1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
|
DAEMON-EVENT: init
DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0]
DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0]
new: [.....1] [ip4][..tcp] [..192.168.0.103][56382] -> [..173.252.107.4][..443]
new: [.....2] [ip4][..tcp] [..192.168.0.103][33936] -> [....31.13.93.52][..443] [MIDSTREAM]
detected: [.....2] [ip4][..tcp] [..192.168.0.103][33936] -> [....31.13.93.52][..443] [TLS.Facebook][SocialNetwork][Fun]
detected: [.....1] [ip4][..tcp] [..192.168.0.103][56382] -> [..173.252.107.4][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
detection-update: [.....1] [ip4][..tcp] [..192.168.0.103][56382] -> [..173.252.107.4][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
analyse: [.....2] [ip4][..tcp] [..192.168.0.103][33936] -> [....31.13.93.52][..443]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 1.572| 0.136| 0.382]
[IAT(c->s)...: 0.000| 1.523| 0.141| 0.383][IAT(s->c)...: 0.000| 1.572| 0.132| 0.381]
[PKTLEN(c->s): 66.000|1431.000| 213.600| 396.000][PKTLEN(s->c): 66.000|1464.000|1151.300| 534.100]
[BINS(c->s)..: 14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0]
[BINS(s->c)..: 2,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,11,0,0,0,0]
detection-update: [.....2] [ip4][..tcp] [..192.168.0.103][33936] -> [....31.13.93.52][..443] [TLS.Facebook][SocialNetwork][Fun]
new: [.....3] [ip4][..tcp] [..192.168.0.103][38816] -> [...46.33.70.160][...80] [MIDSTREAM]
detected: [.....3] [ip4][..tcp] [..192.168.0.103][38816] -> [...46.33.70.160][...80] [HTTP.Instagram][SocialNetwork][Fun]
new: [.....4] [ip4][..tcp] [..192.168.0.103][57936] -> [...82.85.26.162][...80] [MIDSTREAM]
detected: [.....4] [ip4][..tcp] [..192.168.0.103][57936] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun]
new: [.....5] [ip4][..tcp] [..192.168.0.103][44379] -> [...82.85.26.186][...80] [MIDSTREAM]
detected: [.....5] [ip4][..tcp] [..192.168.0.103][44379] -> [...82.85.26.186][...80] [HTTP.Instagram][SocialNetwork][Fun]
new: [.....6] [ip4][..tcp] [..192.168.0.103][57965] -> [...82.85.26.185][...80] [MIDSTREAM]
detected: [.....6] [ip4][..tcp] [..192.168.0.103][57965] -> [...82.85.26.185][...80] [HTTP.Instagram][SocialNetwork][Fun]
analyse: [.....3] [ip4][..tcp] [..192.168.0.103][38816] -> [...46.33.70.160][...80] [HTTP.Instagram][SocialNetwork][Fun]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 0.033| 0.003| 0.008]
[IAT(c->s)...: 0.000| 0.033| 0.010| 0.012][IAT(s->c)...: 0.000| 0.033| 0.002| 0.006]
[PKTLEN(c->s): 66.000| 326.000| 109.300| 96.900][PKTLEN(s->c): 1484.000|1484.000|1484.000| 0.400]
[BINS(c->s)..: 5,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,26,0,0,0]
analyse: [.....4] [ip4][..tcp] [..192.168.0.103][57936] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 0.112| 0.011| 0.030]
[IAT(c->s)...: 0.000| 0.112| 0.013| 0.031][IAT(s->c)...: 0.000| 0.111| 0.010| 0.028]
[PKTLEN(c->s): 66.000| 319.000| 82.900| 63.100][PKTLEN(s->c): 186.000|1484.000|1405.400| 305.000]
[BINS(c->s)..: 14,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,15,0,0,0]
detection-update: [.....6] [ip4][..tcp] [..192.168.0.103][57965] -> [...82.85.26.185][...80] [HTTP.Instagram][SocialNetwork][Fun]
detection-update: [.....5] [ip4][..tcp] [..192.168.0.103][44379] -> [...82.85.26.186][...80] [HTTP.Instagram][SocialNetwork][Fun]
new: [.....7] [ip4][..tcp] [..192.168.0.103][33976] -> [....77.67.29.17][...80] [MIDSTREAM]
analyse: [.....5] [ip4][..tcp] [..192.168.0.103][44379] -> [...82.85.26.186][...80] [HTTP.Instagram][SocialNetwork][Fun]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 0.372| 0.037| 0.093]
[IAT(c->s)...: 0.000| 0.310| 0.041| 0.089][IAT(s->c)...: 0.000| 0.372| 0.033| 0.095]
[PKTLEN(c->s): 66.000| 325.000| 111.700| 84.700][PKTLEN(s->c): 1474.000|1484.000|1483.400| 2.400]
[BINS(c->s)..: 13,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,0,0,0]
new: [.....8] [ip4][..tcp] [..192.168.0.103][37350] -> [...82.85.26.153][...80] [MIDSTREAM]
detected: [.....8] [ip4][..tcp] [..192.168.0.103][37350] -> [...82.85.26.153][...80] [HTTP.Instagram][SocialNetwork][Fun]
new: [.....9] [ip4][..udp] [..192.168.0.106][17500] -> [255.255.255.255][17500]
detected: [.....9] [ip4][..udp] [..192.168.0.106][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable]
new: [....10] [ip4][..udp] [..192.168.0.106][17500] -> [..192.168.0.255][17500]
detected: [....10] [ip4][..udp] [..192.168.0.106][17500] -> [..192.168.0.255][17500] [Dropbox][Cloud][Acceptable]
new: [....11] [ip4][..udp] [....192.168.0.1][..520] -> [..192.168.0.255][..520]
new: [....12] [ip4][..tcp] [....31.13.93.52][..443] -> [..192.168.0.103][33934] [MIDSTREAM]
detected: [....12] [ip4][..tcp] [....31.13.93.52][..443] -> [..192.168.0.103][33934] [TLS.Facebook][SocialNetwork][Fun]
new: [....13] [ip4][..tcp] [..192.168.0.103][33935] -> [....31.13.93.52][..443] [MIDSTREAM]
detected: [....13] [ip4][..tcp] [..192.168.0.103][33935] -> [....31.13.93.52][..443] [TLS.Facebook][SocialNetwork][Fun]
new: [....14] [ip4][.icmp] [..192.168.0.103] -> [..192.168.0.103]
detected: [....14] [ip4][.icmp] [..192.168.0.103] -> [..192.168.0.103] [ICMP][Network][Acceptable]
new: [....15] [ip4][..tcp] [..192.168.0.103][33763] -> [....31.13.93.52][..443] [MIDSTREAM]
detected: [....15] [ip4][..tcp] [..192.168.0.103][33763] -> [....31.13.93.52][..443] [TLS.Facebook][SocialNetwork][Fun]
new: [....16] [ip4][..tcp] [..192.168.0.103][38817] -> [...46.33.70.160][...80] [MIDSTREAM]
analyse: [.....7] [ip4][..tcp] [..192.168.0.103][33976] -> [....77.67.29.17][...80]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 7.322| 0.237| 1.293]
[IAT(c->s)...: 0.000| 7.322| 0.612| 2.023][IAT(s->c)...: 0.000| 0.004| 0.001| 0.001]
[PKTLEN(c->s): 66.000| 66.000| 66.000| 0.000][PKTLEN(s->c): 1337.000|1484.000|1476.300| 32.800]
[BINS(c->s)..: 13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,18,0,0,0]
guessed: [.....7] [ip4][..tcp] [..192.168.0.103][33976] -> [....77.67.29.17][...80] [HTTP][Web][Acceptable]
detected: [.....7] [ip4][..tcp] [..192.168.0.103][33976] -> [....77.67.29.17][...80] [HTTP][Web][Acceptable]
new: [....17] [ip4][..udp] [..192.168.0.103][51219] -> [........8.8.8.8][...53]
detected: [....17] [ip4][..udp] [..192.168.0.103][51219] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun]
new: [....18] [ip4][..udp] [..192.168.0.103][33603] -> [........8.8.8.8][...53]
detected: [....18] [ip4][..udp] [..192.168.0.103][33603] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun]
new: [....19] [ip4][..tcp] [..192.168.0.103][57966] -> [...82.85.26.185][...80] [MIDSTREAM]
new: [....20] [ip4][..udp] [..192.168.0.103][26540] -> [........8.8.8.8][...53]
detected: [....20] [ip4][..udp] [..192.168.0.103][26540] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun]
detection-update: [....17] [ip4][..udp] [..192.168.0.103][51219] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun]
new: [....21] [ip4][..tcp] [..192.168.0.103][44558] -> [...46.33.70.174][..443]
detection-update: [....18] [ip4][..udp] [..192.168.0.103][33603] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun]
new: [....22] [ip4][..tcp] [..192.168.0.103][41181] -> [...82.85.26.154][..443]
new: [....23] [ip4][..tcp] [..192.168.0.103][41182] -> [...82.85.26.154][..443]
detection-update: [....20] [ip4][..udp] [..192.168.0.103][26540] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun]
new: [....24] [ip4][..tcp] [..192.168.0.103][60908] -> [...46.33.70.136][..443]
detected: [....21] [ip4][..tcp] [..192.168.0.103][44558] -> [...46.33.70.174][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
detected: [....24] [ip4][..tcp] [..192.168.0.103][60908] -> [...46.33.70.136][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
detected: [....22] [ip4][..tcp] [..192.168.0.103][41181] -> [...82.85.26.154][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
detected: [....23] [ip4][..tcp] [..192.168.0.103][41182] -> [...82.85.26.154][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
detection-update: [....24] [ip4][..tcp] [..192.168.0.103][60908] -> [...46.33.70.136][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
detection-update: [....24] [ip4][..tcp] [..192.168.0.103][60908] -> [...46.33.70.136][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
detection-update: [....21] [ip4][..tcp] [..192.168.0.103][44558] -> [...46.33.70.174][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
detection-update: [....21] [ip4][..tcp] [..192.168.0.103][44558] -> [...46.33.70.174][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
detection-update: [....22] [ip4][..tcp] [..192.168.0.103][41181] -> [...82.85.26.154][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
detection-update: [....22] [ip4][..tcp] [..192.168.0.103][41181] -> [...82.85.26.154][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
detection-update: [....23] [ip4][..tcp] [..192.168.0.103][41182] -> [...82.85.26.154][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
detection-update: [....23] [ip4][..tcp] [..192.168.0.103][41182] -> [...82.85.26.154][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
new: [....25] [ip4][..tcp] [..92.122.48.138][...80] -> [..192.168.0.103][41562] [MIDSTREAM]
new: [....26] [ip4][..tcp] [..192.168.0.103][58052] -> [...82.85.26.162][...80] [MIDSTREAM]
detected: [....26] [ip4][..tcp] [..192.168.0.103][58052] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun]
new: [....27] [ip4][..tcp] [..192.168.0.103][58053] -> [...82.85.26.162][...80] [MIDSTREAM]
detected: [....27] [ip4][..tcp] [..192.168.0.103][58053] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun]
analyse: [....26] [ip4][..tcp] [..192.168.0.103][58052] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 0.062| 0.005| 0.015]
[IAT(c->s)...: 0.000| 0.062| 0.005| 0.016][IAT(s->c)...: 0.000| 0.061| 0.004| 0.014]
[PKTLEN(c->s): 66.000| 326.000| 83.300| 64.900][PKTLEN(s->c): 396.000|1484.000|1419.500| 255.900]
[BINS(c->s)..: 14,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,0,0,0]
new: [....28] [ip4][..tcp] [....31.13.86.52][...80] -> [..192.168.0.103][58216] [MIDSTREAM]
analyse: [....28] [ip4][..tcp] [....31.13.86.52][...80] -> [..192.168.0.103][58216]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 0.002| 0.001| 0.001]
[IAT(c->s)...: 0.000| 0.002| 0.001| 0.001][IAT(s->c)...: 0.000| 0.002| 0.001| 0.001]
[PKTLEN(c->s): 1464.000|1464.000|1464.000| 0.000][PKTLEN(s->c): 66.000| 66.000| 66.000| 0.000]
[BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,21,0,0,0,0]
[BINS(s->c)..: 11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
guessed: [....28] [ip4][..tcp] [....31.13.86.52][...80] -> [..192.168.0.103][58216] [HTTP.Facebook][SocialNetwork][Fun]
detected: [....28] [ip4][..tcp] [....31.13.86.52][...80] -> [..192.168.0.103][58216] [HTTP.Facebook][SocialNetwork][Fun]
update: [....14] [ip4][.icmp] [..192.168.0.103] -> [..192.168.0.103] [ICMP][Network][Acceptable]
update: [.....9] [ip4][..udp] [..192.168.0.106][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable]
update: [....10] [ip4][..udp] [..192.168.0.106][17500] -> [..192.168.0.255][17500] [Dropbox][Cloud][Acceptable]
update: [....11] [ip4][..udp] [....192.168.0.1][..520] -> [..192.168.0.255][..520]
new: [....29] [ip4][..tcp] [....2.22.236.51][...80] -> [..192.168.0.103][44151] [MIDSTREAM]
new: [....30] [ip4][..tcp] [..192.168.0.103][58690] -> [...46.33.70.159][..443] [MIDSTREAM]
detected: [....30] [ip4][..tcp] [..192.168.0.103][58690] -> [...46.33.70.159][..443] [TLS][Web][Safe]
new: [....31] [ip4][..udp] [..192.168.0.103][27124] -> [........8.8.8.8][...53]
detected: [....31] [ip4][..udp] [..192.168.0.103][27124] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun]
analyse: [....29] [ip4][..tcp] [....2.22.236.51][...80] -> [..192.168.0.103][44151]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 0.004| 0.001| 0.001]
[IAT(c->s)...: 0.000| 0.004| 0.001| 0.001][IAT(s->c)...: 0.000| 0.004| 0.001| 0.001]
[PKTLEN(c->s): 1484.000|1484.000|1484.000| 0.000][PKTLEN(s->c): 66.000| 66.000| 66.000| 0.000]
[BINS(c->s)..: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,17,0,0,0]
[BINS(s->c)..: 15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
guessed: [....29] [ip4][..tcp] [....2.22.236.51][...80] -> [..192.168.0.103][44151] [HTTP][Web][Acceptable]
detected: [....29] [ip4][..tcp] [....2.22.236.51][...80] -> [..192.168.0.103][44151] [HTTP][Web][Acceptable]
new: [....32] [ip4][..tcp] [...46.33.70.150][...80] -> [..192.168.0.103][40855]
DAEMON-EVENT: [Processed: 743 pkts][ZLib][compressions: 0|diff: 0 / 0]
DAEMON-EVENT: [Flows][active: 32 / 32|skipped: 0|!detected: 0|guessed: 3|detection-updates: 15|updates: 4]
new: [....33] [ip4][..tcp] [...192.168.2.17][49355] -> [....31.13.86.52][..443]
detected: [....33] [ip4][..tcp] [...192.168.2.17][49355] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
detection-update: [....33] [ip4][..tcp] [...192.168.2.17][49355] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
analyse: [....33] [ip4][..tcp] [...192.168.2.17][49355] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 0.017| 0.003| 0.006]
[IAT(c->s)...: 0.000| 0.017| 0.004| 0.006][IAT(s->c)...: 0.000| 0.017| 0.003| 0.005]
[PKTLEN(c->s): 66.000| 564.000| 122.900| 135.300][PKTLEN(s->c): 66.000|1454.000|1055.600| 578.200]
[BINS(c->s)..: 11,0,1,0,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 3,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,12,0,0,0,0]
new: [....34] [ip4][..tcp] [...192.168.2.17][49357] -> [....31.13.86.52][..443]
new: [....35] [ip4][..tcp] [...192.168.2.17][49358] -> [....31.13.86.52][..443]
new: [....36] [ip4][..tcp] [...192.168.2.17][49359] -> [....31.13.86.52][..443]
detected: [....34] [ip4][..tcp] [...192.168.2.17][49357] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
detected: [....35] [ip4][..tcp] [...192.168.2.17][49358] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
detected: [....36] [ip4][..tcp] [...192.168.2.17][49359] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
detection-update: [....34] [ip4][..tcp] [...192.168.2.17][49357] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
detection-update: [....35] [ip4][..tcp] [...192.168.2.17][49358] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
detection-update: [....36] [ip4][..tcp] [...192.168.2.17][49359] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
analyse: [....36] [ip4][..tcp] [...192.168.2.17][49359] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 0.159| 0.012| 0.037]
[IAT(c->s)...: 0.000| 0.143| 0.013| 0.036][IAT(s->c)...: 0.000| 0.159| 0.012| 0.037]
[PKTLEN(c->s): 66.000| 637.000| 172.600| 200.300][PKTLEN(s->c): 66.000|1454.000| 858.100| 596.900]
[BINS(c->s)..: 11,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 3,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,2,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,0,0]
analyse: [....35] [ip4][..tcp] [...192.168.2.17][49358] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 0.157| 0.021| 0.045]
[IAT(c->s)...: 0.000| 0.157| 0.019| 0.042][IAT(s->c)...: 0.000| 0.156| 0.023| 0.048]
[PKTLEN(c->s): 66.000| 654.000| 224.600| 239.400][PKTLEN(s->c): 66.000|1454.000| 771.400| 614.300]
[BINS(c->s)..: 9,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,1,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 5,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0]
idle: [.....8] [ip4][..tcp] [..192.168.0.103][37350] -> [...82.85.26.153][...80]
idle: [....22] [ip4][..tcp] [..192.168.0.103][41181] -> [...82.85.26.154][..443]
idle: [....23] [ip4][..tcp] [..192.168.0.103][41182] -> [...82.85.26.154][..443]
idle: [.....4] [ip4][..tcp] [..192.168.0.103][57936] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun]
idle: [....20] [ip4][..udp] [..192.168.0.103][26540] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun]
idle: [.....6] [ip4][..tcp] [..192.168.0.103][57965] -> [...82.85.26.185][...80]
guessed: [....19] [ip4][..tcp] [..192.168.0.103][57966] -> [...82.85.26.185][...80] [HTTP][Web][Acceptable]
end: [....19] [ip4][..tcp] [..192.168.0.103][57966] -> [...82.85.26.185][...80]
end: [....30] [ip4][..tcp] [..192.168.0.103][58690] -> [...46.33.70.159][..443] [TLS][Web][Safe]
end: [.....7] [ip4][..tcp] [..192.168.0.103][33976] -> [....77.67.29.17][...80] [HTTP][Web][Acceptable]
idle: [....17] [ip4][..udp] [..192.168.0.103][51219] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun]
idle: [....26] [ip4][..tcp] [..192.168.0.103][58052] -> [...82.85.26.162][...80] [HTTP.Instagram][SocialNetwork][Fun]
idle: [....27] [ip4][..tcp] [..192.168.0.103][58053] -> [...82.85.26.162][...80]
idle: [....14] [ip4][.icmp] [..192.168.0.103] -> [..192.168.0.103] [ICMP][Network][Acceptable]
idle: [.....9] [ip4][..udp] [..192.168.0.106][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable]
idle: [....24] [ip4][..tcp] [..192.168.0.103][60908] -> [...46.33.70.136][..443]
idle: [....28] [ip4][..tcp] [....31.13.86.52][...80] -> [..192.168.0.103][58216] [HTTP.Facebook][SocialNetwork][Fun]
idle: [....21] [ip4][..tcp] [..192.168.0.103][44558] -> [...46.33.70.174][..443]
guessed: [....32] [ip4][..tcp] [...46.33.70.150][...80] -> [..192.168.0.103][40855] [HTTP][Web][Acceptable]
idle: [....32] [ip4][..tcp] [...46.33.70.150][...80] -> [..192.168.0.103][40855]
idle: [.....3] [ip4][..tcp] [..192.168.0.103][38816] -> [...46.33.70.160][...80] [HTTP.Instagram][SocialNetwork][Fun]
guessed: [....16] [ip4][..tcp] [..192.168.0.103][38817] -> [...46.33.70.160][...80] [HTTP][Web][Acceptable]
end: [....16] [ip4][..tcp] [..192.168.0.103][38817] -> [...46.33.70.160][...80]
idle: [....10] [ip4][..udp] [..192.168.0.106][17500] -> [..192.168.0.255][17500] [Dropbox][Cloud][Acceptable]
idle: [....31] [ip4][..udp] [..192.168.0.103][27124] -> [........8.8.8.8][...53]
idle: [.....1] [ip4][..tcp] [..192.168.0.103][56382] -> [..173.252.107.4][..443] [TLS.Instagram][SocialNetwork][Fun]
RISK: Obsolete TLS (v1.1 or older)
idle: [....15] [ip4][..tcp] [..192.168.0.103][33763] -> [....31.13.93.52][..443]
idle: [....29] [ip4][..tcp] [....2.22.236.51][...80] -> [..192.168.0.103][44151] [HTTP][Web][Acceptable]
end: [.....5] [ip4][..tcp] [..192.168.0.103][44379] -> [...82.85.26.186][...80] [HTTP.Instagram][SocialNetwork][Fun]
idle: [....12] [ip4][..tcp] [....31.13.93.52][..443] -> [..192.168.0.103][33934]
idle: [....13] [ip4][..tcp] [..192.168.0.103][33935] -> [....31.13.93.52][..443]
idle: [.....2] [ip4][..tcp] [..192.168.0.103][33936] -> [....31.13.93.52][..443] [TLS.Facebook][SocialNetwork][Fun]
idle: [....18] [ip4][..udp] [..192.168.0.103][33603] -> [........8.8.8.8][...53] [DNS.Instagram][SocialNetwork][Fun]
not-detected: [....11] [ip4][..udp] [....192.168.0.1][..520] -> [..192.168.0.255][..520] [Unknown][Unrated]
idle: [....11] [ip4][..udp] [....192.168.0.1][..520] -> [..192.168.0.255][..520]
guessed: [....25] [ip4][..tcp] [..92.122.48.138][...80] -> [..192.168.0.103][41562] [HTTP][Web][Acceptable]
idle: [....25] [ip4][..tcp] [..92.122.48.138][...80] -> [..192.168.0.103][41562]
new: [....37] [ip4][..tcp] [...192.168.2.17][49360] -> [....31.13.86.52][..443]
new: [....38] [ip4][..tcp] [...192.168.2.17][49361] -> [....31.13.86.52][..443]
detected: [....37] [ip4][..tcp] [...192.168.2.17][49360] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
detected: [....38] [ip4][..tcp] [...192.168.2.17][49361] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
detection-update: [....37] [ip4][..tcp] [...192.168.2.17][49360] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
detection-update: [....38] [ip4][..tcp] [...192.168.2.17][49361] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
analyse: [....37] [ip4][..tcp] [...192.168.2.17][49360] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 0.016| 0.003| 0.005]
[IAT(c->s)...: 0.000| 0.014| 0.003| 0.005][IAT(s->c)...: 0.000| 0.016| 0.002| 0.005]
[PKTLEN(c->s): 66.000| 592.000| 151.500| 173.100][PKTLEN(s->c): 66.000|1454.000|1081.900| 582.300]
[BINS(c->s)..: 9,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 4,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,0,0,0,0]
analyse: [....34] [ip4][..tcp] [...192.168.2.17][49357] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 10.470| 0.692| 2.561]
[IAT(c->s)...: 0.000| 10.413| 0.763| 2.677][IAT(s->c)...: 0.000| 10.470| 0.633| 2.459]
[PKTLEN(c->s): 66.000| 663.000| 211.500| 230.100][PKTLEN(s->c): 66.000|1454.000| 706.900| 603.400]
[BINS(c->s)..: 10,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 5,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0]
analyse: [....38] [ip4][..tcp] [...192.168.2.17][49361] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
[min|max|avg|stddev]
[IAT(flow)...: 0.000| 0.132| 0.012| 0.032]
[IAT(c->s)...: 0.000| 0.130| 0.013| 0.033][IAT(s->c)...: 0.000| 0.132| 0.010| 0.031]
[PKTLEN(c->s): 66.000| 592.000| 134.400| 158.500][PKTLEN(s->c): 66.000|1454.000| 953.400| 621.200]
[BINS(c->s)..: 12,0,1,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[BINS(s->c)..: 4,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,10,0,0,0,0]
end: [....33] [ip4][..tcp] [...192.168.2.17][49355] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
end: [....34] [ip4][..tcp] [...192.168.2.17][49357] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
end: [....35] [ip4][..tcp] [...192.168.2.17][49358] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
end: [....36] [ip4][..tcp] [...192.168.2.17][49359] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
end: [....37] [ip4][..tcp] [...192.168.2.17][49360] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
end: [....38] [ip4][..tcp] [...192.168.2.17][49361] -> [....31.13.86.52][..443] [TLS.Instagram][SocialNetwork][Fun]
DAEMON-EVENT: shutdown
|