1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
DAEMON-EVENT: init
new: [.....1] [ip4][..udp] [..192.168.1.204][50234] -> [..192.168.1.253][...53]
detected: [.....1] [ip4][..udp] [..192.168.1.204][50234] -> [..192.168.1.253][...53] [DNS][Unknown][Network][Acceptable][www.google.com]
detection-update: [.....1] [ip4][..udp] [..192.168.1.204][50234] -> [..192.168.1.253][...53] [DNS][Unknown][Network][Acceptable][www.google.com]
analyse: [.....1] [ip4][..udp] [..192.168.1.204][50234] -> [..192.168.1.253][...53] [DNS][Unknown][Network][Acceptable][www.google.com]
min| max| avg| stddev| variance| entropy
[IAT.........: 0.004| 5.423| 0.834| 1.510| 2280131.133| 3.400]
[PKTLEN......: 54.000| 318.000| 101.400| 68.900| 4754.000| 4.700]
[BINS(c->s)..: 5,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 3,1,5,4,0,0,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[DIRECTIONS..: 0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1]
[IATS(ms)....: 3.9,1009.9,1008.1,608.7,634.7,275.3,279.5,111.7,83.3,23.2,41.4,53.0,77.7,48.6,23.6,23.4,123.6,123.4,17.9,591.8,607.9,56.0,55.8,637.8,673.7,5423.0,5359.2,3829.9,3848.8,99.8,99.4]
[PKTLENS.....: 60,76,54,54,78,318,65,100,54,54,63,294,68,144,67,104,65,100,63,149,61,123,65,135,59,268,54,54,54,150,74,118]
[ENTROPIES...: 4.2,4.4,4.1,4.3,4.7,5.0,4.4,4.9,4.0,4.2,4.4,4.9,4.5,4.8,4.4,4.6,4.3,4.6,4.3,5.0,4.3,4.7,4.5,4.8,4.2,5.2,4.0,4.3,3.9,4.1,4.6,4.7]
update: [.....1] [ip4][..udp] [..192.168.1.204][50234] -> [..192.168.1.253][...53] [DNS][Unknown][Network][Acceptable][www.google.com]
update: [.....1] [ip4][..udp] [..192.168.1.204][50234] -> [..192.168.1.253][...53] [DNS][Unknown][Network][Acceptable][www.google.com]
update: [.....1] [ip4][..udp] [..192.168.1.204][50234] -> [..192.168.1.253][...53] [DNS][Unknown][Network][Acceptable][www.google.com]
update: [.....1] [ip4][..udp] [..192.168.1.204][50234] -> [..192.168.1.253][...53] [DNS][Unknown][Network][Acceptable][www.google.com]
idle: [.....1] [ip4][..udp] [..192.168.1.204][50234] -> [..192.168.1.253][...53] [DNS][Unknown][Network][Acceptable][www.google.com]
DAEMON-EVENT: shutdown
|