diff --git a/fuzz/Makefile.am b/fuzz/Makefile.am index 2723b1d9c00..3871faaa292 100644 --- a/fuzz/Makefile.am +++ b/fuzz/Makefile.am @@ -337,7 +337,7 @@ fuzz_gcrypt_light_LINK=$(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \ # required for Google oss-fuzz # see https://github.com/google/oss-fuzz/tree/master/projects/ndpi -testpcaps := $(wildcard ../tests/pcap/*.pcap*) +testpcaps := $(wildcard ../tests/cfgs/default/pcap/*.pcap*) fuzz_ndpi_reader_seed_corpus.zip: $(testpcaps) zip -j fuzz_ndpi_reader_seed_corpus.zip $(testpcaps) diff --git a/tests/Makefile.am b/tests/Makefile.am index 64f621ade77..4d2d4039e3d 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am @@ -4,7 +4,7 @@ if BUILD_UNITTESTS TESTS += do-unit.sh endif -EXTRA_DIST = pcap result performance \ +EXTRA_DIST = cfgs/*/pcap cfgs/*/result cfgs/*/*.txt performance \ unit/unit.c unit/Makefile.in \ dga/dga_evaluate.c dga/Makefile.in dga/README.md dga/test_dga.csv dga/test_non_dga.csv do-dga.sh \ do-unit.sh do.sh.in ossfuzz.sh diff --git a/tests/pcap/1kxun.pcap b/tests/cfgs/default/pcap/1kxun.pcap similarity index 100% rename from tests/pcap/1kxun.pcap rename to tests/cfgs/default/pcap/1kxun.pcap diff --git a/tests/pcap/443-chrome.pcap b/tests/cfgs/default/pcap/443-chrome.pcap similarity index 100% rename from tests/pcap/443-chrome.pcap rename to tests/cfgs/default/pcap/443-chrome.pcap diff --git a/tests/pcap/443-curl.pcap b/tests/cfgs/default/pcap/443-curl.pcap similarity index 100% rename from tests/pcap/443-curl.pcap rename to tests/cfgs/default/pcap/443-curl.pcap diff --git a/tests/pcap/443-firefox.pcap b/tests/cfgs/default/pcap/443-firefox.pcap similarity index 100% rename from tests/pcap/443-firefox.pcap rename to tests/cfgs/default/pcap/443-firefox.pcap diff --git a/tests/pcap/443-git.pcap b/tests/cfgs/default/pcap/443-git.pcap similarity index 100% rename from tests/pcap/443-git.pcap rename to tests/cfgs/default/pcap/443-git.pcap diff --git a/tests/pcap/443-opvn.pcap b/tests/cfgs/default/pcap/443-opvn.pcap similarity index 100% rename from tests/pcap/443-opvn.pcap rename to tests/cfgs/default/pcap/443-opvn.pcap diff --git a/tests/pcap/443-safari.pcap b/tests/cfgs/default/pcap/443-safari.pcap similarity index 100% rename from tests/pcap/443-safari.pcap rename to tests/cfgs/default/pcap/443-safari.pcap diff --git a/tests/pcap/4in4tunnel.pcap b/tests/cfgs/default/pcap/4in4tunnel.pcap similarity index 100% rename from tests/pcap/4in4tunnel.pcap rename to tests/cfgs/default/pcap/4in4tunnel.pcap diff --git a/tests/pcap/4in6tunnel.pcap b/tests/cfgs/default/pcap/4in6tunnel.pcap similarity index 100% rename from tests/pcap/4in6tunnel.pcap rename to tests/cfgs/default/pcap/4in6tunnel.pcap diff --git a/tests/pcap/6in4tunnel.pcap b/tests/cfgs/default/pcap/6in4tunnel.pcap similarity index 100% rename from tests/pcap/6in4tunnel.pcap rename to tests/cfgs/default/pcap/6in4tunnel.pcap diff --git a/tests/pcap/6in6tunnel.pcap b/tests/cfgs/default/pcap/6in6tunnel.pcap similarity index 100% rename from tests/pcap/6in6tunnel.pcap rename to tests/cfgs/default/pcap/6in6tunnel.pcap diff --git a/tests/pcap/BGP_Cisco_hdlc_slarp.pcap b/tests/cfgs/default/pcap/BGP_Cisco_hdlc_slarp.pcap similarity index 100% rename from tests/pcap/BGP_Cisco_hdlc_slarp.pcap rename to tests/cfgs/default/pcap/BGP_Cisco_hdlc_slarp.pcap diff --git a/tests/pcap/BGP_redist.pcap b/tests/cfgs/default/pcap/BGP_redist.pcap similarity index 100% rename from tests/pcap/BGP_redist.pcap rename to tests/cfgs/default/pcap/BGP_redist.pcap diff --git a/tests/pcap/EAQ.pcap b/tests/cfgs/default/pcap/EAQ.pcap similarity index 100% rename from tests/pcap/EAQ.pcap rename to tests/cfgs/default/pcap/EAQ.pcap diff --git a/tests/pcap/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap b/tests/cfgs/default/pcap/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap similarity index 100% rename from tests/pcap/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap rename to tests/cfgs/default/pcap/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap diff --git a/tests/pcap/IEC104.pcap b/tests/cfgs/default/pcap/IEC104.pcap similarity index 100% rename from tests/pcap/IEC104.pcap rename to tests/cfgs/default/pcap/IEC104.pcap diff --git a/tests/pcap/KakaoTalk_chat.pcap b/tests/cfgs/default/pcap/KakaoTalk_chat.pcap similarity index 100% rename from tests/pcap/KakaoTalk_chat.pcap rename to tests/cfgs/default/pcap/KakaoTalk_chat.pcap diff --git a/tests/pcap/KakaoTalk_talk.pcap b/tests/cfgs/default/pcap/KakaoTalk_talk.pcap similarity index 100% rename from tests/pcap/KakaoTalk_talk.pcap rename to tests/cfgs/default/pcap/KakaoTalk_talk.pcap diff --git a/tests/pcap/NTPv2.pcap b/tests/cfgs/default/pcap/NTPv2.pcap similarity index 100% rename from tests/pcap/NTPv2.pcap rename to tests/cfgs/default/pcap/NTPv2.pcap diff --git a/tests/pcap/NTPv3.pcap b/tests/cfgs/default/pcap/NTPv3.pcap similarity index 100% rename from tests/pcap/NTPv3.pcap rename to tests/cfgs/default/pcap/NTPv3.pcap diff --git a/tests/pcap/NTPv4.pcap b/tests/cfgs/default/pcap/NTPv4.pcap similarity index 100% rename from tests/pcap/NTPv4.pcap rename to tests/cfgs/default/pcap/NTPv4.pcap diff --git a/tests/pcap/Oscar.pcap b/tests/cfgs/default/pcap/Oscar.pcap similarity index 100% rename from tests/pcap/Oscar.pcap rename to tests/cfgs/default/pcap/Oscar.pcap diff --git a/tests/pcap/README.txt b/tests/cfgs/default/pcap/README.txt similarity index 100% rename from tests/pcap/README.txt rename to tests/cfgs/default/pcap/README.txt diff --git a/tests/pcap/TivoDVR.pcap b/tests/cfgs/default/pcap/TivoDVR.pcap similarity index 100% rename from tests/pcap/TivoDVR.pcap rename to tests/cfgs/default/pcap/TivoDVR.pcap diff --git a/tests/pcap/WebattackRCE.pcap b/tests/cfgs/default/pcap/WebattackRCE.pcap similarity index 100% rename from tests/pcap/WebattackRCE.pcap rename to tests/cfgs/default/pcap/WebattackRCE.pcap diff --git a/tests/pcap/WebattackSQLinj.pcap b/tests/cfgs/default/pcap/WebattackSQLinj.pcap similarity index 100% rename from tests/pcap/WebattackSQLinj.pcap rename to tests/cfgs/default/pcap/WebattackSQLinj.pcap diff --git a/tests/pcap/WebattackXSS.pcap b/tests/cfgs/default/pcap/WebattackXSS.pcap similarity index 100% rename from tests/pcap/WebattackXSS.pcap rename to tests/cfgs/default/pcap/WebattackXSS.pcap diff --git a/tests/pcap/activision.pcap b/tests/cfgs/default/pcap/activision.pcap similarity index 100% rename from tests/pcap/activision.pcap rename to tests/cfgs/default/pcap/activision.pcap diff --git a/tests/pcap/adult_content.pcap b/tests/cfgs/default/pcap/adult_content.pcap similarity index 100% rename from tests/pcap/adult_content.pcap rename to tests/cfgs/default/pcap/adult_content.pcap diff --git a/tests/pcap/afp.pcap b/tests/cfgs/default/pcap/afp.pcap similarity index 100% rename from tests/pcap/afp.pcap rename to tests/cfgs/default/pcap/afp.pcap diff --git a/tests/pcap/agora-sd-rtn.pcap b/tests/cfgs/default/pcap/agora-sd-rtn.pcap similarity index 100% rename from tests/pcap/agora-sd-rtn.pcap rename to tests/cfgs/default/pcap/agora-sd-rtn.pcap diff --git a/tests/pcap/ah.pcapng b/tests/cfgs/default/pcap/ah.pcapng similarity index 100% rename from tests/pcap/ah.pcapng rename to tests/cfgs/default/pcap/ah.pcapng diff --git a/tests/pcap/ajp.pcap b/tests/cfgs/default/pcap/ajp.pcap similarity index 100% rename from tests/pcap/ajp.pcap rename to tests/cfgs/default/pcap/ajp.pcap diff --git a/tests/pcap/alexa-app.pcapng b/tests/cfgs/default/pcap/alexa-app.pcapng similarity index 100% rename from tests/pcap/alexa-app.pcapng rename to tests/cfgs/default/pcap/alexa-app.pcapng diff --git a/tests/pcap/alicloud.pcap b/tests/cfgs/default/pcap/alicloud.pcap similarity index 100% rename from tests/pcap/alicloud.pcap rename to tests/cfgs/default/pcap/alicloud.pcap diff --git a/tests/pcap/among_us.pcap b/tests/cfgs/default/pcap/among_us.pcap similarity index 100% rename from tests/pcap/among_us.pcap rename to tests/cfgs/default/pcap/among_us.pcap diff --git a/tests/pcap/amqp.pcap b/tests/cfgs/default/pcap/amqp.pcap similarity index 100% rename from tests/pcap/amqp.pcap rename to tests/cfgs/default/pcap/amqp.pcap diff --git a/tests/pcap/android.pcap b/tests/cfgs/default/pcap/android.pcap similarity index 100% rename from tests/pcap/android.pcap rename to tests/cfgs/default/pcap/android.pcap diff --git a/tests/pcap/anyconnect-vpn.pcap b/tests/cfgs/default/pcap/anyconnect-vpn.pcap similarity index 100% rename from tests/pcap/anyconnect-vpn.pcap rename to tests/cfgs/default/pcap/anyconnect-vpn.pcap diff --git a/tests/pcap/anydesk.pcapng b/tests/cfgs/default/pcap/anydesk.pcapng similarity index 100% rename from tests/pcap/anydesk.pcapng rename to tests/cfgs/default/pcap/anydesk.pcapng diff --git a/tests/pcap/avast.pcap b/tests/cfgs/default/pcap/avast.pcap similarity index 100% rename from tests/pcap/avast.pcap rename to tests/cfgs/default/pcap/avast.pcap diff --git a/tests/pcap/avast_securedns.pcapng b/tests/cfgs/default/pcap/avast_securedns.pcapng similarity index 100% rename from tests/pcap/avast_securedns.pcapng rename to tests/cfgs/default/pcap/avast_securedns.pcapng diff --git a/tests/pcap/bad-dns-traffic.pcap b/tests/cfgs/default/pcap/bad-dns-traffic.pcap similarity index 100% rename from tests/pcap/bad-dns-traffic.pcap rename to tests/cfgs/default/pcap/bad-dns-traffic.pcap diff --git a/tests/pcap/badpackets.pcap b/tests/cfgs/default/pcap/badpackets.pcap similarity index 100% rename from tests/pcap/badpackets.pcap rename to tests/cfgs/default/pcap/badpackets.pcap diff --git a/tests/pcap/bitcoin.pcap b/tests/cfgs/default/pcap/bitcoin.pcap similarity index 100% rename from tests/pcap/bitcoin.pcap rename to tests/cfgs/default/pcap/bitcoin.pcap diff --git a/tests/pcap/bittorrent.pcap b/tests/cfgs/default/pcap/bittorrent.pcap similarity index 100% rename from tests/pcap/bittorrent.pcap rename to tests/cfgs/default/pcap/bittorrent.pcap diff --git a/tests/pcap/bittorrent_tcp_miss.pcapng b/tests/cfgs/default/pcap/bittorrent_tcp_miss.pcapng similarity index 100% rename from tests/pcap/bittorrent_tcp_miss.pcapng rename to tests/cfgs/default/pcap/bittorrent_tcp_miss.pcapng diff --git a/tests/pcap/bittorrent_utp.pcap b/tests/cfgs/default/pcap/bittorrent_utp.pcap similarity index 100% rename from tests/pcap/bittorrent_utp.pcap rename to tests/cfgs/default/pcap/bittorrent_utp.pcap diff --git a/tests/pcap/bjnp.pcap b/tests/cfgs/default/pcap/bjnp.pcap similarity index 100% rename from tests/pcap/bjnp.pcap rename to tests/cfgs/default/pcap/bjnp.pcap diff --git a/tests/pcap/bot.pcap b/tests/cfgs/default/pcap/bot.pcap similarity index 100% rename from tests/pcap/bot.pcap rename to tests/cfgs/default/pcap/bot.pcap diff --git a/tests/pcap/bt_search.pcap b/tests/cfgs/default/pcap/bt_search.pcap similarity index 100% rename from tests/pcap/bt_search.pcap rename to tests/cfgs/default/pcap/bt_search.pcap diff --git a/tests/pcap/cachefly.pcapng b/tests/cfgs/default/pcap/cachefly.pcapng similarity index 100% rename from tests/pcap/cachefly.pcapng rename to tests/cfgs/default/pcap/cachefly.pcapng diff --git a/tests/pcap/capwap.pcap b/tests/cfgs/default/pcap/capwap.pcap similarity index 100% rename from tests/pcap/capwap.pcap rename to tests/cfgs/default/pcap/capwap.pcap diff --git a/tests/pcap/capwap_data.pcapng b/tests/cfgs/default/pcap/capwap_data.pcapng similarity index 100% rename from tests/pcap/capwap_data.pcapng rename to tests/cfgs/default/pcap/capwap_data.pcapng diff --git a/tests/pcap/cassandra.pcap b/tests/cfgs/default/pcap/cassandra.pcap similarity index 100% rename from tests/pcap/cassandra.pcap rename to tests/cfgs/default/pcap/cassandra.pcap diff --git a/tests/pcap/check_mk_new.pcap b/tests/cfgs/default/pcap/check_mk_new.pcap similarity index 100% rename from tests/pcap/check_mk_new.pcap rename to tests/cfgs/default/pcap/check_mk_new.pcap diff --git a/tests/pcap/chrome.pcap b/tests/cfgs/default/pcap/chrome.pcap similarity index 100% rename from tests/pcap/chrome.pcap rename to tests/cfgs/default/pcap/chrome.pcap diff --git a/tests/pcap/citrix.pcap b/tests/cfgs/default/pcap/citrix.pcap similarity index 100% rename from tests/pcap/citrix.pcap rename to tests/cfgs/default/pcap/citrix.pcap diff --git a/tests/pcap/cloudflare-warp.pcap b/tests/cfgs/default/pcap/cloudflare-warp.pcap similarity index 100% rename from tests/pcap/cloudflare-warp.pcap rename to tests/cfgs/default/pcap/cloudflare-warp.pcap diff --git a/tests/pcap/coap_mqtt.pcap b/tests/cfgs/default/pcap/coap_mqtt.pcap similarity index 100% rename from tests/pcap/coap_mqtt.pcap rename to tests/cfgs/default/pcap/coap_mqtt.pcap diff --git a/tests/pcap/collectd.pcap b/tests/cfgs/default/pcap/collectd.pcap similarity index 100% rename from tests/pcap/collectd.pcap rename to tests/cfgs/default/pcap/collectd.pcap diff --git a/tests/pcap/corba.pcap b/tests/cfgs/default/pcap/corba.pcap similarity index 100% rename from tests/pcap/corba.pcap rename to tests/cfgs/default/pcap/corba.pcap diff --git a/tests/pcap/cpha.pcap b/tests/cfgs/default/pcap/cpha.pcap similarity index 100% rename from tests/pcap/cpha.pcap rename to tests/cfgs/default/pcap/cpha.pcap diff --git a/tests/pcap/crynet.pcap b/tests/cfgs/default/pcap/crynet.pcap similarity index 100% rename from tests/pcap/crynet.pcap rename to tests/cfgs/default/pcap/crynet.pcap diff --git a/tests/pcap/custom_rules_same-ip_multiple_ports.pcapng b/tests/cfgs/default/pcap/custom_rules_same-ip_multiple_ports.pcapng similarity index 100% rename from tests/pcap/custom_rules_same-ip_multiple_ports.pcapng rename to tests/cfgs/default/pcap/custom_rules_same-ip_multiple_ports.pcapng diff --git a/tests/pcap/dazn.pcapng b/tests/cfgs/default/pcap/dazn.pcapng similarity index 100% rename from tests/pcap/dazn.pcapng rename to tests/cfgs/default/pcap/dazn.pcapng diff --git a/tests/pcap/dcerpc.pcap b/tests/cfgs/default/pcap/dcerpc.pcap similarity index 100% rename from tests/pcap/dcerpc.pcap rename to tests/cfgs/default/pcap/dcerpc.pcap diff --git a/tests/pcap/dhcp-fuzz.pcapng b/tests/cfgs/default/pcap/dhcp-fuzz.pcapng similarity index 100% rename from tests/pcap/dhcp-fuzz.pcapng rename to tests/cfgs/default/pcap/dhcp-fuzz.pcapng diff --git a/tests/pcap/diameter.pcap b/tests/cfgs/default/pcap/diameter.pcap similarity index 100% rename from tests/pcap/diameter.pcap rename to tests/cfgs/default/pcap/diameter.pcap diff --git a/tests/pcap/discord.pcap b/tests/cfgs/default/pcap/discord.pcap similarity index 100% rename from tests/pcap/discord.pcap rename to tests/cfgs/default/pcap/discord.pcap diff --git a/tests/pcap/discord_mid_flow.pcap b/tests/cfgs/default/pcap/discord_mid_flow.pcap similarity index 100% rename from tests/pcap/discord_mid_flow.pcap rename to tests/cfgs/default/pcap/discord_mid_flow.pcap diff --git a/tests/pcap/dlt_ppp.pcap b/tests/cfgs/default/pcap/dlt_ppp.pcap similarity index 100% rename from tests/pcap/dlt_ppp.pcap rename to tests/cfgs/default/pcap/dlt_ppp.pcap diff --git a/tests/pcap/dnp3.pcap b/tests/cfgs/default/pcap/dnp3.pcap similarity index 100% rename from tests/pcap/dnp3.pcap rename to tests/cfgs/default/pcap/dnp3.pcap diff --git a/tests/pcap/dns-invalid-chars.pcap b/tests/cfgs/default/pcap/dns-invalid-chars.pcap similarity index 100% rename from tests/pcap/dns-invalid-chars.pcap rename to tests/cfgs/default/pcap/dns-invalid-chars.pcap diff --git a/tests/pcap/dns-tunnel-iodine.pcap b/tests/cfgs/default/pcap/dns-tunnel-iodine.pcap similarity index 100% rename from tests/pcap/dns-tunnel-iodine.pcap rename to tests/cfgs/default/pcap/dns-tunnel-iodine.pcap diff --git a/tests/pcap/dns_ambiguous_names.pcap b/tests/cfgs/default/pcap/dns_ambiguous_names.pcap similarity index 100% rename from tests/pcap/dns_ambiguous_names.pcap rename to tests/cfgs/default/pcap/dns_ambiguous_names.pcap diff --git a/tests/pcap/dns_doh.pcap b/tests/cfgs/default/pcap/dns_doh.pcap similarity index 100% rename from tests/pcap/dns_doh.pcap rename to tests/cfgs/default/pcap/dns_doh.pcap diff --git a/tests/pcap/dns_dot.pcap b/tests/cfgs/default/pcap/dns_dot.pcap similarity index 100% rename from tests/pcap/dns_dot.pcap rename to tests/cfgs/default/pcap/dns_dot.pcap diff --git a/tests/pcap/dns_exfiltration.pcap b/tests/cfgs/default/pcap/dns_exfiltration.pcap similarity index 100% rename from tests/pcap/dns_exfiltration.pcap rename to tests/cfgs/default/pcap/dns_exfiltration.pcap diff --git a/tests/pcap/dns_fragmented.pcap b/tests/cfgs/default/pcap/dns_fragmented.pcap similarity index 100% rename from tests/pcap/dns_fragmented.pcap rename to tests/cfgs/default/pcap/dns_fragmented.pcap diff --git a/tests/pcap/dns_invert_query.pcapng b/tests/cfgs/default/pcap/dns_invert_query.pcapng similarity index 100% rename from tests/pcap/dns_invert_query.pcapng rename to tests/cfgs/default/pcap/dns_invert_query.pcapng diff --git a/tests/pcap/dns_long_domainname.pcap b/tests/cfgs/default/pcap/dns_long_domainname.pcap similarity index 100% rename from tests/pcap/dns_long_domainname.pcap rename to tests/cfgs/default/pcap/dns_long_domainname.pcap diff --git a/tests/pcap/dnscrypt-v1-and-resolver-pings.pcap b/tests/cfgs/default/pcap/dnscrypt-v1-and-resolver-pings.pcap similarity index 100% rename from tests/pcap/dnscrypt-v1-and-resolver-pings.pcap rename to tests/cfgs/default/pcap/dnscrypt-v1-and-resolver-pings.pcap diff --git a/tests/pcap/dnscrypt-v2-doh.pcap b/tests/cfgs/default/pcap/dnscrypt-v2-doh.pcap similarity index 100% rename from tests/pcap/dnscrypt-v2-doh.pcap rename to tests/cfgs/default/pcap/dnscrypt-v2-doh.pcap diff --git a/tests/pcap/dnscrypt-v2.pcap b/tests/cfgs/default/pcap/dnscrypt-v2.pcap similarity index 100% rename from tests/pcap/dnscrypt-v2.pcap rename to tests/cfgs/default/pcap/dnscrypt-v2.pcap diff --git a/tests/pcap/dnscrypt_skype_false_positive.pcapng b/tests/cfgs/default/pcap/dnscrypt_skype_false_positive.pcapng similarity index 100% rename from tests/pcap/dnscrypt_skype_false_positive.pcapng rename to tests/cfgs/default/pcap/dnscrypt_skype_false_positive.pcapng diff --git a/tests/pcap/doq.pcapng b/tests/cfgs/default/pcap/doq.pcapng similarity index 100% rename from tests/pcap/doq.pcapng rename to tests/cfgs/default/pcap/doq.pcapng diff --git a/tests/pcap/doq_adguard.pcapng b/tests/cfgs/default/pcap/doq_adguard.pcapng similarity index 100% rename from tests/pcap/doq_adguard.pcapng rename to tests/cfgs/default/pcap/doq_adguard.pcapng diff --git a/tests/pcap/dos_win98_smb_netbeui.pcap b/tests/cfgs/default/pcap/dos_win98_smb_netbeui.pcap similarity index 100% rename from tests/pcap/dos_win98_smb_netbeui.pcap rename to tests/cfgs/default/pcap/dos_win98_smb_netbeui.pcap diff --git a/tests/pcap/drda_db2.pcap b/tests/cfgs/default/pcap/drda_db2.pcap similarity index 100% rename from tests/pcap/drda_db2.pcap rename to tests/cfgs/default/pcap/drda_db2.pcap diff --git a/tests/pcap/dropbox.pcap b/tests/cfgs/default/pcap/dropbox.pcap similarity index 100% rename from tests/pcap/dropbox.pcap rename to tests/cfgs/default/pcap/dropbox.pcap diff --git a/tests/pcap/dtls.pcap b/tests/cfgs/default/pcap/dtls.pcap similarity index 100% rename from tests/pcap/dtls.pcap rename to tests/cfgs/default/pcap/dtls.pcap diff --git a/tests/pcap/dtls2.pcap b/tests/cfgs/default/pcap/dtls2.pcap similarity index 100% rename from tests/pcap/dtls2.pcap rename to tests/cfgs/default/pcap/dtls2.pcap diff --git a/tests/pcap/dtls_certificate.pcapng b/tests/cfgs/default/pcap/dtls_certificate.pcapng similarity index 100% rename from tests/pcap/dtls_certificate.pcapng rename to tests/cfgs/default/pcap/dtls_certificate.pcapng diff --git a/tests/pcap/dtls_certificate_fragments.pcap b/tests/cfgs/default/pcap/dtls_certificate_fragments.pcap similarity index 100% rename from tests/pcap/dtls_certificate_fragments.pcap rename to tests/cfgs/default/pcap/dtls_certificate_fragments.pcap diff --git a/tests/pcap/dtls_mid_sessions.pcapng b/tests/cfgs/default/pcap/dtls_mid_sessions.pcapng similarity index 100% rename from tests/pcap/dtls_mid_sessions.pcapng rename to tests/cfgs/default/pcap/dtls_mid_sessions.pcapng diff --git a/tests/pcap/dtls_old_version.pcapng b/tests/cfgs/default/pcap/dtls_old_version.pcapng similarity index 100% rename from tests/pcap/dtls_old_version.pcapng rename to tests/cfgs/default/pcap/dtls_old_version.pcapng diff --git a/tests/pcap/dtls_session_id_and_coockie_both.pcap b/tests/cfgs/default/pcap/dtls_session_id_and_coockie_both.pcap similarity index 100% rename from tests/pcap/dtls_session_id_and_coockie_both.pcap rename to tests/cfgs/default/pcap/dtls_session_id_and_coockie_both.pcap diff --git a/tests/pcap/elasticsearch.pcap b/tests/cfgs/default/pcap/elasticsearch.pcap similarity index 100% rename from tests/pcap/elasticsearch.pcap rename to tests/cfgs/default/pcap/elasticsearch.pcap diff --git a/tests/pcap/emotet.pcap b/tests/cfgs/default/pcap/emotet.pcap similarity index 100% rename from tests/pcap/emotet.pcap rename to tests/cfgs/default/pcap/emotet.pcap diff --git a/tests/pcap/encrypted_sni.pcap b/tests/cfgs/default/pcap/encrypted_sni.pcap similarity index 100% rename from tests/pcap/encrypted_sni.pcap rename to tests/cfgs/default/pcap/encrypted_sni.pcap diff --git a/tests/pcap/esp.pcapng b/tests/cfgs/default/pcap/esp.pcapng similarity index 100% rename from tests/pcap/esp.pcapng rename to tests/cfgs/default/pcap/esp.pcapng diff --git a/tests/pcap/ethereum.pcap b/tests/cfgs/default/pcap/ethereum.pcap similarity index 100% rename from tests/pcap/ethereum.pcap rename to tests/cfgs/default/pcap/ethereum.pcap diff --git a/tests/pcap/ethernetIP.pcap b/tests/cfgs/default/pcap/ethernetIP.pcap similarity index 100% rename from tests/pcap/ethernetIP.pcap rename to tests/cfgs/default/pcap/ethernetIP.pcap diff --git a/tests/pcap/exe_download.pcap b/tests/cfgs/default/pcap/exe_download.pcap similarity index 100% rename from tests/pcap/exe_download.pcap rename to tests/cfgs/default/pcap/exe_download.pcap diff --git a/tests/pcap/exe_download_as_png.pcap b/tests/cfgs/default/pcap/exe_download_as_png.pcap similarity index 100% rename from tests/pcap/exe_download_as_png.pcap rename to tests/cfgs/default/pcap/exe_download_as_png.pcap diff --git a/tests/pcap/facebook.pcap b/tests/cfgs/default/pcap/facebook.pcap similarity index 100% rename from tests/pcap/facebook.pcap rename to tests/cfgs/default/pcap/facebook.pcap diff --git a/tests/pcap/fastcgi.pcap b/tests/cfgs/default/pcap/fastcgi.pcap similarity index 100% rename from tests/pcap/fastcgi.pcap rename to tests/cfgs/default/pcap/fastcgi.pcap diff --git a/tests/pcap/firefox.pcap b/tests/cfgs/default/pcap/firefox.pcap similarity index 100% rename from tests/pcap/firefox.pcap rename to tests/cfgs/default/pcap/firefox.pcap diff --git a/tests/pcap/fix.pcap b/tests/cfgs/default/pcap/fix.pcap similarity index 100% rename from tests/pcap/fix.pcap rename to tests/cfgs/default/pcap/fix.pcap diff --git a/tests/pcap/fix2.pcap b/tests/cfgs/default/pcap/fix2.pcap similarity index 100% rename from tests/pcap/fix2.pcap rename to tests/cfgs/default/pcap/fix2.pcap diff --git a/tests/pcap/forticlient.pcap b/tests/cfgs/default/pcap/forticlient.pcap similarity index 100% rename from tests/pcap/forticlient.pcap rename to tests/cfgs/default/pcap/forticlient.pcap diff --git a/tests/pcap/ftp-start-tls.pcap b/tests/cfgs/default/pcap/ftp-start-tls.pcap similarity index 100% rename from tests/pcap/ftp-start-tls.pcap rename to tests/cfgs/default/pcap/ftp-start-tls.pcap diff --git a/tests/pcap/ftp.pcap b/tests/cfgs/default/pcap/ftp.pcap similarity index 100% rename from tests/pcap/ftp.pcap rename to tests/cfgs/default/pcap/ftp.pcap diff --git a/tests/pcap/ftp_failed.pcap b/tests/cfgs/default/pcap/ftp_failed.pcap similarity index 100% rename from tests/pcap/ftp_failed.pcap rename to tests/cfgs/default/pcap/ftp_failed.pcap diff --git a/tests/pcap/fuzz-2006-06-26-2594.pcap b/tests/cfgs/default/pcap/fuzz-2006-06-26-2594.pcap similarity index 100% rename from tests/pcap/fuzz-2006-06-26-2594.pcap rename to tests/cfgs/default/pcap/fuzz-2006-06-26-2594.pcap diff --git a/tests/pcap/fuzz-2006-09-29-28586.pcap b/tests/cfgs/default/pcap/fuzz-2006-09-29-28586.pcap similarity index 100% rename from tests/pcap/fuzz-2006-09-29-28586.pcap rename to tests/cfgs/default/pcap/fuzz-2006-09-29-28586.pcap diff --git a/tests/pcap/fuzz-2020-02-16-11740.pcap b/tests/cfgs/default/pcap/fuzz-2020-02-16-11740.pcap similarity index 100% rename from tests/pcap/fuzz-2020-02-16-11740.pcap rename to tests/cfgs/default/pcap/fuzz-2020-02-16-11740.pcap diff --git a/tests/pcap/fuzz-2021-06-07-c6c72a0a56.pcap b/tests/cfgs/default/pcap/fuzz-2021-06-07-c6c72a0a56.pcap similarity index 100% rename from tests/pcap/fuzz-2021-06-07-c6c72a0a56.pcap rename to tests/cfgs/default/pcap/fuzz-2021-06-07-c6c72a0a56.pcap diff --git a/tests/pcap/fuzz-2021-10-13.pcap b/tests/cfgs/default/pcap/fuzz-2021-10-13.pcap similarity index 100% rename from tests/pcap/fuzz-2021-10-13.pcap rename to tests/cfgs/default/pcap/fuzz-2021-10-13.pcap diff --git a/tests/pcap/genshin-impact.pcap b/tests/cfgs/default/pcap/genshin-impact.pcap similarity index 100% rename from tests/pcap/genshin-impact.pcap rename to tests/cfgs/default/pcap/genshin-impact.pcap diff --git a/tests/pcap/git.pcap b/tests/cfgs/default/pcap/git.pcap similarity index 100% rename from tests/pcap/git.pcap rename to tests/cfgs/default/pcap/git.pcap diff --git a/tests/pcap/gnutella.pcap b/tests/cfgs/default/pcap/gnutella.pcap similarity index 100% rename from tests/pcap/gnutella.pcap rename to tests/cfgs/default/pcap/gnutella.pcap diff --git a/tests/pcap/google_ssl.pcap b/tests/cfgs/default/pcap/google_ssl.pcap similarity index 100% rename from tests/pcap/google_ssl.pcap rename to tests/cfgs/default/pcap/google_ssl.pcap diff --git a/tests/pcap/googledns_android10.pcap b/tests/cfgs/default/pcap/googledns_android10.pcap similarity index 100% rename from tests/pcap/googledns_android10.pcap rename to tests/cfgs/default/pcap/googledns_android10.pcap diff --git a/tests/pcap/gquic.pcap b/tests/cfgs/default/pcap/gquic.pcap similarity index 100% rename from tests/pcap/gquic.pcap rename to tests/cfgs/default/pcap/gquic.pcap diff --git a/tests/pcap/gtp_c.pcap b/tests/cfgs/default/pcap/gtp_c.pcap similarity index 100% rename from tests/pcap/gtp_c.pcap rename to tests/cfgs/default/pcap/gtp_c.pcap diff --git a/tests/pcap/gtp_false_positive.pcapng b/tests/cfgs/default/pcap/gtp_false_positive.pcapng similarity index 100% rename from tests/pcap/gtp_false_positive.pcapng rename to tests/cfgs/default/pcap/gtp_false_positive.pcapng diff --git a/tests/pcap/gtp_prime.pcapng b/tests/cfgs/default/pcap/gtp_prime.pcapng similarity index 100% rename from tests/pcap/gtp_prime.pcapng rename to tests/cfgs/default/pcap/gtp_prime.pcapng diff --git a/tests/pcap/h323-overflow.pcap b/tests/cfgs/default/pcap/h323-overflow.pcap similarity index 100% rename from tests/pcap/h323-overflow.pcap rename to tests/cfgs/default/pcap/h323-overflow.pcap diff --git a/tests/pcap/h323.pcap b/tests/cfgs/default/pcap/h323.pcap similarity index 100% rename from tests/pcap/h323.pcap rename to tests/cfgs/default/pcap/h323.pcap diff --git a/tests/pcap/hangout.pcap b/tests/cfgs/default/pcap/hangout.pcap similarity index 100% rename from tests/pcap/hangout.pcap rename to tests/cfgs/default/pcap/hangout.pcap diff --git a/tests/pcap/hpvirtgrp.pcap b/tests/cfgs/default/pcap/hpvirtgrp.pcap similarity index 100% rename from tests/pcap/hpvirtgrp.pcap rename to tests/cfgs/default/pcap/hpvirtgrp.pcap diff --git a/tests/pcap/hsrp0.pcap b/tests/cfgs/default/pcap/hsrp0.pcap similarity index 100% rename from tests/pcap/hsrp0.pcap rename to tests/cfgs/default/pcap/hsrp0.pcap diff --git a/tests/pcap/hsrp2.pcap b/tests/cfgs/default/pcap/hsrp2.pcap similarity index 100% rename from tests/pcap/hsrp2.pcap rename to tests/cfgs/default/pcap/hsrp2.pcap diff --git a/tests/pcap/hsrp2_ipv6.pcapng b/tests/cfgs/default/pcap/hsrp2_ipv6.pcapng similarity index 100% rename from tests/pcap/hsrp2_ipv6.pcapng rename to tests/cfgs/default/pcap/hsrp2_ipv6.pcapng diff --git a/tests/pcap/http-crash-content-disposition.pcap b/tests/cfgs/default/pcap/http-crash-content-disposition.pcap similarity index 100% rename from tests/pcap/http-crash-content-disposition.pcap rename to tests/cfgs/default/pcap/http-crash-content-disposition.pcap diff --git a/tests/pcap/http-lines-split.pcap b/tests/cfgs/default/pcap/http-lines-split.pcap similarity index 100% rename from tests/pcap/http-lines-split.pcap rename to tests/cfgs/default/pcap/http-lines-split.pcap diff --git a/tests/pcap/http-manipulated.pcap b/tests/cfgs/default/pcap/http-manipulated.pcap similarity index 100% rename from tests/pcap/http-manipulated.pcap rename to tests/cfgs/default/pcap/http-manipulated.pcap diff --git a/tests/pcap/http-proxy.pcapng b/tests/cfgs/default/pcap/http-proxy.pcapng similarity index 100% rename from tests/pcap/http-proxy.pcapng rename to tests/cfgs/default/pcap/http-proxy.pcapng diff --git a/tests/pcap/http_auth.pcap b/tests/cfgs/default/pcap/http_auth.pcap similarity index 100% rename from tests/pcap/http_auth.pcap rename to tests/cfgs/default/pcap/http_auth.pcap diff --git a/tests/pcap/http_connect.pcap b/tests/cfgs/default/pcap/http_connect.pcap similarity index 100% rename from tests/pcap/http_connect.pcap rename to tests/cfgs/default/pcap/http_connect.pcap diff --git a/tests/pcap/http_guessed_host_and_guessed.pcapng b/tests/cfgs/default/pcap/http_guessed_host_and_guessed.pcapng similarity index 100% rename from tests/pcap/http_guessed_host_and_guessed.pcapng rename to tests/cfgs/default/pcap/http_guessed_host_and_guessed.pcapng diff --git a/tests/pcap/http_ipv6.pcap b/tests/cfgs/default/pcap/http_ipv6.pcap similarity index 100% rename from tests/pcap/http_ipv6.pcap rename to tests/cfgs/default/pcap/http_ipv6.pcap diff --git a/tests/pcap/http_on_sip_port.pcap b/tests/cfgs/default/pcap/http_on_sip_port.pcap similarity index 100% rename from tests/pcap/http_on_sip_port.pcap rename to tests/cfgs/default/pcap/http_on_sip_port.pcap diff --git a/tests/pcap/i3d.pcap b/tests/cfgs/default/pcap/i3d.pcap similarity index 100% rename from tests/pcap/i3d.pcap rename to tests/cfgs/default/pcap/i3d.pcap diff --git a/tests/pcap/iax.pcap b/tests/cfgs/default/pcap/iax.pcap similarity index 100% rename from tests/pcap/iax.pcap rename to tests/cfgs/default/pcap/iax.pcap diff --git a/tests/pcap/icmp-tunnel.pcap b/tests/cfgs/default/pcap/icmp-tunnel.pcap similarity index 100% rename from tests/pcap/icmp-tunnel.pcap rename to tests/cfgs/default/pcap/icmp-tunnel.pcap diff --git a/tests/pcap/iec60780-5-104.pcap b/tests/cfgs/default/pcap/iec60780-5-104.pcap similarity index 100% rename from tests/pcap/iec60780-5-104.pcap rename to tests/cfgs/default/pcap/iec60780-5-104.pcap diff --git a/tests/pcap/imap-starttls.pcap b/tests/cfgs/default/pcap/imap-starttls.pcap similarity index 100% rename from tests/pcap/imap-starttls.pcap rename to tests/cfgs/default/pcap/imap-starttls.pcap diff --git a/tests/pcap/imap.pcap b/tests/cfgs/default/pcap/imap.pcap similarity index 100% rename from tests/pcap/imap.pcap rename to tests/cfgs/default/pcap/imap.pcap diff --git a/tests/pcap/imaps.pcap b/tests/cfgs/default/pcap/imaps.pcap similarity index 100% rename from tests/pcap/imaps.pcap rename to tests/cfgs/default/pcap/imaps.pcap diff --git a/tests/pcap/imo.pcap b/tests/cfgs/default/pcap/imo.pcap similarity index 100% rename from tests/pcap/imo.pcap rename to tests/cfgs/default/pcap/imo.pcap diff --git a/tests/pcap/instagram.pcap b/tests/cfgs/default/pcap/instagram.pcap similarity index 100% rename from tests/pcap/instagram.pcap rename to tests/cfgs/default/pcap/instagram.pcap diff --git a/tests/pcap/ip_fragmented_garbage.pcap b/tests/cfgs/default/pcap/ip_fragmented_garbage.pcap similarity index 100% rename from tests/pcap/ip_fragmented_garbage.pcap rename to tests/cfgs/default/pcap/ip_fragmented_garbage.pcap diff --git a/tests/pcap/iphone.pcap b/tests/cfgs/default/pcap/iphone.pcap similarity index 100% rename from tests/pcap/iphone.pcap rename to tests/cfgs/default/pcap/iphone.pcap diff --git a/tests/pcap/ipp.pcap b/tests/cfgs/default/pcap/ipp.pcap similarity index 100% rename from tests/pcap/ipp.pcap rename to tests/cfgs/default/pcap/ipp.pcap diff --git a/tests/pcap/ipsec_isakmp_esp.pcap b/tests/cfgs/default/pcap/ipsec_isakmp_esp.pcap similarity index 100% rename from tests/pcap/ipsec_isakmp_esp.pcap rename to tests/cfgs/default/pcap/ipsec_isakmp_esp.pcap diff --git a/tests/pcap/ipv6_in_gtp.pcap b/tests/cfgs/default/pcap/ipv6_in_gtp.pcap similarity index 100% rename from tests/pcap/ipv6_in_gtp.pcap rename to tests/cfgs/default/pcap/ipv6_in_gtp.pcap diff --git a/tests/pcap/irc.pcap b/tests/cfgs/default/pcap/irc.pcap similarity index 100% rename from tests/pcap/irc.pcap rename to tests/cfgs/default/pcap/irc.pcap diff --git a/tests/pcap/ja3_lots_of_cipher_suites.pcap b/tests/cfgs/default/pcap/ja3_lots_of_cipher_suites.pcap similarity index 100% rename from tests/pcap/ja3_lots_of_cipher_suites.pcap rename to tests/cfgs/default/pcap/ja3_lots_of_cipher_suites.pcap diff --git a/tests/pcap/ja3_lots_of_cipher_suites_2_anon.pcap b/tests/cfgs/default/pcap/ja3_lots_of_cipher_suites_2_anon.pcap similarity index 100% rename from tests/pcap/ja3_lots_of_cipher_suites_2_anon.pcap rename to tests/cfgs/default/pcap/ja3_lots_of_cipher_suites_2_anon.pcap diff --git a/tests/pcap/jabber.pcap b/tests/cfgs/default/pcap/jabber.pcap similarity index 100% rename from tests/pcap/jabber.pcap rename to tests/cfgs/default/pcap/jabber.pcap diff --git a/tests/pcap/kerberos-error.pcap b/tests/cfgs/default/pcap/kerberos-error.pcap similarity index 100% rename from tests/pcap/kerberos-error.pcap rename to tests/cfgs/default/pcap/kerberos-error.pcap diff --git a/tests/pcap/kerberos-login.pcap b/tests/cfgs/default/pcap/kerberos-login.pcap similarity index 100% rename from tests/pcap/kerberos-login.pcap rename to tests/cfgs/default/pcap/kerberos-login.pcap diff --git a/tests/pcap/kerberos.pcap b/tests/cfgs/default/pcap/kerberos.pcap similarity index 100% rename from tests/pcap/kerberos.pcap rename to tests/cfgs/default/pcap/kerberos.pcap diff --git a/tests/pcap/kerberos_fuzz.pcapng b/tests/cfgs/default/pcap/kerberos_fuzz.pcapng similarity index 100% rename from tests/pcap/kerberos_fuzz.pcapng rename to tests/cfgs/default/pcap/kerberos_fuzz.pcapng diff --git a/tests/pcap/kismet.pcap b/tests/cfgs/default/pcap/kismet.pcap similarity index 100% rename from tests/pcap/kismet.pcap rename to tests/cfgs/default/pcap/kismet.pcap diff --git a/tests/pcap/kontiki.pcap b/tests/cfgs/default/pcap/kontiki.pcap similarity index 100% rename from tests/pcap/kontiki.pcap rename to tests/cfgs/default/pcap/kontiki.pcap diff --git a/tests/pcap/line.pcap b/tests/cfgs/default/pcap/line.pcap similarity index 100% rename from tests/pcap/line.pcap rename to tests/cfgs/default/pcap/line.pcap diff --git a/tests/pcap/linecall_falsepositve.pcap b/tests/cfgs/default/pcap/linecall_falsepositve.pcap similarity index 100% rename from tests/pcap/linecall_falsepositve.pcap rename to tests/cfgs/default/pcap/linecall_falsepositve.pcap diff --git a/tests/pcap/lisp_registration.pcap b/tests/cfgs/default/pcap/lisp_registration.pcap similarity index 100% rename from tests/pcap/lisp_registration.pcap rename to tests/cfgs/default/pcap/lisp_registration.pcap diff --git a/tests/pcap/log4j-webapp-exploit.pcap b/tests/cfgs/default/pcap/log4j-webapp-exploit.pcap similarity index 100% rename from tests/pcap/log4j-webapp-exploit.pcap rename to tests/cfgs/default/pcap/log4j-webapp-exploit.pcap diff --git a/tests/pcap/long_tls_certificate.pcap b/tests/cfgs/default/pcap/long_tls_certificate.pcap similarity index 100% rename from tests/pcap/long_tls_certificate.pcap rename to tests/cfgs/default/pcap/long_tls_certificate.pcap diff --git a/tests/pcap/lru_ipv6_caches.pcapng b/tests/cfgs/default/pcap/lru_ipv6_caches.pcapng similarity index 100% rename from tests/pcap/lru_ipv6_caches.pcapng rename to tests/cfgs/default/pcap/lru_ipv6_caches.pcapng diff --git a/tests/pcap/malformed_dns.pcap b/tests/cfgs/default/pcap/malformed_dns.pcap similarity index 100% rename from tests/pcap/malformed_dns.pcap rename to tests/cfgs/default/pcap/malformed_dns.pcap diff --git a/tests/pcap/malformed_icmp.pcap b/tests/cfgs/default/pcap/malformed_icmp.pcap similarity index 100% rename from tests/pcap/malformed_icmp.pcap rename to tests/cfgs/default/pcap/malformed_icmp.pcap diff --git a/tests/pcap/malware.pcap b/tests/cfgs/default/pcap/malware.pcap similarity index 100% rename from tests/pcap/malware.pcap rename to tests/cfgs/default/pcap/malware.pcap diff --git a/tests/pcap/memcached.cap b/tests/cfgs/default/pcap/memcached.cap similarity index 100% rename from tests/pcap/memcached.cap rename to tests/cfgs/default/pcap/memcached.cap diff --git a/tests/pcap/merakicloud.pcapng b/tests/cfgs/default/pcap/merakicloud.pcapng similarity index 100% rename from tests/pcap/merakicloud.pcapng rename to tests/cfgs/default/pcap/merakicloud.pcapng diff --git a/tests/pcap/mgcp.pcapng b/tests/cfgs/default/pcap/mgcp.pcapng similarity index 100% rename from tests/pcap/mgcp.pcapng rename to tests/cfgs/default/pcap/mgcp.pcapng diff --git a/tests/pcap/modbus.pcap b/tests/cfgs/default/pcap/modbus.pcap similarity index 100% rename from tests/pcap/modbus.pcap rename to tests/cfgs/default/pcap/modbus.pcap diff --git a/tests/pcap/monero.pcap b/tests/cfgs/default/pcap/monero.pcap similarity index 100% rename from tests/pcap/monero.pcap rename to tests/cfgs/default/pcap/monero.pcap diff --git a/tests/pcap/mongo_false_positive.pcapng b/tests/cfgs/default/pcap/mongo_false_positive.pcapng similarity index 100% rename from tests/pcap/mongo_false_positive.pcapng rename to tests/cfgs/default/pcap/mongo_false_positive.pcapng diff --git a/tests/pcap/mongodb.pcap b/tests/cfgs/default/pcap/mongodb.pcap similarity index 100% rename from tests/pcap/mongodb.pcap rename to tests/cfgs/default/pcap/mongodb.pcap diff --git a/tests/pcap/mpeg-dash.pcap b/tests/cfgs/default/pcap/mpeg-dash.pcap similarity index 100% rename from tests/pcap/mpeg-dash.pcap rename to tests/cfgs/default/pcap/mpeg-dash.pcap diff --git a/tests/pcap/mpeg.pcap b/tests/cfgs/default/pcap/mpeg.pcap similarity index 100% rename from tests/pcap/mpeg.pcap rename to tests/cfgs/default/pcap/mpeg.pcap diff --git a/tests/pcap/mpegts.pcap b/tests/cfgs/default/pcap/mpegts.pcap similarity index 100% rename from tests/pcap/mpegts.pcap rename to tests/cfgs/default/pcap/mpegts.pcap diff --git a/tests/pcap/mqtt.pcap b/tests/cfgs/default/pcap/mqtt.pcap similarity index 100% rename from tests/pcap/mqtt.pcap rename to tests/cfgs/default/pcap/mqtt.pcap diff --git a/tests/pcap/mssql_tds.pcap b/tests/cfgs/default/pcap/mssql_tds.pcap similarity index 100% rename from tests/pcap/mssql_tds.pcap rename to tests/cfgs/default/pcap/mssql_tds.pcap diff --git a/tests/pcap/munin.pcap b/tests/cfgs/default/pcap/munin.pcap similarity index 100% rename from tests/pcap/munin.pcap rename to tests/cfgs/default/pcap/munin.pcap diff --git a/tests/pcap/mysql-8.pcap b/tests/cfgs/default/pcap/mysql-8.pcap similarity index 100% rename from tests/pcap/mysql-8.pcap rename to tests/cfgs/default/pcap/mysql-8.pcap diff --git a/tests/pcap/natpmp.pcap b/tests/cfgs/default/pcap/natpmp.pcap similarity index 100% rename from tests/pcap/natpmp.pcap rename to tests/cfgs/default/pcap/natpmp.pcap diff --git a/tests/pcap/nats.pcap b/tests/cfgs/default/pcap/nats.pcap similarity index 100% rename from tests/pcap/nats.pcap rename to tests/cfgs/default/pcap/nats.pcap diff --git a/tests/pcap/ndpi_match_string_subprotocol__error.pcapng b/tests/cfgs/default/pcap/ndpi_match_string_subprotocol__error.pcapng similarity index 100% rename from tests/pcap/ndpi_match_string_subprotocol__error.pcapng rename to tests/cfgs/default/pcap/ndpi_match_string_subprotocol__error.pcapng diff --git a/tests/pcap/nest_log_sink.pcap b/tests/cfgs/default/pcap/nest_log_sink.pcap similarity index 100% rename from tests/pcap/nest_log_sink.pcap rename to tests/cfgs/default/pcap/nest_log_sink.pcap diff --git a/tests/pcap/netbios.pcap b/tests/cfgs/default/pcap/netbios.pcap similarity index 100% rename from tests/pcap/netbios.pcap rename to tests/cfgs/default/pcap/netbios.pcap diff --git a/tests/pcap/netbios_wildcard_dns_query.pcap b/tests/cfgs/default/pcap/netbios_wildcard_dns_query.pcap similarity index 100% rename from tests/pcap/netbios_wildcard_dns_query.pcap rename to tests/cfgs/default/pcap/netbios_wildcard_dns_query.pcap diff --git a/tests/pcap/netflix.pcap b/tests/cfgs/default/pcap/netflix.pcap similarity index 100% rename from tests/pcap/netflix.pcap rename to tests/cfgs/default/pcap/netflix.pcap diff --git a/tests/pcap/netflow-fritz.pcap b/tests/cfgs/default/pcap/netflow-fritz.pcap similarity index 100% rename from tests/pcap/netflow-fritz.pcap rename to tests/cfgs/default/pcap/netflow-fritz.pcap diff --git a/tests/pcap/netflowv9.pcap b/tests/cfgs/default/pcap/netflowv9.pcap similarity index 100% rename from tests/pcap/netflowv9.pcap rename to tests/cfgs/default/pcap/netflowv9.pcap diff --git a/tests/pcap/nfsv2.pcap b/tests/cfgs/default/pcap/nfsv2.pcap similarity index 100% rename from tests/pcap/nfsv2.pcap rename to tests/cfgs/default/pcap/nfsv2.pcap diff --git a/tests/pcap/nfsv3.pcap b/tests/cfgs/default/pcap/nfsv3.pcap similarity index 100% rename from tests/pcap/nfsv3.pcap rename to tests/cfgs/default/pcap/nfsv3.pcap diff --git a/tests/pcap/nintendo.pcap b/tests/cfgs/default/pcap/nintendo.pcap similarity index 100% rename from tests/pcap/nintendo.pcap rename to tests/cfgs/default/pcap/nintendo.pcap diff --git a/tests/pcap/nntp.pcap b/tests/cfgs/default/pcap/nntp.pcap similarity index 100% rename from tests/pcap/nntp.pcap rename to tests/cfgs/default/pcap/nntp.pcap diff --git a/tests/pcap/no_sni.pcap b/tests/cfgs/default/pcap/no_sni.pcap similarity index 100% rename from tests/pcap/no_sni.pcap rename to tests/cfgs/default/pcap/no_sni.pcap diff --git a/tests/pcap/ocs.pcap b/tests/cfgs/default/pcap/ocs.pcap similarity index 100% rename from tests/pcap/ocs.pcap rename to tests/cfgs/default/pcap/ocs.pcap diff --git a/tests/pcap/ocsp.pcapng b/tests/cfgs/default/pcap/ocsp.pcapng similarity index 100% rename from tests/pcap/ocsp.pcapng rename to tests/cfgs/default/pcap/ocsp.pcapng diff --git a/tests/pcap/ookla.pcap b/tests/cfgs/default/pcap/ookla.pcap similarity index 100% rename from tests/pcap/ookla.pcap rename to tests/cfgs/default/pcap/ookla.pcap diff --git a/tests/pcap/openvpn.pcap b/tests/cfgs/default/pcap/openvpn.pcap similarity index 100% rename from tests/pcap/openvpn.pcap rename to tests/cfgs/default/pcap/openvpn.pcap diff --git a/tests/pcap/oracle12.pcapng b/tests/cfgs/default/pcap/oracle12.pcapng similarity index 100% rename from tests/pcap/oracle12.pcapng rename to tests/cfgs/default/pcap/oracle12.pcapng diff --git a/tests/pcap/os_detected.pcapng b/tests/cfgs/default/pcap/os_detected.pcapng similarity index 100% rename from tests/pcap/os_detected.pcapng rename to tests/cfgs/default/pcap/os_detected.pcapng diff --git a/tests/pcap/ospfv2_add_new_prefix.pcap b/tests/cfgs/default/pcap/ospfv2_add_new_prefix.pcap similarity index 100% rename from tests/pcap/ospfv2_add_new_prefix.pcap rename to tests/cfgs/default/pcap/ospfv2_add_new_prefix.pcap diff --git a/tests/pcap/ossfuzz_seed_fake_traces_1.pcapng b/tests/cfgs/default/pcap/ossfuzz_seed_fake_traces_1.pcapng similarity index 100% rename from tests/pcap/ossfuzz_seed_fake_traces_1.pcapng rename to tests/cfgs/default/pcap/ossfuzz_seed_fake_traces_1.pcapng diff --git a/tests/pcap/ossfuzz_seed_fake_traces_2.pcapng b/tests/cfgs/default/pcap/ossfuzz_seed_fake_traces_2.pcapng similarity index 100% rename from tests/pcap/ossfuzz_seed_fake_traces_2.pcapng rename to tests/cfgs/default/pcap/ossfuzz_seed_fake_traces_2.pcapng diff --git a/tests/pcap/ossfuzz_seed_fake_traces_3.pcapng b/tests/cfgs/default/pcap/ossfuzz_seed_fake_traces_3.pcapng similarity index 100% rename from tests/pcap/ossfuzz_seed_fake_traces_3.pcapng rename to tests/cfgs/default/pcap/ossfuzz_seed_fake_traces_3.pcapng diff --git a/tests/pcap/ossfuzz_seed_fake_traces_4.pcapng b/tests/cfgs/default/pcap/ossfuzz_seed_fake_traces_4.pcapng similarity index 100% rename from tests/pcap/ossfuzz_seed_fake_traces_4.pcapng rename to tests/cfgs/default/pcap/ossfuzz_seed_fake_traces_4.pcapng diff --git a/tests/pcap/pgm.pcap b/tests/cfgs/default/pcap/pgm.pcap similarity index 100% rename from tests/pcap/pgm.pcap rename to tests/cfgs/default/pcap/pgm.pcap diff --git a/tests/pcap/pgsql.pcap b/tests/cfgs/default/pcap/pgsql.pcap similarity index 100% rename from tests/pcap/pgsql.pcap rename to tests/cfgs/default/pcap/pgsql.pcap diff --git a/tests/pcap/pim.pcap b/tests/cfgs/default/pcap/pim.pcap similarity index 100% rename from tests/pcap/pim.pcap rename to tests/cfgs/default/pcap/pim.pcap diff --git a/tests/pcap/pinterest.pcap b/tests/cfgs/default/pcap/pinterest.pcap similarity index 100% rename from tests/pcap/pinterest.pcap rename to tests/cfgs/default/pcap/pinterest.pcap diff --git a/tests/pcap/pluralsight.pcap b/tests/cfgs/default/pcap/pluralsight.pcap similarity index 100% rename from tests/pcap/pluralsight.pcap rename to tests/cfgs/default/pcap/pluralsight.pcap diff --git a/tests/pcap/pop3.pcap b/tests/cfgs/default/pcap/pop3.pcap similarity index 100% rename from tests/pcap/pop3.pcap rename to tests/cfgs/default/pcap/pop3.pcap diff --git a/tests/pcap/pop3_stls.pcap b/tests/cfgs/default/pcap/pop3_stls.pcap similarity index 100% rename from tests/pcap/pop3_stls.pcap rename to tests/cfgs/default/pcap/pop3_stls.pcap diff --git a/tests/pcap/pops.pcapng b/tests/cfgs/default/pcap/pops.pcapng similarity index 100% rename from tests/pcap/pops.pcapng rename to tests/cfgs/default/pcap/pops.pcapng diff --git a/tests/pcap/pps.pcap b/tests/cfgs/default/pcap/pps.pcap similarity index 100% rename from tests/pcap/pps.pcap rename to tests/cfgs/default/pcap/pps.pcap diff --git a/tests/pcap/pptp.pcap b/tests/cfgs/default/pcap/pptp.pcap similarity index 100% rename from tests/pcap/pptp.pcap rename to tests/cfgs/default/pcap/pptp.pcap diff --git a/tests/pcap/psiphon3.pcap b/tests/cfgs/default/pcap/psiphon3.pcap similarity index 100% rename from tests/pcap/psiphon3.pcap rename to tests/cfgs/default/pcap/psiphon3.pcap diff --git a/tests/pcap/punycode-idn.pcap b/tests/cfgs/default/pcap/punycode-idn.pcap similarity index 100% rename from tests/pcap/punycode-idn.pcap rename to tests/cfgs/default/pcap/punycode-idn.pcap diff --git a/tests/pcap/quic-23.pcap b/tests/cfgs/default/pcap/quic-23.pcap similarity index 100% rename from tests/pcap/quic-23.pcap rename to tests/cfgs/default/pcap/quic-23.pcap diff --git a/tests/pcap/quic-24.pcap b/tests/cfgs/default/pcap/quic-24.pcap similarity index 100% rename from tests/pcap/quic-24.pcap rename to tests/cfgs/default/pcap/quic-24.pcap diff --git a/tests/pcap/quic-27.pcap b/tests/cfgs/default/pcap/quic-27.pcap similarity index 100% rename from tests/pcap/quic-27.pcap rename to tests/cfgs/default/pcap/quic-27.pcap diff --git a/tests/pcap/quic-28.pcap b/tests/cfgs/default/pcap/quic-28.pcap similarity index 100% rename from tests/pcap/quic-28.pcap rename to tests/cfgs/default/pcap/quic-28.pcap diff --git a/tests/pcap/quic-29.pcap b/tests/cfgs/default/pcap/quic-29.pcap similarity index 100% rename from tests/pcap/quic-29.pcap rename to tests/cfgs/default/pcap/quic-29.pcap diff --git a/tests/pcap/quic-33.pcapng b/tests/cfgs/default/pcap/quic-33.pcapng similarity index 100% rename from tests/pcap/quic-33.pcapng rename to tests/cfgs/default/pcap/quic-33.pcapng diff --git a/tests/pcap/quic-34.pcap b/tests/cfgs/default/pcap/quic-34.pcap similarity index 100% rename from tests/pcap/quic-34.pcap rename to tests/cfgs/default/pcap/quic-34.pcap diff --git a/tests/pcap/quic-fuzz-overflow.pcapng b/tests/cfgs/default/pcap/quic-fuzz-overflow.pcapng similarity index 100% rename from tests/pcap/quic-fuzz-overflow.pcapng rename to tests/cfgs/default/pcap/quic-fuzz-overflow.pcapng diff --git a/tests/pcap/quic-mvfst-22.pcap b/tests/cfgs/default/pcap/quic-mvfst-22.pcap similarity index 100% rename from tests/pcap/quic-mvfst-22.pcap rename to tests/cfgs/default/pcap/quic-mvfst-22.pcap diff --git a/tests/pcap/quic-mvfst-22_decryption_error.pcap b/tests/cfgs/default/pcap/quic-mvfst-22_decryption_error.pcap similarity index 100% rename from tests/pcap/quic-mvfst-22_decryption_error.pcap rename to tests/cfgs/default/pcap/quic-mvfst-22_decryption_error.pcap diff --git a/tests/pcap/quic-mvfst-27.pcapng b/tests/cfgs/default/pcap/quic-mvfst-27.pcapng similarity index 100% rename from tests/pcap/quic-mvfst-27.pcapng rename to tests/cfgs/default/pcap/quic-mvfst-27.pcapng diff --git a/tests/pcap/quic-mvfst-exp.pcap b/tests/cfgs/default/pcap/quic-mvfst-exp.pcap similarity index 100% rename from tests/pcap/quic-mvfst-exp.pcap rename to tests/cfgs/default/pcap/quic-mvfst-exp.pcap diff --git a/tests/pcap/quic-v2-01.pcapng b/tests/cfgs/default/pcap/quic-v2-01.pcapng similarity index 100% rename from tests/pcap/quic-v2-01.pcapng rename to tests/cfgs/default/pcap/quic-v2-01.pcapng diff --git a/tests/pcap/quic.pcap b/tests/cfgs/default/pcap/quic.pcap similarity index 100% rename from tests/pcap/quic.pcap rename to tests/cfgs/default/pcap/quic.pcap diff --git a/tests/pcap/quic046.pcap b/tests/cfgs/default/pcap/quic046.pcap similarity index 100% rename from tests/pcap/quic046.pcap rename to tests/cfgs/default/pcap/quic046.pcap diff --git a/tests/pcap/quic_0RTT.pcap b/tests/cfgs/default/pcap/quic_0RTT.pcap similarity index 100% rename from tests/pcap/quic_0RTT.pcap rename to tests/cfgs/default/pcap/quic_0RTT.pcap diff --git a/tests/pcap/quic_crypto_aes_auth_size.pcap b/tests/cfgs/default/pcap/quic_crypto_aes_auth_size.pcap similarity index 100% rename from tests/pcap/quic_crypto_aes_auth_size.pcap rename to tests/cfgs/default/pcap/quic_crypto_aes_auth_size.pcap diff --git a/tests/pcap/quic_frags_ch_in_multiple_packets.pcapng b/tests/cfgs/default/pcap/quic_frags_ch_in_multiple_packets.pcapng similarity index 100% rename from tests/pcap/quic_frags_ch_in_multiple_packets.pcapng rename to tests/cfgs/default/pcap/quic_frags_ch_in_multiple_packets.pcapng diff --git a/tests/pcap/quic_frags_ch_out_of_order_same_packet_craziness.pcapng b/tests/cfgs/default/pcap/quic_frags_ch_out_of_order_same_packet_craziness.pcapng similarity index 100% rename from tests/pcap/quic_frags_ch_out_of_order_same_packet_craziness.pcapng rename to tests/cfgs/default/pcap/quic_frags_ch_out_of_order_same_packet_craziness.pcapng diff --git a/tests/pcap/quic_interop_V.pcapng b/tests/cfgs/default/pcap/quic_interop_V.pcapng similarity index 100% rename from tests/pcap/quic_interop_V.pcapng rename to tests/cfgs/default/pcap/quic_interop_V.pcapng diff --git a/tests/pcap/quic_q39.pcap b/tests/cfgs/default/pcap/quic_q39.pcap similarity index 100% rename from tests/pcap/quic_q39.pcap rename to tests/cfgs/default/pcap/quic_q39.pcap diff --git a/tests/pcap/quic_q43.pcap b/tests/cfgs/default/pcap/quic_q43.pcap similarity index 100% rename from tests/pcap/quic_q43.pcap rename to tests/cfgs/default/pcap/quic_q43.pcap diff --git a/tests/pcap/quic_q46.pcap b/tests/cfgs/default/pcap/quic_q46.pcap similarity index 100% rename from tests/pcap/quic_q46.pcap rename to tests/cfgs/default/pcap/quic_q46.pcap diff --git a/tests/pcap/quic_q46_b.pcap b/tests/cfgs/default/pcap/quic_q46_b.pcap similarity index 100% rename from tests/pcap/quic_q46_b.pcap rename to tests/cfgs/default/pcap/quic_q46_b.pcap diff --git a/tests/pcap/quic_q50.pcap b/tests/cfgs/default/pcap/quic_q50.pcap similarity index 100% rename from tests/pcap/quic_q50.pcap rename to tests/cfgs/default/pcap/quic_q50.pcap diff --git a/tests/pcap/quic_t50.pcap b/tests/cfgs/default/pcap/quic_t50.pcap similarity index 100% rename from tests/pcap/quic_t50.pcap rename to tests/cfgs/default/pcap/quic_t50.pcap diff --git a/tests/pcap/quic_t51.pcap b/tests/cfgs/default/pcap/quic_t51.pcap similarity index 100% rename from tests/pcap/quic_t51.pcap rename to tests/cfgs/default/pcap/quic_t51.pcap diff --git a/tests/pcap/quickplay.pcap b/tests/cfgs/default/pcap/quickplay.pcap similarity index 100% rename from tests/pcap/quickplay.pcap rename to tests/cfgs/default/pcap/quickplay.pcap diff --git a/tests/pcap/radius_false_positive.pcapng b/tests/cfgs/default/pcap/radius_false_positive.pcapng similarity index 100% rename from tests/pcap/radius_false_positive.pcapng rename to tests/cfgs/default/pcap/radius_false_positive.pcapng diff --git a/tests/pcap/raknet.pcap b/tests/cfgs/default/pcap/raknet.pcap similarity index 100% rename from tests/pcap/raknet.pcap rename to tests/cfgs/default/pcap/raknet.pcap diff --git a/tests/pcap/rdp.pcap b/tests/cfgs/default/pcap/rdp.pcap similarity index 100% rename from tests/pcap/rdp.pcap rename to tests/cfgs/default/pcap/rdp.pcap diff --git a/tests/pcap/reasm_crash_anon.pcapng b/tests/cfgs/default/pcap/reasm_crash_anon.pcapng similarity index 100% rename from tests/pcap/reasm_crash_anon.pcapng rename to tests/cfgs/default/pcap/reasm_crash_anon.pcapng diff --git a/tests/pcap/reasm_segv_anon.pcapng b/tests/cfgs/default/pcap/reasm_segv_anon.pcapng similarity index 100% rename from tests/pcap/reasm_segv_anon.pcapng rename to tests/cfgs/default/pcap/reasm_segv_anon.pcapng diff --git a/tests/pcap/reddit.pcap b/tests/cfgs/default/pcap/reddit.pcap similarity index 100% rename from tests/pcap/reddit.pcap rename to tests/cfgs/default/pcap/reddit.pcap diff --git a/tests/pcap/riotgames.pcap b/tests/cfgs/default/pcap/riotgames.pcap similarity index 100% rename from tests/pcap/riotgames.pcap rename to tests/cfgs/default/pcap/riotgames.pcap diff --git a/tests/pcap/rsh-syslog-false-positive.pcap b/tests/cfgs/default/pcap/rsh-syslog-false-positive.pcap similarity index 100% rename from tests/pcap/rsh-syslog-false-positive.pcap rename to tests/cfgs/default/pcap/rsh-syslog-false-positive.pcap diff --git a/tests/pcap/rsh.pcap b/tests/cfgs/default/pcap/rsh.pcap similarity index 100% rename from tests/pcap/rsh.pcap rename to tests/cfgs/default/pcap/rsh.pcap diff --git a/tests/pcap/rsync.pcap b/tests/cfgs/default/pcap/rsync.pcap similarity index 100% rename from tests/pcap/rsync.pcap rename to tests/cfgs/default/pcap/rsync.pcap diff --git a/tests/pcap/rtmp.pcap b/tests/cfgs/default/pcap/rtmp.pcap similarity index 100% rename from tests/pcap/rtmp.pcap rename to tests/cfgs/default/pcap/rtmp.pcap diff --git a/tests/pcap/rtsp.pcap b/tests/cfgs/default/pcap/rtsp.pcap similarity index 100% rename from tests/pcap/rtsp.pcap rename to tests/cfgs/default/pcap/rtsp.pcap diff --git a/tests/pcap/rtsp_setup_http.pcapng b/tests/cfgs/default/pcap/rtsp_setup_http.pcapng similarity index 100% rename from tests/pcap/rtsp_setup_http.pcapng rename to tests/cfgs/default/pcap/rtsp_setup_http.pcapng diff --git a/tests/pcap/rx.pcap b/tests/cfgs/default/pcap/rx.pcap similarity index 100% rename from tests/pcap/rx.pcap rename to tests/cfgs/default/pcap/rx.pcap diff --git a/tests/pcap/s7comm.pcap b/tests/cfgs/default/pcap/s7comm.pcap similarity index 100% rename from tests/pcap/s7comm.pcap rename to tests/cfgs/default/pcap/s7comm.pcap diff --git a/tests/pcap/safari.pcap b/tests/cfgs/default/pcap/safari.pcap similarity index 100% rename from tests/pcap/safari.pcap rename to tests/cfgs/default/pcap/safari.pcap diff --git a/tests/pcap/salesforce.pcap b/tests/cfgs/default/pcap/salesforce.pcap similarity index 100% rename from tests/pcap/salesforce.pcap rename to tests/cfgs/default/pcap/salesforce.pcap diff --git a/tests/pcap/sccp_hw_conf_register.pcapng b/tests/cfgs/default/pcap/sccp_hw_conf_register.pcapng similarity index 100% rename from tests/pcap/sccp_hw_conf_register.pcapng rename to tests/cfgs/default/pcap/sccp_hw_conf_register.pcapng diff --git a/tests/pcap/sctp.cap b/tests/cfgs/default/pcap/sctp.cap similarity index 100% rename from tests/pcap/sctp.cap rename to tests/cfgs/default/pcap/sctp.cap diff --git a/tests/pcap/selfsigned.pcap b/tests/cfgs/default/pcap/selfsigned.pcap similarity index 100% rename from tests/pcap/selfsigned.pcap rename to tests/cfgs/default/pcap/selfsigned.pcap diff --git a/tests/pcap/sflow.pcap b/tests/cfgs/default/pcap/sflow.pcap similarity index 100% rename from tests/pcap/sflow.pcap rename to tests/cfgs/default/pcap/sflow.pcap diff --git a/tests/pcap/signal.pcap b/tests/cfgs/default/pcap/signal.pcap similarity index 100% rename from tests/pcap/signal.pcap rename to tests/cfgs/default/pcap/signal.pcap diff --git a/tests/pcap/simple-dnscrypt.pcap b/tests/cfgs/default/pcap/simple-dnscrypt.pcap similarity index 100% rename from tests/pcap/simple-dnscrypt.pcap rename to tests/cfgs/default/pcap/simple-dnscrypt.pcap diff --git a/tests/pcap/sip.pcap b/tests/cfgs/default/pcap/sip.pcap similarity index 100% rename from tests/pcap/sip.pcap rename to tests/cfgs/default/pcap/sip.pcap diff --git a/tests/pcap/sip_hello.pcapng b/tests/cfgs/default/pcap/sip_hello.pcapng similarity index 100% rename from tests/pcap/sip_hello.pcapng rename to tests/cfgs/default/pcap/sip_hello.pcapng diff --git a/tests/pcap/sites.pcapng b/tests/cfgs/default/pcap/sites.pcapng similarity index 100% rename from tests/pcap/sites.pcapng rename to tests/cfgs/default/pcap/sites.pcapng diff --git a/tests/pcap/skinny.pcap b/tests/cfgs/default/pcap/skinny.pcap similarity index 100% rename from tests/pcap/skinny.pcap rename to tests/cfgs/default/pcap/skinny.pcap diff --git a/tests/pcap/skype-conference-call.pcap b/tests/cfgs/default/pcap/skype-conference-call.pcap similarity index 100% rename from tests/pcap/skype-conference-call.pcap rename to tests/cfgs/default/pcap/skype-conference-call.pcap diff --git a/tests/pcap/skype.pcap b/tests/cfgs/default/pcap/skype.pcap similarity index 100% rename from tests/pcap/skype.pcap rename to tests/cfgs/default/pcap/skype.pcap diff --git a/tests/pcap/skype_no_unknown.pcap b/tests/cfgs/default/pcap/skype_no_unknown.pcap similarity index 100% rename from tests/pcap/skype_no_unknown.pcap rename to tests/cfgs/default/pcap/skype_no_unknown.pcap diff --git a/tests/pcap/skype_udp.pcap b/tests/cfgs/default/pcap/skype_udp.pcap similarity index 100% rename from tests/pcap/skype_udp.pcap rename to tests/cfgs/default/pcap/skype_udp.pcap diff --git a/tests/pcap/smb_deletefile.pcap b/tests/cfgs/default/pcap/smb_deletefile.pcap similarity index 100% rename from tests/pcap/smb_deletefile.pcap rename to tests/cfgs/default/pcap/smb_deletefile.pcap diff --git a/tests/pcap/smb_frags.pcap b/tests/cfgs/default/pcap/smb_frags.pcap similarity index 100% rename from tests/pcap/smb_frags.pcap rename to tests/cfgs/default/pcap/smb_frags.pcap diff --git a/tests/pcap/smbv1.pcap b/tests/cfgs/default/pcap/smbv1.pcap similarity index 100% rename from tests/pcap/smbv1.pcap rename to tests/cfgs/default/pcap/smbv1.pcap diff --git a/tests/pcap/smpp_in_general.pcap b/tests/cfgs/default/pcap/smpp_in_general.pcap similarity index 100% rename from tests/pcap/smpp_in_general.pcap rename to tests/cfgs/default/pcap/smpp_in_general.pcap diff --git a/tests/pcap/smtp-starttls.pcap b/tests/cfgs/default/pcap/smtp-starttls.pcap similarity index 100% rename from tests/pcap/smtp-starttls.pcap rename to tests/cfgs/default/pcap/smtp-starttls.pcap diff --git a/tests/pcap/smtp.pcap b/tests/cfgs/default/pcap/smtp.pcap similarity index 100% rename from tests/pcap/smtp.pcap rename to tests/cfgs/default/pcap/smtp.pcap diff --git a/tests/pcap/smtps.pcapng b/tests/cfgs/default/pcap/smtps.pcapng similarity index 100% rename from tests/pcap/smtps.pcapng rename to tests/cfgs/default/pcap/smtps.pcapng diff --git a/tests/pcap/snapchat.pcap b/tests/cfgs/default/pcap/snapchat.pcap similarity index 100% rename from tests/pcap/snapchat.pcap rename to tests/cfgs/default/pcap/snapchat.pcap diff --git a/tests/pcap/snapchat_call.pcapng b/tests/cfgs/default/pcap/snapchat_call.pcapng similarity index 100% rename from tests/pcap/snapchat_call.pcapng rename to tests/cfgs/default/pcap/snapchat_call.pcapng diff --git a/tests/pcap/snapchat_call_v1.pcapng b/tests/cfgs/default/pcap/snapchat_call_v1.pcapng similarity index 100% rename from tests/pcap/snapchat_call_v1.pcapng rename to tests/cfgs/default/pcap/snapchat_call_v1.pcapng diff --git a/tests/pcap/snmp.pcap b/tests/cfgs/default/pcap/snmp.pcap similarity index 100% rename from tests/pcap/snmp.pcap rename to tests/cfgs/default/pcap/snmp.pcap diff --git a/tests/pcap/soap.pcap b/tests/cfgs/default/pcap/soap.pcap similarity index 100% rename from tests/pcap/soap.pcap rename to tests/cfgs/default/pcap/soap.pcap diff --git a/tests/pcap/socks-http-example.pcap b/tests/cfgs/default/pcap/socks-http-example.pcap similarity index 100% rename from tests/pcap/socks-http-example.pcap rename to tests/cfgs/default/pcap/socks-http-example.pcap diff --git a/tests/pcap/softether.pcap b/tests/cfgs/default/pcap/softether.pcap similarity index 100% rename from tests/pcap/softether.pcap rename to tests/cfgs/default/pcap/softether.pcap diff --git a/tests/pcap/someip-tp.pcap b/tests/cfgs/default/pcap/someip-tp.pcap similarity index 100% rename from tests/pcap/someip-tp.pcap rename to tests/cfgs/default/pcap/someip-tp.pcap diff --git a/tests/pcap/someip-udp-method-call.pcapng b/tests/cfgs/default/pcap/someip-udp-method-call.pcapng similarity index 100% rename from tests/pcap/someip-udp-method-call.pcapng rename to tests/cfgs/default/pcap/someip-udp-method-call.pcapng diff --git a/tests/pcap/someip_sd_sample.pcap b/tests/cfgs/default/pcap/someip_sd_sample.pcap similarity index 100% rename from tests/pcap/someip_sd_sample.pcap rename to tests/cfgs/default/pcap/someip_sd_sample.pcap diff --git a/tests/pcap/sql_injection.pcap b/tests/cfgs/default/pcap/sql_injection.pcap similarity index 100% rename from tests/pcap/sql_injection.pcap rename to tests/cfgs/default/pcap/sql_injection.pcap diff --git a/tests/pcap/ssdp-m-search-ua.pcap b/tests/cfgs/default/pcap/ssdp-m-search-ua.pcap similarity index 100% rename from tests/pcap/ssdp-m-search-ua.pcap rename to tests/cfgs/default/pcap/ssdp-m-search-ua.pcap diff --git a/tests/pcap/ssdp-m-search.pcap b/tests/cfgs/default/pcap/ssdp-m-search.pcap similarity index 100% rename from tests/pcap/ssdp-m-search.pcap rename to tests/cfgs/default/pcap/ssdp-m-search.pcap diff --git a/tests/pcap/ssh.pcap b/tests/cfgs/default/pcap/ssh.pcap similarity index 100% rename from tests/pcap/ssh.pcap rename to tests/cfgs/default/pcap/ssh.pcap diff --git a/tests/pcap/ssl-cert-name-mismatch.pcap b/tests/cfgs/default/pcap/ssl-cert-name-mismatch.pcap similarity index 100% rename from tests/pcap/ssl-cert-name-mismatch.pcap rename to tests/cfgs/default/pcap/ssl-cert-name-mismatch.pcap diff --git a/tests/pcap/starcraft_battle.pcap b/tests/cfgs/default/pcap/starcraft_battle.pcap similarity index 100% rename from tests/pcap/starcraft_battle.pcap rename to tests/cfgs/default/pcap/starcraft_battle.pcap diff --git a/tests/pcap/steam.pcap b/tests/cfgs/default/pcap/steam.pcap similarity index 100% rename from tests/pcap/steam.pcap rename to tests/cfgs/default/pcap/steam.pcap diff --git a/tests/pcap/steam_datagram_relay_ping.pcapng b/tests/cfgs/default/pcap/steam_datagram_relay_ping.pcapng similarity index 100% rename from tests/pcap/steam_datagram_relay_ping.pcapng rename to tests/cfgs/default/pcap/steam_datagram_relay_ping.pcapng diff --git a/tests/pcap/stun.pcap b/tests/cfgs/default/pcap/stun.pcap similarity index 100% rename from tests/pcap/stun.pcap rename to tests/cfgs/default/pcap/stun.pcap diff --git a/tests/pcap/stun_signal.pcapng b/tests/cfgs/default/pcap/stun_signal.pcapng similarity index 100% rename from tests/pcap/stun_signal.pcapng rename to tests/cfgs/default/pcap/stun_signal.pcapng diff --git a/tests/pcap/syncthing.pcap b/tests/cfgs/default/pcap/syncthing.pcap similarity index 100% rename from tests/pcap/syncthing.pcap rename to tests/cfgs/default/pcap/syncthing.pcap diff --git a/tests/pcap/synscan.pcap b/tests/cfgs/default/pcap/synscan.pcap similarity index 100% rename from tests/pcap/synscan.pcap rename to tests/cfgs/default/pcap/synscan.pcap diff --git a/tests/pcap/syslog.pcap b/tests/cfgs/default/pcap/syslog.pcap similarity index 100% rename from tests/pcap/syslog.pcap rename to tests/cfgs/default/pcap/syslog.pcap diff --git a/tests/pcap/tailscale.pcap b/tests/cfgs/default/pcap/tailscale.pcap similarity index 100% rename from tests/pcap/tailscale.pcap rename to tests/cfgs/default/pcap/tailscale.pcap diff --git a/tests/pcap/targusdataspeed_false_positives.pcap b/tests/cfgs/default/pcap/targusdataspeed_false_positives.pcap similarity index 100% rename from tests/pcap/targusdataspeed_false_positives.pcap rename to tests/cfgs/default/pcap/targusdataspeed_false_positives.pcap diff --git a/tests/pcap/tcp_scan.pcapng b/tests/cfgs/default/pcap/tcp_scan.pcapng similarity index 100% rename from tests/pcap/tcp_scan.pcapng rename to tests/cfgs/default/pcap/tcp_scan.pcapng diff --git a/tests/pcap/teams.pcap b/tests/cfgs/default/pcap/teams.pcap similarity index 100% rename from tests/pcap/teams.pcap rename to tests/cfgs/default/pcap/teams.pcap diff --git a/tests/pcap/teamspeak3.pcap b/tests/cfgs/default/pcap/teamspeak3.pcap similarity index 100% rename from tests/pcap/teamspeak3.pcap rename to tests/cfgs/default/pcap/teamspeak3.pcap diff --git a/tests/pcap/teamviewer.pcap b/tests/cfgs/default/pcap/teamviewer.pcap similarity index 100% rename from tests/pcap/teamviewer.pcap rename to tests/cfgs/default/pcap/teamviewer.pcap diff --git a/tests/pcap/telegram.pcap b/tests/cfgs/default/pcap/telegram.pcap similarity index 100% rename from tests/pcap/telegram.pcap rename to tests/cfgs/default/pcap/telegram.pcap diff --git a/tests/pcap/telnet.pcap b/tests/cfgs/default/pcap/telnet.pcap similarity index 100% rename from tests/pcap/telnet.pcap rename to tests/cfgs/default/pcap/telnet.pcap diff --git a/tests/pcap/teredo.pcap b/tests/cfgs/default/pcap/teredo.pcap similarity index 100% rename from tests/pcap/teredo.pcap rename to tests/cfgs/default/pcap/teredo.pcap diff --git a/tests/pcap/tftp.pcap b/tests/cfgs/default/pcap/tftp.pcap similarity index 100% rename from tests/pcap/tftp.pcap rename to tests/cfgs/default/pcap/tftp.pcap diff --git a/tests/pcap/threema.pcap b/tests/cfgs/default/pcap/threema.pcap similarity index 100% rename from tests/pcap/threema.pcap rename to tests/cfgs/default/pcap/threema.pcap diff --git a/tests/pcap/tinc.pcap b/tests/cfgs/default/pcap/tinc.pcap similarity index 100% rename from tests/pcap/tinc.pcap rename to tests/cfgs/default/pcap/tinc.pcap diff --git a/tests/pcap/tk.pcap b/tests/cfgs/default/pcap/tk.pcap similarity index 100% rename from tests/pcap/tk.pcap rename to tests/cfgs/default/pcap/tk.pcap diff --git a/tests/pcap/tls-appdata.pcap b/tests/cfgs/default/pcap/tls-appdata.pcap similarity index 100% rename from tests/pcap/tls-appdata.pcap rename to tests/cfgs/default/pcap/tls-appdata.pcap diff --git a/tests/pcap/tls-esni-fuzzed.pcap b/tests/cfgs/default/pcap/tls-esni-fuzzed.pcap similarity index 100% rename from tests/pcap/tls-esni-fuzzed.pcap rename to tests/cfgs/default/pcap/tls-esni-fuzzed.pcap diff --git a/tests/pcap/tls-rdn-extract.pcap b/tests/cfgs/default/pcap/tls-rdn-extract.pcap similarity index 100% rename from tests/pcap/tls-rdn-extract.pcap rename to tests/cfgs/default/pcap/tls-rdn-extract.pcap diff --git a/tests/pcap/tls_2_reasms.pcapng b/tests/cfgs/default/pcap/tls_2_reasms.pcapng similarity index 100% rename from tests/pcap/tls_2_reasms.pcapng rename to tests/cfgs/default/pcap/tls_2_reasms.pcapng diff --git a/tests/pcap/tls_2_reasms_b.pcapng b/tests/cfgs/default/pcap/tls_2_reasms_b.pcapng similarity index 100% rename from tests/pcap/tls_2_reasms_b.pcapng rename to tests/cfgs/default/pcap/tls_2_reasms_b.pcapng diff --git a/tests/pcap/tls_alert.pcap b/tests/cfgs/default/pcap/tls_alert.pcap similarity index 100% rename from tests/pcap/tls_alert.pcap rename to tests/cfgs/default/pcap/tls_alert.pcap diff --git a/tests/pcap/tls_certificate_too_long.pcap b/tests/cfgs/default/pcap/tls_certificate_too_long.pcap similarity index 100% rename from tests/pcap/tls_certificate_too_long.pcap rename to tests/cfgs/default/pcap/tls_certificate_too_long.pcap diff --git a/tests/pcap/tls_cipher_lens.pcap b/tests/cfgs/default/pcap/tls_cipher_lens.pcap similarity index 100% rename from tests/pcap/tls_cipher_lens.pcap rename to tests/cfgs/default/pcap/tls_cipher_lens.pcap diff --git a/tests/pcap/tls_client_certificate_with_missing_server_one.pcapng b/tests/cfgs/default/pcap/tls_client_certificate_with_missing_server_one.pcapng similarity index 100% rename from tests/pcap/tls_client_certificate_with_missing_server_one.pcapng rename to tests/cfgs/default/pcap/tls_client_certificate_with_missing_server_one.pcapng diff --git a/tests/pcap/tls_esni_sni_both.pcap b/tests/cfgs/default/pcap/tls_esni_sni_both.pcap similarity index 100% rename from tests/pcap/tls_esni_sni_both.pcap rename to tests/cfgs/default/pcap/tls_esni_sni_both.pcap diff --git a/tests/pcap/tls_false_positives.pcapng b/tests/cfgs/default/pcap/tls_false_positives.pcapng similarity index 100% rename from tests/pcap/tls_false_positives.pcapng rename to tests/cfgs/default/pcap/tls_false_positives.pcapng diff --git a/tests/pcap/tls_invalid_reads.pcap b/tests/cfgs/default/pcap/tls_invalid_reads.pcap similarity index 100% rename from tests/pcap/tls_invalid_reads.pcap rename to tests/cfgs/default/pcap/tls_invalid_reads.pcap diff --git a/tests/pcap/tls_long_cert.pcap b/tests/cfgs/default/pcap/tls_long_cert.pcap similarity index 100% rename from tests/pcap/tls_long_cert.pcap rename to tests/cfgs/default/pcap/tls_long_cert.pcap diff --git a/tests/pcap/tls_missing_ch_frag.pcap b/tests/cfgs/default/pcap/tls_missing_ch_frag.pcap similarity index 100% rename from tests/pcap/tls_missing_ch_frag.pcap rename to tests/cfgs/default/pcap/tls_missing_ch_frag.pcap diff --git a/tests/pcap/tls_multiple_synack_different_seq.pcapng b/tests/cfgs/default/pcap/tls_multiple_synack_different_seq.pcapng similarity index 100% rename from tests/pcap/tls_multiple_synack_different_seq.pcapng rename to tests/cfgs/default/pcap/tls_multiple_synack_different_seq.pcapng diff --git a/tests/pcap/tls_port_80.pcapng b/tests/cfgs/default/pcap/tls_port_80.pcapng similarity index 100% rename from tests/pcap/tls_port_80.pcapng rename to tests/cfgs/default/pcap/tls_port_80.pcapng diff --git a/tests/pcap/tls_torrent.pcapng b/tests/cfgs/default/pcap/tls_torrent.pcapng similarity index 100% rename from tests/pcap/tls_torrent.pcapng rename to tests/cfgs/default/pcap/tls_torrent.pcapng diff --git a/tests/pcap/tls_unidirectional.pcap b/tests/cfgs/default/pcap/tls_unidirectional.pcap similarity index 100% rename from tests/pcap/tls_unidirectional.pcap rename to tests/cfgs/default/pcap/tls_unidirectional.pcap diff --git a/tests/pcap/tls_verylong_certificate.pcap b/tests/cfgs/default/pcap/tls_verylong_certificate.pcap similarity index 100% rename from tests/pcap/tls_verylong_certificate.pcap rename to tests/cfgs/default/pcap/tls_verylong_certificate.pcap diff --git a/tests/pcap/toca-boca.pcap b/tests/cfgs/default/pcap/toca-boca.pcap similarity index 100% rename from tests/pcap/toca-boca.pcap rename to tests/cfgs/default/pcap/toca-boca.pcap diff --git a/tests/pcap/tor.pcap b/tests/cfgs/default/pcap/tor.pcap similarity index 100% rename from tests/pcap/tor.pcap rename to tests/cfgs/default/pcap/tor.pcap diff --git a/tests/pcap/tplink_shp.pcap b/tests/cfgs/default/pcap/tplink_shp.pcap similarity index 100% rename from tests/pcap/tplink_shp.pcap rename to tests/cfgs/default/pcap/tplink_shp.pcap diff --git a/tests/pcap/trickbot.pcap b/tests/cfgs/default/pcap/trickbot.pcap similarity index 100% rename from tests/pcap/trickbot.pcap rename to tests/cfgs/default/pcap/trickbot.pcap diff --git a/tests/pcap/tumblr.pcap b/tests/cfgs/default/pcap/tumblr.pcap similarity index 100% rename from tests/pcap/tumblr.pcap rename to tests/cfgs/default/pcap/tumblr.pcap diff --git a/tests/pcap/tunnelbear.pcap b/tests/cfgs/default/pcap/tunnelbear.pcap similarity index 100% rename from tests/pcap/tunnelbear.pcap rename to tests/cfgs/default/pcap/tunnelbear.pcap diff --git a/tests/pcap/tuya_lp.pcap b/tests/cfgs/default/pcap/tuya_lp.pcap similarity index 100% rename from tests/pcap/tuya_lp.pcap rename to tests/cfgs/default/pcap/tuya_lp.pcap diff --git a/tests/pcap/ubntac2.pcap b/tests/cfgs/default/pcap/ubntac2.pcap similarity index 100% rename from tests/pcap/ubntac2.pcap rename to tests/cfgs/default/pcap/ubntac2.pcap diff --git a/tests/pcap/ultrasurf.pcap b/tests/cfgs/default/pcap/ultrasurf.pcap similarity index 100% rename from tests/pcap/ultrasurf.pcap rename to tests/cfgs/default/pcap/ultrasurf.pcap diff --git a/tests/pcap/upnp.pcap b/tests/cfgs/default/pcap/upnp.pcap similarity index 100% rename from tests/pcap/upnp.pcap rename to tests/cfgs/default/pcap/upnp.pcap diff --git a/tests/pcap/viber.pcap b/tests/cfgs/default/pcap/viber.pcap similarity index 100% rename from tests/pcap/viber.pcap rename to tests/cfgs/default/pcap/viber.pcap diff --git a/tests/pcap/vk.pcapng b/tests/cfgs/default/pcap/vk.pcapng similarity index 100% rename from tests/pcap/vk.pcapng rename to tests/cfgs/default/pcap/vk.pcapng diff --git a/tests/pcap/vnc.pcap b/tests/cfgs/default/pcap/vnc.pcap similarity index 100% rename from tests/pcap/vnc.pcap rename to tests/cfgs/default/pcap/vnc.pcap diff --git a/tests/pcap/vrrp3.pcapng b/tests/cfgs/default/pcap/vrrp3.pcapng similarity index 100% rename from tests/pcap/vrrp3.pcapng rename to tests/cfgs/default/pcap/vrrp3.pcapng diff --git a/tests/pcap/vxlan.pcap b/tests/cfgs/default/pcap/vxlan.pcap similarity index 100% rename from tests/pcap/vxlan.pcap rename to tests/cfgs/default/pcap/vxlan.pcap diff --git a/tests/pcap/wa_video.pcap b/tests/cfgs/default/pcap/wa_video.pcap similarity index 100% rename from tests/pcap/wa_video.pcap rename to tests/cfgs/default/pcap/wa_video.pcap diff --git a/tests/pcap/wa_voice.pcap b/tests/cfgs/default/pcap/wa_voice.pcap similarity index 100% rename from tests/pcap/wa_voice.pcap rename to tests/cfgs/default/pcap/wa_voice.pcap diff --git a/tests/pcap/waze.pcap b/tests/cfgs/default/pcap/waze.pcap similarity index 100% rename from tests/pcap/waze.pcap rename to tests/cfgs/default/pcap/waze.pcap diff --git a/tests/pcap/webex.pcap b/tests/cfgs/default/pcap/webex.pcap similarity index 100% rename from tests/pcap/webex.pcap rename to tests/cfgs/default/pcap/webex.pcap diff --git a/tests/pcap/websocket.pcap b/tests/cfgs/default/pcap/websocket.pcap similarity index 100% rename from tests/pcap/websocket.pcap rename to tests/cfgs/default/pcap/websocket.pcap diff --git a/tests/pcap/wechat.pcap b/tests/cfgs/default/pcap/wechat.pcap similarity index 100% rename from tests/pcap/wechat.pcap rename to tests/cfgs/default/pcap/wechat.pcap diff --git a/tests/pcap/weibo.pcap b/tests/cfgs/default/pcap/weibo.pcap similarity index 100% rename from tests/pcap/weibo.pcap rename to tests/cfgs/default/pcap/weibo.pcap diff --git a/tests/pcap/whatsapp.pcap b/tests/cfgs/default/pcap/whatsapp.pcap similarity index 100% rename from tests/pcap/whatsapp.pcap rename to tests/cfgs/default/pcap/whatsapp.pcap diff --git a/tests/pcap/whatsapp_login_call.pcap b/tests/cfgs/default/pcap/whatsapp_login_call.pcap similarity index 100% rename from tests/pcap/whatsapp_login_call.pcap rename to tests/cfgs/default/pcap/whatsapp_login_call.pcap diff --git a/tests/pcap/whatsapp_login_chat.pcap b/tests/cfgs/default/pcap/whatsapp_login_chat.pcap similarity index 100% rename from tests/pcap/whatsapp_login_chat.pcap rename to tests/cfgs/default/pcap/whatsapp_login_chat.pcap diff --git a/tests/pcap/whatsapp_voice_and_message.pcap b/tests/cfgs/default/pcap/whatsapp_voice_and_message.pcap similarity index 100% rename from tests/pcap/whatsapp_voice_and_message.pcap rename to tests/cfgs/default/pcap/whatsapp_voice_and_message.pcap diff --git a/tests/pcap/whatsappfiles.pcap b/tests/cfgs/default/pcap/whatsappfiles.pcap similarity index 100% rename from tests/pcap/whatsappfiles.pcap rename to tests/cfgs/default/pcap/whatsappfiles.pcap diff --git a/tests/pcap/whois.pcapng b/tests/cfgs/default/pcap/whois.pcapng similarity index 100% rename from tests/pcap/whois.pcapng rename to tests/cfgs/default/pcap/whois.pcapng diff --git a/tests/pcap/windowsupdate_over_http.pcap b/tests/cfgs/default/pcap/windowsupdate_over_http.pcap similarity index 100% rename from tests/pcap/windowsupdate_over_http.pcap rename to tests/cfgs/default/pcap/windowsupdate_over_http.pcap diff --git a/tests/pcap/wireguard.pcap b/tests/cfgs/default/pcap/wireguard.pcap similarity index 100% rename from tests/pcap/wireguard.pcap rename to tests/cfgs/default/pcap/wireguard.pcap diff --git a/tests/pcap/wow.pcap b/tests/cfgs/default/pcap/wow.pcap similarity index 100% rename from tests/pcap/wow.pcap rename to tests/cfgs/default/pcap/wow.pcap diff --git a/tests/pcap/xdmcp.pcap b/tests/cfgs/default/pcap/xdmcp.pcap similarity index 100% rename from tests/pcap/xdmcp.pcap rename to tests/cfgs/default/pcap/xdmcp.pcap diff --git a/tests/pcap/xiaomi.pcap b/tests/cfgs/default/pcap/xiaomi.pcap similarity index 100% rename from tests/pcap/xiaomi.pcap rename to tests/cfgs/default/pcap/xiaomi.pcap diff --git a/tests/pcap/xss.pcap b/tests/cfgs/default/pcap/xss.pcap similarity index 100% rename from tests/pcap/xss.pcap rename to tests/cfgs/default/pcap/xss.pcap diff --git a/tests/pcap/yandex.pcapng b/tests/cfgs/default/pcap/yandex.pcapng similarity index 100% rename from tests/pcap/yandex.pcapng rename to tests/cfgs/default/pcap/yandex.pcapng diff --git a/tests/pcap/youtube_quic.pcap b/tests/cfgs/default/pcap/youtube_quic.pcap similarity index 100% rename from tests/pcap/youtube_quic.pcap rename to tests/cfgs/default/pcap/youtube_quic.pcap diff --git a/tests/pcap/youtubeupload.pcap b/tests/cfgs/default/pcap/youtubeupload.pcap similarity index 100% rename from tests/pcap/youtubeupload.pcap rename to tests/cfgs/default/pcap/youtubeupload.pcap diff --git a/tests/pcap/z3950.pcapng b/tests/cfgs/default/pcap/z3950.pcapng similarity index 100% rename from tests/pcap/z3950.pcapng rename to tests/cfgs/default/pcap/z3950.pcapng diff --git a/tests/pcap/zabbix.pcap b/tests/cfgs/default/pcap/zabbix.pcap similarity index 100% rename from tests/pcap/zabbix.pcap rename to tests/cfgs/default/pcap/zabbix.pcap diff --git a/tests/pcap/zattoo.pcap b/tests/cfgs/default/pcap/zattoo.pcap similarity index 100% rename from tests/pcap/zattoo.pcap rename to tests/cfgs/default/pcap/zattoo.pcap diff --git a/tests/pcap/zcash.pcap b/tests/cfgs/default/pcap/zcash.pcap similarity index 100% rename from tests/pcap/zcash.pcap rename to tests/cfgs/default/pcap/zcash.pcap diff --git a/tests/pcap/zoom.pcap b/tests/cfgs/default/pcap/zoom.pcap similarity index 100% rename from tests/pcap/zoom.pcap rename to tests/cfgs/default/pcap/zoom.pcap diff --git a/tests/pcap/zoom2.pcap b/tests/cfgs/default/pcap/zoom2.pcap similarity index 100% rename from tests/pcap/zoom2.pcap rename to tests/cfgs/default/pcap/zoom2.pcap diff --git a/tests/pcap/zoom_p2p.pcapng b/tests/cfgs/default/pcap/zoom_p2p.pcapng similarity index 100% rename from tests/pcap/zoom_p2p.pcapng rename to tests/cfgs/default/pcap/zoom_p2p.pcapng diff --git a/tests/result/1kxun.pcap.out b/tests/cfgs/default/result/1kxun.pcap.out similarity index 100% rename from tests/result/1kxun.pcap.out rename to tests/cfgs/default/result/1kxun.pcap.out diff --git a/tests/result/443-chrome.pcap.out b/tests/cfgs/default/result/443-chrome.pcap.out similarity index 100% rename from tests/result/443-chrome.pcap.out rename to tests/cfgs/default/result/443-chrome.pcap.out diff --git a/tests/result/443-curl.pcap.out b/tests/cfgs/default/result/443-curl.pcap.out similarity index 100% rename from tests/result/443-curl.pcap.out rename to tests/cfgs/default/result/443-curl.pcap.out diff --git a/tests/result/443-firefox.pcap.out b/tests/cfgs/default/result/443-firefox.pcap.out similarity index 100% rename from tests/result/443-firefox.pcap.out rename to tests/cfgs/default/result/443-firefox.pcap.out diff --git a/tests/result/443-git.pcap.out b/tests/cfgs/default/result/443-git.pcap.out similarity index 100% rename from tests/result/443-git.pcap.out rename to tests/cfgs/default/result/443-git.pcap.out diff --git a/tests/result/443-opvn.pcap.out b/tests/cfgs/default/result/443-opvn.pcap.out similarity index 100% rename from tests/result/443-opvn.pcap.out rename to tests/cfgs/default/result/443-opvn.pcap.out diff --git a/tests/result/443-safari.pcap.out b/tests/cfgs/default/result/443-safari.pcap.out similarity index 100% rename from tests/result/443-safari.pcap.out rename to tests/cfgs/default/result/443-safari.pcap.out diff --git a/tests/result/4in4tunnel.pcap.out b/tests/cfgs/default/result/4in4tunnel.pcap.out similarity index 100% rename from tests/result/4in4tunnel.pcap.out rename to tests/cfgs/default/result/4in4tunnel.pcap.out diff --git a/tests/result/4in6tunnel.pcap.out b/tests/cfgs/default/result/4in6tunnel.pcap.out similarity index 100% rename from tests/result/4in6tunnel.pcap.out rename to tests/cfgs/default/result/4in6tunnel.pcap.out diff --git a/tests/result/6in4tunnel.pcap.out b/tests/cfgs/default/result/6in4tunnel.pcap.out similarity index 100% rename from tests/result/6in4tunnel.pcap.out rename to tests/cfgs/default/result/6in4tunnel.pcap.out diff --git a/tests/result/6in6tunnel.pcap.out b/tests/cfgs/default/result/6in6tunnel.pcap.out similarity index 100% rename from tests/result/6in6tunnel.pcap.out rename to tests/cfgs/default/result/6in6tunnel.pcap.out diff --git a/tests/result/BGP_Cisco_hdlc_slarp.pcap.out b/tests/cfgs/default/result/BGP_Cisco_hdlc_slarp.pcap.out similarity index 100% rename from tests/result/BGP_Cisco_hdlc_slarp.pcap.out rename to tests/cfgs/default/result/BGP_Cisco_hdlc_slarp.pcap.out diff --git a/tests/result/BGP_redist.pcap.out b/tests/cfgs/default/result/BGP_redist.pcap.out similarity index 100% rename from tests/result/BGP_redist.pcap.out rename to tests/cfgs/default/result/BGP_redist.pcap.out diff --git a/tests/result/EAQ.pcap.out b/tests/cfgs/default/result/EAQ.pcap.out similarity index 100% rename from tests/result/EAQ.pcap.out rename to tests/cfgs/default/result/EAQ.pcap.out diff --git a/tests/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out b/tests/cfgs/default/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out similarity index 100% rename from tests/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out rename to tests/cfgs/default/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out diff --git a/tests/result/IEC104.pcap.out b/tests/cfgs/default/result/IEC104.pcap.out similarity index 100% rename from tests/result/IEC104.pcap.out rename to tests/cfgs/default/result/IEC104.pcap.out diff --git a/tests/result/KakaoTalk_chat.pcap.out b/tests/cfgs/default/result/KakaoTalk_chat.pcap.out similarity index 100% rename from tests/result/KakaoTalk_chat.pcap.out rename to tests/cfgs/default/result/KakaoTalk_chat.pcap.out diff --git a/tests/result/KakaoTalk_talk.pcap.out b/tests/cfgs/default/result/KakaoTalk_talk.pcap.out similarity index 100% rename from tests/result/KakaoTalk_talk.pcap.out rename to tests/cfgs/default/result/KakaoTalk_talk.pcap.out diff --git a/tests/result/NTPv2.pcap.out b/tests/cfgs/default/result/NTPv2.pcap.out similarity index 100% rename from tests/result/NTPv2.pcap.out rename to tests/cfgs/default/result/NTPv2.pcap.out diff --git a/tests/result/NTPv3.pcap.out b/tests/cfgs/default/result/NTPv3.pcap.out similarity index 100% rename from tests/result/NTPv3.pcap.out rename to tests/cfgs/default/result/NTPv3.pcap.out diff --git a/tests/result/NTPv4.pcap.out b/tests/cfgs/default/result/NTPv4.pcap.out similarity index 100% rename from tests/result/NTPv4.pcap.out rename to tests/cfgs/default/result/NTPv4.pcap.out diff --git a/tests/result/Oscar.pcap.out b/tests/cfgs/default/result/Oscar.pcap.out similarity index 100% rename from tests/result/Oscar.pcap.out rename to tests/cfgs/default/result/Oscar.pcap.out diff --git a/tests/result/TivoDVR.pcap.out b/tests/cfgs/default/result/TivoDVR.pcap.out similarity index 100% rename from tests/result/TivoDVR.pcap.out rename to tests/cfgs/default/result/TivoDVR.pcap.out diff --git a/tests/result/WebattackRCE.pcap.out b/tests/cfgs/default/result/WebattackRCE.pcap.out similarity index 100% rename from tests/result/WebattackRCE.pcap.out rename to tests/cfgs/default/result/WebattackRCE.pcap.out diff --git a/tests/result/WebattackSQLinj.pcap.out b/tests/cfgs/default/result/WebattackSQLinj.pcap.out similarity index 100% rename from tests/result/WebattackSQLinj.pcap.out rename to tests/cfgs/default/result/WebattackSQLinj.pcap.out diff --git a/tests/result/WebattackXSS.pcap.out b/tests/cfgs/default/result/WebattackXSS.pcap.out similarity index 100% rename from tests/result/WebattackXSS.pcap.out rename to tests/cfgs/default/result/WebattackXSS.pcap.out diff --git a/tests/result/activision.pcap.out b/tests/cfgs/default/result/activision.pcap.out similarity index 100% rename from tests/result/activision.pcap.out rename to tests/cfgs/default/result/activision.pcap.out diff --git a/tests/result/adult_content.pcap.out b/tests/cfgs/default/result/adult_content.pcap.out similarity index 100% rename from tests/result/adult_content.pcap.out rename to tests/cfgs/default/result/adult_content.pcap.out diff --git a/tests/result/afp.pcap.out b/tests/cfgs/default/result/afp.pcap.out similarity index 100% rename from tests/result/afp.pcap.out rename to tests/cfgs/default/result/afp.pcap.out diff --git a/tests/result/agora-sd-rtn.pcap.out b/tests/cfgs/default/result/agora-sd-rtn.pcap.out similarity index 100% rename from tests/result/agora-sd-rtn.pcap.out rename to tests/cfgs/default/result/agora-sd-rtn.pcap.out diff --git a/tests/result/ah.pcapng.out b/tests/cfgs/default/result/ah.pcapng.out similarity index 100% rename from tests/result/ah.pcapng.out rename to tests/cfgs/default/result/ah.pcapng.out diff --git a/tests/result/ajp.pcap.out b/tests/cfgs/default/result/ajp.pcap.out similarity index 100% rename from tests/result/ajp.pcap.out rename to tests/cfgs/default/result/ajp.pcap.out diff --git a/tests/result/alexa-app.pcapng.out b/tests/cfgs/default/result/alexa-app.pcapng.out similarity index 100% rename from tests/result/alexa-app.pcapng.out rename to tests/cfgs/default/result/alexa-app.pcapng.out diff --git a/tests/result/alicloud.pcap.out b/tests/cfgs/default/result/alicloud.pcap.out similarity index 100% rename from tests/result/alicloud.pcap.out rename to tests/cfgs/default/result/alicloud.pcap.out diff --git a/tests/result/among_us.pcap.out b/tests/cfgs/default/result/among_us.pcap.out similarity index 100% rename from tests/result/among_us.pcap.out rename to tests/cfgs/default/result/among_us.pcap.out diff --git a/tests/result/amqp.pcap.out b/tests/cfgs/default/result/amqp.pcap.out similarity index 100% rename from tests/result/amqp.pcap.out rename to tests/cfgs/default/result/amqp.pcap.out diff --git a/tests/result/android.pcap.out b/tests/cfgs/default/result/android.pcap.out similarity index 100% rename from tests/result/android.pcap.out rename to tests/cfgs/default/result/android.pcap.out diff --git a/tests/result/anyconnect-vpn.pcap.out b/tests/cfgs/default/result/anyconnect-vpn.pcap.out similarity index 100% rename from tests/result/anyconnect-vpn.pcap.out rename to tests/cfgs/default/result/anyconnect-vpn.pcap.out diff --git a/tests/result/anydesk.pcapng.out b/tests/cfgs/default/result/anydesk.pcapng.out similarity index 100% rename from tests/result/anydesk.pcapng.out rename to tests/cfgs/default/result/anydesk.pcapng.out diff --git a/tests/result/avast.pcap.out b/tests/cfgs/default/result/avast.pcap.out similarity index 100% rename from tests/result/avast.pcap.out rename to tests/cfgs/default/result/avast.pcap.out diff --git a/tests/result/avast_securedns.pcapng.out b/tests/cfgs/default/result/avast_securedns.pcapng.out similarity index 100% rename from tests/result/avast_securedns.pcapng.out rename to tests/cfgs/default/result/avast_securedns.pcapng.out diff --git a/tests/result/bad-dns-traffic.pcap.out b/tests/cfgs/default/result/bad-dns-traffic.pcap.out similarity index 100% rename from tests/result/bad-dns-traffic.pcap.out rename to tests/cfgs/default/result/bad-dns-traffic.pcap.out diff --git a/tests/result/badpackets.pcap.out b/tests/cfgs/default/result/badpackets.pcap.out similarity index 100% rename from tests/result/badpackets.pcap.out rename to tests/cfgs/default/result/badpackets.pcap.out diff --git a/tests/result/bitcoin.pcap.out b/tests/cfgs/default/result/bitcoin.pcap.out similarity index 100% rename from tests/result/bitcoin.pcap.out rename to tests/cfgs/default/result/bitcoin.pcap.out diff --git a/tests/result/bittorrent.pcap.out b/tests/cfgs/default/result/bittorrent.pcap.out similarity index 100% rename from tests/result/bittorrent.pcap.out rename to tests/cfgs/default/result/bittorrent.pcap.out diff --git a/tests/result/bittorrent_tcp_miss.pcapng.out b/tests/cfgs/default/result/bittorrent_tcp_miss.pcapng.out similarity index 100% rename from tests/result/bittorrent_tcp_miss.pcapng.out rename to tests/cfgs/default/result/bittorrent_tcp_miss.pcapng.out diff --git a/tests/result/bittorrent_utp.pcap.out b/tests/cfgs/default/result/bittorrent_utp.pcap.out similarity index 100% rename from tests/result/bittorrent_utp.pcap.out rename to tests/cfgs/default/result/bittorrent_utp.pcap.out diff --git a/tests/result/bjnp.pcap.out b/tests/cfgs/default/result/bjnp.pcap.out similarity index 100% rename from tests/result/bjnp.pcap.out rename to tests/cfgs/default/result/bjnp.pcap.out diff --git a/tests/result/bot.pcap.out b/tests/cfgs/default/result/bot.pcap.out similarity index 100% rename from tests/result/bot.pcap.out rename to tests/cfgs/default/result/bot.pcap.out diff --git a/tests/result/bt_search.pcap.out b/tests/cfgs/default/result/bt_search.pcap.out similarity index 100% rename from tests/result/bt_search.pcap.out rename to tests/cfgs/default/result/bt_search.pcap.out diff --git a/tests/result/cachefly.pcapng.out b/tests/cfgs/default/result/cachefly.pcapng.out similarity index 100% rename from tests/result/cachefly.pcapng.out rename to tests/cfgs/default/result/cachefly.pcapng.out diff --git a/tests/result/capwap.pcap.out b/tests/cfgs/default/result/capwap.pcap.out similarity index 100% rename from tests/result/capwap.pcap.out rename to tests/cfgs/default/result/capwap.pcap.out diff --git a/tests/result/capwap_data.pcapng.out b/tests/cfgs/default/result/capwap_data.pcapng.out similarity index 100% rename from tests/result/capwap_data.pcapng.out rename to tests/cfgs/default/result/capwap_data.pcapng.out diff --git a/tests/result/cassandra.pcap.out b/tests/cfgs/default/result/cassandra.pcap.out similarity index 100% rename from tests/result/cassandra.pcap.out rename to tests/cfgs/default/result/cassandra.pcap.out diff --git a/tests/result/check_mk_new.pcap.out b/tests/cfgs/default/result/check_mk_new.pcap.out similarity index 100% rename from tests/result/check_mk_new.pcap.out rename to tests/cfgs/default/result/check_mk_new.pcap.out diff --git a/tests/result/chrome.pcap.out b/tests/cfgs/default/result/chrome.pcap.out similarity index 100% rename from tests/result/chrome.pcap.out rename to tests/cfgs/default/result/chrome.pcap.out diff --git a/tests/result/citrix.pcap.out b/tests/cfgs/default/result/citrix.pcap.out similarity index 100% rename from tests/result/citrix.pcap.out rename to tests/cfgs/default/result/citrix.pcap.out diff --git a/tests/result/cloudflare-warp.pcap.out b/tests/cfgs/default/result/cloudflare-warp.pcap.out similarity index 100% rename from tests/result/cloudflare-warp.pcap.out rename to tests/cfgs/default/result/cloudflare-warp.pcap.out diff --git a/tests/result/coap_mqtt.pcap.out b/tests/cfgs/default/result/coap_mqtt.pcap.out similarity index 100% rename from tests/result/coap_mqtt.pcap.out rename to tests/cfgs/default/result/coap_mqtt.pcap.out diff --git a/tests/result/collectd.pcap.out b/tests/cfgs/default/result/collectd.pcap.out similarity index 100% rename from tests/result/collectd.pcap.out rename to tests/cfgs/default/result/collectd.pcap.out diff --git a/tests/result/corba.pcap.out b/tests/cfgs/default/result/corba.pcap.out similarity index 100% rename from tests/result/corba.pcap.out rename to tests/cfgs/default/result/corba.pcap.out diff --git a/tests/result/cpha.pcap.out b/tests/cfgs/default/result/cpha.pcap.out similarity index 100% rename from tests/result/cpha.pcap.out rename to tests/cfgs/default/result/cpha.pcap.out diff --git a/tests/result/crynet.pcap.out b/tests/cfgs/default/result/crynet.pcap.out similarity index 100% rename from tests/result/crynet.pcap.out rename to tests/cfgs/default/result/crynet.pcap.out diff --git a/tests/result/custom_rules_same-ip_multiple_ports.pcapng.out b/tests/cfgs/default/result/custom_rules_same-ip_multiple_ports.pcapng.out similarity index 100% rename from tests/result/custom_rules_same-ip_multiple_ports.pcapng.out rename to tests/cfgs/default/result/custom_rules_same-ip_multiple_ports.pcapng.out diff --git a/tests/result/dazn.pcapng.out b/tests/cfgs/default/result/dazn.pcapng.out similarity index 100% rename from tests/result/dazn.pcapng.out rename to tests/cfgs/default/result/dazn.pcapng.out diff --git a/tests/result/dcerpc.pcap.out b/tests/cfgs/default/result/dcerpc.pcap.out similarity index 100% rename from tests/result/dcerpc.pcap.out rename to tests/cfgs/default/result/dcerpc.pcap.out diff --git a/tests/result/dhcp-fuzz.pcapng.out b/tests/cfgs/default/result/dhcp-fuzz.pcapng.out similarity index 100% rename from tests/result/dhcp-fuzz.pcapng.out rename to tests/cfgs/default/result/dhcp-fuzz.pcapng.out diff --git a/tests/result/diameter.pcap.out b/tests/cfgs/default/result/diameter.pcap.out similarity index 100% rename from tests/result/diameter.pcap.out rename to tests/cfgs/default/result/diameter.pcap.out diff --git a/tests/result/discord.pcap.out b/tests/cfgs/default/result/discord.pcap.out similarity index 100% rename from tests/result/discord.pcap.out rename to tests/cfgs/default/result/discord.pcap.out diff --git a/tests/result/discord_mid_flow.pcap.out b/tests/cfgs/default/result/discord_mid_flow.pcap.out similarity index 100% rename from tests/result/discord_mid_flow.pcap.out rename to tests/cfgs/default/result/discord_mid_flow.pcap.out diff --git a/tests/result/dlt_ppp.pcap.out b/tests/cfgs/default/result/dlt_ppp.pcap.out similarity index 100% rename from tests/result/dlt_ppp.pcap.out rename to tests/cfgs/default/result/dlt_ppp.pcap.out diff --git a/tests/result/dnp3.pcap.out b/tests/cfgs/default/result/dnp3.pcap.out similarity index 100% rename from tests/result/dnp3.pcap.out rename to tests/cfgs/default/result/dnp3.pcap.out diff --git a/tests/result/dns-invalid-chars.pcap.out b/tests/cfgs/default/result/dns-invalid-chars.pcap.out similarity index 100% rename from tests/result/dns-invalid-chars.pcap.out rename to tests/cfgs/default/result/dns-invalid-chars.pcap.out diff --git a/tests/result/dns-tunnel-iodine.pcap.out b/tests/cfgs/default/result/dns-tunnel-iodine.pcap.out similarity index 100% rename from tests/result/dns-tunnel-iodine.pcap.out rename to tests/cfgs/default/result/dns-tunnel-iodine.pcap.out diff --git a/tests/result/dns_ambiguous_names.pcap.out b/tests/cfgs/default/result/dns_ambiguous_names.pcap.out similarity index 100% rename from tests/result/dns_ambiguous_names.pcap.out rename to tests/cfgs/default/result/dns_ambiguous_names.pcap.out diff --git a/tests/result/dns_doh.pcap.out b/tests/cfgs/default/result/dns_doh.pcap.out similarity index 100% rename from tests/result/dns_doh.pcap.out rename to tests/cfgs/default/result/dns_doh.pcap.out diff --git a/tests/result/dns_dot.pcap.out b/tests/cfgs/default/result/dns_dot.pcap.out similarity index 100% rename from tests/result/dns_dot.pcap.out rename to tests/cfgs/default/result/dns_dot.pcap.out diff --git a/tests/result/dns_exfiltration.pcap.out b/tests/cfgs/default/result/dns_exfiltration.pcap.out similarity index 100% rename from tests/result/dns_exfiltration.pcap.out rename to tests/cfgs/default/result/dns_exfiltration.pcap.out diff --git a/tests/result/dns_fragmented.pcap.out b/tests/cfgs/default/result/dns_fragmented.pcap.out similarity index 100% rename from tests/result/dns_fragmented.pcap.out rename to tests/cfgs/default/result/dns_fragmented.pcap.out diff --git a/tests/result/dns_invert_query.pcapng.out b/tests/cfgs/default/result/dns_invert_query.pcapng.out similarity index 100% rename from tests/result/dns_invert_query.pcapng.out rename to tests/cfgs/default/result/dns_invert_query.pcapng.out diff --git a/tests/result/dns_long_domainname.pcap.out b/tests/cfgs/default/result/dns_long_domainname.pcap.out similarity index 100% rename from tests/result/dns_long_domainname.pcap.out rename to tests/cfgs/default/result/dns_long_domainname.pcap.out diff --git a/tests/result/dnscrypt-v1-and-resolver-pings.pcap.out b/tests/cfgs/default/result/dnscrypt-v1-and-resolver-pings.pcap.out similarity index 100% rename from tests/result/dnscrypt-v1-and-resolver-pings.pcap.out rename to tests/cfgs/default/result/dnscrypt-v1-and-resolver-pings.pcap.out diff --git a/tests/result/dnscrypt-v2-doh.pcap.out b/tests/cfgs/default/result/dnscrypt-v2-doh.pcap.out similarity index 100% rename from tests/result/dnscrypt-v2-doh.pcap.out rename to tests/cfgs/default/result/dnscrypt-v2-doh.pcap.out diff --git a/tests/result/dnscrypt-v2.pcap.out b/tests/cfgs/default/result/dnscrypt-v2.pcap.out similarity index 100% rename from tests/result/dnscrypt-v2.pcap.out rename to tests/cfgs/default/result/dnscrypt-v2.pcap.out diff --git a/tests/result/dnscrypt_skype_false_positive.pcapng.out b/tests/cfgs/default/result/dnscrypt_skype_false_positive.pcapng.out similarity index 100% rename from tests/result/dnscrypt_skype_false_positive.pcapng.out rename to tests/cfgs/default/result/dnscrypt_skype_false_positive.pcapng.out diff --git a/tests/result/doq.pcapng.out b/tests/cfgs/default/result/doq.pcapng.out similarity index 100% rename from tests/result/doq.pcapng.out rename to tests/cfgs/default/result/doq.pcapng.out diff --git a/tests/result/doq_adguard.pcapng.out b/tests/cfgs/default/result/doq_adguard.pcapng.out similarity index 100% rename from tests/result/doq_adguard.pcapng.out rename to tests/cfgs/default/result/doq_adguard.pcapng.out diff --git a/tests/result/dos_win98_smb_netbeui.pcap.out b/tests/cfgs/default/result/dos_win98_smb_netbeui.pcap.out similarity index 100% rename from tests/result/dos_win98_smb_netbeui.pcap.out rename to tests/cfgs/default/result/dos_win98_smb_netbeui.pcap.out diff --git a/tests/result/drda_db2.pcap.out b/tests/cfgs/default/result/drda_db2.pcap.out similarity index 100% rename from tests/result/drda_db2.pcap.out rename to tests/cfgs/default/result/drda_db2.pcap.out diff --git a/tests/result/dropbox.pcap.out b/tests/cfgs/default/result/dropbox.pcap.out similarity index 100% rename from tests/result/dropbox.pcap.out rename to tests/cfgs/default/result/dropbox.pcap.out diff --git a/tests/result/dtls.pcap.out b/tests/cfgs/default/result/dtls.pcap.out similarity index 100% rename from tests/result/dtls.pcap.out rename to tests/cfgs/default/result/dtls.pcap.out diff --git a/tests/result/dtls2.pcap.out b/tests/cfgs/default/result/dtls2.pcap.out similarity index 100% rename from tests/result/dtls2.pcap.out rename to tests/cfgs/default/result/dtls2.pcap.out diff --git a/tests/result/dtls_certificate.pcapng.out b/tests/cfgs/default/result/dtls_certificate.pcapng.out similarity index 100% rename from tests/result/dtls_certificate.pcapng.out rename to tests/cfgs/default/result/dtls_certificate.pcapng.out diff --git a/tests/result/dtls_certificate_fragments.pcap.out b/tests/cfgs/default/result/dtls_certificate_fragments.pcap.out similarity index 100% rename from tests/result/dtls_certificate_fragments.pcap.out rename to tests/cfgs/default/result/dtls_certificate_fragments.pcap.out diff --git a/tests/result/dtls_mid_sessions.pcapng.out b/tests/cfgs/default/result/dtls_mid_sessions.pcapng.out similarity index 100% rename from tests/result/dtls_mid_sessions.pcapng.out rename to tests/cfgs/default/result/dtls_mid_sessions.pcapng.out diff --git a/tests/result/dtls_old_version.pcapng.out b/tests/cfgs/default/result/dtls_old_version.pcapng.out similarity index 100% rename from tests/result/dtls_old_version.pcapng.out rename to tests/cfgs/default/result/dtls_old_version.pcapng.out diff --git a/tests/result/dtls_session_id_and_coockie_both.pcap.out b/tests/cfgs/default/result/dtls_session_id_and_coockie_both.pcap.out similarity index 100% rename from tests/result/dtls_session_id_and_coockie_both.pcap.out rename to tests/cfgs/default/result/dtls_session_id_and_coockie_both.pcap.out diff --git a/tests/result/elasticsearch.pcap.out b/tests/cfgs/default/result/elasticsearch.pcap.out similarity index 100% rename from tests/result/elasticsearch.pcap.out rename to tests/cfgs/default/result/elasticsearch.pcap.out diff --git a/tests/result/emotet.pcap.out b/tests/cfgs/default/result/emotet.pcap.out similarity index 100% rename from tests/result/emotet.pcap.out rename to tests/cfgs/default/result/emotet.pcap.out diff --git a/tests/result/encrypted_sni.pcap.out b/tests/cfgs/default/result/encrypted_sni.pcap.out similarity index 100% rename from tests/result/encrypted_sni.pcap.out rename to tests/cfgs/default/result/encrypted_sni.pcap.out diff --git a/tests/result/esp.pcapng.out b/tests/cfgs/default/result/esp.pcapng.out similarity index 100% rename from tests/result/esp.pcapng.out rename to tests/cfgs/default/result/esp.pcapng.out diff --git a/tests/result/ethereum.pcap.out b/tests/cfgs/default/result/ethereum.pcap.out similarity index 100% rename from tests/result/ethereum.pcap.out rename to tests/cfgs/default/result/ethereum.pcap.out diff --git a/tests/result/ethernetIP.pcap.out b/tests/cfgs/default/result/ethernetIP.pcap.out similarity index 100% rename from tests/result/ethernetIP.pcap.out rename to tests/cfgs/default/result/ethernetIP.pcap.out diff --git a/tests/result/exe_download.pcap.out b/tests/cfgs/default/result/exe_download.pcap.out similarity index 100% rename from tests/result/exe_download.pcap.out rename to tests/cfgs/default/result/exe_download.pcap.out diff --git a/tests/result/exe_download_as_png.pcap.out b/tests/cfgs/default/result/exe_download_as_png.pcap.out similarity index 100% rename from tests/result/exe_download_as_png.pcap.out rename to tests/cfgs/default/result/exe_download_as_png.pcap.out diff --git a/tests/result/facebook.pcap.out b/tests/cfgs/default/result/facebook.pcap.out similarity index 100% rename from tests/result/facebook.pcap.out rename to tests/cfgs/default/result/facebook.pcap.out diff --git a/tests/result/fastcgi.pcap.out b/tests/cfgs/default/result/fastcgi.pcap.out similarity index 100% rename from tests/result/fastcgi.pcap.out rename to tests/cfgs/default/result/fastcgi.pcap.out diff --git a/tests/result/firefox.pcap.out b/tests/cfgs/default/result/firefox.pcap.out similarity index 100% rename from tests/result/firefox.pcap.out rename to tests/cfgs/default/result/firefox.pcap.out diff --git a/tests/result/fix.pcap.out b/tests/cfgs/default/result/fix.pcap.out similarity index 100% rename from tests/result/fix.pcap.out rename to tests/cfgs/default/result/fix.pcap.out diff --git a/tests/result/fix2.pcap.out b/tests/cfgs/default/result/fix2.pcap.out similarity index 100% rename from tests/result/fix2.pcap.out rename to tests/cfgs/default/result/fix2.pcap.out diff --git a/tests/result/forticlient.pcap.out b/tests/cfgs/default/result/forticlient.pcap.out similarity index 100% rename from tests/result/forticlient.pcap.out rename to tests/cfgs/default/result/forticlient.pcap.out diff --git a/tests/result/ftp-start-tls.pcap.out b/tests/cfgs/default/result/ftp-start-tls.pcap.out similarity index 100% rename from tests/result/ftp-start-tls.pcap.out rename to tests/cfgs/default/result/ftp-start-tls.pcap.out diff --git a/tests/result/ftp.pcap.out b/tests/cfgs/default/result/ftp.pcap.out similarity index 100% rename from tests/result/ftp.pcap.out rename to tests/cfgs/default/result/ftp.pcap.out diff --git a/tests/result/ftp_failed.pcap.out b/tests/cfgs/default/result/ftp_failed.pcap.out similarity index 100% rename from tests/result/ftp_failed.pcap.out rename to tests/cfgs/default/result/ftp_failed.pcap.out diff --git a/tests/result/fuzz-2006-06-26-2594.pcap.out b/tests/cfgs/default/result/fuzz-2006-06-26-2594.pcap.out similarity index 100% rename from tests/result/fuzz-2006-06-26-2594.pcap.out rename to tests/cfgs/default/result/fuzz-2006-06-26-2594.pcap.out diff --git a/tests/result/fuzz-2006-09-29-28586.pcap.out b/tests/cfgs/default/result/fuzz-2006-09-29-28586.pcap.out similarity index 100% rename from tests/result/fuzz-2006-09-29-28586.pcap.out rename to tests/cfgs/default/result/fuzz-2006-09-29-28586.pcap.out diff --git a/tests/result/fuzz-2020-02-16-11740.pcap.out b/tests/cfgs/default/result/fuzz-2020-02-16-11740.pcap.out similarity index 100% rename from tests/result/fuzz-2020-02-16-11740.pcap.out rename to tests/cfgs/default/result/fuzz-2020-02-16-11740.pcap.out diff --git a/tests/result/fuzz-2021-06-07-c6c72a0a56.pcap.out b/tests/cfgs/default/result/fuzz-2021-06-07-c6c72a0a56.pcap.out similarity index 100% rename from tests/result/fuzz-2021-06-07-c6c72a0a56.pcap.out rename to tests/cfgs/default/result/fuzz-2021-06-07-c6c72a0a56.pcap.out diff --git a/tests/result/fuzz-2021-10-13.pcap.out b/tests/cfgs/default/result/fuzz-2021-10-13.pcap.out similarity index 100% rename from tests/result/fuzz-2021-10-13.pcap.out rename to tests/cfgs/default/result/fuzz-2021-10-13.pcap.out diff --git a/tests/result/genshin-impact.pcap.out b/tests/cfgs/default/result/genshin-impact.pcap.out similarity index 100% rename from tests/result/genshin-impact.pcap.out rename to tests/cfgs/default/result/genshin-impact.pcap.out diff --git a/tests/result/git.pcap.out b/tests/cfgs/default/result/git.pcap.out similarity index 100% rename from tests/result/git.pcap.out rename to tests/cfgs/default/result/git.pcap.out diff --git a/tests/result/gnutella.pcap.out b/tests/cfgs/default/result/gnutella.pcap.out similarity index 100% rename from tests/result/gnutella.pcap.out rename to tests/cfgs/default/result/gnutella.pcap.out diff --git a/tests/result/google_ssl.pcap.out b/tests/cfgs/default/result/google_ssl.pcap.out similarity index 100% rename from tests/result/google_ssl.pcap.out rename to tests/cfgs/default/result/google_ssl.pcap.out diff --git a/tests/result/googledns_android10.pcap.out b/tests/cfgs/default/result/googledns_android10.pcap.out similarity index 100% rename from tests/result/googledns_android10.pcap.out rename to tests/cfgs/default/result/googledns_android10.pcap.out diff --git a/tests/result/gquic.pcap.out b/tests/cfgs/default/result/gquic.pcap.out similarity index 100% rename from tests/result/gquic.pcap.out rename to tests/cfgs/default/result/gquic.pcap.out diff --git a/tests/result/gtp_c.pcap.out b/tests/cfgs/default/result/gtp_c.pcap.out similarity index 100% rename from tests/result/gtp_c.pcap.out rename to tests/cfgs/default/result/gtp_c.pcap.out diff --git a/tests/result/gtp_false_positive.pcapng.out b/tests/cfgs/default/result/gtp_false_positive.pcapng.out similarity index 100% rename from tests/result/gtp_false_positive.pcapng.out rename to tests/cfgs/default/result/gtp_false_positive.pcapng.out diff --git a/tests/result/gtp_prime.pcapng.out b/tests/cfgs/default/result/gtp_prime.pcapng.out similarity index 100% rename from tests/result/gtp_prime.pcapng.out rename to tests/cfgs/default/result/gtp_prime.pcapng.out diff --git a/tests/result/h323-overflow.pcap.out b/tests/cfgs/default/result/h323-overflow.pcap.out similarity index 100% rename from tests/result/h323-overflow.pcap.out rename to tests/cfgs/default/result/h323-overflow.pcap.out diff --git a/tests/result/h323.pcap.out b/tests/cfgs/default/result/h323.pcap.out similarity index 100% rename from tests/result/h323.pcap.out rename to tests/cfgs/default/result/h323.pcap.out diff --git a/tests/result/hangout.pcap.out b/tests/cfgs/default/result/hangout.pcap.out similarity index 100% rename from tests/result/hangout.pcap.out rename to tests/cfgs/default/result/hangout.pcap.out diff --git a/tests/result/hpvirtgrp.pcap.out b/tests/cfgs/default/result/hpvirtgrp.pcap.out similarity index 100% rename from tests/result/hpvirtgrp.pcap.out rename to tests/cfgs/default/result/hpvirtgrp.pcap.out diff --git a/tests/result/hsrp0.pcap.out b/tests/cfgs/default/result/hsrp0.pcap.out similarity index 100% rename from tests/result/hsrp0.pcap.out rename to tests/cfgs/default/result/hsrp0.pcap.out diff --git a/tests/result/hsrp2.pcap.out b/tests/cfgs/default/result/hsrp2.pcap.out similarity index 100% rename from tests/result/hsrp2.pcap.out rename to tests/cfgs/default/result/hsrp2.pcap.out diff --git a/tests/result/hsrp2_ipv6.pcapng.out b/tests/cfgs/default/result/hsrp2_ipv6.pcapng.out similarity index 100% rename from tests/result/hsrp2_ipv6.pcapng.out rename to tests/cfgs/default/result/hsrp2_ipv6.pcapng.out diff --git a/tests/result/http-crash-content-disposition.pcap.out b/tests/cfgs/default/result/http-crash-content-disposition.pcap.out similarity index 100% rename from tests/result/http-crash-content-disposition.pcap.out rename to tests/cfgs/default/result/http-crash-content-disposition.pcap.out diff --git a/tests/result/http-lines-split.pcap.out b/tests/cfgs/default/result/http-lines-split.pcap.out similarity index 100% rename from tests/result/http-lines-split.pcap.out rename to tests/cfgs/default/result/http-lines-split.pcap.out diff --git a/tests/result/http-manipulated.pcap.out b/tests/cfgs/default/result/http-manipulated.pcap.out similarity index 100% rename from tests/result/http-manipulated.pcap.out rename to tests/cfgs/default/result/http-manipulated.pcap.out diff --git a/tests/result/http-proxy.pcapng.out b/tests/cfgs/default/result/http-proxy.pcapng.out similarity index 100% rename from tests/result/http-proxy.pcapng.out rename to tests/cfgs/default/result/http-proxy.pcapng.out diff --git a/tests/result/http_auth.pcap.out b/tests/cfgs/default/result/http_auth.pcap.out similarity index 100% rename from tests/result/http_auth.pcap.out rename to tests/cfgs/default/result/http_auth.pcap.out diff --git a/tests/result/http_connect.pcap.out b/tests/cfgs/default/result/http_connect.pcap.out similarity index 100% rename from tests/result/http_connect.pcap.out rename to tests/cfgs/default/result/http_connect.pcap.out diff --git a/tests/result/http_guessed_host_and_guessed.pcapng.out b/tests/cfgs/default/result/http_guessed_host_and_guessed.pcapng.out similarity index 100% rename from tests/result/http_guessed_host_and_guessed.pcapng.out rename to tests/cfgs/default/result/http_guessed_host_and_guessed.pcapng.out diff --git a/tests/result/http_ipv6.pcap.out b/tests/cfgs/default/result/http_ipv6.pcap.out similarity index 100% rename from tests/result/http_ipv6.pcap.out rename to tests/cfgs/default/result/http_ipv6.pcap.out diff --git a/tests/result/http_on_sip_port.pcap.out b/tests/cfgs/default/result/http_on_sip_port.pcap.out similarity index 100% rename from tests/result/http_on_sip_port.pcap.out rename to tests/cfgs/default/result/http_on_sip_port.pcap.out diff --git a/tests/result/i3d.pcap.out b/tests/cfgs/default/result/i3d.pcap.out similarity index 100% rename from tests/result/i3d.pcap.out rename to tests/cfgs/default/result/i3d.pcap.out diff --git a/tests/result/iax.pcap.out b/tests/cfgs/default/result/iax.pcap.out similarity index 100% rename from tests/result/iax.pcap.out rename to tests/cfgs/default/result/iax.pcap.out diff --git a/tests/result/icmp-tunnel.pcap.out b/tests/cfgs/default/result/icmp-tunnel.pcap.out similarity index 100% rename from tests/result/icmp-tunnel.pcap.out rename to tests/cfgs/default/result/icmp-tunnel.pcap.out diff --git a/tests/result/iec60780-5-104.pcap.out b/tests/cfgs/default/result/iec60780-5-104.pcap.out similarity index 100% rename from tests/result/iec60780-5-104.pcap.out rename to tests/cfgs/default/result/iec60780-5-104.pcap.out diff --git a/tests/result/imap-starttls.pcap.out b/tests/cfgs/default/result/imap-starttls.pcap.out similarity index 100% rename from tests/result/imap-starttls.pcap.out rename to tests/cfgs/default/result/imap-starttls.pcap.out diff --git a/tests/result/imap.pcap.out b/tests/cfgs/default/result/imap.pcap.out similarity index 100% rename from tests/result/imap.pcap.out rename to tests/cfgs/default/result/imap.pcap.out diff --git a/tests/result/imaps.pcap.out b/tests/cfgs/default/result/imaps.pcap.out similarity index 100% rename from tests/result/imaps.pcap.out rename to tests/cfgs/default/result/imaps.pcap.out diff --git a/tests/result/imo.pcap.out b/tests/cfgs/default/result/imo.pcap.out similarity index 100% rename from tests/result/imo.pcap.out rename to tests/cfgs/default/result/imo.pcap.out diff --git a/tests/result/instagram.pcap.out b/tests/cfgs/default/result/instagram.pcap.out similarity index 100% rename from tests/result/instagram.pcap.out rename to tests/cfgs/default/result/instagram.pcap.out diff --git a/tests/result/ip_fragmented_garbage.pcap.out b/tests/cfgs/default/result/ip_fragmented_garbage.pcap.out similarity index 100% rename from tests/result/ip_fragmented_garbage.pcap.out rename to tests/cfgs/default/result/ip_fragmented_garbage.pcap.out diff --git a/tests/result/iphone.pcap.out b/tests/cfgs/default/result/iphone.pcap.out similarity index 100% rename from tests/result/iphone.pcap.out rename to tests/cfgs/default/result/iphone.pcap.out diff --git a/tests/result/ipp.pcap.out b/tests/cfgs/default/result/ipp.pcap.out similarity index 100% rename from tests/result/ipp.pcap.out rename to tests/cfgs/default/result/ipp.pcap.out diff --git a/tests/result/ipsec_isakmp_esp.pcap.out b/tests/cfgs/default/result/ipsec_isakmp_esp.pcap.out similarity index 100% rename from tests/result/ipsec_isakmp_esp.pcap.out rename to tests/cfgs/default/result/ipsec_isakmp_esp.pcap.out diff --git a/tests/result/ipv6_in_gtp.pcap.out b/tests/cfgs/default/result/ipv6_in_gtp.pcap.out similarity index 100% rename from tests/result/ipv6_in_gtp.pcap.out rename to tests/cfgs/default/result/ipv6_in_gtp.pcap.out diff --git a/tests/result/irc.pcap.out b/tests/cfgs/default/result/irc.pcap.out similarity index 100% rename from tests/result/irc.pcap.out rename to tests/cfgs/default/result/irc.pcap.out diff --git a/tests/result/ja3_lots_of_cipher_suites.pcap.out b/tests/cfgs/default/result/ja3_lots_of_cipher_suites.pcap.out similarity index 100% rename from tests/result/ja3_lots_of_cipher_suites.pcap.out rename to tests/cfgs/default/result/ja3_lots_of_cipher_suites.pcap.out diff --git a/tests/result/ja3_lots_of_cipher_suites_2_anon.pcap.out b/tests/cfgs/default/result/ja3_lots_of_cipher_suites_2_anon.pcap.out similarity index 100% rename from tests/result/ja3_lots_of_cipher_suites_2_anon.pcap.out rename to tests/cfgs/default/result/ja3_lots_of_cipher_suites_2_anon.pcap.out diff --git a/tests/result/jabber.pcap.out b/tests/cfgs/default/result/jabber.pcap.out similarity index 100% rename from tests/result/jabber.pcap.out rename to tests/cfgs/default/result/jabber.pcap.out diff --git a/tests/result/kerberos-error.pcap.out b/tests/cfgs/default/result/kerberos-error.pcap.out similarity index 100% rename from tests/result/kerberos-error.pcap.out rename to tests/cfgs/default/result/kerberos-error.pcap.out diff --git a/tests/result/kerberos-login.pcap.out b/tests/cfgs/default/result/kerberos-login.pcap.out similarity index 100% rename from tests/result/kerberos-login.pcap.out rename to tests/cfgs/default/result/kerberos-login.pcap.out diff --git a/tests/result/kerberos.pcap.out b/tests/cfgs/default/result/kerberos.pcap.out similarity index 100% rename from tests/result/kerberos.pcap.out rename to tests/cfgs/default/result/kerberos.pcap.out diff --git a/tests/result/kerberos_fuzz.pcapng.out b/tests/cfgs/default/result/kerberos_fuzz.pcapng.out similarity index 100% rename from tests/result/kerberos_fuzz.pcapng.out rename to tests/cfgs/default/result/kerberos_fuzz.pcapng.out diff --git a/tests/result/kismet.pcap.out b/tests/cfgs/default/result/kismet.pcap.out similarity index 100% rename from tests/result/kismet.pcap.out rename to tests/cfgs/default/result/kismet.pcap.out diff --git a/tests/result/kontiki.pcap.out b/tests/cfgs/default/result/kontiki.pcap.out similarity index 100% rename from tests/result/kontiki.pcap.out rename to tests/cfgs/default/result/kontiki.pcap.out diff --git a/tests/result/line.pcap.out b/tests/cfgs/default/result/line.pcap.out similarity index 100% rename from tests/result/line.pcap.out rename to tests/cfgs/default/result/line.pcap.out diff --git a/tests/result/linecall_falsepositve.pcap.out b/tests/cfgs/default/result/linecall_falsepositve.pcap.out similarity index 100% rename from tests/result/linecall_falsepositve.pcap.out rename to tests/cfgs/default/result/linecall_falsepositve.pcap.out diff --git a/tests/result/lisp_registration.pcap.out b/tests/cfgs/default/result/lisp_registration.pcap.out similarity index 100% rename from tests/result/lisp_registration.pcap.out rename to tests/cfgs/default/result/lisp_registration.pcap.out diff --git a/tests/result/log4j-webapp-exploit.pcap.out b/tests/cfgs/default/result/log4j-webapp-exploit.pcap.out similarity index 100% rename from tests/result/log4j-webapp-exploit.pcap.out rename to tests/cfgs/default/result/log4j-webapp-exploit.pcap.out diff --git a/tests/result/long_tls_certificate.pcap.out b/tests/cfgs/default/result/long_tls_certificate.pcap.out similarity index 100% rename from tests/result/long_tls_certificate.pcap.out rename to tests/cfgs/default/result/long_tls_certificate.pcap.out diff --git a/tests/result/lru_ipv6_caches.pcapng.out b/tests/cfgs/default/result/lru_ipv6_caches.pcapng.out similarity index 100% rename from tests/result/lru_ipv6_caches.pcapng.out rename to tests/cfgs/default/result/lru_ipv6_caches.pcapng.out diff --git a/tests/result/malformed_dns.pcap.out b/tests/cfgs/default/result/malformed_dns.pcap.out similarity index 100% rename from tests/result/malformed_dns.pcap.out rename to tests/cfgs/default/result/malformed_dns.pcap.out diff --git a/tests/result/malformed_icmp.pcap.out b/tests/cfgs/default/result/malformed_icmp.pcap.out similarity index 100% rename from tests/result/malformed_icmp.pcap.out rename to tests/cfgs/default/result/malformed_icmp.pcap.out diff --git a/tests/result/malware.pcap.out b/tests/cfgs/default/result/malware.pcap.out similarity index 100% rename from tests/result/malware.pcap.out rename to tests/cfgs/default/result/malware.pcap.out diff --git a/tests/result/memcached.cap.out b/tests/cfgs/default/result/memcached.cap.out similarity index 100% rename from tests/result/memcached.cap.out rename to tests/cfgs/default/result/memcached.cap.out diff --git a/tests/result/merakicloud.pcapng.out b/tests/cfgs/default/result/merakicloud.pcapng.out similarity index 100% rename from tests/result/merakicloud.pcapng.out rename to tests/cfgs/default/result/merakicloud.pcapng.out diff --git a/tests/result/mgcp.pcapng.out b/tests/cfgs/default/result/mgcp.pcapng.out similarity index 100% rename from tests/result/mgcp.pcapng.out rename to tests/cfgs/default/result/mgcp.pcapng.out diff --git a/tests/result/modbus.pcap.out b/tests/cfgs/default/result/modbus.pcap.out similarity index 100% rename from tests/result/modbus.pcap.out rename to tests/cfgs/default/result/modbus.pcap.out diff --git a/tests/result/monero.pcap.out b/tests/cfgs/default/result/monero.pcap.out similarity index 100% rename from tests/result/monero.pcap.out rename to tests/cfgs/default/result/monero.pcap.out diff --git a/tests/result/mongo_false_positive.pcapng.out b/tests/cfgs/default/result/mongo_false_positive.pcapng.out similarity index 100% rename from tests/result/mongo_false_positive.pcapng.out rename to tests/cfgs/default/result/mongo_false_positive.pcapng.out diff --git a/tests/result/mongodb.pcap.out b/tests/cfgs/default/result/mongodb.pcap.out similarity index 100% rename from tests/result/mongodb.pcap.out rename to tests/cfgs/default/result/mongodb.pcap.out diff --git a/tests/result/mpeg-dash.pcap.out b/tests/cfgs/default/result/mpeg-dash.pcap.out similarity index 100% rename from tests/result/mpeg-dash.pcap.out rename to tests/cfgs/default/result/mpeg-dash.pcap.out diff --git a/tests/result/mpeg.pcap.out b/tests/cfgs/default/result/mpeg.pcap.out similarity index 100% rename from tests/result/mpeg.pcap.out rename to tests/cfgs/default/result/mpeg.pcap.out diff --git a/tests/result/mpegts.pcap.out b/tests/cfgs/default/result/mpegts.pcap.out similarity index 100% rename from tests/result/mpegts.pcap.out rename to tests/cfgs/default/result/mpegts.pcap.out diff --git a/tests/result/mqtt.pcap.out b/tests/cfgs/default/result/mqtt.pcap.out similarity index 100% rename from tests/result/mqtt.pcap.out rename to tests/cfgs/default/result/mqtt.pcap.out diff --git a/tests/result/mssql_tds.pcap.out b/tests/cfgs/default/result/mssql_tds.pcap.out similarity index 100% rename from tests/result/mssql_tds.pcap.out rename to tests/cfgs/default/result/mssql_tds.pcap.out diff --git a/tests/result/munin.pcap.out b/tests/cfgs/default/result/munin.pcap.out similarity index 100% rename from tests/result/munin.pcap.out rename to tests/cfgs/default/result/munin.pcap.out diff --git a/tests/result/mysql-8.pcap.out b/tests/cfgs/default/result/mysql-8.pcap.out similarity index 100% rename from tests/result/mysql-8.pcap.out rename to tests/cfgs/default/result/mysql-8.pcap.out diff --git a/tests/result/natpmp.pcap.out b/tests/cfgs/default/result/natpmp.pcap.out similarity index 100% rename from tests/result/natpmp.pcap.out rename to tests/cfgs/default/result/natpmp.pcap.out diff --git a/tests/result/nats.pcap.out b/tests/cfgs/default/result/nats.pcap.out similarity index 100% rename from tests/result/nats.pcap.out rename to tests/cfgs/default/result/nats.pcap.out diff --git a/tests/result/ndpi_match_string_subprotocol__error.pcapng.out b/tests/cfgs/default/result/ndpi_match_string_subprotocol__error.pcapng.out similarity index 100% rename from tests/result/ndpi_match_string_subprotocol__error.pcapng.out rename to tests/cfgs/default/result/ndpi_match_string_subprotocol__error.pcapng.out diff --git a/tests/result/nest_log_sink.pcap.out b/tests/cfgs/default/result/nest_log_sink.pcap.out similarity index 100% rename from tests/result/nest_log_sink.pcap.out rename to tests/cfgs/default/result/nest_log_sink.pcap.out diff --git a/tests/result/netbios.pcap.out b/tests/cfgs/default/result/netbios.pcap.out similarity index 100% rename from tests/result/netbios.pcap.out rename to tests/cfgs/default/result/netbios.pcap.out diff --git a/tests/result/netbios_wildcard_dns_query.pcap.out b/tests/cfgs/default/result/netbios_wildcard_dns_query.pcap.out similarity index 100% rename from tests/result/netbios_wildcard_dns_query.pcap.out rename to tests/cfgs/default/result/netbios_wildcard_dns_query.pcap.out diff --git a/tests/result/netflix.pcap.out b/tests/cfgs/default/result/netflix.pcap.out similarity index 100% rename from tests/result/netflix.pcap.out rename to tests/cfgs/default/result/netflix.pcap.out diff --git a/tests/result/netflow-fritz.pcap.out b/tests/cfgs/default/result/netflow-fritz.pcap.out similarity index 100% rename from tests/result/netflow-fritz.pcap.out rename to tests/cfgs/default/result/netflow-fritz.pcap.out diff --git a/tests/result/netflowv9.pcap.out b/tests/cfgs/default/result/netflowv9.pcap.out similarity index 100% rename from tests/result/netflowv9.pcap.out rename to tests/cfgs/default/result/netflowv9.pcap.out diff --git a/tests/result/nfsv2.pcap.out b/tests/cfgs/default/result/nfsv2.pcap.out similarity index 100% rename from tests/result/nfsv2.pcap.out rename to tests/cfgs/default/result/nfsv2.pcap.out diff --git a/tests/result/nfsv3.pcap.out b/tests/cfgs/default/result/nfsv3.pcap.out similarity index 100% rename from tests/result/nfsv3.pcap.out rename to tests/cfgs/default/result/nfsv3.pcap.out diff --git a/tests/result/nintendo.pcap.out b/tests/cfgs/default/result/nintendo.pcap.out similarity index 100% rename from tests/result/nintendo.pcap.out rename to tests/cfgs/default/result/nintendo.pcap.out diff --git a/tests/result/nntp.pcap.out b/tests/cfgs/default/result/nntp.pcap.out similarity index 100% rename from tests/result/nntp.pcap.out rename to tests/cfgs/default/result/nntp.pcap.out diff --git a/tests/result/no_sni.pcap.out b/tests/cfgs/default/result/no_sni.pcap.out similarity index 100% rename from tests/result/no_sni.pcap.out rename to tests/cfgs/default/result/no_sni.pcap.out diff --git a/tests/result/ocs.pcap.out b/tests/cfgs/default/result/ocs.pcap.out similarity index 100% rename from tests/result/ocs.pcap.out rename to tests/cfgs/default/result/ocs.pcap.out diff --git a/tests/result/ocsp.pcapng.out b/tests/cfgs/default/result/ocsp.pcapng.out similarity index 100% rename from tests/result/ocsp.pcapng.out rename to tests/cfgs/default/result/ocsp.pcapng.out diff --git a/tests/result/ookla.pcap.out b/tests/cfgs/default/result/ookla.pcap.out similarity index 100% rename from tests/result/ookla.pcap.out rename to tests/cfgs/default/result/ookla.pcap.out diff --git a/tests/result/openvpn.pcap.out b/tests/cfgs/default/result/openvpn.pcap.out similarity index 100% rename from tests/result/openvpn.pcap.out rename to tests/cfgs/default/result/openvpn.pcap.out diff --git a/tests/result/oracle12.pcapng.out b/tests/cfgs/default/result/oracle12.pcapng.out similarity index 100% rename from tests/result/oracle12.pcapng.out rename to tests/cfgs/default/result/oracle12.pcapng.out diff --git a/tests/result/os_detected.pcapng.out b/tests/cfgs/default/result/os_detected.pcapng.out similarity index 100% rename from tests/result/os_detected.pcapng.out rename to tests/cfgs/default/result/os_detected.pcapng.out diff --git a/tests/result/ospfv2_add_new_prefix.pcap.out b/tests/cfgs/default/result/ospfv2_add_new_prefix.pcap.out similarity index 100% rename from tests/result/ospfv2_add_new_prefix.pcap.out rename to tests/cfgs/default/result/ospfv2_add_new_prefix.pcap.out diff --git a/tests/result/ossfuzz_seed_fake_traces_1.pcapng.out b/tests/cfgs/default/result/ossfuzz_seed_fake_traces_1.pcapng.out similarity index 100% rename from tests/result/ossfuzz_seed_fake_traces_1.pcapng.out rename to tests/cfgs/default/result/ossfuzz_seed_fake_traces_1.pcapng.out diff --git a/tests/result/ossfuzz_seed_fake_traces_2.pcapng.out b/tests/cfgs/default/result/ossfuzz_seed_fake_traces_2.pcapng.out similarity index 100% rename from tests/result/ossfuzz_seed_fake_traces_2.pcapng.out rename to tests/cfgs/default/result/ossfuzz_seed_fake_traces_2.pcapng.out diff --git a/tests/result/ossfuzz_seed_fake_traces_3.pcapng.out b/tests/cfgs/default/result/ossfuzz_seed_fake_traces_3.pcapng.out similarity index 100% rename from tests/result/ossfuzz_seed_fake_traces_3.pcapng.out rename to tests/cfgs/default/result/ossfuzz_seed_fake_traces_3.pcapng.out diff --git a/tests/result/ossfuzz_seed_fake_traces_4.pcapng.out b/tests/cfgs/default/result/ossfuzz_seed_fake_traces_4.pcapng.out similarity index 100% rename from tests/result/ossfuzz_seed_fake_traces_4.pcapng.out rename to tests/cfgs/default/result/ossfuzz_seed_fake_traces_4.pcapng.out diff --git a/tests/result/pgm.pcap.out b/tests/cfgs/default/result/pgm.pcap.out similarity index 100% rename from tests/result/pgm.pcap.out rename to tests/cfgs/default/result/pgm.pcap.out diff --git a/tests/result/pgsql.pcap.out b/tests/cfgs/default/result/pgsql.pcap.out similarity index 100% rename from tests/result/pgsql.pcap.out rename to tests/cfgs/default/result/pgsql.pcap.out diff --git a/tests/result/pim.pcap.out b/tests/cfgs/default/result/pim.pcap.out similarity index 100% rename from tests/result/pim.pcap.out rename to tests/cfgs/default/result/pim.pcap.out diff --git a/tests/result/pinterest.pcap.out b/tests/cfgs/default/result/pinterest.pcap.out similarity index 100% rename from tests/result/pinterest.pcap.out rename to tests/cfgs/default/result/pinterest.pcap.out diff --git a/tests/result/pluralsight.pcap.out b/tests/cfgs/default/result/pluralsight.pcap.out similarity index 100% rename from tests/result/pluralsight.pcap.out rename to tests/cfgs/default/result/pluralsight.pcap.out diff --git a/tests/result/pop3.pcap.out b/tests/cfgs/default/result/pop3.pcap.out similarity index 100% rename from tests/result/pop3.pcap.out rename to tests/cfgs/default/result/pop3.pcap.out diff --git a/tests/result/pop3_stls.pcap.out b/tests/cfgs/default/result/pop3_stls.pcap.out similarity index 100% rename from tests/result/pop3_stls.pcap.out rename to tests/cfgs/default/result/pop3_stls.pcap.out diff --git a/tests/result/pops.pcapng.out b/tests/cfgs/default/result/pops.pcapng.out similarity index 100% rename from tests/result/pops.pcapng.out rename to tests/cfgs/default/result/pops.pcapng.out diff --git a/tests/result/pps.pcap.out b/tests/cfgs/default/result/pps.pcap.out similarity index 100% rename from tests/result/pps.pcap.out rename to tests/cfgs/default/result/pps.pcap.out diff --git a/tests/result/pptp.pcap.out b/tests/cfgs/default/result/pptp.pcap.out similarity index 100% rename from tests/result/pptp.pcap.out rename to tests/cfgs/default/result/pptp.pcap.out diff --git a/tests/result/psiphon3.pcap.out b/tests/cfgs/default/result/psiphon3.pcap.out similarity index 100% rename from tests/result/psiphon3.pcap.out rename to tests/cfgs/default/result/psiphon3.pcap.out diff --git a/tests/result/punycode-idn.pcap.out b/tests/cfgs/default/result/punycode-idn.pcap.out similarity index 100% rename from tests/result/punycode-idn.pcap.out rename to tests/cfgs/default/result/punycode-idn.pcap.out diff --git a/tests/result/quic-23.pcap.out b/tests/cfgs/default/result/quic-23.pcap.out similarity index 100% rename from tests/result/quic-23.pcap.out rename to tests/cfgs/default/result/quic-23.pcap.out diff --git a/tests/result/quic-24.pcap.out b/tests/cfgs/default/result/quic-24.pcap.out similarity index 100% rename from tests/result/quic-24.pcap.out rename to tests/cfgs/default/result/quic-24.pcap.out diff --git a/tests/result/quic-27.pcap.out b/tests/cfgs/default/result/quic-27.pcap.out similarity index 100% rename from tests/result/quic-27.pcap.out rename to tests/cfgs/default/result/quic-27.pcap.out diff --git a/tests/result/quic-28.pcap.out b/tests/cfgs/default/result/quic-28.pcap.out similarity index 100% rename from tests/result/quic-28.pcap.out rename to tests/cfgs/default/result/quic-28.pcap.out diff --git a/tests/result/quic-29.pcap.out b/tests/cfgs/default/result/quic-29.pcap.out similarity index 100% rename from tests/result/quic-29.pcap.out rename to tests/cfgs/default/result/quic-29.pcap.out diff --git a/tests/result/quic-33.pcapng.out b/tests/cfgs/default/result/quic-33.pcapng.out similarity index 100% rename from tests/result/quic-33.pcapng.out rename to tests/cfgs/default/result/quic-33.pcapng.out diff --git a/tests/result/quic-34.pcap.out b/tests/cfgs/default/result/quic-34.pcap.out similarity index 100% rename from tests/result/quic-34.pcap.out rename to tests/cfgs/default/result/quic-34.pcap.out diff --git a/tests/result/quic-fuzz-overflow.pcapng.out b/tests/cfgs/default/result/quic-fuzz-overflow.pcapng.out similarity index 100% rename from tests/result/quic-fuzz-overflow.pcapng.out rename to tests/cfgs/default/result/quic-fuzz-overflow.pcapng.out diff --git a/tests/result/quic-mvfst-22.pcap.out b/tests/cfgs/default/result/quic-mvfst-22.pcap.out similarity index 100% rename from tests/result/quic-mvfst-22.pcap.out rename to tests/cfgs/default/result/quic-mvfst-22.pcap.out diff --git a/tests/result/quic-mvfst-22_decryption_error.pcap.out b/tests/cfgs/default/result/quic-mvfst-22_decryption_error.pcap.out similarity index 100% rename from tests/result/quic-mvfst-22_decryption_error.pcap.out rename to tests/cfgs/default/result/quic-mvfst-22_decryption_error.pcap.out diff --git a/tests/result/quic-mvfst-27.pcapng.out b/tests/cfgs/default/result/quic-mvfst-27.pcapng.out similarity index 100% rename from tests/result/quic-mvfst-27.pcapng.out rename to tests/cfgs/default/result/quic-mvfst-27.pcapng.out diff --git a/tests/result/quic-mvfst-exp.pcap.out b/tests/cfgs/default/result/quic-mvfst-exp.pcap.out similarity index 100% rename from tests/result/quic-mvfst-exp.pcap.out rename to tests/cfgs/default/result/quic-mvfst-exp.pcap.out diff --git a/tests/result/quic-v2-01.pcapng.out b/tests/cfgs/default/result/quic-v2-01.pcapng.out similarity index 100% rename from tests/result/quic-v2-01.pcapng.out rename to tests/cfgs/default/result/quic-v2-01.pcapng.out diff --git a/tests/result/quic.pcap.out b/tests/cfgs/default/result/quic.pcap.out similarity index 100% rename from tests/result/quic.pcap.out rename to tests/cfgs/default/result/quic.pcap.out diff --git a/tests/result/quic046.pcap.out b/tests/cfgs/default/result/quic046.pcap.out similarity index 100% rename from tests/result/quic046.pcap.out rename to tests/cfgs/default/result/quic046.pcap.out diff --git a/tests/result/quic_0RTT.pcap.out b/tests/cfgs/default/result/quic_0RTT.pcap.out similarity index 100% rename from tests/result/quic_0RTT.pcap.out rename to tests/cfgs/default/result/quic_0RTT.pcap.out diff --git a/tests/result/quic_crypto_aes_auth_size.pcap.out b/tests/cfgs/default/result/quic_crypto_aes_auth_size.pcap.out similarity index 100% rename from tests/result/quic_crypto_aes_auth_size.pcap.out rename to tests/cfgs/default/result/quic_crypto_aes_auth_size.pcap.out diff --git a/tests/result/quic_frags_ch_in_multiple_packets.pcapng.out b/tests/cfgs/default/result/quic_frags_ch_in_multiple_packets.pcapng.out similarity index 100% rename from tests/result/quic_frags_ch_in_multiple_packets.pcapng.out rename to tests/cfgs/default/result/quic_frags_ch_in_multiple_packets.pcapng.out diff --git a/tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out b/tests/cfgs/default/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out similarity index 100% rename from tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out rename to tests/cfgs/default/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out diff --git a/tests/result/quic_interop_V.pcapng.out b/tests/cfgs/default/result/quic_interop_V.pcapng.out similarity index 100% rename from tests/result/quic_interop_V.pcapng.out rename to tests/cfgs/default/result/quic_interop_V.pcapng.out diff --git a/tests/result/quic_q39.pcap.out b/tests/cfgs/default/result/quic_q39.pcap.out similarity index 100% rename from tests/result/quic_q39.pcap.out rename to tests/cfgs/default/result/quic_q39.pcap.out diff --git a/tests/result/quic_q43.pcap.out b/tests/cfgs/default/result/quic_q43.pcap.out similarity index 100% rename from tests/result/quic_q43.pcap.out rename to tests/cfgs/default/result/quic_q43.pcap.out diff --git a/tests/result/quic_q46.pcap.out b/tests/cfgs/default/result/quic_q46.pcap.out similarity index 100% rename from tests/result/quic_q46.pcap.out rename to tests/cfgs/default/result/quic_q46.pcap.out diff --git a/tests/result/quic_q46_b.pcap.out b/tests/cfgs/default/result/quic_q46_b.pcap.out similarity index 100% rename from tests/result/quic_q46_b.pcap.out rename to tests/cfgs/default/result/quic_q46_b.pcap.out diff --git a/tests/result/quic_q50.pcap.out b/tests/cfgs/default/result/quic_q50.pcap.out similarity index 100% rename from tests/result/quic_q50.pcap.out rename to tests/cfgs/default/result/quic_q50.pcap.out diff --git a/tests/result/quic_t50.pcap.out b/tests/cfgs/default/result/quic_t50.pcap.out similarity index 100% rename from tests/result/quic_t50.pcap.out rename to tests/cfgs/default/result/quic_t50.pcap.out diff --git a/tests/result/quic_t51.pcap.out b/tests/cfgs/default/result/quic_t51.pcap.out similarity index 100% rename from tests/result/quic_t51.pcap.out rename to tests/cfgs/default/result/quic_t51.pcap.out diff --git a/tests/result/quickplay.pcap.out b/tests/cfgs/default/result/quickplay.pcap.out similarity index 100% rename from tests/result/quickplay.pcap.out rename to tests/cfgs/default/result/quickplay.pcap.out diff --git a/tests/result/radius_false_positive.pcapng.out b/tests/cfgs/default/result/radius_false_positive.pcapng.out similarity index 100% rename from tests/result/radius_false_positive.pcapng.out rename to tests/cfgs/default/result/radius_false_positive.pcapng.out diff --git a/tests/result/raknet.pcap.out b/tests/cfgs/default/result/raknet.pcap.out similarity index 100% rename from tests/result/raknet.pcap.out rename to tests/cfgs/default/result/raknet.pcap.out diff --git a/tests/result/rdp.pcap.out b/tests/cfgs/default/result/rdp.pcap.out similarity index 100% rename from tests/result/rdp.pcap.out rename to tests/cfgs/default/result/rdp.pcap.out diff --git a/tests/result/reasm_crash_anon.pcapng.out b/tests/cfgs/default/result/reasm_crash_anon.pcapng.out similarity index 100% rename from tests/result/reasm_crash_anon.pcapng.out rename to tests/cfgs/default/result/reasm_crash_anon.pcapng.out diff --git a/tests/result/reasm_segv_anon.pcapng.out b/tests/cfgs/default/result/reasm_segv_anon.pcapng.out similarity index 100% rename from tests/result/reasm_segv_anon.pcapng.out rename to tests/cfgs/default/result/reasm_segv_anon.pcapng.out diff --git a/tests/result/reddit.pcap.out b/tests/cfgs/default/result/reddit.pcap.out similarity index 100% rename from tests/result/reddit.pcap.out rename to tests/cfgs/default/result/reddit.pcap.out diff --git a/tests/result/riotgames.pcap.out b/tests/cfgs/default/result/riotgames.pcap.out similarity index 100% rename from tests/result/riotgames.pcap.out rename to tests/cfgs/default/result/riotgames.pcap.out diff --git a/tests/result/rsh-syslog-false-positive.pcap.out b/tests/cfgs/default/result/rsh-syslog-false-positive.pcap.out similarity index 100% rename from tests/result/rsh-syslog-false-positive.pcap.out rename to tests/cfgs/default/result/rsh-syslog-false-positive.pcap.out diff --git a/tests/result/rsh.pcap.out b/tests/cfgs/default/result/rsh.pcap.out similarity index 100% rename from tests/result/rsh.pcap.out rename to tests/cfgs/default/result/rsh.pcap.out diff --git a/tests/result/rsync.pcap.out b/tests/cfgs/default/result/rsync.pcap.out similarity index 100% rename from tests/result/rsync.pcap.out rename to tests/cfgs/default/result/rsync.pcap.out diff --git a/tests/result/rtmp.pcap.out b/tests/cfgs/default/result/rtmp.pcap.out similarity index 100% rename from tests/result/rtmp.pcap.out rename to tests/cfgs/default/result/rtmp.pcap.out diff --git a/tests/result/rtsp.pcap.out b/tests/cfgs/default/result/rtsp.pcap.out similarity index 100% rename from tests/result/rtsp.pcap.out rename to tests/cfgs/default/result/rtsp.pcap.out diff --git a/tests/result/rtsp_setup_http.pcapng.out b/tests/cfgs/default/result/rtsp_setup_http.pcapng.out similarity index 100% rename from tests/result/rtsp_setup_http.pcapng.out rename to tests/cfgs/default/result/rtsp_setup_http.pcapng.out diff --git a/tests/result/rx.pcap.out b/tests/cfgs/default/result/rx.pcap.out similarity index 100% rename from tests/result/rx.pcap.out rename to tests/cfgs/default/result/rx.pcap.out diff --git a/tests/result/s7comm.pcap.out b/tests/cfgs/default/result/s7comm.pcap.out similarity index 100% rename from tests/result/s7comm.pcap.out rename to tests/cfgs/default/result/s7comm.pcap.out diff --git a/tests/result/safari.pcap.out b/tests/cfgs/default/result/safari.pcap.out similarity index 100% rename from tests/result/safari.pcap.out rename to tests/cfgs/default/result/safari.pcap.out diff --git a/tests/result/salesforce.pcap.out b/tests/cfgs/default/result/salesforce.pcap.out similarity index 100% rename from tests/result/salesforce.pcap.out rename to tests/cfgs/default/result/salesforce.pcap.out diff --git a/tests/result/sccp_hw_conf_register.pcapng.out b/tests/cfgs/default/result/sccp_hw_conf_register.pcapng.out similarity index 100% rename from tests/result/sccp_hw_conf_register.pcapng.out rename to tests/cfgs/default/result/sccp_hw_conf_register.pcapng.out diff --git a/tests/result/sctp.cap.out b/tests/cfgs/default/result/sctp.cap.out similarity index 100% rename from tests/result/sctp.cap.out rename to tests/cfgs/default/result/sctp.cap.out diff --git a/tests/result/selfsigned.pcap.out b/tests/cfgs/default/result/selfsigned.pcap.out similarity index 100% rename from tests/result/selfsigned.pcap.out rename to tests/cfgs/default/result/selfsigned.pcap.out diff --git a/tests/result/sflow.pcap.out b/tests/cfgs/default/result/sflow.pcap.out similarity index 100% rename from tests/result/sflow.pcap.out rename to tests/cfgs/default/result/sflow.pcap.out diff --git a/tests/result/signal.pcap.out b/tests/cfgs/default/result/signal.pcap.out similarity index 100% rename from tests/result/signal.pcap.out rename to tests/cfgs/default/result/signal.pcap.out diff --git a/tests/result/simple-dnscrypt.pcap.out b/tests/cfgs/default/result/simple-dnscrypt.pcap.out similarity index 100% rename from tests/result/simple-dnscrypt.pcap.out rename to tests/cfgs/default/result/simple-dnscrypt.pcap.out diff --git a/tests/result/sip.pcap.out b/tests/cfgs/default/result/sip.pcap.out similarity index 100% rename from tests/result/sip.pcap.out rename to tests/cfgs/default/result/sip.pcap.out diff --git a/tests/result/sip_hello.pcapng.out b/tests/cfgs/default/result/sip_hello.pcapng.out similarity index 100% rename from tests/result/sip_hello.pcapng.out rename to tests/cfgs/default/result/sip_hello.pcapng.out diff --git a/tests/result/sites.pcapng.out b/tests/cfgs/default/result/sites.pcapng.out similarity index 100% rename from tests/result/sites.pcapng.out rename to tests/cfgs/default/result/sites.pcapng.out diff --git a/tests/result/skinny.pcap.out b/tests/cfgs/default/result/skinny.pcap.out similarity index 100% rename from tests/result/skinny.pcap.out rename to tests/cfgs/default/result/skinny.pcap.out diff --git a/tests/result/skype-conference-call.pcap.out b/tests/cfgs/default/result/skype-conference-call.pcap.out similarity index 100% rename from tests/result/skype-conference-call.pcap.out rename to tests/cfgs/default/result/skype-conference-call.pcap.out diff --git a/tests/result/skype.pcap.out b/tests/cfgs/default/result/skype.pcap.out similarity index 100% rename from tests/result/skype.pcap.out rename to tests/cfgs/default/result/skype.pcap.out diff --git a/tests/result/skype_no_unknown.pcap.out b/tests/cfgs/default/result/skype_no_unknown.pcap.out similarity index 100% rename from tests/result/skype_no_unknown.pcap.out rename to tests/cfgs/default/result/skype_no_unknown.pcap.out diff --git a/tests/result/skype_udp.pcap.out b/tests/cfgs/default/result/skype_udp.pcap.out similarity index 100% rename from tests/result/skype_udp.pcap.out rename to tests/cfgs/default/result/skype_udp.pcap.out diff --git a/tests/result/smb_deletefile.pcap.out b/tests/cfgs/default/result/smb_deletefile.pcap.out similarity index 100% rename from tests/result/smb_deletefile.pcap.out rename to tests/cfgs/default/result/smb_deletefile.pcap.out diff --git a/tests/result/smb_frags.pcap.out b/tests/cfgs/default/result/smb_frags.pcap.out similarity index 100% rename from tests/result/smb_frags.pcap.out rename to tests/cfgs/default/result/smb_frags.pcap.out diff --git a/tests/result/smbv1.pcap.out b/tests/cfgs/default/result/smbv1.pcap.out similarity index 100% rename from tests/result/smbv1.pcap.out rename to tests/cfgs/default/result/smbv1.pcap.out diff --git a/tests/result/smpp_in_general.pcap.out b/tests/cfgs/default/result/smpp_in_general.pcap.out similarity index 100% rename from tests/result/smpp_in_general.pcap.out rename to tests/cfgs/default/result/smpp_in_general.pcap.out diff --git a/tests/result/smtp-starttls.pcap.out b/tests/cfgs/default/result/smtp-starttls.pcap.out similarity index 100% rename from tests/result/smtp-starttls.pcap.out rename to tests/cfgs/default/result/smtp-starttls.pcap.out diff --git a/tests/result/smtp.pcap.out b/tests/cfgs/default/result/smtp.pcap.out similarity index 100% rename from tests/result/smtp.pcap.out rename to tests/cfgs/default/result/smtp.pcap.out diff --git a/tests/result/smtps.pcapng.out b/tests/cfgs/default/result/smtps.pcapng.out similarity index 100% rename from tests/result/smtps.pcapng.out rename to tests/cfgs/default/result/smtps.pcapng.out diff --git a/tests/result/snapchat.pcap.out b/tests/cfgs/default/result/snapchat.pcap.out similarity index 100% rename from tests/result/snapchat.pcap.out rename to tests/cfgs/default/result/snapchat.pcap.out diff --git a/tests/result/snapchat_call.pcapng.out b/tests/cfgs/default/result/snapchat_call.pcapng.out similarity index 100% rename from tests/result/snapchat_call.pcapng.out rename to tests/cfgs/default/result/snapchat_call.pcapng.out diff --git a/tests/result/snapchat_call_v1.pcapng.out b/tests/cfgs/default/result/snapchat_call_v1.pcapng.out similarity index 100% rename from tests/result/snapchat_call_v1.pcapng.out rename to tests/cfgs/default/result/snapchat_call_v1.pcapng.out diff --git a/tests/result/snmp.pcap.out b/tests/cfgs/default/result/snmp.pcap.out similarity index 100% rename from tests/result/snmp.pcap.out rename to tests/cfgs/default/result/snmp.pcap.out diff --git a/tests/result/soap.pcap.out b/tests/cfgs/default/result/soap.pcap.out similarity index 100% rename from tests/result/soap.pcap.out rename to tests/cfgs/default/result/soap.pcap.out diff --git a/tests/result/socks-http-example.pcap.out b/tests/cfgs/default/result/socks-http-example.pcap.out similarity index 100% rename from tests/result/socks-http-example.pcap.out rename to tests/cfgs/default/result/socks-http-example.pcap.out diff --git a/tests/result/softether.pcap.out b/tests/cfgs/default/result/softether.pcap.out similarity index 100% rename from tests/result/softether.pcap.out rename to tests/cfgs/default/result/softether.pcap.out diff --git a/tests/result/someip-tp.pcap.out b/tests/cfgs/default/result/someip-tp.pcap.out similarity index 100% rename from tests/result/someip-tp.pcap.out rename to tests/cfgs/default/result/someip-tp.pcap.out diff --git a/tests/result/someip-udp-method-call.pcapng.out b/tests/cfgs/default/result/someip-udp-method-call.pcapng.out similarity index 100% rename from tests/result/someip-udp-method-call.pcapng.out rename to tests/cfgs/default/result/someip-udp-method-call.pcapng.out diff --git a/tests/result/someip_sd_sample.pcap.out b/tests/cfgs/default/result/someip_sd_sample.pcap.out similarity index 100% rename from tests/result/someip_sd_sample.pcap.out rename to tests/cfgs/default/result/someip_sd_sample.pcap.out diff --git a/tests/result/sql_injection.pcap.out b/tests/cfgs/default/result/sql_injection.pcap.out similarity index 100% rename from tests/result/sql_injection.pcap.out rename to tests/cfgs/default/result/sql_injection.pcap.out diff --git a/tests/result/ssdp-m-search-ua.pcap.out b/tests/cfgs/default/result/ssdp-m-search-ua.pcap.out similarity index 100% rename from tests/result/ssdp-m-search-ua.pcap.out rename to tests/cfgs/default/result/ssdp-m-search-ua.pcap.out diff --git a/tests/result/ssdp-m-search.pcap.out b/tests/cfgs/default/result/ssdp-m-search.pcap.out similarity index 100% rename from tests/result/ssdp-m-search.pcap.out rename to tests/cfgs/default/result/ssdp-m-search.pcap.out diff --git a/tests/result/ssh.pcap.out b/tests/cfgs/default/result/ssh.pcap.out similarity index 100% rename from tests/result/ssh.pcap.out rename to tests/cfgs/default/result/ssh.pcap.out diff --git a/tests/result/ssl-cert-name-mismatch.pcap.out b/tests/cfgs/default/result/ssl-cert-name-mismatch.pcap.out similarity index 100% rename from tests/result/ssl-cert-name-mismatch.pcap.out rename to tests/cfgs/default/result/ssl-cert-name-mismatch.pcap.out diff --git a/tests/result/starcraft_battle.pcap.out b/tests/cfgs/default/result/starcraft_battle.pcap.out similarity index 100% rename from tests/result/starcraft_battle.pcap.out rename to tests/cfgs/default/result/starcraft_battle.pcap.out diff --git a/tests/result/steam.pcap.out b/tests/cfgs/default/result/steam.pcap.out similarity index 100% rename from tests/result/steam.pcap.out rename to tests/cfgs/default/result/steam.pcap.out diff --git a/tests/result/steam_datagram_relay_ping.pcapng.out b/tests/cfgs/default/result/steam_datagram_relay_ping.pcapng.out similarity index 100% rename from tests/result/steam_datagram_relay_ping.pcapng.out rename to tests/cfgs/default/result/steam_datagram_relay_ping.pcapng.out diff --git a/tests/result/stun.pcap.out b/tests/cfgs/default/result/stun.pcap.out similarity index 100% rename from tests/result/stun.pcap.out rename to tests/cfgs/default/result/stun.pcap.out diff --git a/tests/result/stun_signal.pcapng.out b/tests/cfgs/default/result/stun_signal.pcapng.out similarity index 100% rename from tests/result/stun_signal.pcapng.out rename to tests/cfgs/default/result/stun_signal.pcapng.out diff --git a/tests/result/syncthing.pcap.out b/tests/cfgs/default/result/syncthing.pcap.out similarity index 100% rename from tests/result/syncthing.pcap.out rename to tests/cfgs/default/result/syncthing.pcap.out diff --git a/tests/result/synscan.pcap.out b/tests/cfgs/default/result/synscan.pcap.out similarity index 100% rename from tests/result/synscan.pcap.out rename to tests/cfgs/default/result/synscan.pcap.out diff --git a/tests/result/syslog.pcap.out b/tests/cfgs/default/result/syslog.pcap.out similarity index 100% rename from tests/result/syslog.pcap.out rename to tests/cfgs/default/result/syslog.pcap.out diff --git a/tests/result/tailscale.pcap.out b/tests/cfgs/default/result/tailscale.pcap.out similarity index 100% rename from tests/result/tailscale.pcap.out rename to tests/cfgs/default/result/tailscale.pcap.out diff --git a/tests/result/targusdataspeed_false_positives.pcap.out b/tests/cfgs/default/result/targusdataspeed_false_positives.pcap.out similarity index 100% rename from tests/result/targusdataspeed_false_positives.pcap.out rename to tests/cfgs/default/result/targusdataspeed_false_positives.pcap.out diff --git a/tests/result/tcp_scan.pcapng.out b/tests/cfgs/default/result/tcp_scan.pcapng.out similarity index 100% rename from tests/result/tcp_scan.pcapng.out rename to tests/cfgs/default/result/tcp_scan.pcapng.out diff --git a/tests/result/teams.pcap.out b/tests/cfgs/default/result/teams.pcap.out similarity index 100% rename from tests/result/teams.pcap.out rename to tests/cfgs/default/result/teams.pcap.out diff --git a/tests/result/teamspeak3.pcap.out b/tests/cfgs/default/result/teamspeak3.pcap.out similarity index 100% rename from tests/result/teamspeak3.pcap.out rename to tests/cfgs/default/result/teamspeak3.pcap.out diff --git a/tests/result/teamviewer.pcap.out b/tests/cfgs/default/result/teamviewer.pcap.out similarity index 100% rename from tests/result/teamviewer.pcap.out rename to tests/cfgs/default/result/teamviewer.pcap.out diff --git a/tests/result/telegram.pcap.out b/tests/cfgs/default/result/telegram.pcap.out similarity index 100% rename from tests/result/telegram.pcap.out rename to tests/cfgs/default/result/telegram.pcap.out diff --git a/tests/result/telnet.pcap.out b/tests/cfgs/default/result/telnet.pcap.out similarity index 100% rename from tests/result/telnet.pcap.out rename to tests/cfgs/default/result/telnet.pcap.out diff --git a/tests/result/teredo.pcap.out b/tests/cfgs/default/result/teredo.pcap.out similarity index 100% rename from tests/result/teredo.pcap.out rename to tests/cfgs/default/result/teredo.pcap.out diff --git a/tests/result/tftp.pcap.out b/tests/cfgs/default/result/tftp.pcap.out similarity index 100% rename from tests/result/tftp.pcap.out rename to tests/cfgs/default/result/tftp.pcap.out diff --git a/tests/result/threema.pcap.out b/tests/cfgs/default/result/threema.pcap.out similarity index 100% rename from tests/result/threema.pcap.out rename to tests/cfgs/default/result/threema.pcap.out diff --git a/tests/result/tinc.pcap.out b/tests/cfgs/default/result/tinc.pcap.out similarity index 100% rename from tests/result/tinc.pcap.out rename to tests/cfgs/default/result/tinc.pcap.out diff --git a/tests/result/tk.pcap.out b/tests/cfgs/default/result/tk.pcap.out similarity index 100% rename from tests/result/tk.pcap.out rename to tests/cfgs/default/result/tk.pcap.out diff --git a/tests/result/tls-appdata.pcap.out b/tests/cfgs/default/result/tls-appdata.pcap.out similarity index 100% rename from tests/result/tls-appdata.pcap.out rename to tests/cfgs/default/result/tls-appdata.pcap.out diff --git a/tests/result/tls-esni-fuzzed.pcap.out b/tests/cfgs/default/result/tls-esni-fuzzed.pcap.out similarity index 100% rename from tests/result/tls-esni-fuzzed.pcap.out rename to tests/cfgs/default/result/tls-esni-fuzzed.pcap.out diff --git a/tests/result/tls-rdn-extract.pcap.out b/tests/cfgs/default/result/tls-rdn-extract.pcap.out similarity index 100% rename from tests/result/tls-rdn-extract.pcap.out rename to tests/cfgs/default/result/tls-rdn-extract.pcap.out diff --git a/tests/result/tls_2_reasms.pcapng.out b/tests/cfgs/default/result/tls_2_reasms.pcapng.out similarity index 100% rename from tests/result/tls_2_reasms.pcapng.out rename to tests/cfgs/default/result/tls_2_reasms.pcapng.out diff --git a/tests/result/tls_2_reasms_b.pcapng.out b/tests/cfgs/default/result/tls_2_reasms_b.pcapng.out similarity index 100% rename from tests/result/tls_2_reasms_b.pcapng.out rename to tests/cfgs/default/result/tls_2_reasms_b.pcapng.out diff --git a/tests/result/tls_alert.pcap.out b/tests/cfgs/default/result/tls_alert.pcap.out similarity index 100% rename from tests/result/tls_alert.pcap.out rename to tests/cfgs/default/result/tls_alert.pcap.out diff --git a/tests/result/tls_certificate_too_long.pcap.out b/tests/cfgs/default/result/tls_certificate_too_long.pcap.out similarity index 100% rename from tests/result/tls_certificate_too_long.pcap.out rename to tests/cfgs/default/result/tls_certificate_too_long.pcap.out diff --git a/tests/result/tls_cipher_lens.pcap.out b/tests/cfgs/default/result/tls_cipher_lens.pcap.out similarity index 100% rename from tests/result/tls_cipher_lens.pcap.out rename to tests/cfgs/default/result/tls_cipher_lens.pcap.out diff --git a/tests/result/tls_client_certificate_with_missing_server_one.pcapng.out b/tests/cfgs/default/result/tls_client_certificate_with_missing_server_one.pcapng.out similarity index 100% rename from tests/result/tls_client_certificate_with_missing_server_one.pcapng.out rename to tests/cfgs/default/result/tls_client_certificate_with_missing_server_one.pcapng.out diff --git a/tests/result/tls_esni_sni_both.pcap.out b/tests/cfgs/default/result/tls_esni_sni_both.pcap.out similarity index 100% rename from tests/result/tls_esni_sni_both.pcap.out rename to tests/cfgs/default/result/tls_esni_sni_both.pcap.out diff --git a/tests/result/tls_false_positives.pcapng.out b/tests/cfgs/default/result/tls_false_positives.pcapng.out similarity index 100% rename from tests/result/tls_false_positives.pcapng.out rename to tests/cfgs/default/result/tls_false_positives.pcapng.out diff --git a/tests/result/tls_invalid_reads.pcap.out b/tests/cfgs/default/result/tls_invalid_reads.pcap.out similarity index 100% rename from tests/result/tls_invalid_reads.pcap.out rename to tests/cfgs/default/result/tls_invalid_reads.pcap.out diff --git a/tests/result/tls_long_cert.pcap.out b/tests/cfgs/default/result/tls_long_cert.pcap.out similarity index 100% rename from tests/result/tls_long_cert.pcap.out rename to tests/cfgs/default/result/tls_long_cert.pcap.out diff --git a/tests/result/tls_missing_ch_frag.pcap.out b/tests/cfgs/default/result/tls_missing_ch_frag.pcap.out similarity index 100% rename from tests/result/tls_missing_ch_frag.pcap.out rename to tests/cfgs/default/result/tls_missing_ch_frag.pcap.out diff --git a/tests/result/tls_multiple_synack_different_seq.pcapng.out b/tests/cfgs/default/result/tls_multiple_synack_different_seq.pcapng.out similarity index 100% rename from tests/result/tls_multiple_synack_different_seq.pcapng.out rename to tests/cfgs/default/result/tls_multiple_synack_different_seq.pcapng.out diff --git a/tests/result/tls_port_80.pcapng.out b/tests/cfgs/default/result/tls_port_80.pcapng.out similarity index 100% rename from tests/result/tls_port_80.pcapng.out rename to tests/cfgs/default/result/tls_port_80.pcapng.out diff --git a/tests/result/tls_torrent.pcapng.out b/tests/cfgs/default/result/tls_torrent.pcapng.out similarity index 100% rename from tests/result/tls_torrent.pcapng.out rename to tests/cfgs/default/result/tls_torrent.pcapng.out diff --git a/tests/result/tls_unidirectional.pcap.out b/tests/cfgs/default/result/tls_unidirectional.pcap.out similarity index 100% rename from tests/result/tls_unidirectional.pcap.out rename to tests/cfgs/default/result/tls_unidirectional.pcap.out diff --git a/tests/result/tls_verylong_certificate.pcap.out b/tests/cfgs/default/result/tls_verylong_certificate.pcap.out similarity index 100% rename from tests/result/tls_verylong_certificate.pcap.out rename to tests/cfgs/default/result/tls_verylong_certificate.pcap.out diff --git a/tests/result/toca-boca.pcap.out b/tests/cfgs/default/result/toca-boca.pcap.out similarity index 100% rename from tests/result/toca-boca.pcap.out rename to tests/cfgs/default/result/toca-boca.pcap.out diff --git a/tests/result/tor.pcap.out b/tests/cfgs/default/result/tor.pcap.out similarity index 100% rename from tests/result/tor.pcap.out rename to tests/cfgs/default/result/tor.pcap.out diff --git a/tests/result/tplink_shp.pcap.out b/tests/cfgs/default/result/tplink_shp.pcap.out similarity index 100% rename from tests/result/tplink_shp.pcap.out rename to tests/cfgs/default/result/tplink_shp.pcap.out diff --git a/tests/result/trickbot.pcap.out b/tests/cfgs/default/result/trickbot.pcap.out similarity index 100% rename from tests/result/trickbot.pcap.out rename to tests/cfgs/default/result/trickbot.pcap.out diff --git a/tests/result/tumblr.pcap.out b/tests/cfgs/default/result/tumblr.pcap.out similarity index 100% rename from tests/result/tumblr.pcap.out rename to tests/cfgs/default/result/tumblr.pcap.out diff --git a/tests/result/tunnelbear.pcap.out b/tests/cfgs/default/result/tunnelbear.pcap.out similarity index 100% rename from tests/result/tunnelbear.pcap.out rename to tests/cfgs/default/result/tunnelbear.pcap.out diff --git a/tests/result/tuya_lp.pcap.out b/tests/cfgs/default/result/tuya_lp.pcap.out similarity index 100% rename from tests/result/tuya_lp.pcap.out rename to tests/cfgs/default/result/tuya_lp.pcap.out diff --git a/tests/result/ubntac2.pcap.out b/tests/cfgs/default/result/ubntac2.pcap.out similarity index 100% rename from tests/result/ubntac2.pcap.out rename to tests/cfgs/default/result/ubntac2.pcap.out diff --git a/tests/result/ultrasurf.pcap.out b/tests/cfgs/default/result/ultrasurf.pcap.out similarity index 100% rename from tests/result/ultrasurf.pcap.out rename to tests/cfgs/default/result/ultrasurf.pcap.out diff --git a/tests/result/upnp.pcap.out b/tests/cfgs/default/result/upnp.pcap.out similarity index 100% rename from tests/result/upnp.pcap.out rename to tests/cfgs/default/result/upnp.pcap.out diff --git a/tests/result/viber.pcap.out b/tests/cfgs/default/result/viber.pcap.out similarity index 100% rename from tests/result/viber.pcap.out rename to tests/cfgs/default/result/viber.pcap.out diff --git a/tests/result/vk.pcapng.out b/tests/cfgs/default/result/vk.pcapng.out similarity index 100% rename from tests/result/vk.pcapng.out rename to tests/cfgs/default/result/vk.pcapng.out diff --git a/tests/result/vnc.pcap.out b/tests/cfgs/default/result/vnc.pcap.out similarity index 100% rename from tests/result/vnc.pcap.out rename to tests/cfgs/default/result/vnc.pcap.out diff --git a/tests/result/vrrp3.pcapng.out b/tests/cfgs/default/result/vrrp3.pcapng.out similarity index 100% rename from tests/result/vrrp3.pcapng.out rename to tests/cfgs/default/result/vrrp3.pcapng.out diff --git a/tests/result/vxlan.pcap.out b/tests/cfgs/default/result/vxlan.pcap.out similarity index 100% rename from tests/result/vxlan.pcap.out rename to tests/cfgs/default/result/vxlan.pcap.out diff --git a/tests/result/wa_video.pcap.out b/tests/cfgs/default/result/wa_video.pcap.out similarity index 100% rename from tests/result/wa_video.pcap.out rename to tests/cfgs/default/result/wa_video.pcap.out diff --git a/tests/result/wa_voice.pcap.out b/tests/cfgs/default/result/wa_voice.pcap.out similarity index 100% rename from tests/result/wa_voice.pcap.out rename to tests/cfgs/default/result/wa_voice.pcap.out diff --git a/tests/result/waze.pcap.out b/tests/cfgs/default/result/waze.pcap.out similarity index 100% rename from tests/result/waze.pcap.out rename to tests/cfgs/default/result/waze.pcap.out diff --git a/tests/result/webex.pcap.out b/tests/cfgs/default/result/webex.pcap.out similarity index 100% rename from tests/result/webex.pcap.out rename to tests/cfgs/default/result/webex.pcap.out diff --git a/tests/result/websocket.pcap.out b/tests/cfgs/default/result/websocket.pcap.out similarity index 100% rename from tests/result/websocket.pcap.out rename to tests/cfgs/default/result/websocket.pcap.out diff --git a/tests/result/wechat.pcap.out b/tests/cfgs/default/result/wechat.pcap.out similarity index 100% rename from tests/result/wechat.pcap.out rename to tests/cfgs/default/result/wechat.pcap.out diff --git a/tests/result/weibo.pcap.out b/tests/cfgs/default/result/weibo.pcap.out similarity index 100% rename from tests/result/weibo.pcap.out rename to tests/cfgs/default/result/weibo.pcap.out diff --git a/tests/result/whatsapp.pcap.out b/tests/cfgs/default/result/whatsapp.pcap.out similarity index 100% rename from tests/result/whatsapp.pcap.out rename to tests/cfgs/default/result/whatsapp.pcap.out diff --git a/tests/result/whatsapp_login_call.pcap.out b/tests/cfgs/default/result/whatsapp_login_call.pcap.out similarity index 100% rename from tests/result/whatsapp_login_call.pcap.out rename to tests/cfgs/default/result/whatsapp_login_call.pcap.out diff --git a/tests/result/whatsapp_login_chat.pcap.out b/tests/cfgs/default/result/whatsapp_login_chat.pcap.out similarity index 100% rename from tests/result/whatsapp_login_chat.pcap.out rename to tests/cfgs/default/result/whatsapp_login_chat.pcap.out diff --git a/tests/result/whatsapp_voice_and_message.pcap.out b/tests/cfgs/default/result/whatsapp_voice_and_message.pcap.out similarity index 100% rename from tests/result/whatsapp_voice_and_message.pcap.out rename to tests/cfgs/default/result/whatsapp_voice_and_message.pcap.out diff --git a/tests/result/whatsappfiles.pcap.out b/tests/cfgs/default/result/whatsappfiles.pcap.out similarity index 100% rename from tests/result/whatsappfiles.pcap.out rename to tests/cfgs/default/result/whatsappfiles.pcap.out diff --git a/tests/result/whois.pcapng.out b/tests/cfgs/default/result/whois.pcapng.out similarity index 100% rename from tests/result/whois.pcapng.out rename to tests/cfgs/default/result/whois.pcapng.out diff --git a/tests/result/windowsupdate_over_http.pcap.out b/tests/cfgs/default/result/windowsupdate_over_http.pcap.out similarity index 100% rename from tests/result/windowsupdate_over_http.pcap.out rename to tests/cfgs/default/result/windowsupdate_over_http.pcap.out diff --git a/tests/result/wireguard.pcap.out b/tests/cfgs/default/result/wireguard.pcap.out similarity index 100% rename from tests/result/wireguard.pcap.out rename to tests/cfgs/default/result/wireguard.pcap.out diff --git a/tests/result/wow.pcap.out b/tests/cfgs/default/result/wow.pcap.out similarity index 100% rename from tests/result/wow.pcap.out rename to tests/cfgs/default/result/wow.pcap.out diff --git a/tests/result/xdmcp.pcap.out b/tests/cfgs/default/result/xdmcp.pcap.out similarity index 100% rename from tests/result/xdmcp.pcap.out rename to tests/cfgs/default/result/xdmcp.pcap.out diff --git a/tests/result/xiaomi.pcap.out b/tests/cfgs/default/result/xiaomi.pcap.out similarity index 100% rename from tests/result/xiaomi.pcap.out rename to tests/cfgs/default/result/xiaomi.pcap.out diff --git a/tests/result/xss.pcap.out b/tests/cfgs/default/result/xss.pcap.out similarity index 100% rename from tests/result/xss.pcap.out rename to tests/cfgs/default/result/xss.pcap.out diff --git a/tests/result/yandex.pcapng.out b/tests/cfgs/default/result/yandex.pcapng.out similarity index 100% rename from tests/result/yandex.pcapng.out rename to tests/cfgs/default/result/yandex.pcapng.out diff --git a/tests/result/youtube_quic.pcap.out b/tests/cfgs/default/result/youtube_quic.pcap.out similarity index 100% rename from tests/result/youtube_quic.pcap.out rename to tests/cfgs/default/result/youtube_quic.pcap.out diff --git a/tests/result/youtubeupload.pcap.out b/tests/cfgs/default/result/youtubeupload.pcap.out similarity index 100% rename from tests/result/youtubeupload.pcap.out rename to tests/cfgs/default/result/youtubeupload.pcap.out diff --git a/tests/result/z3950.pcapng.out b/tests/cfgs/default/result/z3950.pcapng.out similarity index 100% rename from tests/result/z3950.pcapng.out rename to tests/cfgs/default/result/z3950.pcapng.out diff --git a/tests/result/zabbix.pcap.out b/tests/cfgs/default/result/zabbix.pcap.out similarity index 100% rename from tests/result/zabbix.pcap.out rename to tests/cfgs/default/result/zabbix.pcap.out diff --git a/tests/result/zattoo.pcap.out b/tests/cfgs/default/result/zattoo.pcap.out similarity index 100% rename from tests/result/zattoo.pcap.out rename to tests/cfgs/default/result/zattoo.pcap.out diff --git a/tests/result/zcash.pcap.out b/tests/cfgs/default/result/zcash.pcap.out similarity index 100% rename from tests/result/zcash.pcap.out rename to tests/cfgs/default/result/zcash.pcap.out diff --git a/tests/result/zoom.pcap.out b/tests/cfgs/default/result/zoom.pcap.out similarity index 100% rename from tests/result/zoom.pcap.out rename to tests/cfgs/default/result/zoom.pcap.out diff --git a/tests/result/zoom2.pcap.out b/tests/cfgs/default/result/zoom2.pcap.out similarity index 100% rename from tests/result/zoom2.pcap.out rename to tests/cfgs/default/result/zoom2.pcap.out diff --git a/tests/result/zoom_p2p.pcapng.out b/tests/cfgs/default/result/zoom_p2p.pcapng.out similarity index 100% rename from tests/result/zoom_p2p.pcapng.out rename to tests/cfgs/default/result/zoom_p2p.pcapng.out diff --git a/tests/cfgs/disable_aggressiveness/config.txt b/tests/cfgs/disable_aggressiveness/config.txt new file mode 100644 index 00000000000..1504f51be82 --- /dev/null +++ b/tests/cfgs/disable_aggressiveness/config.txt @@ -0,0 +1 @@ +-Z ookla:0 diff --git a/tests/cfgs/disable_aggressiveness/pcap/ookla.pcap b/tests/cfgs/disable_aggressiveness/pcap/ookla.pcap new file mode 120000 index 00000000000..7887844d72b --- /dev/null +++ b/tests/cfgs/disable_aggressiveness/pcap/ookla.pcap @@ -0,0 +1 @@ +../../default/pcap/ookla.pcap \ No newline at end of file diff --git a/tests/cfgs/disable_aggressiveness/result/ookla.pcap.out b/tests/cfgs/disable_aggressiveness/result/ookla.pcap.out new file mode 100644 index 00000000000..10f18549914 --- /dev/null +++ b/tests/cfgs/disable_aggressiveness/result/ookla.pcap.out @@ -0,0 +1,37 @@ +Guessed flow protos: 1 + +DPI Packets (TCP): 46 (7.67 pkts/flow) +Confidence DPI (partial cache): 1 (flows) +Confidence DPI : 5 (flows) +Num dissector calls: 488 (81.33 diss/flow) +LRU cache ookla: 6/1/1 (insert/search/found) +LRU cache bittorrent: 0/3/0 (insert/search/found) +LRU cache zoom: 0/0/0 (insert/search/found) +LRU cache stun: 0/0/0 (insert/search/found) +LRU cache tls_cert: 0/2/0 (insert/search/found) +LRU cache mining: 0/1/0 (insert/search/found) +LRU cache msteams: 0/0/0 (insert/search/found) +LRU cache stun_zoom: 0/0/0 (insert/search/found) +Automa host: 2/1 (search/found) +Automa domain: 2/0 (search/found) +Automa tls cert: 0/0 (search/found) +Automa risk mask: 1/0 (search/found) +Automa common alpns: 4/4 (search/found) +Patricia risk mask: 12/0 (search/found) +Patricia risk: 0/0 (search/found) +Patricia protocols: 11/1 (search/found) + +TLS 29 23166 1 +Ookla 84 15245 5 + +JA3 Host Stats: + IP Address # JA3C + 1 192.168.1.128 2 + + + 1 TCP 192.168.1.128:35830 <-> 89.96.108.170:8080 [proto: 91/TLS][IP: 0/Unknown][Encrypted][Confidence: DPI][DPI packets: 6][cat: Web/5][21 pkts/21216 bytes <-> 8 pkts/1950 bytes][Goodput ratio: 93/72][0.32 sec][Hostname/SNI: spd-pub-mi-01-01.fastwebnet.it][(Advertised) ALPNs: h2;http/1.1][TLS Supported Versions: TLSv1.3;TLSv1.2][bytes ratio: 0.832 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/0 17/61 274/280 62/109][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 1010/244 1514/387 612/138][Risk: ** Known Proto on Non Std Port **][Risk Score: 50][Risk Info: Expected on port 443][TLSv1.3][JA3C: c279b0189edb9269da7bc43dea5e0c36][JA3S: fcb2d4d0991292272fcb1e464eedfd43][Firefox][Cipher: TLS_AES_128_GCM_SHA256][Plen Bins: 0,0,4,0,0,0,0,4,9,0,9,0,0,0,0,0,4,0,0,13,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,55,0,0] + 2 TCP 192.168.1.128:48854 <-> 104.16.209.12:443 [proto: 91.191/TLS.Ookla][IP: 220/Cloudflare][Encrypted][Confidence: DPI][DPI packets: 6][cat: Network/14][8 pkts/1620 bytes <-> 6 pkts/3818 bytes][Goodput ratio: 67/89][0.06 sec][Hostname/SNI: www.speedtest.net][(Advertised) ALPNs: h2;http/1.1][TLS Supported Versions: TLSv1.3;TLSv1.2][bytes ratio: -0.404 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 7/5 18/15 7/6][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 202/636 583/1514 181/646][TLSv1.3][JA3C: 579ccef312d18482fc42e2b822ca2430][JA3S: eb1d94daa7e0344597e756a1fb6e7054][Firefox][Cipher: TLS_AES_128_GCM_SHA256][PLAIN TEXT (@oTAgOeedtest.net)][Plen Bins: 0,0,14,0,0,14,0,0,0,0,14,0,0,0,0,0,28,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,28,0,0] + 3 TCP 192.168.1.7:51207 <-> 46.44.253.187:80 [proto: 7.191/HTTP.Ookla][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 12][cat: Network/14][12 pkts/2238 bytes <-> 8 pkts/2082 bytes][Goodput ratio: 64/74][5.33 sec][bytes ratio: 0.036 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/4 528/47 5005/84 1493/28][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 186/260 430/523 168/194][Risk: ** HTTP Susp User-Agent **** HTTP Obsolete Server **][Risk Score: 150][Risk Info: Obsolete Apache server 2.2.22 / Empty or missing User-Agent][PLAIN TEXT (GET /crossdomain.xml HTTP/1.1)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,12,75,0,0,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 4 TCP 192.168.1.192:51156 <-> 89.96.108.170:8080 [proto: 191/Ookla][IP: 0/Unknown][ClearText][Confidence: DPI (partial cache)][DPI packets: 10][cat: Network/14][6 pkts/591 bytes <-> 4 pkts/1784 bytes][Goodput ratio: 32/85][0.05 sec][bytes ratio: -0.502 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 9/10 15/20 6/8][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 98/446 143/1514 31/617][PLAIN TEXT (gKRZvA)][Plen Bins: 0,40,40,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,20,0,0] + 5 TCP 192.168.1.7:51215 <-> 46.44.253.187:8080 [proto: 191/Ookla][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 6][cat: Network/14][19 pkts/1421 bytes <-> 11 pkts/920 bytes][Goodput ratio: 11/20][0.80 sec][bytes ratio: 0.214 (Upload)][IAT c2s/s2c min/avg/max/stddev: 26/0 44/75 103/137 23/41][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 75/84 85/100 9/8][PLAIN TEXT ( 6HELLO 2.4 2016)][Plen Bins: 94,5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] + 6 TCP 192.168.1.192:37790 <-> 185.157.229.246:8080 [proto: 191/Ookla][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 6][cat: Network/14][6 pkts/454 bytes <-> 4 pkts/317 bytes][Goodput ratio: 11/14][0.06 sec][bytes ratio: 0.178 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 0/0 12/5 46/9 17/4][Pkt Len c2s/s2c min/avg/max/stddev: 66/66 76/79 106/108 14/17][PLAIN TEXT (HELLO 2.9 )][Plen Bins: 50,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] diff --git a/tests/cfgs/disable_protocols/README.txt b/tests/cfgs/disable_protocols/README.txt new file mode 100644 index 00000000000..a6ed43e9f6f --- /dev/null +++ b/tests/cfgs/disable_protocols/README.txt @@ -0,0 +1,5 @@ +Try disabling some protocols: +* a master protocol (QUIC) +* DNS +* an HTTP sub-protocol (SOAP) +* a protocol identified via content match (Pluralsight) diff --git a/tests/cfgs/disable_protocols/config.txt b/tests/cfgs/disable_protocols/config.txt new file mode 100644 index 00000000000..a5fb695b97c --- /dev/null +++ b/tests/cfgs/disable_protocols/config.txt @@ -0,0 +1 @@ +-B soap,dns,pluralsight,quic diff --git a/tests/cfgs/disable_protocols/pcap/dns_long_domainname.pcap b/tests/cfgs/disable_protocols/pcap/dns_long_domainname.pcap new file mode 120000 index 00000000000..aa217eb434b --- /dev/null +++ b/tests/cfgs/disable_protocols/pcap/dns_long_domainname.pcap @@ -0,0 +1 @@ +../../default/pcap/dns_long_domainname.pcap \ No newline at end of file diff --git a/tests/cfgs/disable_protocols/pcap/pluralsight.pcap b/tests/cfgs/disable_protocols/pcap/pluralsight.pcap new file mode 120000 index 00000000000..79ce4c923ff --- /dev/null +++ b/tests/cfgs/disable_protocols/pcap/pluralsight.pcap @@ -0,0 +1 @@ +../../default/pcap/pluralsight.pcap \ No newline at end of file diff --git a/tests/cfgs/disable_protocols/pcap/quic-mvfst-27.pcapng b/tests/cfgs/disable_protocols/pcap/quic-mvfst-27.pcapng new file mode 120000 index 00000000000..9b3b1ade4cd --- /dev/null +++ b/tests/cfgs/disable_protocols/pcap/quic-mvfst-27.pcapng @@ -0,0 +1 @@ +../../default/pcap/quic-mvfst-27.pcapng \ No newline at end of file diff --git a/tests/cfgs/disable_protocols/pcap/soap.pcap b/tests/cfgs/disable_protocols/pcap/soap.pcap new file mode 120000 index 00000000000..0ffad528d0a --- /dev/null +++ b/tests/cfgs/disable_protocols/pcap/soap.pcap @@ -0,0 +1 @@ +../../default/pcap/soap.pcap \ No newline at end of file diff --git a/tests/cfgs/disable_protocols/result/dns_long_domainname.pcap.out b/tests/cfgs/disable_protocols/result/dns_long_domainname.pcap.out new file mode 100644 index 00000000000..807aaa5361f --- /dev/null +++ b/tests/cfgs/disable_protocols/result/dns_long_domainname.pcap.out @@ -0,0 +1,25 @@ +Guessed flow protos: 1 + +DPI Packets (UDP): 2 (2.00 pkts/flow) +Confidence Match by IP : 1 (flows) +Num dissector calls: 122 (122.00 diss/flow) +LRU cache ookla: 0/0/0 (insert/search/found) +LRU cache bittorrent: 0/3/0 (insert/search/found) +LRU cache zoom: 0/0/0 (insert/search/found) +LRU cache stun: 0/0/0 (insert/search/found) +LRU cache tls_cert: 0/0/0 (insert/search/found) +LRU cache mining: 0/1/0 (insert/search/found) +LRU cache msteams: 0/0/0 (insert/search/found) +LRU cache stun_zoom: 0/1/0 (insert/search/found) +Automa host: 0/0 (search/found) +Automa domain: 0/0 (search/found) +Automa tls cert: 0/0 (search/found) +Automa risk mask: 0/0 (search/found) +Automa common alpns: 0/0 (search/found) +Patricia risk mask: 2/0 (search/found) +Patricia risk: 0/0 (search/found) +Patricia protocols: 1/1 (search/found) + +Google 2 262 1 + + 1 UDP 192.168.1.168:65311 <-> 8.8.8.8:53 [proto: 126/Google][IP: 126/Google][Encrypted][Confidence: Match by IP][DPI packets: 2][cat: Web/5][1 pkts/103 bytes <-> 1 pkts/159 bytes][Goodput ratio: 59/73][0.02 sec][PLAIN TEXT (fhkfhsdkfhsk)][Plen Bins: 0,50,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] diff --git a/tests/cfgs/disable_protocols/result/pluralsight.pcap.out b/tests/cfgs/disable_protocols/result/pluralsight.pcap.out new file mode 100644 index 00000000000..21878e66f37 --- /dev/null +++ b/tests/cfgs/disable_protocols/result/pluralsight.pcap.out @@ -0,0 +1,35 @@ +Guessed flow protos: 0 + +DPI Packets (TCP): 33 (5.50 pkts/flow) +Confidence DPI : 6 (flows) +Num dissector calls: 6 (1.00 diss/flow) +LRU cache ookla: 0/0/0 (insert/search/found) +LRU cache bittorrent: 0/0/0 (insert/search/found) +LRU cache zoom: 0/0/0 (insert/search/found) +LRU cache stun: 0/0/0 (insert/search/found) +LRU cache tls_cert: 0/12/0 (insert/search/found) +LRU cache mining: 0/0/0 (insert/search/found) +LRU cache msteams: 0/0/0 (insert/search/found) +LRU cache stun_zoom: 0/0/0 (insert/search/found) +Automa host: 17/0 (search/found) +Automa domain: 17/0 (search/found) +Automa tls cert: 4/0 (search/found) +Automa risk mask: 0/0 (search/found) +Automa common alpns: 12/12 (search/found) +Patricia risk mask: 12/0 (search/found) +Patricia risk: 0/0 (search/found) +Patricia protocols: 8/4 (search/found) + +TLS 44 29652 6 + +JA3 Host Stats: + IP Address # JA3C + 1 192.168.1.128 1 + + + 1 TCP 192.168.1.128:42642 <-> 54.69.188.18:443 [proto: 91/TLS][IP: 265/AmazonAWS][Encrypted][Confidence: DPI][DPI packets: 7][cat: Web/5][3 pkts/849 bytes <-> 6 pkts/6252 bytes][Goodput ratio: 76/94][0.57 sec][Hostname/SNI: pluralsight.com][(Advertised) ALPNs: h2;http/1.1][(Negotiated) ALPN: h2][TLS Supported Versions: GREASE;TLSv1.3;TLSv1.2][bytes ratio: -0.761 (Download)][IAT c2s/s2c min/avg/max/stddev: 188/0 191/76 194/194 3/93][Pkt Len c2s/s2c min/avg/max/stddev: 74/74 283/1042 583/1514 218/605][TLSv1.2][JA3C: cd08e31494f9531f560d64c695473da9][ServerNames: *.pluralsight.com,pluralsight.com][JA3S: 8d2a028aa94425f76ced7826b1f39039][Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2][Subject: OU=Domain Control Validated, CN=*.pluralsight.com][Certificate SHA-1: 31:0B:3D:03:7A:6A:F8:86:8F:CE:62:30:E9:A2:F1:47:E5:6C:3D:F7][Chrome][Validity: 2020-05-02 16:02:08 - 2022-07-01 23:42:28][Cipher: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256][Plen Bins: 0,0,0,14,0,0,0,0,14,0,0,0,0,0,0,0,14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,14,0,0,0,0,0,0,42,0,0] + 2 TCP 192.168.1.128:42782 <-> 146.75.62.208:443 [proto: 91/TLS][IP: 0/Unknown][Encrypted][Confidence: DPI][DPI packets: 6][cat: Web/5][3 pkts/816 bytes <-> 6 pkts/5407 bytes][Goodput ratio: 75/93][0.05 sec][Hostname/SNI: pluralsight2.imgix.net][(Advertised) ALPNs: h2;http/1.1][(Negotiated) ALPN: h2][TLS Supported Versions: GREASE;TLSv1.3;TLSv1.2][bytes ratio: -0.738 (Download)][IAT c2s/s2c min/avg/max/stddev: 15/0 17/7 19/19 2/9][Pkt Len c2s/s2c min/avg/max/stddev: 74/74 272/901 583/1406 223/547][TLSv1.2][JA3C: cd08e31494f9531f560d64c695473da9][ServerNames: *.imgix.com,*.imgix.net,imgix.com,imgix.net][JA3S: 16c0b3e6a7b8173c16d944cfeaeee9cf][Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2020][Subject: CN=*.imgix.com][Certificate SHA-1: C6:A8:D1:F3:16:08:C6:7F:9F:58:B9:3B:87:A6:A1:75:BC:67:F8:8D][Chrome][Validity: 2021-05-10 23:09:57 - 2022-06-11 23:09:56][Cipher: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256][Plen Bins: 0,0,14,0,0,0,0,0,14,0,0,0,0,0,0,0,14,0,0,0,0,0,14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,0,0,0,0,0,0] + 3 TCP 192.168.1.128:42790 <-> 146.75.62.208:443 [proto: 91/TLS][IP: 0/Unknown][Encrypted][Confidence: DPI][DPI packets: 6][cat: Web/5][3 pkts/816 bytes <-> 6 pkts/5407 bytes][Goodput ratio: 75/93][0.06 sec][Hostname/SNI: pluralsight.imgix.net][(Advertised) ALPNs: h2;http/1.1][(Negotiated) ALPN: h2][TLS Supported Versions: GREASE;TLSv1.3;TLSv1.2][bytes ratio: -0.738 (Download)][IAT c2s/s2c min/avg/max/stddev: 18/0 23/8 28/22 5/10][Pkt Len c2s/s2c min/avg/max/stddev: 74/74 272/901 583/1406 223/547][TLSv1.2][JA3C: cd08e31494f9531f560d64c695473da9][ServerNames: *.imgix.com,*.imgix.net,imgix.com,imgix.net][JA3S: 16c0b3e6a7b8173c16d944cfeaeee9cf][Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2020][Subject: CN=*.imgix.com][Certificate SHA-1: C6:A8:D1:F3:16:08:C6:7F:9F:58:B9:3B:87:A6:A1:75:BC:67:F8:8D][Chrome][Validity: 2021-05-10 23:09:57 - 2022-06-11 23:09:56][Cipher: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256][Plen Bins: 0,0,14,0,0,0,0,0,14,0,0,0,0,0,0,0,14,0,0,0,0,0,14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,0,0,0,0,0,0] + 4 TCP 192.168.1.128:42618 <-> 18.203.201.56:443 [proto: 91/TLS][IP: 265/AmazonAWS][Encrypted][Confidence: DPI][DPI packets: 6][cat: Web/5][3 pkts/849 bytes <-> 6 pkts/4806 bytes][Goodput ratio: 76/92][0.13 sec][Hostname/SNI: stt.pluralsight.com][(Advertised) ALPNs: h2;http/1.1][(Negotiated) ALPN: h2][TLS Supported Versions: GREASE;TLSv1.3;TLSv1.2][bytes ratio: -0.700 (Download)][IAT c2s/s2c min/avg/max/stddev: 41/0 44/17 46/45 2/20][Pkt Len c2s/s2c min/avg/max/stddev: 74/73 283/801 583/1514 218/713][TLSv1.2][JA3C: cd08e31494f9531f560d64c695473da9][ServerNames: stt.pluralsight.com][JA3S: c4b2785a87896e19d37eee932070cb22][Issuer: C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1][Subject: C=US, ST=California, L=San Jose, O=Adobe Systems Incorporated, CN=stt.pluralsight.com][Certificate SHA-1: C5:A3:DE:6D:71:B1:15:77:EC:86:38:E6:30:1C:F5:AC:18:9D:BE:82][Chrome][Validity: 2021-10-01 00:00:00 - 2022-10-01 23:59:59][Cipher: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256][Plen Bins: 14,14,0,14,0,0,0,0,0,0,0,0,0,0,0,0,14,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42,0,0] + 5 TCP 192.168.1.128:44770 <-> 104.17.209.240:443 [proto: 91/TLS][IP: 220/Cloudflare][Encrypted][Confidence: DPI][DPI packets: 4][cat: Web/5][2 pkts/645 bytes <-> 2 pkts/1580 bytes][Goodput ratio: 80/92][0.04 sec][Hostname/SNI: zn6qzq6caaucudesr-pluralsight.siteintercept.qualtrics.com][(Advertised) ALPNs: h2;http/1.1][TLS Supported Versions: GREASE;TLSv1.3;TLSv1.2][TLSv1.3][JA3C: cd08e31494f9531f560d64c695473da9][JA3S: eb1d94daa7e0344597e756a1fb6e7054][Chrome][Cipher: TLS_AES_128_GCM_SHA256][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,0,0] + 6 TCP 192.168.1.128:48948 <-> 104.19.162.127:443 [proto: 91/TLS][IP: 220/Cloudflare][Encrypted][Confidence: DPI][DPI packets: 4][cat: Web/5][2 pkts/645 bytes <-> 2 pkts/1580 bytes][Goodput ratio: 80/92][0.05 sec][Hostname/SNI: www.pluralsight.com][(Advertised) ALPNs: h2;http/1.1][TLS Supported Versions: GREASE;TLSv1.3;TLSv1.2][TLSv1.3][JA3C: cd08e31494f9531f560d64c695473da9][JA3S: eb1d94daa7e0344597e756a1fb6e7054][Chrome][Cipher: TLS_AES_128_GCM_SHA256][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,50,0,0] diff --git a/tests/cfgs/disable_protocols/result/quic-mvfst-27.pcapng.out b/tests/cfgs/disable_protocols/result/quic-mvfst-27.pcapng.out new file mode 100644 index 00000000000..fdd8ffed56c --- /dev/null +++ b/tests/cfgs/disable_protocols/result/quic-mvfst-27.pcapng.out @@ -0,0 +1,25 @@ +Guessed flow protos: 1 + +DPI Packets (UDP): 20 (20.00 pkts/flow) +Confidence Match by IP : 1 (flows) +Num dissector calls: 258 (258.00 diss/flow) +LRU cache ookla: 0/0/0 (insert/search/found) +LRU cache bittorrent: 0/3/0 (insert/search/found) +LRU cache zoom: 0/0/0 (insert/search/found) +LRU cache stun: 0/0/0 (insert/search/found) +LRU cache tls_cert: 0/0/0 (insert/search/found) +LRU cache mining: 0/1/0 (insert/search/found) +LRU cache msteams: 0/0/0 (insert/search/found) +LRU cache stun_zoom: 0/1/0 (insert/search/found) +Automa host: 0/0 (search/found) +Automa domain: 0/0 (search/found) +Automa tls cert: 0/0 (search/found) +Automa risk mask: 0/0 (search/found) +Automa common alpns: 0/0 (search/found) +Patricia risk mask: 2/0 (search/found) +Patricia risk: 0/0 (search/found) +Patricia protocols: 1/1 (search/found) + +Facebook 20 11399 1 + + 1 UDP 10.0.2.15:35957 <-> 69.171.250.15:443 [proto: 119/Facebook][IP: 119/Facebook][Encrypted][Confidence: Match by IP][DPI packets: 20][cat: SocialNetwork/6][7 pkts/3196 bytes <-> 13 pkts/8203 bytes][Goodput ratio: 79/85][8.96 sec][bytes ratio: -0.439 (Download)][IAT c2s/s2c min/avg/max/stddev: 0/0 1782/811 8808/8827 3513/2535][Pkt Len c2s/s2c min/avg/max/stddev: 128/115 457/631 1326/1346 492/540][PLAIN TEXT (Xic gcl)][Plen Bins: 20,25,10,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,0,5,0,0,0,0,5,0,0,0,0,0,5,20,0,0,0,0,0,0,0,0] diff --git a/tests/cfgs/disable_protocols/result/soap.pcap.out b/tests/cfgs/disable_protocols/result/soap.pcap.out new file mode 100644 index 00000000000..12aa97a85dd --- /dev/null +++ b/tests/cfgs/disable_protocols/result/soap.pcap.out @@ -0,0 +1,29 @@ +Guessed flow protos: 3 + +DPI Packets (TCP): 20 (6.67 pkts/flow) +Confidence Match by port : 2 (flows) +Confidence DPI : 1 (flows) +Num dissector calls: 346 (115.33 diss/flow) +LRU cache ookla: 0/0/0 (insert/search/found) +LRU cache bittorrent: 0/6/0 (insert/search/found) +LRU cache zoom: 0/0/0 (insert/search/found) +LRU cache stun: 0/0/0 (insert/search/found) +LRU cache tls_cert: 0/0/0 (insert/search/found) +LRU cache mining: 0/2/0 (insert/search/found) +LRU cache msteams: 0/0/0 (insert/search/found) +LRU cache stun_zoom: 0/0/0 (insert/search/found) +Automa host: 1/1 (search/found) +Automa domain: 1/0 (search/found) +Automa tls cert: 0/0 (search/found) +Automa risk mask: 1/0 (search/found) +Automa common alpns: 0/0 (search/found) +Patricia risk mask: 6/0 (search/found) +Patricia risk: 2/0 (search/found) +Patricia protocols: 6/0 (search/found) + +HTTP 19 9442 2 +Microsoft 1 1506 1 + + 1 TCP 192.168.2.100:50100 <-> 23.2.213.165:80 [proto: 7/HTTP][IP: 0/Unknown][ClearText][Confidence: Match by port][DPI packets: 14][cat: Web/5][7 pkts/4746 bytes <-> 7 pkts/752 bytes][Goodput ratio: 92/39][5.01 sec][bytes ratio: 0.726 (Upload)][IAT c2s/s2c min/avg/max/stddev: 0/1 989/1236 2486/2486 1098/1096][Pkt Len c2s/s2c min/avg/max/stddev: 54/60 678/107 1506/362 717/104][PLAIN TEXT (POST /fwlink/)][Plen Bins: 0,0,0,0,0,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,0,0] + 2 TCP 185.32.192.30:80 <-> 85.154.114.113:56028 [VLAN: 808][proto: 7/HTTP][IP: 0/Unknown][ClearText][Confidence: Match by port][DPI packets: 5][cat: Web/5][3 pkts/2487 bytes <-> 2 pkts/1457 bytes][Goodput ratio: 92/92][0.34 sec][PLAIN TEXT (xml version)][Plen Bins: 0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,25,0,0,0,0,50,0,0,0,0,0,0,0,0,0] + 3 TCP 192.168.2.100:50100 -> 23.2.213.165:4176 [proto: 7.212/HTTP.Microsoft][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 1][cat: Cloud/13][1 pkts/1506 bytes -> 0 pkts/0 bytes][Goodput ratio: 96/0][< 1 sec][Hostname/SNI: go.microsoft.com][URL: go.microsoft.com/fwlink/?LinkID=252669&clcid=0x409][StatusCode: 0][Req Content-Type: text/xml][User-Agent: MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT][Risk: ** Known Proto on Non Std Port **** Unidirectional Traffic **][Risk Score: 60][Risk Info: No server to client traffic][PLAIN TEXT (POST /fwlink/)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0] diff --git a/tests/do.sh.in b/tests/do.sh.in index a50b5d2fe5d..131d78f2a9e 100755 --- a/tests/do.sh.in +++ b/tests/do.sh.in @@ -25,11 +25,9 @@ PCRE_ENABLED=@PCRE_ENABLED@ PCRE_PCAPS="WebattackRCE.pcap" NBPF_ENABLED=@NBPF_ENABLED@ NBPF_PCAPS="h323-overflow.pcap" -READER="${CMD_PREFIX} ../example/ndpiReader${EXE_SUFFIX} -A -p ../example/protos.txt -c ../example/categories.txt -r ../example/risky_domains.txt -j ../example/ja3_fingerprints.csv -S ../example/sha1_fingerprints.csv" +READER="${CMD_PREFIX} ../../../example/ndpiReader${EXE_SUFFIX} -A -p ../../../example/protos.txt -c ../../../example/categories.txt -r ../../../example/risky_domains.txt -j ../../../example/ja3_fingerprints.csv -S ../../../example/sha1_fingerprints.csv -q -K JSON -k /dev/null -t -v 2" RC=0 -PCAPS=`cd pcap; /bin/ls *.pcap *.pcapng *.cap` -FAILURES=() if [ ! -x "../example/ndpiReader${EXE_SUFFIX}" ]; then echo "$0: Missing ../example/ndpiReader${EXE_SUFFIX}" @@ -57,7 +55,7 @@ fuzzy_testing() { cp ../example/risky_domains.txt . cp ../example/ja3_fingerprints.csv . cp ../example/sha1_fingerprints.csv . - ../fuzz/fuzz_ndpi_reader -dict=../fuzz/dictionary.dict -max_total_time="${MAX_TOTAL_TIME:-592}" -print_pcs=1 -workers="${FUZZY_WORKERS:-0}" -jobs="${FUZZY_JOBS:-0}" pcap/ + ../fuzz/fuzz_ndpi_reader -dict=../fuzz/dictionary.dict -max_total_time="${MAX_TOTAL_TIME:-592}" -print_pcs=1 -workers="${FUZZY_WORKERS:-0}" -jobs="${FUZZY_JOBS:-0}" cfgs/default/pcap/ rm -f protos.txt categories.txt risky_domains.txt ja3_fingerprints.csv sha1_fingerprints.csv fi } @@ -67,7 +65,7 @@ build_results() { #echo $f # create result files if not present if [ ! -f result/$f.out ]; then - CMD="$READER -q -k /dev/null -t -i pcap/$f -w result/$f.out -v 2" + CMD="$READER -i pcap/$f -w result/$f.out $READER_EXTRA_PARAM" $CMD fi done @@ -103,7 +101,7 @@ check_results() { fi if [ -f result/$f.out ]; then - CMD="$READER -q -K JSON -k /dev/null -t -i pcap/$f -w /tmp/reader.$$.out -v 2" + CMD="$READER -i pcap/$f -w /tmp/reader.$$.out $READER_EXTRA_PARAM" CPUPROFILE=./result/$f.cprof HEAPPROFILE=./result/$f $CMD CMD_RET=$? if [ $CMD_RET -eq 0 ]; then @@ -134,19 +132,33 @@ check_results() { if [ ${GPROF_ENABLED} -eq 1 ]; then GPROF_ARGS='-nodecount 100 -nodefraction 0 -symbolize=fastlocal' - ${GPROF} -top ${GPROF_ARGS} ../example/ndpiReader${EXE_SUFFIX} ./result/*.cprof || exit 1 - ${GPROF} -png -output ./result/cpu_profile.png ${GPROF_ARGS} ../example/ndpiReader${EXE_SUFFIX} ./result/*.cprof || exit 1 - ${GPROF} -top ${GPROF_ARGS} -sample_index=alloc_space ../example/ndpiReader${EXE_SUFFIX} ./result/*.heap || exit 1 - ${GPROF} -png -output ./result/heap_profile.png ${GPROF_ARGS} -sample_index=alloc_space ../example/ndpiReader${EXE_SUFFIX} ./result/*.heap || exit 1 + ${GPROF} -top ${GPROF_ARGS} ../../../example/ndpiReader${EXE_SUFFIX} ./result/*.cprof || exit 1 + ${GPROF} -png -output ./result/cpu_profile.png ${GPROF_ARGS} ../../../example/ndpiReader${EXE_SUFFIX} ./result/*.cprof || exit 1 + ${GPROF} -top ${GPROF_ARGS} -sample_index=alloc_space ../../../example/ndpiReader${EXE_SUFFIX} ./result/*.heap || exit 1 + ${GPROF} -png -output ./result/heap_profile.png ${GPROF_ARGS} -sample_index=alloc_space ../../../example/ndpiReader${EXE_SUFFIX} ./result/*.heap || exit 1 fi } if [ $FUZZY_TESTING_ENABLED -eq 1 ]; then fuzzy_testing fi -build_results -check_results $* -test ${RC} -ne 0 && printf '%s: %s\n' "${0}" "${RC} pcap(s) failed" -test ${RC} -ne 0 && echo "Failed: ${FAILURES[@]}" +for d in $(find ./cfgs/* -type d -maxdepth 0 2>/dev/null) ; do + cd ./cfgs/"$(basename $d)" + + PCAPS=`cd pcap; /bin/ls *.*cap*` + FAILURES=() + [ -f config.txt ] && READER_EXTRA_PARAM=$(< config.txt) + + echo "Run configuration \""$(basename $d)"\" [$READER_EXTRA_PARAM]" + + build_results + check_results $* + + test ${RC} -ne 0 && printf '%s: %s\n' "${0}" "${RC} pcap(s) failed" + test ${RC} -ne 0 && echo "Failed: ${FAILURES[@]}" + + cd ../../ +done + exit $RC diff --git a/tests/pcap/gre.pcap b/tests/pcap/gre.pcap deleted file mode 100644 index a8cd42a8b49..00000000000 Binary files a/tests/pcap/gre.pcap and /dev/null differ diff --git a/tests/pcap/h323_false_positive.pcap b/tests/pcap/h323_false_positive.pcap deleted file mode 100644 index babf5e1092f..00000000000 Binary files a/tests/pcap/h323_false_positive.pcap and /dev/null differ diff --git a/tests/result/gre.pcap.out b/tests/result/gre.pcap.out deleted file mode 100644 index 9c22b40c63a..00000000000 --- a/tests/result/gre.pcap.out +++ /dev/null @@ -1,28 +0,0 @@ -Guessed flow protos: 0 - -DPI Packets (UDP): 1 (1.00 pkts/flow) -DPI Packets (other): 1 (1.00 pkts/flow) -Confidence DPI : 2 (flows) -Num dissector calls: 2 (1.00 diss/flow) -LRU cache ookla: 0/0/0 (insert/search/found) -LRU cache bittorrent: 0/0/0 (insert/search/found) -LRU cache zoom: 0/0/0 (insert/search/found) -LRU cache stun: 0/0/0 (insert/search/found) -LRU cache tls_cert: 0/0/0 (insert/search/found) -LRU cache mining: 0/0/0 (insert/search/found) -LRU cache msteams: 0/0/0 (insert/search/found) -LRU cache stun_zoom: 0/0/0 (insert/search/found) -Automa host: 0/0 (search/found) -Automa domain: 0/0 (search/found) -Automa tls cert: 0/0 (search/found) -Automa risk mask: 0/0 (search/found) -Automa common alpns: 0/0 (search/found) -Patricia risk mask: 4/0 (search/found) -Patricia risk: 2/0 (search/found) -Patricia protocols: 4/0 (search/found) - -ICMP 2 276 1 -SIP 1 506 1 - - 1 UDP 212.83.179.0:5097 -> 192.200.144.148:5060 [VLAN: 1][proto: GRE:100/SIP][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 1][cat: VoIP/10][1 pkts/506 bytes -> 0 pkts/0 bytes][Goodput ratio: 81/0][< 1 sec][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No server to client traffic][PLAIN TEXT (OPTIONS sip)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] - 2 ICMP 10.1.2.1:0 <-> 10.1.2.2:0 [proto: GRE:81/ICMP][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 1][cat: Network/14][1 pkts/138 bytes <-> 1 pkts/138 bytes][Goodput ratio: 52/52][0.00 sec][Plen Bins: 0,0,100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] diff --git a/tests/result/h323_false_positive.pcap.out b/tests/result/h323_false_positive.pcap.out deleted file mode 100644 index 021874e6fa4..00000000000 --- a/tests/result/h323_false_positive.pcap.out +++ /dev/null @@ -1,25 +0,0 @@ -Guessed flow protos: 0 - -DPI Packets (UDP): 4 (4.00 pkts/flow) -Confidence DPI : 1 (flows) -Num dissector calls: 76 (76.00 diss/flow) -LRU cache ookla: 0/0/0 (insert/search/found) -LRU cache bittorrent: 5/0/0 (insert/search/found) -LRU cache zoom: 0/0/0 (insert/search/found) -LRU cache stun: 0/0/0 (insert/search/found) -LRU cache tls_cert: 0/0/0 (insert/search/found) -LRU cache mining: 0/0/0 (insert/search/found) -LRU cache msteams: 0/0/0 (insert/search/found) -LRU cache stun_zoom: 0/0/0 (insert/search/found) -Automa host: 0/0 (search/found) -Automa domain: 0/0 (search/found) -Automa tls cert: 0/0 (search/found) -Automa risk mask: 0/0 (search/found) -Automa common alpns: 0/0 (search/found) -Patricia risk mask: 2/0 (search/found) -Patricia risk: 0/0 (search/found) -Patricia protocols: 2/0 (search/found) - -BitTorrent 4 645 1 - - 1 UDP 10.0.2.15:23994 <-> 112.51.146.106:1719 [proto: 37/BitTorrent][IP: 0/Unknown][ClearText][Confidence: DPI][DPI packets: 4][cat: Download/7][2 pkts/231 bytes <-> 2 pkts/414 bytes][Goodput ratio: 63/80][16.92 sec][Risk: ** Known Proto on Non Std Port **][Risk Score: 50][Risk Info: Expected on port 6771,51413][PLAIN TEXT (target20)][Plen Bins: 0,50,0,25,0,0,0,0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]