New protocols for Amazon/AWS sub-classification (#2975)

Add:
* Cognito
* API Gateway
* Kinesis
* EC2
* EMR
* S3
* Cloudfront
* DynamoDB

Keep `NDPI_PROTOCOL_AMAZON_AWS` for generic AWS traffic
This commit is contained in:
Ivan Nardi 2025-10-02 11:48:25 +02:00 committed by GitHub
parent c9dfc946ff
commit 113170cca4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
93 changed files with 5121 additions and 826 deletions

View file

@ -26,4 +26,4 @@ Fun 28 3895 1
Game 28 3895 1
1 TCP 192.168.1.17:33959 <-> 3.64.34.254:6112 [proto: 109/GuildWars2][Stack: GuildWars2][IP: 265/AmazonAWS][ClearText][Confidence: DPI][FPC: 265/AmazonAWS, Confidence: IP address][DPI packets: 4][cat: Game/8][Breed: Fun][15 pkts/1798 bytes <-> 13 pkts/2097 bytes][Goodput ratio: 44/59][3.15 sec][bytes ratio: -0.077 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 258/307 2662/2633 730/779][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 120/161 351/921 82/224][TCP Fingerprint: 2_64_64240_2e3cee914fc1/Linux][PLAIN TEXT (P /Sts/Connect STS/1.0)][Plen Bins: 25,31,12,0,6,12,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
1 TCP 192.168.1.17:33959 <-> 3.64.34.254:6112 [proto: 109/GuildWars2][Stack: GuildWars2][IP: 461/AWS_EC2][ClearText][Confidence: DPI][FPC: 461/AWS_EC2, Confidence: IP address][DPI packets: 4][cat: Game/8][Breed: Fun][15 pkts/1798 bytes <-> 13 pkts/2097 bytes][Goodput ratio: 44/59][3.15 sec][bytes ratio: -0.077 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 258/307 2662/2633 730/779][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 120/161 351/921 82/224][TCP Fingerprint: 2_64_64240_2e3cee914fc1/Linux][PLAIN TEXT (P /Sts/Connect STS/1.0)][Plen Bins: 25,31,12,0,6,12,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]