blob: 112b934d34693a49bfec88b7f39544942e3932c7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
DAEMON-EVENT: init
DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0]
DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
new: [.....1] [ip4][..tcp] [..192.168.1.178][56272] -> [....192.168.1.2][...80]
new: [.....2] [ip4][..tcp] [..192.168.1.178][56273] -> [....192.168.1.2][..443]
new: [.....3] [ip4][..tcp] [..192.168.1.178][56274] -> [....192.168.1.2][..445]
new: [.....4] [ip4][..tcp] [..192.168.1.178][43067] -> [....192.168.1.2][.3389]
new: [.....5] [ip4][..tcp] [..192.168.1.178][62971] -> [....192.168.1.2][.3390] [MIDSTREAM]
new: [.....6] [ip4][..tcp] [..192.168.1.178][57916] -> [....192.168.1.2][.3391] [MIDSTREAM]
new: [.....7] [ip4][..tcp] [..192.168.1.178][63243] -> [....192.168.1.2][.3392] [MIDSTREAM]
guessed: [.....4] [ip4][..tcp] [..192.168.1.178][43067] -> [....192.168.1.2][.3389] [RDP][Unknown][RemoteAccess][Acceptable]
RISK: Desktop/File Sharing, TCP Connection Issues
end: [.....4] [ip4][..tcp] [..192.168.1.178][43067] -> [....192.168.1.2][.3389]
guessed: [.....1] [ip4][..tcp] [..192.168.1.178][56272] -> [....192.168.1.2][...80] [HTTP][Unknown][Web][Acceptable][]
RISK: TCP Connection Issues
end: [.....1] [ip4][..tcp] [..192.168.1.178][56272] -> [....192.168.1.2][...80]
guessed: [.....2] [ip4][..tcp] [..192.168.1.178][56273] -> [....192.168.1.2][..443] [TLS][Unknown][Web][Safe]
RISK: TCP Connection Issues
end: [.....2] [ip4][..tcp] [..192.168.1.178][56273] -> [....192.168.1.2][..443]
guessed: [.....3] [ip4][..tcp] [..192.168.1.178][56274] -> [....192.168.1.2][..445] [SMBv23][Unknown][System][Acceptable]
RISK: TCP Connection Issues
end: [.....3] [ip4][..tcp] [..192.168.1.178][56274] -> [....192.168.1.2][..445]
not-detected: [.....6] [ip4][..tcp] [..192.168.1.178][57916] -> [....192.168.1.2][.3391] [Unknown][Unknown][Unrated]
RISK: TCP Connection Issues
end: [.....6] [ip4][..tcp] [..192.168.1.178][57916] -> [....192.168.1.2][.3391]
not-detected: [.....5] [ip4][..tcp] [..192.168.1.178][62971] -> [....192.168.1.2][.3390] [Unknown][Unknown][Unrated]
RISK: TCP Connection Issues
end: [.....5] [ip4][..tcp] [..192.168.1.178][62971] -> [....192.168.1.2][.3390]
not-detected: [.....7] [ip4][..tcp] [..192.168.1.178][63243] -> [....192.168.1.2][.3392] [Unknown][Unknown][Unrated]
RISK: TCP Connection Issues
end: [.....7] [ip4][..tcp] [..192.168.1.178][63243] -> [....192.168.1.2][.3392]
DAEMON-EVENT: shutdown
|