1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
|
DAEMON-EVENT: init
DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0]
DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
ERROR-EVENT: Captured packet size is smaller than expected packet size [1/16]
new: [.....1] [ip4][..udp] [...145.76.2.236][.2152] -> [...187.96.52.85][.2152]
detected: [.....1] [ip4][..udp] [...145.76.2.236][.2152] -> [...187.96.52.85][.2152] [GTP.GTP_U][Unknown][Network][Acceptable]
RISK: Unidirectional Traffic
ERROR-EVENT: Captured packet size is smaller than expected packet size [2/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [3/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [4/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [5/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [6/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [7/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [8/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [9/16]
analyse: [.....1] [ip4][..udp] [...145.76.2.236][.2152] -> [...187.96.52.85][.2152] [GTP.GTP_U][Unknown][Network][Acceptable]
min| max| avg| stddev| variance| entropy
[IAT.........: 0.000| 1.859| 0.305| 0.564| 318078.976| 3.100]
[PKTLEN......: 76.000| 1476.000| 920.200| 651.300| 424215.900| 4.500]
[BINS(c->s)..: 0,0,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 0,2,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,17,0,0]
[DIRECTIONS..: 0,0,0,1,1,1,1,1,1,1,1,1,1,0,1,0,1,1,1,1,1,1,1,0,0,0,1,1,1,0,1,1]
[IATS(ms)....: 396.0,83.8,1376.2,0.1,0.0,0.0,0.0,0.0,0.0,0.0,0.1,0.1,1859.1,964.9,439.7,439.7,0.1,0.0,0.0,0.0,0.0,0.1,163.9,20.1,1615.4,1799.0,0.1,0.0,155.8,155.6,0.1]
[PKTLENS.....: 92,92,92,1476,1476,1476,1476,1476,1476,1476,1476,1476,1476,100,1476,100,1476,1476,1476,1476,1372,1476,1476,108,108,100,76,388,1164,100,76,388]
[ENTROPIES...: 5.4,5.4,5.4,7.9,7.8,7.8,7.9,7.8,7.8,7.8,7.8,7.8,7.8,5.4,7.8,5.4,7.8,7.9,7.8,7.9,7.8,7.9,7.8,5.5,5.5,5.4,5.2,7.3,7.8,5.5,5.2,7.4]
ERROR-EVENT: Captured packet size is smaller than expected packet size [10/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [11/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [12/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [13/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [14/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [15/16]
ERROR-EVENT: Captured packet size is smaller than expected packet size [16/16]
idle: [.....1] [ip4][..udp] [...145.76.2.236][.2152] -> [...187.96.52.85][.2152] [GTP.GTP_U][Unknown][Network][Acceptable]
RISK: Unidirectional Traffic
DAEMON-EVENT: shutdown
|