From 6755d3309aa034deaf68ddcfe33e5e429d4bc8db Mon Sep 17 00:00:00 2001 From: Chad Monroe Date: Mon, 19 Jan 2026 09:32:19 -0800 Subject: [PATCH] ApplePush: rework detection (#3075) Current ApplePush dissector only look for IP match and doesn't allow full metadata extraction (see #3074). Since all ApplePush flows are TLS ones, let TLS dissector do its job and handle IP match as usual; with this change, the dissector itself is useless: remove it. Close #3074 Signed-off-by: Chad Monroe Co-authored-by: Ivan Nardi --- src/include/ndpi_private.h | 1 - src/lib/ndpi_content_match.c.inc | 17 ++- src/lib/ndpi_main.c | 3 - src/lib/protocols/apple_push.c | 104 ------------------ tests/cfgs/caches_cfg/result/ookla.pcap.out | 2 +- tests/cfgs/caches_cfg/result/teams.pcap.out | 2 +- .../caches_global/result/bittorrent.pcap.out | 2 +- .../cfgs/caches_global/result/ookla.pcap.out | 2 +- .../cfgs/caches_global/result/teams.pcap.out | 2 +- .../result/bittorrent.pcap.out | 2 +- .../result/bittorrent_tcp_miss.pcapng.out | 2 +- .../classification_only/result/ookla.pcap.out | 2 +- .../classification_only/result/teams.pcap.out | 2 +- tests/cfgs/default/pcap/apple_push.pcap | Bin 0 -> 12106 bytes tests/cfgs/default/result/1kxun.pcap.out | 2 +- tests/cfgs/default/result/443-chrome.pcap.out | 2 +- tests/cfgs/default/result/443-opvn.pcap.out | 2 +- .../default/result/KakaoTalk_chat.pcap.out | 2 +- .../default/result/KakaoTalk_talk.pcap.out | 2 +- tests/cfgs/default/result/Oscar.pcap.out | 2 +- .../cfgs/default/result/alexa-app.pcapng.out | 2 +- tests/cfgs/default/result/alicloud.pcap.out | 2 +- tests/cfgs/default/result/amqp.pcap.out | 2 +- .../default/result/anyconnect-vpn.pcap.out | 4 +- tests/cfgs/default/result/apple_push.pcap.out | 41 +++++++ tests/cfgs/default/result/atg.pcap.out | 2 +- tests/cfgs/default/result/avast.pcap.out | 2 +- tests/cfgs/default/result/bfcp.pcapng.out | 2 +- tests/cfgs/default/result/bittorrent.pcap.out | 2 +- .../result/bittorrent_tcp_miss.pcapng.out | 2 +- tests/cfgs/default/result/blizzard.pcap.out | 2 +- tests/cfgs/default/result/cassandra.pcap.out | 2 +- .../default/result/cloudflare-warp.pcap.out | 2 +- tests/cfgs/default/result/coap_mqtt.pcap.out | 2 +- tests/cfgs/default/result/codm.pcap.out | 2 +- .../result/custom_categories.pcapng.out | 2 +- tests/cfgs/default/result/dingtalk.pcap.out | 2 +- tests/cfgs/default/result/dlms.pcap.out | 2 +- tests/cfgs/default/result/dofus.pcap.out | 2 +- tests/cfgs/default/result/drda_db2.pcap.out | 2 +- .../default/result/elasticsearch.pcap.out | 2 +- tests/cfgs/default/result/elf.pcap.out | 2 +- tests/cfgs/default/result/emotet.pcap.out | 2 +- .../default/result/false_positives.pcapng.out | 2 +- .../result/false_positives2.pcapng.out | 2 +- tests/cfgs/default/result/fastcgi.pcap.out | 2 +- tests/cfgs/default/result/fix.pcap.out | 2 +- tests/cfgs/default/result/fix2.pcap.out | 2 +- .../default/result/ftp-start-tls.pcap.out | 2 +- tests/cfgs/default/result/ftp.pcap.out | 2 +- tests/cfgs/default/result/ftp_failed.pcap.out | 2 +- .../result/fuzz-2006-06-26-2594.pcap.out | 2 +- .../result/fuzz-2006-09-29-28586.pcap.out | 2 +- .../default/result/fuzz-2021-10-13.pcap.out | 2 +- .../result/gaijin_mobile_mixed.pcap.out | 2 +- .../default/result/genshin-impact.pcap.out | 2 +- tests/cfgs/default/result/google_ssl.pcap.out | 2 +- tests/cfgs/default/result/haproxy.pcap.out | 2 +- tests/cfgs/default/result/hl7.pcap.out | 2 +- tests/cfgs/default/result/hpvirtgrp.pcap.out | 2 +- tests/cfgs/default/result/http2.pcapng.out | 2 +- .../http_guessed_host_and_guessed.pcapng.out | 2 +- .../default/result/imap-starttls.pcap.out | 2 +- tests/cfgs/default/result/imap.pcap.out | 2 +- tests/cfgs/default/result/instagram.pcap.out | 2 +- tests/cfgs/default/result/irc.pcap.out | 2 +- .../default/result/iso9506-1-mms.pcap.out | 2 +- tests/cfgs/default/result/ja4.pcapng.out | 2 +- tests/cfgs/default/result/jabber.pcap.out | 2 +- tests/cfgs/default/result/json.pcapng.out | 2 +- tests/cfgs/default/result/jsonrpc.pcap.out | 2 +- tests/cfgs/default/result/kafka.pcapng.out | 2 +- tests/cfgs/default/result/kerberos.pcap.out | 2 +- tests/cfgs/default/result/kismet.pcap.out | 2 +- .../default/result/lisp_registration.pcap.out | 2 +- .../result/log4j-webapp-exploit.pcap.out | 2 +- tests/cfgs/default/result/lustre.pcapng.out | 2 +- tests/cfgs/default/result/melsec.pcapng.out | 2 +- tests/cfgs/default/result/memcached.cap.out | 2 +- tests/cfgs/default/result/monero.pcap.out | 2 +- .../result/mongo_false_positive.pcapng.out | 2 +- tests/cfgs/default/result/mongodb.pcap.out | 2 +- tests/cfgs/default/result/msgpack.pcap.out | 2 +- tests/cfgs/default/result/mssql_tds.pcap.out | 2 +- tests/cfgs/default/result/naver.pcap.out | 2 +- .../default/result/nest_log_sink.pcap.out | 2 +- tests/cfgs/default/result/netbios.pcap.out | 2 +- tests/cfgs/default/result/nntp.pcap.out | 2 +- tests/cfgs/default/result/nordvpn.pcap.out | 2 +- tests/cfgs/default/result/ookla.pcap.out | 2 +- tests/cfgs/default/result/openvpn.pcap.out | 2 +- .../result/openvpn_nohmac_tcp.pcapng.out | 2 +- .../result/openvpn_obfuscated.pcapng.out | 2 +- .../ossfuzz_seed_fake_traces_1.pcapng.out | 2 +- .../ossfuzz_seed_fake_traces_2.pcapng.out | 2 +- tests/cfgs/default/result/paltalk.pcapng.out | 2 +- .../default/result/path_of_exile.pcapng.out | 2 +- tests/cfgs/default/result/pgsql.pcap.out | 2 +- tests/cfgs/default/result/pgsql2.pcapng.out | 2 +- tests/cfgs/default/result/plugin.pcapng.out | 2 +- tests/cfgs/default/result/pop3.pcap.out | 2 +- tests/cfgs/default/result/pop3_stls.pcap.out | 2 +- .../result/portable_executable.pcap.out | 2 +- tests/cfgs/default/result/protobuf.pcap.out | 2 +- tests/cfgs/default/result/radmin3.pcapng.out | 2 +- tests/cfgs/default/result/raft.pcap.out | 2 +- tests/cfgs/default/result/rdp.pcap.out | 2 +- tests/cfgs/default/result/rdp3.pcap.out | 2 +- .../default/result/rdp_over_http.pcapng.out | 2 +- .../result/reasm_crash_anon.pcapng.out | 2 +- .../default/result/reasm_segv_anon.pcapng.out | 2 +- tests/cfgs/default/result/riot.pcapng.out | 2 +- tests/cfgs/default/result/rsh.pcap.out | 2 +- tests/cfgs/default/result/rtmp.pcap.out | 2 +- tests/cfgs/default/result/rtp.pcapng.out | 2 +- .../cfgs/default/result/s7comm-plus.pcap.out | 2 +- tests/cfgs/default/result/s7comm.pcap.out | 2 +- .../cfgs/default/result/shadowsocks.pcap.out | 2 +- tests/cfgs/default/result/shell.pcap.out | 2 +- tests/cfgs/default/result/sites.pcapng.out | 2 +- tests/cfgs/default/result/sites3.pcapng.out | 2 +- tests/cfgs/default/result/smb_frags.pcap.out | 2 +- tests/cfgs/default/result/smbv1.pcap.out | 2 +- .../default/result/smpp_in_general.pcap.out | 2 +- .../default/result/smtp-starttls.pcap.out | 2 +- tests/cfgs/default/result/smtp.pcap.out | 2 +- tests/cfgs/default/result/soap.pcap.out | 2 +- tests/cfgs/default/result/socks.pcap.out | 2 +- tests/cfgs/default/result/ssh.pcap.out | 2 +- .../result/ssh_unidirectional.pcap.out | 2 +- .../default/result/starcraft_battle.pcap.out | 2 +- tests/cfgs/default/result/teams.pcap.out | 2 +- .../result/telegram_videocall.pcapng.out | 2 +- .../default/result/tencent_games.pcap.out | 2 +- tests/cfgs/default/result/teso.pcapng.out | 2 +- tests/cfgs/default/result/threema.pcap.out | 2 +- tests/cfgs/default/result/thrift.pcap.out | 2 +- tests/cfgs/default/result/tinc.pcap.out | 2 +- .../cfgs/default/result/tls-appdata.pcap.out | 2 +- .../result/tls_certificate_too_long.pcap.out | 2 +- .../result/tls_false_positives.pcapng.out | 2 +- .../tls_heur__shadowsocks-tcp.pcapng.out | 2 +- .../tls_heur__trojan-tcp-tls.pcapng.out | 2 +- .../result/tls_heur__vmess-tcp-tls.pcapng.out | 2 +- .../result/tls_heur__vmess-tcp.pcapng.out | 2 +- .../tls_heur__vmess-websocket.pcapng.out | 2 +- .../default/result/tls_invalid_reads.pcap.out | 2 +- .../result/tls_missing_ch_frag.pcap.out | 2 +- .../result/tls_unidirectional.pcap.out | 2 +- .../result/tls_with_huge_ch.pcapng.out | 2 +- tests/cfgs/default/result/ultrasurf.pcap.out | 2 +- tests/cfgs/default/result/viber.pcap.out | 2 +- tests/cfgs/default/result/vnc.pcap.out | 2 +- tests/cfgs/default/result/wa_video.pcap.out | 2 +- tests/cfgs/default/result/wa_voice.pcap.out | 21 ++-- tests/cfgs/default/result/waze.pcap.out | 2 +- tests/cfgs/default/result/websocket.pcap.out | 2 +- tests/cfgs/default/result/wechat.pcap.out | 2 +- tests/cfgs/default/result/whatsapp.pcap.out | 2 +- .../result/whatsapp_login_call.pcap.out | 21 ++-- .../result/whatsapp_login_chat.pcap.out | 2 +- .../whatsapp_voice_and_message.pcap.out | 2 +- tests/cfgs/default/result/whois.pcapng.out | 2 +- tests/cfgs/default/result/xiaomi.pcap.out | 2 +- tests/cfgs/default/result/z3950.pcapng.out | 2 +- tests/cfgs/default/result/zoom.pcap.out | 2 +- .../result/ookla.pcap.out | 2 +- .../disable_protocols/result/soap.pcap.out | 2 +- .../enable_payload_stat/result/1kxun.pcap.out | 2 +- tests/cfgs/fpc/result/1kxun.pcap.out | 2 +- tests/cfgs/fpc_disabled/result/teams.pcap.out | 2 +- .../result/1kxun.pcap.out | 2 +- .../ip_lists_disable/result/1kxun.pcap.out | 2 +- tests/cfgs/monitoring/result/s7comm.pcap.out | 2 +- tests/cfgs/monitoring/result/teams.pcap.out | 2 +- .../result/telegram_videocall.pcapng.out | 2 +- .../result/openvpn_obfuscated.pcapng.out | 2 +- .../result/shadowsocks.pcap.out | 2 +- .../result/openvpn_obfuscated.pcapng.out | 2 +- tests/cfgs/plugins/result/plugin.pcapng.out | 2 +- .../result/telegram_videocall.pcapng.out | 2 +- .../tls_heur__shadowsocks-tcp.pcapng.out | 2 +- .../tls_heur__trojan-tcp-tls.pcapng.out | 2 +- .../result/tls_heur__vmess-tcp-tls.pcapng.out | 2 +- .../result/tls_heur__vmess-tcp.pcapng.out | 2 +- .../tls_heur__vmess-websocket.pcapng.out | 2 +- .../result/zoom.pcap.out | 2 +- windows/nDPI.vcxproj | 1 - windows/nDPI.vcxproj.filters | 1 - 189 files changed, 257 insertions(+), 313 deletions(-) delete mode 100644 src/lib/protocols/apple_push.c create mode 100644 tests/cfgs/default/pcap/apple_push.pcap create mode 100644 tests/cfgs/default/result/apple_push.pcap.out diff --git a/src/include/ndpi_private.h b/src/include/ndpi_private.h index b903671f1..aa1f3b31e 100644 --- a/src/include/ndpi_private.h +++ b/src/include/ndpi_private.h @@ -953,7 +953,6 @@ void init_nintendo_dissector(struct ndpi_detection_module_struct *ndpi_struct); void init_csgo_dissector(struct ndpi_detection_module_struct *ndpi_struct); void init_checkmk_dissector(struct ndpi_detection_module_struct *ndpi_struct); void init_cpha_dissector(struct ndpi_detection_module_struct *ndpi_struct); -void init_apple_push_dissector(struct ndpi_detection_module_struct *ndpi_struct); void init_amazon_video_dissector(struct ndpi_detection_module_struct *ndpi_struct); void init_whatsapp_dissector(struct ndpi_detection_module_struct *ndpi_struct); void init_ajp_dissector(struct ndpi_detection_module_struct *ndpi_struct); diff --git a/src/lib/ndpi_content_match.c.inc b/src/lib/ndpi_content_match.c.inc index 35317d0c9..ed3054619 100644 --- a/src/lib/ndpi_content_match.c.inc +++ b/src/lib/ndpi_content_match.c.inc @@ -309,6 +309,15 @@ static ndpi_network host_protocol_list[] = { { 0xBC2A5F00 /* 188.42.95.0/24 */, 24, NDPI_PROTOCOL_VIVOX }, { 0xBC2A9300 /* 188.42.147.0/24 */, 24, NDPI_PROTOCOL_VIVOX }, + /* ApplePush: https://support.apple.com/en-us/HT203609 + TODO: are we able to autogenerate this list? + */ + { 0x11f90000 /* 17.249.0.0/16 */, 16, NDPI_PROTOCOL_APPLE_PUSH }, + { 0x11fc0000 /* 17.252.0.0/16 */, 16, NDPI_PROTOCOL_APPLE_PUSH }, + { 0x11399000 /* 17.57.144.0/22 */, 22, NDPI_PROTOCOL_APPLE_PUSH }, + { 0x11bc8000 /* 17.188.128.0/18 */, 18, NDPI_PROTOCOL_APPLE_PUSH }, + { 0x11bc1400 /* 17.188.20.0/23 */, 23, NDPI_PROTOCOL_APPLE_PUSH }, + #ifdef CUSTOM_NDPI_PROTOCOLS #include "../../../nDPI-custom/custom_ndpi_content_match_host_protocol_list.c.inc" #endif @@ -319,10 +328,16 @@ static ndpi_network host_protocol_list[] = { static ndpi_network6 host_protocol_list_6[] = { - /* See the ipv4 list for a description */ + /* See the ipv4 lists for a descriptions */ + { "2606:4700:100::", 48, NDPI_PROTOCOL_CLOUDFLARE_WARP }, { "2606:4700:102::", 48, NDPI_PROTOCOL_CLOUDFLARE_WARP }, + { "2620:149:a44::", 48, NDPI_PROTOCOL_APPLE_PUSH }, + { "2403:300:a42::", 48, NDPI_PROTOCOL_APPLE_PUSH }, + { "2403:300:a51::", 48, NDPI_PROTOCOL_APPLE_PUSH }, + { "2a01:b740:a42::", 48, NDPI_PROTOCOL_APPLE_PUSH }, + /* End */ { NULL, 0, 0 } }; diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c index 2c64e875b..9177064dc 100644 --- a/src/lib/ndpi_main.c +++ b/src/lib/ndpi_main.c @@ -6973,9 +6973,6 @@ static int dissectors_init(struct ndpi_detection_module_struct *ndpi_str) { /* DIAMETER */ init_diameter_dissector(ndpi_str); - /* APPLE_PUSH */ - init_apple_push_dissector(ndpi_str); - /* EAQ */ init_eaq_dissector(ndpi_str); diff --git a/src/lib/protocols/apple_push.c b/src/lib/protocols/apple_push.c deleted file mode 100644 index 9ac53621a..000000000 --- a/src/lib/protocols/apple_push.c +++ /dev/null @@ -1,104 +0,0 @@ -/* - * apple_push.c - * - * Copyright (C) 2018 by ntop.org - * - * This file is part of nDPI, an open source deep packet inspection - * library based on the OpenDPI and PACE technology by ipoque GmbH - * - * nDPI is free software: you can redistribute it and/or modify - * it under the terms of the GNU Lesser General Public License as published by - * the Free Software Foundation, either version 3 of the License, or - * (at your option) any later version. - * - * nDPI is distributed in the hope that it will be useful, - * but WITHOUT ANY WARRANTY; without even the implied warranty of - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - * GNU Lesser General Public License for more details. - * - * You should have received a copy of the GNU Lesser General Public License - * along with nDPI. If not, see . - * - */ - -#include "ndpi_protocol_ids.h" - -#define NDPI_CURRENT_PROTO NDPI_PROTOCOL_APPLE_PUSH - -#include "ndpi_api.h" -#include "ndpi_private.h" - -static int is_apple_push_addr(const struct ndpi_packet_struct *packet) -{ - if(packet->iph) { - /* 17.0.0.0/8 */ - if(((ntohl(packet->iph->saddr) & 0xFF000000 /* 255.0.0.0 */) == 0x11000000) || - ((ntohl(packet->iph->daddr) & 0xFF000000 /* 255.0.0.0 */) == 0x11000000)) - return 1; - } else if(packet->iphv6) { - /* 2620:149:a44::/48 */ - if(((packet->iphv6->ip6_src.u6_addr.u6_addr32[0] == ntohl(0x26200149)) && - ((packet->iphv6->ip6_src.u6_addr.u6_addr32[1] & htonl (0xffff0000)) == ntohl(0x0a440000))) || - ((packet->iphv6->ip6_dst.u6_addr.u6_addr32[0] == ntohl(0x26200149)) && - ((packet->iphv6->ip6_dst.u6_addr.u6_addr32[1] & htonl (0xffff0000)) == ntohl(0x0a440000)))) - return 1; - /* 2403:300:a42::/48 */ - if(((packet->iphv6->ip6_src.u6_addr.u6_addr32[0] == ntohl(0x24030300)) && - ((packet->iphv6->ip6_src.u6_addr.u6_addr32[1] & htonl (0xffff0000)) == ntohl(0x0a420000))) || - ((packet->iphv6->ip6_dst.u6_addr.u6_addr32[0] == ntohl(0x24030300)) && - ((packet->iphv6->ip6_dst.u6_addr.u6_addr32[1] & htonl (0xffff0000)) == ntohl(0x0a420000)))) - return 1; - /* 2403:300:a51::/48 */ - if(((packet->iphv6->ip6_src.u6_addr.u6_addr32[0] == ntohl(0x24030300)) && - ((packet->iphv6->ip6_src.u6_addr.u6_addr32[1] & htonl (0xffff0000)) == ntohl(0x0a510000))) || - ((packet->iphv6->ip6_dst.u6_addr.u6_addr32[0] == ntohl(0x24030300)) && - ((packet->iphv6->ip6_dst.u6_addr.u6_addr32[1] & htonl (0xffff0000)) == ntohl(0x0a510000)))) - return 1; - /* 2a01:b740:a42::/48 */ - if(((packet->iphv6->ip6_src.u6_addr.u6_addr32[0] == ntohl(0x2a0ab740)) && - ((packet->iphv6->ip6_src.u6_addr.u6_addr32[1] & htonl (0xffff0000)) == ntohl(0x0a420000))) || - ((packet->iphv6->ip6_dst.u6_addr.u6_addr32[0] == ntohl(0x2a0ab740)) && - ((packet->iphv6->ip6_dst.u6_addr.u6_addr32[1] & htonl (0xffff0000)) == ntohl(0x0a420000)))) - return 1; - - } - return 0; -} - - -static void ndpi_check_apple_push(struct ndpi_detection_module_struct *ndpi_struct, - struct ndpi_flow_struct *flow) { - struct ndpi_packet_struct *packet = &ndpi_struct->packet; - - /* https://support.apple.com/en-us/HT203609 */ - if(is_apple_push_addr(packet)) { - u_int16_t apple_push_port = ntohs(5223); - u_int16_t notification_apn_port = ntohs(2197); - - if((packet->tcp->source == apple_push_port) || (packet->tcp->dest == apple_push_port) || - (packet->tcp->source == notification_apn_port) || (packet->tcp->dest == notification_apn_port)) { - NDPI_LOG_INFO(ndpi_struct, "found apple_push\n"); - ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_APPLE_PUSH, NDPI_PROTOCOL_UNKNOWN, NDPI_CONFIDENCE_DPI); - return; - } - } - - NDPI_EXCLUDE_DISSECTOR(ndpi_struct, flow); -} - -static void ndpi_search_apple_push(struct ndpi_detection_module_struct *ndpi_struct, struct ndpi_flow_struct *flow) -{ - NDPI_LOG_DBG(ndpi_struct, "search apple_push\n"); - - ndpi_check_apple_push(ndpi_struct, flow); -} - - -void init_apple_push_dissector(struct ndpi_detection_module_struct *ndpi_struct) -{ - ndpi_register_dissector("APPLE_PUSH", ndpi_struct, - ndpi_search_apple_push, - NDPI_SELECTION_BITMASK_PROTOCOL_V4_V6_TCP_WITH_PAYLOAD_WITHOUT_RETRANSMISSION, - 1, NDPI_PROTOCOL_APPLE_PUSH); -} - diff --git a/tests/cfgs/caches_cfg/result/ookla.pcap.out b/tests/cfgs/caches_cfg/result/ookla.pcap.out index e7dac6b3d..d6202ab3d 100644 --- a/tests/cfgs/caches_cfg/result/ookla.pcap.out +++ b/tests/cfgs/caches_cfg/result/ookla.pcap.out @@ -3,7 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 40 (6.67 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 5 (flows) -Num dissector calls: 578 (96.33 diss/flow) +Num dissector calls: 575 (95.83 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/caches_cfg/result/teams.pcap.out b/tests/cfgs/caches_cfg/result/teams.pcap.out index 26c74476a..f0a139035 100644 --- a/tests/cfgs/caches_cfg/result/teams.pcap.out +++ b/tests/cfgs/caches_cfg/result/teams.pcap.out @@ -6,7 +6,7 @@ DPI Packets (other): 1 (1.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence Match by port : 2 (flows) Confidence DPI : 80 (flows) -Num dissector calls: 525 (6.33 diss/flow) +Num dissector calls: 524 (6.31 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 30/0/0 (insert/search/found) diff --git a/tests/cfgs/caches_global/result/bittorrent.pcap.out b/tests/cfgs/caches_global/result/bittorrent.pcap.out index 580f990c7..31ea2a36c 100644 --- a/tests/cfgs/caches_global/result/bittorrent.pcap.out +++ b/tests/cfgs/caches_global/result/bittorrent.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 24 (1.00 pkts/flow) Confidence DPI : 24 (flows) -Num dissector calls: 1696 (70.67 diss/flow) +Num dissector calls: 1674 (69.75 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 120/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/caches_global/result/ookla.pcap.out b/tests/cfgs/caches_global/result/ookla.pcap.out index a055e3e53..d74cb3651 100644 --- a/tests/cfgs/caches_global/result/ookla.pcap.out +++ b/tests/cfgs/caches_global/result/ookla.pcap.out @@ -4,7 +4,7 @@ DPI Packets (TCP): 40 (6.67 pkts/flow) Confidence DPI (partial cache): 1 (flows) Confidence DPI : 4 (flows) Confidence DPI (aggressive) : 1 (flows) -Num dissector calls: 578 (96.33 diss/flow) +Num dissector calls: 575 (95.83 diss/flow) LRU cache ookla: 4/2/2 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/caches_global/result/teams.pcap.out b/tests/cfgs/caches_global/result/teams.pcap.out index 0a0cabcb7..e59d20e56 100644 --- a/tests/cfgs/caches_global/result/teams.pcap.out +++ b/tests/cfgs/caches_global/result/teams.pcap.out @@ -7,7 +7,7 @@ Confidence Unknown : 1 (flows) Confidence Match by port : 2 (flows) Confidence DPI (partial) : 4 (flows) Confidence DPI : 76 (flows) -Num dissector calls: 525 (6.33 diss/flow) +Num dissector calls: 524 (6.31 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 30/0/0 (insert/search/found) diff --git a/tests/cfgs/classification_only/result/bittorrent.pcap.out b/tests/cfgs/classification_only/result/bittorrent.pcap.out index 49a530d1f..4194af56f 100644 --- a/tests/cfgs/classification_only/result/bittorrent.pcap.out +++ b/tests/cfgs/classification_only/result/bittorrent.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 24 (1.00 pkts/flow) Confidence DPI : 24 (flows) -Num dissector calls: 1696 (70.67 diss/flow) +Num dissector calls: 1674 (69.75 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 120/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/classification_only/result/bittorrent_tcp_miss.pcapng.out b/tests/cfgs/classification_only/result/bittorrent_tcp_miss.pcapng.out index 3273296d2..16094146c 100644 --- a/tests/cfgs/classification_only/result/bittorrent_tcp_miss.pcapng.out +++ b/tests/cfgs/classification_only/result/bittorrent_tcp_miss.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 10 (10.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 229 (229.00 diss/flow) +Num dissector calls: 228 (228.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 5/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/classification_only/result/ookla.pcap.out b/tests/cfgs/classification_only/result/ookla.pcap.out index a7573cf7f..d6b3964ef 100644 --- a/tests/cfgs/classification_only/result/ookla.pcap.out +++ b/tests/cfgs/classification_only/result/ookla.pcap.out @@ -4,7 +4,7 @@ DPI Packets (TCP): 38 (6.33 pkts/flow) Confidence DPI (partial cache): 1 (flows) Confidence DPI : 4 (flows) Confidence DPI (aggressive) : 1 (flows) -Num dissector calls: 578 (96.33 diss/flow) +Num dissector calls: 575 (95.83 diss/flow) LRU cache ookla: 4/2/2 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/classification_only/result/teams.pcap.out b/tests/cfgs/classification_only/result/teams.pcap.out index 9760eada9..7fad19e45 100644 --- a/tests/cfgs/classification_only/result/teams.pcap.out +++ b/tests/cfgs/classification_only/result/teams.pcap.out @@ -7,7 +7,7 @@ Confidence Unknown : 1 (flows) Confidence Match by port : 2 (flows) Confidence DPI (partial) : 6 (flows) Confidence DPI : 74 (flows) -Num dissector calls: 525 (6.33 diss/flow) +Num dissector calls: 524 (6.31 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 24/0/0 (insert/search/found) diff --git a/tests/cfgs/default/pcap/apple_push.pcap b/tests/cfgs/default/pcap/apple_push.pcap new file mode 100644 index 0000000000000000000000000000000000000000..e61ac40f68985a3dcc036f95b66391ce8a0f0fa5 GIT binary patch literal 12106 zcmbuF1ymgC)}|Y}aS3h#g1fuByL)hVcXxNU;0^(T1-Ibt8r&fP0t9E^oO{n*=iGm0 z)~xB(yH{6N)${GIy4L&dT~%{^_4(ic5a8c00Z0G<>~+C|$ijj<6C5D-`u#09Zf}C< z!HgMMs~f1H0ipnaz}s5@a^ax649pFgGv0j}3(f3n;b80Q#(>)1mzREe000~W(EtVn zLV|%o!=BC6g}f&WR*=l};uy)M7SpWHvk_=C>#MrVWEJb5F(jeushjCFqi+IbzJ zEl@&*_Yr9KtgknS2=5bF~&^2qbeM^9i;Ie9r2S5kjI(cmeCe(pFh3J*T95oZ` zJ`yJJ%d!EWVPR3hQGuvnufW**``0N00Pg|V004%Oor|M|i6fo8i<3E>fxW%837wIh z4FDE^2!OAsKt2WF0WbkrubUzP2mts<2KKg2v`!{QuRA$=(7H0i|M7#pfsqxhD(p4pdlc@pdlf_z`+10uWOk>KS5^|6|bid@+qj>KR>Lc zNY6Zv$v_8*(h^^MGn98#kO8ON3r<&tuxX7rp`yg$J9N@O1OqEpi3xbZ_-s~0F{6@e z^!92%0jc7W{{)FcF0x7cBdM+QLq|Wl?NgRTkqWp!C`lQrJdK1Ay4R6`puxK~u`n+b z4Lufq0H(EA3hs#0B|X_UI}w@L5YFG(OM$4=86Bvt2owhpxRR(=VX_HHSobtWDp|bS zPBDT5z?12>G$Uatq0Io`E8SA6popaX6_G22%M7y4Z}IaAo7S3Qw-{TR0^|ovG0xjG zOhY=M_IMWRl27^@Ggg^dZqm|l=_a>c;XEqF_T%EB-j z)k67rh37t8<9-yi*C5vnqO-!AxbVbq#R*}uU!BPs4v|GbDxVT3v-QrL+y+{_wURLf z*Xu{GQB^VIMNrY;Z0_ng*m0gR=mafPm70}Yo)a?ZkWkSREikHpxukEPI(R^?0MaQbZA+JwN)3u~FU+Mh>`eLH6D@=){Wic4Fw^FDmm6&NrV)o3-|PC^@{nq$B_kWnS|Dw*Hws ziXPJyeOv;9aL{b( z@o%JMifze?jA)lI)iT*0i1O0fL0$`EfEWR@kkQD+}t0NcjC)UOxwAVXsOz2lh2z*z8L6lMs!_>egL zG|MC$>~87KVN4~+B_FJp_20@L_$q8~@lWLkIRDE_>i(|$<3@jY2^KUQ)Q7(-zrd^J z5~wXvnJs7Iw;d#sbX6Oc;(+CTT?T_;X$;klzN5A>)d0`}z+csz8UO*3k^+KW)f@;8 z0F#n>71g(l>M#G}ZvW+*EEk+_zWMX(KYVldYvH(&KN8@MC*#kIUVZ55)iYDyh|~XP zBG(_pmj8iR_y|ABk9iJ3H~eh}Um9VgP}l z*4HAX>DAvgmU!@tlq1mj7>enpr`Y&m(W^n2)#@oOEBgj=^lJZCzeIiI*uEZH@Ye&& z3^IOoDSdr2LLS=oJ}OT=7*+x!U2cj{yrGxI!vy)~h}sr^a@scaYjqblMeP~=@P#ii zUuWtJ#eQHR5XEggh=+y6;vCN1_2%IHjNk_DE;_1w)2>!@^wa++q^VDoA#xT;-yZM` z+5K6#v;bUB(3~JVuc`v+SRrpHdx+xkpi3iG4_xM9aJU=ugUgPY?9*`2v`D{q3OKKd zO0+gFvMj|Q#Ke2B{>dnm%VOe|I}<`rc)>GDf4&Ux+u;YTvud4_>Olw%jedjSd@)Z! zif96P1>A4ULY5Vo$7?qveDFaZ26N`b65^}I>~43`9(o3T+IS1x5=gtW9*~%=6q9&c zc}`r78+HdvU1@O^g^udqwr<-YEDn9ynYDR{;2{@nGSL`EPPMl2TX_F0KUBU^-wGnT zMd1|V8DC$4szLSORGFew^CiY06Qpg4XOs$&?t;DUGrK2|_b21oHiBlyVs|lfyL>^H zB7VvelWw-!F|xJX83G$0O*YmIhs+N9fuV2LI)4E47X5j@qkP@WUf=LiMjnjwy-cu# zPYW%gZRs6VHlFRuQ(!ZZ`f|AVpkY3vfhtUI9B@tT6Mo3zT5~4Kuf)Rwuy1_hw=m4v?3JooJbc9N&hP$sTY+ z639m+2rF!cx7W_t2NX2%r}ZnYSB2a2LtqOJ5JcsXN6FfqCcf5khQd0d#?C3;{-{;L z;8lsUw!A{o;tSEqJPKJW-d~iuKzd|qkhEZ?QM7z^`jiQa#-OmbGHVmjT-{;3WORYvSyAZf(p1Ss#l5Yu>P9O-)mo{@P z`O0%|L+<(RY`~$3>k~~iTq&pKwA6^xX}7lc@t5dG<*L#JAqY1!!pj4qc5Cc3ar>|= z4cJ??@D%*1VJ;~JWONq@kXC4+4Y#nQ$#sDCB2iL1m0<}peIIzYIIP?cS@y|E2f?&_ zPS&*-(w%vmW^{FG!N37IvZc-joV427R7?l?LkY|0ck-E|^D~GAp>(C{r7`}ISBdAz zj!1?s%#j1p;)zMgCcW9GI0yt(zS@O9dWO{>9mV*0*F&&GN_@_lifwtSHGVAM&M#`T z?t2ItUMDJYC?S)X4rNe!e}MmbkNCaIpG0!d&g>)vS5)nUP#=?F{JED!w=4S-@|P>6 zgG(X&tcH)NG)VUJeQ9t|W@a=T7br&UUnDie2nzKCkUhCP9GTYO<`OVEJnmz3yNsz@ zu@gV5vQ_L#Swbg^qSB+qn&&^w-#D&Uin(C_;@E(%TZ5~iFGm^r%!+1%WT~c}NLaT{ zvF5b~j%Js(tmaQw-fFC}B;_MpZ_EYiMTe_U3Q)gQG(yg+TO>sT0$&>n%-2trHCuIF zG3QT0!jvv+1}Ez{QUa2ND)zgfHR&vZC$W~f;fR%*P}PA53fbgYF4o2!zu$$TzU~Mg z_>ibH0_zjN&)mF;u}0lxi#+ud-{Ov4%J4WTB^6Gho{;z&A6pBgjZJfS&p*c zR0EZhOQBv{={sxtjJt2~>M;y8*6syuZWD#7d=1+l?sGC{-{@bNLM63*aTl3`v-0JKfRb?V@< z28x|au}4wKHXmH}x5^i5vGDjbd{7(5A+bYm+&@3UOR}@Zd#Z4=TS{md2h)(93lRuj zoME?=SvO~U(s2e2fLUNgK4PUJv(DdlI<>FCIutwitrBbcF;6^izVAkY9d2i^gm$&^ zPU2h6&qzD3PziImVPe19K`mM<$37I#v^V-*F%a~<=mMsTzqB|PVndBD3^0(kOU2%x zsI;nreOw_6B7ADrEsm&+0%vCf@@ALhKurjxyOs(MOC0x9H*K&)bYppTUO1hif%eTj z&3OhT>`>GI?8&-!f-y4D9p~3)eM1nDa0owGVCJKbgIRlKODc)uj`p}hDcjlbDkN|; z@X)ZZr}?CjeA{n^nUk{($XTtToe0r_pspbXYtp+ex3`X;T_Kbd>9@`t3Ix9P5{1T`BHAT}7pycxbs%VX|e{VONg=mvcRtyS)w} z@5y?T(Jy9Ba2agH49bo7HueZPb?Uc2ctT4lbBf@2vb^lHpd6@(rgMV{Vl!`}*Ux7R zpK<7Hlm!8U)eyeMkw#wQ;f*FeIkLOA zyeJbwXpl0d*Z;z4`%bd#QPzqjzAj#b{D>}-u5(O~QFZBKn}7vxLFko7nH-z1H@kKM zFJ_Z-qm25T-icC5J#qegViViQe9q-(>kgKm=(h|)CqCp}I_IiPRfsWlX+?R$pAAJ~ zIj8T$_&1gS?g-?-9zwyo5DjGdiU2{cR5!l^drbyN5aiiR(I80{cIv~}-n>3H85!>? z*^Y~RBINIO@2j>--86o0wlld|awC_3w5>^iueGEoP zRCdcp$l{v?5BhYmf{riTu->0;;|$pes1wkNBqo zf}3CPy(!?C@81;=?XBwnLjj2i{;q&U&#_N<+1I+pmC^fbqk)C=fSJL3*E?DpuMO72 zbQ#kRJWSkamRkkT)I1fcKCtGGR4E8m0w4Cy5qJpaqsq}ndq?-d-uZrg%*iDl{s|RX zk!F@y<4!vUpn0UIluGASUG}%{!xW|ET0fhq_^AmP@dkNHS~ZA{1-=!$GE-4)+VR>5({h4cjQjp&1vG)hU=Tc54gi51M( z52o;9fJXV4UXgUa9oe(Xe_)QDJbj149^$k5TX6J+%?V#ay)vK!zfNAHQC@L&y6i&gO}t=FrW2?C1)@99;HygO$&r=SEiyTz(rw^ceIc zY0SmVnd!D^z1+@%j3dH&m^-;zYIc7)P@E^_197W#EKbl#0jB*hv_2^dvHg{at#x=Y zdJC_KCD3KerLZr@^DKPr=?Y)_&+9kh?EeQ5 z8bFNn-$YAfARzIzTYroH>ez$-)v@RQqhtRwM=WT-uh74UrEfX@r+5>^_-M;`5m_93 zBs}|GRN*+_M$+D1r7G7KIuJkaUZXG{25msE`Ad1uPe)J%8H1WyV1b7^!bgk%?Kvkd zmn+eiDt}wT^tU;)-~j=qua(SO{4+z4#-AC^jQ=CUUw<6M*9^Zr{gq+)TZXUyFz7?V z+)}}3yet6qDBJ|-5tk}U_fqjaRu^pPCB4()?}K0?m6Oga)%(h^z@8UBzAwBqA42bR z@xT%Cu=$XiG1e2yt>>_2H}9N#MBDojwO0c0IH|b^Fv>kJtpe~T0g3bOHaY0>=ohlc zk{`W>g!n687EGV~m7tXBDOB*5rsCj-{38;To z0Ca!QJ;iGKVHk81sA-VK;w_1T?`3w+>iF|6td~nb)j}bIoGv-X(;%N###$^>47CX~ zb=>r;nZxWLZIHTbhFUp}>P_*`w>RndH!Zm??t3nD-pp{Sc%gRwW zNHJernY*m@n2_aaRbnp;};I;_JEm6<7nF$i!Qg9?c_0)NtVkL_7wRJ&#+ z;R{IllTefF#L)zMo8A)7FTC}htk^AEPt+>zPJWyq5*@z>jAK4#JZWVZ`x8 zO}ifkP+Cfu7`+77Kgm9Jixt*~<{{G@XXbhGJ&d#@s$@;fxxu&#>~zwqx-m_rEUpx9 zrKA?EE2MgmebS;tAMR7-VqGms0o2zoW7{^c4?*mu9S8{8V9+>LMg@mWZ){y0p@Dz(-XJwf3IK%>5RFZ(=#XL$SU zF&lxTzE8)wWCfWoL8M#k1B1;b!@!bTN*Kt`NwGSn;m~q$M3^Vt+G?(XkEX*%oF@n` zY&VM(_9k?E>9OP*N3^AQaSwX&CZwy(qEu8CJztEX)5dqv6@j_Y313Sa~ZF;)p z`OY9_t=G^}v9&%Z(1Xe}Qpe)1jI13QUZ zWiq7je{gJ(#n^#Ge1#K#kCfL2hy0c2xk&beEO;#I%dcHrUKP>@mPiW5jV~sMxh7Oq z+P@eMWjDrgZgmv}ckjh^>^em!nm9LWr{zQ%2kuaFWG2eJ1#J(0rZZ=Ub00+{u0;oU zAT^fz)_lsSkxL*kTLA3rKiLYH5{`+r{dpKSGkUy zZ5JsBR512n%67LSoWf+XC-f)4FP>48E;!`-Dc$2?9`ylw#FcVzh8eBhj?khHk5Rf` zPTMYDrTQ(aMA`q$^B?N^I?sRU|3B{j&0xN&tIn%Oz2GzdrLK*ybA@>$;`jjnxSC1z zy6zuDaAw>;iA6Af*Xw^1p#iNfe-V4$h_CbHaL8~P3H2*`C$;eYhJCAa=(e$Wn^5A6g1f`LKpAyQqF>M3W zjPNJhL)%gN*bCbivYex%y?_|;XDMv6Ecr8w$3>BGsuzh@`nUM|R4fZTQ5ysJ*RNex zME_dqm9S#sv)1SdrQgjjVsyZUZNEvJ1Cgl-H*ENsF}!NuV}S}ZA--KWB=QdkMmUTc z9cxZZ^d}!WO@g*o1bVPoz#d3%~2I3lCF6g88H__wKd74_yY7S3yziYKhEf!_I+% zlFz0P;OpeevUW)aws<`WGp4%AF08O~bw?LsI;OXWP@ge6%kDT+#+=Wa)>|%q$=Os! z>le#VZ+Eaj>%^>ap6`UnsXFyIw-gh~;}0)yR;vI9_*s?q#$qyKFcx}fxCM(FFKz=D zJjy}@)Cc2!%Ni-6@OsQc8BJcOQ2(S)8jZO{BZv11YE&jzdA3oQ@zKG}` zc2*o+uH}%@(jOq=JBzGZ*I?4+Fs?*BaUo=DW z31zCikSd==2`KM?1u>4PJo4n9V)e2s>_^hUjr?|IzJ;Yxc5g(sT-!z|q2qjpnj^{F z4Q+A2&mx6zRlzZXKk6!sOx-?XhUFERVTVdi&M}-Y=zCTJ`;{I zDA79VgGzyLCr*kKYhWd1kNxahPxxJ1F>aRvyIY^fRZV8(^1RRwzq4Hx=&=kbiRXrZ zvV@tve8p7vNY{;t?ACp<&~8lFv6IWSH9K3|*^2(e_3&G8oxp%7u)Vs~o$2Fe!?;G+ z7pBW@d0U8qpAbUVBO(|f)l->Pe8p;BcE zdvloQmlIk2-P#&rm?Nm|Y&uZ&NKG72%#W;mnXBz)^TpIg{I!&J%1Fgg5wlyJayMd1|1d`CD0JJYw`JWT@gPUp19)C-YLK;@G10<15Myiscem5YhVsc!_ud;sxmeQ%EfNQ3Stsh+J3j&lA&`<%aJF^V`tiO639N^t|+1ACQYPCFFwkpQa?4c zuBw@P0kfkfR}kYI4BV+NyVtTVouK2#`2Iz^Gc!pWN&++8t2b3+`WJetV#``KuEn-Q z`YFvsGQzTlm)ADShww)RJlX3Pgt<@~)I2=tNeK)6{RmL)yn=$r$cp6-c@H)3bYLwn zYxZIxCR(PR3akl)b58-3ZUlBjmiwgy>u(70oAiykV14(*`FB4^C1sYgQ|0Z3C`>K{ z>f&*G!$yvlV&Ia;N+(6TP0F5?i(v;eVH=u%>^Ooiw!4$T@pBM1VDh;Lh@%q6VXd1} zDo~W~G8+1+@5+a2{Z2+s%#2jT9x$*l_(GW*NCMRl@pMaKLIv*z(I;kk)>BHc#u-id zEf2{lGjdliS7{Od-RQM8%H}}pt}|vR`${94V=t=oepABNiq7`^b7oeeA_cI32&3XT zrSAhE;^?Xoj~Bu!KNh4&66wX}+nzk)s`5#)5NIsP53&lRW#i8gcqcAiPSeB^*9)u9 zxK=4|eq#FSCsVIalDx$~{RE=-Pd}M9`kS8=fnNS_sMq@6&;IXz(&6)dqO5}1+BgS} zhi+F@)HdH`pyf**k-5gishTE=^38^7IyBxz$@6Us)dJ1~g9h&q?CP3ZJU(L8uX`O{ z?PE#=w=Ckprw7fUbYOe#+&6`e6eEoBJe^bUSXy}v7ey{+KB`V+G>eBc5n681_c+#fja zW;r_JRdR zAzq~($b_>HYSBzaTH)eu{)~%8ue5_r!S^k$%IezGlr6zWG}&5tr&yb?R*3^Hc5axo zng;X^fC63cyu;=iCVZtLd+Ea(nSimp&5v7V;dJ~QIo3Q!3gOZK>HhxC*pjCow(lwA2(T!lkPQ zj&ZlfsF!hn@h^1rlI2V*o!ZT^SLgiRgG_`9#4Y!G^2ez)-~+7zL`f>msG2G`>mw< zYvWPj$Xj z6G+OagG2BALO>Sy>0(>g87cWmN1f%QphMGR`TJDQvsgM8nF2GP0&t(0XOdL ztx-+JK+BSC?<3nj7ZA*kST4-sU+o?ki$iW6p0F8pA{|i}PHWw(N$9ABU8J8m;vJLsiMGgPIAn-rRr1BPNag9g(}C1Lr6c3qMu$#IyP({s zt0>;8U>3Z==_dN<&EpBOb)??94nwv987fy56DC#geu>2mdi)LtYeHoyY)~k#Kevq- zSa3dFU9*nI>(7Q0BZJ^^#rg?XMNDrysrmtR^Kv|}(;N61$izhK*FshaRVV&FoK_>apy6i(qY1>((FGe4QLomlFSw^<-1}W~>xbWEB+qx884Kz*o z&{SxYgks!2)y~lbn@g8x+)$K^Dl*Y)Is|6>#!}8;l#f?jqTS5MbVIHm6-8N1>G=@4 z2XAfnzi+$Bo=&MRornn(T`2l^1mwQZ+6=!rDcHX?Z1-+B2?K%~RpE+VDK8-BElOhg z3)KGHaG{jEr(RJMs|4CL+4ltGg#<8M3Xg@M@loax z!Zuqd7}`^g*FW7WMjrA{u~K-^a^kJW^m}R6d~>Pnb;s%(2k&T_0$;m=Lb}nFlD)R7J6YXN|gc`9WLnU#&`A*!*cufwLLVIW_xf>rhf9!Z;DDI7)x5KlknOm zVViIjaPP=RrzEWYjrMzSr4kbz8j!mrf-fAibNoS)YyG?~e|8|y0N>ZELjQXHu>W8E0^F3FJ?B{S zCVMfPp$wrAc3{<(eTQzUkeRk=c@11Jk43~HPOK?UReAAlSPr`wO6|5HWTY6udXKx+ zIvsxIvTTr8EHK?-8lI3*4>}ZT5ZR@Q2^BZFwgwF?yAZY-uh>1hUnSenAdO16f#R`j zB6vNph4HuvQ-auBB=Uzp6BO2a-{<|w2pNI(04T;CV0mblcoONMCj2I0q`nhltNYNQ zkPY*A=Jy6$`bx6oIRwZG+P!Kc$|>Jc`->$=2Kpojj;+qDFz)1@aY`|HE5eVl^=GiH zW)=Z$6U9d_R!uP8FzT^b>pl$;g2waH{$pUdioRJo4v16IWBc!_qOU{}u1oe%NNJsi z;HJ%k8H+a((w`=IeWhQ%SwCcYR;{neUrB2Q+juRHY#Yxedxi(Eo;CmP&nfyH_sfPv4i-&b(D2`v2#^MlC85P3zs`$6KK$k(xN$eu) z!aB%D7RL1NiAUD4fauug+FBX$#ur0Gcu52?ACrJS*mZV$jXJY&9D|>A23j`GF;_W- zXw7un@3FU#mM}sHX)EobmZS@*J`X=H-C&p^u#0iyd~+=fYE8Gm37t(@M-U~lXAW7P zl{=Wx3kIhz8T^c~E2jWWU!0Vvwx>x9NyuhYGCo`|Qoc4-sS8fW5XSgJ!k|BxVg`jR zN^$f1n2|i@N8_Lw|DGx(f(iJqL>UOVJZna2!{-M2rtXp^9D{2ylxGxo$zMzwa3@59 zu>6p`wXdR~%Ga=z&MvsBYumeqK2pqqf1 zVRA^|pyN8Saq3L#)8gn)p?F~|d?KKIA$g%+?I-{lVRw#Mj*t&9p1!AxLpI)N3nhHf z2|cv&%gCHNQqBC}r*Cn;L4}{=NH2IAICfB)_ADYOA(U#!9>eqG5I04`_N(rcjfXoA zmyepgdRet2M$^8Ua$t?8z=9u|wVdpJvl6x%){(9sbdAM$tfHg!TR*+^>R0j|`Ltvc z3Dwu29V|)e(9ZC6#ldxD)r=zW()toIClw%K1iY|pCwi|&G5vyYThX!{0;lQeWYwDB z3L-kIuk_@D>2@`hwBD_&G!rj;V;R}g-ctiGkO6wz-kPFTzWrNUV}m%Hv#Vvll=r;^ z;a#lw&p;}5>`GABaxSDeBB@U<5eKb(n+bb^ow>~FPXa;W?CG6cJ2~S zS4T2!lN9q7U0IT$C@yJhAq=en{Z#Btp;a{R@AeokqhFe$a3n&8dnHdzq(-^tj_D`b9USjnx zY{ko$e_0)%s?5#bJI6yD8G5p>Mk-w24II;<@L|Xk>D% zI7F`GY5;*o>!CIp(LVf@tn=Lrw=MlTmsa?6*mv2_yCkdJI-S;SM~dT{)~6qp^jM{) zS<|GoUSh1eQrY(fU=gtLR$bRfJ5pnkd`E`nH6*1PvS-+QVg 75.75.75.75:53 [proto: 5/DNS][Stack: DNS][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 5/DNS, Confidence: DPI][DPI packets: 2][cat: Network/14][Breed: Acceptable][1 pkts/92 bytes <-> 1 pkts/323 bytes][Goodput ratio: 54/87][0.02 sec][Hostname/SNI: 1-courier.sandbox.push.apple.com][17.188.138.71][DNS Id: 0x1090][PLAIN TEXT (courier)][Plen Bins: 0,50,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 30 TCP 10.0.0.227:56871 <-> 8.37.103.196:443 [proto: 91/TLS][Stack: TLS][IP: 0/Unknown][Encrypted][Confidence: Match by port][FPC: 0/Unknown, Confidence: Unknown][DPI packets: 6][cat: Web/5][Breed: Safe][1 pkts/66 bytes <-> 5 pkts/330 bytes][Goodput ratio: 0/0][20.32 sec][bytes ratio: -0.667 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 66/66 66/66 0/0][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 31 TCP 10.0.0.227:56916 -> 10.0.0.151:8009 [proto: 139/AJP][Stack: AJP][IP: 0/Unknown][ClearText][Confidence: Match by port][FPC: 0/Unknown, Confidence: Unknown][DPI packets: 5][cat: Web/5][Breed: Acceptable][5 pkts/390 bytes -> 0 pkts/0 bytes][Goodput ratio: 0/0][5.03 sec][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No server to client traffic][TCP Fingerprint: 2_64_65535_15db81ff8b0d/Unknown][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] - 32 TCP 10.0.0.227:56886 <-> 17.57.144.116:5223 [proto: 91/TLS][Stack: TLS][IP: 140/Apple][Encrypted][Confidence: DPI][FPC: 140/Apple, Confidence: IP address][DPI packets: 2][cat: Web/5][Breed: Safe][3 pkts/174 bytes <-> 2 pkts/185 bytes][Goodput ratio: 0/28][0.02 sec][Risk: ** Known Proto on Non Std Port **][Risk Score: 50][Risk Info: Expected on port 443][Plen Bins: 0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 32 TCP 10.0.0.227:56886 <-> 17.57.144.116:5223 [proto: 91/TLS][Stack: TLS][IP: 238/ApplePush][Encrypted][Confidence: DPI][FPC: 238/ApplePush, Confidence: IP address][DPI packets: 2][cat: Web/5][Breed: Safe][3 pkts/174 bytes <-> 2 pkts/185 bytes][Goodput ratio: 0/28][0.02 sec][Risk: ** Known Proto on Non Std Port **][Risk Score: 50][Risk Info: Expected on port 443][Plen Bins: 0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 33 UDP 10.0.0.151:1900 -> 10.0.0.227:61328 [proto: 12/SSDP][Stack: SSDP][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 12/SSDP, Confidence: DPI][DPI packets: 1][cat: System/18][Breed: Acceptable][1 pkts/353 bytes -> 0 pkts/0 bytes][Goodput ratio: 88/0][< 1 sec][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No server to client traffic][PLAIN TEXT (HTTP/1.1 200 OK)][Plen Bins: 0,0,0,0,0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 34 TCP 10.0.0.227:56910 <-> 35.201.124.9:443 [proto: 91/TLS][Stack: TLS][IP: 284/GoogleCloud][Encrypted][Confidence: DPI][FPC: 91/TLS, Confidence: DPI][DPI packets: 3][cat: Web/5][Breed: Safe][2 pkts/170 bytes <-> 2 pkts/164 bytes][Goodput ratio: 22/19][0.05 sec][Plen Bins: 0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 35 UDP 10.0.0.227:62427 <-> 75.75.75.75:53 [proto: 5/DNS][Stack: DNS][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 5/DNS, Confidence: DPI][DPI packets: 2][cat: Network/14][Breed: Acceptable][1 pkts/84 bytes <-> 1 pkts/242 bytes][Goodput ratio: 49/82][0.02 sec][Hostname/SNI: detectportal.firefox.com][184.25.56.82][DNS Id: 0xed16][PLAIN TEXT (detectportal)][Plen Bins: 0,50,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] diff --git a/tests/cfgs/default/result/apple_push.pcap.out b/tests/cfgs/default/result/apple_push.pcap.out new file mode 100644 index 000000000..dbdf4fd78 --- /dev/null +++ b/tests/cfgs/default/result/apple_push.pcap.out @@ -0,0 +1,41 @@ +DPI Packets (TCP): 8 (8.00 pkts/flow) +Confidence DPI : 1 (flows) +Num dissector calls: 161 (161.00 diss/flow) +LRU cache ookla: 0/0/0 (insert/search/found) +LRU cache bittorrent: 0/0/0 (insert/search/found) +LRU cache stun: 0/0/0 (insert/search/found) +LRU cache tls_cert: 0/0/0 (insert/search/found) +LRU cache mining: 0/0/0 (insert/search/found) +LRU cache msteams: 0/0/0 (insert/search/found) +LRU cache fpc_dns: 0/1/0 (insert/search/found) +Automa host: 1/1 (search/found) +Automa domain: 1/0 (search/found) +Automa tls cert: 0/0 (search/found) +Automa risk mask: 1/0 (search/found) +Automa common alpns: 2/2 (search/found) +Patricia risk mask: 2/0 (search/found) +Patricia risk mask IPv6: 0/0 (search/found) +Patricia risk: 0/0 (search/found) +Patricia risk IPv6: 0/0 (search/found) +Patricia protocols: 1/1 (search/found) +Patricia protocols IPv6: 0/0 (search/found) +Hash malicious ja4: 1/0 (search/found) +Hash malicious sha1: 0/0 (search/found) +Hash TCP fingerprints: 1/1 (search/found) +Hash public domain suffix: 0/0 (search/found) +Hash ja4 custom protos: 1/0 (search/found) +Hash fp custom protos: 1/0 (search/found) +Hash url custom protos: 0/0 (search/found) + +ApplePush 18 8562 1 + +Safe 18 8562 1 + +Cloud 18 8562 1 + +JA Host Stats: + IP Address # JA4C + 1 192.168.1.119 1 + + + 1 TCP 192.168.1.119:55576 <-> 17.57.144.120:5223 [proto: 91.238/TLS.ApplePush][Stack: TLS.ApplePush][IP: 238/ApplePush][Encrypted][Confidence: DPI][FPC: 238/ApplePush, Confidence: IP address][DPI packets: 8][cat: Cloud/13][Breed: Safe][11 pkts/6260 bytes <-> 7 pkts/2302 bytes][Goodput ratio: 88/80][0.06 sec][Hostname/SNI: courier.push.apple.com][(Advertised) ALPNs: apns-security-v3;apns-pack-v1][TLS Supported Versions: GREASE;TLSv1.3][bytes ratio: 0.462 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 6/3 14/13 6/5][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 569/329 1514/1266 644/427][Risk: ** Known Proto on Non Std Port **][Risk Score: 50][Risk Info: Expected on port 443][nDPI Fingerprint: f041b4353f50221998e9259656bac032][TCP Fingerprint: 194_64_65535_d29295416479/macOS][TLSv1.2][JA4: t13d0310a3_55b375c5d22e_8c1ace4dc65b][Safari][Plen Bins: 0,0,33,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0,0,11,0,0,0,0,0,0,11,22,0,0] diff --git a/tests/cfgs/default/result/atg.pcap.out b/tests/cfgs/default/result/atg.pcap.out index a2e0b29c4..a1433d47a 100644 --- a/tests/cfgs/default/result/atg.pcap.out +++ b/tests/cfgs/default/result/atg.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 5 (2.50 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 304 (152.00 diss/flow) +Num dissector calls: 302 (151.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/avast.pcap.out b/tests/cfgs/default/result/avast.pcap.out index f49671112..cc49a573e 100644 --- a/tests/cfgs/default/result/avast.pcap.out +++ b/tests/cfgs/default/result/avast.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 40 (4.00 pkts/flow) Confidence DPI : 10 (flows) -Num dissector calls: 1040 (104.00 diss/flow) +Num dissector calls: 1030 (103.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/bfcp.pcapng.out b/tests/cfgs/default/result/bfcp.pcapng.out index 290b978c6..2c1f07a6b 100644 --- a/tests/cfgs/default/result/bfcp.pcapng.out +++ b/tests/cfgs/default/result/bfcp.pcapng.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 4 (4.00 pkts/flow) DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI : 3 (flows) -Num dissector calls: 420 (140.00 diss/flow) +Num dissector calls: 419 (139.67 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/bittorrent.pcap.out b/tests/cfgs/default/result/bittorrent.pcap.out index 580f990c7..31ea2a36c 100644 --- a/tests/cfgs/default/result/bittorrent.pcap.out +++ b/tests/cfgs/default/result/bittorrent.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 24 (1.00 pkts/flow) Confidence DPI : 24 (flows) -Num dissector calls: 1696 (70.67 diss/flow) +Num dissector calls: 1674 (69.75 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 120/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/bittorrent_tcp_miss.pcapng.out b/tests/cfgs/default/result/bittorrent_tcp_miss.pcapng.out index a0d440475..d8e8054f7 100644 --- a/tests/cfgs/default/result/bittorrent_tcp_miss.pcapng.out +++ b/tests/cfgs/default/result/bittorrent_tcp_miss.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 10 (10.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 229 (229.00 diss/flow) +Num dissector calls: 228 (228.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 5/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/blizzard.pcap.out b/tests/cfgs/default/result/blizzard.pcap.out index ac11d2118..133ef2603 100644 --- a/tests/cfgs/default/result/blizzard.pcap.out +++ b/tests/cfgs/default/result/blizzard.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 22 (4.40 pkts/flow) DPI Packets (UDP): 4 (1.00 pkts/flow) Confidence DPI : 9 (flows) -Num dissector calls: 173 (19.22 diss/flow) +Num dissector calls: 172 (19.11 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/cassandra.pcap.out b/tests/cfgs/default/result/cassandra.pcap.out index d2022bfc1..5c2f1fd7a 100644 --- a/tests/cfgs/default/result/cassandra.pcap.out +++ b/tests/cfgs/default/result/cassandra.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 16 (5.33 pkts/flow) Confidence DPI : 3 (flows) -Num dissector calls: 325 (108.33 diss/flow) +Num dissector calls: 323 (107.67 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/cloudflare-warp.pcap.out b/tests/cfgs/default/result/cloudflare-warp.pcap.out index ef3ba42ad..fcb6d0a16 100644 --- a/tests/cfgs/default/result/cloudflare-warp.pcap.out +++ b/tests/cfgs/default/result/cloudflare-warp.pcap.out @@ -5,7 +5,7 @@ DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence Match by port : 2 (flows) Confidence DPI : 6 (flows) Confidence Match by IP : 1 (flows) -Num dissector calls: 350 (38.89 diss/flow) +Num dissector calls: 349 (38.78 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/coap_mqtt.pcap.out b/tests/cfgs/default/result/coap_mqtt.pcap.out index ec2377552..2d698afc9 100644 --- a/tests/cfgs/default/result/coap_mqtt.pcap.out +++ b/tests/cfgs/default/result/coap_mqtt.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 7 (1.75 pkts/flow) DPI Packets (UDP): 12 (1.00 pkts/flow) Confidence DPI : 16 (flows) -Num dissector calls: 280 (17.50 diss/flow) +Num dissector calls: 276 (17.25 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/codm.pcap.out b/tests/cfgs/default/result/codm.pcap.out index 5a3a94c03..d8c9c771a 100644 --- a/tests/cfgs/default/result/codm.pcap.out +++ b/tests/cfgs/default/result/codm.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 7 (7.00 pkts/flow) DPI Packets (UDP): 5 (2.50 pkts/flow) Confidence DPI : 3 (flows) -Num dissector calls: 486 (162.00 diss/flow) +Num dissector calls: 485 (161.67 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/custom_categories.pcapng.out b/tests/cfgs/default/result/custom_categories.pcapng.out index aa5431241..060d1a85f 100644 --- a/tests/cfgs/default/result/custom_categories.pcapng.out +++ b/tests/cfgs/default/result/custom_categories.pcapng.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 27 (13.50 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence DPI : 3 (flows) -Num dissector calls: 322 (107.33 diss/flow) +Num dissector calls: 320 (106.67 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/dingtalk.pcap.out b/tests/cfgs/default/result/dingtalk.pcap.out index 7eac1d180..74883eab5 100644 --- a/tests/cfgs/default/result/dingtalk.pcap.out +++ b/tests/cfgs/default/result/dingtalk.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 11 (5.50 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 317 (158.50 diss/flow) +Num dissector calls: 315 (157.50 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/dlms.pcap.out b/tests/cfgs/default/result/dlms.pcap.out index d43aa14cb..c33e1c5ee 100644 --- a/tests/cfgs/default/result/dlms.pcap.out +++ b/tests/cfgs/default/result/dlms.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 4 (4.00 pkts/flow) DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 250 (125.00 diss/flow) +Num dissector calls: 249 (124.50 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/dofus.pcap.out b/tests/cfgs/default/result/dofus.pcap.out index 09bb33126..2189f52de 100644 --- a/tests/cfgs/default/result/dofus.pcap.out +++ b/tests/cfgs/default/result/dofus.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 32 (6.40 pkts/flow) Confidence DPI : 5 (flows) -Num dissector calls: 413 (82.60 diss/flow) +Num dissector calls: 411 (82.20 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/drda_db2.pcap.out b/tests/cfgs/default/result/drda_db2.pcap.out index 626786dba..30c917d17 100644 --- a/tests/cfgs/default/result/drda_db2.pcap.out +++ b/tests/cfgs/default/result/drda_db2.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 70 (70.00 diss/flow) +Num dissector calls: 69 (69.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/elasticsearch.pcap.out b/tests/cfgs/default/result/elasticsearch.pcap.out index 98ce54d35..1a3169be6 100644 --- a/tests/cfgs/default/result/elasticsearch.pcap.out +++ b/tests/cfgs/default/result/elasticsearch.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 16 (2.29 pkts/flow) Confidence DPI : 7 (flows) -Num dissector calls: 763 (109.00 diss/flow) +Num dissector calls: 756 (108.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/elf.pcap.out b/tests/cfgs/default/result/elf.pcap.out index 9f87c5121..336352106 100644 --- a/tests/cfgs/default/result/elf.pcap.out +++ b/tests/cfgs/default/result/elf.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 10 (10.00 pkts/flow) DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence Unknown : 2 (flows) -Num dissector calls: 348 (174.00 diss/flow) +Num dissector calls: 347 (173.50 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/6/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/emotet.pcap.out b/tests/cfgs/default/result/emotet.pcap.out index 69e715a62..a7d48e33c 100644 --- a/tests/cfgs/default/result/emotet.pcap.out +++ b/tests/cfgs/default/result/emotet.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 48 (8.00 pkts/flow) Confidence DPI : 6 (flows) -Num dissector calls: 223 (37.17 diss/flow) +Num dissector calls: 222 (37.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/false_positives.pcapng.out b/tests/cfgs/default/result/false_positives.pcapng.out index 01b3841c7..e34dade05 100644 --- a/tests/cfgs/default/result/false_positives.pcapng.out +++ b/tests/cfgs/default/result/false_positives.pcapng.out @@ -2,7 +2,7 @@ DPI Packets (TCP): 16 (5.33 pkts/flow) DPI Packets (UDP): 66 (7.33 pkts/flow) Confidence Unknown : 4 (flows) Confidence DPI : 8 (flows) -Num dissector calls: 1750 (145.83 diss/flow) +Num dissector calls: 1749 (145.75 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/12/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/false_positives2.pcapng.out b/tests/cfgs/default/result/false_positives2.pcapng.out index 80601f2de..187269fde 100644 --- a/tests/cfgs/default/result/false_positives2.pcapng.out +++ b/tests/cfgs/default/result/false_positives2.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 61 (20.33 pkts/flow) Confidence Unknown : 3 (flows) -Num dissector calls: 703 (234.33 diss/flow) +Num dissector calls: 700 (233.33 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/fastcgi.pcap.out b/tests/cfgs/default/result/fastcgi.pcap.out index 93e257af0..ae87bdc7a 100644 --- a/tests/cfgs/default/result/fastcgi.pcap.out +++ b/tests/cfgs/default/result/fastcgi.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 177 (177.00 diss/flow) +Num dissector calls: 176 (176.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/fix.pcap.out b/tests/cfgs/default/result/fix.pcap.out index ac72f04b3..8550a4883 100644 --- a/tests/cfgs/default/result/fix.pcap.out +++ b/tests/cfgs/default/result/fix.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 12 (1.00 pkts/flow) Confidence DPI : 12 (flows) -Num dissector calls: 888 (74.00 diss/flow) +Num dissector calls: 876 (73.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/fix2.pcap.out b/tests/cfgs/default/result/fix2.pcap.out index 72122537f..f6e8a0cec 100644 --- a/tests/cfgs/default/result/fix2.pcap.out +++ b/tests/cfgs/default/result/fix2.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 8 (4.00 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 146 (73.00 diss/flow) +Num dissector calls: 144 (72.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/ftp-start-tls.pcap.out b/tests/cfgs/default/result/ftp-start-tls.pcap.out index d16a2ed0d..0a763feba 100644 --- a/tests/cfgs/default/result/ftp-start-tls.pcap.out +++ b/tests/cfgs/default/result/ftp-start-tls.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 17 (17.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 182 (182.00 diss/flow) +Num dissector calls: 181 (181.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/ftp.pcap.out b/tests/cfgs/default/result/ftp.pcap.out index 012259bb3..5e8bfc0d8 100644 --- a/tests/cfgs/default/result/ftp.pcap.out +++ b/tests/cfgs/default/result/ftp.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 37 (12.33 pkts/flow) Confidence Unknown : 1 (flows) Confidence DPI : 2 (flows) -Num dissector calls: 531 (177.00 diss/flow) +Num dissector calls: 529 (176.33 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/ftp_failed.pcap.out b/tests/cfgs/default/result/ftp_failed.pcap.out index 92b7dad66..fd32274b4 100644 --- a/tests/cfgs/default/result/ftp_failed.pcap.out +++ b/tests/cfgs/default/result/ftp_failed.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 8 (8.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 179 (179.00 diss/flow) +Num dissector calls: 178 (178.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/fuzz-2006-06-26-2594.pcap.out b/tests/cfgs/default/result/fuzz-2006-06-26-2594.pcap.out index ac8d9c9aa..0d5dcfc7e 100644 --- a/tests/cfgs/default/result/fuzz-2006-06-26-2594.pcap.out +++ b/tests/cfgs/default/result/fuzz-2006-06-26-2594.pcap.out @@ -6,7 +6,7 @@ DPI Packets (other): 5 (1.00 pkts/flow) Confidence Unknown : 25 (flows) Confidence Match by port : 32 (flows) Confidence DPI : 189 (flows) -Num dissector calls: 8723 (35.46 diss/flow) +Num dissector calls: 8710 (35.41 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/174/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/fuzz-2006-09-29-28586.pcap.out b/tests/cfgs/default/result/fuzz-2006-09-29-28586.pcap.out index 3a9f08a3b..f8841b7b6 100644 --- a/tests/cfgs/default/result/fuzz-2006-09-29-28586.pcap.out +++ b/tests/cfgs/default/result/fuzz-2006-09-29-28586.pcap.out @@ -6,7 +6,7 @@ Confidence Unknown : 3 (flows) Confidence Match by port : 22 (flows) Confidence DPI : 13 (flows) Confidence Match by custom rule: 1 (flows) -Num dissector calls: 975 (25.00 diss/flow) +Num dissector calls: 970 (24.87 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/75/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/fuzz-2021-10-13.pcap.out b/tests/cfgs/default/result/fuzz-2021-10-13.pcap.out index 0834d2b01..72d5b3da4 100644 --- a/tests/cfgs/default/result/fuzz-2021-10-13.pcap.out +++ b/tests/cfgs/default/result/fuzz-2021-10-13.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence Unknown : 1 (flows) -Num dissector calls: 158 (158.00 diss/flow) +Num dissector calls: 157 (157.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/gaijin_mobile_mixed.pcap.out b/tests/cfgs/default/result/gaijin_mobile_mixed.pcap.out index 959650e46..c5fe86fd7 100644 --- a/tests/cfgs/default/result/gaijin_mobile_mixed.pcap.out +++ b/tests/cfgs/default/result/gaijin_mobile_mixed.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 13 (6.50 pkts/flow) DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 3 (flows) -Num dissector calls: 164 (54.67 diss/flow) +Num dissector calls: 163 (54.33 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/genshin-impact.pcap.out b/tests/cfgs/default/result/genshin-impact.pcap.out index 6fd1b4c0e..95e2a42e6 100644 --- a/tests/cfgs/default/result/genshin-impact.pcap.out +++ b/tests/cfgs/default/result/genshin-impact.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 12 (4.00 pkts/flow) DPI Packets (UDP): 3 (1.00 pkts/flow) Confidence DPI : 6 (flows) -Num dissector calls: 435 (72.50 diss/flow) +Num dissector calls: 432 (72.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/google_ssl.pcap.out b/tests/cfgs/default/result/google_ssl.pcap.out index 6dc9bd845..1a87c2ac5 100644 --- a/tests/cfgs/default/result/google_ssl.pcap.out +++ b/tests/cfgs/default/result/google_ssl.pcap.out @@ -2,7 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 22 (22.00 pkts/flow) Confidence Match by port : 1 (flows) -Num dissector calls: 230 (230.00 diss/flow) +Num dissector calls: 229 (229.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/haproxy.pcap.out b/tests/cfgs/default/result/haproxy.pcap.out index 442c55c99..7c655316e 100644 --- a/tests/cfgs/default/result/haproxy.pcap.out +++ b/tests/cfgs/default/result/haproxy.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 115 (115.00 diss/flow) +Num dissector calls: 114 (114.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/hl7.pcap.out b/tests/cfgs/default/result/hl7.pcap.out index 042bc789b..345978474 100644 --- a/tests/cfgs/default/result/hl7.pcap.out +++ b/tests/cfgs/default/result/hl7.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 18 (6.00 pkts/flow) Confidence DPI : 3 (flows) -Num dissector calls: 396 (132.00 diss/flow) +Num dissector calls: 393 (131.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/hpvirtgrp.pcap.out b/tests/cfgs/default/result/hpvirtgrp.pcap.out index e39fa4daa..e1e236506 100644 --- a/tests/cfgs/default/result/hpvirtgrp.pcap.out +++ b/tests/cfgs/default/result/hpvirtgrp.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 37 (4.11 pkts/flow) Confidence DPI : 9 (flows) -Num dissector calls: 837 (93.00 diss/flow) +Num dissector calls: 828 (92.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/http2.pcapng.out b/tests/cfgs/default/result/http2.pcapng.out index 7b6864476..c5358fc7e 100644 --- a/tests/cfgs/default/result/http2.pcapng.out +++ b/tests/cfgs/default/result/http2.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 114 (114.00 diss/flow) +Num dissector calls: 113 (113.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/http_guessed_host_and_guessed.pcapng.out b/tests/cfgs/default/result/http_guessed_host_and_guessed.pcapng.out index 9caa72f72..b9a5735b6 100644 --- a/tests/cfgs/default/result/http_guessed_host_and_guessed.pcapng.out +++ b/tests/cfgs/default/result/http_guessed_host_and_guessed.pcapng.out @@ -2,7 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence Match by port : 1 (flows) -Num dissector calls: 161 (161.00 diss/flow) +Num dissector calls: 160 (160.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/imap-starttls.pcap.out b/tests/cfgs/default/result/imap-starttls.pcap.out index 650a2a940..c74757395 100644 --- a/tests/cfgs/default/result/imap-starttls.pcap.out +++ b/tests/cfgs/default/result/imap-starttls.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 19 (19.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 221 (221.00 diss/flow) +Num dissector calls: 220 (220.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/imap.pcap.out b/tests/cfgs/default/result/imap.pcap.out index e442afce9..a6779b397 100644 --- a/tests/cfgs/default/result/imap.pcap.out +++ b/tests/cfgs/default/result/imap.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 11 (11.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 221 (221.00 diss/flow) +Num dissector calls: 220 (220.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/instagram.pcap.out b/tests/cfgs/default/result/instagram.pcap.out index e2b4ea6bb..572fa9e8f 100644 --- a/tests/cfgs/default/result/instagram.pcap.out +++ b/tests/cfgs/default/result/instagram.pcap.out @@ -6,7 +6,7 @@ DPI Packets (other): 1 (1.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence Match by port : 7 (flows) Confidence DPI : 30 (flows) -Num dissector calls: 1278 (33.63 diss/flow) +Num dissector calls: 1274 (33.53 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/24/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/irc.pcap.out b/tests/cfgs/default/result/irc.pcap.out index e67a683f5..91b5b6a95 100644 --- a/tests/cfgs/default/result/irc.pcap.out +++ b/tests/cfgs/default/result/irc.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 186 (186.00 diss/flow) +Num dissector calls: 185 (185.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/iso9506-1-mms.pcap.out b/tests/cfgs/default/result/iso9506-1-mms.pcap.out index 4e1feb9c6..52b2cabbd 100644 --- a/tests/cfgs/default/result/iso9506-1-mms.pcap.out +++ b/tests/cfgs/default/result/iso9506-1-mms.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 7 (7.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 197 (197.00 diss/flow) +Num dissector calls: 196 (196.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/ja4.pcapng.out b/tests/cfgs/default/result/ja4.pcapng.out index fdd6f2ca4..0e3032c34 100644 --- a/tests/cfgs/default/result/ja4.pcapng.out +++ b/tests/cfgs/default/result/ja4.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 48 (8.00 pkts/flow) Confidence DPI : 6 (flows) -Num dissector calls: 972 (162.00 diss/flow) +Num dissector calls: 966 (161.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/jabber.pcap.out b/tests/cfgs/default/result/jabber.pcap.out index 2f586efc6..685a6771c 100644 --- a/tests/cfgs/default/result/jabber.pcap.out +++ b/tests/cfgs/default/result/jabber.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 74 (6.17 pkts/flow) Confidence DPI : 12 (flows) -Num dissector calls: 1711 (142.58 diss/flow) +Num dissector calls: 1702 (141.83 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/json.pcapng.out b/tests/cfgs/default/result/json.pcapng.out index 4c57ac0e7..98f9a54b2 100644 --- a/tests/cfgs/default/result/json.pcapng.out +++ b/tests/cfgs/default/result/json.pcapng.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 132 (4.40 pkts/flow) DPI Packets (UDP): 4 (1.00 pkts/flow) Confidence DPI : 34 (flows) -Num dissector calls: 5118 (150.53 diss/flow) +Num dissector calls: 5090 (149.71 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/jsonrpc.pcap.out b/tests/cfgs/default/result/jsonrpc.pcap.out index 5d39745cc..fbab49bb6 100644 --- a/tests/cfgs/default/result/jsonrpc.pcap.out +++ b/tests/cfgs/default/result/jsonrpc.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 10 (5.00 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 145 (72.50 diss/flow) +Num dissector calls: 144 (72.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/kafka.pcapng.out b/tests/cfgs/default/result/kafka.pcapng.out index 16f06d71d..9d518bd43 100644 --- a/tests/cfgs/default/result/kafka.pcapng.out +++ b/tests/cfgs/default/result/kafka.pcapng.out @@ -3,7 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 16 (1.78 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 8 (flows) -Num dissector calls: 221 (24.56 diss/flow) +Num dissector calls: 220 (24.44 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/kerberos.pcap.out b/tests/cfgs/default/result/kerberos.pcap.out index def558409..61232db84 100644 --- a/tests/cfgs/default/result/kerberos.pcap.out +++ b/tests/cfgs/default/result/kerberos.pcap.out @@ -4,7 +4,7 @@ DPI Packets (TCP): 77 (2.14 pkts/flow) Confidence Unknown : 2 (flows) Confidence Match by port : 23 (flows) Confidence DPI : 11 (flows) -Num dissector calls: 4610 (128.06 diss/flow) +Num dissector calls: 4585 (127.36 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/75/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/kismet.pcap.out b/tests/cfgs/default/result/kismet.pcap.out index 807c919c3..ea94825b0 100644 --- a/tests/cfgs/default/result/kismet.pcap.out +++ b/tests/cfgs/default/result/kismet.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 106 (106.00 diss/flow) +Num dissector calls: 105 (105.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/lisp_registration.pcap.out b/tests/cfgs/default/result/lisp_registration.pcap.out index 864e6dc2f..5f130883f 100644 --- a/tests/cfgs/default/result/lisp_registration.pcap.out +++ b/tests/cfgs/default/result/lisp_registration.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 8 (4.00 pkts/flow) DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI : 4 (flows) -Num dissector calls: 164 (41.00 diss/flow) +Num dissector calls: 162 (40.50 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/log4j-webapp-exploit.pcap.out b/tests/cfgs/default/result/log4j-webapp-exploit.pcap.out index d8a9e7a0f..421340774 100644 --- a/tests/cfgs/default/result/log4j-webapp-exploit.pcap.out +++ b/tests/cfgs/default/result/log4j-webapp-exploit.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 54 (7.71 pkts/flow) Confidence Unknown : 2 (flows) Confidence DPI : 5 (flows) -Num dissector calls: 341 (48.71 diss/flow) +Num dissector calls: 340 (48.57 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/6/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/lustre.pcapng.out b/tests/cfgs/default/result/lustre.pcapng.out index 92c47d055..fff5df4fe 100644 --- a/tests/cfgs/default/result/lustre.pcapng.out +++ b/tests/cfgs/default/result/lustre.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 5 (2.50 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 308 (154.00 diss/flow) +Num dissector calls: 306 (153.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/melsec.pcapng.out b/tests/cfgs/default/result/melsec.pcapng.out index bd17d2e05..91220f6bd 100644 --- a/tests/cfgs/default/result/melsec.pcapng.out +++ b/tests/cfgs/default/result/melsec.pcapng.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 6 (6.00 pkts/flow) DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI : 3 (flows) -Num dissector calls: 481 (160.33 diss/flow) +Num dissector calls: 480 (160.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/memcached.cap.out b/tests/cfgs/default/result/memcached.cap.out index 97ddac3dd..115c6b652 100644 --- a/tests/cfgs/default/result/memcached.cap.out +++ b/tests/cfgs/default/result/memcached.cap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 162 (162.00 diss/flow) +Num dissector calls: 161 (161.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/monero.pcap.out b/tests/cfgs/default/result/monero.pcap.out index 67f7fa87f..13efb8e9d 100644 --- a/tests/cfgs/default/result/monero.pcap.out +++ b/tests/cfgs/default/result/monero.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 16 (4.00 pkts/flow) Confidence DPI : 4 (flows) -Num dissector calls: 500 (125.00 diss/flow) +Num dissector calls: 496 (124.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/mongo_false_positive.pcapng.out b/tests/cfgs/default/result/mongo_false_positive.pcapng.out index 400d1cd01..4907ab9ad 100644 --- a/tests/cfgs/default/result/mongo_false_positive.pcapng.out +++ b/tests/cfgs/default/result/mongo_false_positive.pcapng.out @@ -2,7 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 13 (13.00 pkts/flow) Confidence Match by port : 1 (flows) -Num dissector calls: 257 (257.00 diss/flow) +Num dissector calls: 256 (256.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/mongodb.pcap.out b/tests/cfgs/default/result/mongodb.pcap.out index 480e56b57..1fa79967c 100644 --- a/tests/cfgs/default/result/mongodb.pcap.out +++ b/tests/cfgs/default/result/mongodb.pcap.out @@ -4,7 +4,7 @@ DPI Packets (TCP): 27 (3.38 pkts/flow) Confidence Unknown : 1 (flows) Confidence Match by port : 2 (flows) Confidence DPI : 5 (flows) -Num dissector calls: 96 (12.00 diss/flow) +Num dissector calls: 95 (11.88 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/msgpack.pcap.out b/tests/cfgs/default/result/msgpack.pcap.out index e77d02f59..936aeda1c 100644 --- a/tests/cfgs/default/result/msgpack.pcap.out +++ b/tests/cfgs/default/result/msgpack.pcap.out @@ -2,7 +2,7 @@ DPI Packets (TCP): 19 (4.75 pkts/flow) DPI Packets (UDP): 12 (1.71 pkts/flow) Confidence Unknown : 1 (flows) Confidence DPI : 10 (flows) -Num dissector calls: 1660 (150.91 diss/flow) +Num dissector calls: 1657 (150.64 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/mssql_tds.pcap.out b/tests/cfgs/default/result/mssql_tds.pcap.out index 218dd297d..8f6ca16b8 100644 --- a/tests/cfgs/default/result/mssql_tds.pcap.out +++ b/tests/cfgs/default/result/mssql_tds.pcap.out @@ -3,7 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 18 (1.50 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 11 (flows) -Num dissector calls: 258 (21.50 diss/flow) +Num dissector calls: 257 (21.42 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/naver.pcap.out b/tests/cfgs/default/result/naver.pcap.out index c3ed92d88..4b945b82b 100644 --- a/tests/cfgs/default/result/naver.pcap.out +++ b/tests/cfgs/default/result/naver.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 22 (7.33 pkts/flow) Confidence DPI : 3 (flows) -Num dissector calls: 486 (162.00 diss/flow) +Num dissector calls: 483 (161.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/nest_log_sink.pcap.out b/tests/cfgs/default/result/nest_log_sink.pcap.out index 6e9c671dd..85cddce97 100644 --- a/tests/cfgs/default/result/nest_log_sink.pcap.out +++ b/tests/cfgs/default/result/nest_log_sink.pcap.out @@ -4,7 +4,7 @@ DPI Packets (TCP): 129 (9.92 pkts/flow) DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 13 (flows) -Num dissector calls: 2197 (156.93 diss/flow) +Num dissector calls: 2185 (156.07 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/netbios.pcap.out b/tests/cfgs/default/result/netbios.pcap.out index 9060811a6..8f1628ede 100644 --- a/tests/cfgs/default/result/netbios.pcap.out +++ b/tests/cfgs/default/result/netbios.pcap.out @@ -4,7 +4,7 @@ DPI Packets (TCP): 3 (1.50 pkts/flow) DPI Packets (UDP): 14 (1.00 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 15 (flows) -Num dissector calls: 176 (11.00 diss/flow) +Num dissector calls: 175 (10.94 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/nntp.pcap.out b/tests/cfgs/default/result/nntp.pcap.out index 9248c2512..c531f92c6 100644 --- a/tests/cfgs/default/result/nntp.pcap.out +++ b/tests/cfgs/default/result/nntp.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 168 (168.00 diss/flow) +Num dissector calls: 167 (167.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/nordvpn.pcap.out b/tests/cfgs/default/result/nordvpn.pcap.out index f6fa4ced8..17a23994b 100644 --- a/tests/cfgs/default/result/nordvpn.pcap.out +++ b/tests/cfgs/default/result/nordvpn.pcap.out @@ -5,7 +5,7 @@ DPI Packets (UDP): 11 (5.50 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 2 (flows) Confidence Match by IP : 1 (flows) -Num dissector calls: 600 (150.00 diss/flow) +Num dissector calls: 599 (149.75 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/6/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/ookla.pcap.out b/tests/cfgs/default/result/ookla.pcap.out index a055e3e53..d74cb3651 100644 --- a/tests/cfgs/default/result/ookla.pcap.out +++ b/tests/cfgs/default/result/ookla.pcap.out @@ -4,7 +4,7 @@ DPI Packets (TCP): 40 (6.67 pkts/flow) Confidence DPI (partial cache): 1 (flows) Confidence DPI : 4 (flows) Confidence DPI (aggressive) : 1 (flows) -Num dissector calls: 578 (96.33 diss/flow) +Num dissector calls: 575 (95.83 diss/flow) LRU cache ookla: 4/2/2 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/openvpn.pcap.out b/tests/cfgs/default/result/openvpn.pcap.out index 54c79fa76..34935c1a2 100644 --- a/tests/cfgs/default/result/openvpn.pcap.out +++ b/tests/cfgs/default/result/openvpn.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 24 (8.00 pkts/flow) DPI Packets (UDP): 24 (3.43 pkts/flow) Confidence DPI : 10 (flows) -Num dissector calls: 1795 (179.50 diss/flow) +Num dissector calls: 1792 (179.20 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/openvpn_nohmac_tcp.pcapng.out b/tests/cfgs/default/result/openvpn_nohmac_tcp.pcapng.out index 692ff5250..94f7b6f73 100644 --- a/tests/cfgs/default/result/openvpn_nohmac_tcp.pcapng.out +++ b/tests/cfgs/default/result/openvpn_nohmac_tcp.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 162 (162.00 diss/flow) +Num dissector calls: 161 (161.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/openvpn_obfuscated.pcapng.out b/tests/cfgs/default/result/openvpn_obfuscated.pcapng.out index 1fe84bd7c..18cba0f59 100644 --- a/tests/cfgs/default/result/openvpn_obfuscated.pcapng.out +++ b/tests/cfgs/default/result/openvpn_obfuscated.pcapng.out @@ -4,7 +4,7 @@ DPI Packets (TCP): 34 (17.00 pkts/flow) DPI Packets (UDP): 9 (9.00 pkts/flow) Confidence Match by port : 2 (flows) Confidence Match by IP : 1 (flows) -Num dissector calls: 687 (229.00 diss/flow) +Num dissector calls: 685 (228.33 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/ossfuzz_seed_fake_traces_1.pcapng.out b/tests/cfgs/default/result/ossfuzz_seed_fake_traces_1.pcapng.out index 177ecbadb..257bfcaa7 100644 --- a/tests/cfgs/default/result/ossfuzz_seed_fake_traces_1.pcapng.out +++ b/tests/cfgs/default/result/ossfuzz_seed_fake_traces_1.pcapng.out @@ -5,7 +5,7 @@ DPI Packets (UDP): 9 (2.25 pkts/flow) Confidence Unknown : 5 (flows) Confidence Match by port : 4 (flows) Confidence DPI : 1 (flows) -Num dissector calls: 1679 (167.90 diss/flow) +Num dissector calls: 1673 (167.30 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/27/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/ossfuzz_seed_fake_traces_2.pcapng.out b/tests/cfgs/default/result/ossfuzz_seed_fake_traces_2.pcapng.out index fda0f7a31..0fc6c24ef 100644 --- a/tests/cfgs/default/result/ossfuzz_seed_fake_traces_2.pcapng.out +++ b/tests/cfgs/default/result/ossfuzz_seed_fake_traces_2.pcapng.out @@ -4,7 +4,7 @@ DPI Packets (TCP): 38 (6.33 pkts/flow) DPI Packets (UDP): 4 (2.00 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 7 (flows) -Num dissector calls: 1072 (134.00 diss/flow) +Num dissector calls: 1068 (133.50 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/paltalk.pcapng.out b/tests/cfgs/default/result/paltalk.pcapng.out index 99cb1b414..54782ed9d 100644 --- a/tests/cfgs/default/result/paltalk.pcapng.out +++ b/tests/cfgs/default/result/paltalk.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 17 (4.25 pkts/flow) Confidence DPI : 4 (flows) -Num dissector calls: 326 (81.50 diss/flow) +Num dissector calls: 324 (81.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/path_of_exile.pcapng.out b/tests/cfgs/default/result/path_of_exile.pcapng.out index bebafe0ea..189a8f690 100644 --- a/tests/cfgs/default/result/path_of_exile.pcapng.out +++ b/tests/cfgs/default/result/path_of_exile.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 16 (4.00 pkts/flow) Confidence DPI : 4 (flows) -Num dissector calls: 576 (144.00 diss/flow) +Num dissector calls: 572 (143.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/pgsql.pcap.out b/tests/cfgs/default/result/pgsql.pcap.out index e3c019936..437c34950 100644 --- a/tests/cfgs/default/result/pgsql.pcap.out +++ b/tests/cfgs/default/result/pgsql.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 36 (6.00 pkts/flow) Confidence DPI : 6 (flows) -Num dissector calls: 972 (162.00 diss/flow) +Num dissector calls: 966 (161.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/pgsql2.pcapng.out b/tests/cfgs/default/result/pgsql2.pcapng.out index 402e4a6ca..27dd33e58 100644 --- a/tests/cfgs/default/result/pgsql2.pcapng.out +++ b/tests/cfgs/default/result/pgsql2.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 165 (165.00 diss/flow) +Num dissector calls: 164 (164.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/plugin.pcapng.out b/tests/cfgs/default/result/plugin.pcapng.out index 7cc7c5e43..2be0ebdd9 100644 --- a/tests/cfgs/default/result/plugin.pcapng.out +++ b/tests/cfgs/default/result/plugin.pcapng.out @@ -2,7 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 8 (8.00 pkts/flow) Confidence Match by port : 1 (flows) -Num dissector calls: 161 (161.00 diss/flow) +Num dissector calls: 160 (160.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/pop3.pcap.out b/tests/cfgs/default/result/pop3.pcap.out index e8c673b9c..5acf3a114 100644 --- a/tests/cfgs/default/result/pop3.pcap.out +++ b/tests/cfgs/default/result/pop3.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 83 (13.83 pkts/flow) Confidence DPI : 6 (flows) -Num dissector calls: 1261 (210.17 diss/flow) +Num dissector calls: 1255 (209.17 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/pop3_stls.pcap.out b/tests/cfgs/default/result/pop3_stls.pcap.out index 3e017eacc..168a7ca2f 100644 --- a/tests/cfgs/default/result/pop3_stls.pcap.out +++ b/tests/cfgs/default/result/pop3_stls.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 18 (18.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 211 (211.00 diss/flow) +Num dissector calls: 210 (210.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/portable_executable.pcap.out b/tests/cfgs/default/result/portable_executable.pcap.out index a30425cbc..a6aa25648 100644 --- a/tests/cfgs/default/result/portable_executable.pcap.out +++ b/tests/cfgs/default/result/portable_executable.pcap.out @@ -3,7 +3,7 @@ Guessed flow protos: 2 DPI Packets (TCP): 30 (15.00 pkts/flow) Confidence Match by port : 1 (flows) Confidence Match by IP : 1 (flows) -Num dissector calls: 453 (226.50 diss/flow) +Num dissector calls: 451 (225.50 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/6/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/protobuf.pcap.out b/tests/cfgs/default/result/protobuf.pcap.out index f14d9b56d..11b6d406e 100644 --- a/tests/cfgs/default/result/protobuf.pcap.out +++ b/tests/cfgs/default/result/protobuf.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 26 (5.20 pkts/flow) Confidence DPI : 5 (flows) -Num dissector calls: 687 (137.40 diss/flow) +Num dissector calls: 682 (136.40 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/radmin3.pcapng.out b/tests/cfgs/default/result/radmin3.pcapng.out index 858b043f5..5248bf813 100644 --- a/tests/cfgs/default/result/radmin3.pcapng.out +++ b/tests/cfgs/default/result/radmin3.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 12 (6.00 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 324 (162.00 diss/flow) +Num dissector calls: 322 (161.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/raft.pcap.out b/tests/cfgs/default/result/raft.pcap.out index 2e9fb0913..e2601d6a9 100644 --- a/tests/cfgs/default/result/raft.pcap.out +++ b/tests/cfgs/default/result/raft.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 12 (6.00 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 358 (179.00 diss/flow) +Num dissector calls: 356 (178.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/rdp.pcap.out b/tests/cfgs/default/result/rdp.pcap.out index 8457f9c88..dd4092741 100644 --- a/tests/cfgs/default/result/rdp.pcap.out +++ b/tests/cfgs/default/result/rdp.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 5 (5.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 162 (162.00 diss/flow) +Num dissector calls: 161 (161.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/rdp3.pcap.out b/tests/cfgs/default/result/rdp3.pcap.out index 48b175f63..6d518bba4 100644 --- a/tests/cfgs/default/result/rdp3.pcap.out +++ b/tests/cfgs/default/result/rdp3.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 5 (5.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 162 (162.00 diss/flow) +Num dissector calls: 161 (161.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/rdp_over_http.pcapng.out b/tests/cfgs/default/result/rdp_over_http.pcapng.out index 001778e9f..7c78b9ce3 100644 --- a/tests/cfgs/default/result/rdp_over_http.pcapng.out +++ b/tests/cfgs/default/result/rdp_over_http.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 6 (6.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 162 (162.00 diss/flow) +Num dissector calls: 161 (161.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/reasm_crash_anon.pcapng.out b/tests/cfgs/default/result/reasm_crash_anon.pcapng.out index 678957c61..a8d049f35 100644 --- a/tests/cfgs/default/result/reasm_crash_anon.pcapng.out +++ b/tests/cfgs/default/result/reasm_crash_anon.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 3 (3.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 203 (203.00 diss/flow) +Num dissector calls: 202 (202.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/reasm_segv_anon.pcapng.out b/tests/cfgs/default/result/reasm_segv_anon.pcapng.out index 8a924fe78..03af4493e 100644 --- a/tests/cfgs/default/result/reasm_segv_anon.pcapng.out +++ b/tests/cfgs/default/result/reasm_segv_anon.pcapng.out @@ -2,7 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 15 (15.00 pkts/flow) Confidence Match by port : 1 (flows) -Num dissector calls: 202 (202.00 diss/flow) +Num dissector calls: 201 (201.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/riot.pcapng.out b/tests/cfgs/default/result/riot.pcapng.out index 7231b8537..029c105ef 100644 --- a/tests/cfgs/default/result/riot.pcapng.out +++ b/tests/cfgs/default/result/riot.pcapng.out @@ -3,7 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 7 (3.50 pkts/flow) Confidence DPI (partial) : 1 (flows) Confidence DPI : 1 (flows) -Num dissector calls: 203 (101.50 diss/flow) +Num dissector calls: 202 (101.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/rsh.pcap.out b/tests/cfgs/default/result/rsh.pcap.out index 7e1fca9cd..f4a81f273 100644 --- a/tests/cfgs/default/result/rsh.pcap.out +++ b/tests/cfgs/default/result/rsh.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 12 (6.00 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 350 (175.00 diss/flow) +Num dissector calls: 348 (174.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/rtmp.pcap.out b/tests/cfgs/default/result/rtmp.pcap.out index 37d7a3103..3ea748cd8 100644 --- a/tests/cfgs/default/result/rtmp.pcap.out +++ b/tests/cfgs/default/result/rtmp.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 18 (6.00 pkts/flow) Confidence DPI : 3 (flows) -Num dissector calls: 557 (185.67 diss/flow) +Num dissector calls: 554 (184.67 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/rtp.pcapng.out b/tests/cfgs/default/result/rtp.pcapng.out index d3fa6f678..13da550b7 100644 --- a/tests/cfgs/default/result/rtp.pcapng.out +++ b/tests/cfgs/default/result/rtp.pcapng.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 32 (32.00 pkts/flow) DPI Packets (UDP): 41 (13.67 pkts/flow) Confidence DPI : 4 (flows) -Num dissector calls: 693 (173.25 diss/flow) +Num dissector calls: 692 (173.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/s7comm-plus.pcap.out b/tests/cfgs/default/result/s7comm-plus.pcap.out index bfc02ee99..b5c46a430 100644 --- a/tests/cfgs/default/result/s7comm-plus.pcap.out +++ b/tests/cfgs/default/result/s7comm-plus.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 9 (9.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 192 (192.00 diss/flow) +Num dissector calls: 191 (191.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/s7comm.pcap.out b/tests/cfgs/default/result/s7comm.pcap.out index 5e6c4a4f2..85a003b9d 100644 --- a/tests/cfgs/default/result/s7comm.pcap.out +++ b/tests/cfgs/default/result/s7comm.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 18 (4.50 pkts/flow) Confidence DPI : 4 (flows) -Num dissector calls: 661 (165.25 diss/flow) +Num dissector calls: 657 (164.25 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/shadowsocks.pcap.out b/tests/cfgs/default/result/shadowsocks.pcap.out index 1faf910e2..0f2514c7d 100644 --- a/tests/cfgs/default/result/shadowsocks.pcap.out +++ b/tests/cfgs/default/result/shadowsocks.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 21 (10.50 pkts/flow) Confidence Unknown : 1 (flows) Confidence DPI : 1 (flows) -Num dissector calls: 379 (189.50 diss/flow) +Num dissector calls: 377 (188.50 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/shell.pcap.out b/tests/cfgs/default/result/shell.pcap.out index 25efb1bda..89295f0ab 100644 --- a/tests/cfgs/default/result/shell.pcap.out +++ b/tests/cfgs/default/result/shell.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 16 (8.00 pkts/flow) DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence Unknown : 4 (flows) -Num dissector calls: 630 (157.50 diss/flow) +Num dissector calls: 628 (157.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/12/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/sites.pcapng.out b/tests/cfgs/default/result/sites.pcapng.out index 9cfaa5781..0c15089c6 100644 --- a/tests/cfgs/default/result/sites.pcapng.out +++ b/tests/cfgs/default/result/sites.pcapng.out @@ -4,7 +4,7 @@ DPI Packets (TCP): 364 (5.43 pkts/flow) DPI Packets (UDP): 6 (1.20 pkts/flow) Confidence Match by port : 4 (flows) Confidence DPI : 68 (flows) -Num dissector calls: 253 (3.51 diss/flow) +Num dissector calls: 252 (3.50 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/12/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/sites3.pcapng.out b/tests/cfgs/default/result/sites3.pcapng.out index 07c92a72c..02fcef3ad 100644 --- a/tests/cfgs/default/result/sites3.pcapng.out +++ b/tests/cfgs/default/result/sites3.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 38 (7.60 pkts/flow) Confidence DPI : 5 (flows) -Num dissector calls: 488 (97.60 diss/flow) +Num dissector calls: 485 (97.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/smb_frags.pcap.out b/tests/cfgs/default/result/smb_frags.pcap.out index ed1e044ed..c3654292f 100644 --- a/tests/cfgs/default/result/smb_frags.pcap.out +++ b/tests/cfgs/default/result/smb_frags.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 5 (5.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 181 (181.00 diss/flow) +Num dissector calls: 180 (180.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/smbv1.pcap.out b/tests/cfgs/default/result/smbv1.pcap.out index 9b7d7540e..3856a45d1 100644 --- a/tests/cfgs/default/result/smbv1.pcap.out +++ b/tests/cfgs/default/result/smbv1.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 3 (3.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 183 (183.00 diss/flow) +Num dissector calls: 182 (182.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/smpp_in_general.pcap.out b/tests/cfgs/default/result/smpp_in_general.pcap.out index f84dfc3eb..1990be8d1 100644 --- a/tests/cfgs/default/result/smpp_in_general.pcap.out +++ b/tests/cfgs/default/result/smpp_in_general.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 71 (71.00 diss/flow) +Num dissector calls: 70 (70.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/smtp-starttls.pcap.out b/tests/cfgs/default/result/smtp-starttls.pcap.out index 20b95735f..ef893a35a 100644 --- a/tests/cfgs/default/result/smtp-starttls.pcap.out +++ b/tests/cfgs/default/result/smtp-starttls.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 26 (13.00 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 178 (89.00 diss/flow) +Num dissector calls: 177 (88.50 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/smtp.pcap.out b/tests/cfgs/default/result/smtp.pcap.out index 2c906aacc..82289ac3e 100644 --- a/tests/cfgs/default/result/smtp.pcap.out +++ b/tests/cfgs/default/result/smtp.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 11 (11.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 215 (215.00 diss/flow) +Num dissector calls: 214 (214.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/soap.pcap.out b/tests/cfgs/default/result/soap.pcap.out index 19e973f2b..0c74e6060 100644 --- a/tests/cfgs/default/result/soap.pcap.out +++ b/tests/cfgs/default/result/soap.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 11 (3.67 pkts/flow) Confidence DPI : 3 (flows) -Num dissector calls: 409 (136.33 diss/flow) +Num dissector calls: 407 (135.67 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/socks.pcap.out b/tests/cfgs/default/result/socks.pcap.out index 2b1b7e941..52e583a97 100644 --- a/tests/cfgs/default/result/socks.pcap.out +++ b/tests/cfgs/default/result/socks.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 23 (5.75 pkts/flow) Confidence DPI : 4 (flows) -Num dissector calls: 650 (162.50 diss/flow) +Num dissector calls: 646 (161.50 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/ssh.pcap.out b/tests/cfgs/default/result/ssh.pcap.out index 5de715190..766109b2b 100644 --- a/tests/cfgs/default/result/ssh.pcap.out +++ b/tests/cfgs/default/result/ssh.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 38 (12.67 pkts/flow) Confidence DPI : 3 (flows) -Num dissector calls: 346 (115.33 diss/flow) +Num dissector calls: 344 (114.67 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/ssh_unidirectional.pcap.out b/tests/cfgs/default/result/ssh_unidirectional.pcap.out index 9abf20c40..959e56fb5 100644 --- a/tests/cfgs/default/result/ssh_unidirectional.pcap.out +++ b/tests/cfgs/default/result/ssh_unidirectional.pcap.out @@ -2,7 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 13 (13.00 pkts/flow) Confidence DPI (partial) : 1 (flows) -Num dissector calls: 193 (193.00 diss/flow) +Num dissector calls: 192 (192.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/starcraft_battle.pcap.out b/tests/cfgs/default/result/starcraft_battle.pcap.out index 7e93afb60..d15774f5d 100644 --- a/tests/cfgs/default/result/starcraft_battle.pcap.out +++ b/tests/cfgs/default/result/starcraft_battle.pcap.out @@ -6,7 +6,7 @@ DPI Packets (other): 1 (1.00 pkts/flow) Confidence Match by port : 13 (flows) Confidence DPI : 38 (flows) Confidence Match by IP : 1 (flows) -Num dissector calls: 1948 (37.46 diss/flow) +Num dissector calls: 1944 (37.38 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/42/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/teams.pcap.out b/tests/cfgs/default/result/teams.pcap.out index 0a0cabcb7..e59d20e56 100644 --- a/tests/cfgs/default/result/teams.pcap.out +++ b/tests/cfgs/default/result/teams.pcap.out @@ -7,7 +7,7 @@ Confidence Unknown : 1 (flows) Confidence Match by port : 2 (flows) Confidence DPI (partial) : 4 (flows) Confidence DPI : 76 (flows) -Num dissector calls: 525 (6.33 diss/flow) +Num dissector calls: 524 (6.31 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 30/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/telegram_videocall.pcapng.out b/tests/cfgs/default/result/telegram_videocall.pcapng.out index 9b266b17e..3ca84c3a7 100644 --- a/tests/cfgs/default/result/telegram_videocall.pcapng.out +++ b/tests/cfgs/default/result/telegram_videocall.pcapng.out @@ -7,7 +7,7 @@ Confidence Match by port : 1 (flows) Confidence DPI (cache) : 10 (flows) Confidence DPI : 15 (flows) Confidence Match by IP : 8 (flows) -Num dissector calls: 752 (22.12 diss/flow) +Num dissector calls: 751 (22.09 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/6/0 (insert/search/found) LRU cache stun: 38/49/10 (insert/search/found) diff --git a/tests/cfgs/default/result/tencent_games.pcap.out b/tests/cfgs/default/result/tencent_games.pcap.out index 3bdfae9de..6d5568e0f 100644 --- a/tests/cfgs/default/result/tencent_games.pcap.out +++ b/tests/cfgs/default/result/tencent_games.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 16 (4.00 pkts/flow) Confidence DPI : 4 (flows) -Num dissector calls: 564 (141.00 diss/flow) +Num dissector calls: 560 (140.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/teso.pcapng.out b/tests/cfgs/default/result/teso.pcapng.out index 9043250fb..25ee02c6f 100644 --- a/tests/cfgs/default/result/teso.pcapng.out +++ b/tests/cfgs/default/result/teso.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 8 (4.00 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 290 (145.00 diss/flow) +Num dissector calls: 288 (144.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/threema.pcap.out b/tests/cfgs/default/result/threema.pcap.out index 27335cb0b..5e8770841 100644 --- a/tests/cfgs/default/result/threema.pcap.out +++ b/tests/cfgs/default/result/threema.pcap.out @@ -3,7 +3,7 @@ Guessed flow protos: 2 DPI Packets (TCP): 66 (11.00 pkts/flow) Confidence DPI : 4 (flows) Confidence Match by IP : 2 (flows) -Num dissector calls: 1312 (218.67 diss/flow) +Num dissector calls: 1306 (217.67 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/6/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/thrift.pcap.out b/tests/cfgs/default/result/thrift.pcap.out index 4dc412eff..f19cf7c40 100644 --- a/tests/cfgs/default/result/thrift.pcap.out +++ b/tests/cfgs/default/result/thrift.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 4 (4.00 pkts/flow) DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 215 (107.50 diss/flow) +Num dissector calls: 214 (107.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tinc.pcap.out b/tests/cfgs/default/result/tinc.pcap.out index 5a322270c..194363979 100644 --- a/tests/cfgs/default/result/tinc.pcap.out +++ b/tests/cfgs/default/result/tinc.pcap.out @@ -2,7 +2,7 @@ DPI Packets (TCP): 19 (9.50 pkts/flow) DPI Packets (UDP): 2 (1.00 pkts/flow) Confidence DPI (cache) : 2 (flows) Confidence DPI : 2 (flows) -Num dissector calls: 530 (132.50 diss/flow) +Num dissector calls: 528 (132.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tls-appdata.pcap.out b/tests/cfgs/default/result/tls-appdata.pcap.out index fa906e6bd..ddd0022b9 100644 --- a/tests/cfgs/default/result/tls-appdata.pcap.out +++ b/tests/cfgs/default/result/tls-appdata.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 17 (8.50 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 163 (81.50 diss/flow) +Num dissector calls: 162 (81.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tls_certificate_too_long.pcap.out b/tests/cfgs/default/result/tls_certificate_too_long.pcap.out index ff49a5898..85e376e54 100644 --- a/tests/cfgs/default/result/tls_certificate_too_long.pcap.out +++ b/tests/cfgs/default/result/tls_certificate_too_long.pcap.out @@ -6,7 +6,7 @@ DPI Packets (other): 2 (1.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence Match by port : 1 (flows) Confidence DPI : 33 (flows) -Num dissector calls: 656 (18.74 diss/flow) +Num dissector calls: 653 (18.66 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/6/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tls_false_positives.pcapng.out b/tests/cfgs/default/result/tls_false_positives.pcapng.out index 5d55dc55c..2ed8df0a7 100644 --- a/tests/cfgs/default/result/tls_false_positives.pcapng.out +++ b/tests/cfgs/default/result/tls_false_positives.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 12 (12.00 pkts/flow) Confidence Unknown : 1 (flows) -Num dissector calls: 236 (236.00 diss/flow) +Num dissector calls: 235 (235.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tls_heur__shadowsocks-tcp.pcapng.out b/tests/cfgs/default/result/tls_heur__shadowsocks-tcp.pcapng.out index 2d0386d41..dc0230edd 100644 --- a/tests/cfgs/default/result/tls_heur__shadowsocks-tcp.pcapng.out +++ b/tests/cfgs/default/result/tls_heur__shadowsocks-tcp.pcapng.out @@ -2,7 +2,7 @@ DPI Packets (TCP): 32 (10.67 pkts/flow) DPI Packets (UDP): 3 (3.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence DPI : 3 (flows) -Num dissector calls: 408 (102.00 diss/flow) +Num dissector calls: 406 (101.50 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tls_heur__trojan-tcp-tls.pcapng.out b/tests/cfgs/default/result/tls_heur__trojan-tcp-tls.pcapng.out index f403dcf16..b1364232c 100644 --- a/tests/cfgs/default/result/tls_heur__trojan-tcp-tls.pcapng.out +++ b/tests/cfgs/default/result/tls_heur__trojan-tcp-tls.pcapng.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 18 (6.00 pkts/flow) DPI Packets (UDP): 15 (2.14 pkts/flow) Confidence DPI : 10 (flows) -Num dissector calls: 173 (17.30 diss/flow) +Num dissector calls: 172 (17.20 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tls_heur__vmess-tcp-tls.pcapng.out b/tests/cfgs/default/result/tls_heur__vmess-tcp-tls.pcapng.out index 12257de53..84db5422d 100644 --- a/tests/cfgs/default/result/tls_heur__vmess-tcp-tls.pcapng.out +++ b/tests/cfgs/default/result/tls_heur__vmess-tcp-tls.pcapng.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 18 (6.00 pkts/flow) DPI Packets (UDP): 15 (2.14 pkts/flow) Confidence DPI : 10 (flows) -Num dissector calls: 173 (17.30 diss/flow) +Num dissector calls: 172 (17.20 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tls_heur__vmess-tcp.pcapng.out b/tests/cfgs/default/result/tls_heur__vmess-tcp.pcapng.out index d9b7f05d4..ec1731dcf 100644 --- a/tests/cfgs/default/result/tls_heur__vmess-tcp.pcapng.out +++ b/tests/cfgs/default/result/tls_heur__vmess-tcp.pcapng.out @@ -2,7 +2,7 @@ DPI Packets (TCP): 37 (12.33 pkts/flow) DPI Packets (UDP): 3 (3.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence DPI : 3 (flows) -Num dissector calls: 411 (102.75 diss/flow) +Num dissector calls: 409 (102.25 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tls_heur__vmess-websocket.pcapng.out b/tests/cfgs/default/result/tls_heur__vmess-websocket.pcapng.out index ac5a8e60e..6ac182def 100644 --- a/tests/cfgs/default/result/tls_heur__vmess-websocket.pcapng.out +++ b/tests/cfgs/default/result/tls_heur__vmess-websocket.pcapng.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 18 (6.00 pkts/flow) DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 4 (flows) -Num dissector calls: 182 (45.50 diss/flow) +Num dissector calls: 181 (45.25 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tls_invalid_reads.pcap.out b/tests/cfgs/default/result/tls_invalid_reads.pcap.out index c74541adb..04dbae168 100644 --- a/tests/cfgs/default/result/tls_invalid_reads.pcap.out +++ b/tests/cfgs/default/result/tls_invalid_reads.pcap.out @@ -3,7 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 10 (3.33 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 2 (flows) -Num dissector calls: 163 (54.33 diss/flow) +Num dissector calls: 162 (54.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tls_missing_ch_frag.pcap.out b/tests/cfgs/default/result/tls_missing_ch_frag.pcap.out index ddca10727..e136886fa 100644 --- a/tests/cfgs/default/result/tls_missing_ch_frag.pcap.out +++ b/tests/cfgs/default/result/tls_missing_ch_frag.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 14 (14.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 162 (162.00 diss/flow) +Num dissector calls: 161 (161.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tls_unidirectional.pcap.out b/tests/cfgs/default/result/tls_unidirectional.pcap.out index 8c80b68ee..0c84b9b5d 100644 --- a/tests/cfgs/default/result/tls_unidirectional.pcap.out +++ b/tests/cfgs/default/result/tls_unidirectional.pcap.out @@ -2,7 +2,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 8 (8.00 pkts/flow) Confidence Match by port : 1 (flows) -Num dissector calls: 161 (161.00 diss/flow) +Num dissector calls: 160 (160.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/tls_with_huge_ch.pcapng.out b/tests/cfgs/default/result/tls_with_huge_ch.pcapng.out index c1c372cab..6f9482857 100644 --- a/tests/cfgs/default/result/tls_with_huge_ch.pcapng.out +++ b/tests/cfgs/default/result/tls_with_huge_ch.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 32 (32.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 270 (270.00 diss/flow) +Num dissector calls: 269 (269.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/ultrasurf.pcap.out b/tests/cfgs/default/result/ultrasurf.pcap.out index af660ef85..e724a43d9 100644 --- a/tests/cfgs/default/result/ultrasurf.pcap.out +++ b/tests/cfgs/default/result/ultrasurf.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 13 (4.33 pkts/flow) Confidence DPI : 3 (flows) -Num dissector calls: 107 (35.67 diss/flow) +Num dissector calls: 106 (35.33 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/viber.pcap.out b/tests/cfgs/default/result/viber.pcap.out index dc7809ca4..90c6d908e 100644 --- a/tests/cfgs/default/result/viber.pcap.out +++ b/tests/cfgs/default/result/viber.pcap.out @@ -5,7 +5,7 @@ DPI Packets (UDP): 34 (2.27 pkts/flow) DPI Packets (other): 2 (1.00 pkts/flow) Confidence Match by port : 4 (flows) Confidence DPI : 26 (flows) -Num dissector calls: 457 (15.23 diss/flow) +Num dissector calls: 456 (15.20 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/12/0 (insert/search/found) LRU cache stun: 3/6/0 (insert/search/found) diff --git a/tests/cfgs/default/result/vnc.pcap.out b/tests/cfgs/default/result/vnc.pcap.out index 15902e322..41c6d0369 100644 --- a/tests/cfgs/default/result/vnc.pcap.out +++ b/tests/cfgs/default/result/vnc.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 10 (5.00 pkts/flow) Confidence DPI : 2 (flows) -Num dissector calls: 332 (166.00 diss/flow) +Num dissector calls: 330 (165.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/wa_video.pcap.out b/tests/cfgs/default/result/wa_video.pcap.out index ab62f1903..709d3fe10 100644 --- a/tests/cfgs/default/result/wa_video.pcap.out +++ b/tests/cfgs/default/result/wa_video.pcap.out @@ -5,7 +5,7 @@ DPI Packets (UDP): 44 (3.38 pkts/flow) Confidence DPI (cache) : 2 (flows) Confidence DPI : 11 (flows) Confidence Match by IP : 1 (flows) -Num dissector calls: 362 (25.86 diss/flow) +Num dissector calls: 361 (25.79 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 14/2/2 (insert/search/found) diff --git a/tests/cfgs/default/result/wa_voice.pcap.out b/tests/cfgs/default/result/wa_voice.pcap.out index 1b70f5692..7906e8dd9 100644 --- a/tests/cfgs/default/result/wa_voice.pcap.out +++ b/tests/cfgs/default/result/wa_voice.pcap.out @@ -1,23 +1,23 @@ -DPI Packets (TCP): 20 (3.33 pkts/flow) +DPI Packets (TCP): 24 (4.00 pkts/flow) DPI Packets (UDP): 75 (3.57 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence DPI (cache) : 1 (flows) Confidence DPI : 26 (flows) -Num dissector calls: 357 (12.75 diss/flow) +Num dissector calls: 473 (16.89 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 16/3/2 (insert/search/found) LRU cache tls_cert: 0/0/0 (insert/search/found) LRU cache mining: 0/1/0 (insert/search/found) LRU cache msteams: 0/0/0 (insert/search/found) -LRU cache fpc_dns: 4/4/3 (insert/search/found) +LRU cache fpc_dns: 4/5/3 (insert/search/found) Automa host: 30/10 (search/found) Automa domain: 20/0 (search/found) Automa tls cert: 0/0 (search/found) Automa risk mask: 0/0 (search/found) Automa common alpns: 14/14 (search/found) -Patricia risk mask: 0/0 (search/found) +Patricia risk mask: 2/0 (search/found) Patricia risk mask IPv6: 0/0 (search/found) Patricia risk: 1/0 (search/found) Patricia risk IPv6: 1/0 (search/found) @@ -38,24 +38,23 @@ SSDP 8 1365 5 DHCP 5 1710 1 WhatsAppCall 261 43719 7 ICMP 4 280 1 -TLS 8 542 1 +TLS 32 8549 2 Dropbox 4 1528 1 WhatsApp 348 86095 2 Spotify 2 172 1 -ApplePush 24 8007 1 WhatsAppFiles 50 24752 1 Unrated 2 120 1 -Safe 8 542 1 -Acceptable 722 169382 25 +Safe 32 8549 2 +Acceptable 698 161375 24 Fun 2 172 1 Unspecified 2 120 1 -Web 8 542 1 +Web 32 8549 2 Download 50 24752 1 Chat 348 86095 2 VoIP 261 43719 7 -Cloud 28 9535 2 +Cloud 4 1528 1 Network 27 3916 8 System 8 1365 5 Music 2 172 1 @@ -69,7 +68,7 @@ JA Host Stats: 2 TCP 192.168.2.12:49355 <-> 157.240.20.53:5222 [proto: 142/WhatsApp][Stack: WhatsApp][IP: 142/WhatsApp][Encrypted][Confidence: DPI][FPC: 142/WhatsApp, Confidence: DNS][DPI packets: 4][cat: Chat/9][Breed: Acceptable][132 pkts/14116 bytes <-> 131 pkts/24439 bytes][Goodput ratio: 38/65][54.73 sec][bytes ratio: -0.268 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 342/421 9349/9387 1279/1420][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 107/187 393/1454 62/283][TCP Fingerprint: 194_64_65535_d29295416479/macOS][PLAIN TEXT (fd.9LTIP9)][Plen Bins: 1,63,2,3,10,10,0,0,1,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0] 3 UDP 91.252.56.51:32704 <-> 192.168.2.12:56328 [proto: 338.45/SRTP.WhatsAppCall][Stack: STUN.WhatsAppCall.SRTP][IP: 0/Unknown][Stream Content: Audio][Encrypted][Confidence: DPI][FPC: 78.45/STUN.WhatsAppCall, Confidence: DPI][DPI packets: 7][cat: VoIP/10][Breed: Acceptable][87 pkts/14598 bytes <-> 77 pkts/17336 bytes][Goodput ratio: 75/81][11.91 sec][bytes ratio: -0.086 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 136/121 921/265 137/64][Pkt Len c2s/s2c min/avg/max/stddev: 68/68 168/225 318/331 61/68][PLAIN TEXT (KEXQD/)][Plen Bins: 6,4,7,27,16,4,11,12,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 4 TCP 192.168.2.12:50503 <-> 31.13.86.51:443 [proto: 91.242/TLS.WhatsAppFiles][Stack: TLS.WhatsAppFiles][IP: 142/WhatsApp][Encrypted][Confidence: DPI][FPC: 242/WhatsAppFiles, Confidence: DNS][DPI packets: 6][cat: Download/7][Breed: Acceptable][25 pkts/2993 bytes <-> 25 pkts/21759 bytes][Goodput ratio: 44/92][0.39 sec][Hostname/SNI: media-mxp1-1.cdn.whatsapp.net][(Advertised) ALPNs: h2;h2-16;h2-15;h2-14;spdy/3.1;spdy/3;http/1.1][TLS Supported Versions: TLSv1.3;TLSv1.2;TLSv1.1;TLSv1][bytes ratio: -0.758 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 8/10 127/126 28/30][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 120/870 583/1454 124/639][nDPI Fingerprint: df8f004c443a66ff4e4e7a253a3191fc][TCP Fingerprint: 194_64_65535_d0a7eb742982/Unknown][TLSv1.3][JA4: t13d2615h2_2802a3db6c62_0f2fdc61901b][JA3S: 475c9302dc42b2751db9edcac3b74891][Safari][Cipher: TLS_CHACHA20_POLY1305_SHA256][Plen Bins: 7,14,7,0,0,3,0,0,7,0,3,0,0,3,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,47,0,0,0,0] - 5 TCP 192.168.2.12:49354 <-> 17.242.60.84:5223 [proto: 238/ApplePush][Stack: ApplePush][IP: 140/Apple][Encrypted][Confidence: DPI][FPC: 238/ApplePush, Confidence: DPI][DPI packets: 1][cat: Cloud/13][Breed: Acceptable][14 pkts/6933 bytes <-> 10 pkts/1074 bytes][Goodput ratio: 87/39][54.11 sec][bytes ratio: 0.732 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 4462/757 43773/5113 12515/1779][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 495/107 1506/215 607/44][Plen Bins: 0,42,14,0,7,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,21,0,0] + 5 TCP 192.168.2.12:49354 <-> 17.242.60.84:5223 [proto: 91/TLS][Stack: TLS][IP: 140/Apple][Encrypted][Confidence: DPI][FPC: 140/Apple, Confidence: IP address][DPI packets: 5][cat: Web/5][Breed: Safe][14 pkts/6933 bytes <-> 10 pkts/1074 bytes][Goodput ratio: 87/39][54.11 sec][bytes ratio: 0.732 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 4462/757 43773/5113 12515/1779][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 495/107 1506/215 607/44][Risk: ** Known Proto on Non Std Port **][Risk Score: 50][Risk Info: Expected on port 443][Plen Bins: 0,42,14,0,7,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,21,0,0] 6 UDP 192.168.2.12:56328 <-> 31.13.86.48:3478 [proto: 78.45/STUN.WhatsAppCall][Stack: STUN.WhatsAppCall][IP: 119/Facebook][ClearText][Confidence: DPI][FPC: 78.45/STUN.WhatsAppCall, Confidence: DPI][DPI packets: 7][cat: VoIP/10][Breed: Acceptable][21 pkts/2349 bytes <-> 28 pkts/3668 bytes][Goodput ratio: 62/68][34.51 sec][bytes ratio: -0.219 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 1959/1447 12194/12196 2978/2626][Pkt Len c2s/s2c min/avg/max/stddev: 48/44 112/131 249/326 64/101][Mapped IP/Port: 80.180.162.48:52372][Plen Bins: 40,20,0,20,0,0,8,4,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 7 UDP 0.0.0.0:68 -> 255.255.255.255:67 [proto: 18/DHCP][Stack: DHCP][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 18/DHCP, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][5 pkts/1710 bytes -> 0 pkts/0 bytes][Goodput ratio: 88/0][17.30 sec][Hostname/SNI: lucas-imac][DHCP Fingerprint: 1,121,3,6,15,119,252,95,44,46][Plen Bins: 0,0,0,0,0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 8 UDP 192.168.2.1:17500 -> 192.168.2.255:17500 [proto: 121/Dropbox][Stack: Dropbox][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 121/Dropbox, Confidence: DPI][DPI packets: 1][cat: Cloud/13][Breed: Acceptable][4 pkts/1528 bytes -> 0 pkts/0 bytes][Goodput ratio: 89/0][30.05 sec][PLAIN TEXT (version)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] diff --git a/tests/cfgs/default/result/waze.pcap.out b/tests/cfgs/default/result/waze.pcap.out index 56391495a..c30542bfd 100644 --- a/tests/cfgs/default/result/waze.pcap.out +++ b/tests/cfgs/default/result/waze.pcap.out @@ -5,7 +5,7 @@ DPI Packets (UDP): 1 (1.00 pkts/flow) Confidence Unknown : 1 (flows) Confidence Match by port : 9 (flows) Confidence DPI : 23 (flows) -Num dissector calls: 375 (11.36 diss/flow) +Num dissector calls: 373 (11.30 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/30/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/websocket.pcap.out b/tests/cfgs/default/result/websocket.pcap.out index 9bf54c1a1..e6a9450ef 100644 --- a/tests/cfgs/default/result/websocket.pcap.out +++ b/tests/cfgs/default/result/websocket.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 1 (1.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 89 (89.00 diss/flow) +Num dissector calls: 88 (88.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/wechat.pcap.out b/tests/cfgs/default/result/wechat.pcap.out index c70a8d439..0832326af 100644 --- a/tests/cfgs/default/result/wechat.pcap.out +++ b/tests/cfgs/default/result/wechat.pcap.out @@ -6,7 +6,7 @@ DPI Packets (other): 7 (1.00 pkts/flow) Confidence Match by port : 24 (flows) Confidence DPI : 78 (flows) Confidence Match by IP : 1 (flows) -Num dissector calls: 344 (3.34 diss/flow) +Num dissector calls: 343 (3.33 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/75/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/whatsapp.pcap.out b/tests/cfgs/default/result/whatsapp.pcap.out index 40d712b2a..64504b645 100644 --- a/tests/cfgs/default/result/whatsapp.pcap.out +++ b/tests/cfgs/default/result/whatsapp.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 344 (4.00 pkts/flow) Confidence DPI : 86 (flows) -Num dissector calls: 14706 (171.00 diss/flow) +Num dissector calls: 14620 (170.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/whatsapp_login_call.pcap.out b/tests/cfgs/default/result/whatsapp_login_call.pcap.out index 313411bf1..48fb6c176 100644 --- a/tests/cfgs/default/result/whatsapp_login_call.pcap.out +++ b/tests/cfgs/default/result/whatsapp_login_call.pcap.out @@ -1,25 +1,25 @@ Guessed flow protos: 20 -DPI Packets (TCP): 93 (3.44 pkts/flow) +DPI Packets (TCP): 99 (3.67 pkts/flow) DPI Packets (UDP): 127 (4.38 pkts/flow) DPI Packets (other): 1 (1.00 pkts/flow) Confidence Match by port : 20 (flows) Confidence DPI (cache) : 2 (flows) Confidence DPI : 35 (flows) -Num dissector calls: 280 (4.91 diss/flow) +Num dissector calls: 374 (6.56 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/60/0 (insert/search/found) LRU cache stun: 46/4/4 (insert/search/found) LRU cache tls_cert: 0/0/0 (insert/search/found) LRU cache mining: 0/20/0 (insert/search/found) LRU cache msteams: 0/0/0 (insert/search/found) -LRU cache fpc_dns: 8/26/2 (insert/search/found) +LRU cache fpc_dns: 8/27/2 (insert/search/found) Automa host: 23/7 (search/found) Automa domain: 15/0 (search/found) Automa tls cert: 0/0 (search/found) Automa risk mask: 0/0 (search/found) Automa common alpns: 0/0 (search/found) -Patricia risk mask: 0/0 (search/found) +Patricia risk mask: 2/0 (search/found) Patricia risk mask IPv6: 0/0 (search/found) Patricia risk: 1/0 (search/found) Patricia risk IPv6: 2/0 (search/found) @@ -40,23 +40,22 @@ DHCP 10 3420 1 WhatsAppCall 803 102942 20 IMAPS 17 1998 1 ICMP 10 700 1 -TLS 56 3217 18 +TLS 78 9143 19 Dropbox 4 2176 1 Apple 38 17220 1 WhatsApp 180 24874 1 Spotify 3 258 1 AppleStore 85 28087 2 -ApplePush 22 5926 1 -Safe 196 50522 22 -Acceptable 1052 142326 34 +Safe 218 56448 23 +Acceptable 1030 136400 33 Fun 3 258 1 Email 17 1998 1 -Web 105 21163 22 +Web 127 27089 23 Chat 180 24874 1 VoIP 803 102942 20 -Cloud 26 8102 2 +Cloud 4 2176 1 Network 32 5682 8 SoftwareUpdate 85 28087 2 Music 3 258 1 @@ -72,7 +71,7 @@ JA Host Stats: 4 TCP 192.168.2.4:49204 <-> 17.173.66.102:443 [proto: 91.224/TLS.AppleStore][Stack: TLS.AppleStore][IP: 140/Apple][Encrypted][Confidence: DPI][FPC: 140/Apple, Confidence: IP address][DPI packets: 6][cat: SoftwareUpdate/19][Breed: Safe][29 pkts/11770 bytes <-> 24 pkts/6612 bytes][Goodput ratio: 86/80][34.28 sec][Hostname/SNI: p53-buy.itunes.apple.com][bytes ratio: 0.281 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 122/108 1665/1391 340/319][Pkt Len c2s/s2c min/avg/max/stddev: 54/54 406/276 1494/1002 489/348][Risk: ** Weak TLS Cipher **** TLS (probably) Not Carrying HTTPS **][Risk Score: 110][Risk Info: No ALPN / Cipher TLS_RSA_WITH_RC4_128_MD5][nDPI Fingerprint: 661c7f5ce1c06118226aded44dc2baf4][TCP Fingerprint: 2_64_65535_09b18f059744/macOS][TLSv1.2][JA4: t12d370500_07a749158664_d075105c1994][JA3S: c253ec3ad88e42f8da4032682892f9a0][Cipher: TLS_RSA_WITH_RC4_128_MD5][Plen Bins: 4,8,4,0,0,0,0,4,0,0,16,0,0,0,8,8,0,16,0,0,0,0,0,0,0,0,0,0,0,16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16,0,0] 5 TCP 192.168.2.4:49201 <-> 17.178.104.12:443 [proto: 91.140/TLS.Apple][Stack: TLS.Apple][IP: 140/Apple][Encrypted][Confidence: DPI][FPC: 140/Apple, Confidence: DNS][DPI packets: 7][cat: Web/5][Breed: Safe][21 pkts/7644 bytes <-> 17 pkts/9576 bytes][Goodput ratio: 85/90][32.84 sec][Hostname/SNI: query.ess.apple.com][bytes ratio: -0.112 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 1909/37 30435/294 7133/82][Pkt Len c2s/s2c min/avg/max/stddev: 54/54 364/563 1494/1494 553/634][Risk: ** Weak TLS Cipher **** TLS (probably) Not Carrying HTTPS **][Risk Score: 110][Risk Info: No ALPN / Cipher TLS_RSA_WITH_RC4_128_MD5][nDPI Fingerprint: 661c7f5ce1c06118226aded44dc2baf4][TCP Fingerprint: 2_64_65535_09b18f059744/macOS][TLSv1.2][JA4: t12d370500_07a749158664_d075105c1994][ServerNames: *.ess.apple.com][JA3S: c253ec3ad88e42f8da4032682892f9a0][Issuer: CN=Apple Server Authentication CA, OU=Certification Authority, O=Apple Inc., C=US][Subject: CN=*.ess.apple.com, OU=ISG Delivery Ops, O=Apple Inc., C=US][Certificate SHA-1: BD:E0:62:C3:F2:9D:09:5D:52:D4:AA:60:11:1B:36:1B:03:24:F1:9B][Validity: 2015-05-06 01:09:47 - 2016-06-04 01:09:47][Cipher: TLS_RSA_WITH_RC4_128_MD5][Plen Bins: 5,11,0,11,0,5,0,0,5,0,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,0,0,0,0,0,0,0,0,45,0,0] 6 TCP 192.168.2.4:49205 <-> 17.173.66.102:443 [proto: 91.224/TLS.AppleStore][Stack: TLS.AppleStore][IP: 140/Apple][Encrypted][Confidence: DPI][FPC: 140/Apple, Confidence: IP address][DPI packets: 6][cat: SoftwareUpdate/19][Breed: Safe][17 pkts/6166 bytes <-> 15 pkts/3539 bytes][Goodput ratio: 85/77][0.94 sec][Hostname/SNI: p53-buy.itunes.apple.com][bytes ratio: 0.271 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 36/42 225/228 76/81][Pkt Len c2s/s2c min/avg/max/stddev: 54/54 363/236 1494/1002 464/321][Risk: ** Weak TLS Cipher **** TLS (probably) Not Carrying HTTPS **][Risk Score: 110][Risk Info: No ALPN / Cipher TLS_RSA_WITH_RC4_128_MD5][nDPI Fingerprint: 661c7f5ce1c06118226aded44dc2baf4][TCP Fingerprint: 2_64_65535_09b18f059744/macOS][TLSv1.2][JA4: t12d370500_07a749158664_d075105c1994][JA3S: c253ec3ad88e42f8da4032682892f9a0][Cipher: TLS_RSA_WITH_RC4_128_MD5][Plen Bins: 6,13,6,0,0,0,0,6,0,0,13,0,0,0,6,6,0,13,0,0,0,0,0,0,0,0,0,0,0,13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,13,0,0] - 7 TCP 192.168.2.4:49193 <-> 17.110.229.14:5223 [proto: 238/ApplePush][Stack: ApplePush][IP: 140/Apple][Encrypted][Confidence: DPI][FPC: 238/ApplePush, Confidence: DPI][DPI packets: 1][cat: Cloud/13][Breed: Acceptable][11 pkts/4732 bytes <-> 11 pkts/1194 bytes][Goodput ratio: 85/39][125.45 sec][bytes ratio: 0.597 (Upload)][IAT c2s/s2c min/avg/max/stddev: 53/0 12860/12856 101116/101113 33359/33359][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 430/109 1506/300 467/83][PLAIN TEXT (yfV.nY)][Plen Bins: 0,9,36,0,0,0,9,9,0,0,0,0,0,0,9,0,0,0,0,0,0,0,0,0,0,0,0,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,0,0] + 7 TCP 192.168.2.4:49193 <-> 17.110.229.14:5223 [proto: 91/TLS][Stack: TLS][IP: 140/Apple][Encrypted][Confidence: DPI][FPC: 140/Apple, Confidence: IP address][DPI packets: 7][cat: Web/5][Breed: Safe][11 pkts/4732 bytes <-> 11 pkts/1194 bytes][Goodput ratio: 85/39][125.45 sec][bytes ratio: 0.597 (Upload)][IAT c2s/s2c min/avg/max/stddev: 53/0 12860/12856 101116/101113 33359/33359][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 430/109 1506/300 467/83][Risk: ** Known Proto on Non Std Port **][Risk Score: 50][Risk Info: Expected on port 443][Plen Bins: 0,9,36,0,0,0,9,9,0,0,0,0,0,0,9,0,0,0,0,0,0,0,0,0,0,0,0,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,0,0] 8 UDP 192.168.2.4:51518 <-> 31.13.93.48:3478 [proto: 338.45/SRTP.WhatsAppCall][Stack: STUN.WhatsAppCall.SRTP][IP: 119/Facebook][Stream Content: Audio][Encrypted][Confidence: DPI][FPC: 78.45/STUN.WhatsAppCall, Confidence: DPI][DPI packets: 7][cat: VoIP/10][Breed: Acceptable][12 pkts/2341 bytes <-> 12 pkts/2484 bytes][Goodput ratio: 78/80][29.18 sec][bytes ratio: -0.030 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 2192/2122 18656/18299 5822/5720][Pkt Len c2s/s2c min/avg/max/stddev: 64/68 195/207 331/358 98/107][Mapped IP/Port: 79.35.21.197:45156][Plen Bins: 20,8,8,12,0,4,0,20,12,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 9 UDP 0.0.0.0:68 -> 255.255.255.255:67 [proto: 18/DHCP][Stack: DHCP][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 18/DHCP, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][10 pkts/3420 bytes -> 0 pkts/0 bytes][Goodput ratio: 88/0][59.94 sec][Hostname/SNI: lucas-imac][bytes ratio: 1.000 (Upload)][IAT c2s/s2c min/avg/max/stddev: 1255/0 6660/0 9061/0 2880/0][Pkt Len c2s/s2c min/avg/max/stddev: 342/0 342/0 342/0 0/0][DHCP Fingerprint: 1,3,6,15,119,95,252,44,46][Plen Bins: 0,0,0,0,0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] 10 UDP 192.168.2.4:52794 <-> 31.13.84.48:3478 [proto: 78.45/STUN.WhatsAppCall][Stack: STUN.WhatsAppCall][IP: 119/Facebook][ClearText][Confidence: DPI][FPC: 78.45/STUN.WhatsAppCall, Confidence: DPI][DPI packets: 7][cat: VoIP/10][Breed: Acceptable][9 pkts/1842 bytes <-> 11 pkts/1151 bytes][Goodput ratio: 79/60][14.33 sec][bytes ratio: 0.231 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/1 1923/792 6986/6468 2906/2008][Pkt Len c2s/s2c min/avg/max/stddev: 68/64 205/105 331/128 82/23][Mapped IP/Port: 79.35.21.197:38779][Plen Bins: 15,10,40,15,0,0,10,0,5,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] diff --git a/tests/cfgs/default/result/whatsapp_login_chat.pcap.out b/tests/cfgs/default/result/whatsapp_login_chat.pcap.out index faad62262..a8caa5b5c 100644 --- a/tests/cfgs/default/result/whatsapp_login_chat.pcap.out +++ b/tests/cfgs/default/result/whatsapp_login_chat.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 17 (5.67 pkts/flow) DPI Packets (UDP): 7 (1.17 pkts/flow) Confidence DPI : 9 (flows) -Num dissector calls: 307 (34.11 diss/flow) +Num dissector calls: 305 (33.89 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/whatsapp_voice_and_message.pcap.out b/tests/cfgs/default/result/whatsapp_voice_and_message.pcap.out index 3816089dc..49920a69c 100644 --- a/tests/cfgs/default/result/whatsapp_voice_and_message.pcap.out +++ b/tests/cfgs/default/result/whatsapp_voice_and_message.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 20 (4.00 pkts/flow) DPI Packets (UDP): 42 (5.25 pkts/flow) Confidence DPI : 13 (flows) -Num dissector calls: 398 (30.62 diss/flow) +Num dissector calls: 393 (30.23 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 16/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/whois.pcapng.out b/tests/cfgs/default/result/whois.pcapng.out index 0d8e34c04..c6b7bcd04 100644 --- a/tests/cfgs/default/result/whois.pcapng.out +++ b/tests/cfgs/default/result/whois.pcapng.out @@ -3,7 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 16 (5.33 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 2 (flows) -Num dissector calls: 206 (68.67 diss/flow) +Num dissector calls: 205 (68.33 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/xiaomi.pcap.out b/tests/cfgs/default/result/xiaomi.pcap.out index b5d608e4c..8e5f39aa4 100644 --- a/tests/cfgs/default/result/xiaomi.pcap.out +++ b/tests/cfgs/default/result/xiaomi.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 19 (2.71 pkts/flow) Confidence DPI : 7 (flows) -Num dissector calls: 601 (85.86 diss/flow) +Num dissector calls: 595 (85.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/z3950.pcapng.out b/tests/cfgs/default/result/z3950.pcapng.out index f9e0ecebe..0b2f2c125 100644 --- a/tests/cfgs/default/result/z3950.pcapng.out +++ b/tests/cfgs/default/result/z3950.pcapng.out @@ -3,7 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 26 (13.00 pkts/flow) Confidence Match by port : 1 (flows) Confidence DPI : 1 (flows) -Num dissector calls: 460 (230.00 diss/flow) +Num dissector calls: 458 (229.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/default/result/zoom.pcap.out b/tests/cfgs/default/result/zoom.pcap.out index 9774d157e..ef76bcd60 100644 --- a/tests/cfgs/default/result/zoom.pcap.out +++ b/tests/cfgs/default/result/zoom.pcap.out @@ -5,7 +5,7 @@ DPI Packets (UDP): 43 (2.39 pkts/flow) DPI Packets (other): 2 (1.00 pkts/flow) Confidence Match by port : 2 (flows) Confidence DPI : 32 (flows) -Num dissector calls: 1038 (30.53 diss/flow) +Num dissector calls: 1036 (30.47 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/6/0 (insert/search/found) LRU cache stun: 6/0/0 (insert/search/found) diff --git a/tests/cfgs/disable_aggressiveness/result/ookla.pcap.out b/tests/cfgs/disable_aggressiveness/result/ookla.pcap.out index 42d3f8e3e..dca63d0a8 100644 --- a/tests/cfgs/disable_aggressiveness/result/ookla.pcap.out +++ b/tests/cfgs/disable_aggressiveness/result/ookla.pcap.out @@ -3,7 +3,7 @@ Guessed flow protos: 1 DPI Packets (TCP): 40 (6.67 pkts/flow) Confidence DPI (partial cache): 1 (flows) Confidence DPI : 5 (flows) -Num dissector calls: 578 (96.33 diss/flow) +Num dissector calls: 575 (95.83 diss/flow) LRU cache ookla: 4/1/1 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/disable_protocols/result/soap.pcap.out b/tests/cfgs/disable_protocols/result/soap.pcap.out index 70d671f52..7113ea9a0 100644 --- a/tests/cfgs/disable_protocols/result/soap.pcap.out +++ b/tests/cfgs/disable_protocols/result/soap.pcap.out @@ -3,7 +3,7 @@ Guessed flow protos: 2 DPI Packets (TCP): 20 (6.67 pkts/flow) Confidence Match by port : 2 (flows) Confidence DPI : 1 (flows) -Num dissector calls: 446 (148.67 diss/flow) +Num dissector calls: 444 (148.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/6/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/enable_payload_stat/result/1kxun.pcap.out b/tests/cfgs/enable_payload_stat/result/1kxun.pcap.out index 321373643..b97341905 100644 --- a/tests/cfgs/enable_payload_stat/result/1kxun.pcap.out +++ b/tests/cfgs/enable_payload_stat/result/1kxun.pcap.out @@ -5,7 +5,7 @@ DPI Packets (UDP): 120 (1.21 pkts/flow) Confidence Unknown : 9 (flows) Confidence Match by port : 6 (flows) Confidence DPI : 182 (flows) -Num dissector calls: 4512 (22.90 diss/flow) +Num dissector calls: 4509 (22.89 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/45/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/fpc/result/1kxun.pcap.out b/tests/cfgs/fpc/result/1kxun.pcap.out index 6f15cb288..d476ae5f1 100644 --- a/tests/cfgs/fpc/result/1kxun.pcap.out +++ b/tests/cfgs/fpc/result/1kxun.pcap.out @@ -9,7 +9,7 @@ FPC Confidence Unknown : 20 (flows) FPC Confidence IP address : 4 (flows) FPC Confidence DNS : 13 (flows) FPC Confidence DPI : 160 (flows) -Num dissector calls: 4512 (22.90 diss/flow) +Num dissector calls: 4509 (22.89 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/45/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/fpc_disabled/result/teams.pcap.out b/tests/cfgs/fpc_disabled/result/teams.pcap.out index 3e7f88a47..9700e663d 100644 --- a/tests/cfgs/fpc_disabled/result/teams.pcap.out +++ b/tests/cfgs/fpc_disabled/result/teams.pcap.out @@ -7,7 +7,7 @@ Confidence Unknown : 1 (flows) Confidence Match by port : 2 (flows) Confidence DPI (partial) : 4 (flows) Confidence DPI : 76 (flows) -Num dissector calls: 525 (6.33 diss/flow) +Num dissector calls: 524 (6.31 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 30/0/0 (insert/search/found) diff --git a/tests/cfgs/guess_ip_before_port_enabled/result/1kxun.pcap.out b/tests/cfgs/guess_ip_before_port_enabled/result/1kxun.pcap.out index cf5135f3c..6d0937d4e 100644 --- a/tests/cfgs/guess_ip_before_port_enabled/result/1kxun.pcap.out +++ b/tests/cfgs/guess_ip_before_port_enabled/result/1kxun.pcap.out @@ -6,7 +6,7 @@ Confidence Unknown : 9 (flows) Confidence Match by port : 4 (flows) Confidence DPI : 182 (flows) Confidence Match by IP : 2 (flows) -Num dissector calls: 4512 (22.90 diss/flow) +Num dissector calls: 4509 (22.89 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/45/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/ip_lists_disable/result/1kxun.pcap.out b/tests/cfgs/ip_lists_disable/result/1kxun.pcap.out index ee7295523..175b2f422 100644 --- a/tests/cfgs/ip_lists_disable/result/1kxun.pcap.out +++ b/tests/cfgs/ip_lists_disable/result/1kxun.pcap.out @@ -5,7 +5,7 @@ DPI Packets (UDP): 120 (1.21 pkts/flow) Confidence Unknown : 9 (flows) Confidence Match by port : 6 (flows) Confidence DPI : 182 (flows) -Num dissector calls: 4512 (22.90 diss/flow) +Num dissector calls: 4509 (22.89 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/45/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/monitoring/result/s7comm.pcap.out b/tests/cfgs/monitoring/result/s7comm.pcap.out index 3e50b2ed6..0a0258f7e 100644 --- a/tests/cfgs/monitoring/result/s7comm.pcap.out +++ b/tests/cfgs/monitoring/result/s7comm.pcap.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 193 (48.25 pkts/flow) Confidence DPI : 4 (flows) -Num dissector calls: 661 (165.25 diss/flow) +Num dissector calls: 657 (164.25 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/monitoring/result/teams.pcap.out b/tests/cfgs/monitoring/result/teams.pcap.out index b84614d8f..03ef47593 100644 --- a/tests/cfgs/monitoring/result/teams.pcap.out +++ b/tests/cfgs/monitoring/result/teams.pcap.out @@ -7,7 +7,7 @@ Confidence Unknown : 1 (flows) Confidence Match by port : 2 (flows) Confidence DPI (partial) : 4 (flows) Confidence DPI : 76 (flows) -Num dissector calls: 525 (6.33 diss/flow) +Num dissector calls: 524 (6.31 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 32/0/0 (insert/search/found) diff --git a/tests/cfgs/monitoring/result/telegram_videocall.pcapng.out b/tests/cfgs/monitoring/result/telegram_videocall.pcapng.out index 466f33d0b..dc7896def 100644 --- a/tests/cfgs/monitoring/result/telegram_videocall.pcapng.out +++ b/tests/cfgs/monitoring/result/telegram_videocall.pcapng.out @@ -7,7 +7,7 @@ Confidence Match by port : 1 (flows) Confidence DPI (cache) : 10 (flows) Confidence DPI : 15 (flows) Confidence Match by IP : 8 (flows) -Num dissector calls: 752 (22.12 diss/flow) +Num dissector calls: 751 (22.09 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/6/0 (insert/search/found) LRU cache stun: 46/49/10 (insert/search/found) diff --git a/tests/cfgs/ndpireader_conf_file/result/openvpn_obfuscated.pcapng.out b/tests/cfgs/ndpireader_conf_file/result/openvpn_obfuscated.pcapng.out index 99b076b69..443daa575 100644 --- a/tests/cfgs/ndpireader_conf_file/result/openvpn_obfuscated.pcapng.out +++ b/tests/cfgs/ndpireader_conf_file/result/openvpn_obfuscated.pcapng.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 59 (29.50 pkts/flow) DPI Packets (UDP): 10 (10.00 pkts/flow) Confidence DPI (aggressive) : 3 (flows) -Num dissector calls: 744 (248.00 diss/flow) +Num dissector calls: 742 (247.33 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/ndpireader_conf_file/result/shadowsocks.pcap.out b/tests/cfgs/ndpireader_conf_file/result/shadowsocks.pcap.out index 0fa52c9d5..763de8bf1 100644 --- a/tests/cfgs/ndpireader_conf_file/result/shadowsocks.pcap.out +++ b/tests/cfgs/ndpireader_conf_file/result/shadowsocks.pcap.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 21 (10.50 pkts/flow) Confidence Unknown : 1 (flows) Confidence DPI : 1 (flows) -Num dissector calls: 383 (191.50 diss/flow) +Num dissector calls: 381 (190.50 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/openvpn_heuristic_enabled/result/openvpn_obfuscated.pcapng.out b/tests/cfgs/openvpn_heuristic_enabled/result/openvpn_obfuscated.pcapng.out index 5cbe581a6..430f52068 100644 --- a/tests/cfgs/openvpn_heuristic_enabled/result/openvpn_obfuscated.pcapng.out +++ b/tests/cfgs/openvpn_heuristic_enabled/result/openvpn_obfuscated.pcapng.out @@ -1,7 +1,7 @@ DPI Packets (TCP): 59 (29.50 pkts/flow) DPI Packets (UDP): 10 (10.00 pkts/flow) Confidence DPI (aggressive) : 3 (flows) -Num dissector calls: 729 (243.00 diss/flow) +Num dissector calls: 727 (242.33 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/9/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/plugins/result/plugin.pcapng.out b/tests/cfgs/plugins/result/plugin.pcapng.out index 92d739958..da4bd6fbb 100644 --- a/tests/cfgs/plugins/result/plugin.pcapng.out +++ b/tests/cfgs/plugins/result/plugin.pcapng.out @@ -1,6 +1,6 @@ DPI Packets (TCP): 4 (4.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 162 (162.00 diss/flow) +Num dissector calls: 161 (161.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/stun_only_peer_address_enabled/result/telegram_videocall.pcapng.out b/tests/cfgs/stun_only_peer_address_enabled/result/telegram_videocall.pcapng.out index 3ad2369d8..9577ff351 100644 --- a/tests/cfgs/stun_only_peer_address_enabled/result/telegram_videocall.pcapng.out +++ b/tests/cfgs/stun_only_peer_address_enabled/result/telegram_videocall.pcapng.out @@ -7,7 +7,7 @@ Confidence Match by port : 1 (flows) Confidence DPI (cache) : 10 (flows) Confidence DPI : 15 (flows) Confidence Match by IP : 8 (flows) -Num dissector calls: 752 (22.12 diss/flow) +Num dissector calls: 751 (22.09 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/6/0 (insert/search/found) LRU cache stun: 38/49/10 (insert/search/found) diff --git a/tests/cfgs/tls_heuristics_enabled/result/tls_heur__shadowsocks-tcp.pcapng.out b/tests/cfgs/tls_heuristics_enabled/result/tls_heur__shadowsocks-tcp.pcapng.out index 1ba8b13a5..bde62ee45 100644 --- a/tests/cfgs/tls_heuristics_enabled/result/tls_heur__shadowsocks-tcp.pcapng.out +++ b/tests/cfgs/tls_heuristics_enabled/result/tls_heur__shadowsocks-tcp.pcapng.out @@ -2,7 +2,7 @@ DPI Packets (TCP): 27 (9.00 pkts/flow) DPI Packets (UDP): 3 (3.00 pkts/flow) Confidence DPI : 3 (flows) Confidence DPI (aggressive) : 1 (flows) -Num dissector calls: 407 (101.75 diss/flow) +Num dissector calls: 405 (101.25 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/tls_heuristics_enabled/result/tls_heur__trojan-tcp-tls.pcapng.out b/tests/cfgs/tls_heuristics_enabled/result/tls_heur__trojan-tcp-tls.pcapng.out index f3eb6f32f..aa9da43f8 100644 --- a/tests/cfgs/tls_heuristics_enabled/result/tls_heur__trojan-tcp-tls.pcapng.out +++ b/tests/cfgs/tls_heuristics_enabled/result/tls_heur__trojan-tcp-tls.pcapng.out @@ -2,7 +2,7 @@ DPI Packets (TCP): 35 (11.67 pkts/flow) DPI Packets (UDP): 15 (2.14 pkts/flow) Confidence DPI : 9 (flows) Confidence DPI (aggressive) : 1 (flows) -Num dissector calls: 173 (17.30 diss/flow) +Num dissector calls: 172 (17.20 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/tls_heuristics_enabled/result/tls_heur__vmess-tcp-tls.pcapng.out b/tests/cfgs/tls_heuristics_enabled/result/tls_heur__vmess-tcp-tls.pcapng.out index 2c7278bf0..4fbca2d56 100644 --- a/tests/cfgs/tls_heuristics_enabled/result/tls_heur__vmess-tcp-tls.pcapng.out +++ b/tests/cfgs/tls_heuristics_enabled/result/tls_heur__vmess-tcp-tls.pcapng.out @@ -2,7 +2,7 @@ DPI Packets (TCP): 36 (12.00 pkts/flow) DPI Packets (UDP): 15 (2.14 pkts/flow) Confidence DPI : 9 (flows) Confidence DPI (aggressive) : 1 (flows) -Num dissector calls: 173 (17.30 diss/flow) +Num dissector calls: 172 (17.20 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/tls_heuristics_enabled/result/tls_heur__vmess-tcp.pcapng.out b/tests/cfgs/tls_heuristics_enabled/result/tls_heur__vmess-tcp.pcapng.out index f95e91e48..f896c17e5 100644 --- a/tests/cfgs/tls_heuristics_enabled/result/tls_heur__vmess-tcp.pcapng.out +++ b/tests/cfgs/tls_heuristics_enabled/result/tls_heur__vmess-tcp.pcapng.out @@ -2,7 +2,7 @@ DPI Packets (TCP): 35 (11.67 pkts/flow) DPI Packets (UDP): 3 (3.00 pkts/flow) Confidence DPI : 3 (flows) Confidence DPI (aggressive) : 1 (flows) -Num dissector calls: 418 (104.50 diss/flow) +Num dissector calls: 416 (104.00 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/3/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/tls_heuristics_enabled/result/tls_heur__vmess-websocket.pcapng.out b/tests/cfgs/tls_heuristics_enabled/result/tls_heur__vmess-websocket.pcapng.out index 652e98d69..ced9de97b 100644 --- a/tests/cfgs/tls_heuristics_enabled/result/tls_heur__vmess-websocket.pcapng.out +++ b/tests/cfgs/tls_heuristics_enabled/result/tls_heur__vmess-websocket.pcapng.out @@ -2,7 +2,7 @@ DPI Packets (TCP): 31 (10.33 pkts/flow) DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 3 (flows) Confidence DPI (aggressive) : 1 (flows) -Num dissector calls: 182 (45.50 diss/flow) +Num dissector calls: 181 (45.25 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/0/0 (insert/search/found) LRU cache stun: 0/0/0 (insert/search/found) diff --git a/tests/cfgs/zoom_extra_dissection/result/zoom.pcap.out b/tests/cfgs/zoom_extra_dissection/result/zoom.pcap.out index eec228443..52cdafdfb 100644 --- a/tests/cfgs/zoom_extra_dissection/result/zoom.pcap.out +++ b/tests/cfgs/zoom_extra_dissection/result/zoom.pcap.out @@ -5,7 +5,7 @@ DPI Packets (UDP): 301 (16.72 pkts/flow) DPI Packets (other): 2 (1.00 pkts/flow) Confidence Match by port : 2 (flows) Confidence DPI : 32 (flows) -Num dissector calls: 1038 (30.53 diss/flow) +Num dissector calls: 1036 (30.47 diss/flow) LRU cache ookla: 0/0/0 (insert/search/found) LRU cache bittorrent: 0/6/0 (insert/search/found) LRU cache stun: 6/0/0 (insert/search/found) diff --git a/windows/nDPI.vcxproj b/windows/nDPI.vcxproj index 461b4c265..7e783f37d 100644 --- a/windows/nDPI.vcxproj +++ b/windows/nDPI.vcxproj @@ -149,7 +149,6 @@ - diff --git a/windows/nDPI.vcxproj.filters b/windows/nDPI.vcxproj.filters index fbd9ddb41..368c62c74 100644 --- a/windows/nDPI.vcxproj.filters +++ b/windows/nDPI.vcxproj.filters @@ -181,7 +181,6 @@ -