├── .bumpversion.cfg ├── .github ├── ISSUE_TEMPLATE │ ├── bug-report---.md │ └── feature-request---.md └── workflows │ ├── build_test_linux.yml │ ├── build_test_macos.yml │ ├── build_test_windows.yml │ └── build_wheel_publish.yml ├── .gitignore ├── CITATION.cff ├── LICENSE ├── README.md ├── assets ├── heiFIP.svg ├── heiFIP_logo.png └── heiFIP_logo.svg ├── examples ├── flow-tiled.png ├── markov-flow.png ├── markov-packet.png └── packet.png ├── heifip ├── __init__.py ├── cli.py ├── exceptions │ └── __init__.py ├── extractor.py ├── images │ ├── __init__.py │ ├── flow.py │ ├── flow_tiled_auto.py │ ├── flow_tiled_fixed.py │ ├── markovchain.py │ └── packet.py ├── layers │ ├── __init__.py │ ├── dns.py │ ├── http.py │ ├── ip.py │ ├── packet.py │ ├── ssh.py │ └── transport.py ├── main.py ├── plugins │ ├── __init__.py │ └── header.py ├── protocols │ ├── __init__.py │ └── ssh.py └── splitter.py ├── pyproject.toml ├── requirements.txt ├── setup.cfg ├── split.py ├── tests.py └── tests └── pcaps ├── README ├── arp-leak.pcap ├── arp-who-has-radiotap.pcap ├── arp-who-has-wlanmon.pcap ├── arp-who-has.pcap ├── auth_change_session_keys.pcap ├── bittorrent └── tracker.pcap ├── chksums ├── ip4-bad-chksum.pcap ├── ip4-icmp-bad-chksum.pcap ├── ip4-icmp-good-chksum.pcap ├── ip4-tcp-bad-chksum.pcap ├── ip4-tcp-good-chksum.pcap ├── ip4-udp-bad-chksum.pcap ├── ip4-udp-good-chksum.pcap ├── ip6-hoa-tcp-bad-chksum.pcap ├── ip6-hoa-tcp-good-chksum.pcap ├── ip6-hoa-udp-bad-chksum.pcap ├── ip6-hoa-udp-good-chksum.pcap ├── ip6-icmp6-bad-chksum.pcap ├── ip6-icmp6-good-chksum.pcap ├── ip6-route0-icmp6-bad-chksum.pcap ├── ip6-route0-icmp6-good-chksum.pcap ├── ip6-route0-tcp-bad-chksum.pcap ├── ip6-route0-tcp-good-chksum.pcap ├── ip6-route0-udp-bad-chksum.pcap ├── ip6-route0-udp-good-chksum.pcap ├── ip6-tcp-bad-chksum.pcap ├── ip6-tcp-good-chksum.pcap ├── ip6-udp-bad-chksum.pcap ├── ip6-udp-good-chksum.pcap ├── localhost-bad-chksum.pcap ├── mip6-bad-mh-chksum.pcap └── mip6-good-mh-chksum.pcap ├── cisco-fabric-path.pcap ├── conn-size.trace ├── contentline-irc-5k-line.pcap ├── dce-rpc ├── cs_window7-join_stream092.pcap ├── dce_rpc_netlogon.pcap ├── dce_rpc_ntlm.pcap ├── mapi.pcap ├── ntlm-empty-av-sequence.pcap └── ntlm-unterminated-av-sequence.pcap ├── dhcp ├── dhcp.trace ├── dhcp_ack_subscriber_id_and_agent_remote_id.trace ├── dhcp_discover_param_req_and_client_id.trace ├── dhcp_flood.pcap ├── dhcp_inform.trace ├── dhcp_time_and_nameserver.trace └── hw-type0.pcap ├── dnp3 ├── dnp3.trace ├── dnp3_del_measure.pcap ├── dnp3_en_spon.pcap ├── dnp3_file_del.pcap ├── dnp3_file_read.pcap ├── dnp3_file_write.pcap ├── dnp3_link_only.pcap ├── dnp3_read.pcap ├── dnp3_read_p20001.pcap ├── dnp3_rec_time.pcap ├── dnp3_select_operate.pcap ├── dnp3_udp_en_spon.pcap ├── dnp3_udp_read.pcap ├── dnp3_udp_select_operate.pcap ├── dnp3_udp_write.pcap └── dnp3_write.pcap ├── dns-caa.pcap ├── dns-edns-cookie.pcap ├── dns-edns-ecs-bad.pcap ├── dns-edns-ecs-weirds.pcap ├── dns-edns-ecs.pcap ├── dns-edns-tcp-keepalive.pcap ├── dns-https.pcap ├── dns-huge-ttl.pcap ├── dns-inverse-query.trace ├── dns-spf.pcap ├── dns-svcb.pcap ├── dns-tsig.trace ├── dns-two-responses.trace ├── dns-txt-multiple.trace ├── dns-zero-RRs.trace ├── dns ├── dns-binds.pcap ├── dns-wks.pcap ├── hinfo.pcap ├── loc-29-trunc.pcap └── sshfp-trunc.pcap ├── dns53.pcap ├── dns_original_case.pcap ├── dnssec ├── dnskey.pcap ├── dnskey2.pcap ├── ds.pcap ├── nsec.pcap ├── nsec3.pcap ├── nsec3param.pcap └── rrsig.pcap ├── echo-connections.pcap.gz ├── empty.trace ├── erspan.trace ├── erspanI.pcap ├── erspanII.pcap ├── erspanIII.pcap ├── finger ├── standard.pcap └── verbose.pcap ├── ftp ├── bigtransfer.pcap ├── bruteforce.pcap ├── cwd-navigation.pcap ├── fake-long-commands.pcap ├── fake-server-delays-all.pcap ├── ftp-invalid-reply-code.pcap ├── ftp-missing-reply-code.pcap ├── ftp-missing-space-after-reply-code.pcap ├── ftp-with-numbers-in-filename.pcap ├── ipv4.trace ├── ipv6-violation.trace ├── ipv6.trace └── retr.trace ├── globus-url-copy-bad-encoding.trace ├── globus-url-copy.trace ├── http ├── 100-continue.trace ├── 206_example_a.pcap ├── 206_example_b.pcap ├── 206_example_c.pcap ├── bro.org-filtered.pcap ├── bro.org.pcap ├── byteranges.trace ├── concurrent-range-requests-complete.pcap ├── concurrent-range-requests.pcap ├── connect-with-header.trace ├── connect-with-smtp.trace ├── content-range-gap-skip.trace ├── content-range-gap.trace ├── content-range-less-than-len.pcap ├── curl_http_09.pcap ├── entity_gap.trace ├── entity_gap2.trace ├── fake-content-length.pcap ├── flash-version.trace ├── get-gzip.trace ├── get.trace ├── get_nosyn.trace ├── http-09-content-length-confusion.pcap ├── http-11-request-then-cruft.pcap ├── http-bad-content-range-01.pcap ├── http-bad-request-with-version.trace ├── http-filename.pcap ├── http-post-large.pcap ├── http_09.pcap ├── http_large_req_8001.pcap ├── interleaved-http-entity.pcap ├── methods.trace ├── missing-zlib-header.pcap ├── multipart-form-data.pcap ├── multipart.trace ├── no-uri.pcap ├── no-version.pcap ├── no_crlf.pcap ├── percent-end-of-line.pcap ├── pipelined-requests.trace ├── post.trace ├── proxy.pcap ├── putty-upload.pcap ├── version-mismatch.pcap ├── websocket.pcap ├── x-gzip.pcap └── zero-length-bodies-with-drops.pcap ├── icmp ├── 5-pings.pcap ├── icmp-destunreach-ip.pcap ├── icmp-destunreach-no-context.pcap ├── icmp-destunreach-udp.pcap ├── icmp-ping.pcap ├── icmp-timeexceeded.pcap ├── icmp6-destunreach-ip6ext-trunc.pcap ├── icmp6-destunreach-ip6ext-udp.pcap ├── icmp6-destunreach-ip6ext.pcap ├── icmp6-destunreach-no-context.pcap ├── icmp6-nd-options.pcap ├── icmp6-neighbor-advert.pcap ├── icmp6-neighbor-solicit.pcap ├── icmp6-paramprob.pcap ├── icmp6-ping.pcap ├── icmp6-redirect-hdr-opt.pcap ├── icmp6-redirect.pcap ├── icmp6-router-advert.pcap ├── icmp6-router-solicit.pcap ├── icmp6-timeexceeded.pcap ├── icmp6-toobig.pcap └── icmp_sent.pcap ├── icmp_dot1q.trace ├── icmp_nd_dnssl.trace ├── ieee80211.15.4.pcap ├── ip-bogus-header-len.pcap ├── ip6_esp.trace ├── ipv4 ├── fragmented-1.pcap ├── fragmented-2.pcap ├── fragmented-3.pcap └── fragmented-4.pcap ├── ipv6-fragmented-dns.trace ├── ipv6-hbh-routing0.trace ├── ipv6-http-atomic-frag.trace ├── ipv6-mobility-dst-opts.trace ├── ipv6_zero_len_ah.trace ├── irc-353.pcap ├── irc-basic.trace ├── irc-dcc-send.trace ├── irc-whitespace.trace ├── krb ├── auth.trace ├── kerberos_tso.pcap ├── kinit.trace ├── optional-service-name.pcap ├── smb2_krb.keytab ├── smb2_krb.pcap └── smb_gssapi.trace ├── linux_dlt_sll2.pcap ├── linuxsll-arp.pcap ├── llc.pcap ├── lldp.pcap ├── mixed-vlan-mpls.trace ├── mmsX.pcap ├── mobile-ipv6 ├── ipv6-mobile-hoa.trace ├── ipv6-mobile-routing.trace ├── mip6_back.trace ├── mip6_be.trace ├── mip6_brr.trace ├── mip6_bu.trace ├── mip6_cot.trace ├── mip6_coti.trace ├── mip6_hot.trace └── mip6_hoti.trace ├── modbus ├── 4SICS-GeekLounge-151022-min.pcap ├── fuzz-1011.trace ├── fuzz-72.trace ├── modbus.trace ├── modbusBig.pcap └── modbusSmall.pcap ├── mount └── mount_base.pcap ├── mpls-in-vlan.trace ├── mqtt.pcap ├── mysql ├── auth.trace ├── encrypted.trace ├── mysql-show-engine-innodb-status-no-password.pcap ├── mysql.trace ├── plain-amazon-rds.trace ├── selects_with_new_proto.trace ├── tls-12-amazon-rds.trace └── tls-13-amazon-rds.trace ├── ncp.pcap ├── negative-time.pcap ├── nflog-http.pcap ├── nfs └── nfs_base.pcap ├── nmap-vsn.trace ├── ntp.pcap ├── ntp ├── NTP-digest.pcap ├── NTP_sync.pcap ├── ntp.pcap ├── ntp2.pcap └── ntpmode67.pcap ├── pbb.pcap ├── pe └── pe.trace ├── pop3-unknown-commands.pcap ├── port4242.trace ├── port4243.trace ├── pppoe-over-qinq.pcap ├── pppoe.trace ├── q-in-q.trace ├── radiotap.pcap ├── radius ├── radius.trace └── radius_localhost.pcap ├── raw_layer.pcap ├── raw_packets.trace ├── rdp ├── rdp-proprietary-encryption.pcap ├── rdp-to-ssl.pcap ├── rdp-unknown-keyboard.pcap ├── rdp-x509.pcap ├── rdpeudp-handshake-fail.pcap ├── rdpeudp-handshake-success.pcap └── rdpeudp2-handshake-success.pcap ├── rfb ├── vnc-mac-to-linux.pcap ├── vnc-scanner.pcap └── vncmac.pcap ├── rotation.trace ├── rpc-portmap-sadmind.pcap ├── sip ├── sip-junk-before-request.pcap └── wireshark.trace ├── smb ├── SMBGhost.pcap ├── dssetup_DsRoleGetPrimaryDomainInformation_standalone_workstation.cap ├── raw_ntlm_in_smb.pcap ├── smb1-OSS-fuzz-54883.pcap ├── smb1.pcap ├── smb1_transaction2_request.pcap ├── smb1_transaction2_secondary_request.pcap ├── smb1_transaction_request.pcap ├── smb1_transaction_response.pcap ├── smb1_transaction_secondary_request.pcap ├── smb2.delete-on-close-perms-delete-existing.pcap ├── smb2.pcap ├── smb2_fscontrol.pcap ├── smb2readwrite.pcap ├── smb3.pcap ├── smb311.pcap ├── smb3_multichannel.pcap └── smb3_negotiate_context.pcap ├── smtp-attachment-msg.pcap ├── smtp-multi-addr.pcap ├── smtp-one-side-only.trace ├── smtp.trace ├── snmp ├── leak_test.pcap ├── snmpv1_get.pcap ├── snmpv1_get_short.pcap ├── snmpv1_set.pcap ├── snmpv1_trap.pcap ├── snmpv2_get.pcap ├── snmpv2_get_bulk.pcap ├── snmpv2_get_next.pcap ├── snmpv3_get_next.pcap └── snmpwalk-short.pcap ├── socks-auth.pcap ├── socks-with-ssl.trace ├── socks.trace ├── ssh ├── reverse-ssh.pcap ├── ssh-on-port-80.trace ├── ssh.trace ├── ssh1-ssh2-fingerprints.pcap ├── ssh_client_sends_first_enc_pkt_with_newkeys.pcap ├── ssh_kex_curve25519.pcap ├── ssh_server_sends_first_enc_pkt_with_newkeys.pcap ├── ssh_version_199.pcap └── sshguess.pcap ├── ssl-and-ssh-using-sslh.trace ├── syslog-missing-pri.trace ├── syslog-single-udp.trace ├── tcp ├── fin_retransmission.pcap ├── handshake-reorder.trace ├── http-on-irc-port-missing-syn.pcap ├── miss_end_data.pcap ├── missing-syn.pcap ├── no-handshake.pcap ├── option-27.pcap ├── option-sack.pcap ├── options.pcap ├── payload-syn.trace ├── payload-synack.trace ├── qi_internet_SYNACK_curl_jsonip.pcap ├── reassembly.pcap ├── retransmit-fast009.trace ├── retransmit-timeout.pcap ├── rst-inject-rae.trace ├── single-rst.pcap ├── ssh-dups.pcap ├── syn-synack.pcap ├── syn-then-ack-then-rst.pcap ├── syn-then-rst.pcap ├── syn-then-stuff-then-rst.pcap ├── syn.pcap ├── tcp-fast-open.pcap ├── timestamp.pcap └── truncated-header.pcap ├── tls ├── CVE-2015-3194.pcap ├── cert-no-cn.pcap ├── certificate-request-failed.pcap ├── certificate-with-sct.pcap ├── chrome-34-google.trace ├── chrome-63.0.3211.0-canary-tls_experiment.pcap ├── client-certificate.pcap ├── dhe.pcap ├── dtls1_0.pcap ├── dtls1_2.pcap ├── ecdhe.pcap ├── ecdsa-cert.pcap ├── google-cert-repeat.pcap ├── google-duplicate.trace ├── heartbleed-encrypted-short.pcap ├── heartbleed-encrypted-success.pcap ├── heartbleed-encrypted.pcap ├── heartbleed-success.pcap ├── heartbleed.pcap ├── hrr.pcap ├── imap-starttls.pcap ├── irc-starttls.pcap ├── missing-intermediate.pcap ├── ocsp-http-get.pcap ├── ocsp-request-only.pcap ├── ocsp-request-response.pcap ├── ocsp-response-only.pcap ├── ocsp-revoked.pcap ├── ocsp-stapling-digicert.trace ├── ocsp-stapling-twimg.trace ├── ocsp-stapling.trace ├── pop3-starttls.pcap ├── signed_certificate_timestamp-2.pcap ├── signed_certificate_timestamp.pcap ├── signed_certificate_timestamp_tls1_0.pcap ├── smtp-starttls.pcap ├── ssl-v2.trace ├── ssl.v3.trace ├── telesec.pcap ├── tls-1.2-handshake-failure.trace ├── tls-1.2-stream-keylog.pcap ├── tls-13draft19-early-data.pcap ├── tls-conn-with-extensions.trace ├── tls-early-alert.trace ├── tls-expired-cert.trace ├── tls-fragmented-handshake.pcap.gz ├── tls1.2.trace ├── tls12-decryption.pcap ├── tls13_psk_succesfull.pcap ├── tls13_wolfssl.pcap ├── tls13draft16-chrome55.0.2879.0-canary-aborted.pcap ├── tls13draft16-chrome55.0.2879.0-canary.pcap ├── tls13draft16-ff52.a01-aborted.pcap ├── tls13draft16-ff52.a01.pcap ├── tls13draft23-chrome67.0.3368.0-canary.pcap ├── tls1_1.pcap ├── webrtc-stun.pcap ├── x509-generalizedtime.pcap ├── xmpp-dialback-starttls.pcap └── xmpp-starttls.pcap ├── trunc ├── icmp-header-trunc.pcap ├── icmp-payload-trunc.pcap ├── ip4-trunc.pcap ├── ip6-ext-trunc.pcap ├── ip6-trunc.pcap ├── ipv4-internally-truncated-header.pcap ├── ipv4-truncated-broken-header.pcap ├── mpls-6in6-6in6-4in6-trunc.pcap ├── mpls-6in6-broken.pcap.gz └── trunc-hdr.pcap ├── tunnels ├── 4in4.pcap ├── 4in6.pcap ├── 6in4.pcap ├── 6in6-tunnel-change.pcap ├── 6in6.pcap ├── 6in6in6.pcap ├── Teredo.pcap ├── ayiya3.trace ├── geneve.README ├── geneve.pcap ├── gre-aruba.pcap ├── gre-erspan3-dot1q.pcap ├── gre-pptp.pcap ├── gre-sample.pcap ├── gre-within-gre.pcap ├── gtp │ ├── gtp10_not_0xff.pcap │ ├── gtp1_gn_normal_incl_fragmentation.pcap │ ├── gtp2_different_udp_port.pcap │ ├── gtp3_false_gtp.pcap │ ├── gtp4_udp_2152_inside.pcap │ ├── gtp6_gtp_0x32.pcap │ ├── gtp7_ipv6.pcap │ ├── gtp8_teredo.pcap │ ├── gtp9_unknown_or_too_short_payload.pcap │ ├── gtp_control_prime.pcap │ ├── gtp_create_pdp_ctx.pcap │ ├── gtp_ext_header.pcap │ └── pdp_ctx_messages.trace ├── mpls-6in6-6in6-4in6-invalid-version-4.pcap ├── mpls-6in6-6in6-invalid-version-6.pcap ├── ping6-in-ipv4.pcap ├── socks.pcap ├── teredo-udp-in-udp.pcap ├── teredo_bubble_with_payload.pcap ├── vxlan-encapsulated-http.pcap ├── vxlan-encapsulated-igmp-v2.pcap └── vxlan.pcap ├── udp-multiple-source-ports.pcap ├── udp-signature-test.pcap ├── var-services-std-ports.trace ├── vntag.pcap ├── web.trace ├── wikipedia-filtered-plus-udp.trace ├── wikipedia.trace ├── wlanmon.pcap ├── workshop_2011_browse.trace └── www-odd-url.trace /.bumpversion.cfg: -------------------------------------------------------------------------------- 1 | [bumpversion] 2 | current_version = 0.2.9 3 | commit = True 4 | tag = True 5 | 6 | [bumpversion:file:setup.py] -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/bug-report---.md: -------------------------------------------------------------------------------- 1 | --- 2 | name: "Bug report \U0001F41E" 3 | about: Create a bug report 4 | labels: bug 5 | 6 | --- 7 | 8 | ## Describe the bug 9 | A clear and concise description of what the bug is. 10 | 11 | ### Steps to reproduce 12 | Steps to reproduce the behavior. 13 | 14 | ### Expected behavior 15 | A clear and concise description of what you expected to happen. 16 | 17 | ### Environment 18 | - OS: [e.g. Arch Linux] 19 | - Other details that you think may affect. 20 | 21 | ### Additional context 22 | Add any other context about the problem here. 23 | -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/feature-request---.md: -------------------------------------------------------------------------------- 1 | --- 2 | name: "Feature request \U0001F680" 3 | about: Suggest an idea 4 | labels: enhancement 5 | 6 | --- 7 | 8 | ## Summary 9 | Brief explanation of the feature. 10 | 11 | ### Basic example 12 | Include a basic example or links here. 13 | 14 | ### Motivation 15 | Why are we doing this? What use cases does it support? What is the expected outcome? 16 | -------------------------------------------------------------------------------- /.github/workflows/build_test_linux.yml: -------------------------------------------------------------------------------- 1 | name: build_test_linux 2 | on: 3 | push: 4 | branches: 5 | - main 6 | pull_request: 7 | branches: 8 | - main 9 | jobs: 10 | build_test_linux: 11 | name: ${{ matrix.python-version }} on ${{ matrix.os }} 12 | runs-on: ${{ matrix.os }} 13 | strategy: 14 | fail-fast: false 15 | matrix: 16 | os: ["ubuntu-latest"] 17 | python-version: ["pypy-3.9", 18 | "pypy-3.8", 19 | # "pypy-3.7", 20 | "3.11", 21 | "3.10", 22 | "3.9", 23 | "3.8", 24 | # "3.7" 25 | ] 26 | 27 | steps: 28 | - uses: actions/checkout@v3 29 | with: 30 | submodules: recursive 31 | - name: Setup py-${{ matrix.python-version }} 32 | uses: actions/setup-python@v4 33 | with: 34 | python-version: ${{ matrix.python-version }} 35 | # Caching improves build time, we use pythonLocation to cache everything including wheels to avoid building 36 | # wheels at each build (pandas/Pypy is extremely time consuming) 37 | # sed replacement is performed to rectify PyPy path which ends with /bin 38 | # cache key takes into account the Python version of the runner to avoid version mismatch on updates. 39 | - name: Get pip cache path 40 | id: get-pip-path 41 | run: | 42 | id=$(echo ${{ env.pythonLocation }} | sed 's/\/bin//g') 43 | echo "::set-output name=id::$id" 44 | 45 | - name: Pip cache 46 | uses: actions/cache@v3 47 | id: pip-cache 48 | with: 49 | path: ${{ steps.get-pip-path.outputs.id }} 50 | key: ${{ steps.get-pip-path.outputs.id }}-${{ hashFiles('setup.py') }}-${{ hashFiles('requirements.txt') }} 51 | 52 | - name: Install requirements 53 | if: steps.pip-cache.outputs.cache-hit != 'true' 54 | run: | 55 | python -m pip install --upgrade pip 56 | python -m pip install -r requirements.txt 57 | 58 | - name: Build 59 | run: | 60 | python -m pip install . 61 | 62 | - name: Test 63 | if: startsWith(matrix.os, 'ubuntu') && !startsWith(matrix.python-version, '3.10') 64 | run: | 65 | python -m pytest tests.py 66 | -------------------------------------------------------------------------------- /.github/workflows/build_test_macos.yml: -------------------------------------------------------------------------------- 1 | name: build_test_macos 2 | on: 3 | push: 4 | branches: 5 | - main 6 | pull_request: 7 | branches: 8 | - main 9 | jobs: 10 | build_test_macos: 11 | name: ${{ matrix.python-version }} on ${{ matrix.os }} 12 | runs-on: ${{ matrix.os }} 13 | strategy: 14 | fail-fast: false 15 | matrix: 16 | os: ["macos-12"] 17 | python-version: ["pypy-3.9", 18 | "pypy-3.8", 19 | # "pypy-3.7", 20 | # "3.11", 21 | # Not available yet. 22 | "3.10", 23 | "3.9", 24 | "3.8", 25 | # "3.7" 26 | ] 27 | 28 | steps: 29 | - uses: actions/checkout@v3 30 | with: 31 | submodules: recursive 32 | - name: Setup py-${{ matrix.python-version }} 33 | uses: actions/setup-python@v4 34 | with: 35 | python-version: ${{ matrix.python-version }} 36 | # Caching improves build time, we use pythonLocation to cache everything including wheels to avoid building 37 | # wheels at each build (pandas/Pypy is extremely time consuming) 38 | # sed replacement is performed to rectify PyPy path which ends with /bin 39 | # cache key takes into account the Python version of the runner to avoid version mismatch on updates. 40 | - name: Get pip cache path 41 | id: get-pip-path 42 | run: | 43 | id=$(echo ${{ env.pythonLocation }} | sed 's/\/bin//g') 44 | echo "::set-output name=id::$id" 45 | 46 | - name: Pip cache 47 | uses: actions/cache@v3 48 | id: pip-cache 49 | with: 50 | path: ${{ steps.get-pip-path.outputs.id }} 51 | key: ${{ steps.get-pip-path.outputs.id }}-${{ hashFiles('setup.py') }}-${{ hashFiles('requirements.txt') }} 52 | 53 | - name: Install requirements 54 | if: steps.pip-cache.outputs.cache-hit != 'true' 55 | run: | 56 | python -m pip install --upgrade pip 57 | python -m pip install -r requirements.txt 58 | 59 | - name: Build 60 | run: | 61 | python -m pip install . 62 | 63 | - name: Test 64 | # On other versions then 3.9, we test only. (without coverage generation) 65 | if: startsWith(matrix.os, 'macos') && !startsWith(matrix.python-version, '3.9') && !startsWith(github.ref, 'refs/tags/') 66 | run: | 67 | python -m pytest tests.py 68 | -------------------------------------------------------------------------------- /.github/workflows/build_test_windows.yml: -------------------------------------------------------------------------------- 1 | name: build_test_windows 2 | on: 3 | push: 4 | branches: 5 | - main 6 | pull_request: 7 | branches: 8 | - main 9 | jobs: 10 | build_test_windows: 11 | name: ${{ matrix.python-version }} on ${{ matrix.os }} 12 | runs-on: ${{ matrix.os }} 13 | strategy: 14 | fail-fast: false 15 | matrix: 16 | os: ["windows-latest"] 17 | python-version: ["pypy-3.9", 18 | "pypy-3.8", 19 | # "pypy-3.7", does work atm. 20 | "3.11", 21 | "3.9", 22 | # "3.8", 23 | # "3.7" 24 | ] 25 | 26 | steps: 27 | - uses: actions/checkout@v3 28 | with: 29 | submodules: recursive 30 | - name: Setup py-${{ matrix.python-version }} 31 | uses: actions/setup-python@v4 32 | with: 33 | python-version: ${{ matrix.python-version }} 34 | 35 | - name: Setup msys2 36 | uses: msys2/setup-msys2@v2 37 | with: 38 | msystem: MINGW64 39 | update: true 40 | install: git unzip mingw-w64-x86_64-libjpeg-turbo mingw-w64-x86_64-zlib mingw-w64-x86_64-libtiff mingw-w64-x86_64-freetype mingw-w64-x86_64-lcms2 mingw-w64-x86_64-libwebp mingw-w64-x86_64-openjpeg2 mingw-w64-x86_64-libimagequant mingw-w64-x86_64-libraqm mingw-w64-x86_64-gcc mingw-w64-x86_64-python3 mingw-w64-x86_64-python3-pip mingw-w64-x86_64-python3-setuptools 41 | 42 | - name: Install requirements 43 | run: | 44 | python -m pip install --upgrade pip 45 | python -m pip install -r requirements.txt 46 | 47 | - name: Build 48 | env: 49 | MSYSTEM: MINGW64 50 | MSYS2_PATH: D:/a/_temp/msys64 51 | run: | 52 | python -m pip install . 53 | 54 | - name: Test 55 | # On other versions then 3.9, we test only. (without coverage generation) 56 | if: startsWith(matrix.os, 'windows') && !startsWith(matrix.python-version, '3.9') && !startsWith(github.ref, 'refs/tags/') 57 | run: | 58 | python -m pytest tests.py 59 | -------------------------------------------------------------------------------- /.github/workflows/build_wheel_publish.yml: -------------------------------------------------------------------------------- 1 | name: build_wheel_publish 2 | 3 | on: 4 | release: 5 | types: [created] 6 | 7 | jobs: 8 | build_wheels: 9 | name: Build wheels 10 | runs-on: ubuntu-latest 11 | steps: 12 | - uses: actions/checkout@v3 13 | - name: Set up Python 14 | uses: actions/setup-python@v3 15 | with: 16 | python-version: '3.x' 17 | - name: Install dependencies 18 | run: | 19 | python -m pip install --upgrade pip 20 | pip install build 21 | - name: Build package 22 | run: python -m build 23 | - name: Publish package 24 | uses: pypa/gh-action-pypi-publish@27b31702a0e7fc50959f5ad993c78deac1bdfc29 25 | with: 26 | user: __token__ 27 | password: ${{ secrets.PYPI_API_TOKEN }} 28 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | # Byte-compiled / optimized / DLL files 2 | __pycache__/ 3 | *.py[cod] 4 | *$py.class 5 | 6 | # Ignore scan results 7 | *.json 8 | *.xml 9 | 10 | .vscode 11 | 12 | # C extensions 13 | *.so 14 | 15 | # Distribution / packaging 16 | .Python 17 | build/ 18 | develop-eggs/ 19 | dist/ 20 | downloads/ 21 | eggs/ 22 | .eggs/ 23 | lib/ 24 | lib64/ 25 | parts/ 26 | sdist/ 27 | var/ 28 | wheels/ 29 | pip-wheel-metadata/ 30 | share/python-wheels/ 31 | *.egg-info/ 32 | .installed.cfg 33 | *.egg 34 | MANIFEST 35 | 36 | # PyInstaller 37 | # Usually these files are written by a python script from a template 38 | # before PyInstaller builds the exe, so as to inject date/other infos into it. 39 | *.manifest 40 | *.spec 41 | 42 | # Installer logs 43 | pip-log.txt 44 | pip-delete-this-directory.txt 45 | 46 | # Unit test / coverage reports 47 | htmlcov/ 48 | .tox/ 49 | .nox/ 50 | .coverage 51 | .coverage.* 52 | .cache 53 | nosetests.xml 54 | coverage.xml 55 | *.cover 56 | *.py,cover 57 | .hypothesis/ 58 | .pytest_cache/ 59 | 60 | # Translations 61 | *.mo 62 | *.pot 63 | 64 | # Django stuff: 65 | *.log 66 | local_settings.py 67 | db.sqlite3 68 | db.sqlite3-journal 69 | 70 | # Flask stuff: 71 | instance/ 72 | .webassets-cache 73 | 74 | # Scrapy stuff: 75 | .scrapy 76 | 77 | # Sphinx documentation 78 | docs/_build/ 79 | 80 | # PyBuilder 81 | target/ 82 | 83 | # Jupyter Notebook 84 | .ipynb_checkpoints 85 | 86 | # IPython 87 | profile_default/ 88 | ipython_config.py 89 | 90 | # pyenv 91 | .python-version 92 | 93 | # pipenv 94 | # According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control. 95 | # However, in case of collaboration, if having platform-specific dependencies or dependencies 96 | # having no cross-platform support, pipenv may install dependencies that don't work, or not 97 | # install all needed dependencies. 98 | #Pipfile.lock 99 | 100 | # PEP 582; used by e.g. github.com/David-OConnor/pyflow 101 | __pypackages__/ 102 | 103 | # Celery stuff 104 | celerybeat-schedule 105 | celerybeat.pid 106 | 107 | # SageMath parsed files 108 | *.sage.py 109 | 110 | # Environments 111 | .env 112 | .venv 113 | env/ 114 | venv/ 115 | ENV/ 116 | env.bak/ 117 | venv.bak/ 118 | 119 | # Spyder project settings 120 | .spyderproject 121 | .spyproject 122 | 123 | # Rope project settings 124 | .ropeproject 125 | 126 | # mkdocs documentation 127 | /site 128 | 129 | # mypy 130 | .mypy_cache/ 131 | .dmypy.json 132 | dmypy.json 133 | 134 | # Pyre type checker 135 | .pyre/ 136 | 137 | tests/images/* -------------------------------------------------------------------------------- /CITATION.cff: -------------------------------------------------------------------------------- 1 | cff-version: 1.1.0 2 | message: "If you use this software, please cite it as below." 3 | authors: 4 | - family-names: Machmeier 5 | given-names: Stefan 6 | orcid: "https://orcid.org/0000-0002-7028-1755" 7 | - family-names: Heuveline 8 | given-names: Vincent 9 | orcid: "https://orcid.org/0000-0002-2217-7558" 10 | title: "heiFIP: A network traffic image converter" 11 | doi: "10.5281/zenodo.8348868" 12 | version: v1.1.1 13 | date-released: 2023-09-15 -------------------------------------------------------------------------------- /assets/heiFIP.svg: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 19 | 38 | 40 | 46 | 47 | 52 | 57 | heiFIP 68 | 74 | 80 | 81 | 82 | -------------------------------------------------------------------------------- /assets/heiFIP_logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/assets/heiFIP_logo.png -------------------------------------------------------------------------------- /assets/heiFIP_logo.svg: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 19 | 38 | 40 | 46 | 47 | 52 | 57 | heiFIP 68 | 74 | 80 | 81 | 82 | -------------------------------------------------------------------------------- /examples/flow-tiled.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/examples/flow-tiled.png -------------------------------------------------------------------------------- /examples/markov-flow.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/examples/markov-flow.png -------------------------------------------------------------------------------- /examples/markov-packet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/examples/markov-packet.png -------------------------------------------------------------------------------- /examples/packet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/examples/packet.png -------------------------------------------------------------------------------- /heifip/__init__.py: -------------------------------------------------------------------------------- 1 | CONTEXT_SETTINGS = dict(help_option_names=["-h", "--help"], show_default=True) 2 | 3 | __author__ = "Stefan Machmeier" 4 | __copyright__ = "Copyright 2023, heiFIP" 5 | __credits__ = ["Manuel Trageser"] 6 | __license__ = "EUPL" 7 | __version__ = "1.1.1" 8 | __maintainer__ = "Stefan Machmeier" 9 | __email__ = "stefan.machmeier@uni-heidelberg.de" 10 | __status__ = "Production" -------------------------------------------------------------------------------- /heifip/exceptions/__init__.py: -------------------------------------------------------------------------------- 1 | __author__ = "Stefan Machmeier" 2 | __copyright__ = "Copyright 2023, heiFIP" 3 | __credits__ = ["Manuel Trageser"] 4 | __license__ = "EUPL" 5 | __version__ = "1.1.1" 6 | __maintainer__ = "Stefan Machmeier" 7 | __email__ = "stefan.machmeier@uni-heidelberg.de" 8 | __status__ = "Production" 9 | 10 | class FIPWrongParameterException(Exception): 11 | """Wrong Parameter passed""" 12 | 13 | -------------------------------------------------------------------------------- /heifip/images/__init__.py: -------------------------------------------------------------------------------- 1 | from abc import ABC, abstractmethod 2 | 3 | __author__ = "Stefan Machmeier" 4 | __copyright__ = "Copyright 2023, heiFIP" 5 | __credits__ = ["Manuel Trageser"] 6 | __license__ = "EUPL" 7 | __version__ = "1.1.1" 8 | __maintainer__ = "Stefan Machmeier" 9 | __email__ = "stefan.machmeier@uni-heidelberg.de" 10 | __status__ = "Production" 11 | 12 | 13 | class NetworkTrafficImage(ABC): 14 | def __init__(self, fill=0, dim=8) -> None: 15 | self.fill = fill 16 | self.dim = dim 17 | -------------------------------------------------------------------------------- /heifip/images/flow.py: -------------------------------------------------------------------------------- 1 | import binascii 2 | 3 | import numpy as np 4 | from scapy.all import Packet, raw 5 | 6 | from heifip.images import NetworkTrafficImage 7 | 8 | 9 | class FlowImage(NetworkTrafficImage): 10 | def __init__( 11 | self, 12 | packets, 13 | dim=16, 14 | fill=0, 15 | append=False, 16 | ) -> None: 17 | NetworkTrafficImage.__init__(self, fill, dim) 18 | self.packets = packets 19 | self.append = append 20 | self.matrix, self.binaries = self.__get_matrix(self.dim, self.append, self.fill, self.packets) 21 | del packets 22 | 23 | 24 | def __get_matrix(self, dim: int, append: bool, fill: int, packets: [Packet]): 25 | """ 26 | Creates a matrix of a list of Scapy Packet. 27 | """ 28 | binaries = [] 29 | for packet in self.packets: 30 | # get Hex data 31 | hexst = binascii.hexlify(raw(packet.packet)) 32 | # Append octet as integer 33 | binaries.append( 34 | [int(hexst[i : i + 2], 16) for i in range(0, len(hexst), 2)] 35 | ) 36 | fh = None 37 | # Append packets after another or write each packet in a row 38 | if append: 39 | fh = np.concatenate([np.array(xi) for xi in binaries]) 40 | rn = len(fh) // dim + (len(fh) % dim > 0) 41 | fh = np.pad(fh, (0, (rn * dim) - fh.shape[0]), 'constant') 42 | fh = fh.reshape(rn, dim) 43 | else: 44 | length = max(map(len, binaries)) 45 | fh = np.array([xi + [fill] * (length - len(xi)) for xi in binaries]) 46 | 47 | fh = np.uint8(fh) 48 | 49 | return fh, binaries 50 | -------------------------------------------------------------------------------- /heifip/images/flow_tiled_auto.py: -------------------------------------------------------------------------------- 1 | import binascii 2 | 3 | import numpy as np 4 | from scapy.all import Packet, raw 5 | 6 | from heifip.images import NetworkTrafficImage 7 | 8 | 9 | class FlowImageTiledAuto(NetworkTrafficImage): 10 | def __init__( 11 | self, 12 | packets, 13 | dim=16, 14 | fill=0, 15 | auto_dim=False, 16 | ) -> None: 17 | NetworkTrafficImage.__init__(self, fill, dim) 18 | self.packets = packets 19 | self.auto_dim = auto_dim 20 | self.matrix, self.binaries = self.__get_matrix_tiled(self.fill, self.dim, self.auto_dim, packets) 21 | del packets 22 | 23 | def __get_matrix_tiled(self, fill: int, dim: int, auto_dim: bool, packets: [Packet]): 24 | """ 25 | Creates a matrix of a list of Scapy Packet. 26 | Packets are tiled into a quadratic representation. 27 | """ 28 | binaries = [] 29 | for packet in self.packets: 30 | # get Hex data 31 | hexst = binascii.hexlify(raw(packet.packet)) 32 | # Append octet as integer 33 | binaries.append( 34 | [int(hexst[i : i + 2], 16) for i in range(0, len(hexst), 2)] 35 | ) 36 | 37 | length = max(map(len, binaries)) 38 | # Get dim of packet, using auto_dim uses the largest packet as dim reference 39 | if auto_dim: 40 | dim = int(np.ceil(np.sqrt(length))) 41 | 42 | result = [] 43 | for x in binaries: 44 | x = x[: dim * dim] 45 | x = np.array(x + [fill] * (dim * dim - len(x))) 46 | x = x.reshape(dim, dim) 47 | result.append(x) 48 | 49 | # Get size of total image 50 | length_total = len(result) 51 | dim_total = int(np.ceil(np.sqrt(length_total))) 52 | # dim_total = 4 53 | 54 | # Create tiled image 55 | fh = self.__tile_images(result, dim_total, dim) 56 | # Convert to int 57 | fh = np.uint8(fh) 58 | return fh, binaries 59 | 60 | def __tile_images(self, images, cols: int, dim: int): 61 | """Tile images of same size to grid with given number of columns. 62 | 63 | Args: 64 | images (collection of ndarrays) 65 | cols (int): number of colums 66 | 67 | Returns: 68 | ndarray: stitched image 69 | """ 70 | k = 0 71 | rows = [] 72 | for i in range(0, cols): 73 | row = None 74 | for j in range(0, cols): 75 | if len(images) > k: 76 | im = images[k] 77 | else: 78 | im = np.zeros((dim, dim)) 79 | 80 | if row is None: 81 | row = im 82 | else: 83 | row = np.concatenate((row, im), axis=1) 84 | k += 1 85 | rows.append(row) 86 | tiled = np.concatenate(rows) 87 | 88 | return tiled -------------------------------------------------------------------------------- /heifip/images/flow_tiled_fixed.py: -------------------------------------------------------------------------------- 1 | import binascii 2 | 3 | import numpy as np 4 | from scapy.all import Packet, raw 5 | 6 | from heifip.images import NetworkTrafficImage 7 | 8 | 9 | class FlowImageTiledFixed(NetworkTrafficImage): 10 | def __init__( 11 | self, 12 | packets, 13 | dim=16, 14 | fill=0, 15 | cols=3, 16 | ) -> None: 17 | NetworkTrafficImage.__init__(self, fill, dim) 18 | self.packets = packets 19 | self.cols = cols 20 | self.matrix, self.binaries = self.__get_matrix_tiled(self.fill, self.dim, self.cols, packets) 21 | del packets 22 | 23 | def __get_matrix_tiled(self, fill: int, dim: int, cols: int, packets: [Packet]): 24 | """ 25 | Creates a matrix of a list of Scapy Packet. 26 | Packets are tiled into a quadratic representation. 27 | """ 28 | binaries = [] 29 | for packet in self.packets: 30 | # get Hex data 31 | hexst = binascii.hexlify(raw(packet.packet)) 32 | # Append octet as integer 33 | binaries.append( 34 | [int(hexst[i : i + 2], 16) for i in range(0, len(hexst), 2)] 35 | ) 36 | 37 | result = [] 38 | for x in binaries: 39 | x = x[: dim * dim] 40 | x = np.array(x + [fill] * (dim * dim - len(x))) 41 | x = x.reshape(dim, dim) 42 | result.append(x) 43 | 44 | # Create tiled image 45 | fh = self.__tile_images(result, cols, dim) 46 | # Convert to int 47 | fh = np.uint8(fh) 48 | return fh, binaries 49 | 50 | def __tile_images(self, images, cols: int, dim: int): 51 | """Tile images of same size to grid with given number of columns. 52 | 53 | Args: 54 | images (collection of ndarrays) 55 | cols (int): number of colums 56 | 57 | Returns: 58 | ndarray: stitched image 59 | """ 60 | k = 0 61 | rows = [] 62 | for i in range(0, cols): 63 | row = None 64 | for j in range(0, cols): 65 | if len(images) > k: 66 | im = images[k] 67 | else: 68 | im = np.zeros((dim, dim)) 69 | 70 | if row is None: 71 | row = im 72 | else: 73 | row = np.concatenate((row, im), axis=1) 74 | k += 1 75 | 76 | rows.append(row) 77 | tiled = np.concatenate(rows) 78 | 79 | return tiled -------------------------------------------------------------------------------- /heifip/images/markovchain.py: -------------------------------------------------------------------------------- 1 | import numpy as np 2 | from scapy.all import Packet 3 | 4 | from heifip.images import NetworkTrafficImage 5 | 6 | 7 | class MarkovTransitionMatrix(NetworkTrafficImage): 8 | def __init__( 9 | self, 10 | ) -> None: 11 | NetworkTrafficImage.__init__(self) 12 | 13 | def bit_array(self, packet): 14 | bytes_as_bits = ''.join(format(byte, '08b') for byte in bytes(packet.packet)) 15 | transition = [] 16 | for i in range(0, len(bytes_as_bits), 4): 17 | transition.append(int(bytes_as_bits[i:i+4], 2)) 18 | return transition 19 | 20 | def transition_matrix(self, transitions): 21 | n = 16 22 | 23 | M = [[0]*n for _ in range(n)] 24 | 25 | for (i,j) in zip(transitions,transitions[1:]): 26 | M[i][j] += 1 27 | 28 | #now convert to probabilities: 29 | for row in M: 30 | s = sum(row) 31 | if s > 0: 32 | row[:] = [f/s for f in row] 33 | return M 34 | 35 | class MarkovTransitionMatrixFlow(MarkovTransitionMatrix): 36 | def __init__( 37 | self, 38 | packets: [Packet], 39 | cols: int = 4 40 | ) -> None: 41 | MarkovTransitionMatrix.__init__(self) 42 | 43 | result = [] 44 | for packet in packets: 45 | transition = self.bit_array(packet) 46 | m = self.transition_matrix(transition) 47 | result.append(np.array(m)) 48 | 49 | # Create tiled image 50 | fh = self.__tile_images(result, cols, 16) 51 | 52 | # Convert to int 53 | self.matrix = fh 54 | del packets 55 | 56 | def __tile_images(self, images, cols, dim): 57 | """Tile images of same size to grid with given number of columns. 58 | 59 | Args: 60 | images (collection of ndarrays) 61 | cols (int): number of colums 62 | 63 | Returns: 64 | ndarray: stitched image 65 | """ 66 | k = 0 67 | rows = [] 68 | for i in range(0, cols): 69 | row = None 70 | for j in range(0, cols): 71 | if len(images) > k: 72 | im = images[k] 73 | else: 74 | im = np.zeros((dim, dim)) 75 | 76 | if row is None: 77 | row = im 78 | else: 79 | row = np.concatenate((row, im), axis=1) 80 | k += 1 81 | rows.append(row) 82 | tiled = np.concatenate(rows) 83 | 84 | return tiled 85 | 86 | class MarkovTransitionMatrixPacket(MarkovTransitionMatrix): 87 | def __init__( 88 | self, 89 | packet: Packet, 90 | ) -> None: 91 | MarkovTransitionMatrix.__init__(self) 92 | 93 | transition = self.bit_array(packet) 94 | m = self.transition_matrix(transition) 95 | self.matrix = np.array(m) 96 | 97 | del packet 98 | -------------------------------------------------------------------------------- /heifip/images/packet.py: -------------------------------------------------------------------------------- 1 | import binascii 2 | 3 | import numpy as np 4 | from scapy.all import Packet, raw 5 | 6 | from heifip.images import NetworkTrafficImage 7 | 8 | 9 | class PacketImage(NetworkTrafficImage): 10 | def __init__( 11 | self, 12 | packet: Packet, 13 | dim=8, 14 | fill=0, 15 | auto_dim=False 16 | ) -> None: 17 | NetworkTrafficImage.__init__(self, fill, dim) 18 | self.auto_dim = auto_dim 19 | self.matrix, self.binaries = self.__get_matrix(self.dim, self.auto_dim, self.fill, packet) 20 | 21 | del packet 22 | 23 | def __get_matrix(self, dim: int, auto_dim: int, fill: int, packet: Packet): 24 | # get Hex data 25 | hexst = binascii.hexlify(raw(packet.packet)) 26 | # Append octet as integer 27 | binaries = [int(hexst[i: i + 2], 16) for i in range(0, len(hexst), 2)] 28 | # Get min dim 29 | length = len(binaries) 30 | if auto_dim: 31 | dim = int(np.ceil(np.sqrt(length))) 32 | 33 | # Create array and shape it to dim 34 | fh = np.array(binaries + [fill] * (dim * dim - len(binaries))) 35 | fh = fh[0:dim * dim].reshape(dim, dim) 36 | 37 | fh = np.uint8(fh) 38 | 39 | return fh, binaries 40 | -------------------------------------------------------------------------------- /heifip/layers/__init__.py: -------------------------------------------------------------------------------- 1 | import os 2 | from enum import Enum, unique 3 | 4 | from scapy.all import (Packet,load_layer, 5 | sniff, wrpcap) 6 | from scapy.layers.dns import DNS 7 | from scapy.layers.http import HTTP, HTTPRequest, HTTPResponse 8 | from scapy.layers.inet import IP, TCP, UDP, Ether 9 | from scapy.layers.inet6 import IPv6 10 | 11 | from heifip.layers.dns import DNSPacket 12 | from heifip.layers.http import (HTTPPacket, HTTPRequestPacket, 13 | HTTPResponsePacket) 14 | from heifip.layers.ip import IPPacket 15 | from heifip.layers.packet import EtherPacket, FIPPacket, UnknownPacket 16 | from heifip.layers.transport import TransportPacket 17 | 18 | __author__ = "Stefan Machmeier" 19 | __copyright__ = "Copyright 2023, heiFIP" 20 | __credits__ = ["Manuel Trageser"] 21 | __license__ = "EUPL" 22 | __version__ = "1.1.1" 23 | __maintainer__ = "Stefan Machmeier" 24 | __email__ = "stefan.machmeier@uni-heidelberg.de" 25 | __status__ = "Production" 26 | 27 | SUPPORTED_HEADERS = [IP, IPv6, DNS, HTTPRequest, HTTPResponse, TCP, UDP] 28 | 29 | 30 | @unique 31 | class PacketProcessorType(Enum): 32 | NONE = 1 33 | HEADER = 2 34 | 35 | 36 | class PacketProcessor: 37 | def __init__( 38 | self, 39 | file_extension="pcap", 40 | ) -> None: 41 | self.hash_dict = set() 42 | load_layer("tls") 43 | 44 | def write_packet(self) -> None: 45 | # Write pcap 46 | wrpcap(f"{self.filename}_converted.pcap", self.packets, append=True) 47 | 48 | def read_packets_file(self, file: str, preprocessing_type: PacketProcessorType) -> [FIPPacket]: 49 | assert os.path.isfile(file) 50 | 51 | # Read PCAP file with Scapy 52 | packets = [] 53 | # TODO Only read max number of packets 54 | pcap = sniff(offline=file, count=64) 55 | for pkt in pcap: 56 | # Start preprocessing for each packet 57 | processed_packet = self.__preprocessing(pkt, preprocessing_type) 58 | # TODO Run extract here to reduce amount of loops in code. Atm very inefficient for computation time and memory 59 | # In case packet returns None 60 | if processed_packet != None: 61 | if not processed_packet.hash in self.hash_dict: 62 | # TODO Turn off/on hash filtering 63 | # self.hash_dict.add(processed_packet.hash) 64 | packets.append(processed_packet) 65 | return packets 66 | 67 | 68 | def read_packets_packet(self, packet: [Packet], preprocessing_type: PacketProcessorType) -> [FIPPacket]: 69 | # Read PCAP file with Scapy 70 | packets = [] 71 | for pkt in packet: 72 | # Start preprocessing for each packet 73 | processed_packet = self.__preprocessing(pkt, preprocessing_type) 74 | # In case packet returns None 75 | if processed_packet != None: 76 | if not processed_packet.hash in self.hash_dict: 77 | self.hash_dict.add(processed_packet.hash) 78 | packets.append(processed_packet) 79 | return packets 80 | 81 | def __preprocessing(self, packet: Packet, preprocessing_type: PacketProcessorType) -> FIPPacket: 82 | fippacket = UnknownPacket(packet) 83 | if HTTP in fippacket.layer_map: 84 | if HTTPRequest in fippacket.layer_map: 85 | fippacket = fippacket.convert(HTTPRequestPacket, fippacket) 86 | elif HTTPResponse in fippacket.layer_map: 87 | fippacket = fippacket.convert(HTTPResponsePacket, fippacket) 88 | else: 89 | fippacket = fippacket.convert(HTTPPacket, fippacket) 90 | elif DNS in fippacket.layer_map: 91 | fippacket = fippacket.convert(DNSPacket, fippacket) 92 | elif TCP in fippacket.layer_map or UDP in fippacket.layer_map: 93 | fippacket = fippacket.convert(TransportPacket, fippacket) 94 | elif IP in fippacket.layer_map or IPv6 in fippacket.layer_map: 95 | fippacket = fippacket.convert(IPPacket, fippacket) 96 | elif Ether in fippacket.layer_map: 97 | fippacket = fippacket.convert(EtherPacket, fippacket) 98 | 99 | if preprocessing_type == "HEADER": 100 | fippacket.header_preprocessing() 101 | 102 | return fippacket 103 | -------------------------------------------------------------------------------- /heifip/layers/dns.py: -------------------------------------------------------------------------------- 1 | from scapy.all import Packet 2 | from scapy.layers.dns import DNS 3 | 4 | from heifip.layers.transport import TransportPacket 5 | from heifip.plugins.header import CustomDNS, CustomDNSQR, CustomDNSRR 6 | 7 | 8 | class DNSPacket(TransportPacket): 9 | def __init__(self, packet: Packet, address_mapping={}, layer_map={}) -> None: 10 | TransportPacket.__init__(self, packet, address_mapping, layer_map) 11 | 12 | def header_preprocessing(self): 13 | # TODO: Fix issue with DNS processing 14 | if self.packet[DNS].qd: 15 | self.__header_preprocessing_message_type(self.packet, "qd") 16 | if self.packet[DNS].an: 17 | self.__header_preprocessing_message_type(self.packet, "an") 18 | if self.packet[DNS].ns: 19 | self.__header_preprocessing_message_type(self.packet, "ns") 20 | if self.packet[DNS].ar: 21 | self.__header_preprocessing_message_type(self.packet, "ar") 22 | 23 | layer_copy = self.packet[DNS] 24 | 25 | new_layer = CustomDNS( 26 | qr=layer_copy.qr, 27 | opcode=layer_copy.opcode, 28 | aa=layer_copy.aa, 29 | tc=layer_copy.tc, 30 | rd=layer_copy.rd, 31 | ra=layer_copy.ra, 32 | z=layer_copy.z, 33 | ad=layer_copy.ad, 34 | cd=layer_copy.cd, 35 | rcode=layer_copy.rcode, 36 | qd=layer_copy.qd, 37 | an=layer_copy.an, 38 | ns=layer_copy.ns, 39 | ar=layer_copy.ar, 40 | ) 41 | 42 | self.packet[DNS] /= new_layer 43 | 44 | super().header_preprocessing() 45 | 46 | 47 | def __header_preprocessing_message_type(self, packet: Packet, message_type: str): 48 | message = getattr(packet[DNS], message_type) 49 | if message_type == "qd": 50 | new_message = CustomDNSQR(qname=message.qname, qtype=message.qtype) 51 | 52 | while message:=message.payload: 53 | new_message /= CustomDNSQR( 54 | qname=message.qname, 55 | qtype=message.qtype, 56 | ) 57 | else: 58 | new_message = CustomDNSRR( 59 | rrname=message.rrname, type=message.type 60 | ) 61 | 62 | while message:=message.payload: 63 | new_message /= CustomDNSRR( 64 | rrname=message.rrname, type=message.type 65 | ) 66 | 67 | setattr(packet[DNS], message_type, new_message) 68 | -------------------------------------------------------------------------------- /heifip/layers/http.py: -------------------------------------------------------------------------------- 1 | import hashlib 2 | 3 | from scapy.all import Packet, Raw 4 | from scapy.layers.http import HTTPRequest, HTTPResponse 5 | 6 | from heifip.layers.transport import TransportPacket 7 | from heifip.plugins.header import (CustomHTTP_Request, 8 | CustomHTTP_Response) 9 | 10 | 11 | class HTTPPacket(TransportPacket): 12 | def __init__(self, packet: Packet, address_mapping={}, layer_map={}): 13 | TransportPacket.__init__(self, packet, address_mapping, layer_map) 14 | def header_preprocessing(self): 15 | super().header_preprocessing() 16 | 17 | 18 | class HTTPRequestPacket(HTTPPacket): 19 | def __init__(self, packet: Packet, address_mapping={}, layer_map={}): 20 | HTTPPacket.__init__(self, packet, address_mapping, layer_map) 21 | self.hash = hashlib.md5(f"{self.packet[HTTPRequest].Path},{self.packet[HTTPRequest].Method},{self.packet[HTTPRequest].Accept}".encode('utf-8')).hexdigest() 22 | if Raw in self.layer_map: 23 | self.packet[HTTPRequest].remove_payload() 24 | 25 | def header_preprocessing(self): 26 | layer_copy = self.packet[HTTPRequest] 27 | layer_copy = CustomHTTP_Request( 28 | Method=layer_copy.Method, 29 | Path=layer_copy.Path, 30 | User_Agent=layer_copy.User_Agent, 31 | Content_Type=layer_copy.Content_Type, 32 | Connection=layer_copy.Connection, 33 | Accept=layer_copy.Accept, 34 | Accept_Charset=layer_copy.Accept_Charset, 35 | Cookie=layer_copy.Cookie, 36 | TE=layer_copy.TE, 37 | ) 38 | 39 | if not self.packet[HTTPRequest].payload is None: 40 | layer_copy.payload = self.packet[HTTPRequest].payload 41 | 42 | self.packet[HTTPRequest] = layer_copy 43 | 44 | super().header_preprocessing() 45 | 46 | 47 | class HTTPResponsePacket(HTTPPacket): 48 | def __init__(self, packet: Packet, address_mapping={}, layer_map={}): 49 | HTTPPacket.__init__(self, packet, address_mapping, layer_map) 50 | self.hash = hashlib.md5(f"{self.packet[HTTPResponse].Server},{self.packet[HTTPResponse].Status_Code},{self.packet[HTTPResponse].Connection}".encode('utf-8')).hexdigest() 51 | if Raw in self.layer_map: 52 | self.packet[HTTPResponse].remove_payload() 53 | 54 | def header_preprocessing(self): 55 | layer_copy = self.packet[HTTPResponse] 56 | layer_copy = CustomHTTP_Response( 57 | Status_Code=layer_copy.Status_Code, 58 | Server=layer_copy.Server, 59 | Content_Type=layer_copy.Content_Type, 60 | Connection=layer_copy.Connection, 61 | Content_Encoding=layer_copy.Content_Encoding, 62 | Set_Cookie=layer_copy.Set_Cookie, 63 | Transfer_Encoding=layer_copy.Transfer_Encoding, 64 | ) 65 | 66 | if self.packet[HTTPResponse].payload != None: 67 | layer_copy.payload = self.packet[HTTPResponse].payload 68 | 69 | self.packet[HTTPResponse] = layer_copy 70 | 71 | super().header_preprocessing() 72 | -------------------------------------------------------------------------------- /heifip/layers/ip.py: -------------------------------------------------------------------------------- 1 | import hashlib 2 | 3 | from scapy.all import Packet, RandIP, RandIP6, Raw 4 | from scapy.layers.http import HTTP 5 | from scapy.layers.inet import IP, TCP, UDP 6 | from scapy.layers.inet6 import IPv6 7 | from scapy.layers.tls.all import TLS 8 | 9 | from heifip.layers.packet import EtherPacket 10 | from heifip.plugins.header import CustomIP, CustomIPv6 11 | 12 | 13 | class IPPacket(EtherPacket): 14 | def __init__(self, packet: Packet, address_mapping={}, layer_map={}): 15 | EtherPacket.__init__(self, packet, address_mapping, layer_map) 16 | if IP in self.layer_map: 17 | self.__filter_ipv4() 18 | self.hash = hashlib.md5(f"{self.packet[IP].version},{self.packet[IP].flags},{self.packet[IP].proto}".encode('utf-8')).hexdigest() 19 | if TLS in self.layer_map and not (TCP in self.layer_map or UDP in self.layer_map): 20 | self.packet[IP].remove_payload() 21 | if Raw in self.layer_map and not (TCP in self.layer_map or UDP in self.layer_map or HTTP in self.layer_map): 22 | self.packet[IP].remove_payload() 23 | elif IPv6 in self.layer_map: 24 | self.__filter_ipv6() 25 | self.hash = hashlib.md5(f"{self.packet[IPv6].version},{self.packet[IPv6].tc},{self.packet[IPv6].hlim}".encode('utf-8')).hexdigest() 26 | if TLS in self.layer_map and not (TCP in self.layer_map or UDP in self.layer_map): 27 | self.packet[IPv6].remove_payload() 28 | if Raw in self.layer_map and not (TCP in self.layer_map or UDP in self.layer_map or HTTP in self.layer_map): 29 | self.packet[IPv6].remove_payload() 30 | 31 | def __filter_ipv4(self): 32 | previous_src = self.packet[IP].src 33 | previous_dst = self.packet[IP].dst 34 | 35 | if previous_src in self.address_mapping: 36 | new_src = self.address_mapping[previous_src] 37 | else: 38 | new_src = RandIP()._fix() 39 | self.address_mapping[previous_src] = new_src 40 | 41 | if previous_dst in self.address_mapping: 42 | new_dst = self.address_mapping[previous_dst] 43 | else: 44 | new_dst = RandIP()._fix() 45 | self.address_mapping[previous_dst] = new_dst 46 | 47 | self.packet[IP].src = new_src 48 | self.packet[IP].dst = new_dst 49 | 50 | def header_preprocessing(self): 51 | if IP in self.layer_map: 52 | layer_copy = self.packet[IP] 53 | layer_copy = self.header_preprocessing_ipv4(layer_copy) 54 | if self.packet[IP].payload != None: 55 | layer_copy.payload = self.packet[IP].payload 56 | self.packet[IP] = layer_copy 57 | if IPv6 in self.layer_map: 58 | layer_copy = self.packet[IPv6] 59 | layer_copy = self.header_preprocessing_ipv6(layer_copy) 60 | if self.packet[IPv6].payload != None: 61 | layer_copy.payload = self.packet[IPv6].payload 62 | self.packet[IPv6] = layer_copy 63 | 64 | super().header_preprocessing() 65 | 66 | def header_preprocessing_ipv4(self, layer_copy: Packet): 67 | return CustomIP( 68 | version=layer_copy.version, 69 | tos=layer_copy.tos, 70 | ttl=layer_copy.ttl, 71 | flags=layer_copy.flags, 72 | proto=layer_copy.proto, 73 | ) 74 | 75 | def __filter_ipv6(self): 76 | previous_src = self.packet[IPv6].src 77 | previous_dst = self.packet[IPv6].dst 78 | 79 | if previous_src in self.address_mapping: 80 | new_src = self.address_mapping[previous_src] 81 | else: 82 | new_src = RandIP6()._fix() 83 | self.address_mapping[previous_src] = new_src 84 | 85 | if previous_dst in self.address_mapping: 86 | new_dst = self.address_mapping[previous_dst] 87 | else: 88 | new_dst = RandIP6()._fix() 89 | self.address_mapping[previous_dst] = new_dst 90 | 91 | self.packet[IPv6].src = new_src 92 | self.packet[IPv6].dst = new_dst 93 | 94 | def header_preprocessing_ipv6(self, layer_copy: Packet): 95 | return CustomIPv6( 96 | version=layer_copy.version, 97 | tc=layer_copy.tc, 98 | nh=layer_copy.nh, 99 | hlim=layer_copy.hlim, 100 | ) 101 | -------------------------------------------------------------------------------- /heifip/layers/packet.py: -------------------------------------------------------------------------------- 1 | import hashlib 2 | 3 | from scapy.all import RandMAC 4 | from scapy.layers.inet import Ether 5 | 6 | 7 | class FIPPacket: 8 | def __init__(self, packet, address_mapping={}, layer_map={}): 9 | self.address_mapping = address_mapping 10 | self.packet = packet 11 | self.hash = hashlib.md5().hexdigest() 12 | 13 | if layer_map == {}: 14 | self.layer_map = self.__get_layers() 15 | 16 | def __get_layers(self): 17 | layer_map = dict() 18 | layers = self.packet.layers() 19 | for layer_class in layers: 20 | layer_map[layer_class] = 1 21 | return layer_map 22 | 23 | def convert(self, packet_type, packet): 24 | return packet_type(packet.packet, packet.address_mapping, packet.layer_map) 25 | 26 | def header_preprocessing(self): 27 | pass 28 | 29 | class UnknownPacket(FIPPacket): 30 | def __init__(self, packet, address_mapping={}, layer_map={}): 31 | FIPPacket.__init__(self, packet, address_mapping, layer_map) 32 | 33 | def header_preprocessing(self): 34 | super().header_preprocessing() 35 | 36 | class EtherPacket(FIPPacket): 37 | def __init__(self, packet, address_mapping={}, layer_map={}): 38 | FIPPacket.__init__(self, packet, layer_map, address_mapping) 39 | 40 | if Ether in self.layer_map: 41 | self.__filter() 42 | 43 | def __filter(self): 44 | previous_src = self.packet[Ether].src 45 | previous_dst = self.packet[Ether].dst 46 | 47 | if previous_src in self.address_mapping: 48 | new_src = self.address_mapping[previous_src] 49 | else: 50 | new_src = RandMAC()._fix() 51 | self.address_mapping[previous_src] = new_src 52 | 53 | if previous_dst in self.address_mapping: 54 | new_dst = self.address_mapping[previous_dst] 55 | else: 56 | new_dst = RandMAC()._fix() 57 | self.address_mapping[previous_dst] = new_dst 58 | 59 | self.packet[Ether].src = new_src 60 | self.packet[Ether].dst = new_dst 61 | 62 | def header_preprocessing(self): 63 | super().header_preprocessing() -------------------------------------------------------------------------------- /heifip/layers/ssh.py: -------------------------------------------------------------------------------- 1 | from scapy.all import Packet 2 | 3 | from heifip.layers.transport import TransportPacket 4 | 5 | 6 | class SSHPacketProcessor(TransportPacket): 7 | def __init__(self, packet: Packet, address_mapping={}, layer_map={}): 8 | TransportPacket.__init__(self, packet, address_mapping, layer_map) 9 | 10 | def header_preprocessing(self): 11 | super().header_preprocessing() -------------------------------------------------------------------------------- /heifip/layers/transport.py: -------------------------------------------------------------------------------- 1 | import hashlib 2 | 3 | from scapy.all import Packet, Raw 4 | from scapy.layers.http import HTTP 5 | from scapy.layers.inet import TCP, UDP 6 | from scapy.layers.tls.all import TLS 7 | 8 | from heifip.layers.ip import IPPacket 9 | from heifip.plugins.header import CustomTCP, CustomUDP 10 | 11 | 12 | class TransportPacket(IPPacket): 13 | def __init__(self, packet: Packet, address_mapping={}, layer_map={}): 14 | IPPacket.__init__(self, packet, address_mapping, layer_map) 15 | if TCP in self.layer_map: 16 | self.hash = hashlib.md5(f"{self.packet[TCP].flags},{self.packet[TCP].options}".encode('utf-8')).hexdigest() 17 | if TLS in self.layer_map: 18 | self.packet[TCP].remove_payload() 19 | if Raw in self.layer_map and not HTTP in self.layer_map: 20 | self.packet[TCP].remove_payload() 21 | elif UDP in self.layer_map: 22 | self.hash = hashlib.md5(f"{self.packet[UDP].name}".encode('utf-8')).hexdigest() 23 | if TLS in self.layer_map: 24 | self.packet[UDP].remove_payload() 25 | if Raw in self.layer_map and not HTTP in self.layer_map: 26 | self.packet[UDP].remove_payload() 27 | 28 | 29 | def header_preprocessing(self): 30 | if TCP in self.layer_map: 31 | layer_copy = self.packet[TCP] 32 | layer_copy = self.header_preprocessing_tcp(layer_copy) 33 | if self.packet[TCP].payload != None: 34 | layer_copy.payload = self.packet[TCP].payload 35 | self.packet[TCP] = layer_copy 36 | 37 | if UDP in self.layer_map: 38 | layer_copy = self.packet[UDP] 39 | layer_copy = self.header_preprocessing_udp(layer_copy) 40 | if self.packet[UDP].payload != None: 41 | layer_copy.payload = self.packet[UDP].payload 42 | self.packet[UDP] = layer_copy 43 | 44 | super().header_preprocessing() 45 | 46 | def header_preprocessing_tcp(self, layer_copy: Packet): 47 | return CustomTCP(flags=layer_copy.flags, options=layer_copy.options) 48 | 49 | def header_preprocessing_udp(self, layer_copy: Packet): 50 | return CustomUDP() 51 | -------------------------------------------------------------------------------- /heifip/main.py: -------------------------------------------------------------------------------- 1 | import asyncio 2 | import fnmatch 3 | import glob 4 | import logging 5 | import os 6 | from os.path import dirname, realpath 7 | from queue import Queue 8 | from threading import Thread 9 | 10 | from PIL import Image as PILImage 11 | from tqdm import tqdm 12 | 13 | from heifip.extractor import FIPExtractor 14 | from heifip.images.flow import FlowImage 15 | 16 | import pickle 17 | 18 | 19 | class Runner: 20 | def __init__(self, thread_number) -> None: 21 | self.thread_number = thread_number 22 | self.extractor = FIPExtractor() 23 | 24 | def create_image( 25 | self, 26 | input_file: str, 27 | output_dir: str, 28 | pbar, 29 | *args 30 | ): 31 | imgs = self.extractor.create_image_from_file(input_file, *args) 32 | pbar.update(1) 33 | for img in imgs: 34 | self.extractor.save_image(img, output_dir) 35 | 36 | def start_process( 37 | self, 38 | file_queue, 39 | pbar, 40 | *args, 41 | ): 42 | while not file_queue.empty(): 43 | input_file, output_dir = file_queue.get() 44 | self.create_image( 45 | input_file, 46 | output_dir, 47 | pbar, 48 | *args, 49 | ) 50 | file_queue.task_done() 51 | 52 | def run( 53 | self, 54 | input_dir: str, 55 | output_dir: str, 56 | *args 57 | ): 58 | 59 | # Get all executable files in input directory and add them into queue 60 | file_queue = Queue() 61 | total_files = 0 62 | for root, dirnames, filenames in os.walk(input_dir): 63 | for filename in fnmatch.filter(filenames, "*.pcap"): 64 | match = os.path.join(root, filename) 65 | sub_dir = match.replace(input_dir, "") 66 | file_queue.put((match, f"{output_dir}/{sub_dir}")) 67 | total_files += 1 68 | 69 | # Start thread 70 | pbar = tqdm(total=total_files) 71 | for _ in range(self.thread_number): 72 | thread = Thread( 73 | target=self.start_process, 74 | args=( 75 | file_queue, 76 | pbar, 77 | *args 78 | ), 79 | ) 80 | thread.daemon = True 81 | thread.start() 82 | file_queue.join() 83 | pbar.close() 84 | # with open('hashes_pkt.pkl', 'wb') as f: 85 | # pickle.dump(self.extractor.processor.hash_dict, f) 86 | -------------------------------------------------------------------------------- /heifip/plugins/__init__.py: -------------------------------------------------------------------------------- 1 | from . import header 2 | 3 | __author__ = "Stefan Machmeier" 4 | __copyright__ = "Copyright 2023, heiFIP" 5 | __credits__ = ["Manuel Trageser"] 6 | __license__ = "EUPL" 7 | __version__ = "1.1.1" 8 | __maintainer__ = "Stefan Machmeier" 9 | __email__ = "stefan.machmeier@uni-heidelberg.de" 10 | __status__ = "Production" -------------------------------------------------------------------------------- /heifip/plugins/header.py: -------------------------------------------------------------------------------- 1 | from scapy.all import (IP_PROTOS, BitEnumField, BitField, 2 | ByteEnumField, ByteField, DNSQRField, DNSRRField, 3 | FlagsField, IntField, Packet, ShortEnumField, 4 | StrField, TCPOptionsField, XByteField) 5 | from scapy.layers.dns import DNSStrField, InheritOriginDNSStrPacket, dnstypes 6 | from scapy.layers.inet6 import ipv6nh 7 | 8 | 9 | class CustomIP(Packet): 10 | name = "IP" 11 | fields_desc = [ 12 | BitField("version", 4, 4), 13 | FlagsField("flags", 0, 4, ["R", "DF", "MF"]), # normally 3 bits last bit will always be 0 14 | XByteField("tos", 0), 15 | ByteField("ttl", 64), 16 | ByteEnumField("proto", 0, IP_PROTOS), 17 | ] 18 | 19 | class CustomIPv6(Packet): 20 | name = "IPv6" 21 | fields_desc = [ 22 | BitField("version", 6, 8), # normally 4 bits, last 4bits will always be 0 23 | BitField("tc", 0, 8), 24 | ByteEnumField("nh", 59, ipv6nh), 25 | ByteField("hlim", 64) 26 | ] 27 | 28 | class CustomTCP(Packet): 29 | name = "TCP" 30 | fields_desc = [ 31 | FlagsField("flags", 0x2, 16, "FSRPAUECN"), 32 | TCPOptionsField("options", "") 33 | ] 34 | 35 | class CustomUDP(Packet): 36 | name = "UDP" 37 | fields_desc = [] 38 | 39 | class CustomHTTP(Packet): 40 | def self_build(self): 41 | p = b"" 42 | 43 | for f in self.fields_desc: 44 | val = self.getfieldval(f.name) 45 | #when Value is not set 46 | if not val: 47 | continue 48 | if f.name not in ['Method', 'Path', 'Status_Code']: 49 | val = bytes((f.name).encode()) + b": " + bytes(val) 50 | if f.name in ['Method', 'Path', 'Status_Code']: 51 | seperator = b' ' 52 | else: 53 | seperator = b'\r\n' 54 | 55 | p = f.addfield(self, p, val + seperator) 56 | 57 | return p 58 | 59 | 60 | class CustomHTTP_Request(CustomHTTP): 61 | name = "HTTP Request" 62 | fields_desc = [ 63 | StrField("Method", "GET"), 64 | StrField("Path", "/"), 65 | StrField("User_Agent", None), 66 | StrField("Content_Type", None), 67 | StrField("Connection", None), 68 | StrField("Accept", None), 69 | StrField("Accept_Charset", None), 70 | StrField("Accept_Encoding", None), 71 | StrField("Cookie", None), 72 | StrField("TE", None) 73 | ] 74 | 75 | class CustomHTTP_Response(CustomHTTP): 76 | name = "HTTP Response" 77 | fields_desc = [ 78 | StrField("Status_Code", "200"), 79 | StrField("Connection", None), 80 | StrField("Content_Encoding", None), 81 | StrField("Content_Type", None), 82 | StrField("Server", None), 83 | StrField("Set_Cookie", None), 84 | StrField("Transfer_Encoding", None) 85 | ] 86 | 87 | class CustomDNSQR(InheritOriginDNSStrPacket): 88 | name = "DNS Question Record" 89 | show_indent = 0 90 | fields_desc = [ 91 | DNSStrField("qname", "none"), 92 | ShortEnumField("qtype", 1, dnstypes) 93 | ] 94 | 95 | class CustomDNSRR(InheritOriginDNSStrPacket): 96 | name = "DNS Resource Record" 97 | show_indent = 0 98 | fields_desc = [ 99 | DNSStrField("rrname", ""), 100 | ShortEnumField("type", 1, dnstypes), 101 | IntField("ttl", 0) 102 | ] 103 | 104 | class CustomDNS(Packet): 105 | name = "DNS" 106 | fields_desc = [ 107 | BitField("qr", 0, 1), 108 | BitEnumField("opcode", 0, 4, {0: "QUERY", 1: "IQUERY", 2: "STATUS"}), 109 | BitField("aa", 0, 1), 110 | BitField("tc", 0, 1), 111 | BitField("rd", 1, 1), 112 | BitField("ra", 0, 1), 113 | BitField("z", 0, 1), 114 | BitField("ad", 0, 1), 115 | BitField("cd", 0, 1), 116 | BitEnumField("rcode", 0, 4, {0: "ok", 1: "format-error", 117 | 2: "server-failure", 3: "name-error", 118 | 4: "not-implemented", 5: "refused"}), 119 | DNSQRField("qd", "", None), 120 | DNSRRField("an", "", None), 121 | DNSRRField("ns", "", None), 122 | DNSRRField("ar", "", None), 123 | ] 124 | -------------------------------------------------------------------------------- /heifip/protocols/__init__.py: -------------------------------------------------------------------------------- 1 | __author__ = "Stefan Machmeier" 2 | __copyright__ = "Copyright 2023, heiFIP" 3 | __credits__ = ["Manuel Trageser"] 4 | __license__ = "EUPL" 5 | __version__ = "1.1.1" 6 | __maintainer__ = "Stefan Machmeier" 7 | __email__ = "stefan.machmeier@uni-heidelberg.de" 8 | __status__ = "Production" 9 | 10 | from ssh import SSH -------------------------------------------------------------------------------- /heifip/splitter.py: -------------------------------------------------------------------------------- 1 | # File from pcap-splitter project 2 | # Copyright (C) 2019 Santiago Hernandez Ramos 3 | # For more information about the project: https://github.com/shramos/pcap-splitter 4 | 5 | import subprocess 6 | 7 | 8 | class PcapSplitter: 9 | """Split a .pcap file into different files.""" 10 | 11 | def __init__(self, pcap_path, exefile_path="PcapSplitter"): 12 | # Checks if the PcapSplitter executable exists in path 13 | self._check_binary(exefile_path) 14 | self._exefile_path = exefile_path 15 | self._pcap_path = pcap_path 16 | 17 | def split_by_size(self, size_bytes, dest_path, pkts_bpf_filter=""): 18 | """Split files by size in bytes.""" 19 | args = (self._exefile_path, "-f", self._pcap_path, "-o", dest_path, 20 | "-m", "file-size", "-p", str(size_bytes), "-i", pkts_bpf_filter) 21 | # Execute the PcapSplitter binary 22 | return self._execute(args).decode() 23 | 24 | def split_by_count(self, count_pkts, dest_path, pkts_bpf_filter=""): 25 | """Split files by packet count.""" 26 | args = (self._exefile_path, "-f", self._pcap_path, "-o", dest_path, 27 | "-m", "packet-count", "-p", str(count_pkts), "-i", pkts_bpf_filter) 28 | # Execute the PcapSplitter binary 29 | return self._execute(args).decode() 30 | 31 | def split_by_client_ip(self, dest_path, pkts_bpf_filter=""): 32 | """split files by client IP, meaning all connections with the same client 33 | IP will be in the same file.""" 34 | args = (self._exefile_path, "-f", self._pcap_path, "-o", dest_path, 35 | "-m", "client-ip", "-i", pkts_bpf_filter) 36 | # Execute the PcapSplitter binary 37 | return self._execute(args).decode() 38 | 39 | def split_by_server_ip(self, dest_path, pkts_bpf_filter=""): 40 | """split files by server IP, meaning all connections with the same server 41 | IP will be in the same file.""" 42 | args = (self._exefile_path, "-f", self._pcap_path, "-o", dest_path, 43 | "-m", "server-ip", "-i", pkts_bpf_filter) 44 | # Execute the PcapSplitter binary 45 | return self._execute(args).decode() 46 | 47 | def split_by_server_port(self, dest_path, pkts_bpf_filter=""): 48 | """split files by IP src and dst (2-tuple), meaning all connections with 49 | the same IPs will be in the same file.""" 50 | args = (self._exefile_path, "-f", self._pcap_path, "-o", dest_path, 51 | "-m", "server-port", "-i", pkts_bpf_filter) 52 | # Execute the PcapSplitter binary 53 | return self._execute(args).decode() 54 | 55 | def split_by_ip_src_dst(self, dest_path, pkts_bpf_filter=""): 56 | """split files by IP src and dst (2-tuple), meaning all connections with 57 | the same IPs will be in the same file.""" 58 | args = (self._exefile_path, "-f", self._pcap_path, "-o", dest_path, 59 | "-m", "ip-src-dst", "-i", pkts_bpf_filter) 60 | # Execute the PcapSplitter binary 61 | return self._execute(args).decode() 62 | 63 | def split_by_session(self, dest_path, pkts_bpf_filter=""): 64 | """split files by connection (5-tuple), meaning all packets of a 65 | connection will be in the same file.""" 66 | args = (self._exefile_path, "-f", self._pcap_path, "-o", dest_path, 67 | "-m", "connection", "-i", pkts_bpf_filter) 68 | # Execute the PcapSplitter binary 69 | return self._execute(args).decode() 70 | 71 | def split_by_filter(self, bpf_filter, dest_path, pkts_bpf_filter=""): 72 | """split file into two files: one that contains all packets matching the 73 | given BPF filter (file #0) and one that contains the rest of the packets 74 | (file #1).""" 75 | args = (self._exefile_path, "-f", self._pcap_path, "-o", dest_path, 76 | "-m", "bpf-filter", "-p", bpf_filter, "-i", pkts_bpf_filter) 77 | # Execute the PcapSplitter binary 78 | return self._execute(args).decode() 79 | 80 | def split_by_round_robin(self, n_files, dest_path, pkts_bpf_filter=""): 81 | """split the file in a round-robin manner - each packet to a different 82 | file.""" 83 | args = (self._exefile_path, "-f", self._pcap_path, "-o", dest_path, 84 | "-m", "round-robin", "-p", str(n_files), "-i", pkts_bpf_filter) 85 | # Execute the PcapSplitter binary 86 | return self._execute(args).decode() 87 | 88 | def _execute(self, args): 89 | popen = subprocess.Popen(args, stdout=subprocess.PIPE) 90 | popen.wait() 91 | return popen.stdout.read() 92 | 93 | def _check_binary(self, exefile_path): 94 | try: 95 | subprocess.Popen(exefile_path, stdout=subprocess.PIPE) 96 | except FileNotFoundError: 97 | print("ERROR: PcapSplitter executable not found in the OS. Please \ 98 | check that PcapPlusPlus is correctly installed and PcapSplitter \ 99 | executable is in the path, or indicate the path of the PcapSplitter \ 100 | executable by using the exefile_path parameter when instantiating \ 101 | the PcapSplitter class.\n") -------------------------------------------------------------------------------- /pyproject.toml: -------------------------------------------------------------------------------- 1 | [build-system] 2 | requires = [ "setuptools>=62.0.0" ] 3 | build-backend = "setuptools.build_meta" 4 | 5 | [project] 6 | name = "heifip" 7 | version = "1.1.1" 8 | authors = [ 9 | { name="Stefan Machmeier", email="stefan.machmeier@uni-heidelberg.de" }, 10 | ] 11 | description = "A tool to convert network traffic into images for ML use cases." 12 | readme = "README.md" 13 | license = { file="LICENSE" } 14 | requires-python = ">=3.7" 15 | keywords = [ "network" ] 16 | classifiers = [ 17 | "Programming Language :: Python :: 3", 18 | "License :: OSI Approved :: European Union Public Licence 1.2 (EUPL 1.2)", 19 | "Operating System :: OS Independent", 20 | "Operating System :: OS Independent", 21 | 'Intended Audience :: Telecommunications Industry', 22 | 'Intended Audience :: Information Technology', 23 | 'Intended Audience :: System Administrators', 24 | 'Intended Audience :: Science/Research', 25 | 'Intended Audience :: Developers', 26 | 'Programming Language :: Python :: 3 :: Only', 27 | 'Programming Language :: Python :: 3.7', 28 | 'Programming Language :: Python :: 3.8', 29 | 'Programming Language :: Python :: 3.9', 30 | 'Programming Language :: Python :: 3.10', 31 | 'Programming Language :: Python :: 3.11', 32 | 'Topic :: Security', 33 | 'Topic :: Internet :: Log Analysis', 34 | 'Topic :: System :: Networking :: Monitoring', 35 | 'Topic :: Scientific/Engineering :: Artificial Intelligence' 36 | ] 37 | 38 | [project.scripts] 39 | fip = "heifip.cli:cli" 40 | 41 | [project.urls] 42 | "Homepage" = "https://github.com/stefanDeveloper/heiFIP" 43 | "Bug Tracker" = "https://github.com/stefanDeveloper/heiFIP/issues" 44 | 45 | [tool.setuptools.packages.find] 46 | include = [ 47 | "heifip*", 48 | ] 49 | exclude = [ 50 | "test*", 51 | "assets*", 52 | ] 53 | 54 | [tool.poetry] 55 | name = "heiFIP" 56 | version = "1.1.1" 57 | description = "A tool to convert network traffic into images for ML use cases." 58 | license = "EUPL-1.2" 59 | authors = ["Stefan Machmeier"] 60 | 61 | [tool.poetry.dependencies] 62 | scapy = '>=2.5.0' 63 | Pillow = '>=9.4.0' 64 | numpy = '>=1.19.5' 65 | click = '>=8.1.3' 66 | tqdm = '>=4.64.1' 67 | click-help-colors = '>=0.9.1' 68 | pytest = '>=7.2.2' 69 | cryptography = '>=1.0.0' 70 | 71 | [[tool.poetry_bumpversion.replacements]] 72 | files = ["heifip/__init__.py", "heifip/exceptions/__init__.py", "heifip/images/__init__.py", "heifip/layers/__init__.py", "heifip/plugins/__init__.py", "heifip/protocols/__init__.py"] 73 | search = '__version__ = "{current_version}"' 74 | replace = '__version__ = "{new_version}"' -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | # pandas>=1.3.5; platform.python_implementation == 'CPython' 2 | # pandas<=1.3.5; platform.python_implementation == 'PyPy' 3 | scapy>=2.5.0 4 | Pillow>=9.4.0 5 | numpy>=1.19.5 6 | click>=8.1.3 7 | tqdm>=4.64.1 8 | click-help-colors>=0.9.1 9 | pytest>=7.2.2 10 | cryptography -------------------------------------------------------------------------------- /setup.cfg: -------------------------------------------------------------------------------- 1 | [bdist_wheel] 2 | universal = 0 3 | 4 | [flake8] 5 | exclude = docs 6 | max-line-length = 255 7 | 8 | 9 | [aliases] -------------------------------------------------------------------------------- /split.py: -------------------------------------------------------------------------------- 1 | import fnmatch 2 | import os 3 | import re 4 | 5 | from heifip.splitter import PcapSplitter 6 | 7 | output_dir = "/home/smachmeier/data/test-data" 8 | input_dir = "/home/smachmeier/data/test-pcaps" 9 | orientation = { 10 | "Cridex": "malware", 11 | "Htbot": "malware", 12 | "Geodo": "malware", 13 | "Miuref": "malware", 14 | "Neris": "malware", 15 | "Nsis-ay": "malware", 16 | "Shifu": "malware", 17 | "Tinba": "malware", 18 | "Virut": "malware", 19 | "Weibo": "malware", 20 | "Zeus": "malware", 21 | "BitTorrent": "benign", 22 | "Facetime": "benign", 23 | "FTP": "benign", 24 | "Gmail": "benign", 25 | "MySQL": "benign", 26 | "Outlook": "benign", 27 | "Skype": "benign", 28 | "SMB": "benign", 29 | "WorldOfWarcraft": "benign" 30 | } 31 | 32 | for root, dirnames, filenames in os.walk(input_dir): 33 | for filename in fnmatch.filter(filenames, "*.pcap"): 34 | match = os.path.join(root, filename) 35 | sub_dir = match.replace(input_dir, "") 36 | # sub_dir = re.sub("(-[0-9])?.pcap", "", sub_dir) 37 | # sub_dir = sub_dir.replace("/", "") 38 | # print(sub_dir.split('/')[1]) 39 | # sub_dir = "malware" 40 | # sub_dir = orientation[sub_dir] 41 | if not os.path.exists(f"{output_dir}/{sub_dir}"): 42 | try: 43 | os.makedirs(f"{output_dir}/{sub_dir}") 44 | except: 45 | pass 46 | ps = PcapSplitter(match) 47 | # ps.split_by_count(10000, "/home/smachmeier/data/test-pcaps", pkts_bpf_filter="ip and (tcp or udp) and not (port 67 or port 68 or port 546 or port 547)") 48 | ps.split_by_session(f"{output_dir}/{sub_dir.split('/')[1]}", pkts_bpf_filter="ip and (tcp or udp) and not (port 67 or port 68 or port 546 or port 547)") 49 | 50 | -------------------------------------------------------------------------------- /tests.py: -------------------------------------------------------------------------------- 1 | import fnmatch 2 | import os 3 | 4 | import pytest 5 | from scapy.all import rdpcap 6 | 7 | from heifip.extractor import FIPExtractor 8 | from heifip.images.flow import FlowImage 9 | from heifip.images.markovchain import (MarkovTransitionMatrixFlow, 10 | MarkovTransitionMatrixPacket) 11 | from heifip.images.packet import PacketImage 12 | from heifip.layers import PacketProcessorType 13 | 14 | TEST_FOLDER = "./tests/pcaps" 15 | OUTPUT_DIR = "./tests/images" 16 | 17 | 18 | def get_files(): 19 | assert os.path.exists(TEST_FOLDER) 20 | packets = [] 21 | for root, dirnames, filenames in os.walk(TEST_FOLDER): 22 | for filename in fnmatch.filter(filenames, "*.pcap"): 23 | match = os.path.join(root, filename) 24 | sub_dir = match.replace(TEST_FOLDER, "") 25 | packets.append(rdpcap(match)) 26 | return packets[0:25] # Otherwise we break Python... 27 | 28 | 29 | @pytest.mark.parametrize('packet', get_files()) 30 | @pytest.mark.parametrize("append", [True, False]) 31 | @pytest.mark.parametrize("fill", [0, 255]) 32 | @pytest.mark.parametrize("dim", [4, 16]) 33 | @pytest.mark.parametrize( 34 | "min_packets_per_flow", [0, 4] 35 | ) 36 | @pytest.mark.parametrize("max_image_dim", [0, 16]) 37 | @pytest.mark.parametrize("min_image_dim", [0, 16]) 38 | @pytest.mark.parametrize("remove_duplicates", [True, False]) 39 | @pytest.mark.parametrize( 40 | "preprocessing_type", [PacketProcessorType.HEADER, PacketProcessorType.NONE] 41 | ) 42 | def test_extractor_flow( 43 | packet, 44 | append, 45 | fill, 46 | dim, 47 | min_packets_per_flow, 48 | max_image_dim, 49 | min_image_dim, 50 | remove_duplicates, 51 | preprocessing_type, 52 | ): 53 | extractor = FIPExtractor() 54 | extractor.create_image_from_packet( 55 | packet, 56 | preprocessing_type, 57 | FlowImage, 58 | min_image_dim, 59 | max_image_dim, 60 | min_packets_per_flow, 61 | 0, 62 | remove_duplicates, 63 | dim, 64 | fill, 65 | append, 66 | ) 67 | # TODO: Assert matrix... if functions worked fine 68 | 69 | @pytest.mark.parametrize('packet', get_files()) 70 | @pytest.mark.parametrize( 71 | "min_packets_per_flow", [0, 4] 72 | ) 73 | @pytest.mark.parametrize( 74 | "max_packets_per_flow", [0, 4] 75 | ) 76 | @pytest.mark.parametrize("max_image_dim", [0, 16]) 77 | @pytest.mark.parametrize("min_image_dim", [0, 16]) 78 | @pytest.mark.parametrize("remove_duplicates", [True, False]) 79 | @pytest.mark.parametrize( 80 | "preprocessing_type", [PacketProcessorType.HEADER, PacketProcessorType.NONE] 81 | ) 82 | def test_extractor_markovflow( 83 | packet, 84 | min_packets_per_flow, 85 | max_packets_per_flow, 86 | max_image_dim, 87 | min_image_dim, 88 | remove_duplicates, 89 | preprocessing_type, 90 | ): 91 | extractor = FIPExtractor() 92 | extractor.create_image_from_packet( 93 | packet, 94 | preprocessing_type, 95 | MarkovTransitionMatrixFlow, 96 | min_image_dim, 97 | max_image_dim, 98 | min_packets_per_flow, 99 | max_packets_per_flow, 100 | remove_duplicates, 101 | ) 102 | # TODO: Assert matrix... if functions worked fine 103 | 104 | @pytest.mark.parametrize('packet', get_files()) 105 | @pytest.mark.parametrize( 106 | "min_packets_per_flow", [0, 4] 107 | ) 108 | @pytest.mark.parametrize("max_image_dim", [0, 16]) 109 | @pytest.mark.parametrize("min_image_dim", [0, 16]) 110 | @pytest.mark.parametrize("remove_duplicates", [True, False]) 111 | @pytest.mark.parametrize( 112 | "preprocessing_type", [PacketProcessorType.HEADER, PacketProcessorType.NONE] 113 | ) 114 | def test_extractor_markovpacket( 115 | packet, 116 | min_packets_per_flow, 117 | max_image_dim, 118 | min_image_dim, 119 | remove_duplicates, 120 | preprocessing_type, 121 | ): 122 | extractor = FIPExtractor() 123 | extractor.create_image_from_packet( 124 | packet, 125 | preprocessing_type, 126 | MarkovTransitionMatrixPacket, 127 | min_image_dim, 128 | max_image_dim, 129 | min_packets_per_flow, 130 | 0, 131 | remove_duplicates, 132 | ) 133 | # TODO: Assert matrix... if functions worked fine 134 | 135 | @pytest.mark.parametrize('packet', get_files()) 136 | @pytest.mark.parametrize("fill", [0, 255]) 137 | @pytest.mark.parametrize("dim", [4, 16]) 138 | @pytest.mark.parametrize("max_image_dim", [0, 16]) 139 | @pytest.mark.parametrize("min_image_dim", [0, 16]) 140 | @pytest.mark.parametrize("remove_duplicates", [True, False]) 141 | @pytest.mark.parametrize( 142 | "preprocessing_type", [PacketProcessorType.HEADER, PacketProcessorType.NONE] 143 | ) 144 | def test_extractor_packet( 145 | packet, 146 | fill, 147 | dim, 148 | max_image_dim, 149 | min_image_dim, 150 | remove_duplicates, 151 | preprocessing_type, 152 | ): 153 | extractor = FIPExtractor() 154 | extractor.create_image_from_packet( 155 | packet, 156 | preprocessing_type, 157 | PacketImage, 158 | min_image_dim, 159 | max_image_dim, 160 | 0, 161 | 0, 162 | remove_duplicates, 163 | dim, 164 | fill, 165 | False 166 | ) 167 | # TODO: Assert matrix... if functions worked fine 168 | 169 | if __name__ == "__main__": 170 | pytest.main() 171 | -------------------------------------------------------------------------------- /tests/pcaps/README: -------------------------------------------------------------------------------- 1 | These are the trace files that are used by the Zeek test suite. 2 | 3 | Note to maintainers: please take care when modifying/removing files from here. 4 | We install these traces with the Zeek distribution and external packages might 5 | depend on them for tests. 6 | 7 | -------------------------------------------------------------------------------- /tests/pcaps/arp-leak.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/arp-leak.pcap -------------------------------------------------------------------------------- /tests/pcaps/arp-who-has-radiotap.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/arp-who-has-radiotap.pcap -------------------------------------------------------------------------------- /tests/pcaps/arp-who-has-wlanmon.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/arp-who-has-wlanmon.pcap -------------------------------------------------------------------------------- /tests/pcaps/arp-who-has.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/arp-who-has.pcap -------------------------------------------------------------------------------- /tests/pcaps/auth_change_session_keys.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/auth_change_session_keys.pcap -------------------------------------------------------------------------------- /tests/pcaps/bittorrent/tracker.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/bittorrent/tracker.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip4-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip4-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip4-icmp-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip4-icmp-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip4-icmp-good-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip4-icmp-good-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip4-tcp-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip4-tcp-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip4-tcp-good-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip4-tcp-good-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip4-udp-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip4-udp-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip4-udp-good-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip4-udp-good-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-hoa-tcp-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-hoa-tcp-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-hoa-tcp-good-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-hoa-tcp-good-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-hoa-udp-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-hoa-udp-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-hoa-udp-good-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-hoa-udp-good-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-icmp6-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-icmp6-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-icmp6-good-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-icmp6-good-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-route0-icmp6-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-route0-icmp6-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-route0-icmp6-good-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-route0-icmp6-good-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-route0-tcp-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-route0-tcp-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-route0-tcp-good-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-route0-tcp-good-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-route0-udp-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-route0-udp-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-route0-udp-good-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-route0-udp-good-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-tcp-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-tcp-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-tcp-good-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-tcp-good-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-udp-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-udp-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/ip6-udp-good-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/ip6-udp-good-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/localhost-bad-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/localhost-bad-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/mip6-bad-mh-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/mip6-bad-mh-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/chksums/mip6-good-mh-chksum.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/chksums/mip6-good-mh-chksum.pcap -------------------------------------------------------------------------------- /tests/pcaps/cisco-fabric-path.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/cisco-fabric-path.pcap -------------------------------------------------------------------------------- /tests/pcaps/conn-size.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/conn-size.trace -------------------------------------------------------------------------------- /tests/pcaps/contentline-irc-5k-line.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/contentline-irc-5k-line.pcap -------------------------------------------------------------------------------- /tests/pcaps/dce-rpc/cs_window7-join_stream092.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dce-rpc/cs_window7-join_stream092.pcap -------------------------------------------------------------------------------- /tests/pcaps/dce-rpc/dce_rpc_netlogon.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dce-rpc/dce_rpc_netlogon.pcap -------------------------------------------------------------------------------- /tests/pcaps/dce-rpc/dce_rpc_ntlm.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dce-rpc/dce_rpc_ntlm.pcap -------------------------------------------------------------------------------- /tests/pcaps/dce-rpc/mapi.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dce-rpc/mapi.pcap -------------------------------------------------------------------------------- /tests/pcaps/dce-rpc/ntlm-empty-av-sequence.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dce-rpc/ntlm-empty-av-sequence.pcap -------------------------------------------------------------------------------- /tests/pcaps/dce-rpc/ntlm-unterminated-av-sequence.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dce-rpc/ntlm-unterminated-av-sequence.pcap -------------------------------------------------------------------------------- /tests/pcaps/dhcp/dhcp.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dhcp/dhcp.trace -------------------------------------------------------------------------------- /tests/pcaps/dhcp/dhcp_ack_subscriber_id_and_agent_remote_id.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dhcp/dhcp_ack_subscriber_id_and_agent_remote_id.trace -------------------------------------------------------------------------------- /tests/pcaps/dhcp/dhcp_discover_param_req_and_client_id.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dhcp/dhcp_discover_param_req_and_client_id.trace -------------------------------------------------------------------------------- /tests/pcaps/dhcp/dhcp_flood.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dhcp/dhcp_flood.pcap -------------------------------------------------------------------------------- /tests/pcaps/dhcp/dhcp_inform.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dhcp/dhcp_inform.trace -------------------------------------------------------------------------------- /tests/pcaps/dhcp/dhcp_time_and_nameserver.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dhcp/dhcp_time_and_nameserver.trace -------------------------------------------------------------------------------- /tests/pcaps/dhcp/hw-type0.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dhcp/hw-type0.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3.trace -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_del_measure.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_del_measure.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_en_spon.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_en_spon.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_file_del.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_file_del.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_file_read.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_file_read.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_file_write.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_file_write.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_link_only.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_link_only.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_read.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_read.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_read_p20001.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_read_p20001.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_rec_time.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_rec_time.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_select_operate.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_select_operate.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_udp_en_spon.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_udp_en_spon.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_udp_read.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_udp_read.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_udp_select_operate.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_udp_select_operate.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_udp_write.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_udp_write.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnp3/dnp3_write.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnp3/dnp3_write.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns-caa.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-caa.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns-edns-cookie.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-edns-cookie.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns-edns-ecs-bad.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-edns-ecs-bad.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns-edns-ecs-weirds.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-edns-ecs-weirds.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns-edns-ecs.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-edns-ecs.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns-edns-tcp-keepalive.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-edns-tcp-keepalive.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns-https.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-https.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns-huge-ttl.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-huge-ttl.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns-inverse-query.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-inverse-query.trace -------------------------------------------------------------------------------- /tests/pcaps/dns-spf.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-spf.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns-svcb.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-svcb.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns-tsig.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-tsig.trace -------------------------------------------------------------------------------- /tests/pcaps/dns-two-responses.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-two-responses.trace -------------------------------------------------------------------------------- /tests/pcaps/dns-txt-multiple.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-txt-multiple.trace -------------------------------------------------------------------------------- /tests/pcaps/dns-zero-RRs.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns-zero-RRs.trace -------------------------------------------------------------------------------- /tests/pcaps/dns/dns-binds.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns/dns-binds.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns/dns-wks.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns/dns-wks.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns/hinfo.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns/hinfo.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns/loc-29-trunc.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns/loc-29-trunc.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns/sshfp-trunc.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns/sshfp-trunc.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns53.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns53.pcap -------------------------------------------------------------------------------- /tests/pcaps/dns_original_case.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dns_original_case.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnssec/dnskey.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnssec/dnskey.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnssec/dnskey2.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnssec/dnskey2.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnssec/ds.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnssec/ds.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnssec/nsec.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnssec/nsec.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnssec/nsec3.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnssec/nsec3.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnssec/nsec3param.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnssec/nsec3param.pcap -------------------------------------------------------------------------------- /tests/pcaps/dnssec/rrsig.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/dnssec/rrsig.pcap -------------------------------------------------------------------------------- /tests/pcaps/echo-connections.pcap.gz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/echo-connections.pcap.gz -------------------------------------------------------------------------------- /tests/pcaps/empty.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/empty.trace -------------------------------------------------------------------------------- /tests/pcaps/erspan.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/erspan.trace -------------------------------------------------------------------------------- /tests/pcaps/erspanI.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/erspanI.pcap -------------------------------------------------------------------------------- /tests/pcaps/erspanII.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/erspanII.pcap -------------------------------------------------------------------------------- /tests/pcaps/erspanIII.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/erspanIII.pcap -------------------------------------------------------------------------------- /tests/pcaps/finger/standard.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/finger/standard.pcap -------------------------------------------------------------------------------- /tests/pcaps/finger/verbose.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/finger/verbose.pcap -------------------------------------------------------------------------------- /tests/pcaps/ftp/bigtransfer.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/bigtransfer.pcap -------------------------------------------------------------------------------- /tests/pcaps/ftp/bruteforce.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/bruteforce.pcap -------------------------------------------------------------------------------- /tests/pcaps/ftp/cwd-navigation.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/cwd-navigation.pcap -------------------------------------------------------------------------------- /tests/pcaps/ftp/fake-long-commands.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/fake-long-commands.pcap -------------------------------------------------------------------------------- /tests/pcaps/ftp/fake-server-delays-all.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/fake-server-delays-all.pcap -------------------------------------------------------------------------------- /tests/pcaps/ftp/ftp-invalid-reply-code.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/ftp-invalid-reply-code.pcap -------------------------------------------------------------------------------- /tests/pcaps/ftp/ftp-missing-reply-code.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/ftp-missing-reply-code.pcap -------------------------------------------------------------------------------- /tests/pcaps/ftp/ftp-missing-space-after-reply-code.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/ftp-missing-space-after-reply-code.pcap -------------------------------------------------------------------------------- /tests/pcaps/ftp/ftp-with-numbers-in-filename.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/ftp-with-numbers-in-filename.pcap -------------------------------------------------------------------------------- /tests/pcaps/ftp/ipv4.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/ipv4.trace -------------------------------------------------------------------------------- /tests/pcaps/ftp/ipv6-violation.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/ipv6-violation.trace -------------------------------------------------------------------------------- /tests/pcaps/ftp/ipv6.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/ipv6.trace -------------------------------------------------------------------------------- /tests/pcaps/ftp/retr.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ftp/retr.trace -------------------------------------------------------------------------------- /tests/pcaps/globus-url-copy-bad-encoding.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/globus-url-copy-bad-encoding.trace -------------------------------------------------------------------------------- /tests/pcaps/globus-url-copy.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/globus-url-copy.trace -------------------------------------------------------------------------------- /tests/pcaps/http/100-continue.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/100-continue.trace -------------------------------------------------------------------------------- /tests/pcaps/http/206_example_a.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/206_example_a.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/206_example_b.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/206_example_b.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/206_example_c.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/206_example_c.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/bro.org-filtered.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/bro.org-filtered.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/bro.org.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/bro.org.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/byteranges.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/byteranges.trace -------------------------------------------------------------------------------- /tests/pcaps/http/concurrent-range-requests-complete.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/concurrent-range-requests-complete.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/concurrent-range-requests.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/concurrent-range-requests.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/connect-with-header.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/connect-with-header.trace -------------------------------------------------------------------------------- /tests/pcaps/http/connect-with-smtp.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/connect-with-smtp.trace -------------------------------------------------------------------------------- /tests/pcaps/http/content-range-gap-skip.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/content-range-gap-skip.trace -------------------------------------------------------------------------------- /tests/pcaps/http/content-range-gap.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/content-range-gap.trace -------------------------------------------------------------------------------- /tests/pcaps/http/content-range-less-than-len.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/content-range-less-than-len.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/curl_http_09.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/curl_http_09.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/entity_gap.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/entity_gap.trace -------------------------------------------------------------------------------- /tests/pcaps/http/entity_gap2.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/entity_gap2.trace -------------------------------------------------------------------------------- /tests/pcaps/http/fake-content-length.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/fake-content-length.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/flash-version.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/flash-version.trace -------------------------------------------------------------------------------- /tests/pcaps/http/get-gzip.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/get-gzip.trace -------------------------------------------------------------------------------- /tests/pcaps/http/get.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/get.trace -------------------------------------------------------------------------------- /tests/pcaps/http/get_nosyn.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/get_nosyn.trace -------------------------------------------------------------------------------- /tests/pcaps/http/http-09-content-length-confusion.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/http-09-content-length-confusion.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/http-11-request-then-cruft.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/http-11-request-then-cruft.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/http-bad-content-range-01.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/http-bad-content-range-01.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/http-bad-request-with-version.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/http-bad-request-with-version.trace -------------------------------------------------------------------------------- /tests/pcaps/http/http-filename.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/http-filename.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/http-post-large.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/http-post-large.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/http_09.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/http_09.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/http_large_req_8001.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/http_large_req_8001.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/interleaved-http-entity.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/interleaved-http-entity.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/methods.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/methods.trace -------------------------------------------------------------------------------- /tests/pcaps/http/missing-zlib-header.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/missing-zlib-header.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/multipart-form-data.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/multipart-form-data.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/multipart.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/multipart.trace -------------------------------------------------------------------------------- /tests/pcaps/http/no-uri.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/no-uri.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/no-version.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/no-version.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/no_crlf.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/no_crlf.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/percent-end-of-line.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/percent-end-of-line.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/pipelined-requests.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/pipelined-requests.trace -------------------------------------------------------------------------------- /tests/pcaps/http/post.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/post.trace -------------------------------------------------------------------------------- /tests/pcaps/http/proxy.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/proxy.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/putty-upload.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/putty-upload.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/version-mismatch.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/version-mismatch.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/websocket.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/websocket.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/x-gzip.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/x-gzip.pcap -------------------------------------------------------------------------------- /tests/pcaps/http/zero-length-bodies-with-drops.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/http/zero-length-bodies-with-drops.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/5-pings.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/5-pings.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp-destunreach-ip.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp-destunreach-ip.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp-destunreach-no-context.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp-destunreach-no-context.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp-destunreach-udp.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp-destunreach-udp.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp-ping.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp-ping.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp-timeexceeded.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp-timeexceeded.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-destunreach-ip6ext-trunc.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-destunreach-ip6ext-trunc.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-destunreach-ip6ext-udp.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-destunreach-ip6ext-udp.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-destunreach-ip6ext.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-destunreach-ip6ext.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-destunreach-no-context.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-destunreach-no-context.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-nd-options.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-nd-options.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-neighbor-advert.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-neighbor-advert.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-neighbor-solicit.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-neighbor-solicit.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-paramprob.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-paramprob.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-ping.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-ping.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-redirect-hdr-opt.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-redirect-hdr-opt.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-redirect.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-redirect.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-router-advert.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-router-advert.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-router-solicit.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-router-solicit.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-timeexceeded.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-timeexceeded.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp6-toobig.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp6-toobig.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp/icmp_sent.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp/icmp_sent.pcap -------------------------------------------------------------------------------- /tests/pcaps/icmp_dot1q.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp_dot1q.trace -------------------------------------------------------------------------------- /tests/pcaps/icmp_nd_dnssl.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/icmp_nd_dnssl.trace -------------------------------------------------------------------------------- /tests/pcaps/ieee80211.15.4.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ieee80211.15.4.pcap -------------------------------------------------------------------------------- /tests/pcaps/ip-bogus-header-len.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ip-bogus-header-len.pcap -------------------------------------------------------------------------------- /tests/pcaps/ip6_esp.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ip6_esp.trace -------------------------------------------------------------------------------- /tests/pcaps/ipv4/fragmented-1.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ipv4/fragmented-1.pcap -------------------------------------------------------------------------------- /tests/pcaps/ipv4/fragmented-2.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ipv4/fragmented-2.pcap -------------------------------------------------------------------------------- /tests/pcaps/ipv4/fragmented-3.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ipv4/fragmented-3.pcap -------------------------------------------------------------------------------- /tests/pcaps/ipv4/fragmented-4.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ipv4/fragmented-4.pcap -------------------------------------------------------------------------------- /tests/pcaps/ipv6-fragmented-dns.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ipv6-fragmented-dns.trace -------------------------------------------------------------------------------- /tests/pcaps/ipv6-hbh-routing0.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ipv6-hbh-routing0.trace -------------------------------------------------------------------------------- /tests/pcaps/ipv6-http-atomic-frag.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ipv6-http-atomic-frag.trace -------------------------------------------------------------------------------- /tests/pcaps/ipv6-mobility-dst-opts.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ipv6-mobility-dst-opts.trace -------------------------------------------------------------------------------- /tests/pcaps/ipv6_zero_len_ah.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ipv6_zero_len_ah.trace -------------------------------------------------------------------------------- /tests/pcaps/irc-353.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/irc-353.pcap -------------------------------------------------------------------------------- /tests/pcaps/irc-basic.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/irc-basic.trace -------------------------------------------------------------------------------- /tests/pcaps/irc-dcc-send.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/irc-dcc-send.trace -------------------------------------------------------------------------------- /tests/pcaps/irc-whitespace.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/irc-whitespace.trace -------------------------------------------------------------------------------- /tests/pcaps/krb/auth.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/krb/auth.trace -------------------------------------------------------------------------------- /tests/pcaps/krb/kerberos_tso.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/krb/kerberos_tso.pcap -------------------------------------------------------------------------------- /tests/pcaps/krb/kinit.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/krb/kinit.trace -------------------------------------------------------------------------------- /tests/pcaps/krb/optional-service-name.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/krb/optional-service-name.pcap -------------------------------------------------------------------------------- /tests/pcaps/krb/smb2_krb.keytab: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/krb/smb2_krb.keytab -------------------------------------------------------------------------------- /tests/pcaps/krb/smb2_krb.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/krb/smb2_krb.pcap -------------------------------------------------------------------------------- /tests/pcaps/krb/smb_gssapi.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/krb/smb_gssapi.trace -------------------------------------------------------------------------------- /tests/pcaps/linux_dlt_sll2.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/linux_dlt_sll2.pcap -------------------------------------------------------------------------------- /tests/pcaps/linuxsll-arp.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/linuxsll-arp.pcap -------------------------------------------------------------------------------- /tests/pcaps/llc.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/llc.pcap -------------------------------------------------------------------------------- /tests/pcaps/lldp.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/lldp.pcap -------------------------------------------------------------------------------- /tests/pcaps/mixed-vlan-mpls.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mixed-vlan-mpls.trace -------------------------------------------------------------------------------- /tests/pcaps/mmsX.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mmsX.pcap -------------------------------------------------------------------------------- /tests/pcaps/mobile-ipv6/ipv6-mobile-hoa.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mobile-ipv6/ipv6-mobile-hoa.trace -------------------------------------------------------------------------------- /tests/pcaps/mobile-ipv6/ipv6-mobile-routing.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mobile-ipv6/ipv6-mobile-routing.trace -------------------------------------------------------------------------------- /tests/pcaps/mobile-ipv6/mip6_back.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mobile-ipv6/mip6_back.trace -------------------------------------------------------------------------------- /tests/pcaps/mobile-ipv6/mip6_be.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mobile-ipv6/mip6_be.trace -------------------------------------------------------------------------------- /tests/pcaps/mobile-ipv6/mip6_brr.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mobile-ipv6/mip6_brr.trace -------------------------------------------------------------------------------- /tests/pcaps/mobile-ipv6/mip6_bu.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mobile-ipv6/mip6_bu.trace -------------------------------------------------------------------------------- /tests/pcaps/mobile-ipv6/mip6_cot.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mobile-ipv6/mip6_cot.trace -------------------------------------------------------------------------------- /tests/pcaps/mobile-ipv6/mip6_coti.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mobile-ipv6/mip6_coti.trace -------------------------------------------------------------------------------- /tests/pcaps/mobile-ipv6/mip6_hot.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mobile-ipv6/mip6_hot.trace -------------------------------------------------------------------------------- /tests/pcaps/mobile-ipv6/mip6_hoti.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mobile-ipv6/mip6_hoti.trace -------------------------------------------------------------------------------- /tests/pcaps/modbus/4SICS-GeekLounge-151022-min.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/modbus/4SICS-GeekLounge-151022-min.pcap -------------------------------------------------------------------------------- /tests/pcaps/modbus/fuzz-1011.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/modbus/fuzz-1011.trace -------------------------------------------------------------------------------- /tests/pcaps/modbus/fuzz-72.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/modbus/fuzz-72.trace -------------------------------------------------------------------------------- /tests/pcaps/modbus/modbus.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/modbus/modbus.trace -------------------------------------------------------------------------------- /tests/pcaps/modbus/modbusBig.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/modbus/modbusBig.pcap -------------------------------------------------------------------------------- /tests/pcaps/modbus/modbusSmall.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/modbus/modbusSmall.pcap -------------------------------------------------------------------------------- /tests/pcaps/mount/mount_base.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mount/mount_base.pcap -------------------------------------------------------------------------------- /tests/pcaps/mpls-in-vlan.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mpls-in-vlan.trace -------------------------------------------------------------------------------- /tests/pcaps/mqtt.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mqtt.pcap -------------------------------------------------------------------------------- /tests/pcaps/mysql/auth.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mysql/auth.trace -------------------------------------------------------------------------------- /tests/pcaps/mysql/encrypted.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mysql/encrypted.trace -------------------------------------------------------------------------------- /tests/pcaps/mysql/mysql-show-engine-innodb-status-no-password.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mysql/mysql-show-engine-innodb-status-no-password.pcap -------------------------------------------------------------------------------- /tests/pcaps/mysql/mysql.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mysql/mysql.trace -------------------------------------------------------------------------------- /tests/pcaps/mysql/plain-amazon-rds.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mysql/plain-amazon-rds.trace -------------------------------------------------------------------------------- /tests/pcaps/mysql/selects_with_new_proto.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mysql/selects_with_new_proto.trace -------------------------------------------------------------------------------- /tests/pcaps/mysql/tls-12-amazon-rds.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mysql/tls-12-amazon-rds.trace -------------------------------------------------------------------------------- /tests/pcaps/mysql/tls-13-amazon-rds.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/mysql/tls-13-amazon-rds.trace -------------------------------------------------------------------------------- /tests/pcaps/ncp.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ncp.pcap -------------------------------------------------------------------------------- /tests/pcaps/negative-time.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/negative-time.pcap -------------------------------------------------------------------------------- /tests/pcaps/nflog-http.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/nflog-http.pcap -------------------------------------------------------------------------------- /tests/pcaps/nfs/nfs_base.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/nfs/nfs_base.pcap -------------------------------------------------------------------------------- /tests/pcaps/nmap-vsn.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/nmap-vsn.trace -------------------------------------------------------------------------------- /tests/pcaps/ntp.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ntp.pcap -------------------------------------------------------------------------------- /tests/pcaps/ntp/NTP-digest.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ntp/NTP-digest.pcap -------------------------------------------------------------------------------- /tests/pcaps/ntp/NTP_sync.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ntp/NTP_sync.pcap -------------------------------------------------------------------------------- /tests/pcaps/ntp/ntp.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ntp/ntp.pcap -------------------------------------------------------------------------------- /tests/pcaps/ntp/ntp2.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ntp/ntp2.pcap -------------------------------------------------------------------------------- /tests/pcaps/ntp/ntpmode67.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ntp/ntpmode67.pcap -------------------------------------------------------------------------------- /tests/pcaps/pbb.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/pbb.pcap -------------------------------------------------------------------------------- /tests/pcaps/pe/pe.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/pe/pe.trace -------------------------------------------------------------------------------- /tests/pcaps/pop3-unknown-commands.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/pop3-unknown-commands.pcap -------------------------------------------------------------------------------- /tests/pcaps/port4242.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/port4242.trace -------------------------------------------------------------------------------- /tests/pcaps/port4243.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/port4243.trace -------------------------------------------------------------------------------- /tests/pcaps/pppoe-over-qinq.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/pppoe-over-qinq.pcap -------------------------------------------------------------------------------- /tests/pcaps/pppoe.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/pppoe.trace -------------------------------------------------------------------------------- /tests/pcaps/q-in-q.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/q-in-q.trace -------------------------------------------------------------------------------- /tests/pcaps/radiotap.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/radiotap.pcap -------------------------------------------------------------------------------- /tests/pcaps/radius/radius.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/radius/radius.trace -------------------------------------------------------------------------------- /tests/pcaps/radius/radius_localhost.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/radius/radius_localhost.pcap -------------------------------------------------------------------------------- /tests/pcaps/raw_layer.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/raw_layer.pcap -------------------------------------------------------------------------------- /tests/pcaps/raw_packets.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/raw_packets.trace -------------------------------------------------------------------------------- /tests/pcaps/rdp/rdp-proprietary-encryption.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/rdp/rdp-proprietary-encryption.pcap -------------------------------------------------------------------------------- /tests/pcaps/rdp/rdp-to-ssl.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/rdp/rdp-to-ssl.pcap -------------------------------------------------------------------------------- /tests/pcaps/rdp/rdp-unknown-keyboard.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/rdp/rdp-unknown-keyboard.pcap -------------------------------------------------------------------------------- /tests/pcaps/rdp/rdp-x509.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/rdp/rdp-x509.pcap -------------------------------------------------------------------------------- /tests/pcaps/rdp/rdpeudp-handshake-fail.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/rdp/rdpeudp-handshake-fail.pcap -------------------------------------------------------------------------------- /tests/pcaps/rdp/rdpeudp-handshake-success.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/rdp/rdpeudp-handshake-success.pcap -------------------------------------------------------------------------------- /tests/pcaps/rdp/rdpeudp2-handshake-success.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/rdp/rdpeudp2-handshake-success.pcap -------------------------------------------------------------------------------- /tests/pcaps/rfb/vnc-mac-to-linux.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/rfb/vnc-mac-to-linux.pcap -------------------------------------------------------------------------------- /tests/pcaps/rfb/vnc-scanner.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/rfb/vnc-scanner.pcap -------------------------------------------------------------------------------- /tests/pcaps/rfb/vncmac.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/rfb/vncmac.pcap -------------------------------------------------------------------------------- /tests/pcaps/rotation.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/rotation.trace -------------------------------------------------------------------------------- /tests/pcaps/rpc-portmap-sadmind.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/rpc-portmap-sadmind.pcap -------------------------------------------------------------------------------- /tests/pcaps/sip/sip-junk-before-request.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/sip/sip-junk-before-request.pcap -------------------------------------------------------------------------------- /tests/pcaps/sip/wireshark.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/sip/wireshark.trace -------------------------------------------------------------------------------- /tests/pcaps/smb/SMBGhost.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/SMBGhost.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/dssetup_DsRoleGetPrimaryDomainInformation_standalone_workstation.cap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/dssetup_DsRoleGetPrimaryDomainInformation_standalone_workstation.cap -------------------------------------------------------------------------------- /tests/pcaps/smb/raw_ntlm_in_smb.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/raw_ntlm_in_smb.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb1-OSS-fuzz-54883.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb1-OSS-fuzz-54883.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb1.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb1.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb1_transaction2_request.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb1_transaction2_request.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb1_transaction2_secondary_request.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb1_transaction2_secondary_request.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb1_transaction_request.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb1_transaction_request.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb1_transaction_response.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb1_transaction_response.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb1_transaction_secondary_request.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb1_transaction_secondary_request.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb2.delete-on-close-perms-delete-existing.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb2.delete-on-close-perms-delete-existing.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb2.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb2.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb2_fscontrol.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb2_fscontrol.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb2readwrite.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb2readwrite.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb3.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb3.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb311.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb311.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb3_multichannel.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb3_multichannel.pcap -------------------------------------------------------------------------------- /tests/pcaps/smb/smb3_negotiate_context.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smb/smb3_negotiate_context.pcap -------------------------------------------------------------------------------- /tests/pcaps/smtp-attachment-msg.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smtp-attachment-msg.pcap -------------------------------------------------------------------------------- /tests/pcaps/smtp-multi-addr.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smtp-multi-addr.pcap -------------------------------------------------------------------------------- /tests/pcaps/smtp-one-side-only.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smtp-one-side-only.trace -------------------------------------------------------------------------------- /tests/pcaps/smtp.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/smtp.trace -------------------------------------------------------------------------------- /tests/pcaps/snmp/leak_test.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/snmp/leak_test.pcap -------------------------------------------------------------------------------- /tests/pcaps/snmp/snmpv1_get.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/snmp/snmpv1_get.pcap -------------------------------------------------------------------------------- /tests/pcaps/snmp/snmpv1_get_short.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/snmp/snmpv1_get_short.pcap -------------------------------------------------------------------------------- /tests/pcaps/snmp/snmpv1_set.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/snmp/snmpv1_set.pcap -------------------------------------------------------------------------------- /tests/pcaps/snmp/snmpv1_trap.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/snmp/snmpv1_trap.pcap -------------------------------------------------------------------------------- /tests/pcaps/snmp/snmpv2_get.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/snmp/snmpv2_get.pcap -------------------------------------------------------------------------------- /tests/pcaps/snmp/snmpv2_get_bulk.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/snmp/snmpv2_get_bulk.pcap -------------------------------------------------------------------------------- /tests/pcaps/snmp/snmpv2_get_next.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/snmp/snmpv2_get_next.pcap -------------------------------------------------------------------------------- /tests/pcaps/snmp/snmpv3_get_next.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/snmp/snmpv3_get_next.pcap -------------------------------------------------------------------------------- /tests/pcaps/snmp/snmpwalk-short.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/snmp/snmpwalk-short.pcap -------------------------------------------------------------------------------- /tests/pcaps/socks-auth.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/socks-auth.pcap -------------------------------------------------------------------------------- /tests/pcaps/socks-with-ssl.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/socks-with-ssl.trace -------------------------------------------------------------------------------- /tests/pcaps/socks.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/socks.trace -------------------------------------------------------------------------------- /tests/pcaps/ssh/reverse-ssh.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ssh/reverse-ssh.pcap -------------------------------------------------------------------------------- /tests/pcaps/ssh/ssh-on-port-80.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ssh/ssh-on-port-80.trace -------------------------------------------------------------------------------- /tests/pcaps/ssh/ssh.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ssh/ssh.trace -------------------------------------------------------------------------------- /tests/pcaps/ssh/ssh1-ssh2-fingerprints.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ssh/ssh1-ssh2-fingerprints.pcap -------------------------------------------------------------------------------- /tests/pcaps/ssh/ssh_client_sends_first_enc_pkt_with_newkeys.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ssh/ssh_client_sends_first_enc_pkt_with_newkeys.pcap -------------------------------------------------------------------------------- /tests/pcaps/ssh/ssh_kex_curve25519.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ssh/ssh_kex_curve25519.pcap -------------------------------------------------------------------------------- /tests/pcaps/ssh/ssh_server_sends_first_enc_pkt_with_newkeys.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ssh/ssh_server_sends_first_enc_pkt_with_newkeys.pcap -------------------------------------------------------------------------------- /tests/pcaps/ssh/ssh_version_199.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ssh/ssh_version_199.pcap -------------------------------------------------------------------------------- /tests/pcaps/ssh/sshguess.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ssh/sshguess.pcap -------------------------------------------------------------------------------- /tests/pcaps/ssl-and-ssh-using-sslh.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/ssl-and-ssh-using-sslh.trace -------------------------------------------------------------------------------- /tests/pcaps/syslog-missing-pri.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/syslog-missing-pri.trace -------------------------------------------------------------------------------- /tests/pcaps/syslog-single-udp.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/syslog-single-udp.trace -------------------------------------------------------------------------------- /tests/pcaps/tcp/fin_retransmission.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/fin_retransmission.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/handshake-reorder.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/handshake-reorder.trace -------------------------------------------------------------------------------- /tests/pcaps/tcp/http-on-irc-port-missing-syn.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/http-on-irc-port-missing-syn.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/miss_end_data.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/miss_end_data.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/missing-syn.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/missing-syn.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/no-handshake.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/no-handshake.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/option-27.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/option-27.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/option-sack.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/option-sack.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/options.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/options.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/payload-syn.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/payload-syn.trace -------------------------------------------------------------------------------- /tests/pcaps/tcp/payload-synack.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/payload-synack.trace -------------------------------------------------------------------------------- /tests/pcaps/tcp/qi_internet_SYNACK_curl_jsonip.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/qi_internet_SYNACK_curl_jsonip.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/reassembly.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/reassembly.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/retransmit-fast009.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/retransmit-fast009.trace -------------------------------------------------------------------------------- /tests/pcaps/tcp/retransmit-timeout.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/retransmit-timeout.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/rst-inject-rae.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/rst-inject-rae.trace -------------------------------------------------------------------------------- /tests/pcaps/tcp/single-rst.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/single-rst.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/ssh-dups.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/ssh-dups.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/syn-synack.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/syn-synack.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/syn-then-ack-then-rst.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/syn-then-ack-then-rst.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/syn-then-rst.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/syn-then-rst.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/syn-then-stuff-then-rst.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/syn-then-stuff-then-rst.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/syn.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/syn.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/tcp-fast-open.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/tcp-fast-open.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/timestamp.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/timestamp.pcap -------------------------------------------------------------------------------- /tests/pcaps/tcp/truncated-header.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tcp/truncated-header.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/CVE-2015-3194.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/CVE-2015-3194.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/cert-no-cn.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/cert-no-cn.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/certificate-request-failed.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/certificate-request-failed.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/certificate-with-sct.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/certificate-with-sct.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/chrome-34-google.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/chrome-34-google.trace -------------------------------------------------------------------------------- /tests/pcaps/tls/chrome-63.0.3211.0-canary-tls_experiment.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/chrome-63.0.3211.0-canary-tls_experiment.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/client-certificate.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/client-certificate.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/dhe.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/dhe.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/dtls1_0.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/dtls1_0.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/dtls1_2.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/dtls1_2.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/ecdhe.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/ecdhe.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/ecdsa-cert.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/ecdsa-cert.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/google-cert-repeat.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/google-cert-repeat.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/google-duplicate.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/google-duplicate.trace -------------------------------------------------------------------------------- /tests/pcaps/tls/heartbleed-encrypted-short.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/heartbleed-encrypted-short.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/heartbleed-encrypted-success.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/heartbleed-encrypted-success.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/heartbleed-encrypted.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/heartbleed-encrypted.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/heartbleed-success.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/heartbleed-success.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/heartbleed.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/heartbleed.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/hrr.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/hrr.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/imap-starttls.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/imap-starttls.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/irc-starttls.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/irc-starttls.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/missing-intermediate.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/missing-intermediate.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/ocsp-http-get.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/ocsp-http-get.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/ocsp-request-only.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/ocsp-request-only.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/ocsp-request-response.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/ocsp-request-response.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/ocsp-response-only.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/ocsp-response-only.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/ocsp-revoked.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/ocsp-revoked.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/ocsp-stapling-digicert.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/ocsp-stapling-digicert.trace -------------------------------------------------------------------------------- /tests/pcaps/tls/ocsp-stapling-twimg.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/ocsp-stapling-twimg.trace -------------------------------------------------------------------------------- /tests/pcaps/tls/ocsp-stapling.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/ocsp-stapling.trace -------------------------------------------------------------------------------- /tests/pcaps/tls/pop3-starttls.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/pop3-starttls.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/signed_certificate_timestamp-2.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/signed_certificate_timestamp-2.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/signed_certificate_timestamp.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/signed_certificate_timestamp.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/signed_certificate_timestamp_tls1_0.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/signed_certificate_timestamp_tls1_0.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/smtp-starttls.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/smtp-starttls.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/ssl-v2.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/ssl-v2.trace -------------------------------------------------------------------------------- /tests/pcaps/tls/ssl.v3.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/ssl.v3.trace -------------------------------------------------------------------------------- /tests/pcaps/tls/telesec.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/telesec.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/tls-1.2-handshake-failure.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls-1.2-handshake-failure.trace -------------------------------------------------------------------------------- /tests/pcaps/tls/tls-1.2-stream-keylog.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls-1.2-stream-keylog.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/tls-13draft19-early-data.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls-13draft19-early-data.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/tls-conn-with-extensions.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls-conn-with-extensions.trace -------------------------------------------------------------------------------- /tests/pcaps/tls/tls-early-alert.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls-early-alert.trace -------------------------------------------------------------------------------- /tests/pcaps/tls/tls-expired-cert.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls-expired-cert.trace -------------------------------------------------------------------------------- /tests/pcaps/tls/tls-fragmented-handshake.pcap.gz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls-fragmented-handshake.pcap.gz -------------------------------------------------------------------------------- /tests/pcaps/tls/tls1.2.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls1.2.trace -------------------------------------------------------------------------------- /tests/pcaps/tls/tls12-decryption.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls12-decryption.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/tls13_psk_succesfull.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls13_psk_succesfull.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/tls13_wolfssl.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls13_wolfssl.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/tls13draft16-chrome55.0.2879.0-canary-aborted.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls13draft16-chrome55.0.2879.0-canary-aborted.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/tls13draft16-chrome55.0.2879.0-canary.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls13draft16-chrome55.0.2879.0-canary.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/tls13draft16-ff52.a01-aborted.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls13draft16-ff52.a01-aborted.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/tls13draft16-ff52.a01.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls13draft16-ff52.a01.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/tls13draft23-chrome67.0.3368.0-canary.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls13draft23-chrome67.0.3368.0-canary.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/tls1_1.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/tls1_1.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/webrtc-stun.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/webrtc-stun.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/x509-generalizedtime.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/x509-generalizedtime.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/xmpp-dialback-starttls.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/xmpp-dialback-starttls.pcap -------------------------------------------------------------------------------- /tests/pcaps/tls/xmpp-starttls.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tls/xmpp-starttls.pcap -------------------------------------------------------------------------------- /tests/pcaps/trunc/icmp-header-trunc.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/trunc/icmp-header-trunc.pcap -------------------------------------------------------------------------------- /tests/pcaps/trunc/icmp-payload-trunc.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/trunc/icmp-payload-trunc.pcap -------------------------------------------------------------------------------- /tests/pcaps/trunc/ip4-trunc.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/trunc/ip4-trunc.pcap -------------------------------------------------------------------------------- /tests/pcaps/trunc/ip6-ext-trunc.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/trunc/ip6-ext-trunc.pcap -------------------------------------------------------------------------------- /tests/pcaps/trunc/ip6-trunc.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/trunc/ip6-trunc.pcap -------------------------------------------------------------------------------- /tests/pcaps/trunc/ipv4-internally-truncated-header.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/trunc/ipv4-internally-truncated-header.pcap -------------------------------------------------------------------------------- /tests/pcaps/trunc/ipv4-truncated-broken-header.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/trunc/ipv4-truncated-broken-header.pcap -------------------------------------------------------------------------------- /tests/pcaps/trunc/mpls-6in6-6in6-4in6-trunc.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/trunc/mpls-6in6-6in6-4in6-trunc.pcap -------------------------------------------------------------------------------- /tests/pcaps/trunc/mpls-6in6-broken.pcap.gz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/trunc/mpls-6in6-broken.pcap.gz -------------------------------------------------------------------------------- /tests/pcaps/trunc/trunc-hdr.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/trunc/trunc-hdr.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/4in4.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/4in4.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/4in6.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/4in6.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/6in4.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/6in4.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/6in6-tunnel-change.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/6in6-tunnel-change.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/6in6.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/6in6.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/6in6in6.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/6in6in6.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/Teredo.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/Teredo.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/ayiya3.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/ayiya3.trace -------------------------------------------------------------------------------- /tests/pcaps/tunnels/geneve.README: -------------------------------------------------------------------------------- 1 | The trace file `geneve.pcap` was downloaded from the Wireshark bug tracker, 2 | https://gitlab.com/wireshark/wireshark/-/issues/10193. 3 | -------------------------------------------------------------------------------- /tests/pcaps/tunnels/geneve.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/geneve.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gre-aruba.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gre-aruba.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gre-erspan3-dot1q.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gre-erspan3-dot1q.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gre-pptp.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gre-pptp.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gre-sample.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gre-sample.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gre-within-gre.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gre-within-gre.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/gtp10_not_0xff.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/gtp10_not_0xff.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/gtp1_gn_normal_incl_fragmentation.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/gtp1_gn_normal_incl_fragmentation.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/gtp2_different_udp_port.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/gtp2_different_udp_port.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/gtp3_false_gtp.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/gtp3_false_gtp.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/gtp4_udp_2152_inside.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/gtp4_udp_2152_inside.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/gtp6_gtp_0x32.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/gtp6_gtp_0x32.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/gtp7_ipv6.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/gtp7_ipv6.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/gtp8_teredo.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/gtp8_teredo.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/gtp9_unknown_or_too_short_payload.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/gtp9_unknown_or_too_short_payload.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/gtp_control_prime.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/gtp_control_prime.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/gtp_create_pdp_ctx.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/gtp_create_pdp_ctx.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/gtp_ext_header.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/gtp_ext_header.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/gtp/pdp_ctx_messages.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/gtp/pdp_ctx_messages.trace -------------------------------------------------------------------------------- /tests/pcaps/tunnels/mpls-6in6-6in6-4in6-invalid-version-4.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/mpls-6in6-6in6-4in6-invalid-version-4.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/mpls-6in6-6in6-invalid-version-6.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/mpls-6in6-6in6-invalid-version-6.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/ping6-in-ipv4.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/ping6-in-ipv4.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/socks.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/socks.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/teredo-udp-in-udp.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/teredo-udp-in-udp.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/teredo_bubble_with_payload.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/teredo_bubble_with_payload.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/vxlan-encapsulated-http.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/vxlan-encapsulated-http.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/vxlan-encapsulated-igmp-v2.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/vxlan-encapsulated-igmp-v2.pcap -------------------------------------------------------------------------------- /tests/pcaps/tunnels/vxlan.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/tunnels/vxlan.pcap -------------------------------------------------------------------------------- /tests/pcaps/udp-multiple-source-ports.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/udp-multiple-source-ports.pcap -------------------------------------------------------------------------------- /tests/pcaps/udp-signature-test.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/udp-signature-test.pcap -------------------------------------------------------------------------------- /tests/pcaps/var-services-std-ports.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/var-services-std-ports.trace -------------------------------------------------------------------------------- /tests/pcaps/vntag.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/vntag.pcap -------------------------------------------------------------------------------- /tests/pcaps/web.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/web.trace -------------------------------------------------------------------------------- /tests/pcaps/wikipedia-filtered-plus-udp.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/wikipedia-filtered-plus-udp.trace -------------------------------------------------------------------------------- /tests/pcaps/wikipedia.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/wikipedia.trace -------------------------------------------------------------------------------- /tests/pcaps/wlanmon.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/wlanmon.pcap -------------------------------------------------------------------------------- /tests/pcaps/workshop_2011_browse.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/workshop_2011_browse.trace -------------------------------------------------------------------------------- /tests/pcaps/www-odd-url.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/stefanDeveloper/heiFIP/f83886aae25bf864d1b7d48bd6e41e3ab6991dac/tests/pcaps/www-odd-url.trace --------------------------------------------------------------------------------