✨ feat(integration decoders): http and glimpse_detector

compile pass, todo test

test/CMakeLists.txt

@@ -1,3 +1,4 @@
 add_subdirectory(packet_inject)
 add_subdirectory(packet_tool)
-add_subdirectory(debug_plugin)
+add_subdirectory(debug_plugin)
+#add_subdirectory(glimpse_detector)

test/glimpse_detector/CMakeLists.txt

@@ -0,0 +1,15 @@
+add_executable(gtest_glimpse_detector gtest_glimpse_detector_main.cpp)
+
+target_include_directories(gtest_glimpse_detector PRIVATE ${CMAKE_SOURCE_DIR}/deps/)
+target_include_directories(gtest_glimpse_detector PRIVATE ${CMAKE_SOURCE_DIR}/decoders/glimpse_detector)
+
+target_link_libraries(
+gtest_glimpse_detector PRIVATE stellar_devel glimpse_detector cjson-static 
+dl "-rdynamic"
+gtest gmock
+)
+
+target_link_libraries(gtest_glimpse_detector PRIVATE -Wl,--whole-archive glimpse_detector -Wl,--no-whole-archive)
+
+add_test(NAME gtest_glimpse_detector
+         COMMAND gtest_glimpse_detector ${CMAKE_SOURCE_DIR}/test/glimpse_detector)

test/glimpse_detector/gtest_glimpse_detector_main.cpp

@@ -0,0 +1,454 @@
+/*
+ *  author:yangwei
+ *  create time:2021-8-21
+ *
+ */
+
+#pragma GCC diagnostic ignored "-Wunused-parameter"
+
+#include <stdio.h>
+#include <time.h>
+#include <unistd.h>
+#include <assert.h>
+
+#include "app_l7_protocol.h"
+
+#include "cjson/cJSON.h"
+//#include "MESA_prof_load.h"
+
+#include "stellar/stellar.h"
+#include "stellar/session.h"
+#include "stellar/stellar_exdata.h"
+#include "stellar/stellar_mq.h"
+
+
+struct app_test_para
+{
+    cJSON *test_result_root;
+    cJSON *load_result_root;
+    int result_count;
+};
+
+struct app_test_para g_test_para={};
+
+static int commit_test_result_json(struct app_test_para *para, cJSON *node, const char *name);
+
+struct app_test_plugin_env
+{
+    int test_exdata_idx;
+    int l7_exdata_idx;
+    int test_app_plugin_id;
+    struct stellar *st;
+};
+
+#define	MAX_PROTO_ID_NUM	10000
+static char *g_proto_id2name[MAX_PROTO_ID_NUM];
+
+static int load_l7_protocol_mapper(const char *filename)
+{
+    memset(g_proto_id2name, 0, sizeof(g_proto_id2name));
+	int ret=0, proto_id=0;;
+	FILE *fp=NULL;
+	char line[1024]={0};
+	char type_name[32]={0};
+	char proto_name[32]={0};
+
+	fp=fopen(filename, "r");
+	if(fp==NULL)
+	{
+		printf("Open %s failed ...", filename);
+		return -1;
+	}
+
+	memset(line, 0, sizeof(line));
+
+	while((fgets(line, sizeof(line), fp))!=NULL)
+	{
+		if(line[0]=='#' || line[0]=='\n' || line[0]=='\r' ||line[0]=='\0')
+		{
+			continue;
+		}
+		
+		ret=sscanf(line, "%31s %31s %d", type_name, proto_name, &proto_id);
+		assert(ret==3 && proto_id < MAX_PROTO_ID_NUM);
+		g_proto_id2name[proto_id] = (char*)calloc(strlen(proto_name)+1, 1);
+        strcpy(g_proto_id2name[proto_id], proto_name);
+		memset(line, 0, sizeof(line));
+	}
+
+	fclose(fp);
+	fp=NULL;
+	return ret;
+}
+
+static void commit_test_result(struct app_test_plugin_env *env,  cJSON *ctx, struct session *sess)
+{
+        assert(env->l7_exdata_idx >= 0  && ctx != NULL);
+        struct l7_protocol_label *label = (struct l7_protocol_label *)session_exdata_get(sess, env->l7_exdata_idx);;
+        if(label != NULL)
+        {
+            int proto_ids[8];
+            const char* proto_names[8];
+            for(int i = 0; i < label->protocol_id_num; i++)
+            {
+                proto_ids[i] = (int)(label->protocol_id[i]);
+                proto_names[i] = g_proto_id2name[proto_ids[i]];
+
+            }
+            cJSON *label_ids = cJSON_CreateIntArray(proto_ids, label->protocol_id_num);
+            cJSON_AddItemToObject(ctx, "l7_label_id", label_ids);
+            cJSON *label_names = cJSON_CreateStringArray(proto_names, label->protocol_id_num);
+            cJSON_AddItemToObject(ctx, "l7_label_name", label_names);
+        }
+        else
+        {
+                cJSON_AddStringToObject(ctx, "l7_label_id", "UNKNOWN");
+        }
+        unsigned char dir_flag;
+        int is_symmetric=session_is_symmetric(sess, &dir_flag);
+        if(is_symmetric)
+        {
+           cJSON_AddStringToObject(ctx, "STREAM_DIR", "DOUBLE"); 
+        }
+        else if(dir_flag == SESSION_SEEN_C2S_FLOW)
+        {
+            cJSON_AddStringToObject(ctx, "STREAM_DIR", "C2S");
+        }
+        else if(dir_flag == SESSION_SEEN_S2C_FLOW)
+        {
+             cJSON_AddStringToObject(ctx, "STREAM_DIR", "S2C");
+        }
+        else
+        {
+            assert(0);
+        }
+        if (ctx)
+        {
+            char result_name[128] = "";
+            sprintf(result_name, "APP_PROTO_IDENTIFY_RESULT_%d", g_test_para.result_count);
+            commit_test_result_json(&g_test_para, ctx, result_name);
+            g_test_para.result_count += 1;
+        }
+        return;
+}
+
+
+ void *APP_TEST_CTX_NEW(struct session *sess, void *plugin_env)
+{
+    cJSON *ctx =cJSON_CreateObject();
+    cJSON_AddStringToObject(ctx, "Tuple4", session_get0_readable_addr(sess));
+    enum session_type type= session_get_type(sess);
+    if (type == SESSION_TYPE_TCP)
+    {
+        cJSON_AddStringToObject(ctx, "STREAM_TYPE", "TCP");
+    }
+    if (type == SESSION_TYPE_UDP)
+    {
+        cJSON_AddStringToObject(ctx, "STREAM_TYPE", "UDP");
+    }
+    return ctx;
+}
+
+void APP_TEST_CTX_FREE(struct session *sess, void *session_ctx, void *plugin_env)
+{
+    cJSON *ctx = (cJSON *)session_ctx;
+    commit_test_result((struct app_test_plugin_env*)plugin_env, ctx, sess); 
+	return;
+}
+
+static void APP_TEST_ON_SESSION_MSG(struct session *sess, int topic_id, const void *msg, void *per_session_ctx, void *plugin_env)
+{
+	return;
+}
+
+extern "C" void *APP_TEST_PLUG_INIT(struct stellar *st)
+{
+    struct app_test_plugin_env *env = (struct app_test_plugin_env *)calloc(1, sizeof(struct app_test_plugin_env));
+    env->st=st;
+    //const char *l7_label_name=(const char*)"L7_PROTOCOL_LABEL";
+    //const char *l7_bridge_name=(const char*)"APP_BRIDGE";
+    const char *l7_proto_name=(const char*)"./tsgconf/tsg_l7_protocol.conf";
+    //MESA_load_profile_string_def("./tsgconf/main.conf", "SYSTEM", "L7_LABEL_NAME", l7_label_name, sizeof(l7_label_name), "L7_PROTOCOL_LABEL");
+	//MESA_load_profile_string_def("./tsgconf/main.conf", "SYSTEM", "APP_BRIDGE_NAME", l7_bridge_name, sizeof(l7_bridge_name), "APP_BRIDGE");
+	//MESA_load_profile_string_def("./tsgconf/main.conf", "SYSTEM", "L7_PROTOCOL_FILE", l7_proto_name, sizeof(l7_proto_name), "./tsgconf/tsg_l7_protocol.conf");
+    env->l7_exdata_idx= stellar_exdata_new_index(st, "L7_PROTOCOL", stellar_exdata_free_default, NULL);	
+    env->test_exdata_idx= stellar_exdata_new_index(st, "APP_PROTO_TEST", stellar_exdata_free_default, NULL);	
+	if(env->l7_exdata_idx<0 || env->test_exdata_idx<0)
+	{
+		printf("APP_PROTO_IDENTIFY_TEST_PLUG_INIT:stellar_session_get_ex_new_index faild!!!\n");
+		exit(-1);
+	}
+    int ret = load_l7_protocol_mapper(l7_proto_name);
+	if(ret<0)
+	{
+		printf("APP_PROTO_IDENTIFY_TEST_PLUG_INIT:l7_protocol_mapper failed !!!\n");	
+		exit(-1);
+	}
+    env->test_app_plugin_id=stellar_session_plugin_register(st, APP_TEST_CTX_NEW, APP_TEST_CTX_FREE, env);
+    if(env->test_app_plugin_id < 0)
+    {
+        printf("APP_PROTO_IDENTIFY_TEST_PLUG_INIT:stellar_plugin_register failed !!!\n");	
+		exit(-1);
+    }
+
+	int tcp_topic_id=stellar_mq_get_topic_id(st, TOPIC_TCP);
+	int udp_topic_id=stellar_mq_get_topic_id(st, TOPIC_UDP);
+	if(tcp_topic_id < 0 || udp_topic_id < 0)
+	{
+		perror("get tcp or udp topic id failed\n");
+		exit(-1);
+	}
+
+	stellar_session_mq_subscribe(st, tcp_topic_id, APP_TEST_ON_SESSION_MSG, env->test_app_plugin_id);
+	stellar_session_mq_subscribe(st, udp_topic_id, APP_TEST_ON_SESSION_MSG, env->test_app_plugin_id);    
+    printf("APP_PROTO_IDENTIFY_TEST_PLUG_INIT OK!\n");	
+
+    return env;
+}
+
+extern "C" void APP_TEST_PLUG_DESTROY(void *ctx)
+{
+    struct app_test_plugin_env *env = (struct app_test_plugin_env *)ctx;
+	free(env);
+    printf("APP_PROTO_IDENTIFY_TEST_PLUG_DESTROY OK!\n");	
+    return ;
+}
+
+#include <gtest/gtest.h>
+#include "stellar/stellar.h"
+
+static int commit_test_result_json(struct app_test_para *para, cJSON *node, const char *name)
+{
+	assert(node != NULL || name != NULL || para != NULL);
+	if(para->test_result_root)
+	{
+		//cJSON_AddItemToObject(g_test_result_root, name, node);
+		cJSON_AddStringToObject(node, "name", name);
+		cJSON_AddItemToArray(para->test_result_root, node);
+		return 0;
+	}
+	return -1;
+}
+
+static cJSON *load_result_from_jsonfile(const char *json_path)
+{
+
+	if(json_path == NULL)return NULL;
+
+	long file_len = 0;
+	char *file_content = NULL;
+	FILE *fp = NULL;
+
+	fp = fopen(json_path, "r+");
+	if (NULL == fp) 
+	{
+		return NULL;
+	}
+	fseek(fp, 0, SEEK_END);
+	file_len = ftell(fp);
+	fseek(fp, 0, SEEK_SET);
+	if (file_len == 0) {
+		fclose(fp);
+		return NULL;
+	}
+	file_content = (char *) malloc(file_len + 1);
+	fread(file_content, file_len, 1, fp);
+	file_content[file_len] = '\0';
+	cJSON *load = cJSON_Parse(file_content);
+	free(file_content);
+	fclose(fp);
+	return load;
+}
+
+
+
+static int app_test_para_start(struct app_test_para *para, const char *load_json_path)
+{
+	para->test_result_root = cJSON_CreateArray();
+	para->load_result_root = load_result_from_jsonfile(load_json_path);    
+	para->result_count=1;//count start from 1
+    return 0;
+}
+
+static int app_test_para_finish(struct app_test_para *para)
+{
+    if(para==NULL)return -1;
+    if(para->test_result_root==NULL || para->load_result_root==NULL)return -1;
+	int ret=-1;
+	if(cJSON_GetArraySize(para->test_result_root)!=cJSON_GetArraySize(para->load_result_root))
+	{
+		char *load_json_str = cJSON_Print(para->load_result_root);
+		printf("LOAD Raw:\n%s\n", load_json_str);
+		free(load_json_str);
+		char *result_json_str = cJSON_Print(para->test_result_root);
+		printf("TEST Raw:\n%s\n", result_json_str);
+		free(result_json_str);		
+		ret=-1;
+		goto error_out;
+	}
+	ret = cJSON_Compare(para->load_result_root, para->test_result_root, 0);
+	if (ret != 1)
+	{
+		char *load_json_str = cJSON_Print(para->load_result_root);
+		printf("LOAD Raw:\n%s\n", load_json_str);
+		free(load_json_str);
+		char *result_json_str = cJSON_Print(para->test_result_root);
+		printf("TEST Raw:\n%s\n", result_json_str);
+		free(result_json_str);
+
+		cJSON *t_load = para->load_result_root->child, *t_test = para->test_result_root->child;
+		while (t_load != NULL)
+		{
+			// print first diff item, then return;
+			if(1 != cJSON_Compare(t_load, t_test, 0))
+			{
+				load_json_str = cJSON_Print(t_load);
+				printf("LOAD Diff:\n%s\n", load_json_str);
+				free(load_json_str);
+				result_json_str = cJSON_Print(t_test);
+				printf("TEST Diff:\n%s\n", result_json_str);
+				free(result_json_str);
+				goto error_out;
+			}
+			t_load = t_load->next;
+			t_test = t_test->next;
+
+		}
+	}
+
+error_out:	
+	if(para->test_result_root)cJSON_Delete(para->test_result_root);
+	if(para->load_result_root)cJSON_Delete(para->load_result_root);
+    return ret;
+}
+
+
+/**********************************************
+ * GTEST MAIN *
+ **********************************************/
+
+
+#define RESULT_JSON_DIR_NAME "test_result_json"
+#define TEST_ENV_DIR_NAME "test_env"
+
+const char *g_test_dir=NULL;
+
+#include <limits.h>
+char g_cwd[PATH_MAX];
+
+#include <stdarg.h>
+static inline void system_cmd(const char *cmd, ...)
+{
+    char buf[4096] = {0};
+    va_list args;
+
+    va_start(args, cmd);
+    vsnprintf(buf, sizeof(buf), cmd, args);
+    va_end(args);
+
+    system(buf);
+}
+
+class gtest_glimpse_detector : public ::testing::Test {
+protected:
+	char result_json_path[4096] = {0};
+	char pcap_path[4096] = {0};
+
+    // Constructor should be default; static members should be set externally
+    gtest_glimpse_detector() = default;
+
+
+    void SetUp() override {
+		
+		chdir(g_cwd);
+		std::cout << "SetUpTestCase called for work_dir: " << g_test_dir<< std::endl;
+		system_cmd("mkdir -p ./conf/");
+		system_cmd("mkdir -p ./log/ ");
+		system_cmd("mkdir -p ./plugin");
+		system_cmd("mkdir -p ./tsgconf/");
+		system_cmd("cp  %s/%s/tsg_l7_protocol.conf ./tsgconf/tsg_l7_protocol.conf", g_test_dir, TEST_ENV_DIR_NAME);
+		system_cmd("cp  %s/%s/stellar.toml ./conf/stellar.toml", g_test_dir, TEST_ENV_DIR_NAME);
+		system_cmd("cp  %s/%s/log.toml ./conf/log.toml", g_test_dir, TEST_ENV_DIR_NAME);
+		system_cmd("cp  %s/%s/spec.toml ./plugin/spec.toml", g_test_dir, TEST_ENV_DIR_NAME);
+        // Retrieve current test info
+        const ::testing::TestInfo* test_info = ::testing::UnitTest::GetInstance()->current_test_info();
+        
+            std::cout << "Setting up test environment for test case: " 
+                      << test_info->test_case_name() 
+                      << " in work_dir: " << g_test_dir << std::endl;
+
+            // Initialize paths based on test case name and arguments
+            memset(&g_test_para, 0, sizeof(struct app_test_para));
+            snprintf(result_json_path, sizeof(result_json_path), 
+                     "%s/%s/%s.json", g_test_dir, RESULT_JSON_DIR_NAME, 
+                     test_info->name());
+            snprintf(pcap_path, sizeof(pcap_path), 
+                     "%s/%s", g_test_dir, test_info->name());
+
+			std::cout << "result_json_path: " << result_json_path << std::endl;
+			std::cout << "pcap_path: " << pcap_path << std::endl;
+			system_cmd("tomlq -t -i  '.packet_io.dumpfile_dir = \"%s\" ' ./conf/stellar.toml", pcap_path);
+			system_cmd("pwd");
+			system_cmd("cat ./conf/stellar.toml");
+    }
+
+};
+
+
+TEST_F(gtest_glimpse_detector, app_pcap) {
+
+	app_test_para_start(&g_test_para, result_json_path);
+	stellar_run(0, NULL);
+	EXPECT_EQ(app_test_para_finish(&g_test_para), 1);    
+}
+
+TEST_F(gtest_glimpse_detector, dns_pcap) {
+
+	app_test_para_start(&g_test_para, result_json_path);
+	stellar_run(0, NULL);
+	EXPECT_EQ(app_test_para_finish(&g_test_para), 1);    
+}
+
+TEST_F(gtest_glimpse_detector, mixed_pcap) {
+
+	app_test_para_start(&g_test_para, result_json_path);
+	stellar_run(0, NULL);
+	EXPECT_EQ(app_test_para_finish(&g_test_para), 1);    
+}
+
+
+TEST_F(gtest_glimpse_detector, openvpn_pcap) {
+
+	app_test_para_start(&g_test_para, result_json_path);
+	stellar_run(0, NULL);
+	EXPECT_EQ(app_test_para_finish(&g_test_para), 1);    
+}
+
+
+TEST_F(gtest_glimpse_detector, ppp_pcap) {
+
+	app_test_para_start(&g_test_para, result_json_path);
+	stellar_run(0, NULL);
+	EXPECT_EQ(app_test_para_finish(&g_test_para), 1);    
+}
+
+TEST_F(gtest_glimpse_detector, socks_pcap) {
+
+	app_test_para_start(&g_test_para, result_json_path);
+	stellar_run(0, NULL);
+	EXPECT_EQ(app_test_para_finish(&g_test_para), 1);    
+}
+
+
+int main(int argc, char ** argv)
+{
+	if(argc != 2)
+	{
+		printf("Invalid Argument!!!\n Usage: ./[gtest_main] [/path/to/glimpse_detector_test_dir] \n");
+		return -1;
+	}
+	getcwd(g_cwd, sizeof(g_cwd));
+	::testing::InitGoogleTest(&argc, argv);
+	g_test_dir=argv[1];
+	return RUN_ALL_TESTS();
+}

test/glimpse_detector/test_env/log.toml

@@ -0,0 +1,4 @@
+[log]
+output = file      # stderr, file
+file   = "log/stellar.log"
+level  = INFO       # TRACE, DEBUG, INFO, WARN, ERROR, FATAL

test/glimpse_detector/test_env/spec.toml

@@ -0,0 +1,11 @@
+# stellar_plugin.toml
+#
+[[plugin]]
+path = ""
+init = "APP_GLIMPSE_DETECTOR_LOAD"
+exit = "APP_GLIMPSE_DETECTOR_UNLOAD"
+
+[[plugin]]
+path = ""
+init = "APP_TEST_PLUG_INIT"
+exit = "APP_TEST_PLUG_DESTROY"

test/glimpse_detector/test_env/stellar.toml

@@ -0,0 +1,56 @@
+[id_generator]
+snowflake_worker_id_base = 1   # [0, 31]
+snowflake_worker_id_offset = 2 # [0, 127]
+
+[packet_io]
+mode = "dumpfile"                        # dumpfile, marsio
+app_symbol = "stellar"
+dev_symbol = "nf_0_fw"
+
+dumpfile_dir = "/tmp/dumpfile/"
+nr_threads = 1                         # [1, 256]
+cpu_mask = [5, 6, 7, 8, 9, 10, 11, 12]
+
+[ip_reassembly]
+enable = 1
+timeout = 10000      # range: [1, 60000] (ms)
+bucket_entries = 256 # range: [1, 4294967295] (must be power of 2)
+bucket_num = 4096    # range: [1, 4294967295]
+
+[session_manager]
+# max session number
+max_tcp_session_num = 50000
+max_udp_session_num = 50000
+
+# session overload evict
+tcp_overload_evict_old_sess = 1 # 1: evict old session, 0: bypass new session
+udp_overload_evict_old_sess = 1 # 1: evict old session, 0: bypass new session
+
+# TCP timeout
+tcp_init_timeout = 5000           # range: [1, 60000] (ms)
+tcp_handshake_timeout = 5000      # range: [1, 60000] (ms)
+tcp_data_timeout = 5000           # range: [1, 15999999000] (ms)
+tcp_half_closed_timeout = 5000    # range: [1, 604800000] (ms)
+tcp_time_wait_timeout = 5000      # range: [1, 600000] (ms)
+tcp_discard_timeout = 10000       # range: [1, 15999999000] (ms)
+tcp_unverified_rst_timeout = 5000 # range: [1, 600000] (ms)
+# UDP timeout
+udp_data_timeout = 5000    # range: [1, 15999999000] (ms)
+udp_discard_timeout = 5000 # range: [1, 15999999000] (ms)
+
+# duplicate packet filter
+duplicated_packet_filter_enable = 1
+duplicated_packet_filter_capacity = 1000000   # range: [1, 4294967295]
+duplicated_packet_filter_timeout = 10000      # range: [1, 60000] (ms)
+duplicated_packet_filter_error_rate = 0.00001 # range: [0.0, 1.0]
+
+# evicted session filter
+evicted_session_filter_enable = 1
+evicted_session_filter_capacity = 1000000   # range: [1, 4294967295]
+evicted_session_filter_timeout = 10000      # range: [1, 60000] (ms)
+evicted_session_filter_error_rate = 0.00001 # range: [0.0, 1.0]
+
+# TCP reassembly (Per direction)
+tcp_reassembly_enable = 1
+tcp_reassembly_max_timeout = 10000 # range: [1, 60000] (ms)
+tcp_reassembly_max_segments = 256  # range: [2, 4096]

test/glimpse_detector/test_env/tsg_l7_protocol.conf

@@ -0,0 +1,61 @@
+#TYPE：1:UCHAR,2:USHORT,3:USTRING,4:ULOG,5:USTRING,6:FILE,7:UBASE64,8:PACKET
+#TYPE	FIELD		VALUE
+STRING	UNCATEGORIZED	8000
+#STRING	UNCATEGORIZED	8001
+#STRING	UNKNOWN_OTHER	8002
+STRING	DNS		32
+STRING	FTP		45
+STRING	FTPS		751
+STRING	HTTP		67
+STRING	HTTPS		68
+STRING	ICMP		70
+STRING	IKE		8003
+STRING	MAIL		8004
+STRING	IMAP		75
+STRING	IMAPS		76
+STRING	IPSEC		85
+STRING	XMPP		94
+STRING	L2TP		98
+STRING	NTP		137
+STRING	POP3		147
+STRING	POP3S		148
+STRING	PPTP		153
+STRING	QUIC		2521
+STRING	SIP		182
+STRING	SMB		185
+STRING	SMTP		186
+STRING	SMTPS		187
+STRING	SPDY		1469
+STRING	SSH		198
+STRING	SSL		199
+STRING	SOCKS		8005
+STRING	TELNET		209
+STRING	DHCP		29
+STRING	RADIUS		158
+STRING	OPENVPN		336
+STRING	STUN		201
+STRING	TEREDO		555
+STRING	DTLS		1291
+STRING	DoH		8006
+STRING	ISAKMP		92
+STRING	MDNS		3835
+STRING	NETBIOS		129
+STRING	NETFLOW		130
+STRING	RDP		159
+STRING	RTCP		174
+STRING	RTP		175
+STRING	SLP		8007
+STRING	SNMP		190
+STRING	SSDP		197
+STRING	TFTP		211
+STRING	BJNP		2481
+STRING	LDAP		100
+STRING	RTMP		337
+STRING	RTSP		176
+STRING	ESNI		8008
+STRING  Stratum     8169
+STRING	QQ		156
+STRING	WeChat		1296
+STRING	WIREGUARD	3700
+STRING	MMS	115
+STRING	RSYNC	173

test/glimpse_detector/test_result_json/app_pcap.json

@@ -0,0 +1,50 @@
+[{
+		"Tuple4":	"192.168.57.168:8758-123.151.78.109:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[156],
+		"l7_label_name":	["QQ"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_1"
+	}, {
+		"Tuple4":	"192.168.58.58:51876-175.27.3.209:443-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[1296],
+		"l7_label_name":	["WeChat"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_2"
+	}, {
+		"Tuple4":	"192.168.57.168:59361-106.119.174.27:18001-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[156],
+		"l7_label_name":	["QQ"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_3"
+	}, {
+		"Tuple4":	"192.168.58.58:57907-119.167.204.98:8080-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[1296],
+		"l7_label_name":	["WeChat"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_4"
+	}, {
+		"Tuple4":	"192.168.39.77:62682-81.181.55.9:1337-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[3700],
+		"l7_label_name":	["WIREGUARD"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_5"
+	}, {
+		"Tuple4":	"192.168.50.26:56658-209.58.189.105:58237-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[3700],
+		"l7_label_name":	["WIREGUARD"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_6"
+	}, {
+		"Tuple4":	"196.188.136.150:20620-51.77.200.55:51820-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[3700],
+		"l7_label_name":	["WIREGUARD"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_7"
+	}]

test/glimpse_detector/test_result_json/dns_pcap.json

@@ -0,0 +1,402 @@
+[{
+		"Tuple4":	"124.88.175.201:17997-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_1"
+	}, {
+		"Tuple4":	"124.88.175.201:18014-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_2"
+	}, {
+		"Tuple4":	"124.88.175.201:18081-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_3"
+	}, {
+		"Tuple4":	"124.88.175.201:18082-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_4"
+	}, {
+		"Tuple4":	"124.88.175.201:18091-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_5"
+	}, {
+		"Tuple4":	"124.88.175.201:18088-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_6"
+	}, {
+		"Tuple4":	"124.88.175.201:18103-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_7"
+	}, {
+		"Tuple4":	"124.88.175.201:18126-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_8"
+	}, {
+		"Tuple4":	"124.88.175.201:18136-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_9"
+	}, {
+		"Tuple4":	"124.88.175.201:18142-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_10"
+	}, {
+		"Tuple4":	"124.88.175.201:18210-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_11"
+	}, {
+		"Tuple4":	"124.88.175.201:18215-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_12"
+	}, {
+		"Tuple4":	"124.88.175.201:18219-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_13"
+	}, {
+		"Tuple4":	"124.88.175.201:18223-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_14"
+	}, {
+		"Tuple4":	"124.88.175.201:18236-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_15"
+	}, {
+		"Tuple4":	"124.88.175.201:18239-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_16"
+	}, {
+		"Tuple4":	"124.88.175.201:18242-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_17"
+	}, {
+		"Tuple4":	"124.88.175.201:18256-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_18"
+	}, {
+		"Tuple4":	"124.88.175.201:18266-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_19"
+	}, {
+		"Tuple4":	"124.88.175.201:18336-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_20"
+	}, {
+		"Tuple4":	"124.88.175.201:18345-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_21"
+	}, {
+		"Tuple4":	"124.88.175.201:18347-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_22"
+	}, {
+		"Tuple4":	"124.88.175.201:18351-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_23"
+	}, {
+		"Tuple4":	"124.88.175.201:18354-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_24"
+	}, {
+		"Tuple4":	"124.88.175.201:18358-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_25"
+	}, {
+		"Tuple4":	"124.88.175.201:18360-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_26"
+	}, {
+		"Tuple4":	"60.13.179.249:38470-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_27"
+	}, {
+		"Tuple4":	"60.13.179.249:38594-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_28"
+	}, {
+		"Tuple4":	"60.13.179.249:38608-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_29"
+	}, {
+		"Tuple4":	"60.13.179.249:38624-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_30"
+	}, {
+		"Tuple4":	"60.13.179.249:38712-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_31"
+	}, {
+		"Tuple4":	"60.13.179.249:38692-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_32"
+	}, {
+		"Tuple4":	"60.13.179.249:38694-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_33"
+	}, {
+		"Tuple4":	"60.13.179.249:38886-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_34"
+	}, {
+		"Tuple4":	"60.13.179.249:38904-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_35"
+	}, {
+		"Tuple4":	"60.13.179.249:38912-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_36"
+	}, {
+		"Tuple4":	"60.13.179.249:38960-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_37"
+	}, {
+		"Tuple4":	"60.13.179.249:38976-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_38"
+	}, {
+		"Tuple4":	"60.13.179.249:38972-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_39"
+	}, {
+		"Tuple4":	"60.13.179.249:39016-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_40"
+	}, {
+		"Tuple4":	"60.13.179.249:38978-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_41"
+	}, {
+		"Tuple4":	"60.13.179.249:39000-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_42"
+	}, {
+		"Tuple4":	"60.13.179.249:39052-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_43"
+	}, {
+		"Tuple4":	"60.13.179.249:39082-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_44"
+	}, {
+		"Tuple4":	"60.13.179.249:39120-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_45"
+	}, {
+		"Tuple4":	"60.13.179.249:39114-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_46"
+	}, {
+		"Tuple4":	"60.13.179.249:39176-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_47"
+	}, {
+		"Tuple4":	"60.13.179.249:39186-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_48"
+	}, {
+		"Tuple4":	"60.13.179.249:39216-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_49"
+	}, {
+		"Tuple4":	"60.13.179.249:39246-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_50"
+	}, {
+		"Tuple4":	"60.13.179.249:39268-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_51"
+	}, {
+		"Tuple4":	"60.13.179.249:26834-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_52"
+	}, {
+		"Tuple4":	"124.88.175.201:18095-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_53"
+	}, {
+		"Tuple4":	"60.13.195.137:41008-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_54"
+	}, {
+		"Tuple4":	"124.88.175.201:18111-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_55"
+	}, {
+		"Tuple4":	"60.13.179.249:26633-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_56"
+	}, {
+		"Tuple4":	"60.13.179.249:26709-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_57"
+	}, {
+		"Tuple4":	"60.13.179.249:37897-8.8.8.8:53-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_58"
+	}]

test/glimpse_detector/test_result_json/empty_array.json

@@ -0,0 +1 @@
+[]

test/glimpse_detector/test_result_json/mixed_pcap.json

@@ -0,0 +1,292 @@
+ [{
+ 		"Tuple4":	"117.146.23.226:63007-211.95.50.57:80-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[67],
+ 		"l7_label_name":	["HTTP"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_1"
+ 	}, {
+ 		"Tuple4":	"117.145.115.74:37855-218.31.124.234:21121-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[45],
+ 		"l7_label_name":	["FTP"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_2"
+ 	}, {
+ 		"Tuple4":	"117.146.23.226:63007-211.95.50.57:80-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[67],
+ 		"l7_label_name":	["HTTP"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_3"
+ 	}, {
+ 		"Tuple4":	"117.145.115.74:37923-218.31.124.234:21121-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[45],
+ 		"l7_label_name":	["FTP"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_4"
+ 	}, {
+ 		"Tuple4":	"218.229.99.73:25-172.17.107.32:18867-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[186],
+ 		"l7_label_name":	["SMTP"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_5"
+ 	}, {
+ 		"Tuple4":	"117.145.115.74:37855-218.31.124.234:21121-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[45],
+ 		"l7_label_name":	["FTP"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_6"
+ 	}, {
+ 		"Tuple4":	"196.188.12.179:54776-192.185.31.244:110-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[147],
+ 		"l7_label_name":	["POP3"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_7"
+ 	}, {
+ 		"Tuple4":	"196.189.57.105:14636-68.232.159.216:25-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[186],
+ 		"l7_label_name":	["SMTP"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_8"
+ 	}, {
+ 		"Tuple4":	"196.190.160.6:20997-64.225.54.152:25-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[186],
+ 		"l7_label_name":	["SMTP"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_9"
+ 	}, {
+ 		"Tuple4":	"196.188.3.8:50020-82.98.178.159:110-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[147],
+ 		"l7_label_name":	["POP3"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_10"
+ 	}, {
+ 		"Tuple4":	"196.189.45.189:1440-40.101.92.178:587-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[186],
+ 		"l7_label_name":	["SMTP"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_11"
+ 	}, {
+ 		"Tuple4":	"196.191.120.240:37943-81.19.77.166:587-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[186],
+ 		"l7_label_name":	["SMTP"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_12"
+ 	}, {
+ 		"Tuple4":	"117.156.19.31:8000-39.144.206.199:22005-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[201, 174, 175],
+ 		"l7_label_name":	["STUN", "RTCP", "RTP"],
+ 		"STREAM_DIR":	"S2C",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_13"
+ 	}, {
+ 		"Tuple4":	"85.117.117.169:47762-173.194.73.95:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_14"
+ 	}, {
+ 		"Tuple4":	"85.117.113.98:4340-74.125.131.95:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_15"
+ 	}, {
+ 		"Tuple4":	"90.143.189.5:8026-173.194.188.40:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_16"
+ 	}, {
+ 		"Tuple4":	"85.117.125.8:21243-173.194.73.102:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_17"
+ 	}, {
+ 		"Tuple4":	"85.117.122.194:32370-173.194.220.138:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_18"
+ 	}, {
+ 		"Tuple4":	"10.32.121.249:33765-64.233.161.95:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_19"
+ 	}, {
+ 		"Tuple4":	"85.117.119.45:22495-173.194.73.101:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_20"
+ 	}, {
+ 		"Tuple4":	"90.143.180.56:28496-64.233.165.113:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_21"
+ 	}, {
+ 		"Tuple4":	"112.43.145.231:18699-112.46.25.216:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_22"
+ 	}, {
+ 		"Tuple4":	"108.177.14.138:443-146.158.67.194:1044-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"S2C",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_23"
+ 	}, {
+ 		"Tuple4":	"36.189.11.71:443-36.142.158.169:16385-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"S2C",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_24"
+ 	}, {
+ 		"Tuple4":	"192.168.50.29:61891-31.13.77.35:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_25"
+ 	}, {
+ 		"Tuple4":	"192.168.60.9:55659-69.171.250.63:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_26"
+ 	}, {
+ 		"Tuple4":	"192.168.137.141:50006-31.13.77.17:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_27"
+ 	}, {
+ 		"Tuple4":	"217.76.77.70:33232-173.194.220.105:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_28"
+ 	}, {
+ 		"Tuple4":	"192.168.60.32:59699-64.233.164.84:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_29"
+ 	}, {
+ 		"Tuple4":	"195.12.120.14:41803-173.194.222.101:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_30"
+ 	}, {
+ 		"Tuple4":	"10.130.2.104:55426-67.225.241.247:587-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[186],
+ 		"l7_label_name":	["SMTP"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_31"
+ 	}, {
+ 		"Tuple4":	"10.130.13.155:57719-50.87.145.154:26-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[186],
+ 		"l7_label_name":	["SMTP"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_32"
+ 	}, {
+ 		"Tuple4":	"196.189.24.94:20997-98.138.112.34:25-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	"UNKNOWN",
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_33"
+ 	}, {
+ 		"Tuple4":	"196.189.0.15:53357-39.156.6.106:110-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[147],
+ 		"l7_label_name":	["POP3"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_34"
+ 	}, {
+ 		"Tuple4":	"196.188.121.1:53357-68.183.134.15:110-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	"UNKNOWN",
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_35"
+ 	}, {
+ 		"Tuple4":	"196.189.5.89:36734-101.32.113.90:143-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[75],
+ 		"l7_label_name":	["IMAP"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_36"
+ 	}, {
+ 		"Tuple4":	"196.188.28.149:50415-69.195.110.51:143-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[75],
+ 		"l7_label_name":	["IMAP"],
+ 		"STREAM_DIR":	"C2S",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_37"
+ 	}, {
+ 		"Tuple4":	"8.210.152.150:53-115.24.235.11:4029-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[32],
+ 		"l7_label_name":	["DNS"],
+ 		"STREAM_DIR":	"S2C",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_38"
+ 	}, {
+ 		"Tuple4":	"192.168.137.147:45736-78.1.76.154:57133-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[201, 1291],
+ 		"l7_label_name":	["STUN", "DTLS"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_39"
+ 	}, {
+ 		"Tuple4":	"103.3.138.59:12521-123.125.116.52:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_40"
+ 	}, {
+ 		"Tuple4":	"192.168.40.82:41450-192.168.44.230:7002-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	"UNKNOWN",
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_41"
+ 	}, {
+ 		"Tuple4":	"172.20.9.135:65045-64.233.162.119:443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_42"
+}]

test/glimpse_detector/test_result_json/openvpn_pcap.json

@@ -0,0 +1,92 @@
+ [{
+ 		"Tuple4":	"192.168.64.27:61801-219.100.37.7:443-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[336],
+ 		"l7_label_name":	["OPENVPN"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_1"
+ 	}, {
+ 		"Tuple4":	"172.16.18.30:12272-172.16.18.11:1194-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[336],
+ 		"l7_label_name":	["OPENVPN"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_2"
+ 	}, {
+ 		"Tuple4":	"2607:5d00:2:2::38:129:61897-2a01:4f8:200:812b:65b::1:3042-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[336],
+ 		"l7_label_name":	["OPENVPN"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_3"
+ 	}, {
+ 		"Tuple4":	"192.168.56.31:49941-185.225.234.3:1194-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[336],
+ 		"l7_label_name":	["OPENVPN"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_4"
+ 	}, {
+ 		"Tuple4":	"192.168.58.112:41925-36.102.226.57:8443-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[2521],
+ 		"l7_label_name":	["QUIC"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_5"
+ 	}, {
+ 		"Tuple4":	"192.168.88.3:50568-46.246.122.61:1198-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[336],
+ 		"l7_label_name":	["OPENVPN"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_6"
+ 	}, {
+ 		"Tuple4":	"192.168.1.77:60140-46.101.231.218:443-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[336],
+ 		"l7_label_name":	["OPENVPN"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_7"
+ 	}, {
+ 		"Tuple4":	"192.168.43.12:41507-139.59.151.137:13680-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[336],
+ 		"l7_label_name":	["OPENVPN"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_8"
+ 	}, {
+ 		"Tuple4":	"192.168.43.18:13680-139.59.151.137:13680-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[336],
+ 		"l7_label_name":	["OPENVPN"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_9"
+ 	}, {
+ 		"Tuple4":	"192.168.34.249:63111-3.115.218.192:1194-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[336],
+ 		"l7_label_name":	["OPENVPN"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_10"
+ 	}, {
+ 		"Tuple4":	"192.168.11.14:34400-202.43.148.189:1194-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[336],
+ 		"l7_label_name":	["OPENVPN"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_11"
+ 	}, {
+ 		"Tuple4":	"202.43.148.166:40914-202.43.148.189:1194-17-0",
+ 		"STREAM_TYPE":	"UDP",
+ 		"l7_label_id":	[336],
+ 		"l7_label_name":	["OPENVPN"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_12"
+ 	}, {
+ 		"Tuple4":	"172.31.136.16:51706-172.31.250.5:1194-6-0",
+ 		"STREAM_TYPE":	"TCP",
+ 		"l7_label_id":	[336],
+ 		"l7_label_name":	["OPENVPN"],
+ 		"STREAM_DIR":	"DOUBLE",
+ 		"name":	"APP_PROTO_IDENTIFY_RESULT_13"
+ 	}]

test/glimpse_detector/test_result_json/ppp_pcap.json

@@ -0,0 +1,826 @@
+[{
+		"Tuple4":	"192.168.10.91:62176-220.249.244.23:33445-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_1"
+	}, {
+		"Tuple4":	"172.16.2.100:49247-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_2"
+	}, {
+		"Tuple4":	"172.16.2.100:49245-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_3"
+	}, {
+		"Tuple4":	"172.16.2.100:49252-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_4"
+	}, {
+		"Tuple4":	"172.16.2.100:49255-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_5"
+	}, {
+		"Tuple4":	"172.16.2.100:49248-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_6"
+	}, {
+		"Tuple4":	"172.16.2.100:49254-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_7"
+	}, {
+		"Tuple4":	"172.16.2.100:49259-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_8"
+	}, {
+		"Tuple4":	"172.16.0.100:50112-172.16.0.254:1723-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[153],
+		"l7_label_name":	["PPTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_9"
+	}, {
+		"Tuple4":	"172.16.2.100:50072-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_10"
+	}, {
+		"Tuple4":	"172.16.2.100:49250-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_11"
+	}, {
+		"Tuple4":	"172.16.0.100:500-172.16.0.254:500-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[92],
+		"l7_label_name":	["ISAKMP"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_12"
+	}, {
+		"Tuple4":	"172.16.2.100:63747-224.0.0.252:5355-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_13"
+	}, {
+		"Tuple4":	"172.16.2.100:65012-224.0.0.252:5355-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_14"
+	}, {
+		"Tuple4":	"172.16.2.100:68-255.255.255.255:67-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_15"
+	}, {
+		"Tuple4":	"172.16.2.100:63917-224.0.0.252:5355-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_16"
+	}, {
+		"Tuple4":	"172.16.2.100:50147-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_17"
+	}, {
+		"Tuple4":	"172.16.2.100:50866-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_18"
+	}, {
+		"Tuple4":	"172.16.2.100:57084-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_19"
+	}, {
+		"Tuple4":	"172.16.2.100:138-255.255.255.255:138-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[129],
+		"l7_label_name":	["NETBIOS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_20"
+	}, {
+		"Tuple4":	"172.16.2.100:51103-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_21"
+	}, {
+		"Tuple4":	"172.16.2.100:53831-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_22"
+	}, {
+		"Tuple4":	"172.16.2.100:52460-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_23"
+	}, {
+		"Tuple4":	"172.16.2.100:50497-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_24"
+	}, {
+		"Tuple4":	"172.16.2.100:50233-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_25"
+	}, {
+		"Tuple4":	"172.16.2.100:64355-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_26"
+	}, {
+		"Tuple4":	"172.16.2.100:50648-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_27"
+	}, {
+		"Tuple4":	"172.16.2.100:52851-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_28"
+	}, {
+		"Tuple4":	"172.16.2.100:58476-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_29"
+	}, {
+		"Tuple4":	"172.16.2.100:50897-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_30"
+	}, {
+		"Tuple4":	"172.16.2.100:65380-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_31"
+	}, {
+		"Tuple4":	"172.16.2.100:58422-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_32"
+	}, {
+		"Tuple4":	"172.16.2.100:64882-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_33"
+	}, {
+		"Tuple4":	"172.16.2.100:51787-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_34"
+	}, {
+		"Tuple4":	"172.16.2.100:59393-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_35"
+	}, {
+		"Tuple4":	"172.16.2.100:52783-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_36"
+	}, {
+		"Tuple4":	"172.16.2.100:55755-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_37"
+	}, {
+		"Tuple4":	"172.16.2.100:60213-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_38"
+	}, {
+		"Tuple4":	"172.16.2.100:64847-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_39"
+	}, {
+		"Tuple4":	"172.16.2.100:64115-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_40"
+	}, {
+		"Tuple4":	"172.16.2.100:57554-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_41"
+	}, {
+		"Tuple4":	"172.16.2.100:49969-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_42"
+	}, {
+		"Tuple4":	"172.16.2.100:57553-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_43"
+	}, {
+		"Tuple4":	"172.16.2.100:58185-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_44"
+	}, {
+		"Tuple4":	"172.16.2.100:60349-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_45"
+	}, {
+		"Tuple4":	"172.16.2.100:62337-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_46"
+	}, {
+		"Tuple4":	"172.16.2.100:64382-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_47"
+	}, {
+		"Tuple4":	"172.16.2.100:62694-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_48"
+	}, {
+		"Tuple4":	"172.16.2.100:64915-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_49"
+	}, {
+		"Tuple4":	"172.16.2.100:50578-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_50"
+	}, {
+		"Tuple4":	"172.16.2.100:56971-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_51"
+	}, {
+		"Tuple4":	"172.16.2.100:62721-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_52"
+	}, {
+		"Tuple4":	"172.16.2.100:50655-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_53"
+	}, {
+		"Tuple4":	"172.16.2.100:54363-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_54"
+	}, {
+		"Tuple4":	"172.16.2.100:53796-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_55"
+	}, {
+		"Tuple4":	"172.16.2.100:59348-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_56"
+	}, {
+		"Tuple4":	"172.16.2.100:49686-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_57"
+	}, {
+		"Tuple4":	"172.16.2.100:50273-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_58"
+	}, {
+		"Tuple4":	"172.16.2.100:63738-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_59"
+	}, {
+		"Tuple4":	"172.16.2.100:62490-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_60"
+	}, {
+		"Tuple4":	"172.16.2.100:61200-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_61"
+	}, {
+		"Tuple4":	"172.16.2.100:64138-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_62"
+	}, {
+		"Tuple4":	"172.16.2.100:64736-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_63"
+	}, {
+		"Tuple4":	"172.16.2.100:54188-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_64"
+	}, {
+		"Tuple4":	"172.16.2.100:59408-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_65"
+	}, {
+		"Tuple4":	"172.16.2.100:49446-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_66"
+	}, {
+		"Tuple4":	"172.16.2.100:58556-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_67"
+	}, {
+		"Tuple4":	"172.16.2.100:52129-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_68"
+	}, {
+		"Tuple4":	"172.16.2.100:50258-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_69"
+	}, {
+		"Tuple4":	"172.16.2.100:51697-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_70"
+	}, {
+		"Tuple4":	"172.16.2.100:58428-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_71"
+	}, {
+		"Tuple4":	"172.16.2.100:51307-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_72"
+	}, {
+		"Tuple4":	"172.16.2.100:55973-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_73"
+	}, {
+		"Tuple4":	"172.16.2.100:53758-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_74"
+	}, {
+		"Tuple4":	"172.16.2.100:62140-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_75"
+	}, {
+		"Tuple4":	"172.16.2.100:63652-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_76"
+	}, {
+		"Tuple4":	"172.16.2.100:60777-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_77"
+	}, {
+		"Tuple4":	"172.16.2.100:49246-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_78"
+	}, {
+		"Tuple4":	"172.16.2.100:56967-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_79"
+	}, {
+		"Tuple4":	"172.16.2.100:60549-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_80"
+	}, {
+		"Tuple4":	"172.16.2.100:49621-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_81"
+	}, {
+		"Tuple4":	"172.16.2.100:49257-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_82"
+	}, {
+		"Tuple4":	"172.16.2.100:65424-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_83"
+	}, {
+		"Tuple4":	"172.16.2.100:49249-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_84"
+	}, {
+		"Tuple4":	"172.16.2.100:49256-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_85"
+	}, {
+		"Tuple4":	"172.16.2.100:61044-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_86"
+	}, {
+		"Tuple4":	"172.16.2.100:55106-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_87"
+	}, {
+		"Tuple4":	"172.16.2.100:62335-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_88"
+	}, {
+		"Tuple4":	"172.16.2.100:54356-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_89"
+	}, {
+		"Tuple4":	"172.16.2.100:51628-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_90"
+	}, {
+		"Tuple4":	"172.16.2.100:50188-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_91"
+	}, {
+		"Tuple4":	"172.16.2.100:57198-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_92"
+	}, {
+		"Tuple4":	"172.16.2.100:57310-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_93"
+	}, {
+		"Tuple4":	"172.16.2.100:49258-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_94"
+	}, {
+		"Tuple4":	"172.16.2.100:63697-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_95"
+	}, {
+		"Tuple4":	"172.16.2.100:50244-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_96"
+	}, {
+		"Tuple4":	"172.16.2.100:57229-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_97"
+	}, {
+		"Tuple4":	"172.16.2.100:62401-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_98"
+	}, {
+		"Tuple4":	"172.16.2.100:58807-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_99"
+	}, {
+		"Tuple4":	"172.16.2.100:49264-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_100"
+	}, {
+		"Tuple4":	"172.16.2.100:49261-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_101"
+	}, {
+		"Tuple4":	"172.16.2.100:49253-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_102"
+	}, {
+		"Tuple4":	"172.16.2.100:50564-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_103"
+	}, {
+		"Tuple4":	"172.16.2.100:49263-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_104"
+	}, {
+		"Tuple4":	"172.16.2.100:49251-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_105"
+	}, {
+		"Tuple4":	"172.16.2.100:49265-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_106"
+	}, {
+		"Tuple4":	"172.16.2.100:60282-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_107"
+	}, {
+		"Tuple4":	"172.16.2.100:58248-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_108"
+	}, {
+		"Tuple4":	"172.16.2.100:53188-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_109"
+	}, {
+		"Tuple4":	"172.16.2.100:53483-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_110"
+	}, {
+		"Tuple4":	"172.16.2.100:49260-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_111"
+	}, {
+		"Tuple4":	"172.16.2.100:51121-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_112"
+	}, {
+		"Tuple4":	"172.16.2.100:52562-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_113"
+	}, {
+		"Tuple4":	"172.16.2.100:49262-10.0.6.229:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_114"
+	}, {
+		"Tuple4":	"172.16.2.100:51048-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_115"
+	}, {
+		"Tuple4":	"172.16.2.100:51806-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_116"
+	}, {
+		"Tuple4":	"172.16.2.100:137-255.255.255.255:137-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[129],
+		"l7_label_name":	["NETBIOS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_117"
+	}, {
+		"Tuple4":	"172.16.2.100:60348-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_118"
+	}, {
+		"Tuple4":	"172.16.0.100:1701-172.16.0.254:1701-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[158],
+		"l7_label_name":	["RADIUS"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_119"
+	}]

test/glimpse_detector/test_result_json/socks_pcap.json

@@ -0,0 +1,266 @@
+[{
+		"Tuple4":	"10.0.0.1:1637-10.0.0.2:21477-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 67],
+		"l7_label_name":	["SOCKS", "HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_1"
+	}, {
+		"Tuple4":	"192.168.122.100:62395-192.168.122.202:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 45],
+		"l7_label_name":	["SOCKS", "FTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_2"
+	}, {
+		"Tuple4":	"192.168.122.100:50259-192.168.122.202:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 67],
+		"l7_label_name":	["SOCKS", "HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_3"
+	}, {
+		"Tuple4":	"10.180.156.185:53533-10.180.156.249:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 67],
+		"l7_label_name":	["SOCKS", "HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_4"
+	}, {
+		"Tuple4":	"10.180.156.185:53534-10.180.156.249:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 67],
+		"l7_label_name":	["SOCKS", "HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_5"
+	}, {
+		"Tuple4":	"10.180.156.185:53535-10.180.156.249:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 67],
+		"l7_label_name":	["SOCKS", "HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_6"
+	}, {
+		"Tuple4":	"10.0.0.1:1637-10.0.0.2:21477-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 67],
+		"l7_label_name":	["SOCKS", "HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_7"
+	}, {
+		"Tuple4":	"10.0.0.1:54263-10.0.0.2:8855-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_8"
+	}, {
+		"Tuple4":	"10.0.0.2:53709-10.0.0.1:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[186],
+		"l7_label_name":	["SMTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_9"
+	}, {
+		"Tuple4":	"10.180.156.185:54068-10.180.156.249:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005],
+		"l7_label_name":	["SOCKS"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_10"
+	}, {
+		"Tuple4":	"10.180.156.185:54069-10.180.156.249:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005],
+		"l7_label_name":	["SOCKS"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_11"
+	}, {
+		"Tuple4":	"10.180.156.185:54072-10.180.156.249:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 67],
+		"l7_label_name":	["SOCKS", "HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_12"
+	}, {
+		"Tuple4":	"10.180.156.185:53554-10.180.156.249:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 199],
+		"l7_label_name":	["SOCKS", "SSL"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_13"
+	}, {
+		"Tuple4":	"10.180.156.185:53555-10.180.156.249:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 199],
+		"l7_label_name":	["SOCKS", "SSL"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_14"
+	}, {
+		"Tuple4":	"10.180.156.185:53556-10.180.156.249:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 199],
+		"l7_label_name":	["SOCKS", "SSL"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_15"
+	}, {
+		"Tuple4":	"10.10.9.37:1063-100.100.9.37:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 147],
+		"l7_label_name":	["SOCKS", "POP3"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_16"
+	}, {
+		"Tuple4":	"10.10.10.38:1061-100.100.10.38:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 186],
+		"l7_label_name":	["SOCKS", "SMTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_17"
+	}, {
+		"Tuple4":	"192.168.122.100:50260-192.168.122.202:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 67],
+		"l7_label_name":	["SOCKS", "HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_18"
+	}, {
+		"Tuple4":	"192.168.122.100:50261-192.168.122.202:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 67],
+		"l7_label_name":	["SOCKS", "HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_19"
+	}, {
+		"Tuple4":	"192.168.122.100:50274-192.168.122.202:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 67],
+		"l7_label_name":	["SOCKS", "HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_20"
+	}, {
+		"Tuple4":	"192.168.122.100:50275-192.168.122.202:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 67],
+		"l7_label_name":	["SOCKS", "HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_21"
+	}, {
+		"Tuple4":	"192.168.122.100:50273-192.168.122.202:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 67],
+		"l7_label_name":	["SOCKS", "HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_22"
+	}, {
+		"Tuple4":	"192.168.122.100:62396-192.168.122.202:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005],
+		"l7_label_name":	["SOCKS"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_23"
+	}, {
+		"Tuple4":	"192.168.122.100:62397-192.168.122.202:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005],
+		"l7_label_name":	["SOCKS"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_24"
+	}, {
+		"Tuple4":	"192.168.122.100:62398-192.168.122.202:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005],
+		"l7_label_name":	["SOCKS"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_25"
+	}, {
+		"Tuple4":	"192.168.122.100:62395-192.168.122.202:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[45],
+		"l7_label_name":	["FTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_26"
+	}, {
+		"Tuple4":	"192.168.122.100:50259-192.168.122.202:1080-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_27"
+	}, {
+		"Tuple4":	"10.0.0.3:2276-10.0.0.2:42356-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005, 159],
+		"l7_label_name":	["SOCKS", "RDP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_28"
+	}, {
+		"Tuple4":	"192.168.122.100:58811-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_29"
+	}, {
+		"Tuple4":	"fe80::424:6d4c:9a85:337d:546-ff02::1:2:547-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[29],
+		"l7_label_name":	["DHCP"],
+		"STREAM_DIR":	"S2C",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_30"
+	}, {
+		"Tuple4":	"192.168.122.100:58117-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_31"
+	}, {
+		"Tuple4":	"192.168.122.100:50258-184.50.87.123:80-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[67],
+		"l7_label_name":	["HTTP"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_32"
+	}, {
+		"Tuple4":	"192.168.122.100:52837-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_33"
+	}, {
+		"Tuple4":	"192.168.122.100:50262-74.125.235.196:443-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	"UNKNOWN",
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_34"
+	}, {
+		"Tuple4":	"192.168.122.100:57617-8.8.8.8:53-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[32],
+		"l7_label_name":	["DNS"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_35"
+	}, {
+		"Tuple4":	"192.168.122.100:138-192.168.122.255:138-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[129],
+		"l7_label_name":	["NETBIOS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_36"
+	}, {
+		"Tuple4":	"192.168.122.100:137-192.168.122.255:137-17-0",
+		"STREAM_TYPE":	"UDP",
+		"l7_label_id":	[129],
+		"l7_label_name":	["NETBIOS"],
+		"STREAM_DIR":	"C2S",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_37"
+	}, {
+		"Tuple4":	"10.0.0.1:50606-10.0.0.2:9901-6-0",
+		"STREAM_TYPE":	"TCP",
+		"l7_label_id":	[8005],
+		"l7_label_name":	["SOCKS"],
+		"STREAM_DIR":	"DOUBLE",
+		"name":	"APP_PROTO_IDENTIFY_RESULT_38"
+	}]

test/http_decoder/CMakeLists.txt

@@ -0,0 +1,33 @@
+set(DECODER_NAME http_decoder)
+
+aux_source_directory(${PROJECT_SOURCE_DIR}/deps/toml DEPS_SRC)
+
+add_library(${DECODER_NAME}_test SHARED http_decoder_test_plug.cpp md5.c ${DEPS_SRC})
+add_dependencies(${DECODER_NAME}_test ${DECODER_NAME})
+target_link_libraries(${DECODER_NAME}_test MESA_prof_load cjson-static)
+set_target_properties(${DECODER_NAME}_test PROPERTIES PREFIX "")
+
+add_library(${DECODER_NAME}_perf SHARED http_decoder_perf_plug.cpp)
+add_dependencies(${DECODER_NAME}_perf ${DECODER_NAME})
+set_target_properties(${DECODER_NAME}_perf PROPERTIES PREFIX "")
+
+set(TEST_RUN_DIR /home/mesasoft/sapp_run)
+
+include_directories(${CMAKE_SOURCE_DIR}/include)
+include_directories(${CMAKE_SOURCE_DIR}/src)
+include_directories(${CMAKE_SOURCE_DIR}/deps)
+include_directories(/opt/tsg/stellar/include/)
+include_directories(/opt/tsg/framework/include/)
+include_directories(/opt/MESA/include/MESA)
+include_directories(${CMAKE_BINARY_DIR}/vendor/vbuild/include)
+include_directories(${CMAKE_BINARY_DIR}/vendor/cjson/src/cjson/include)
+
+aux_source_directory(${PROJECT_SOURCE_DIR}/deps/mempool PERF_TEST_DEP_SRC)
+aux_source_directory(${PROJECT_SOURCE_DIR}/deps/toml PERF_TEST_DEP_SRC)
+aux_source_directory(${PROJECT_SOURCE_DIR}/src PERF_TEST_DEP_SRC)
+
+# add_executable(httpd_perf_test ${PERF_TEST_DEP_SRC} http_decoder_perf_main.cpp http_decoder_perf_plug.cpp http_stellar_mock.cpp)
+# target_link_libraries(httpd_perf_test z brotlidec llhttp-static fieldstat4 pthread)
+
+add_executable(httpd_gtest http_decoder_gtest.cpp http_stellar_mock.cpp ${PROJECT_SOURCE_DIR}/src/http_decoder_utils.cpp)
+target_link_libraries(httpd_gtest gtest stellar_devel)

test/http_decoder/base64.c

@@ -0,0 +1,164 @@
+/* This is a public domain base64 implementation written by WEI Zhicheng. */
+
+#include "base64.h"
+
+#define BASE64_PAD '='
+#define BASE64DE_FIRST '+'
+#define BASE64DE_LAST 'z'
+
+/* BASE 64 encode table */
+static const char base64en[] = {
+	'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H',
+	'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P',
+	'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X',
+	'Y', 'Z', 'a', 'b', 'c', 'd', 'e', 'f',
+	'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n',
+	'o', 'p', 'q', 'r', 's', 't', 'u', 'v',
+	'w', 'x', 'y', 'z', '0', '1', '2', '3',
+	'4', '5', '6', '7', '8', '9', '+', '/',
+};
+
+/* ASCII order for BASE 64 decode, 255 in unused character */
+static const unsigned char base64de[] = {
+	/* nul, soh, stx, etx, eot, enq, ack, bel, */
+	   255, 255, 255, 255, 255, 255, 255, 255,
+
+	/*  bs,  ht,  nl,  vt,  np,  cr,  so,  si, */
+	   255, 255, 255, 255, 255, 255, 255, 255,
+
+	/* dle, dc1, dc2, dc3, dc4, nak, syn, etb, */
+	   255, 255, 255, 255, 255, 255, 255, 255,
+
+	/* can,  em, sub, esc,  fs,  gs,  rs,  us, */
+	   255, 255, 255, 255, 255, 255, 255, 255,
+
+	/*  sp, '!', '"', '#', '$', '%', '&', ''', */
+	   255, 255, 255, 255, 255, 255, 255, 255,
+
+	/* '(', ')', '*', '+', ',', '-', '.', '/', */
+	   255, 255, 255,  62, 255, 255, 255,  63,
+
+	/* '0', '1', '2', '3', '4', '5', '6', '7', */
+	    52,  53,  54,  55,  56,  57,  58,  59,
+
+	/* '8', '9', ':', ';', '<', '=', '>', '?', */
+	    60,  61, 255, 255, 255, 255, 255, 255,
+
+	/* '@', 'A', 'B', 'C', 'D', 'E', 'F', 'G', */
+	   255,   0,   1,  2,   3,   4,   5,    6,
+
+	/* 'H', 'I', 'J', 'K', 'L', 'M', 'N', 'O', */
+	     7,   8,   9,  10,  11,  12,  13,  14,
+
+	/* 'P', 'Q', 'R', 'S', 'T', 'U', 'V', 'W', */
+	    15,  16,  17,  18,  19,  20,  21,  22,
+
+	/* 'X', 'Y', 'Z', '[', '\', ']', '^', '_', */
+	    23,  24,  25, 255, 255, 255, 255, 255,
+
+	/* '`', 'a', 'b', 'c', 'd', 'e', 'f', 'g', */
+	   255,  26,  27,  28,  29,  30,  31,  32,
+
+	/* 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', */
+	    33,  34,  35,  36,  37,  38,  39,  40,
+
+	/* 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', */
+	    41,  42,  43,  44,  45,  46,  47,  48,
+
+	/* 'x', 'y', 'z', '{', '|', '}', '~', del, */
+	    49,  50,  51, 255, 255, 255, 255, 255
+};
+
+unsigned int
+base64_encode(const unsigned char *in, unsigned int inlen, char *out)
+{
+	int s;
+	unsigned int i;
+	unsigned int j;
+	unsigned char c;
+	unsigned char l;
+
+	s = 0;
+	l = 0;
+	for (i = j = 0; i < inlen; i++) {
+		c = in[i];
+
+		switch (s) {
+		case 0:
+			s = 1;
+			out[j++] = base64en[(c >> 2) & 0x3F];
+			break;
+		case 1:
+			s = 2;
+			out[j++] = base64en[((l & 0x3) << 4) | ((c >> 4) & 0xF)];
+			break;
+		case 2:
+			s = 0;
+			out[j++] = base64en[((l & 0xF) << 2) | ((c >> 6) & 0x3)];
+			out[j++] = base64en[c & 0x3F];
+			break;
+		}
+		l = c;
+	}
+
+	switch (s) {
+	case 1:
+		out[j++] = base64en[(l & 0x3) << 4];
+		out[j++] = BASE64_PAD;
+		out[j++] = BASE64_PAD;
+		break;
+	case 2:
+		out[j++] = base64en[(l & 0xF) << 2];
+		out[j++] = BASE64_PAD;
+		break;
+	}
+
+	out[j] = 0;
+
+	return j;
+}
+
+unsigned int
+base64_decode(const char *in, unsigned int inlen, unsigned char *out)
+{
+	unsigned int i;
+	unsigned int j;
+	unsigned char c;
+
+	if (inlen & 0x3) {
+		return 0;
+	}
+
+	for (i = j = 0; i < inlen; i++) {
+		if (in[i] == BASE64_PAD) {
+			break;
+		}
+		if (in[i] < BASE64DE_FIRST || in[i] > BASE64DE_LAST) {
+			return 0;
+		}
+
+		c = base64de[(unsigned char)in[i]];
+		if (c == 255) {
+			return 0;
+		}
+
+		switch (i & 0x3) {
+		case 0:
+			out[j] = (c << 2) & 0xFF;
+			break;
+		case 1:
+			out[j++] |= (c >> 4) & 0x3;
+			out[j] = (c & 0xF) << 4; 
+			break;
+		case 2:
+			out[j++] |= (c >> 2) & 0xF;
+			out[j] = (c & 0x3) << 6;
+			break;
+		case 3:
+			out[j++] |= c;
+			break;
+		}
+	}
+
+	return j;
+}