🦄 refactor(decoder glimpse detector): rename to lpi plugin
This commit is contained in:
yangwei
58
test/lpi_plugin/CMakeLists.txt
Normal file
58
test/lpi_plugin/CMakeLists.txt
Normal file
@@ -0,0 +1,58 @@
|
||||
add_executable(gtest_lpi gtest_lpi_main.cpp gtest_lpi_plugin.cpp)
|
||||
|
||||
target_include_directories(gtest_lpi PRIVATE ${CMAKE_SOURCE_DIR}/deps/)
|
||||
target_include_directories(gtest_lpi PRIVATE ${CMAKE_SOURCE_DIR}/decoders/lpi)
|
||||
|
||||
target_link_libraries(
|
||||
gtest_lpi PRIVATE stellar_devel cjson-static
|
||||
dl "-rdynamic"
|
||||
gtest gmock
|
||||
)
|
||||
|
||||
target_link_libraries(gtest_lpi PRIVATE -Wl,--whole-archive lpi -Wl,--no-whole-archive)
|
||||
|
||||
set(TEST_NAME "LPI_TEST")
|
||||
set(TEST_MAIN ${CMAKE_CURRENT_BINARY_DIR}/gtest_lpi)
|
||||
|
||||
add_test(NAME ${TEST_NAME}.setup COMMAND sh -c "
|
||||
mkdir -p ${CMAKE_CURRENT_BINARY_DIR}/conf &&
|
||||
mkdir -p ${CMAKE_CURRENT_BINARY_DIR}/plugin &&
|
||||
mkdir -p ${CMAKE_CURRENT_BINARY_DIR}/log &&
|
||||
mkdir -p ${CMAKE_CURRENT_BINARY_DIR}/tsgconf &&
|
||||
cp ${CMAKE_SOURCE_DIR}/conf/stellar.toml ${CMAKE_CURRENT_BINARY_DIR}/conf/ &&
|
||||
cp ${CMAKE_CURRENT_SOURCE_DIR}/test_config/spec.toml ${CMAKE_CURRENT_BINARY_DIR}/plugin/ &&
|
||||
cp ${CMAKE_SOURCE_DIR}/conf/log.toml ${CMAKE_CURRENT_BINARY_DIR}/conf/ &&
|
||||
cp ${CMAKE_CURRENT_SOURCE_DIR}/test_config/tsg_l7_protocol.conf ${CMAKE_CURRENT_BINARY_DIR}/tsgconf/ &&
|
||||
tomlq -t -i '.packet_io.dumpfile_path=\"-\"' ${CMAKE_CURRENT_BINARY_DIR}/conf/stellar.toml &&
|
||||
tomlq -t -i '.packet_io.mode=\"dumpfilelist\"' ${CMAKE_CURRENT_BINARY_DIR}/conf/stellar.toml
|
||||
")
|
||||
|
||||
|
||||
set_tests_properties(${TEST_NAME}.setup
|
||||
PROPERTIES FIXTURES_SETUP ${TEST_NAME}.setup)
|
||||
|
||||
add_test(NAME ${TEST_NAME}.app
|
||||
COMMAND sh -c "find ${CMAKE_CURRENT_SOURCE_DIR}/test_pcap/app_pcap -type f | sort -V | ${TEST_MAIN} ${CMAKE_CURRENT_SOURCE_DIR}/test_expect/app_pcap.json")
|
||||
|
||||
add_test(NAME ${TEST_NAME}.dns
|
||||
COMMAND sh -c "find ${CMAKE_CURRENT_SOURCE_DIR}/test_pcap/dns_pcap -type f | sort -V | ${TEST_MAIN} ${CMAKE_CURRENT_SOURCE_DIR}/test_expect/dns_pcap.json")
|
||||
|
||||
add_test(NAME ${TEST_NAME}.mixed
|
||||
COMMAND sh -c "find ${CMAKE_CURRENT_SOURCE_DIR}/test_pcap/mixed_pcap -type f | sort -V |${TEST_MAIN} ${CMAKE_CURRENT_SOURCE_DIR}/test_expect/mixed_pcap.json")
|
||||
|
||||
add_test(NAME ${TEST_NAME}.openvpn
|
||||
COMMAND sh -c "find ${CMAKE_CURRENT_SOURCE_DIR}/test_pcap/openvpn_pcap -type f | sort -V |${TEST_MAIN} ${CMAKE_CURRENT_SOURCE_DIR}/test_expect/openvpn_pcap.json")
|
||||
|
||||
add_test(NAME ${TEST_NAME}.ppp
|
||||
COMMAND sh -c "find ${CMAKE_CURRENT_SOURCE_DIR}/test_pcap/ppp_pcap -type f | sort -V | ${TEST_MAIN} ${CMAKE_CURRENT_SOURCE_DIR}/test_expect/ppp_pcap.json")
|
||||
|
||||
add_test(NAME ${TEST_NAME}.socks
|
||||
COMMAND sh -c "find ${CMAKE_CURRENT_SOURCE_DIR}/test_pcap/socks_pcap -type f | sort -V | ${TEST_MAIN} ${CMAKE_CURRENT_SOURCE_DIR}/test_expect/socks_pcap.json")
|
||||
|
||||
set_tests_properties(${TEST_NAME}.app
|
||||
${TEST_NAME}.dns
|
||||
${TEST_NAME}.mixed
|
||||
${TEST_NAME}.openvpn
|
||||
${TEST_NAME}.ppp
|
||||
${TEST_NAME}.socks
|
||||
PROPERTIES FIXTURES_REQUIRED ${TEST_NAME}.setup)
|
||||
164
test/lpi_plugin/gtest_lpi_main.cpp
Normal file
164
test/lpi_plugin/gtest_lpi_main.cpp
Normal file
@@ -0,0 +1,164 @@
|
||||
/*
|
||||
* author:yangwei
|
||||
* create time:2021-8-21
|
||||
*
|
||||
*/
|
||||
|
||||
#pragma GCC diagnostic ignored "-Wunused-parameter"
|
||||
|
||||
#include <stdio.h>
|
||||
#include <time.h>
|
||||
#include <unistd.h>
|
||||
#include <assert.h>
|
||||
|
||||
#include <gtest/gtest.h>
|
||||
|
||||
#include "stellar/stellar.h"
|
||||
#include "stellar/session.h"
|
||||
#include "stellar/stellar_mq.h"
|
||||
|
||||
#include "cjson/cJSON.h"
|
||||
|
||||
|
||||
struct gtest_json_result
|
||||
{
|
||||
cJSON *test_json_root;
|
||||
cJSON *expect_json_root;
|
||||
int result_count;
|
||||
};
|
||||
|
||||
static struct gtest_json_result *gtest_result_new(const char *expect_json_path)
|
||||
{
|
||||
struct gtest_json_result *para = (struct gtest_json_result *)calloc(1, sizeof(struct gtest_json_result));
|
||||
para->test_json_root = cJSON_CreateArray();
|
||||
|
||||
FILE *file = fopen(expect_json_path, "rb");
|
||||
if(file)
|
||||
{
|
||||
fseek(file, 0, SEEK_END);
|
||||
long filesize = ftell(file);
|
||||
rewind(file);
|
||||
char *buffer = (char *)calloc(filesize + 1, 1);
|
||||
fread(buffer, 1, filesize, file);
|
||||
|
||||
para->expect_json_root=cJSON_Parse(buffer);
|
||||
|
||||
free(buffer);
|
||||
fclose(file);
|
||||
}
|
||||
para->result_count=1;//count start from 1
|
||||
return para;
|
||||
}
|
||||
|
||||
static int gtest_result_compare(struct gtest_json_result *para)
|
||||
{
|
||||
if(cJSON_GetArraySize(para->test_json_root)!=cJSON_GetArraySize(para->expect_json_root))
|
||||
{
|
||||
char *load_json_str = cJSON_Print(para->expect_json_root);
|
||||
printf("LOAD Raw:\n%s\n", load_json_str);
|
||||
free(load_json_str);
|
||||
char *result_json_str = cJSON_Print(para->test_json_root);
|
||||
printf("TEST Raw:\n%s\n", result_json_str);
|
||||
free(result_json_str);
|
||||
return -1;
|
||||
}
|
||||
int compare_ret = cJSON_Compare(para->expect_json_root, para->test_json_root, 0);
|
||||
if (compare_ret != 1)
|
||||
{
|
||||
char *load_json_str = cJSON_Print(para->expect_json_root);
|
||||
printf("LOAD Raw:\n%s\n", load_json_str);
|
||||
free(load_json_str);
|
||||
char *result_json_str = cJSON_Print(para->test_json_root);
|
||||
printf("TEST Raw:\n%s\n", result_json_str);
|
||||
free(result_json_str);
|
||||
|
||||
cJSON *t_load = para->expect_json_root->child, *t_test = para->test_json_root->child;
|
||||
while (t_load != NULL)
|
||||
{
|
||||
// print first diff item, then return;
|
||||
if(1 != cJSON_Compare(t_load, t_test, 0))
|
||||
{
|
||||
load_json_str = cJSON_Print(t_load);
|
||||
printf("LOAD Diff:\n%s\n", load_json_str);
|
||||
free(load_json_str);
|
||||
result_json_str = cJSON_Print(t_test);
|
||||
printf("TEST Diff:\n%s\n", result_json_str);
|
||||
free(result_json_str);
|
||||
return -1;
|
||||
}
|
||||
t_load = t_load->next;
|
||||
t_test = t_test->next;
|
||||
|
||||
}
|
||||
}
|
||||
return compare_ret;
|
||||
}
|
||||
|
||||
static void gtest_result_free(struct gtest_json_result *para)
|
||||
{
|
||||
if(para)
|
||||
{
|
||||
if(para->test_json_root)cJSON_Delete(para->test_json_root);
|
||||
if(para->expect_json_root)cJSON_Delete(para->expect_json_root);
|
||||
free(para);
|
||||
}
|
||||
return;
|
||||
}
|
||||
|
||||
void gtest_on_session_msg_expect_json(struct session *sess, int topic_id, const void *msg, void *per_session_ctx,
|
||||
void *plugin_env)
|
||||
{
|
||||
struct gtest_json_result *g_test_para = (struct gtest_json_result *)plugin_env;
|
||||
|
||||
cJSON *per_session_json = cJSON_Parse((const char *)msg);
|
||||
|
||||
if (g_test_para->test_json_root)
|
||||
{
|
||||
char result_name[128] = "";
|
||||
sprintf(result_name, "APP_PROTO_IDENTIFY_RESULT_%d", g_test_para->result_count);
|
||||
cJSON_AddStringToObject(per_session_json, "name", result_name);
|
||||
cJSON_AddItemToArray(g_test_para->test_json_root, per_session_json);
|
||||
}
|
||||
g_test_para->result_count += 1;
|
||||
}
|
||||
|
||||
/**********************************************
|
||||
* GTEST MAIN *
|
||||
**********************************************/
|
||||
|
||||
int main(int argc, char ** argv)
|
||||
{
|
||||
::testing::InitGoogleTest(&argc, argv);
|
||||
|
||||
EXPECT_EQ(argc, 2);
|
||||
|
||||
if(argc != 2)
|
||||
{
|
||||
printf("Invalid Argument!!!\n Usage: ./[gtest_main] [/path/to/expect_json]\n");
|
||||
return -1;
|
||||
}
|
||||
|
||||
char *expect_json_path=argv[1];
|
||||
struct gtest_json_result *g_test_para = gtest_result_new(expect_json_path);
|
||||
|
||||
struct stellar *st=stellar_new("./conf/stellar.toml", "./plugin/spec.toml", "./conf/log.toml");
|
||||
EXPECT_TRUE(st!=NULL);
|
||||
|
||||
int plugin_id=stellar_session_plugin_register(st, NULL, NULL, g_test_para);
|
||||
EXPECT_TRUE(plugin_id>=0);
|
||||
|
||||
int expect_json_topic_id = stellar_mq_get_topic_id(st, "EXPECT_JSON");
|
||||
EXPECT_TRUE(expect_json_topic_id>=0);
|
||||
|
||||
stellar_session_mq_subscribe(st, expect_json_topic_id, gtest_on_session_msg_expect_json, plugin_id);
|
||||
|
||||
stellar_run(st);
|
||||
stellar_free(st);
|
||||
|
||||
EXPECT_TRUE(g_test_para->expect_json_root != NULL && g_test_para->test_json_root != NULL);
|
||||
EXPECT_EQ(gtest_result_compare(g_test_para), 1);
|
||||
|
||||
gtest_result_free(g_test_para);
|
||||
|
||||
return ::testing::Test::HasFailure() ? 1 : 0;
|
||||
}
|
||||
188
test/lpi_plugin/gtest_lpi_plugin.cpp
Normal file
188
test/lpi_plugin/gtest_lpi_plugin.cpp
Normal file
@@ -0,0 +1,188 @@
|
||||
#pragma GCC diagnostic ignored "-Wunused-parameter"
|
||||
|
||||
#include <stdio.h>
|
||||
#include <time.h>
|
||||
#include <unistd.h>
|
||||
#include <assert.h>
|
||||
|
||||
#include "lpi_plugin.h"
|
||||
|
||||
#include "stellar/stellar.h"
|
||||
#include "stellar/session.h"
|
||||
#include "stellar/stellar_exdata.h"
|
||||
#include "stellar/stellar_mq.h"
|
||||
|
||||
#include "cjson/cJSON.h"
|
||||
|
||||
|
||||
#define MAX_APP_ID_VALUE 10000
|
||||
struct lpi_test_plugin_env
|
||||
{
|
||||
int test_exdata_idx;
|
||||
int l7_exdata_idx;
|
||||
int test_app_plugin_id;
|
||||
int expect_json_topic_id;
|
||||
struct stellar *st;
|
||||
char *g_proto_id2name[MAX_APP_ID_VALUE];
|
||||
};
|
||||
|
||||
static int load_l7_protocol_mapper(const char *filename, struct lpi_test_plugin_env *env)
|
||||
{
|
||||
memset(env->g_proto_id2name, 0, sizeof(env->g_proto_id2name));
|
||||
int ret=0, proto_id=0;;
|
||||
FILE *fp=NULL;
|
||||
char line[1024]={0};
|
||||
char type_name[32]={0};
|
||||
char proto_name[32]={0};
|
||||
|
||||
fp=fopen(filename, "r");
|
||||
if(fp==NULL)
|
||||
{
|
||||
printf("Open %s failed ...", filename);
|
||||
return -1;
|
||||
}
|
||||
|
||||
memset(line, 0, sizeof(line));
|
||||
|
||||
while((fgets(line, sizeof(line), fp))!=NULL)
|
||||
{
|
||||
if(line[0]=='#' || line[0]=='\n' || line[0]=='\r' ||line[0]=='\0')
|
||||
{
|
||||
continue;
|
||||
}
|
||||
|
||||
ret=sscanf(line, "%31s %31s %d", type_name, proto_name, &proto_id);
|
||||
env->g_proto_id2name[proto_id] = (char*)calloc(strlen(proto_name)+1, 1);
|
||||
strcpy(env->g_proto_id2name[proto_id], proto_name);
|
||||
memset(line, 0, sizeof(line));
|
||||
}
|
||||
|
||||
fclose(fp);
|
||||
fp=NULL;
|
||||
return ret;
|
||||
}
|
||||
|
||||
static void publish_session_test_result(struct lpi_test_plugin_env *env, cJSON *ctx, struct session *sess)
|
||||
{
|
||||
assert(env->l7_exdata_idx >= 0 && ctx != NULL);
|
||||
struct l7_protocol_label *label = (struct l7_protocol_label *)session_exdata_get(sess, env->l7_exdata_idx);;
|
||||
if(label != NULL)
|
||||
{
|
||||
int proto_ids[8];
|
||||
const char* proto_names[8];
|
||||
for(int i = 0; i < label->protocol_id_num; i++)
|
||||
{
|
||||
proto_ids[i] = (int)(label->protocol_id[i]);
|
||||
proto_names[i] = env->g_proto_id2name[proto_ids[i]];
|
||||
|
||||
}
|
||||
cJSON *label_ids = cJSON_CreateIntArray(proto_ids, label->protocol_id_num);
|
||||
cJSON_AddItemToObject(ctx, "l7_label_id", label_ids);
|
||||
cJSON *label_names = cJSON_CreateStringArray(proto_names, label->protocol_id_num);
|
||||
cJSON_AddItemToObject(ctx, "l7_label_name", label_names);
|
||||
}
|
||||
else
|
||||
{
|
||||
cJSON_AddStringToObject(ctx, "l7_label_id", "UNKNOWN");
|
||||
}
|
||||
unsigned char dir_flag;
|
||||
int is_symmetric=session_is_symmetric(sess, &dir_flag);
|
||||
if(is_symmetric)
|
||||
{
|
||||
cJSON_AddStringToObject(ctx, "STREAM_DIR", "DOUBLE");
|
||||
}
|
||||
else if(dir_flag == SESSION_SEEN_C2S_FLOW)
|
||||
{
|
||||
cJSON_AddStringToObject(ctx, "STREAM_DIR", "C2S");
|
||||
}
|
||||
else if(dir_flag == SESSION_SEEN_S2C_FLOW)
|
||||
{
|
||||
cJSON_AddStringToObject(ctx, "STREAM_DIR", "S2C");
|
||||
}
|
||||
else
|
||||
{
|
||||
assert(0);
|
||||
}
|
||||
session_mq_publish_message(sess, env->expect_json_topic_id, cJSON_Print(ctx));
|
||||
cJSON_Delete(ctx);
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
void *lpi_test_ctx_new(struct session *sess, void *plugin_env)
|
||||
{
|
||||
cJSON *ctx =cJSON_CreateObject();
|
||||
cJSON_AddStringToObject(ctx, "Tuple4", session_get0_readable_addr(sess));
|
||||
enum session_type type= session_get_type(sess);
|
||||
if (type == SESSION_TYPE_TCP)
|
||||
{
|
||||
cJSON_AddStringToObject(ctx, "STREAM_TYPE", "TCP");
|
||||
}
|
||||
if (type == SESSION_TYPE_UDP)
|
||||
{
|
||||
cJSON_AddStringToObject(ctx, "STREAM_TYPE", "UDP");
|
||||
}
|
||||
return ctx;
|
||||
}
|
||||
|
||||
static void gtest_lpi_plugin_on_msg(struct session *sess, int topic_id, const void *msg, void *per_session_ctx, void *plugin_env)
|
||||
{
|
||||
if(session_get_current_state(sess)==SESSION_STATE_CLOSED)
|
||||
{
|
||||
publish_session_test_result((struct lpi_test_plugin_env*)plugin_env, (cJSON *)per_session_ctx, sess);
|
||||
}
|
||||
return;
|
||||
}
|
||||
|
||||
extern "C" void *gtest_lpi_plugin_load(struct stellar *st)
|
||||
{
|
||||
struct lpi_test_plugin_env *env = (struct lpi_test_plugin_env *)calloc(1, sizeof(struct lpi_test_plugin_env));
|
||||
env->st=st;
|
||||
const char *l7_proto_name=(const char*)"./tsgconf/tsg_l7_protocol.conf";
|
||||
|
||||
env->l7_exdata_idx= stellar_exdata_new_index(st, "L7_PROTOCOL", stellar_exdata_free_default, NULL);
|
||||
env->test_exdata_idx= stellar_exdata_new_index(st, "APP_PROTO_TEST", stellar_exdata_free_default, NULL);
|
||||
if(env->l7_exdata_idx<0 || env->test_exdata_idx<0)
|
||||
{
|
||||
perror("gtest_lpi_plugin_load:stellar_session_get_ex_new_index faild!!!\n");
|
||||
exit(-1);
|
||||
}
|
||||
if(load_l7_protocol_mapper(l7_proto_name, env)<0)
|
||||
{
|
||||
perror("gtest_lpi_plugin_load:l7_protocol_mapper failed !!!\n");
|
||||
exit(-1);
|
||||
}
|
||||
env->test_app_plugin_id=stellar_session_plugin_register(st, lpi_test_ctx_new, NULL, env);
|
||||
if(env->test_app_plugin_id < 0)
|
||||
{
|
||||
perror("gtest_lpi_plugin_load:stellar_plugin_register failed !!!\n");
|
||||
exit(-1);
|
||||
}
|
||||
|
||||
int tcp_topic_id=stellar_mq_get_topic_id(st, TOPIC_TCP_INPUT);
|
||||
int udp_topic_id=stellar_mq_get_topic_id(st, TOPIC_UDP_INPUT);
|
||||
if(tcp_topic_id < 0 || udp_topic_id < 0)
|
||||
{
|
||||
perror("gtest_lpi_plugin_load get tcp or udp topic id failed\n");
|
||||
exit(-1);
|
||||
}
|
||||
|
||||
stellar_session_mq_subscribe(st, tcp_topic_id, gtest_lpi_plugin_on_msg, env->test_app_plugin_id);
|
||||
stellar_session_mq_subscribe(st, udp_topic_id, gtest_lpi_plugin_on_msg, env->test_app_plugin_id);
|
||||
env->expect_json_topic_id = stellar_mq_create_topic(st, "EXPECT_JSON", stellar_msg_free_default, NULL);
|
||||
printf("gtest_lpi_plugin_load OK!\n");
|
||||
|
||||
return env;
|
||||
}
|
||||
|
||||
extern "C" void gtest_lpi_plugin_unload(void *plugin_env)
|
||||
{
|
||||
struct lpi_test_plugin_env *env = (struct lpi_test_plugin_env *)plugin_env;
|
||||
for(int i = 0; i < MAX_APP_ID_VALUE; i++)
|
||||
{
|
||||
if(env->g_proto_id2name[i])free(env->g_proto_id2name[i]);
|
||||
}
|
||||
free(env);
|
||||
printf("gtest_lpi_plugin_unload OK!\n");
|
||||
return ;
|
||||
}
|
||||
11
test/lpi_plugin/test_config/spec.toml
Normal file
11
test/lpi_plugin/test_config/spec.toml
Normal file
@@ -0,0 +1,11 @@
|
||||
# stellar_plugin.toml
|
||||
#
|
||||
[[plugin]]
|
||||
path = ""
|
||||
init = "lpi_plugin_load"
|
||||
exit = "lpi_plugin_unload"
|
||||
|
||||
[[plugin]]
|
||||
path = ""
|
||||
init = "gtest_lpi_plugin_load"
|
||||
exit = "gtest_lpi_plugin_unload"
|
||||
61
test/lpi_plugin/test_config/tsg_l7_protocol.conf
Normal file
61
test/lpi_plugin/test_config/tsg_l7_protocol.conf
Normal file
@@ -0,0 +1,61 @@
|
||||
#TYPE：1:UCHAR,2:USHORT,3:USTRING,4:ULOG,5:USTRING,6:FILE,7:UBASE64,8:PACKET
|
||||
#TYPE FIELD VALUE
|
||||
STRING UNCATEGORIZED 8000
|
||||
#STRING UNCATEGORIZED 8001
|
||||
#STRING UNKNOWN_OTHER 8002
|
||||
STRING DNS 32
|
||||
STRING FTP 45
|
||||
STRING FTPS 751
|
||||
STRING HTTP 67
|
||||
STRING HTTPS 68
|
||||
STRING ICMP 70
|
||||
STRING IKE 8003
|
||||
STRING MAIL 8004
|
||||
STRING IMAP 75
|
||||
STRING IMAPS 76
|
||||
STRING IPSEC 85
|
||||
STRING XMPP 94
|
||||
STRING L2TP 98
|
||||
STRING NTP 137
|
||||
STRING POP3 147
|
||||
STRING POP3S 148
|
||||
STRING PPTP 153
|
||||
STRING QUIC 2521
|
||||
STRING SIP 182
|
||||
STRING SMB 185
|
||||
STRING SMTP 186
|
||||
STRING SMTPS 187
|
||||
STRING SPDY 1469
|
||||
STRING SSH 198
|
||||
STRING SSL 199
|
||||
STRING SOCKS 8005
|
||||
STRING TELNET 209
|
||||
STRING DHCP 29
|
||||
STRING RADIUS 158
|
||||
STRING OPENVPN 336
|
||||
STRING STUN 201
|
||||
STRING TEREDO 555
|
||||
STRING DTLS 1291
|
||||
STRING DoH 8006
|
||||
STRING ISAKMP 92
|
||||
STRING MDNS 3835
|
||||
STRING NETBIOS 129
|
||||
STRING NETFLOW 130
|
||||
STRING RDP 159
|
||||
STRING RTCP 174
|
||||
STRING RTP 175
|
||||
STRING SLP 8007
|
||||
STRING SNMP 190
|
||||
STRING SSDP 197
|
||||
STRING TFTP 211
|
||||
STRING BJNP 2481
|
||||
STRING LDAP 100
|
||||
STRING RTMP 337
|
||||
STRING RTSP 176
|
||||
STRING ESNI 8008
|
||||
STRING Stratum 8169
|
||||
STRING QQ 156
|
||||
STRING WeChat 1296
|
||||
STRING WIREGUARD 3700
|
||||
STRING MMS 115
|
||||
STRING RSYNC 173
|
||||
50
test/lpi_plugin/test_expect/app_pcap.json
Normal file
50
test/lpi_plugin/test_expect/app_pcap.json
Normal file
@@ -0,0 +1,50 @@
|
||||
[{
|
||||
"Tuple4": "192.168.57.168:8758-123.151.78.109:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [156],
|
||||
"l7_label_name": ["QQ"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_1"
|
||||
}, {
|
||||
"Tuple4": "192.168.58.58:51876-175.27.3.209:443-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [1296],
|
||||
"l7_label_name": ["WeChat"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_2"
|
||||
}, {
|
||||
"Tuple4": "192.168.57.168:59361-106.119.174.27:18001-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [156],
|
||||
"l7_label_name": ["QQ"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_3"
|
||||
}, {
|
||||
"Tuple4": "192.168.58.58:57907-119.167.204.98:8080-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [1296],
|
||||
"l7_label_name": ["WeChat"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_4"
|
||||
}, {
|
||||
"Tuple4": "192.168.39.77:62682-81.181.55.9:1337-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [3700],
|
||||
"l7_label_name": ["WIREGUARD"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_5"
|
||||
}, {
|
||||
"Tuple4": "209.58.189.105:58237-192.168.50.26:56658-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [3700],
|
||||
"l7_label_name": ["WIREGUARD"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_6"
|
||||
}, {
|
||||
"Tuple4": "51.77.200.55:51820-196.188.136.150:20620-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [3700],
|
||||
"l7_label_name": ["WIREGUARD"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_7"
|
||||
}]
|
||||
402
test/lpi_plugin/test_expect/dns_pcap.json
Normal file
402
test/lpi_plugin/test_expect/dns_pcap.json
Normal file
@@ -0,0 +1,402 @@
|
||||
[{
|
||||
"Tuple4": "124.88.175.201:17997-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_1"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18014-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_2"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18081-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_3"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18082-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_4"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18091-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_5"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18088-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_6"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18103-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_7"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18126-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_8"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18136-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_9"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18142-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_10"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18210-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_11"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18215-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_12"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18219-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_13"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18223-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_14"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18236-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_15"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18239-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_16"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18242-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_17"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18256-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_18"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18266-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_19"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18336-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_20"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18345-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_21"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18347-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_22"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18351-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_23"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18354-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_24"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18358-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_25"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18360-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_26"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38470-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_27"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38594-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_28"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38608-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_29"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38624-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_30"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38712-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_31"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38692-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_32"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38694-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_33"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38886-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_34"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38904-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_35"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38912-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_36"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38960-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_37"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38976-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_38"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38972-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_39"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:39016-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_40"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:38978-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_41"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:39000-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_42"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:39052-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_43"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:39082-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_44"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:39120-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_45"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:39114-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_46"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:39176-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_47"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:39186-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_48"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:39216-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_49"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:39246-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_50"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:39268-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_51"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:26834-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_52"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18095-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_53"
|
||||
}, {
|
||||
"Tuple4": "60.13.195.137:41008-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_54"
|
||||
}, {
|
||||
"Tuple4": "124.88.175.201:18111-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_55"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:26633-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_56"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:26709-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_57"
|
||||
}, {
|
||||
"Tuple4": "60.13.179.249:37897-8.8.8.8:53-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_58"
|
||||
}]
|
||||
1
test/lpi_plugin/test_expect/empty_array.json
Normal file
1
test/lpi_plugin/test_expect/empty_array.json
Normal file
@@ -0,0 +1 @@
|
||||
[]
|
||||
291
test/lpi_plugin/test_expect/mixed_pcap.json
Normal file
291
test/lpi_plugin/test_expect/mixed_pcap.json
Normal file
@@ -0,0 +1,291 @@
|
||||
[{
|
||||
"Tuple4": "117.146.23.226:63007-211.95.50.57:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_1"
|
||||
}, {
|
||||
"Tuple4": "117.145.115.74:37855-218.31.124.234:21121-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [45],
|
||||
"l7_label_name": ["FTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_2"
|
||||
}, {
|
||||
"Tuple4": "117.146.23.226:63007-211.95.50.57:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_3"
|
||||
}, {
|
||||
"Tuple4": "117.145.115.74:37923-218.31.124.234:21121-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [45],
|
||||
"l7_label_name": ["FTP"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_4"
|
||||
}, {
|
||||
"Tuple4": "172.17.107.32:18867-218.229.99.73:25-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [186],
|
||||
"l7_label_name": ["SMTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_5"
|
||||
}, {
|
||||
"Tuple4": "117.145.115.74:37855-218.31.124.234:21121-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_6"
|
||||
}, {
|
||||
"Tuple4": "196.188.12.179:54776-192.185.31.244:110-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [147],
|
||||
"l7_label_name": ["POP3"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_7"
|
||||
}, {
|
||||
"Tuple4": "196.189.57.105:14636-68.232.159.216:25-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [186],
|
||||
"l7_label_name": ["SMTP"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_8"
|
||||
}, {
|
||||
"Tuple4": "196.190.160.6:20997-64.225.54.152:25-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [186],
|
||||
"l7_label_name": ["SMTP"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_9"
|
||||
}, {
|
||||
"Tuple4": "196.188.3.8:50020-82.98.178.159:110-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [147],
|
||||
"l7_label_name": ["POP3"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_10"
|
||||
}, {
|
||||
"Tuple4": "196.189.45.189:1440-40.101.92.178:587-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [186],
|
||||
"l7_label_name": ["SMTP"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_11"
|
||||
}, {
|
||||
"Tuple4": "196.191.120.240:37943-81.19.77.166:587-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [186],
|
||||
"l7_label_name": ["SMTP"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_12"
|
||||
}, {
|
||||
"Tuple4": "39.144.206.199:22005-117.156.19.31:8000-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [201, 174, 175],
|
||||
"l7_label_name": ["STUN", "RTCP", "RTP"],
|
||||
"STREAM_DIR": "S2C",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_13"
|
||||
}, {
|
||||
"Tuple4": "85.117.117.169:47762-173.194.73.95:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_14"
|
||||
}, {
|
||||
"Tuple4": "85.117.113.98:4340-74.125.131.95:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_15"
|
||||
}, {
|
||||
"Tuple4": "90.143.189.5:8026-173.194.188.40:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_16"
|
||||
}, {
|
||||
"Tuple4": "85.117.125.8:21243-173.194.73.102:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_17"
|
||||
}, {
|
||||
"Tuple4": "85.117.122.194:32370-173.194.220.138:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_18"
|
||||
}, {
|
||||
"Tuple4": "10.32.121.249:33765-64.233.161.95:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_19"
|
||||
}, {
|
||||
"Tuple4": "85.117.119.45:22495-173.194.73.101:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_20"
|
||||
}, {
|
||||
"Tuple4": "90.143.180.56:28496-64.233.165.113:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_21"
|
||||
}, {
|
||||
"Tuple4": "112.43.145.231:18699-112.46.25.216:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_22"
|
||||
}, {
|
||||
"Tuple4": "146.158.67.194:1044-108.177.14.138:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "S2C",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_23"
|
||||
}, {
|
||||
"Tuple4": "36.142.158.169:16385-36.189.11.71:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "S2C",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_24"
|
||||
}, {
|
||||
"Tuple4": "103.3.138.59:12521-123.125.116.52:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_25"
|
||||
}, {
|
||||
"Tuple4": "172.20.9.135:65045-64.233.162.119:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_26"
|
||||
}, {
|
||||
"Tuple4": "192.168.50.29:61891-31.13.77.35:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_27"
|
||||
}, {
|
||||
"Tuple4": "192.168.60.9:55659-69.171.250.63:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_28"
|
||||
}, {
|
||||
"Tuple4": "192.168.137.141:50006-31.13.77.17:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_29"
|
||||
}, {
|
||||
"Tuple4": "217.76.77.70:33232-173.194.220.105:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_30"
|
||||
}, {
|
||||
"Tuple4": "192.168.60.32:59699-64.233.164.84:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_31"
|
||||
}, {
|
||||
"Tuple4": "195.12.120.14:41803-173.194.222.101:443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_32"
|
||||
}, {
|
||||
"Tuple4": "10.130.2.104:55426-67.225.241.247:587-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [186],
|
||||
"l7_label_name": ["SMTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_33"
|
||||
}, {
|
||||
"Tuple4": "10.130.13.155:57719-50.87.145.154:26-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [186],
|
||||
"l7_label_name": ["SMTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_34"
|
||||
}, {
|
||||
"Tuple4": "196.189.24.94:20997-98.138.112.34:25-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_35"
|
||||
}, {
|
||||
"Tuple4": "196.189.0.15:53357-39.156.6.106:110-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [147],
|
||||
"l7_label_name": ["POP3"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_36"
|
||||
}, {
|
||||
"Tuple4": "196.188.121.1:53357-68.183.134.15:110-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_37"
|
||||
}, {
|
||||
"Tuple4": "196.189.5.89:36734-101.32.113.90:143-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [75],
|
||||
"l7_label_name": ["IMAP"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_38"
|
||||
}, {
|
||||
"Tuple4": "196.188.28.149:50415-69.195.110.51:143-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [75],
|
||||
"l7_label_name": ["IMAP"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_39"
|
||||
}, {
|
||||
"Tuple4": "115.24.235.11:4029-8.210.152.150:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "S2C",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_40"
|
||||
}, {
|
||||
"Tuple4": "78.1.76.154:57133-192.168.137.147:45736-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [201, 1291],
|
||||
"l7_label_name": ["STUN", "DTLS"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_41"
|
||||
}, {
|
||||
"Tuple4": "192.168.40.82:41450-192.168.44.230:7002-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_42"
|
||||
}]
|
||||
92
test/lpi_plugin/test_expect/openvpn_pcap.json
Normal file
92
test/lpi_plugin/test_expect/openvpn_pcap.json
Normal file
@@ -0,0 +1,92 @@
|
||||
[{
|
||||
"Tuple4": "192.168.64.27:61801-219.100.37.7:443-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [336],
|
||||
"l7_label_name": ["OPENVPN"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_1"
|
||||
}, {
|
||||
"Tuple4": "172.16.18.30:12272-172.16.18.11:1194-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [336],
|
||||
"l7_label_name": ["OPENVPN"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_2"
|
||||
}, {
|
||||
"Tuple4": "192.168.88.3:50568-46.246.122.61:1198-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [336],
|
||||
"l7_label_name": ["OPENVPN"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_3"
|
||||
}, {
|
||||
"Tuple4": "192.168.1.77:60140-46.101.231.218:443-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [336],
|
||||
"l7_label_name": ["OPENVPN"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_4"
|
||||
}, {
|
||||
"Tuple4": "192.168.43.12:41507-139.59.151.137:13680-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [336],
|
||||
"l7_label_name": ["OPENVPN"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_5"
|
||||
}, {
|
||||
"Tuple4": "192.168.43.18:13680-139.59.151.137:13680-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [336],
|
||||
"l7_label_name": ["OPENVPN"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_6"
|
||||
}, {
|
||||
"Tuple4": "192.168.34.249:63111-3.115.218.192:1194-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [336],
|
||||
"l7_label_name": ["OPENVPN"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_7"
|
||||
}, {
|
||||
"Tuple4": "192.168.11.14:34400-202.43.148.189:1194-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [336],
|
||||
"l7_label_name": ["OPENVPN"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_8"
|
||||
}, {
|
||||
"Tuple4": "202.43.148.166:40914-202.43.148.189:1194-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [336],
|
||||
"l7_label_name": ["OPENVPN"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_9"
|
||||
}, {
|
||||
"Tuple4": "172.31.136.16:51706-172.31.250.5:1194-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [336],
|
||||
"l7_label_name": ["OPENVPN"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_10"
|
||||
}, {
|
||||
"Tuple4": "192.168.56.31:49941-185.225.234.3:1194-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [336],
|
||||
"l7_label_name": ["OPENVPN"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_11"
|
||||
}, {
|
||||
"Tuple4": "2607:5d00:2:2::38:129:61897-2a01:4f8:200:812b:65b::1:3042-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [336],
|
||||
"l7_label_name": ["OPENVPN"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_12"
|
||||
}, {
|
||||
"Tuple4": "192.168.58.112:41925-36.102.226.57:8443-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [2521],
|
||||
"l7_label_name": ["QUIC"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_13"
|
||||
}]
|
||||
826
test/lpi_plugin/test_expect/ppp_pcap.json
Normal file
826
test/lpi_plugin/test_expect/ppp_pcap.json
Normal file
@@ -0,0 +1,826 @@
|
||||
[{
|
||||
"Tuple4": "192.168.10.91:62176-220.249.244.23:33445-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_1"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49247-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_2"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49245-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_3"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49252-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_4"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49255-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_5"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49248-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_6"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49254-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_7"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49259-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_8"
|
||||
}, {
|
||||
"Tuple4": "172.16.0.100:50112-172.16.0.254:1723-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [153],
|
||||
"l7_label_name": ["PPTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_9"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50072-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_10"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49250-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_11"
|
||||
}, {
|
||||
"Tuple4": "172.16.0.100:500-172.16.0.254:500-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [92],
|
||||
"l7_label_name": ["ISAKMP"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_12"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:63747-224.0.0.252:5355-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_13"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:65012-224.0.0.252:5355-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_14"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:68-255.255.255.255:67-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_15"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:63917-224.0.0.252:5355-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_16"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50147-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_17"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50866-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_18"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:57084-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_19"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:138-255.255.255.255:138-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [129],
|
||||
"l7_label_name": ["NETBIOS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_20"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:51103-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_21"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:53831-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_22"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:52460-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_23"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50497-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_24"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50233-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_25"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:64355-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_26"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50648-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_27"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:52851-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_28"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:58476-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_29"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50897-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_30"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:65380-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_31"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:58422-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_32"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:64882-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_33"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:51787-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_34"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:59393-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_35"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:52783-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_36"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:55755-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_37"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:60213-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_38"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:64847-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_39"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:64115-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_40"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:57554-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_41"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49969-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_42"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:57553-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_43"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:58185-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_44"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:60349-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_45"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:62337-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_46"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:64382-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_47"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:62694-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_48"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:64915-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_49"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50578-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_50"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:56971-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_51"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:62721-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_52"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50655-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_53"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:54363-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_54"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:53796-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_55"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:59348-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_56"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49686-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_57"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50273-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_58"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:63738-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_59"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:62490-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_60"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:61200-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_61"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:64138-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_62"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:64736-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_63"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:54188-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_64"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:59408-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_65"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49446-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_66"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:58556-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_67"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:52129-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_68"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50258-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_69"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:51697-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_70"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:58428-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_71"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:51307-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_72"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:55973-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_73"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:53758-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_74"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:62140-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_75"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:63652-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_76"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:60777-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_77"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49246-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_78"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:56967-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_79"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:60549-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_80"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49621-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_81"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49257-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_82"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:65424-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_83"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49249-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_84"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49256-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_85"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:61044-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_86"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:55106-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_87"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:62335-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_88"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:54356-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_89"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:51628-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_90"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50188-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_91"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:57198-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_92"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:57310-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_93"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49258-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_94"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:63697-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_95"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50244-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_96"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:57229-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_97"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:62401-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_98"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:58807-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_99"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49264-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_100"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49261-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_101"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49253-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_102"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:50564-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_103"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49263-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_104"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49251-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_105"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49265-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_106"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:60282-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_107"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:58248-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_108"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:53188-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_109"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:53483-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_110"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49260-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_111"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:51121-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_112"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:52562-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_113"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:49262-10.0.6.229:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_114"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:51048-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_115"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:51806-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_116"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:137-255.255.255.255:137-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [129],
|
||||
"l7_label_name": ["NETBIOS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_117"
|
||||
}, {
|
||||
"Tuple4": "172.16.2.100:60348-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_118"
|
||||
}, {
|
||||
"Tuple4": "172.16.0.100:1701-172.16.0.254:1701-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [158],
|
||||
"l7_label_name": ["RADIUS"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_119"
|
||||
}]
|
||||
266
test/lpi_plugin/test_expect/socks_pcap.json
Normal file
266
test/lpi_plugin/test_expect/socks_pcap.json
Normal file
@@ -0,0 +1,266 @@
|
||||
[{
|
||||
"Tuple4": "192.168.122.100:62395-192.168.122.202:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 45],
|
||||
"l7_label_name": ["SOCKS", "FTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_1"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:50259-192.168.122.202:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 67],
|
||||
"l7_label_name": ["SOCKS", "HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_2"
|
||||
}, {
|
||||
"Tuple4": "10.0.0.1:1637-10.0.0.2:21477-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 67],
|
||||
"l7_label_name": ["SOCKS", "HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_3"
|
||||
}, {
|
||||
"Tuple4": "10.180.156.185:53533-10.180.156.249:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 67],
|
||||
"l7_label_name": ["SOCKS", "HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_4"
|
||||
}, {
|
||||
"Tuple4": "10.180.156.185:53534-10.180.156.249:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 67],
|
||||
"l7_label_name": ["SOCKS", "HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_5"
|
||||
}, {
|
||||
"Tuple4": "10.180.156.185:53535-10.180.156.249:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 67],
|
||||
"l7_label_name": ["SOCKS", "HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_6"
|
||||
}, {
|
||||
"Tuple4": "10.10.9.37:1063-100.100.9.37:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 147],
|
||||
"l7_label_name": ["SOCKS", "POP3"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_7"
|
||||
}, {
|
||||
"Tuple4": "10.10.10.38:1061-100.100.10.38:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 186],
|
||||
"l7_label_name": ["SOCKS", "SMTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_8"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:50260-192.168.122.202:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 67],
|
||||
"l7_label_name": ["SOCKS", "HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_9"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:50261-192.168.122.202:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 67],
|
||||
"l7_label_name": ["SOCKS", "HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_10"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:50274-192.168.122.202:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 67],
|
||||
"l7_label_name": ["SOCKS", "HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_11"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:50275-192.168.122.202:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 67],
|
||||
"l7_label_name": ["SOCKS", "HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_12"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:50273-192.168.122.202:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 67],
|
||||
"l7_label_name": ["SOCKS", "HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_13"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:62396-192.168.122.202:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005],
|
||||
"l7_label_name": ["SOCKS"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_14"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:62397-192.168.122.202:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005],
|
||||
"l7_label_name": ["SOCKS"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_15"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:62398-192.168.122.202:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005],
|
||||
"l7_label_name": ["SOCKS"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_16"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:62395-192.168.122.202:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [45],
|
||||
"l7_label_name": ["FTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_17"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:50259-192.168.122.202:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_18"
|
||||
}, {
|
||||
"Tuple4": "10.0.0.1:1637-10.0.0.2:21477-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 67],
|
||||
"l7_label_name": ["SOCKS", "HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_19"
|
||||
}, {
|
||||
"Tuple4": "10.0.0.1:54263-10.0.0.2:8855-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_20"
|
||||
}, {
|
||||
"Tuple4": "10.0.0.2:53709-10.0.0.1:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [186],
|
||||
"l7_label_name": ["SMTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_21"
|
||||
}, {
|
||||
"Tuple4": "10.180.156.185:54068-10.180.156.249:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005],
|
||||
"l7_label_name": ["SOCKS"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_22"
|
||||
}, {
|
||||
"Tuple4": "10.180.156.185:54069-10.180.156.249:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005],
|
||||
"l7_label_name": ["SOCKS"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_23"
|
||||
}, {
|
||||
"Tuple4": "10.180.156.185:54072-10.180.156.249:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 67],
|
||||
"l7_label_name": ["SOCKS", "HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_24"
|
||||
}, {
|
||||
"Tuple4": "10.180.156.185:53554-10.180.156.249:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 199],
|
||||
"l7_label_name": ["SOCKS", "SSL"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_25"
|
||||
}, {
|
||||
"Tuple4": "10.180.156.185:53555-10.180.156.249:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 199],
|
||||
"l7_label_name": ["SOCKS", "SSL"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_26"
|
||||
}, {
|
||||
"Tuple4": "10.180.156.185:53556-10.180.156.249:1080-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 199],
|
||||
"l7_label_name": ["SOCKS", "SSL"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_27"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:58811-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_28"
|
||||
}, {
|
||||
"Tuple4": "ff02::1:2:547-fe80::424:6d4c:9a85:337d:546-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [29],
|
||||
"l7_label_name": ["DHCP"],
|
||||
"STREAM_DIR": "S2C",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_29"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:58117-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_30"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:50258-184.50.87.123:80-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [67],
|
||||
"l7_label_name": ["HTTP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_31"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:52837-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_32"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:50262-74.125.235.196:443-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": "UNKNOWN",
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_33"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:57617-8.8.8.8:53-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [32],
|
||||
"l7_label_name": ["DNS"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_34"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:138-192.168.122.255:138-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [129],
|
||||
"l7_label_name": ["NETBIOS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_35"
|
||||
}, {
|
||||
"Tuple4": "192.168.122.100:137-192.168.122.255:137-17-0",
|
||||
"STREAM_TYPE": "UDP",
|
||||
"l7_label_id": [129],
|
||||
"l7_label_name": ["NETBIOS"],
|
||||
"STREAM_DIR": "C2S",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_36"
|
||||
}, {
|
||||
"Tuple4": "10.0.0.1:50606-10.0.0.2:9901-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005],
|
||||
"l7_label_name": ["SOCKS"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_37"
|
||||
}, {
|
||||
"Tuple4": "10.0.0.3:2276-10.0.0.2:42356-6-0",
|
||||
"STREAM_TYPE": "TCP",
|
||||
"l7_label_id": [8005, 159],
|
||||
"l7_label_name": ["SOCKS", "RDP"],
|
||||
"STREAM_DIR": "DOUBLE",
|
||||
"name": "APP_PROTO_IDENTIFY_RESULT_38"
|
||||
}]
|
||||
BIN
test/lpi_plugin/test_pcap/app_pcap/1-qq_59361.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/app_pcap/1-qq_59361.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/app_pcap/2-qq_8758.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/app_pcap/2-qq_8758.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/app_pcap/3-wechat_51876.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/app_pcap/3-wechat_51876.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/app_pcap/4-wechat_8080.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/app_pcap/4-wechat_8080.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/app_pcap/5-wireguard.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/app_pcap/5-wireguard.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/app_pcap/6-wireguard1.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/app_pcap/6-wireguard1.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/app_pcap/7-wireguard2.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/app_pcap/7-wireguard2.pcap
Normal file
Binary file not shown.
Binary file not shown.
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/mixed_pcap/01-http-not-ftp.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/mixed_pcap/01-http-not-ftp.pcap
Normal file
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/mixed_pcap/06-ftp_port_21121-s2c.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/mixed_pcap/06-ftp_port_21121-s2c.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/mixed_pcap/07-ftp_port_21121-c2s.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/mixed_pcap/07-ftp_port_21121-c2s.pcap
Normal file
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/mixed_pcap/38-stun-dtls.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/mixed_pcap/38-stun-dtls.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/mixed_pcap/39-pop3-mistake-redis.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/mixed_pcap/39-pop3-mistake-redis.pcap
Normal file
Binary file not shown.
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/02-openvpn-nDPI.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/02-openvpn-nDPI.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/03-openvpn_onestream.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/03-openvpn_onestream.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/04-openvpn-udp-63111.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/04-openvpn-udp-63111.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/05-openvpn-udp-34400.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/05-openvpn-udp-34400.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/06-openvpn-udp-40914.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/06-openvpn-udp-40914.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/07-openvpn.tcp.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/07-openvpn.tcp.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/08-ovpntcp_hmac.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/08-ovpntcp_hmac.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/09-ovpntcp_nohmac.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/09-ovpntcp_nohmac.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/10-openvpn-udp-49941.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/10-openvpn-udp-49941.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/11-ipv6_openvpn.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/11-ipv6_openvpn.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/12-quic-openvpn.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/openvpn_pcap/12-quic-openvpn.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/ppp_pcap/01-l2tp_netbios.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/ppp_pcap/01-l2tp_netbios.pcap
Normal file
Binary file not shown.
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/ppp_pcap/03-l2tp_http.pcap
Executable file
BIN
test/lpi_plugin/test_pcap/ppp_pcap/03-l2tp_http.pcap
Executable file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/ppp_pcap/04-l2tp_ctrl_data_full.pcap
Executable file
BIN
test/lpi_plugin/test_pcap/ppp_pcap/04-l2tp_ctrl_data_full.pcap
Executable file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/ppp_pcap/05-pptp_encrypt.pcap
Executable file
BIN
test/lpi_plugin/test_pcap/ppp_pcap/05-pptp_encrypt.pcap
Executable file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/ppp_pcap/06-pptp_http.pcap
Executable file
BIN
test/lpi_plugin/test_pcap/ppp_pcap/06-pptp_http.pcap
Executable file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/1-socks45-http-example.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/1-socks45-http-example.pcap
Normal file
Binary file not shown.
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/11-socks5-http-302.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/11-socks5-http-302.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/12-socks5-rdp.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/12-socks5-rdp.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/13-socks5-reverse.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/13-socks5-reverse.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/14-socks5-smtp-503.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/14-socks5-smtp-503.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/15-socks-http-pass.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/15-socks-http-pass.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/16-socks-https-example.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/16-socks-https-example.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/2-socks5_ftp.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/2-socks5_ftp.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/3-POP3_Sock5_subject.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/3-POP3_Sock5_subject.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/4-SMTP_Sock5_subject.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/4-SMTP_Sock5_subject.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/5-T3-HTTP-URL-SOCKS5.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/5-T3-HTTP-URL-SOCKS5.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/6-T7-HTTP-CONT-SOCKS5.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/6-T7-HTTP-CONT-SOCKS5.pcap
Normal file
Binary file not shown.
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/8-socks4_http.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/8-socks4_http.pcap
Normal file
Binary file not shown.
BIN
test/lpi_plugin/test_pcap/socks_pcap/9-socks4-https.pcap
Normal file
BIN
test/lpi_plugin/test_pcap/socks_pcap/9-socks4-https.pcap
Normal file
Binary file not shown.
Reference in New Issue
Block a user