,0,0,1,0,0,1,0,0,1,1,1,0,1,0,1,0,1,0,1,1,0,1,0,1,1,0]
[IATS(ms)....: 203.4,203.5,0.3,194.8,10.4,204.8,49.7,338.1,288.3,3.6,208.9,205.3,4591.8,4811.6,185.3,1.8,406.8,0.6,0.6,0.6,0.6,0.8,0.8,3.8,6.5,10.3,1.4,1.4,3.9,3.7,7.6]
[PKTLENS.....: 64,60,52,783,52,189,52,788,189,52,791,189,52,761,58,1500,597,52,131,52,274,52,365,52,1500,1500,52,1500,52,1500,1500,52]
[ENTROPIES...: 4.4,5.1,5.0,5.9,5.1,5.8,5.1,5.9,5.8,5.1,5.9,5.8,5.1,5.9,5.2,5.4,5.5,5.1,5.4,5.0,5.7,5.0,5.7,5.1,5.3,5.0,5.1,5.1,5.0,5.1,5.1,5.0]
new: [....14] [ip4][..tcp] [....192.168.0.4][54487] -> [192.254.189.169][...80]
detected: [....14] [ip4][..tcp] [....192.168.0.4][54487] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
analyse: [....14] [ip4][..tcp] [....192.168.0.4][54487] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
min| max| avg| stddev| variance| entropy
[IAT.........: < 0.001| 4.838| 0.365| 1.179| 1389490.602| 1.900]
[PKTLEN......: 52.000| 1500.000| 615.900| 661.200| 437136.200| 4.100]
[BINS(c->s)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 3,0,1,0,0,0,0,0,0,0,1,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0]
[DIRECTIONS..: 0,1,0,0,1,1,1,0,1,0,1,0,1,1,0,1,0,1,1,0,1,0,1,1,0,1,0,1,1,0,1,0]
[IATS(ms)....: 197.2,197.3,0.1,193.6,225.1,1.6,420.1,0.3,0.3,1.2,1.3,4.2,3.6,7.8,4.1,4.1,3.7,4.1,7.8,4.0,4.0,162.1,4.0,166.1,4.0,4.0,3.5,1.4,4.9,4837.6,4837.6]
[PKTLENS.....: 64,60,52,761,52,1500,597,52,131,52,471,52,1500,1500,52,1500,52,1500,1500,52,1500,52,1500,1500,52,1500,52,1500,398,52,52,52]
[ENTROPIES...: 4.4,5.1,5.1,5.9,5.0,5.4,5.5,5.1,5.4,5.1,5.7,5.0,5.3,5.1,5.0,5.1,5.0,5.1,5.1,5.1,5.1,5.0,5.1,5.2,5.1,5.3,5.0,5.5,5.8,5.0,5.0,5.0]
new: [....15] [ip4][..tcp] [....192.168.0.4][54505] -> [192.254.189.169][...80]
new: [....16] [ip4][..tcp] [....192.168.0.4][54506] -> [192.254.189.169][...80]
new: [....17] [ip4][..tcp] [....192.168.0.4][54507] -> [192.254.189.169][...80]
new: [....18] [ip4][..tcp] [....192.168.0.4][54508] -> [192.254.189.169][...80]
new: [....19] [ip4][..tcp] [....192.168.0.4][54509] -> [192.254.189.169][...80]
detected: [....15] [ip4][..tcp] [....192.168.0.4][54505] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
analyse: [....15] [ip4][..tcp] [....192.168.0.4][54505] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
min| max| avg| stddev| variance| entropy
[IAT.........: < 0.001| 0.410| 0.053| 0.099| 9719.476| 3.100]
[PKTLEN......: 52.000| 1500.000| 614.700| 658.500| 433660.400| 4.100]
[BINS(c->s)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 2,0,1,0,0,0,1,1,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0]
[DIRECTIONS..: 0,1,0,0,1,1,1,0,1,0,1,0,1,0,1,1,0,1,1,0,1,0,1,1,0,1,0,1,1,0,1,0]
[IATS(ms)....: 204.5,204.6,0.2,194.7,213.8,1.8,410.0,0.6,0.6,0.6,0.6,0.9,0.9,5.4,2.2,7.6,3.9,4.0,7.9,3.8,21.6,169.0,3.7,154.9,4.0,4.1,3.9,4.0,7.8,2.6,2.5]
[PKTLENS.....: 64,60,52,714,52,1500,597,52,131,52,274,52,365,52,1500,1500,52,1500,1500,52,1500,52,1500,1500,52,1500,52,1500,1500,52,289,52]
[ENTROPIES...: 4.4,5.2,5.2,5.9,5.1,5.4,5.5,5.1,5.4,5.1,5.7,5.1,5.7,5.1,5.3,5.0,5.1,5.1,5.1,5.1,5.1,5.1,5.1,5.1,5.1,5.2,5.0,5.3,5.6,5.1,5.8,5.1]
detected: [....16] [ip4][..tcp] [....192.168.0.4][54506] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
analyse: [....16] [ip4][..tcp] [....192.168.0.4][54506] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
min| max| avg| stddev| variance| entropy
[IAT.........: 0.001| 9.537| 0.739| 2.305| 5311970.148| 2.000]
[PKTLEN......: 52.000| 1500.000| 715.000| 702.000| 492871.900| 4.200]
[BINS(c->s)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 3,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,0,0]
[DIRECTIONS..: 0,1,0,1,0,0,1,1,1,0,1,0,1,1,0,1,0,1,1,0,1,0,1,1,0,1,0,1,1,0,1,0]
[IATS(ms)....: 205.1,205.1,1239.2,1239.2,9336.2,9536.7,269.7,3.9,474.2,3.9,3.9,3.9,3.9,7.8,5.5,5.6,2.5,3.5,5.9,3.9,4.0,3.7,163.4,167.1,4.0,3.9,4.6,3.2,7.9,1.1,1.1]
[PKTLENS.....: 64,60,52,60,52,695,58,1500,1500,52,1500,52,1500,1500,52,1500,52,1500,1500,52,1500,52,1500,1500,52,1500,52,1500,1500,52,320,52]
[ENTROPIES...: 4.4,5.1,5.1,5.1,5.1,5.9,5.3,5.4,5.5,5.0,5.3,5.1,5.0,5.1,5.1,5.1,5.0,5.1,5.1,5.1,5.1,5.0,5.1,5.3,5.1,5.2,5.0,5.2,5.5,5.1,5.8,5.0]
new: [....20] [ip4][..tcp] [....192.168.0.4][54580] -> [192.254.189.169][...80]
new: [....21] [ip4][..tcp] [....192.168.0.4][54581] -> [192.254.189.169][...80]
new: [....22] [ip4][..tcp] [....192.168.0.4][54582] -> [192.254.189.169][...80]
new: [....23] [ip4][..tcp] [....192.168.0.4][54583] -> [192.254.189.169][...80]
new: [....24] [ip4][..tcp] [....192.168.0.4][54584] -> [192.254.189.169][...80]
new: [....25] [ip4][..tcp] [....192.168.0.4][54596] -> [192.254.189.169][...80]
detected: [....20] [ip4][..tcp] [....192.168.0.4][54580] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
detected: [....21] [ip4][..tcp] [....192.168.0.4][54581] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
detected: [....22] [ip4][..tcp] [....192.168.0.4][54582] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
detected: [....23] [ip4][..tcp] [....192.168.0.4][54583] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
detected: [....24] [ip4][..tcp] [....192.168.0.4][54584] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
analyse: [....24] [ip4][..tcp] [....192.168.0.4][54584] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
min| max| avg| stddev| variance| entropy
[IAT.........: 0.002| 2.440| 0.244| 0.570| 324880.892| 2.800]
[PKTLEN......: 52.000| 1500.000| 641.400| 656.800| 431405.000| 4.200]
[BINS(c->s)..: 12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 3,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0]
[DIRECTIONS..: 0,1,0,0,1,1,0,0,1,1,1,0,1,0,1,1,0,1,0,1,1,0,1,0,1,1,0,1,0,1,1,0]
[IATS(ms)....: 191.6,191.7,451.5,691.2,19.0,258.7,2193.0,2440.0,223.7,1.5,472.1,13.2,13.3,3.5,4.1,7.5,4.0,4.0,4.1,3.5,7.6,3.9,4.0,3.9,158.9,162.7,3.8,3.9,3.9,1.9,5.7]
[PKTLENS.....: 64,60,52,783,52,189,52,763,58,1500,597,52,131,52,1500,1500,52,1500,52,1500,1500,52,1500,52,1500,1500,52,1500,52,1500,757,52]
[ENTROPIES...: 4.3,5.0,5.1,5.9,5.0,5.8,5.0,5.9,5.2,5.4,5.5,5.1,5.4,5.1,5.4,5.2,5.1,5.0,5.0,5.1,5.1,5.1,5.1,5.0,5.1,5.2,5.1,5.2,5.0,5.4,5.7,5.1]
end: [.....1] [ip4][..tcp] [....192.168.0.4][54317] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Error Code
end: [.....2] [ip4][..tcp] [....192.168.0.4][54318] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials, Error Code
guessed: [.....3] [ip4][..tcp] [....192.168.0.4][54319] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][]
end: [.....3] [ip4][..tcp] [....192.168.0.4][54319] -> [192.254.189.169][...80]
guessed: [.....4] [ip4][..tcp] [....192.168.0.4][54320] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][]
end: [.....4] [ip4][..tcp] [....192.168.0.4][54320] -> [192.254.189.169][...80]
guessed: [.....5] [ip4][..tcp] [....192.168.0.4][54321] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][]
end: [.....5] [ip4][..tcp] [....192.168.0.4][54321] -> [192.254.189.169][...80]
guessed: [.....6] [ip4][..tcp] [....192.168.0.4][54322] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][]
end: [.....6] [ip4][..tcp] [....192.168.0.4][54322] -> [192.254.189.169][...80]
end: [.....7] [ip4][..tcp] [....192.168.0.4][54337] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials, Error Code
end: [.....8] [ip4][..tcp] [....192.168.0.4][54338] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials, Error Code
end: [.....9] [ip4][..tcp] [....192.168.0.4][54340] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
end: [....10] [ip4][..tcp] [....192.168.0.4][54341] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
end: [....11] [ip4][..tcp] [....192.168.0.4][54342] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
end: [....12] [ip4][..tcp] [....192.168.0.4][54343] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
guessed: [....13] [ip4][..tcp] [....192.168.0.4][54354] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][]
end: [....13] [ip4][..tcp] [....192.168.0.4][54354] -> [192.254.189.169][...80]
end: [....14] [ip4][..tcp] [....192.168.0.4][54487] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
end: [....15] [ip4][..tcp] [....192.168.0.4][54505] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
end: [....16] [ip4][..tcp] [....192.168.0.4][54506] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
guessed: [....17] [ip4][..tcp] [....192.168.0.4][54507] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][]
end: [....17] [ip4][..tcp] [....192.168.0.4][54507] -> [192.254.189.169][...80]
guessed: [....18] [ip4][..tcp] [....192.168.0.4][54508] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][]
end: [....18] [ip4][..tcp] [....192.168.0.4][54508] -> [192.254.189.169][...80]
guessed: [....19] [ip4][..tcp] [....192.168.0.4][54509] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][]
end: [....19] [ip4][..tcp] [....192.168.0.4][54509] -> [192.254.189.169][...80]
end: [....20] [ip4][..tcp] [....192.168.0.4][54580] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
end: [....21] [ip4][..tcp] [....192.168.0.4][54581] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
end: [....22] [ip4][..tcp] [....192.168.0.4][54582] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
end: [....23] [ip4][..tcp] [....192.168.0.4][54583] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
end: [....24] [ip4][..tcp] [....192.168.0.4][54584] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][browserspy.dk]
RISK: Clear-Text Credentials
guessed: [....25] [ip4][..tcp] [....192.168.0.4][54596] -> [192.254.189.169][...80] [HTTP][Unknown][Web][Acceptable][]
end: [....25] [ip4][..tcp] [....192.168.0.4][54596] -> [192.254.189.169][...80]
DAEMON-EVENT: shutdown
|