1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
DAEMON-EVENT: init
DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0]
DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
new: [.....1] [ip4][..udp] [..10.204.220.71][.6000] -> [.10.204.220.171][.6000]
detected: [.....1] [ip4][..udp] [..10.204.220.71][.6000] -> [.10.204.220.171][.6000] [RTP][Unknown][Media][Acceptable]
DAEMON-EVENT: [Processed: 15 pkts][ZLib][compressions: 0|diff: 0 / 0]
DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
new: [.....2] [ip4][..tcp] [..172.16.168.24][40252] -> [..172.16.168.64][.5000]
idle: [.....1] [ip4][..udp] [..10.204.220.71][.6000] -> [.10.204.220.171][.6000] [RTP][Unknown][Media][Acceptable]
detected: [.....2] [ip4][..tcp] [..172.16.168.24][40252] -> [..172.16.168.64][.5000] [RTP][Unknown][Media][Acceptable]
analyse: [.....2] [ip4][..tcp] [..172.16.168.24][40252] -> [..172.16.168.64][.5000] [RTP][Unknown][Media][Acceptable]
min| max| avg| stddev| variance| entropy
[IAT.........: < 0.001| 82.924| 5.477| 20.338| 413654440.739| 1.200]
[PKTLEN......: 52.000| 1266.000| 621.600| 605.300| 366444.400| 4.200]
[BINS(c->s)..: 2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,15,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[DIRECTIONS..: 0,1,0,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0]
[IATS(ms)....: 0.1,0.8,82923.1,82923.9,93.2,93.2,148.9,148.9,149.2,149.2,151.0,151.0,151.5,151.4,148.4,148.5,149.0,148.9,151.7,151.8,150.9,150.9,149.7,149.6,148.4,148.4,151.3,151.3,150.8,150.8,149.0]
[PKTLENS.....: 60,60,52,1266,52,1266,52,1266,52,1266,52,1266,52,1266,52,1266,52,1266,52,1266,52,1266,52,1266,52,1266,52,1266,52,1266,52,1266]
[ENTROPIES...: 4.7,5.2,5.1,2.8,4.9,4.4,5.0,5.5,5.0,5.5,5.0,5.8,5.0,5.7,5.0,7.3,5.0,6.6,5.0,6.3,5.0,7.2,5.0,7.2,5.0,7.2,5.0,6.4,5.0,6.9,5.0,7.1]
DAEMON-EVENT: [Processed: 52 pkts][ZLib][compressions: 0|diff: 0 / 0]
DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
new: [.....3] [ip4][..udp] [.150.219.118.19][54234] -> [192.113.193.227][50003]
detected: [.....3] [ip4][..udp] [.150.219.118.19][54234] -> [192.113.193.227][50003] [Discord][Unknown][Collaborative][Fun]
idle: [.....2] [ip4][..tcp] [..172.16.168.24][40252] -> [..172.16.168.64][.5000] [RTP][Unknown][Media][Acceptable]
new: [.....4][1508] [ip4][..udp] [..10.140.67.167][55402] -> [..148.153.85.97][.6008]
detected: [.....4][1508] [ip4][..udp] [..10.140.67.167][55402] -> [..148.153.85.97][.6008] [RTP][Unknown][Media][Acceptable]
idle: [.....4][1508] [ip4][..udp] [..10.140.67.167][55402] -> [..148.153.85.97][.6008] [RTP][Unknown][Media][Acceptable]
idle: [.....3] [ip4][..udp] [.150.219.118.19][54234] -> [192.113.193.227][50003] [Discord][Unknown][Collaborative][Fun]
DAEMON-EVENT: shutdown
|