Skip to content

Add libp2p detection i.e. used for ipfs #3181

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
IvanNardi merged 1 commit into from
May 22, 2026
+519 −347
Merged

Add libp2p detection i.e. used for ipfs #3181

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions doc/protocols.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4318,3 +4318,12 @@ References: `Official Protocol Specs <https://github.com/FIXTradingCommunity/fix
InterSystems IRIS is a high-performance unified data platform that combines a multi-model database, processing, and integration to handle real-time, mission-critical data.

References: `InterSystems IRIS official site: <https://www.intersystems.com/products/intersystems-iris/>`_, `Free Docker image useful for testing: <https://hub.docker.com/r/intersystems/iris-community/>`_


.. _Proto_476:

`NDPI_PROTOCOL_LIBP2P`
======================
libp2p is a modular network stack and open-source library that enables developers to build decentralised, peer-to-peer (P2P) applications.

References: `Official site: <https://libp2p.io>`_
1 change: 1 addition & 0 deletions src/include/ndpi_protocol_ids.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -505,6 +505,7 @@ typedef enum {
NDPI_PROTOCOL_YOUTUBE_KIDS = 473,
NDPI_PROTOCOL_SBE = 474,
NDPI_PROTOCOL_IRIS = 475,
NDPI_PROTOCOL_LIBP2P = 476,

/* If you add a new protocol, please update the documentation at doc/protocols.rst, too! */

Expand Down
3 changes: 3 additions & 0 deletions src/lib/ndpi_content_match.c.inc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1554,6 +1554,9 @@ static ndpi_protocol_match host_match[] =
{ "espn.net", "Espn", NDPI_PROTOCOL_ESPN, NDPI_PROTOCOL_CATEGORY_STREAMING, NDPI_PROTOCOL_FUN, NDPI_PROTOCOL_DEFAULT_LEVEL },
{ "espn.playback.edge.bamgrid.com", "Espn", NDPI_PROTOCOL_ESPN, NDPI_PROTOCOL_CATEGORY_STREAMING, NDPI_PROTOCOL_FUN, NDPI_PROTOCOL_DEFAULT_LEVEL },

/* libp2p applications i.e. ipfs */
{ "bootstrap.libp2p.io", "libp2p", NDPI_PROTOCOL_LIBP2P, NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_DEFAULT_LEVEL },
{ "ipfs", "libp2p", NDPI_PROTOCOL_LIBP2P, NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_DEFAULT_LEVEL },

#ifdef CUSTOM_NDPI_PROTOCOLS
#include "../../../nDPI-custom/custom_ndpi_content_match_host_match.c.inc"
Expand Down
5 changes: 5 additions & 0 deletions src/lib/ndpi_main.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3011,6 +3011,11 @@ static void init_protocol_defaults(struct ndpi_detection_module_struct *ndpi_str
ndpi_build_default_ports(ports_a, 1972, 0, 0, 0, 0) /* TCP */,
ndpi_build_default_ports(ports_b, 0, 0, 0, 0, 0) /* UDP */,
0);
ndpi_set_proto_defaults(ndpi_str, 0 /* encrypted */, 1 /* nw proto */, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_LIBP2P,
"libp2p", NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_QOE_CATEGORY_UNSPECIFIED,
ndpi_build_default_ports(ports_a, 0, 0, 0, 0, 0) /* TCP */,
ndpi_build_default_ports(ports_b, 0, 0, 0, 0, 0) /* UDP */,
0);

#ifdef CUSTOM_NDPI_PROTOCOLS
#include "../../../nDPI-custom/custom_ndpi_main.c"
Expand Down
3 changes: 3 additions & 0 deletions src/lib/ndpi_utils.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4001,6 +4001,9 @@ void load_common_alpns(struct ndpi_detection_module_struct *ndpi_str) {
/* ApplePush */
"apns-security-v3", "apns-pack-v1",

/* LIBP2P */
"/yamux/1.0.0", "libp2p",

NULL /* end */
};
u_int i;
Expand Down
14 changes: 13 additions & 1 deletion src/lib/protocols/tls.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1958,14 +1958,26 @@ static void tls_subclassify_by_alpn(struct ndpi_detection_module_struct *ndpi_st
struct ndpi_flow_struct *flow) {
/* Right now we have only one rule so we can keep it trivial */

if(strlen(flow->protos.tls_quic.advertised_alpns) > NDPI_STATICSTRING_LEN("anydesk/") &&
size_t alpns_len = strlen(flow->protos.tls_quic.advertised_alpns);
if(alpns_len > NDPI_STATICSTRING_LEN("anydesk/") &&
strncmp(flow->protos.tls_quic.advertised_alpns, "anydesk/", NDPI_STATICSTRING_LEN("anydesk/")) == 0) {
#ifdef DEBUG_TLS
printf("Matching ANYDESK via alpn\n");
#endif
ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_ANYDESK,
ndpi_get_master_proto(ndpi_struct, flow), NDPI_CONFIDENCE_DPI);
flow->protos.tls_quic.subprotocol_detected = 1;
} else if ((alpns_len > NDPI_STATICSTRING_LEN("/yamux/") &&
strncmp(flow->protos.tls_quic.advertised_alpns, "/yamux/", NDPI_STATICSTRING_LEN("/yamux/")) == 0) ||
(alpns_len >= NDPI_STATICSTRING_LEN("libp2p") &&
strncmp(flow->protos.tls_quic.advertised_alpns, "libp2p", NDPI_STATICSTRING_LEN("libp2p")) == 0))
{
#ifdef DEBUG_TLS
printf("Matching LIBP2P via alpn\n");
#endif
ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_LIBP2P,
ndpi_get_master_proto(ndpi_struct, flow), NDPI_CONFIDENCE_DPI);
flow->protos.tls_quic.subprotocol_detected = 1;
}
}

Expand Down
Binary file added tests/cfgs/default/pcap/libp2p.pcap
View file
Open in desktop
Binary file not shown.
69 changes: 69 additions & 0 deletions tests/cfgs/default/result/libp2p.pcap.out
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,69 @@
Guessed flow protos: 1

DPI Packets (TCP): 17 (2.83 pkts/flow)
DPI Packets (UDP): 14 (1.08 pkts/flow)
Confidence DPI : 18 (flows)
Confidence Match by IP : 1 (flows)
Num dissector calls: 319 (16.79 diss/flow)
LRU cache ookla: 0/0/0 (insert/search/found)
LRU cache bittorrent: 0/3/0 (insert/search/found)
LRU cache stun: 0/12/0 (insert/search/found)
LRU cache tls_cert: 0/0/0 (insert/search/found)
LRU cache mining: 0/1/0 (insert/search/found)
LRU cache msteams: 0/0/0 (insert/search/found)
LRU cache fpc_dns: 0/1/0 (insert/search/found)
Automa host: 11/7 (search/found)
Automa domain: 9/0 (search/found)
Automa tls cert: 0/0 (search/found)
Automa risk mask: 0/0 (search/found)
Automa common alpns: 5/5 (search/found)
Patricia risk mask: 0/0 (search/found)
Patricia risk mask IPv6: 0/0 (search/found)
Patricia risk: 0/0 (search/found)
Patricia risk IPv6: 0/0 (search/found)
Patricia protocols: 37/1 (search/found)
Patricia protocols IPv6: 0/0 (search/found)
Hash malicious ja4: 0/0 (search/found)
Hash malicious sha1: 0/0 (search/found)
Hash TCP fingerprints: 1/1 (search/found)
Hash public domain suffix: 123/68 (search/found)
Hash ja4 custom protos: 6/0 (search/found)
Hash fp custom protos: 5/0 (search/found)
Hash url custom protos: 0/0 (search/found)

DNS 10 2641 7
STUN 6 1308 6
AWS_EC2 12 3700 1
libp2p 6 8876 5

Acceptable 34 16525 19

VPN 4 6232 4
Web 2 2644 1
Cloud 12 3700 1
Network 16 3949 13

JA Host Stats:
IP Address # JA4C
1 192.168.33.33 3


1 TCP 192.168.33.33:4001 <-> 35.156.107.230:4001 [proto: 461/AWS_EC2][Stack: AWS_EC2][IP: 461/AWS_EC2][Encrypted][Confidence: Match by IP][FPC: 461/AWS_EC2, Confidence: IP address][DPI packets: 12][cat: Cloud/13][Breed: Acceptable][6 pkts/1917 bytes <-> 6 pkts/1783 bytes][Goodput ratio: 79/77][0.17 sec][bytes ratio: 0.036 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 31/4 141/14 55/6][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 320/297 1547/1413 549/499][TCP Fingerprint: 2_64_64240_2e3cee914fc1/Linux][PLAIN TEXT (/multistream/1.0.0)][Plen Bins: 40,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,0,0,0,20,0]
2 UDP 192.168.33.33:4001 -> 151.242.163.23:4001 [proto: 188.476/QUIC.libp2p][Stack: QUIC.libp2p][IP: 0/Unknown][Encrypted][Confidence: DPI][FPC: 188/QUIC, Confidence: DPI][DPI packets: 2][cat: Web/5][Breed: Acceptable][2 pkts/2644 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][(Advertised) ALPNs: libp2p][TLS Supported Versions: TLSv1.3][Risk: ** Known Proto on Non Std Port **** Missing SNI TLS Extn **** Unidirectional Traffic **][Risk Score: 110][Risk Info: No server to client traffic;SNI should always be present;Expected on port 443][nDPI Cli Fingerprint: 26e39c425afef00712e390d6bf4e418d][TLSv1.3][QUIC ver: V-1][JA4: q13i0312lp_55b375c5d22e_f902b76752af][Firefox][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0,0,0]
3 TCP 192.168.33.253:53 -> 192.168.33.33:55810 [proto: 5/DNS][Stack: DNS][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 5/DNS, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][4 pkts/1872 bytes -> 0 pkts/0 bytes][Goodput ratio: 86/0][0.13 sec][Hostname/SNI: _dnsaddr.sg1.bootstrap.libp2p.io][0.0.0.0][DNS Id: 0xcdeb][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No client to server traffic][PLAIN TEXT (dnsaddr)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
4 TCP 192.168.33.33:38448 -> 51.81.93.51:443 [proto: 91.476/TLS.libp2p][Stack: TLS.libp2p][IP: 0/Unknown][Encrypted][Confidence: DPI][FPC: 91.476/TLS.libp2p, Confidence: DPI][DPI packets: 1][cat: VPN/2][Breed: Acceptable][1 pkts/1569 bytes -> 0 pkts/0 bytes][Goodput ratio: 96/0][< 1 sec][Hostname/SNI: ny5.bootstrap.libp2p.io][TLS Supported Versions: TLSv1.3;TLSv1.2][Risk: ** TLS (probably) Not Carrying HTTPS **** Unidirectional Traffic **][Risk Score: 20][Risk Info: No server to client traffic;No ALPN][nDPI Cli Fingerprint: fa2c97f1a34f91924131452a160ec7d6][TLSv1.2][JA4: t13d131100_f57a46bbacb6_ab7e3b40a677][Firefox][PLAIN TEXT (ny5.bootstrap.libp2)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100]
5 TCP 192.168.33.33:46112 -> 54.38.47.166:443 [proto: 91.476/TLS.libp2p][Stack: TLS.libp2p][IP: 0/Unknown][Encrypted][Confidence: DPI][FPC: 91.476/TLS.libp2p, Confidence: DPI][DPI packets: 1][cat: VPN/2][Breed: Acceptable][1 pkts/1569 bytes -> 0 pkts/0 bytes][Goodput ratio: 96/0][< 1 sec][Hostname/SNI: am6.bootstrap.libp2p.io][TLS Supported Versions: TLSv1.3;TLSv1.2][Risk: ** TLS (probably) Not Carrying HTTPS **** Unidirectional Traffic **][Risk Score: 20][Risk Info: No server to client traffic;No ALPN][nDPI Cli Fingerprint: fa2c97f1a34f91924131452a160ec7d6][TLSv1.2][JA4: t13d131100_f57a46bbacb6_ab7e3b40a677][Firefox][PLAIN TEXT (am6.bootstrap.libp2)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100]
6 TCP 192.168.33.33:4001 -> 54.38.92.75:4001 [proto: 91.476/TLS.libp2p][Stack: TLS.libp2p][IP: 0/Unknown][Encrypted][Confidence: DPI][FPC: 91.476/TLS.libp2p, Confidence: DPI][DPI packets: 1][cat: VPN/2][Breed: Acceptable][1 pkts/1547 bytes -> 0 pkts/0 bytes][Goodput ratio: 96/0][< 1 sec][(Advertised) ALPNs: /yamux/1.0.0;libp2p][TLS Supported Versions: TLSv1.3][Risk: ** Known Proto on Non Std Port **** Missing SNI TLS Extn **** Unidirectional Traffic **][Risk Score: 110][Risk Info: No server to client traffic;SNI should always be present;Expected on port 443][nDPI Cli Fingerprint: 1941140e07e8211e3cf6be7409e75c34][TLSv1.2][JA4: t13i0311/0_55b375c5d22e_4a12575e92d6][Firefox][PLAIN TEXT (/yamux/1.0.0)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0]
7 TCP 192.168.33.33:4001 -> 62.169.18.218:4001 [proto: 91.476/TLS.libp2p][Stack: TLS.libp2p][IP: 0/Unknown][Encrypted][Confidence: DPI][FPC: 91.476/TLS.libp2p, Confidence: DPI][DPI packets: 1][cat: VPN/2][Breed: Acceptable][1 pkts/1547 bytes -> 0 pkts/0 bytes][Goodput ratio: 96/0][< 1 sec][(Advertised) ALPNs: /yamux/1.0.0;libp2p][TLS Supported Versions: TLSv1.3][Risk: ** Known Proto on Non Std Port **** Missing SNI TLS Extn **** Unidirectional Traffic **][Risk Score: 110][Risk Info: No server to client traffic;SNI should always be present;Expected on port 443][nDPI Cli Fingerprint: 1941140e07e8211e3cf6be7409e75c34][TLSv1.2][JA4: t13i0311/0_55b375c5d22e_4a12575e92d6][Firefox][PLAIN TEXT (/yamux/1.0.0)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0]
8 UDP 192.168.33.33:33304 -> 217.254.215.59:53374 [proto: 78/STUN][Stack: STUN][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 78/STUN, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][1 pkts/218 bytes -> 0 pkts/0 bytes][Goodput ratio: 80/0][< 1 sec][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No server to client traffic][PLAIN TEXT (webrtc)][Plen Bins: 0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
9 UDP 192.168.33.33:41832 -> 99.226.6.94:18138 [proto: 78/STUN][Stack: STUN][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 78/STUN, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][1 pkts/218 bytes -> 0 pkts/0 bytes][Goodput ratio: 80/0][< 1 sec][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No server to client traffic][PLAIN TEXT (webrtc)][Plen Bins: 0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
10 UDP 192.168.33.33:43106 -> 217.254.215.59:51159 [proto: 78/STUN][Stack: STUN][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 78/STUN, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][1 pkts/218 bytes -> 0 pkts/0 bytes][Goodput ratio: 80/0][< 1 sec][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No server to client traffic][PLAIN TEXT (webrtc)][Plen Bins: 0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
11 UDP 192.168.33.33:46305 -> 49.228.127.26:4001 [proto: 78/STUN][Stack: STUN][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 78/STUN, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][1 pkts/218 bytes -> 0 pkts/0 bytes][Goodput ratio: 80/0][< 1 sec][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No server to client traffic][PLAIN TEXT (webrtc)][Plen Bins: 0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
12 UDP 192.168.33.33:55337 -> 217.254.215.59:9131 [proto: 78/STUN][Stack: STUN][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 78/STUN, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][1 pkts/218 bytes -> 0 pkts/0 bytes][Goodput ratio: 80/0][< 1 sec][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No server to client traffic][PLAIN TEXT (webrtc)][Plen Bins: 0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
13 UDP 192.168.33.33:58336 -> 49.228.127.26:36655 [proto: 78/STUN][Stack: STUN][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 78/STUN, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][1 pkts/218 bytes -> 0 pkts/0 bytes][Goodput ratio: 80/0][< 1 sec][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No server to client traffic][PLAIN TEXT (webrtc)][Plen Bins: 0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
14 UDP 192.168.33.253:53 -> 192.168.33.33:55514 [proto: 5/DNS][Stack: DNS][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 5/DNS, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][1 pkts/190 bytes -> 0 pkts/0 bytes][Goodput ratio: 77/0][< 1 sec][Hostname/SNI: _dnsaddr.node-01.gc-us-central1-a.ipfs.prod.statusim.net][0.0.0.0][DNS Id: 0xfb98][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No client to server traffic][PLAIN TEXT (dnsaddr)][Plen Bins: 0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
15 UDP 192.168.33.253:53 -> 192.168.33.33:44205 [proto: 5/DNS][Stack: DNS][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 5/DNS, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][1 pkts/166 bytes -> 0 pkts/0 bytes][Goodput ratio: 74/0][< 1 sec][Hostname/SNI: _dnsaddr.ipfs.twdragon.net][0.0.0.0][DNS Id: 0xe005][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No client to server traffic][PLAIN TEXT (dnsaddr)][Plen Bins: 0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
16 UDP 192.168.33.253:53 -> 192.168.33.33:59317 [proto: 5/DNS][Stack: DNS][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 5/DNS, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][1 pkts/104 bytes -> 0 pkts/0 bytes][Goodput ratio: 59/0][< 1 sec][Hostname/SNI: _dnsaddr.sv15.bootstrap.libp2p.io][0.0.0.0][DNS Id: 0xe4c5][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No client to server traffic][PLAIN TEXT (dnsaddr)][Plen Bins: 0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
17 UDP 192.168.33.253:53 -> 192.168.33.33:37967 [proto: 5/DNS][Stack: DNS][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 5/DNS, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][1 pkts/103 bytes -> 0 pkts/0 bytes][Goodput ratio: 59/0][< 1 sec][Hostname/SNI: _dnsaddr.am6.bootstrap.libp2p.io][0.0.0.0][DNS Id: 0xeda4][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No client to server traffic][PLAIN TEXT (dnsaddr)][Plen Bins: 0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
18 UDP 192.168.33.253:53 -> 192.168.33.33:45851 [proto: 5/DNS][Stack: DNS][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 5/DNS, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][1 pkts/103 bytes -> 0 pkts/0 bytes][Goodput ratio: 59/0][< 1 sec][Hostname/SNI: _dnsaddr.sg1.bootstrap.libp2p.io][0.0.0.0][DNS Id: 0xcdeb][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No client to server traffic][PLAIN TEXT (dnsaddr)][Plen Bins: 0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
19 UDP 192.168.33.253:53 -> 192.168.33.33:53387 [proto: 5/DNS][Stack: DNS][IP: 0/Unknown][ClearText][Confidence: DPI][FPC: 5/DNS, Confidence: DPI][DPI packets: 1][cat: Network/14][Breed: Acceptable][1 pkts/103 bytes -> 0 pkts/0 bytes][Goodput ratio: 59/0][< 1 sec][Hostname/SNI: _dnsaddr.ny5.bootstrap.libp2p.io][0.0.0.0][DNS Id: 0xfb21][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No client to server traffic][PLAIN TEXT (dnsaddr)][Plen Bins: 0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
1 change: 1 addition & 0 deletions tests/cfgs/dns_sub_enable/pcap/libp2p.pcap
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
../../default/pcap/libp2p.pcap
Loading
Loading