blob: 577274fd9b312c476e7607c3a453c3555407d9a0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
DAEMON-EVENT: init
DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0]
DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
new: [.....1] [ip4][..tcp] [......10.0.2.15][44188] -> [....192.0.47.59][...43]
detected: [.....1] [ip4][..tcp] [......10.0.2.15][44188] -> [....192.0.47.59][...43] [Whois-DAS][Unknown][Network][Acceptable][example.com]
DAEMON-EVENT: [Processed: 11 pkts][ZLib][compressions: 0|diff: 0 / 0]
DAEMON-EVENT: [Flows][active: 1 / 1|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
new: [.....2][1603] [ip4][..tcp] [...10.17.34.139][64016] -> [.....10.17.51.8][.4343]
detected: [.....2][1603] [ip4][..tcp] [...10.17.34.139][64016] -> [.....10.17.51.8][.4343] [TLS][Unknown][Web][Safe][]
RISK: Known Proto on Non Std Port, Missing SNI TLS Extn, ALPN/SNI Mismatch
detection-update: [.....2][1603] [ip4][..tcp] [...10.17.34.139][64016] -> [.....10.17.51.8][.4343] [TLS][Unknown][Web][Safe][]
RISK: Known Proto on Non Std Port, Missing SNI TLS Extn, ALPN/SNI Mismatch
end: [.....1] [ip4][..tcp] [......10.0.2.15][44188] -> [....192.0.47.59][...43] [Whois-DAS][Unknown][Network][Acceptable][example.com]
DAEMON-EVENT: [Processed: 18 pkts][ZLib][compressions: 0|diff: 0 / 0]
DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 1|updates: 0]
new: [.....3][1908] [ip4][..tcp] [...192.30.45.30][...43] -> [..10.160.63.128][53217]
guessed: [.....3][1908] [ip4][..tcp] [...192.30.45.30][...43] -> [..10.160.63.128][53217] [Whois-DAS][Unknown][Network][Acceptable][]
RISK: Unidirectional Traffic
end: [.....3][1908] [ip4][..tcp] [...192.30.45.30][...43] -> [..10.160.63.128][53217]
idle: [.....2][1603] [ip4][..tcp] [...10.17.34.139][64016] -> [.....10.17.51.8][.4343] [TLS][Unknown][Web][Safe]
RISK: Known Proto on Non Std Port, Missing SNI TLS Extn, ALPN/SNI Mismatch
DAEMON-EVENT: shutdown
|