| .. |
|
1kxun.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
4in4tunnel.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
4in6tunnel.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
6in4tunnel.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
6in6tunnel.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
443-chrome.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
443-curl.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
443-firefox.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
443-git.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
443-opvn.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
443-safari.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
ajp.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
amqp.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
android.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
anyconnect-vpn.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
anydesk.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
badpackets.pcap.out
|
Added badpackets.pcap
|
2020-03-23 10:06:16 +01:00 |
|
BGP_Cisco_hdlc_slarp.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
BGP_redist.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
bitcoin.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
bittorrent.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
bittorrent_ip.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
bittorrent_utp.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
bt_search.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
capwap.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
check_mk_new.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
coap_mqtt.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
diameter.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
dnp3.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
dns_doh.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
dns_dot.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
dns_exfiltration.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
dnscrypt-v2-doh.pcap.out
|
Added dnscrypt-v2-doh resolver test pcaps.
|
2020-09-07 20:22:52 +02:00 |
|
dnscrypt.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
dos_win98_smb_netbeui.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
drda_db2.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
dropbox.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
dtls.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
EAQ.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
encrypted_sni.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
ethereum.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
exe_download.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
exe_download_as_png.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
facebook.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
fbzero-missing-lengthcheck.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
fix.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
ftp.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
ftp_failed.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
fuzz-2006-06-26-2594.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
fuzz-2006-09-29-28586.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
fuzz-2020-02-16-11740.pcap.out
|
Fixed false positive detection for Skype.SkypeCall (affects at least Cisco HSRP and RADIUS).
|
2020-09-02 07:29:33 +02:00 |
|
git.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
google_ssl.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
googledns_android10.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
gquic.pcap.out
|
Added som GQUIC and IETF QUIC test pcaps
|
2020-08-22 16:47:05 +02:00 |
|
h323-overflow.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
hangout.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
http-crash-content-disposition.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
http-lines-split.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
http_ipv6.pcap.out
|
Major rework of QUIC dissector
|
2020-08-21 22:04:55 +02:00 |
|
iec60780-5-104.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
imaps.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
instagram.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
iphone.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
ipv6_in_gtp.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
ja3_lots_of_cipher_suites.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
ja3_lots_of_cipher_suites_2_anon.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
KakaoTalk_chat.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
KakaoTalk_talk.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
kerberos.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
malformed_icmp.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
malware.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
modbus.pcap.out
|
Creared IoT-Scada category
|
2020-08-23 13:32:36 +02:00 |
|
monero.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
mpeg.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
mpegts.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
mssql_tds.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
mysql-8.pcap.out
|
MySQL8 update
|
2020-08-21 07:17:34 +02:00 |
|
nats.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
nest_log_sink.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
netbios.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
netbios_wildcard_dns_query.pcap.out
|
Added the ability do identigy as DGA those host/domain names with too many consucutive repeated characters
|
2020-08-21 18:41:35 +02:00 |
|
netflix.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
netflow-fritz.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
netflowv9.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
nintendo.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
NTPv2.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
NTPv3.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
NTPv4.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
ocs.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
ookla.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
openvpn.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
Oscar.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
pps.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
ps_vue.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
quic-23.pcap.out
|
Add sub-classification for GQUIC >= Q050 and (IETF-)QUIC
|
2020-08-21 22:04:55 +02:00 |
|
quic-24.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
quic-27.pcap.out
|
Add sub-classification for GQUIC >= Q050 and (IETF-)QUIC
|
2020-08-21 22:04:55 +02:00 |
|
quic-28.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
quic-29.pcap.out
|
QUIC: minor fixes
|
2020-08-24 13:53:36 +02:00 |
|
quic-mvfst-22.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
quic-mvfst-22_decryption_error.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
quic-mvfst-27.pcap.out
|
Add sub-classification for GQUIC >= Q050 and (IETF-)QUIC
|
2020-08-21 22:04:55 +02:00 |
|
quic.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
quic046.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
quic_q39.pcap.out
|
Major rework of QUIC dissector
|
2020-08-21 22:04:55 +02:00 |
|
quic_q43.pcap.out
|
Major rework of QUIC dissector
|
2020-08-21 22:04:55 +02:00 |
|
quic_q46.pcap.out
|
Major rework of QUIC dissector
|
2020-08-21 22:04:55 +02:00 |
|
quic_q46_b.pcap.out
|
Major rework of QUIC dissector
|
2020-08-21 22:04:55 +02:00 |
|
quic_q50.pcap.out
|
Add sub-classification for GQUIC >= Q050 and (IETF-)QUIC
|
2020-08-21 22:04:55 +02:00 |
|
quic_t50.pcap.out
|
QUIC: add support for GQUIC T050 and T051
|
2020-08-30 20:51:33 +02:00 |
|
quic_t51.pcap.out
|
QUIC: add support for GQUIC T050 and T051
|
2020-08-30 20:51:33 +02:00 |
|
quickplay.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
rdp.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
rx.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
s7comm.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
selfsigned.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
signal.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
sip.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
skype-conference-call.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
skype.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
skype_no_unknown.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
smb_deletefile.pcap.out
|
Fixes invalid detection on traffic on non standard ports
|
2020-08-12 11:08:28 +02:00 |
|
smbv1.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
smpp_in_general.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
snapchat.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
ssdp-m-search.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
ssh.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
starcraft_battle.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
steam.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
teams.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
telegram.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
teredo.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
tinc.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
tls-esni-fuzzed.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
tls-rdn-extract.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
tls_esni_sni_both.pcap.out
|
Suspicious ESNI usage: add a comment and a pcap example
|
2020-08-06 10:29:35 +02:00 |
|
tls_long_cert.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
tls_verylong_certificate.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
tor.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
ubntac2.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
upnp.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
viber.pcap.out
|
Major rework of QUIC dissector
|
2020-08-21 22:04:55 +02:00 |
|
vnc.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
wa_video.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
wa_voice.pcap.out
|
Fixed partial TLS dissection
|
2020-07-30 18:30:07 +02:00 |
|
waze.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
WebattackRCE.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
WebattackSQLinj.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
WebattackXSS.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
webex.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
websocket.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
wechat.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
weibo.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
|
whatsapp_login_call.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
whatsapp_login_chat.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
whatsapp_voice_and_message.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
whatsappfiles.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
wireguard.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
youtube_quic.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
youtubeupload.pcap.out
|
Fixed false positive in suspicous user agent
|
2020-08-30 12:25:15 +02:00 |
|
zabbix.pcap.out
|
Changed due to bin size extension
|
2020-07-30 00:06:46 +02:00 |
|
zcash.pcap.out
|
Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are not condidered safe/secure
|
2020-08-30 20:48:58 +02:00 |
|
zoom.pcap.out
|
Stddev calculation changes
|
2020-08-30 12:48:32 +02:00 |
