1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
DAEMON-EVENT: init
DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0]
DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
new: [.....1] [ip4][..udp] [131.114.219.168][41559] -> [192.167.206.124][.7002]
detected: [.....1] [ip4][..udp] [131.114.219.168][41559] -> [192.167.206.124][.7002] [RX][Unknown][RPC][Acceptable]
new: [.....2] [ip4][..udp] [131.114.219.168][38331] -> [192.167.206.124][.7002]
detected: [.....2] [ip4][..udp] [131.114.219.168][38331] -> [192.167.206.124][.7002] [RX][Unknown][RPC][Acceptable]
new: [.....3] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.124][.7003]
detected: [.....3] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.124][.7003] [RX][Unknown][RPC][Acceptable]
new: [.....4] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.241][.7000]
detected: [.....4] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.241][.7000] [RX][Unknown][RPC][Acceptable]
new: [.....5] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.124][.7000]
detected: [.....5] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.124][.7000] [RX][Unknown][RPC][Acceptable]
analyse: [.....4] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.241][.7000] [RX][Unknown][RPC][Acceptable]
min| max| avg| stddev| variance| entropy
[IAT.........: 0.000| 0.105| 0.029| 0.034| 1128.030| 4.000]
[PKTLEN......: 56.000| 768.000| 162.700| 165.900| 27529.200| 4.500]
[BINS(c->s)..: 1,4,7,0,1,0,0,0,0,0,0,0,2,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 0,6,5,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[DIRECTIONS..: 0,1,0,1,0,1,1,0,1,1,0,0,1,0,1,0,1,1,0,0,1,0,0,1,0,0,1,0,0,1,0,1]
[IATS(ms)....: 77.5,77.6,57.0,57.2,38.2,1.3,39.5,65.7,0.3,65.9,103.2,105.3,2.1,9.0,9.1,3.0,1.8,4.8,61.4,65.2,3.8,0.1,6.8,6.7,0.1,3.7,3.7,4.9,8.0,3.0,2.8]
[PKTLENS.....: 60,94,93,60,496,93,104,56,93,64,93,80,72,421,60,496,93,184,93,160,768,93,80,184,93,96,200,93,80,72,421,60]
[ENTROPIES...: 4.1,3.4,3.5,4.0,4.3,3.5,3.9,4.1,3.5,3.9,3.6,5.3,3.8,7.1,4.1,4.3,3.5,6.5,3.6,6.4,7.7,3.6,5.2,6.5,3.6,5.6,6.7,3.6,5.2,3.9,7.1,4.1]
idle: [.....1] [ip4][..udp] [131.114.219.168][41559] -> [192.167.206.124][.7002] [RX][Unknown][RPC][Acceptable]
idle: [.....5] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.124][.7000] [RX][Unknown][RPC][Acceptable]
idle: [.....4] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.241][.7000] [RX][Unknown][RPC][Acceptable]
idle: [.....3] [ip4][..udp] [131.114.219.168][.7001] -> [192.167.206.124][.7003] [RX][Unknown][RPC][Acceptable]
idle: [.....2] [ip4][..udp] [131.114.219.168][38331] -> [192.167.206.124][.7002] [RX][Unknown][RPC][Acceptable]
DAEMON-EVENT: shutdown
|