From 7a1509bf607cb86db520366335459e5fc317991b Mon Sep 17 00:00:00 2001 From: Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> Date: Fri, 21 Jul 2023 03:42:36 +0200 Subject: [PATCH] zabbix: improve detection (#2055) --- src/lib/ndpi_main.c | 2 +- src/lib/protocols/zabbix.c | 7 ++--- tests/cfgs/default/pcap/zabbix.pcap | Bin 899 -> 32732 bytes tests/cfgs/default/result/zabbix.pcap.out | 35 ++++++++++++++++++---- 4 files changed, 33 insertions(+), 11 deletions(-) diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c index 83c3b786e98..d857c58b5a0 100644 --- a/src/lib/ndpi_main.c +++ b/src/lib/ndpi_main.c @@ -1867,7 +1867,7 @@ static void ndpi_init_protocol_defaults(struct ndpi_detection_module_struct *ndp ndpi_build_default_ports(ports_b, 5246, 5247, 0, 0, 0) /* UDP */); ndpi_set_proto_defaults(ndpi_str, 1 /* cleartext */, 0 /* nw proto */, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_ZABBIX, "Zabbix", NDPI_PROTOCOL_CATEGORY_NETWORK, - ndpi_build_default_ports(ports_a, 10050, 0, 0, 0, 0) /* TCP */, + ndpi_build_default_ports(ports_a, 10050, 10051, 0, 0, 0) /* TCP */, ndpi_build_default_ports(ports_b, 0, 0, 0, 0, 0) /* UDP */); ndpi_set_proto_defaults(ndpi_str, 1 /* cleartext */, 0 /* nw proto */, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_S7COMM, "s7comm", NDPI_PROTOCOL_CATEGORY_NETWORK, diff --git a/src/lib/protocols/zabbix.c b/src/lib/protocols/zabbix.c index 29f5320be3e..52840292712 100644 --- a/src/lib/protocols/zabbix.c +++ b/src/lib/protocols/zabbix.c @@ -37,13 +37,12 @@ static void ndpi_int_zabbix_add_connection(struct ndpi_detection_module_struct * static void ndpi_search_zabbix(struct ndpi_detection_module_struct *ndpi_struct, struct ndpi_flow_struct *flow) { struct ndpi_packet_struct *packet = &ndpi_struct->packet; - u_int8_t tomatch[] = { 'Z', 'B', 'X', 'D', 0x1 }; + u_int8_t tomatch[] = { 'Z', 'B', 'X', 'D' }; NDPI_LOG_DBG(ndpi_struct, "search Zabbix\n"); - if(packet && - (packet->payload_packet_len > 4) - && (memcmp(packet->payload, tomatch, 5) == 0)) + if((packet->payload_packet_len >= 4) + && (memcmp(packet->payload, tomatch, 4) == 0)) ndpi_int_zabbix_add_connection(ndpi_struct, flow); else NDPI_EXCLUDE_PROTO(ndpi_struct, flow); diff --git a/tests/cfgs/default/pcap/zabbix.pcap b/tests/cfgs/default/pcap/zabbix.pcap index 8e3d32f5e8919162a62003fd6273f8bdac0b51f9..dece91ee2060c8a97ab351a65ee55b3686075400 100644 GIT binary patch literal 32732 zcmeIbc{o+=`}c2*q@n>8MUiBdq!dZ16b%Y#6iOK~mIf+QB|{2jDl#-HDisZ6D9St& z4G75)QbL~dy0&evwd{QF<9NQu@1NhZj$?i9z4zz7*K42e^E}_zwXU_+#xs6APaq2m zi|$hC>8$Y2!J&q~3*{7K7pchZH@7jjKVZtj!J^NiYi_^a+|dvga16MIW3QDr#=ITg`)s}DGe9;UsvH8Hg`*>7$pYT`iqe`OV2&7Ex(U7hwi z**H2WDaa|nzvyafYoaIxbQTu$UC{TKGW1UtprO}eV7G!DZQVhfEMb%OwCccXv}=0^ zUmhE>WZ|TxD^j>wR;?KvV4qQQ|e8vy|7RFs3W<;mbI`1{nwFf_IzA@EG%ps zoR2uzxOt>sFDyo%v$C^u(HK-#*<=QbMxhaDEEX2TQtCh)#FJd{QOEX&vl;M8BPZF3 z=4cRDE~|ba9+_o^@UWq{nt`KgGw=z|{qDu;Q3Xq=Ci4 zf{u;iIRQJ`5M%0;J+0f|HQGlo*42;2jB=(7A(jSi9x}sth0#h@_zZ8h_J>U6Y@DpO z?}WFAiP*&W)Tc7y8=PtIcIAqvw8 z$HfnE36q(OxQN=_Coo3jO}U;2=dG2Jx9?CJPL$dxh1!4)ple5DNX=)&!GtjmGrlun z96rTQs=rYfE2S9>CR&}tTG>#vIt*I1;u;Vd)@lIqQ_6^g?hnOvoGcuRYp&=(p3u(1 zE9KF%6#jQ-Nf)hWza2)5)Z)~eTzs(e`)`-j$_!cd7X8bSY=1gBr!#uCG(+tL`kdUe zM3xkp1r!>Q=nr>v5C`!jwfwg~2omcCUUuZ9zh@nc8LZIA@ok7lX3_J5;tBv3z0O9& zrTpy(j;o3iS2pl|p5kNex%!l*9bzCBL%UQIB5a6pTCL_v1iVK32!{VRXUuSA$`E4h zF@n}W9ziKhG_QGHP^`ez{a+iUwn>FFPm?NTV?)D~+9ZKnaKKd9iM@!v ze;|B+f=1+gD0`ej-+yiqB_BUCL)67Vqk*diwC@l4w9|4=@00aIE`S(mt7@)D!+W&T zDvObGb`g)$h%pDoA5zX~3?bHmRWQ;ZjeyaK7+9kZ5SPXjq|v?dcE9Tid@LPDJ}+S9 z?|*XtwT;|VZEKIDa;amr`#uhMAKPY;a!&Td0=HMecKeo`(4Mr>){F1Os*0^sMYZj= zOkQ>UN#}wk>AJf`SMQm>*lvr@qsaUEoU-?#pPbN_G5B-XV$I3jhl|RmyWRf0I_Bi# zXJ?}g3X=xAr}{6}tSpQyW54|~Qcg6$exJpRcHan1C5wx}{fi666m%p_UMhCf+*a+7 z-)WsDv0G9GJ2X12c?DWFUP$a*#^zOd?8nT^$Mq|g4=9!`s(f)cp36ar{#IzSM|q%Z(2EUKQ4=zsO{#npdLdk$Zp7-GKk1Niw&bjl<%rgJ)i({hI z&5uG}e-66+%}nLHm0ITaDb_i^D_G}u6&_je?3K{H)YQv=oy-@*VdDL<0i_4tH&k-?&Dc42w_Ym8t-NC%3$vGoi_dO8BwgpuvEWD7 zr;J%oUvqLb4zL*P*mmw3m!#|d{hMBnojKOA_~Bfi6Bp`x*&0(A#|+kKZoMUX*3jXvtia#T{aMe{*I!w&>{i^8c?V)op1*Z< zPw|^iq4rT)F=yG1d;DzQc3=KHTV&E@;r`Nx8n=?izR~(~Wa;tDzGHn}hK*A!FZO&^ z4zBz&tLB$^#~Y8XlWSew0)I@;DXH9@Wa9bbUQau>-qA)4n`I5hi;JpDA6pq@<(;gU z9vyG+v}=}E)=kUkzb?nk)L(ydbMHFHq89z>q(|ig%k;loxv{#&7SEn9v#=L?BzD}g zQ;zMTiOl&~&8O!1A22+7{_^D3x|UhvN?h4kP!Cc2wE%i)lzw%?{aQfoCGlF^ul%e7 zVF$>)#PBqtZ%)xBG05YA^0%Xiky=6aG*GjpQ6=A&`JV%TbMaXt5ilD#PLjY&1hrizF@>y z`G_7z@mfhO)1r0d;DdPVWc|z-&%oQ#(C6gwjL4EEv&iu*Wnn=q;@DZdHtF`opTMg? zV<#_^5`7*&g5O z`kE_I@EYwS#?DLou3*M?rVJQ61>rv%V!TESJTB0uvi}}C4c@NNm6^X*M^|PO9z@?! z2GP^zdv1Rz_TD@$=PUJG9leRpa<=0gkwoya*+PAW$+bRT2X7|uzL zY0>&csK!(VhHI<~^8cDqW5isPk{Q%ogkYVXk#$w|BfS)%%H{*isN`ni9;3Q_=Rf<)F;Hz&4`28BX(J;A^)Dsrkp~I z_G~)iQjnxpuhO>Re)NJ_ExkudGxTKvIZ8kJl3C>3GwH`mL1TO5q=AR~@jM)x&I*l` z*oAoi?nm#psv(3rqiC0c=TPm)_wgKkD6R_N$sp~LcG0!dmqjdwc4koEXhZ$@1Q=TI z9_`eAWL=ozhO}$TW6FSjJp6#n!2JkWVrhfJIfwfc>K;s2;N$#sC-8}Zr*@H#t6x!( zr`er*2fh_ljP<;ba=HJ?p10Q@hHT@VHL;dIrRU+HVjrK*!mQp~@(!n8n>Uot@tPSj z#p{{NwGD#L$Mc*?tXyO!WG%<;Y4fo4<%PAX8GGt_EyFKlpW&;#RuYtGIsfl@Z^QXU zrtUHqx35*KiJiBk(rnGljmuMdq- z?VLEzc=K4rYqeA2RCLo1uhgEmWn7q%?~mH@ms5jlkN6cGH@xGt@%M*ae~wE%p782= ztHYCNRjOK_3l1;Rew5iPj~qjf*OQwCX-oBsRB|54HKUyI0crfz2{ax$|G_mQ)2n1$ z33=>)Y)I1>a=4pTpU5W=gXpXAIjSKs@EO{v^KF*kj2g_C#FQb#+CR&i%)oiv3P&=A z-8oz&TahPKly`aI9gp|1F`Rvol@_{mC#dusHYzF4%fRJ$_JsR zXb8+GAD!WW8M)-18e)KVKl=S&7}aD3RjZF!D|?Do{-9MAs;NgmhVzZIl4Bmn`1hoI zP_^>JalEI*Q3YE0W375faqM9*h~BNXC2$n)majw%wBAMYxGx_iwSqbd(~;O{9bz1$ zmhPve83*wRIoVH%EF&_DtQiyU{_@eSLFP5^GSFP=R4juP8o4wN@yIM9Ui|AMj#eLyBOrtu%TMsZWI`D8s4LQgm*j0S0lzTRi+H^?iVfe z{2aWB7`W$^;83+}sOL`<6~-4U@Sgf?sQGe2P-}%=(P~z^fF#!W+LC(5=f)gp_e;K4 zJv+!DXopMAtUlgD4f)4I1TDk{=M{Gzc)M;4S9$cnF)zDQWx_t|dSC2vxsWkIueW1Y zq-O=6*Ol3-O%vbz6?|kieeb8H$~0xIbymVJc7E{XS=exGO4Jq6hn-iywufr##e@k+ z=f2Z7Es4}o?3gfj(fbv9F6Qd|e78$xl9sNO+u#%KOXoVh_{&1o7fSHXHk+#!Y7;W0 zup??yP4D&C67e}YJ*)y{1>LDnv+n+R)Z}DcQ}{jZKzB@c>WP|OH-3}#9#0qLrc7O7 zY*-iO{_K61b9kiZgdMqap9dHJ2XLQOpi? z(0BVKy-%0sL%m&P)B*BOw4pjUx-D=N@8{P;jF9V08A7amZ9Kz_0>l{A`wOC)4y>HR zeerC9esj&88ufOKipo%L#U+o_v{ll_pErvrNS6Cl|EcqW)-CDm^aB2G{#lzOrWu(| z>uO!;C@lGMmicPodi33?I{85iqv*5&>%>luK~@6m#1A^bIEChkP{%k1hEBwu+-*!^ zQ2b0DkHg0gll!HZ-K{|uog4Pt2DhipMRC6rFlS8IJ}Lu`!^hEBkLPSOKf{cM+lu~D>|3tDmDnu5z3%(WtVCC}&fQG8i{GGZ7lqQ~LxBB_;gOc&0c zX}%mipW&6I8E)gz=VY%WvgFAuay(3Y+1(|2yxle6?L)pC2ICBU3 z2KaJQ6q$kh5#}~5O>j8paI3;Jm{aqP`D8e4$??o!tL&a=tM7XxYXyQO?yh|oSzog{ zv_R&8OjS+nodhpJu2k|y?XhU*lJjvBchD%>~L(sv2R(gzj^K2vjN7l*k;@oE(x z>DsBZcya5)va+fjm+PMuKcx*X9vTId?P;@=SinadeElS zat`i;pfLna^@}e^V-N-HBj&rx0)(@b4+g^kK(HWMVK*@DFf!zHEm?Z2wzR(IVFn5*J*02?`rY?QQkY5qcWpX>e#PG z)%m|PDk^T%eU6kJwdVlPbL)}4*%_Hc1pMr zeRrx(J`lqwIu+v>PLgA=XTv(doH}!8jsUez(TUhog=7Y`rvwngXeqhg^`NKh*-%eq zb`0111jHfq6wU-K7xTW7;-E4FF++_BgB|&5=1?vm*P}4x$qcd&DGQWft}%4x-mZ*PIXg_gY25CB*1WqQ`OdfTWhzoCk2$LG#rW=NMjB zn$hBkJ|}w}k(Ekjk>g?Ft5*+*mMHH7-XG+v0UH>s(8w1_h(~4-Yk;-(d>En5DEUbU z#Bsf##PtVwNV}fr_vkgy;)z%c?NpJ6!iM^>>dW~sL3oe$5xzP$AqX*kH!@{_ufB#6 zn>K#8cp(PvM|4GVEgTMfwIE-IT~Uam!!Tg+n~Q_HFRtFSRJ?M-__Cc=MY984jwHw( zEG&NC{6=BF@bA{QE}~)@KbG3WEmh)>3uw!?n0(Qj&AOvy|01(kLDhzVfPhHRjlb5p zXl}0EBr5V;@QT{Sab=r!WL}PH2r_x?Z{pKAs9<7x)-Ca)Px9Wt{)G}=uXwU`&(%k4 zpT)7{S8edLv4LB&^}J@sK2BO69&ycT;e7S7&5ur}cG*AsDtEc4c0liAnM>W#<)1Rn z`2JAy{W%BCLY1_(zhFUnQ9YmubR*=3TnEZc2a#^Ck#0kEjq6~))|`ZVRM#m(x`Ad- zp$5DdxgmOGQr-EmXb=nKHmD_aCG84vm3x17j^|{ef>~;hnc-V%%xk z8|EatiKcwHGQYm9aQ)AtT?Km_rz#wM9WjaBabwW+aeoTNhrf8{CY6vBp>pNcf}~k# zYbDYnAHM$?aX5GJF%8oa;aaBax;YTTC^}i;7#b)syu~_!SEksIV_@h+?2}S5gW4y- zh|xQ|#!l=1gna0ex2R8297#3&lsTifo)ia_f!FbSlgWL88QI7yQ|yKrXHd?WGgul( z3~EhTW3B2bT4jS)1-PcbrfB0Y&i5GxgXmw}mW`u$rKJdBESIIn;eSa|tNe__MpS@k zZ9q|(;a{bhY(LTGWd94A)iuJIU&cJ(qZ zmD4@q5w887dKH(iX-$({8RK8HVS{eyq$zoGUS2IwIh!@_k$&&rkCoeJdzyZmz{x+I z$7xZ??z8n7T!-8wJzZCdi?v%{DRt`*_&j5;s`IV3H75duE$tjVzY8SZ361D6ZaKcG zXT{pgslCz?+jYtU@6FtpxP?>8UM=5R>PeiB>+)x@I#-OoF7iz9F;(k6+i}i*l1L&< zK0gGC$0sb*|GBHtN{HuLdas?lRAWzh>wAZq$FbKUZDsmA?bO_R@p|sYVs~2>q$$-; zGeKKI{>ZhWJmUn?*1wEV`?yvd%g@Z!LA8HtI=%KwC24huY6CHdei~}s7#0Jcp?!p( z2G4N848mF{fdPJcM3l@JG56F&>$%{k9(UK->GK?$UdYY4HY4FqQHr73o&2yfDUl&7 zDi*W_a(wcYmsN>!+AdmI%zrcEPQ2r3FJGgR9^%EkD<+F{Ro8rI{yo5AwqN)o`tDSn z?m-Nr=;VrHD52<7hIIlzz4?S31EbE(kS4I9I!`AvsJ$eL7|WH&bv{=IdZ`Tc(#;p7 zUXoBL}#MmEJG9+^d~f!n|$)EOl|=KVM>14>+TfTx6N zAh?*G9|0G{V${G1L5KPM_T4cH)A0?CtWA)f}}>pN;dzq-(zlj_{3_Zo1KV^t-IuKF*X!RRU)p46t#w9;|U)UUF6S z!Pqyw3M<4d1G+VLUf3x1XH4O{FHawE67G3?Be=v$|<`P+o1Mf!RVt)aee)}0U=|EQK%B-~6#- ze9hkkXht-nE34jU$LI*6Ts6(eyg*9!3vG+S3x{7i&z8m*iI4aj8X&AUP!x>!`B6e z;?f453#tL90D6Arb0QXV?eu{0@3D#<`|S-~x_0O8NNN>6{g8?@LfY**$cX2E)@}=# z^*?HN?#>Q7Qx@Q*A?-MhGFbn!b}^%B$Bz5w#&G`(#gzs;R-~PL`Mg)N#d<%%IlsS*%kIMW7;#*Iu^4TrrX)B| zg*(H0v{P$}^&mU;3%;hInA{_kWVOzI zW`l5^=OyRuMwb)k%DNXFnPvA-L2F#8uB&iYgJ3<|oBpFY#k}KV%9rNd-r&GCzM-%` zCAC1S?zxvq-YkiSf+enH&WLtrKh1l-~(@ZVL9R;~3v-v3S?d7Jb?k}{SJq~(cQaLYPYH*A6$><7IZwT*9Nb9L97n&X=r`>sp@X3l2{26QZB|8FOlsxe<>YW)Q9+5Ew8wN`tF^w6U^Z6?$@>J zb>9jOO%=Pt-nGkGd%6ZDswCas>ocL%FCf=8O=c}uN!;Y$_79G)5xX2xA7weQVRhY2 z`)Nkz&2{%yJ`#cJ%Vs6QE$F*bb>ik4RVRBK!zYSPrdTJK8_7Xe5MyBIMC|pQWCo=V zIamVsz({$IqDH3ZXZ1k|A~@XqRV(WkQ<@#Jw1;x=9Xq^ z!r3A)nLeM0yla|2iA9cw$=t|);*TvGHUf_mjqinv8LZH#$#IBBW)W*(AFv4hNUebe z9G5jEE>7TWLN(BTnVug_C&XgZ0P$S(RX}z4cJKnUkMLq$j<1LjJ3K!g(vHReFU}jD zgVPweA9>+W>e!2|is)XvxT)$*MWVzz*FfK$73ZFKI!Rd;Da~{F6_BL7uwEzmckd^` zCFxOrgD_&;k(Vca&Wo!iO=3r*_grcDm6-BLah_^JO~MMc=K4@w@~RBj(T3{v*~RMce_u=K>_UtuggFC&0e&lMLT2Fn!nxh>wG`so z-&XId+R7_5C)s_!-Q8B2_pR&eXE}>Fz8)Vn30CL2b?0?0Y6RBwIC9MYaa($4q{*DJ zSz_7B?gcB~^dDYyWQnVW*;C;!Os}QnLJXtm)Qxr8Nzo}0>jZw=2T5SA6S3E}T_Q24 zz1D~rahBv>8$T0zEfMuv-;Cj2I}E*cgVAe5#>c=>8BLgRkO|`<^4q>?|Ao;+W>9PD zC)R2QMXQIP)ht|7Q--y=2{m zdKSY2OEb3&pwG!3NMs!%v&iu<@!Rv#-va9908a<`?U^eKR%n!@9O98##QY=zi%@5j z8i?GAwBtd&g73E)ic1H0=vl^|#2$KnwhSN^L%R#eTVX@}sPaKF!WQ16eT3icjWj@v zvBUQalNjK)`-aDL8Uy#E7#u2?4Xyp1D9W{|R^UyAYbnlUY!~NB<@hI>a8;HWN8fVK z(%UHdHbt=4kM)UUvuJf-CYM~;oue@Dtus(8_2{j^nUU?00^ht ze?4Y?s`~vSoCigxOg1w(%v}(_sC7n(+4N_6e5uzRf&Io36MZ*D&p%qv zxn534YQZD@_Mte1l(2m zqTx%u;}Z*;%I}5Gi}ah>_LZ;yar0dJ^!x?alxKIZJiG4W(R3N(%;w+nsYY1|A9*)w zy)Q9ab%<|OOtX$bOU%7_1Bb%Aq`5ni7w1=A`=C5<+u8zc(D6JGGl}X6V?MOZWY|%->G?Fr``7{FOFA*yS_Yn zb3rK272(f*0jyOw*OZOD*TSZk7hYSx@taOdF1n}k)6I)}3XHP)533y!>2@{e7H(kb z!732LC_0V7I<2R~;E8nt4^A*4$H3?fVlMWR8PxtWL=2uja{uW&L;rcA{!7?L>OVLW zrRRdkh#Q?@gc*OBFuaflCzuX1{z8xcgK>|{pw<)@)@mI^D=*OMD6Xm9B(453;vo8B z)PDC-JXiy-X;}`hX{BmNYQ;SFNQL6W9(<6rre$S~J}3Jkk@b?yBFDqTgHttDSNVqk z53gw@O(1%(`qk1*D{C@~m>&)ccVeAUYCz*J(#~>tO=~EwG~k7z8u$!fn|9t~WgQx& zewCpey6+Ed$bU26(WdD4Bu#u@jC&yPj=Tn2WBzAPShZ4Ids;@?!1_^d(GYl3f|@~+Bdbt3*2tX?X(;xxXy9%2}k>nu>$+gm)?1?&BVHJ zFXtgyaH-riA*(v)4c=&XLe5|_d!w~$u*;_X@&B5;47mCaLt6q zJoik6JobOuPwxTsYp7lrdCUMF+E5-lfDr?)(GGbeGlDg(F~glH1FmbYDIha&9=F1g zjA2L5DQ%)%XSwrMeKj}#>8sj~oSKI-6K*uM9q8)r%GHV}+>%<)eZ+^iKzmgpeoo2$ zYxmqUn+=T*dHHQT$+0?!!#zvs>yzqdEs?+2&1{9gpzlr{f7mTY)yW3OK)Ck>>(q~R zg6rC!ILI+DbTR`L+K^7O$qY(Q0Ri>Y@LB?`r#w@kr}|M(eHuGl?>5j=*O)U7kIrDl zjN!Ee0%HLA>L;%M!f+uo$oW>*JcPBXqvU%4v`WJ@#YWP~h7kwR>t6diasZM9g($y%p%9b#8)fxHz?hn2)r?9 zZp-S!V1-8A6hu5Si&z6Kz#@#_lp3(W=Qk^c&u@m}8Us8&R0A^K==mxAidYQoR0+Py zXFKbf0K7;02w&y4XhPa)22-@7F~CP95vA;>4YKgyTD?5L4Y+jv>&K%88lYad0Q4yOiU!d(W*!Ep{+iCr(S<6t_q+91jMqT4N;Db8A&)>%Z7dtC&C2 zX=q2%iCV+WxHk__>Z=NB*dEoe^n>C0YJ&QLvuV^HR6pKNW>9mHhIP6?(a9d?0{mF| zHc2PAi<=oEjm)6N@eRje!88u=O6mLmC60{I87-KxpTejHtsJmc@&ASKp3I7QT*880%B}QrpJ*9ew@B5;5908w6^G^5hidc*~dqD7G@vdXneBnLXNBHqcgNulvKm7dIkajc%__5w_ozWP$ z=he~S*wOsRr#Rm)8m_Z-7;ftgzc;DcPI#ud;c@N@HLHrFLRZ`gxc##4=E+mq2MfbL zb=UP-Ik>s}RjoJi;3<0b!C#|Fd9H%3%a&Ig3LbAfx1hkccc4@6wEF_v_0?KlJTiE$ zJAS^Tx<%@mJecb?2u(Fr4O4UD{POaQ!uj#fMYqgNbK-zGuX#h|Cnav#F-mqZl6*Cy z?Tfi{FUY4aU4BA*<~-h>og?DP*T z77ToKzef7{C#%fF(B1b{#14uy3(u>V6u>#Qc6Ec~#r0bDF5(1YIA0IbQwYx1_$l6eptc_lqah9EP#CddmL~LMfs9Jzi%;g-yW_%iS%8UCO|*+ z{W75U6Rq|bHIV^4w4rgpy!+TFSsJ@5CfgNyo=WvPPXZzQD z-Fz|XJgf)1iJlWu3#xsggP!f@O^V;kJM%j{+yCj*{8fV8Q8QGJub#5w+~d})PjPt_ zt_$_%SB5(UKl^&_tRw&PSwV&(i_v$d>U0!h7)7UW977T%hBH_vSc~X^b2Zv{`3lFt z&UNT{vMRVq!pZ|sN ziOe8-nzCyI*6J}utFxfhL{w8fKmMf^(W93wdozkh7h^9gAO2mIsGX8pEy?L+NNMEJ zHZaEw`@=btDKH7=6$%Z|DaJ> z+D(zSCohXx*0WX0PBBf;n$P>@_WO$7OE!Hkj{`b7@YZ znn13A;_(*e6MRkUK0bLffj@knq_j(LkBc(c!JRqJ25f`= z?4DIsG@kEiV6m@V(CgnYs~a4=T^4MMG^YAS2WU;mC%JZ%Upb*(X!*eC1zbCeT9Pw9 zqh9z8r9tzJ;)zIaMm~{8p$+A8?20#|`0J~~m_hg*Bmx8cb@8_BgW6lz`^sOC z>ptT%^i~M!t>5sK5o4(CCo*zDWJHb52tsj`KWD-SMgIDmiO!Qfev` zwEBW->et|~R(#}|B6^(?__p;2Fh5%1ruBr=O!152y6qqqv%=yBbS zkks-EeE>5MT3oL~8La;~uIFUd{}|Wph=KU!4#3-i;u^fnU@?!2Sa-$1BJ>YAF6AqC zaK3KP;~L7B2{pvXjdR9!P-y1T}HYcuSx>3~2>{-iPe@wi(XSe!9^YF;i-Ns&Poet*|e{xDz)24KV6_b~qY0CezSv=nRlP>>5MW>n@ zE7^2@M`hfVI4o1Db7ZHC4HGrYft&RT?)9%oSR~^dYpd&d=H`QqDi6l~t}eJI zd+hD?caMcUoBHpX$kbJ|kFhv)DOXA;JIlGt$N+p!!9O4A{|z@;?BK7J^pXk*VBX>(08Zm#CLvFogU*D!YMJ7VVz(slQJa7z`Pfykr|YJuiAwe z1zqG`Ot=KSh@Tsi+Cl0Qa2m6rI8x!CXhXU114abAMmx0^S^TfuMT|-4nj&78CV2|< zqQY+yBN*pG50117_J9A@<^SUELn-&CWo|L@fX5YH7+27B_JJd7{!1P* z$P8*8cH=yB(lw&_70v^GwoYo>utxj9cL{kw`9K@WLpGT~i6cD;F&e`dap1lyhk8QK ztn^923KXFy_Azoz{Jrb!pvjT{{=I8gJl;#8^Nyk3CTIn}cP-L8%m_ujjdT6~e((DK z{oeKeFMsd47J7*=7o+s6E1rwVpt%^KmoEIoz5~xpI1aCOeZ{@R=vSgAbdVVo-??%R zdvh$^cZR&#nb+e2`a1zX9rq0Tjs^G*%xdZWPh@NkCdENz#A8Mb6Gji5%lvfQ^ZDDCaV6ohXiZM)WvdN=Rz)IcUI) zm^SARg{5c4T9FW}?n7MvyjS}kjZffOb6#H0b#e(nBnUb{Qx{*wEP1SvWf~3SOgq z#2ny~TQ_1z4l-rH9AL5wnSsZJ&2S{N|9cMbzx;dGEJY-p$T?9yfzSEmelcnc=i~#Q z!*U)}V@j2@7(k;_kPn!_FzXdAGJ~3npEwujeqll`mh<3Tz(C0&X>C-(@EB_cp#ku_t| zk9o0)svnL6&lmM$BK#Zl-VcrXI|lK{EMk5Ffc5WwtiFchN~FZ)3%nCZyBcs|S`A2- zA{IkC;__Bx2-UVakAh42dH%a6j_Gsh$QK>PM@hO_p`&KC=7vO_lq_ zt1rr)3{-1N(>pIt*qtMS(4Rjxce*Hn6^2CFJ2dD z>7}JAJSoqwdGqP|>2-_4XP7NN?=wYMsAB_eS?mcHoh&9%8n#WQ*7$(w zIq`F92F5aeYwBkOTiuPh6O?gVU%WD{dt4nKM|sMZtj#-Qw@ObEZa4DzD4-@kQQBJ8 zSa$BaUC-NAD#;pbp4DX1TxPE^UDjlM=;3)!HojkTqHq76gT>0itKagCD}8-s{$B2= zo_i0vqq<@SQ;Z|H*z@1?Y4yX;V7KqBX>U__WH*NW@?m44gb6mYK#9S@@RE=+rq50! zfcAv^l50ts#R+MDy9Tr$>OWjdCmeO0;vm0$A5PG;hum_}>Xz;!8K{I|Lw*||bSN?! zUZZ`)`EL*lUdz3GoGAm&f9sBu892XN;7G=>(|-qh=y#}$RuvSVjTe0zuNuem?6|VN zOYKr+p`D!TuiDjdY&AEuLIVDtg8*PfCY6rZY&!oBu@+y_o^&}-PI zKFlKZ0T*+|pV1lDG2=cHMlD*){UGvR7_8Gq)yf&y6k**P*HkTNbpzMbw0~(u^uW~U zoKgJNd=+A7bJF8T36RwC>S!#4iot%n`47VbOS81l+50GdTT5n%T%q^Rw>dkrO(x>Vh>7g{u~&tKJcp5(E0YOt1XEuxEi)clutC>Hjcyj zWODv}1>XX5UWI!<8>=*m^^r9Z~boe?Ln_OMU2#YCZVQTtTVPMUfYivNhuG$_{6e=UA-XY0yh z-N}MV9~T}tuWqq;cOrkopvl{kFY)a&FQsJDgZ1e7KiQ{!+PQ z(YrY*vu3QZR?xUR&)J}0P-%L^s$2W)6lyyOLJba@=cPeCqP$So+Pon@|Mr?! z0w_P<3G0Qp-dwyon(_S$M+b-c=lawmwAyCo$yaaWjN-|!1QDZ!aJ_}VK=&`em3X}V zGQ?o&$wPmeAmbkO=c!dIlD!p=JyMfUNoT(^WoN+|n@`_A^K9H}ttORPGOgM_Ypui# zqx~T*5i9G%(|@s>s|$Z->dA=^!zellVVxF39S@CNIEGrR6L|8`2yzUJULksN6`4Wp z$2Ewd%|q^$<_XY`=x;Ff9E}?8M{VepBg`2_H%W0&8EY|PEE5L$8%#Y%ul*Os9x{XM zVal(jVXagtT73kq@cj!%!$?|bGvXk6a<;Wq?~OC2~ac%FcE{xB4m4Dd`)4IJp9=g0VQD6kmX86p3L4SDhmmAO$1;XT?%c(UZB zABZ7f!;}G@Jg#P#k%SnyAA!UY4TnR&qgtr<2>s0$!`=nu1KEyo5lSvod58?8XjXXCx?c|Di`HR*~`+Cwkbh6OXh~Lhh@t!vypSF=}Z^=(f znEo{8?+#HnPIg@ll|y{@esAR3e1DAB*z1|bp3aIhu5)Enir8IU$nD*C{@g&;bJK)Q z(`^}ZwAH>o=2_qLdxG{1frG)juPod9+*Ffq?AGQ9Su^5xWy^0E6Q`tGqk1>N%%Rh0 z|H{T4HtRZzlD+P!FIrq|-0Jk)_wNP!Huc!+gSsDsOkj3vUnO*lJNQ1tI5-$O%bo*X zAU&yGDh0X{a!0NcvVBO-QzkjQQ#Fp&vEu!^waBJrV(l+iIKYu;GqrWj&IT2 zs2F&S_7U^j-~f5Vn1=2_9P%Lo1MUgdgrm~DRHg|raPGFkk&I!d&TqL{m-#mFxPA9F zy?r5N^@7sITrKy)t*P~6kLd6gXm0hEYtmX|+mpqq4`ynupugWr!|jremnN90T5DB9 z6Z|gVT;b2?yHj|(ch+gak~C*FBSGi48K&mR{mjh8s-4aTJay!yUL6cp=ykWU(yRxuWEQao9DzlsGfE8zpT}{% zp~R&QJoL9WdJM7d0SH1lCSUjYEq5t)#PuIpz7hX^ivua*f+n0jU&sGx} z{m%FAFkdg;ai+U>%TXn6uA&x^d$SLib6e;9dL@%Kf5X!s$EJ!~@Z}^2$&0t{Jew9C zE!llKCc?KcWWZO!%qPi7oTDrx!h4&PrFH!4Jj3k*F0S&6!#F+iTYn$@9A152Bcw4= zrFpVP*p8XgPAXLlvLPSLQ%8UBj|FK#?e90B2|;&qj+LMHBTd=}_p9O@vqO&I?-#T7 zCxp^#mX=?J?#N5fhIBt%?{qx|UZZ`a4?Z72j8=5raL5M<4Di9A#$iS|s-Y1+NVsQ9 zsBqP_q36i-yW0*p{OSD~m1i-3kG+SQ_85!k+1n%^#g9{6?BIL}{^rTOMOv$GYPdz~ zxM{-QJgIK|aI~jXZSphAv;p_3WX1U978 zZ8C$}1HOpiH~brPL%rP!Jz$P{AOSj(&;#Yn85|9yIH(Li%*deh0AlPzKA5oNzc6^n Y3~EgcVy!k)wAu$+wc(mt$V{vM0}!-)HUIzs delta 200 zcmccfpRt);;mYAn3z-;L7!ZJkff2|l+qf-O+LM!E;+`O05If9^lferp?ln1(S!A*! zqa_DOG!rN~c>}Zb 192.168.67.25:10050 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/361 bytes <-> 5 pkts/354 bytes][Goodput ratio: 6/5][0.01 sec][bytes ratio: 0.010 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 1/1 1/2 4/4 2/2][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 72/71 89/82 9/6][Plen Bins: 100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 1 TCP 192.168.7.16:36699 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/429 bytes <-> 5 pkts/1083 bytes][Goodput ratio: 21/69][0.00 sec][bytes ratio: -0.433 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/1 2/2 1/1][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 86/217 157/811 36/297][Plen Bins: 0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 2 TCP 192.168.7.16:60217 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/429 bytes <-> 5 pkts/1083 bytes][Goodput ratio: 21/69][0.00 sec][bytes ratio: -0.433 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/1 2/2 1/1][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 86/217 157/811 36/297][Plen Bins: 0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 3 TCP 192.168.7.16:50639 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/669 bytes <-> 5 pkts/436 bytes][Goodput ratio: 49/22][0.00 sec][bytes ratio: 0.211 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 134/87 397/164 132/39][Plen Bins: 0,0,0,50,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 4 TCP 192.168.7.16:37781 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][6 pkts/661 bytes <-> 5 pkts/436 bytes][Goodput ratio: 39/22][0.00 sec][bytes ratio: 0.205 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 110/87 323/164 95/39][Plen Bins: 0,0,0,50,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 5 TCP 192.168.7.16:58079 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/657 bytes <-> 5 pkts/436 bytes][Goodput ratio: 48/22][0.00 sec][bytes ratio: 0.202 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/1 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 131/87 385/164 127/39][Plen Bins: 0,0,0,50,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 6 TCP 192.168.7.16:48017 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/654 bytes <-> 5 pkts/435 bytes][Goodput ratio: 48/22][0.00 sec][bytes ratio: 0.201 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 131/87 382/163 126/38][Plen Bins: 0,0,0,50,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 7 TCP 192.168.7.16:43677 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/649 bytes <-> 5 pkts/436 bytes][Goodput ratio: 48/22][0.00 sec][bytes ratio: 0.196 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 130/87 377/164 124/39][Plen Bins: 0,0,0,50,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 8 TCP 192.168.7.16:35243 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/648 bytes <-> 5 pkts/436 bytes][Goodput ratio: 48/22][0.00 sec][bytes ratio: 0.196 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 130/87 376/164 123/39][Plen Bins: 0,0,0,50,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 9 TCP 192.168.7.16:35627 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/640 bytes <-> 5 pkts/435 bytes][Goodput ratio: 47/22][0.00 sec][bytes ratio: 0.191 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 128/87 368/163 120/38][Plen Bins: 0,0,0,50,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 10 TCP 192.168.7.16:36623 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/619 bytes <-> 5 pkts/435 bytes][Goodput ratio: 45/22][0.00 sec][bytes ratio: 0.175 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 124/87 347/163 112/38][Plen Bins: 0,0,0,50,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 11 TCP 192.168.7.16:52901 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/619 bytes <-> 5 pkts/435 bytes][Goodput ratio: 45/22][0.00 sec][bytes ratio: 0.175 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 124/87 347/163 112/38][Plen Bins: 0,0,0,50,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 12 TCP 192.168.7.16:43395 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/617 bytes <-> 5 pkts/436 bytes][Goodput ratio: 45/22][0.00 sec][bytes ratio: 0.172 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 123/87 345/164 111/39][Plen Bins: 0,0,0,50,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 13 TCP 192.168.7.16:55759 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][6 pkts/616 bytes <-> 5 pkts/436 bytes][Goodput ratio: 34/22][0.00 sec][bytes ratio: 0.171 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/1 1/2 0/1][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 103/87 278/164 78/39][Plen Bins: 0,0,0,50,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 14 TCP 192.168.7.16:41309 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/604 bytes <-> 5 pkts/436 bytes][Goodput ratio: 44/22][0.00 sec][bytes ratio: 0.162 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 121/87 332/164 106/39][Plen Bins: 0,0,0,50,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 15 TCP 192.168.7.16:33661 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/594 bytes <-> 5 pkts/436 bytes][Goodput ratio: 43/22][0.00 sec][bytes ratio: 0.153 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 119/87 322/164 102/39][Plen Bins: 0,0,0,50,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 16 TCP 192.168.7.16:49215 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/593 bytes <-> 5 pkts/436 bytes][Goodput ratio: 43/22][0.00 sec][bytes ratio: 0.153 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 119/87 321/164 101/39][Plen Bins: 0,0,0,50,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 17 TCP 192.168.7.16:36755 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/587 bytes <-> 5 pkts/436 bytes][Goodput ratio: 42/22][0.00 sec][bytes ratio: 0.148 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 117/87 315/164 99/39][Plen Bins: 0,0,0,50,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 18 TCP 192.168.7.16:39595 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/581 bytes <-> 5 pkts/436 bytes][Goodput ratio: 42/22][0.00 sec][bytes ratio: 0.143 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 1/1 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 116/87 309/164 96/39][Plen Bins: 0,0,0,50,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 19 TCP 192.168.7.16:40553 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/551 bytes <-> 5 pkts/435 bytes][Goodput ratio: 39/22][0.00 sec][bytes ratio: 0.118 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 1/1 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 110/87 279/163 84/38][Plen Bins: 0,0,0,50,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 20 TCP 192.168.7.16:36763 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/513 bytes <-> 5 pkts/436 bytes][Goodput ratio: 34/22][0.00 sec][bytes ratio: 0.081 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 103/87 241/164 69/39][Plen Bins: 0,0,0,50,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 21 TCP 192.168.67.98:57162 <-> 192.168.67.25:10050 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/361 bytes <-> 5 pkts/354 bytes][Goodput ratio: 6/5][0.01 sec][bytes ratio: 0.010 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 1/1 1/2 4/4 2/2][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 72/71 89/82 9/6][Plen Bins: 100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 22 TCP 192.168.7.16:45197 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/433 bytes <-> 3 pkts/206 bytes][Goodput ratio: 22/0][0.00 sec][bytes ratio: 0.355 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 0/0 0/0 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 87/69 161/74 37/4][Plen Bins: 0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 23 TCP 192.168.7.16:48677 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/433 bytes <-> 3 pkts/206 bytes][Goodput ratio: 22/0][0.00 sec][bytes ratio: 0.355 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/1 0/1 1/1 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 87/69 161/74 37/4][Plen Bins: 0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 24 TCP 192.168.7.16:54089 <-> 192.168.7.17:10051 [proto: 248/Zabbix][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Network/14][5 pkts/433 bytes <-> 3 pkts/206 bytes][Goodput ratio: 22/0][0.00 sec][bytes ratio: 0.355 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/1 0/1 1/1 0/0][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 87/69 161/74 37/4][Plen Bins: 0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]