Skip to content

Instantly share code, notes, and snippets.

@halidaltuner
Last active May 28, 2019 19:05
Show Gist options
  • Save halidaltuner/58298503609826f3f20aad68baf7f686 to your computer and use it in GitHub Desktop.
Save halidaltuner/58298503609826f3f20aad68baf7f686 to your computer and use it in GitHub Desktop.
root@manager:~/pcaps# time ndpiReader -i wrccdc2012.pcap
-----------------------------------------------------------
* NOTE: This is demo app to show *some* nDPI features.
* In this demo we have implemented only some basic features
* just to show you what you can do with the library. Feel
* free to extend it and send us the patches for inclusion
------------------------------------------------------------
Using nDPI (2.9.0-1539-53119e7) [1 thread(s)]
Reading packets from pcap file wrccdc2012.pcap...
Running thread 0...
nDPI Memory statistics:
nDPI Memory (once): 203.63 KB
Flow Memory (per flow): 2.15 KB
Actual Memory: 12.33 MB
Peak Memory: 12.33 MB
Setup Time: 9 msec
Packet Processing Time: 43 msec
Traffic statistics:
Ethernet bytes: 29263534 (includes ethernet CRC/IFC/trailer)
Discarded bytes: 88500
IP packets: 35795 of 37270 packets total
IP bytes: 28404454 (avg pkt size 762 bytes)
Unique flows: 3612
TCP Packets: 35279
UDP Packets: 352
VLAN Packets: 0
MPLS Packets: 0
PPPoE Packets: 0
Fragmented Packets: 0
Max Packet size: 2669
Packet Len < 64: 15651
Packet Len 64-128: 317
Packet Len 128-256: 404
Packet Len 256-1024: 2030
Packet Len 1024-1500: 17291
Packet Len > 1500: 102
nDPI throughput: 823.04 K pps / 5.01 Gb/sec
Analysis begin: 25/Mar/2012 09:34:19
Analysis end: 25/Mar/2012 09:39:10
Traffic throughput: 123.02 pps / 785.70 Kb/sec
Traffic duration: 290.979 sec
Guessed flow protos: 0
Detected protocols:
Unknown packets: 32654 bytes: 26505034 flows: 2919
FTP_CONTROL packets: 2 bytes: 116 flows: 2
POP3 packets: 3 bytes: 170 flows: 1
SMTP packets: 3 bytes: 170 flows: 1
IMAP packets: 2 bytes: 116 flows: 2
DNS packets: 180 bytes: 61399 flows: 91
HTTP packets: 564 bytes: 31503 flows: 340
NTP packets: 1 bytes: 90 flows: 1
NetBIOS packets: 3 bytes: 359 flows: 3
BGP packets: 4 bytes: 232 flows: 4
MySQL packets: 2 bytes: 116 flows: 2
POPS packets: 2 bytes: 116 flows: 2
SMTPS packets: 2 bytes: 116 flows: 2
SMBv23 packets: 2 bytes: 116 flows: 2
Mining packets: 2 bytes: 116 flows: 2
Modbus packets: 2 bytes: 116 flows: 2
RTSP packets: 2 bytes: 116 flows: 2
IMAPS packets: 2 bytes: 116 flows: 2
SSL_No_Cert packets: 10 bytes: 746 flows: 1
GooglePlus packets: 2 bytes: 484 flows: 1
Telnet packets: 2 bytes: 116 flows: 2
IGMP packets: 1 bytes: 46 flows: 1
RDP packets: 4 bytes: 232 flows: 4
VNC packets: 4 bytes: 232 flows: 4
SSL packets: 116 bytes: 8911 flows: 85
SSH packets: 4 bytes: 232 flows: 4
SIP packets: 2 bytes: 116 flows: 2
Kerberos packets: 2 bytes: 116 flows: 2
LDAP packets: 2 bytes: 116 flows: 2
MsSQL-TDS packets: 2 bytes: 116 flows: 2
Facebook packets: 6 bytes: 2105 flows: 3
Twitter packets: 73 bytes: 21015 flows: 12
YouTube packets: 2 bytes: 518 flows: 1
Google packets: 516 bytes: 135339 flows: 57
DCE_RPC packets: 2 bytes: 116 flows: 2
HTTP_Proxy packets: 4 bytes: 232 flows: 4
Citrix packets: 4 bytes: 232 flows: 4
AJP packets: 2 bytes: 116 flows: 2
WindowsUpdate packets: 2 bytes: 919 flows: 1
TeamViewer packets: 2 bytes: 116 flows: 2
LLMNR packets: 10 bytes: 772 flows: 5
RemoteScan packets: 2 bytes: 116 flows: 2
H323 packets: 2 bytes: 116 flows: 2
CiscoVPN packets: 2 bytes: 116 flows: 2
CiscoSkinny packets: 2 bytes: 116 flows: 2
Whois-DAS packets: 2 bytes: 116 flows: 2
RTMP packets: 2 bytes: 116 flows: 2
Amazon packets: 14 bytes: 1621 flows: 3
TINC packets: 2 bytes: 116 flows: 2
Microsoft packets: 1547 bytes: 1625632 flows: 2
Starcraft packets: 2 bytes: 116 flows: 2
Office365 packets: 4 bytes: 1974 flows: 2
LinkedIn packets: 2 bytes: 639 flows: 1
Diameter packets: 2 bytes: 116 flows: 2
ApplePush packets: 2 bytes: 116 flows: 2
GoogleServices packets: 2 bytes: 368 flows: 1
Protocol statistics:
Safe 1635810 bytes
Acceptable 102528 bytes
Fun 24993 bytes
Unsafe 634 bytes
Dangerous 116 bytes
Unrated 135339 bytes
Unrated 26505034 bytes
real 0m0.064s
user 0m0.040s
sys 0m0.016s
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment