ntop · IvanNardi · Dec 12, 2023 · Dec 10, 2023
diff --git a/example/ndpiReader.c b/example/ndpiReader.c
@@ -2150,7 +2150,7 @@ static void node_proto_guess_walker(const void *node, ndpi_VISIT which, int dept
                                                       flow->ndpi_flow, enable_protocol_guess, &proto_guessed);
       malloc_size_stats = 0;
 
-      if(enable_protocol_guess) ndpi_thread_info[thread_id].workflow->stats.guessed_flow_protocols++;
+      if(proto_guessed) ndpi_thread_info[thread_id].workflow->stats.guessed_flow_protocols++;
     }
 
     process_ndpi_collected_info(ndpi_thread_info[thread_id].workflow, flow);
@@ -3804,7 +3804,7 @@ static void printResults(u_int64_t processing_time_usec, u_int64_t setup_time_us
       printf("\tTraffic duration:      %.3f sec\n", traffic_duration/1000000);
     }
 
-    if(enable_protocol_guess)
+    if(cumulative_stats.guessed_flow_protocols)
       printf("\tGuessed flow protos:   %-13u\n", cumulative_stats.guessed_flow_protocols);
 
     if(cumulative_stats.flow_count[0])
@@ -3908,7 +3908,7 @@ static void printResults(u_int64_t processing_time_usec, u_int64_t setup_time_us
   }
 
   if(results_file) {
-    if(enable_protocol_guess)
+    if(cumulative_stats.guessed_flow_protocols)
       fprintf(results_file, "Guessed flow protos:\t%u\n\n", cumulative_stats.guessed_flow_protocols);
 
     if(cumulative_stats.flow_count[0])

diff --git a/example/reader_util.c b/example/reader_util.c
@@ -1744,7 +1744,7 @@ static struct ndpi_proto packet_processing(struct ndpi_workflow * workflow,
 
 	  flow->detected_protocol = ndpi_detection_giveup(workflow->ndpi_struct, flow->ndpi_flow,
 							  enable_protocol_guess, &proto_guessed);
-	  if(enable_protocol_guess) workflow->stats.guessed_flow_protocols++;
+	  if(proto_guessed) workflow->stats.guessed_flow_protocols++;
 	}
 
 	process_ndpi_collected_info(workflow, flow);

diff --git a/tests/cfgs/caches_cfg/result/teams.pcap.out b/tests/cfgs/caches_cfg/result/teams.pcap.out
@@ -1,4 +1,4 @@
-Guessed flow protos:	4
+Guessed flow protos:	2
 
 DPI Packets (TCP):	337	(8.02 pkts/flow)
 DPI Packets (UDP):	74	(1.85 pkts/flow)

diff --git a/tests/cfgs/default/result/1kxun.pcap.out b/tests/cfgs/default/result/1kxun.pcap.out
@@ -1,4 +1,4 @@
-Guessed flow protos:	25
+Guessed flow protos:	6
 
 DPI Packets (TCP):	408	(4.16 pkts/flow)
 DPI Packets (UDP):	120	(1.21 pkts/flow)

diff --git a/tests/cfgs/default/result/443-curl.pcap.out b/tests/cfgs/default/result/443-curl.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	7	(7.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/443-firefox.pcap.out b/tests/cfgs/default/result/443-firefox.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	7	(7.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/443-git.pcap.out b/tests/cfgs/default/result/443-git.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	7	(7.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/443-opvn.pcap.out b/tests/cfgs/default/result/443-opvn.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	6	(6.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 130 (130.00 diss/flow)

diff --git a/tests/cfgs/default/result/443-safari.pcap.out b/tests/cfgs/default/result/443-safari.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	7	(7.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/4in4tunnel.pcap.out b/tests/cfgs/default/result/4in4tunnel.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	1
-
 DPI Packets (UDP):	5	(5.00 pkts/flow)
 Confidence Unknown          : 1 (flows)
 Num dissector calls: 187 (187.00 diss/flow)

diff --git a/tests/cfgs/default/result/4in6tunnel.pcap.out b/tests/cfgs/default/result/4in6tunnel.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	1
-
 DPI Packets (TCP):	4	(4.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/6in4tunnel.pcap.out b/tests/cfgs/default/result/6in4tunnel.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	2
-
 DPI Packets (TCP):	29	(5.80 pkts/flow)
 DPI Packets (UDP):	4	(2.00 pkts/flow)
 DPI Packets (other):	3	(1.00 pkts/flow)

diff --git a/tests/cfgs/default/result/6in6tunnel.pcap.out b/tests/cfgs/default/result/6in6tunnel.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	1
-
 DPI Packets (UDP):	2	(2.00 pkts/flow)
 Confidence Unknown          : 1 (flows)
 Num dissector calls: 136 (136.00 diss/flow)

diff --git a/tests/cfgs/default/result/BGP_Cisco_hdlc_slarp.pcap.out b/tests/cfgs/default/result/BGP_Cisco_hdlc_slarp.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	4	(4.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/BGP_redist.pcap.out b/tests/cfgs/default/result/BGP_redist.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	2	(1.00 pkts/flow)
 Confidence DPI              : 2 (flows)
 Num dissector calls: 2 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/EAQ.pcap.out b/tests/cfgs/default/result/EAQ.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	12	(6.00 pkts/flow)
 DPI Packets (UDP):	116	(4.00 pkts/flow)
 Confidence DPI              : 31 (flows)

diff --git a/tests/cfgs/default/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out b/tests/cfgs/default/result/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	7	(1.40 pkts/flow)
 Confidence DPI              : 5 (flows)
 Num dissector calls: 145 (29.00 diss/flow)

diff --git a/tests/cfgs/default/result/IEC104.pcap.out b/tests/cfgs/default/result/IEC104.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	4	(2.00 pkts/flow)
 Confidence DPI              : 2 (flows)
 Num dissector calls: 2 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/KakaoTalk_chat.pcap.out b/tests/cfgs/default/result/KakaoTalk_chat.pcap.out
@@ -1,4 +1,4 @@
-Guessed flow protos:	8
+Guessed flow protos:	5
 
 DPI Packets (TCP):	166	(8.74 pkts/flow)
 DPI Packets (UDP):	36	(2.00 pkts/flow)

diff --git a/tests/cfgs/default/result/KakaoTalk_talk.pcap.out b/tests/cfgs/default/result/KakaoTalk_talk.pcap.out
@@ -1,4 +1,4 @@
-Guessed flow protos:	11
+Guessed flow protos:	9
 
 DPI Packets (TCP):	71	(4.73 pkts/flow)
 DPI Packets (UDP):	10	(2.00 pkts/flow)

diff --git a/tests/cfgs/default/result/NTPv2.pcap.out b/tests/cfgs/default/result/NTPv2.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	1	(1.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/NTPv3.pcap.out b/tests/cfgs/default/result/NTPv3.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	1	(1.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/NTPv4.pcap.out b/tests/cfgs/default/result/NTPv4.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	1	(1.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/TivoDVR.pcap.out b/tests/cfgs/default/result/TivoDVR.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	1	(1.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/WebattackRCE.pcap.out b/tests/cfgs/default/result/WebattackRCE.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	797
-
 DPI Packets (TCP):	797	(1.00 pkts/flow)
 Confidence DPI              : 797 (flows)
 Num dissector calls: 10361 (13.00 diss/flow)

diff --git a/tests/cfgs/default/result/WebattackSQLinj.pcap.out b/tests/cfgs/default/result/WebattackSQLinj.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	54	(6.00 pkts/flow)
 Confidence DPI              : 9 (flows)
 Num dissector calls: 117 (13.00 diss/flow)

diff --git a/tests/cfgs/default/result/activision.pcap.out b/tests/cfgs/default/result/activision.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	4	(1.00 pkts/flow)
 Confidence DPI              : 4 (flows)
 Num dissector calls: 376 (94.00 diss/flow)

diff --git a/tests/cfgs/default/result/adult_content.pcap.out b/tests/cfgs/default/result/adult_content.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	4	(4.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 6 (6.00 diss/flow)

diff --git a/tests/cfgs/default/result/afp.pcap.out b/tests/cfgs/default/result/afp.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	1	(1.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/agora-sd-rtn.pcap.out b/tests/cfgs/default/result/agora-sd-rtn.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	26	(1.00 pkts/flow)
 Confidence DPI              : 26 (flows)
 Num dissector calls: 2262 (87.00 diss/flow)

diff --git a/tests/cfgs/default/result/ah.pcapng.out b/tests/cfgs/default/result/ah.pcapng.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	1	(1.00 pkts/flow)
 DPI Packets (other):	1	(1.00 pkts/flow)
 Confidence DPI              : 2 (flows)

diff --git a/tests/cfgs/default/result/ajp.pcap.out b/tests/cfgs/default/result/ajp.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	2
-
 DPI Packets (TCP):	8	(4.00 pkts/flow)
 DPI Packets (other):	6	(3.00 pkts/flow)
 Confidence Unknown          : 2 (flows)

diff --git a/tests/cfgs/default/result/alicloud.pcap.out b/tests/cfgs/default/result/alicloud.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	60	(4.00 pkts/flow)
 Confidence DPI              : 15 (flows)
 Num dissector calls: 1620 (108.00 diss/flow)

diff --git a/tests/cfgs/default/result/among_us.pcap.out b/tests/cfgs/default/result/among_us.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	1	(1.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/amqp.pcap.out b/tests/cfgs/default/result/amqp.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	9	(3.00 pkts/flow)
 Confidence DPI              : 3 (flows)
 Num dissector calls: 378 (126.00 diss/flow)

diff --git a/tests/cfgs/default/result/android.pcap.out b/tests/cfgs/default/result/android.pcap.out
@@ -1,4 +1,4 @@
-Guessed flow protos:	7
+Guessed flow protos:	3
 
 DPI Packets (TCP):	147	(5.25 pkts/flow)
 DPI Packets (UDP):	52	(1.68 pkts/flow)

diff --git a/tests/cfgs/default/result/anyconnect-vpn.pcap.out b/tests/cfgs/default/result/anyconnect-vpn.pcap.out
@@ -1,4 +1,4 @@
-Guessed flow protos:	10
+Guessed flow protos:	6
 
 DPI Packets (TCP):	131	(5.95 pkts/flow)
 DPI Packets (UDP):	82	(2.22 pkts/flow)

diff --git a/tests/cfgs/default/result/anydesk.pcapng.out b/tests/cfgs/default/result/anydesk.pcapng.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	34	(6.80 pkts/flow)
 DPI Packets (UDP):	4	(2.00 pkts/flow)
 Confidence DPI              : 7 (flows)

diff --git a/tests/cfgs/default/result/avast.pcap.out b/tests/cfgs/default/result/avast.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	40	(4.00 pkts/flow)
 Confidence DPI              : 10 (flows)
 Num dissector calls: 1090 (109.00 diss/flow)

diff --git a/tests/cfgs/default/result/avast_securedns.pcapng.out b/tests/cfgs/default/result/avast_securedns.pcapng.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	39	(1.00 pkts/flow)
 Confidence DPI              : 39 (flows)
 Num dissector calls: 3276 (84.00 diss/flow)

diff --git a/tests/cfgs/default/result/bacnet.pcap.out b/tests/cfgs/default/result/bacnet.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	10	(1.00 pkts/flow)
 Confidence DPI              : 10 (flows)
 Num dissector calls: 10 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/bad-dns-traffic.pcap.out b/tests/cfgs/default/result/bad-dns-traffic.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	11	(3.67 pkts/flow)
 Confidence DPI              : 3 (flows)
 Num dissector calls: 3 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/beckhoff_ads.pcapng.out b/tests/cfgs/default/result/beckhoff_ads.pcapng.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	4	(4.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/bets.pcapng.out b/tests/cfgs/default/result/bets.pcapng.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	6	(6.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/bitcoin.pcap.out b/tests/cfgs/default/result/bitcoin.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	6	(1.00 pkts/flow)
 Confidence DPI              : 6 (flows)
 Num dissector calls: 6 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/bittorrent.pcap.out b/tests/cfgs/default/result/bittorrent.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	24	(1.00 pkts/flow)
 Confidence DPI              : 24 (flows)
 Num dissector calls: 1806 (75.25 diss/flow)

diff --git a/tests/cfgs/default/result/bittorrent_tcp_miss.pcapng.out b/tests/cfgs/default/result/bittorrent_tcp_miss.pcapng.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	10	(10.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 234 (234.00 diss/flow)

diff --git a/tests/cfgs/default/result/bittorrent_utp.pcap.out b/tests/cfgs/default/result/bittorrent_utp.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	4	(4.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 74 (74.00 diss/flow)

diff --git a/tests/cfgs/default/result/bjnp.pcap.out b/tests/cfgs/default/result/bjnp.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	10	(1.00 pkts/flow)
 Confidence DPI              : 10 (flows)
 Num dissector calls: 10 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/bot.pcap.out b/tests/cfgs/default/result/bot.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	6	(6.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 13 (13.00 diss/flow)

diff --git a/tests/cfgs/default/result/bt-dns.pcap.out b/tests/cfgs/default/result/bt-dns.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	2	(2.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/bt-http.pcapng.out b/tests/cfgs/default/result/bt-http.pcapng.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	7	(7.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 16 (16.00 diss/flow)

diff --git a/tests/cfgs/default/result/bt_search.pcap.out b/tests/cfgs/default/result/bt_search.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	1
-
 DPI Packets (UDP):	2	(2.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/cachefly.pcapng.out b/tests/cfgs/default/result/cachefly.pcapng.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	6	(6.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/can.pcap.out b/tests/cfgs/default/result/can.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (UDP):	8	(1.00 pkts/flow)
 Confidence DPI              : 8 (flows)
 Num dissector calls: 904 (113.00 diss/flow)

diff --git a/tests/cfgs/default/result/capwap.pcap.out b/tests/cfgs/default/result/capwap.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	1
-
 DPI Packets (UDP):	7	(1.17 pkts/flow)
 DPI Packets (other):	4	(1.00 pkts/flow)
 Confidence DPI              : 10 (flows)

diff --git a/tests/cfgs/default/result/capwap_data.pcapng.out b/tests/cfgs/default/result/capwap_data.pcapng.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	3
-
 DPI Packets (TCP):	14	(4.67 pkts/flow)
 Confidence DPI              : 3 (flows)
 Num dissector calls: 3 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/cassandra.pcap.out b/tests/cfgs/default/result/cassandra.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	16	(8.00 pkts/flow)
 Confidence DPI              : 2 (flows)
 Num dissector calls: 312 (156.00 diss/flow)

diff --git a/tests/cfgs/default/result/check_mk_new.pcap.out b/tests/cfgs/default/result/check_mk_new.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	4	(4.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/chrome.pcap.out b/tests/cfgs/default/result/chrome.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	36	(6.00 pkts/flow)
 Confidence DPI              : 6 (flows)
 Num dissector calls: 6 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/citrix.pcap.out b/tests/cfgs/default/result/citrix.pcap.out
@@ -1,5 +1,3 @@
-Guessed flow protos:	0
-
 DPI Packets (TCP):	4	(4.00 pkts/flow)
 Confidence DPI              : 1 (flows)
 Num dissector calls: 1 (1.00 diss/flow)

diff --git a/tests/cfgs/default/result/cloudflare-warp.pcap.out b/tests/cfgs/default/result/cloudflare-warp.pcap.out
@@ -1,4 +1,4 @@
-Guessed flow protos:	4
+Guessed flow protos:	3
 
 DPI Packets (TCP):	41	(5.12 pkts/flow)
 Confidence Match by port    : 2 (flows)