May 2016 - tor-commits - lists.torproject.org

[spec/master] Update specifications of other tests.
by art＠torproject.org 09 May '16

09 May '16

commit d37d22983d766f67ccd528fe50a30773782073c3 Author: Arturo Filastò <arturo(a)filasto.net> Date: Wed Jan 27 15:04:22 2016 +0100 Update specifications of other tests. Write specification for TCPTest --- data-formats/df-002-dnst.md | 2 + data-formats/df-003-scapy.md | 2 +- data-formats/df-004-tcpt.md | 63 + test-specs/ts-001-bridget.md | 2 + test-specs/ts-002-dns-consistency.md | 231 +- test-specs/ts-003-http-requests.md | 321 ++- test-specs/ts-004-http-host.md | 176 +- test-specs/ts-005-dns-spoof.md | 6 +- test-specs/ts-006-header-field-manipulation.md | 186 +- test-specs/ts-007-http-invalid-request-line.md | 129 +- test-specs/ts-008-tcp-connect.md | 74 +- test-specs/ts-009-multi-protocol-traceroute.md | 2837 +++++------------------- test-specs/ts-010-captive-portal.md | 125 +- test-specs/ts-011-bridge-reachability.md | 31 +- test-specs/ts-012-dns-injection.md | 2 +- 15 files changed, 1368 insertions(+), 2819 deletions(-) diff --git a/data-formats/df-002-dnst.md b/data-formats/df-002-dnst.md index 4e1ac26..0e51e9d 100644 --- a/data-formats/df-002-dnst.md +++ b/data-formats/df-002-dnst.md @@ -125,6 +125,8 @@ data format. "217.144.6.6", "81.28.112.2" ], + "inconsistent": [ + ], "queries": [ { "answers": [], diff --git a/data-formats/df-003-scapy.md b/data-formats/df-003-scapy.md index cae1972..d0043fa 100644 --- a/data-formats/df-003-scapy.md +++ b/data-formats/df-003-scapy.md @@ -3,7 +3,7 @@ Data Format Version: 0.2.0 This specifies the data format for tests that are based on -ooni.templates.scapyt.ScapyTest. +`ooni.templates.scapyt.ScapyTest`. ## Specification diff --git a/data-formats/df-004-tcpt.md b/data-formats/df-004-tcpt.md new file mode 100644 index 0000000..72261ce --- /dev/null +++ b/data-formats/df-004-tcpt.md @@ -0,0 +1,63 @@ +# TCPTest data format + +Data Format Version: 0.2.0 + +This specifies the data format for tests that are based on +`ooni.templates.tcpt.TCPTest`. + +## Specification + +``` +{ + "sent": [ + "The list of the payloads of the sent data segments." + ] + "received": [ + "The list of the payloads of the received data segments." + ] +} +``` + +## Example output + +``` +{ + "bucket_date": "2015-12-01", + "data_format_version": "0.2.0", + "id": "f116e9a4-a648-48c8-b3b7-cca7bd84d069", + "input": null, + "options": [], + "probe_asn": "AS786", + "probe_cc": "GB", + "probe_ip": "127.0.0.1", + "report_filename": "2015-12-01/20151201T072512Z-GB-AS786-http_invalid_request_line-ZXjsOzoy3gl0f71b35et9kLZsTkc3W1yLYMHSLVLN6buJvnXveywSBM24C2YPtfv-0.1.0-probe.json", + "report_id": "ZXjsOzoy3gl0f71b35et9kLZsTkc3W1yLYMHSLVLN6buJvnXveywSBM24C2YPtfv", + "software_name": "ooniprobe", + "software_version": "1.3.1", + "test_helpers": { + "backend": "213.138.109.232" + }, + "backend_version": "1.1.4", + "input_hashes": [], + "probe_city": null, + "test_keys": { + "received": [ + "53LC / HTTP/1.1\n\r", + "", + "dNnLP MHIdC s5vst k7Ir2\n\r", + "yWoBwUKUnlMfZQ1BDFIHJsLAU9PNKUVOzOJ1s7BdXKlhAnALegIOkvEsq8QCHNKqFoMk5ndpSa3bE99hIVXZSK7hCGa6wk770C9WJoL7VLYDeGRYWEhoYF2eg8PERFK4CGYXuuCLkr0ScT3esnj66ypgzpuP85PpCSERP5qc0DNYzHF4edM9RcDxttfMU0X5HyQ0EzKCMX4dcKlB6DLianESEKFKE3VwRht2cwUdLs6IXG5fsUBLEiJUQEHzFENpr40dPvcnk1KoTc4UZr5EP9JlNJ9f7fx6Ps6m2QzxyXkVT8UjPYbx2Rk6EO27nfd21iKtzZyZzUhyHxVQtLS58hzeQumCwAMdOi5FmwiDG6vFS1THTODJdwovw7V0CsaXvFwkJmBagWVvRR3zWQ9o509BnK9bxvBIo5cgFdyBlVHSH3Bbq0kXyarVAoQjaOo0C8Tb8lr5Ug7FFelGnBmdKNmNQj1QmmiobrcUMY22JKdxp81Z0R1AoyjLjeJQ7NNlhpbM6REiHladSmVmgBPChjjFQJn2TGOmSAIQJAvnsREpdMyuRemTA5Vb0QMIUmEVvpIKV8HOhBaniz389ftxglIizaOF3pacUIBycUwLermpolNatVn6BbDSCNJGCwil8NVUBtfKQqTlEgQk1zo3LNfryrKEd5M4PBdOzqIFHb0zhsY8NsSy7geXOZfMnNRNfu0dsMDchiLYHzQD0qPg2heEsJ3w8usyH462eqUcNF5qNOt47tC53rnbChT8Tjktr55LrJQhvKg8QRqWg2HuTnM4eMxSjdF8iCUzxEhDHkoxah5v6iQPmRE7qCUxf2Jwyi404MLX0gGvoawukkrEiVlhcHrQo3yrnAqIRx7mYhp9izzmWw62e35xzpFD3rxhAlrLTBr3bJQPBXvMzkAY62UHt1pAQPCaDojEo1WrHKnb8TMsNUS8u5yYumvbuxsLSJFWIjkrqf2G6rm1aVo95jxx 9Uvx665eJ9tWRAT6rD4A1QoXVg34m20ywW1n3voP / HTTP/1.1\n\r" + ], + "sent": [ + "53LC / HTTP/1.1\n\r", + "GET / HTTP/g8z\n\r", + "dNnLP MHIdC s5vst k7Ir2\n\r", + "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 9Uvx665eJ9tWRAT6rD4A1QoXVg34m20ywW1n3voP / HTTP/1.1\n\r" + ], + "tampering": true + }, + "test_name": "http_invalid_request_line", + "test_runtime": 5.7580039501, + "test_start_time": "2015-12-01 07:25:12", + "test_version": "0.2" +} +``` diff --git a/test-specs/ts-001-bridget.md b/test-specs/ts-001-bridget.md index e9518bc..f800df5 100644 --- a/test-specs/ts-001-bridget.md +++ b/test-specs/ts-001-bridget.md @@ -6,6 +6,8 @@ bridgeT +Note: This test is deprecated + # Test preconditions * Tor installed. diff --git a/test-specs/ts-002-dns-consistency.md b/test-specs/ts-002-dns-consistency.md index 95ad46b..0717b55 100644 --- a/test-specs/ts-002-dns-consistency.md +++ b/test-specs/ts-002-dns-consistency.md @@ -1,10 +1,10 @@ # Specification version number -2013-01-30-000 +0.2.0 # Specification name -DNS Consistency Test +DNS Consistency # Test preconditions @@ -64,20 +64,33 @@ In any other case we mark the result as: tampering: True. # Expected output -## Data format +## Parent Data format df-002-dnst ## Semantics -Two extra dicts will be present inside of every report entry: - -tampering: - **dict** containing as keys the IPv4 addresses of the test resolvers - and as values True|False|'reverse_match' - -test_resolvers: - **list** of IPv4 addresses of the test resolvers +The following extra fields will be present in every measurement entry. + +``` +{ + "successful": [ + "The list of addresses of the resolvers that provided a consistent" + "answer to our query." + ], + "failures": [ + "The list of addresses that failed to resolve the query." + "Note: in the case of NXDOMAIN these will turn up as failures." + ], + "inconsistent": [ + "The list of addresses that returned an inconsistent result" + ], + "errors": { + "RESOLVER_IP": "error string of the failure" + } + +} +``` ## Possible conclusions @@ -87,76 +100,132 @@ That the DNS resolver in question has provided a false response to a DNS Query. ## Example output sample - input: example.com - control_resolver: &id001 [203.0.113.1, 53] - queries: - - addrs: [203.0.113.2] - answers: - - [<RR name=example.com type=A class=IN ttl=2562s auth=False>, <A address=203.0.113.2 - ttl=2562>] - query: '[Query(''example.com'', 1, 1)]' - query_type: A - resolver: *id001 - - addrs: [203.0.113.2] - answers: - - [<RR name=example.com type=A class=IN ttl=7200s auth=False>, <A address=203.0.113.2 - ttl=7200>] - query: '[Query(''example.com'', 1, 1)]' - query_type: A - resolver: [203.0.113.3, 53] - - addrs: [203.0.113.2] - answers: - - [<RR name=example.com type=A class=IN ttl=4007s auth=False>, <A address=203.0.113.2 - ttl=4007>] - query: '[Query(''example.com'', 1, 1)]' - query_type: A - resolver: [203.0.113.4, 53] - - addrs: [203.0.113.2] - answers: - - [<RR name=example.com type=A class=IN ttl=7200s auth=False>, <A address=203.0.113.2 - ttl=7200>] - query: '[Query(''example.com'', 1, 1)]' - query_type: A - resolver: [203.0.113.5, 53] - - addrs: [203.0.113.2] - answers: - - [<RR name=example.com type=A class=IN ttl=7200s auth=False>, <A address=203.0.113.2 - ttl=7200>] - query: '[Query(''example.com'', 1, 1)]' - query_type: A - resolver: [203.0.113.6, 53] - - addrs: [203.0.113.2] - answers: - - [<RR name=example.com type=A class=IN ttl=7200s auth=False>, <A address=203.0.113.2 - ttl=7200>] - query: '[Query(''example.com'', 1, 1)]' - query_type: A - resolver: [203.0.113.7, 53] - - addrs: [203.0.113.2] - answers: - - [<RR name=example.com type=A class=IN ttl=7200s auth=False>, <A address=203.0.113.2 - ttl=7200>] - query: '[Query(''example.com'', 1, 1)]' - query_type: A - resolver: [203.0.113.8, 53] - - query: '[Query(''example.com'', 1, 1)]' - query_type: A - resolver: [203.0.113.9, 53] - - query: '[Query(''example.com'', 1, 1)]' - query_type: A - resolver: [203.0.113.1, 53] - - failure: deferred_timeout_error - query: '[Query(''example.com'', 1, 1)]' - query_type: A - resolver: [203.0.113.10, 53] - tampering: {203.0.113.11: no_answer, 203.0.113.6: false, 203.0.113.4: false, 203.0.113.5: false, - 203.0.113.7: false, 203.0.113.3: false, 203.0.113.9: no_answer, 203.0.113.8: false} - test_resolvers: [203.0.113.3, 203.0.113.4, 203.0.113.5, 203.0.113.6, 203.0.113.7, - 203.0.113.8, 203.0.113.9, 203.0.113.11, 203.0.113.10] - test_name: test_a_lookup - test_runtime: 2.6424369812011719 - test_started: 1357167921.0688701 - ... +``` +{ + "bucket_date": "2015-11-23", + "data_format_version": "0.2.0", + "id": "e6f6257f-e7c2-48fa-8345-b7ed055ab1d2", + "input": "198.175.124.185", + "options": [ + "-f", + "citizenlab-urls-global.txt", + "-T", + "dns-server-jo.txt" + ], + "probe_asn": "AS8376", + "probe_cc": "JO", + "probe_ip": "127.0.0.1", + "report_filename": "2015-11-23/20151123T161428Z-JO-AS8376-dns_consistency-F1KI1WusW4c1T6OGyQDgHJjaSQ1bfpqV2G39bpmuHiLAJnse8R1F44vdRuTz6nO4-0.1.0-probe.json", + "report_id": "F1KI1WusW4c1T6OGyQDgHJjaSQ1bfpqV2G39bpmuHiLAJnse8R1F44vdRuTz6nO4", + "software_name": "ooniprobe", + "software_version": "1.3.1", + "test_helpers": { + "backend": "8.8.8.8:53" + }, + "input_hashes": [ + "0055f0881fba857d8b48123017d7aec83014e89f057e44b66107f657ec5e2eab" + ], + "probe_city": null, + "backend_version": "1.1.4", + "test_keys": { + "control_resolver": "8.8.8.8:53", + "errors": { + "212.118.0.1": "no_answer", + "212.118.0.2": "no_answer", + "212.38.128.3": "dns_lookup_error", + "217.144.6.6": "no_answer", + "8.8.8.8:53": "no_answer", + "80.90.160.135": "dns_lookup_error", + "80.90.160.172": "dns_lookup_error", + "81.28.112.2": "dns_lookup_error" + }, + "failed": [ + "80.90.160.172", + "8.8.8.8:53", + "212.118.0.2", + "80.90.160.135", + "212.38.128.3", + "212.118.0.1", + "217.144.6.6", + "81.28.112.2" + ], + "inconsistent": [ + ], + "queries": [ + { + "answers": [], + "failure": "no_answer", + "hostname": "198.175.124.185", + "query_type": "A", + "resolver_hostname": "8.8.8.8", + "resolver_port": 53 + }, + { + "answers": [], + "failure": "deferred_timeout_error", + "hostname": "198.175.124.185", + "query_type": "A", + "resolver_hostname": "212.38.128.3", + "resolver_port": 53 + }, + { + "answers": [], + "failure": "no_answer", + "hostname": "198.175.124.185", + "query_type": "A", + "resolver_hostname": "217.144.6.6", + "resolver_port": 53 + }, + { + "answers": [], + "failure": "deferred_timeout_error", + "hostname": "198.175.124.185", + "query_type": "A", + "resolver_hostname": "81.28.112.2", + "resolver_port": 53 + }, + { + "answers": [], + "failure": "deferred_timeout_error", + "hostname": "198.175.124.185", + "query_type": "A", + "resolver_hostname": "80.90.160.135", + "resolver_port": 53 + }, + { + "answers": [], + "failure": "deferred_timeout_error", + "hostname": "198.175.124.185", + "query_type": "A", + "resolver_hostname": "80.90.160.172", + "resolver_port": 53 + }, + { + "answers": [], + "failure": "no_answer", + "hostname": "198.175.124.185", + "query_type": "A", + "resolver_hostname": "212.118.0.1", + "resolver_port": 53 + }, + { + "answers": [], + "failure": "no_answer", + "hostname": "198.175.124.185", + "query_type": "A", + "resolver_hostname": "212.118.0.2", + "resolver_port": 53 + } + ], + "start_time": 1448291668.0, + "successful": [] + }, + "test_name": "dns_consistency", + "test_runtime": 0.0837070942, + "test_start_time": "2015-11-23 16:14:28", + "test_version": "0.6" +} +``` # Privacy considerations diff --git a/test-specs/ts-003-http-requests.md b/test-specs/ts-003-http-requests.md index 8592659..08017af 100644 --- a/test-specs/ts-003-http-requests.md +++ b/test-specs/ts-003-http-requests.md @@ -1,6 +1,6 @@ # Specification version number -2013-02-08-000 +0.2.0 # Specification name @@ -38,17 +38,18 @@ the control request and the experiment request. The user agent is chosen amongst this set of possible user agents: - "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7", - "Mozilla/5.0 (iPhone; U; CPU iPhone OS 3 1 2 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Mobile/7D11", - "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6", - "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6", - "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6", - "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6", - "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6", - "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6", - "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7", - "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7 (.NET CLR 3.5.30729)" - +``` +"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7", +"Mozilla/5.0 (iPhone; U; CPU iPhone OS 3 1 2 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Mobile/7D11", +"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6", +"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6", +"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6", +"Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6", +"Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6", +"Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6", +"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7", +"Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7 (.NET CLR 3.5.30729)" +``` These user agents are taken from the "How Unique Is Your Web Browser?" (https://panopticlick.eff.org/browser-uniqueness.pdf) paper as the browser user @@ -65,7 +66,7 @@ a certain factor (by default 0.8). ## Parent data format -df-001-httpt-000 +df-001-httpt ## Required output data @@ -90,32 +91,50 @@ Present only in test version >= 0.2.2: ## Semantics - body_length_match: - true|false +``` +{ + "body_length_match": + "true|false|null depending on whether or not the body lengths " + "of the experiment match the control. It is null when no control " + "or experiment response was retreived." - body_proportion: - `float` the proportion between the two response bodies + "body_proportion": + "float the proportion between the two response bodies" - factor: - `float` the body proportion factor used to assert length equality + "factor": + "float the body proportion factor used to assert length equality" +} +``` Only in test version >= 0.2: - headers_diff: - `set` the keys of the headers that are different between the two responses +``` +{ + "headers_diff": [ + "List of the keys of the headers that are different between " + "the two responses" + ] - headers_match: - true|false + "headers_match": + "true|false|null depending on whether or not the headers of the control " + "and experiment are consistent." +} +``` Only in test version >= 0.2.2: - control_failure: - null or `string` containing the HTTP request error string (for a list of - possible error string see df-000-base section "Error strings") +``` +{ + "control_failure": + "null or string containing the HTTP request error string (for a list of" + "possible error string see df-000-base section 'Error strings')" + + "experiment_failure": + "null or string containing the HTTP request error string (for a list of + "possible error string see df-000-base section 'Error strings')" - experiment_failure: - null or `string` containing the HTTP request error string (for a list of - possible error string see df-000-base section "Error strings") +} +``` ## Possible conclusions @@ -123,78 +142,172 @@ If the website in question is reachable from the probes network. ## Example output sample - agent: agent - body_length_match: true - body_proportion: 1.0 - control_failure: null - experiment_failure: null - factor: 0.8 - headers_diff: !!set {} - headers_match: true - requests: - - request: - body: null - headers: - - - User-Agent - - ['Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2) Gecko/20100115 - Firefox/3.6'] - method: GET - url: http://google.com - response: - body: '' - code: 301 - headers: - - - Content-Length - - ['219'] - - - X-XSS-Protection - - [1; mode=block] - - - Expires - - ['Sun, 10 Mar 2013 21:42:35 GMT'] - - - Server - - [gws] - - - Connection - - [close] - - - Location - - ['http://www.google.com/'] - - - Cache-Control - - ['public, max-age=2592000'] - - - Date - - ['Fri, 08 Feb 2013 21:42:35 GMT'] - - - X-Frame-Options - - [SAMEORIGIN] - - - Content-Type - - [text/html; charset=UTF-8] - - request: - body: null - headers: - - - User-Agent - - ['Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2) Gecko/20100115 - Firefox/3.6'] - method: GET - url: shttp://google.com - response: - body: '' - code: 301 - headers: - - - Content-Length - - ['219'] - - - X-XSS-Protection - - [1; mode=block] - - - Expires - - ['Sun, 10 Mar 2013 21:42:40 GMT'] - - - Server - - [gws] - - - Connection - - [close] - - - Location - - ['http://www.google.com/'] - - - Cache-Control - - ['public, max-age=2592000'] - - - Date - - ['Fri, 08 Feb 2013 21:42:40 GMT'] - - - X-Frame-Options - - [SAMEORIGIN] - - - Content-Type - - [text/html; charset=UTF-8] - socksproxy: null - +``` +{ + "bucket_date": "2015-11-22", + "data_format_version": "0.2.0", + "id": "07873c37-9441-47e3-93b8-94db10444c64", + "input": "http://googleusercontent.com/", + "options": [ + "-f", + "37e60e13536f6afe47a830bfb6b371b5cf65da66d7ad65137344679b24fdccd1" + ], + "probe_asn": "AS0", + "probe_cc": "CH", + "probe_ip": "127.0.0.1", + "report_filename": "2015-11-22/20151122T103202Z-CH-AS0-http_requests-XsQk40qrhgvJEdbXAUFzYjbbGCBuEsc1UV5RAAFXo4hysiUo3qyTfo4NTr7MjiwN-0.1.0-probe.json", + "report_id": "XsQk40qrhgvJEdbXAUFzYjbbGCBuEsc1UV5RAAFXo4hysiUo3qyTfo4NTr7MjiwN", + "software_name": "ooniprobe", + "software_version": "1.3.1", + "test_helpers": {}, + "backend_version": "1.1.4", + "input_hashes": [ + "37e60e13536f6afe47a830bfb6b371b5cf65da66d7ad65137344679b24fdccd1" + ], + "probe_city": null, + "test_name": "http_requests", + "test_runtime": 0.1842639446, + "test_start_time": "2015-11-22 10:32:02", + "test_version": "0.2.4" + "test_keys": { + "agent": "agent", + "body_length_match": null, + "body_proportion": null, + "control_failure": "socks_host_unreachable", + "experiment_failure": "dns_lookup_error", + "factor": 0.8, + "headers_diff": null, + "headers_match": null, + "requests": [ + { + "failure": "dns_lookup_error", + "request": { + "body": null, + "headers": { + "User-Agent": "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6" + }, + "method": "GET", + "tor": { + "exit_ip": false, + "exit_name": false, + "is_tor": false + }, + "url": "http://googleusercontent.com/" + }, + "response": { + "body": null, + "headers": {} + }, + "response_length": null + }, + { + "failure": "socks_host_unreachable", + "request": { + "body": null, + "headers": { + "User-Agent": "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7" + }, + "method": "GET", + "tor": { + "exit_ip": null, + "exit_name": null, + "is_tor": true + }, + "url": "http://googleusercontent.com/" + }, + "response": { + "body": null, + "headers": {} + }, + "response_length": null + }, + { + "failure": "dns_lookup_error", + "request": { + "body": null, + "headers": { + "User-Agent": "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6" + }, + "method": "GET", + "tor": { + "exit_ip": null, + "exit_name": null, + "is_tor": false + }, + "url": "http://googleusercontent.com/" + }, + "response": { + "body": null, + "headers": {} + }, + "response_length": null + }, + { + "failure": "dns_lookup_error", + "request": { + "body": null, + "headers": { + "User-Agent": "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6" + }, + "method": "GET", + "tor": { + "exit_ip": null, + "exit_name": null, + "is_tor": false + }, + "url": "http://googleusercontent.com/" + }, + "response": { + "body": null, + "headers": {} + }, + "response_length": null + }, + { + "failure": "socks_host_unreachable", + "request": { + "body": null, + "headers": { + "User-Agent": "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6" + }, + "method": "GET", + "tor": { + "exit_ip": null, + "exit_name": null, + "is_tor": true + }, + "url": "http://googleusercontent.com/" + }, + "response": { + "body": null, + "headers": {} + }, + "response_length": null + }, + { + "failure": "socks_host_unreachable", + "request": { + "body": null, + "headers": { + "User-Agent": "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6" + }, + "method": "GET", + "tor": { + "exit_ip": null, + "exit_name": null, + "is_tor": true + }, + "url": "http://googleusercontent.com/" + }, + "response": { + "body": null, + "headers": {} + }, + "response_length": null + } + ], + "socksproxy": null, + "start_time": 1448184722.0 + } +} +``` diff --git a/test-specs/ts-004-http-host.md b/test-specs/ts-004-http-host.md index 1bf7eec..40e4fce 100644 --- a/test-specs/ts-004-http-host.md +++ b/test-specs/ts-004-http-host.md @@ -1,6 +1,6 @@ # Specification version number -2013-02-26-000 +0.2.0 # Specification name @@ -150,104 +150,82 @@ understand which censorship device the one being analyzed may be. ## Example output sample ``` -########################################### -# OONI Probe Report for http_host (0.2.4) -# Fri Jan 10 14:27:41 2014 -########################################### ---- -input_hashes: [82c5cebe7a7cced3aad75e304b6e84b8ec97f808db835b7d641f7612216624f9] -options: [-f, example_inputs/alexa-head.txt] -probe_asn: AS3269 -probe_cc: IT -probe_city: Formia -probe_ip: 127.0.0.1 -software_name: ooniprobe -software_version: 1.0.0-rc5 -start_time: 1389360461.066207 -test_name: http_host -test_version: 0.2.4 -... ---- -agent: agent -filtering_add_tab_to_host: false -filtering_of_subdomain: false -filtering_prepend_newline_to_method: false -filtering_via_fuzzy_matching: false -input: google.com -requests: -- request: - body: null - headers: - - - Host - - [MQEEayVEc3google.comVjAZPi29bT] - method: GET - tor: false - url: http://93.95.227.200 - response: - body: '{"headers_dict": {"Connection": ["close"], "Host": ["MQEEayVEc3google.comVjAZPi29bT"]}, - "request_line": "GET / HTTP/1.1", "request_headers": [["Connection", "close"], - ["Host", "MQEEayVEc3google.comVjAZPi29bT"]]}' - code: 200 - headers: [] -- request: - body: null - headers: - - - Host - - ["google.com\t"] - method: GET - tor: false - url: http://93.95.227.200 - response: - body: '{"headers_dict": {"Connection": ["close"], "Host": ["google.com"]}, "request_line": - "GET / HTTP/1.1", "request_headers": [["Connection", "close"], ["Host", "google.com"]]}' - code: 200 - headers: [] -- request: - body: null - headers: - - - Host - - [google.com] - method: ' - - GET' - tor: false - url: http://93.95.227.200 - response: - body: '{"headers_dict": {"Connection": ["close"], "Host": ["google.com"]}, "request_line": - "\nGET / HTTP/1.1", "request_headers": [["Connection", "close"], ["Host", "google.com"]]}' - code: 200 - headers: [] -- request: - body: null - headers: - - - Host - - [google.com] - method: GET - tor: false - url: http://93.95.227.200 - response: - body: '{"headers_dict": {"Connection": ["close"], "Host": ["google.com"]}, "request_line": - "GET / HTTP/1.1", "request_headers": [["Connection", "close"], ["Host", "google.com"]]}' - code: 200 - headers: [] -- request: - body: null - headers: - - - Host - - [36YQ5NpXV6.google.com] - method: GET - tor: false - url: http://93.95.227.200 - response: - body: '{"headers_dict": {"Connection": ["close"], "Host": ["36YQ5NpXV6.google.com"]}, - "request_line": "GET / HTTP/1.1", "request_headers": [["Connection", "close"], - ["Host", "36YQ5NpXV6.google.com"]]}' - code: 200 - headers: [] -send_host_header: false -socksproxy: null -transparent_http_proxy: false -... +{ + "bucket_date": "2015-11-25", + "data_format_version": "0.2.0", + "id": "a59899ab-cd33-49db-8ca4-7bf5dd2d317d", + "input": null, + "options": [], + "probe_asn": "AS3269", + "probe_cc": "IT", + "probe_ip": "127.0.0.1", + "report_filename": "2015-11-25/20151125T214003Z-IT-AS3269-http_host-FKByhJTXzseUDZOSvQkPiZur0ji6csV5UCiyarEoCCUCiKicGTgXq06fcJVA6XfA-0.1.0-probe.json", + "report_id": "FKByhJTXzseUDZOSvQkPiZur0ji6csV5UCiyarEoCCUCiKicGTgXq06fcJVA6XfA", + "software_name": "ooniprobe", + "software_version": "1.3.2", + "test_helpers": { + "backend": "http://216.156.197.144:80" + }, + "input_hashes": [], + "probe_city": null, + "backend_version": "1.1.4", + "test_keys": { + "agent": "agent", + "filtering_prepend_newline_to_method": false, + "requests": [ + { + "request": { + "body": null, + "headers": { + "Host": null + }, + "method": "GET", + "tor": { + "exit_ip": false, + "exit_name": false, + "is_tor": false + }, + "url": "http://216.156.197.144:80" + }, + "response": { + "body": "{\"headers_dict\": {\"Connection\": [\"close\"], \"Host\": [\"None\"]}, \"request_line\": \"GET / HTTP/1.1\", \"request_headers\": [[\"Connection\", \"close\"], [\"Host\", \"None\"]]}", + "code": 200, + "headers": {} + }, + "response_length": null + }, + { + "request": { + "body": null, + "headers": { + "Host": null + }, + "method": "\nGET", + "tor": { + "exit_ip": false, + "exit_name": false, + "is_tor": false + }, + "url": "http://216.156.197.144:80" + }, + "response": { + "body": "{\"headers_dict\": {\"Connection\": [\"close\"], \"Host\": [\"None\"]}, \"request_line\": \"\\nGET / HTTP/1.1\", \"request_headers\": [[\"Connection\", \"close\"], [\"Host\", \"None\"]]}", + "code": 200, + "headers": {} + }, + "response_length": null + } + ], + "send_host_header": false, + "socksproxy": null, + "start_time": 1448484003.0, + "transparent_http_proxy": false + }, + "test_name": "http_host", + "test_runtime": 0.3475949764, + "test_start_time": "2015-11-25 21:40:03", + "test_version": "0.2.4" +} ``` # Privacy considerations diff --git a/test-specs/ts-005-dns-spoof.md b/test-specs/ts-005-dns-spoof.md index 3c542d0..417dc8b 100644 --- a/test-specs/ts-005-dns-spoof.md +++ b/test-specs/ts-005-dns-spoof.md @@ -1,11 +1,13 @@ # Specification version number -2013-9-10-000 +0.2.0 # Specification name DNS Spoof Test +Note: this test is deprecated. + # Test preconditions * An Internet connection. @@ -54,7 +56,7 @@ occurring, it shall be True. Otherwise, it is False. ## Parent data format -df-001-scapyt-000 +df-003-scapyt ## Required output data diff --git a/test-specs/ts-006-header-field-manipulation.md b/test-specs/ts-006-header-field-manipulation.md index 8a121ff..9abf7f1 100644 --- a/test-specs/ts-006-header-field-manipulation.md +++ b/test-specs/ts-006-header-field-manipulation.md @@ -1,6 +1,6 @@ # Specification version number -2013-10-07-000 +0.2.0 # Specification name @@ -41,6 +41,7 @@ then we have detected tampering. If the optional headers yaml file is not supplied, the headers will be constructed as so: +``` { "User-Agent": [random.choice(net.userAgents)], "Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"], @@ -49,22 +50,23 @@ headers will be constructed as so: "Accept-Charset": ["ISO-8859-1,utf-8;q=0.7,*;q=0.3"], "Host": [randomStr(15)+'.com'] } +``` The Host header is a random string of 15 characters + .com The User-Agent header is randomly selected from one of the following: -[ - "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7", - "Mozilla/5.0 (iPhone; U; CPU iPhone OS 3 1 2 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Mobile/7D11", - "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6", - "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6", - "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6", - "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6", - "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6", - "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6", - "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7", - "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7 (.NET CLR 3.5.30729)") -] +``` +Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7 +Mozilla/5.0 (iPhone; U; CPU iPhone OS 3 1 2 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Mobile/7D11 +Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 +Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 +Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 +Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6 +Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6 +Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6 +Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7 +Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7 (.NET CLR 3.5.30729)) +``` A request is then made towards the backend. @@ -95,7 +97,7 @@ The header field value does not match with the one we transmitted. ## Parent data format -df-001-httpt-000 +df-001-httpt ## Required output data @@ -107,80 +109,102 @@ headers not present in both the sent and received headers. ## Semantics +``` { - 'total': True|False, - 'request_line_capitalization': True|False, - 'header_name_capitalization': True|False, - 'header_field_value': True|False, - 'header_field_number': True|False - 'header_name_diff': [] + "total": + "true|false if an invalid response was received from the " + "backend control server.", + + "request_line_capitalization": + "true|false if the capitalisation of the request method was normalised.", + + "header_name_capitalization": + "true|false if the header name capitalisation was normalised.", + + "header_field_value": + "true|false if the value of the headers received by the backend " + "does not match the value of the headers sent by the probe.", + + "header_field_number": + "true|false if the number of headers received different than the " + "number of headers sent." + + "header_name_diff": [ + "The keys of the headers that differ in the request and the response." + ] } +``` ## Example output sample ``` - ########################################### - # OONI Probe Report for http_header_field_manipulation (0.1.3) - # Wed Oct 9 10:57:42 2013 - ########################################### - --- - input_hashes: [] - options: [-b, 'http://12.34.56.78'] - probe_asn: AS1234 - probe_cc: US - probe_ip: 127.0.0.1 - software_name: ooniprobe - software_version: 1.0.0-rc3 - start_time: 1381316262.744312 - test_name: http_header_field_manipulation - test_version: 0.1.3 - ... - --- - agent: agent - input: null - requests: - - request: - body: null - headers: - - - accEpt-LANGuAGE - - ['en-US,en;q=0.8'] - - - aCcepT-ENCoDIng - - ['gzip,deflate,sdch'] - - - AccEpT - - ['text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8'] - - - uSEr-AGenT - - ['Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 - Firefox/3.6'] - - - aCCEPT-cHarseT - - ['ISO-8859-1,utf-8;q=0.7,*;q=0.3'] - - - hoSt - - [XJs7REREvvxO3wL.com] - method: geT - url: http://12.34.56.78 - response: - body: '{"headers_dict": {"accEpt-LANGuAGE": ["en-US,en;q=0.8"], "aCcepT-ENCoDIng": - ["gzip,deflate,sdch"], "hoSt": ["XJs7REREvvxO3wL.com"], "AccEpT": ["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"], - "uSEr-AGenT": ["Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 - Firefox/3.6"], "aCCEPT-cHarseT": ["ISO-8859-1,utf-8;q=0.7,*;q=0.3"], "Connection": - ["close"]}, "request_line": "geT / HTTP/1.1", "request_headers": [["Connection", - "close"], ["accEpt-LANGuAGE", "en-US,en;q=0.8"], ["aCcepT-ENCoDIng", "gzip,deflate,sdch"], - ["AccEpT", "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"], - ["uSEr-AGenT", "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 - Firefox/3.6"], ["aCCEPT-cHarseT", "ISO-8859-1,utf-8;q=0.7,*;q=0.3"], ["hoSt", - "XJs7REREvvxO3wL.com"]]}' - code: 200 - headers: [] - socksproxy: null - tampering: - header_field_name: false - header_field_number: false - header_field_value: false - header_name_capitalization: false - header_name_diff: [] - request_line_capitalization: false - total: false - ... +{ + "bucket_date": "2015-11-29", + "data_format_version": "0.2.0", + "id": "3cd95f57-9930-48b9-90b0-67ed20f3adfe", + "input": null, + "options": [], + "probe_asn": "AS12876", + "probe_cc": "FR", + "probe_ip": "127.0.0.1", + "report_filename": "2015-11-29/20151129T230014Z-FR-AS12876-http_header_field_manipulation-no_report_id-0.1.0-probe.json", + "report_id": null, + "software_name": "ooniprobe", + "software_version": "1.3.1", + "backend_version": "1.1.4", + "input_hashes": [], + "probe_city": null, + "test_helpers": { + "backend": "http://173.205.4.16:80" + }, + "test_keys": { + "agent": "agent", + "requests": [ + { + "request": { + "body": null, + "headers": { + "ACCEpT-cHarSET": "ISO-8859-1,utf-8;q=0.7,*;q=0.3", + "AccEPT-LAngUAge": "en-US,en;q=0.8", + "HOSt": "kFR3mwImawc0ivv.com", + "aCCePT": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8", + "acCEpt-encOdING": "gzip,deflate,sdch", + "useR-agEnT": "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" + }, + "method": "get", + "tor": { + "exit_ip": false, + "exit_name": false, + "is_tor": false + }, + "url": "http://173.205.4.16:80" + }, + "response": { + "body": "{\"headers_dict\": {\"AccEPT-LAngUAge\": [\"en-US,en;q=0.8\"], \"acCEpt-encOdING\": [\"gzip,deflate,sdch\"], \"HOSt\": [\"kFR3mwImawc0ivv.com\"], \"aCCePT\": [\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\"], \"useR-agEnT\": [\"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6\"], \"ACCEpT-cHarSET\": [\"ISO-8859-1,utf-8;q=0.7,*;q=0.3\"], \"Connection\": [\"close\"]}, \"request_line\": \"get / HTTP/1.1\", \"request_headers\": [[\"Connection\", \"close\"], [\"AccEPT-LAngUAge\", \"en-US,en;q=0.8\"], [\"acCEpt-encOdING\", \"gzip,deflate,sdch\"], [\"aCCePT\", \"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\"], [\"useR-agEnT\", \"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6\"], [\"ACCEpT-cHarSET\", \"ISO-8859-1,utf-8;q=0.7,*;q=0.3\"], [\"HOSt\", \"kFR3mwImawc0ivv.com\"]]}", + "code": 200, + "headers": {} + }, + "response_length": null + } + ], + "socksproxy": null, + "start_time": 1448834414.0, + "tampering": { + "header_field_name": false, + "header_field_number": false, + "header_field_value": false, + "header_name_capitalization": false, + "header_name_diff": [], + "request_line_capitalization": false, + "total": false + } + }, + "test_name": "http_header_field_manipulation", + "test_runtime": 0.4789488316, + "test_start_time": "2015-11-29 23:00:14", + "test_version": "0.1.5" +} ``` # Privacy considerations diff --git a/test-specs/ts-007-http-invalid-request-line.md b/test-specs/ts-007-http-invalid-request-line.md index b2cba2a..c61b635 100644 --- a/test-specs/ts-007-http-invalid-request-line.md +++ b/test-specs/ts-007-http-invalid-request-line.md @@ -1,6 +1,6 @@ # Specification version number -2013-10-08-000 +0.2.0 # Specification name @@ -34,17 +34,19 @@ proxies like squid, into revealing themselves. This is for example what squid will return when performing such request: - HTTP/1.0 400 Bad Request - Server: squid/2.6.STABLE21 - Date: Sat, 23 Jul 2011 02:22:44 GMT - Content-Type: text/html - Content-Length: 1178 - Expires: Sat, 23 Jul 2011 02:22:44 GMT - X-Squid-Error: ERR_INVALID_REQ 0 - X-Cache: MISS from cache_server - X-Cache-Lookup: NONE from cache_server:3128 - Via: 1.0 cache_server:3128 (squid/2.6.STABLE21) - Proxy-Connection: close +``` +HTTP/1.0 400 Bad Request +Server: squid/2.6.STABLE21 +Date: Sat, 23 Jul 2011 02:22:44 GMT +Content-Type: text/html +Content-Length: 1178 +Expires: Sat, 23 Jul 2011 02:22:44 GMT +X-Squid-Error: ERR_INVALID_REQ 0 +X-Cache: MISS from cache_server +X-Cache-Lookup: NONE from cache_server:3128 +Via: 1.0 cache_server:3128 (squid/2.6.STABLE21) +Proxy-Connection: close +``` The various types of invalid request that we do are: @@ -53,26 +55,33 @@ The various types of invalid request that we do are: Performs a request with a HTTP method that is a random 4 character string. e.g. - request_line = randomSTR(4) + " / HTTP/1.1\n\r" +``` +request_line = randomSTR(4) + " / HTTP/1.1\n\r" +``` ## test_random_invalid_field_count Performs a request with an invalid number of random fields, e.g. - request_line = ' '.join(randomStr(5) for x in range(4)) + '\n\r' - +``` +request_line = ' '.join(randomStr(5) for x in range(4)) + '\n\r' +``` ## test_random_big_request_method Send a 1024 byte request method, e.g. - request-line = randomStr(1024) + ' / HTTP/1.1\n\r' +``` +request-line = randomStr(1024) + ' / HTTP/1.1\n\r' +``` ## test_random_invalid_version_number Performs a request with an invalid version, e.g. - request_line = 'GET / HTTP/' + randomStr(3) +``` +request_line = 'GET / HTTP/' + randomStr(3) +``` Each of these tests may trigger some bugs in the HTTP parsers of transparent HTTP proxies. @@ -84,7 +93,7 @@ occurring. ## Parent data format -df-xxx-tcpt +df-004-tcpt ## Required output data @@ -105,49 +114,47 @@ ooni-backend. ## Example output sample - ########################################### - # OONI Probe Report for http_invalid_request_line (0.2) - # Wed Oct 9 10:49:12 2013 - ########################################### - --- - input_hashes: [] - options: [-b, 12.34.56.78 ] - probe_asn: AS1234 - probe_cc: US - probe_ip: 127.0.0.1 - software_name: ooniprobe - software_version: 1.0.0-rc3 - start_time: 1381315752.679267 - test_name: http_invalid_request_line - test_version: '0.2' - ... - --- - input: null - received: ["706J / HTTP/1.1\n\r"] - sent: ["706J / HTTP/1.1\n\r"] - tampering: false - ... - --- - input: null - received: ["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 OPUdDd67Jry1VtNxRWQ4Qu6C2n2xJ9cDL2ElJX5EI\ - \ / HTTP/1.1\n\r"] - sent: ["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 Dd67Jry1VtNxRWQ4Qu6C2n2xJ9cDL2ElJX5EI\ - \ / HTTP/1.1\n\r"] - tampering: false - ... - --- - input: null - received: ["7Mb5L DLVz6 4r2HB HIEfp\n\r"] - sent: ["7Mb5L DLVz6 4r2HB HIEfp\n\r"] - tampering: false - ... - --- - input: null - received: ["GET / HTTP/QGc\n\r"] - sent: ["GET / HTTP/QGc\n\r"] - tampering: false - ... - +``` +{ + "bucket_date": "2015-12-01", + "data_format_version": "0.2.0", + "id": "f116e9a4-a648-48c8-b3b7-cca7bd84d069", + "input": null, + "options": [], + "probe_asn": "AS786", + "probe_cc": "GB", + "probe_ip": "127.0.0.1", + "report_filename": "2015-12-01/20151201T072512Z-GB-AS786-http_invalid_request_line-ZXjsOzoy3gl0f71b35et9kLZsTkc3W1yLYMHSLVLN6buJvnXveywSBM24C2YPtfv-0.1.0-probe.json", + "report_id": "ZXjsOzoy3gl0f71b35et9kLZsTkc3W1yLYMHSLVLN6buJvnXveywSBM24C2YPtfv", + "software_name": "ooniprobe", + "software_version": "1.3.1", + "test_helpers": { + "backend": "213.138.109.232" + }, + "backend_version": "1.1.4", + "input_hashes": [], + "probe_city": null, + "test_keys": { + "received": [ + "53LC / HTTP/1.1\n\r", + "", + "dNnLP MHIdC s5vst k7Ir2\n\r", + "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 9Uvx665eJ9tWRAT6rD4A1QoXVg34m20ywW1n3voP / HTTP/1.1\n\r" + ], + "sent": [ + "53LC / HTTP/1.1\n\r", + "GET / HTTP/g8z\n\r", + "dNnLP MHIdC s5vst k7Ir2\n\r", + "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 9Uvx665eJ9tWRAT6rD4A1QoXVg34m20ywW1n3voP / HTTP/1.1\n\r" + ], + "tampering": true + }, + "test_name": "http_invalid_request_line", + "test_runtime": 5.7580039501, + "test_start_time": "2015-12-01 07:25:12", + "test_version": "0.2" +} +``` # Privacy considerations A middlebox could reveal the ooni-probe IP address by the diff --git a/test-specs/ts-008-tcp-connect.md b/test-specs/ts-008-tcp-connect.md index e5bd000..5063a32 100644 --- a/test-specs/ts-008-tcp-connect.md +++ b/test-specs/ts-008-tcp-connect.md @@ -1,6 +1,6 @@ # Specification version number -2013-10-08-000 +0.2.0 # Specification name @@ -30,9 +30,9 @@ A list of URLs to be tested for censorship. The input document may contain an http or https URL, an IP:PORT, or a FQDN:PORT per line. e.g. ``` - http://www.google.com - google.com:80 - 8.8.8.8:53 +http://www.google.com +google.com:80 +8.8.8.8:53 ``` are all valid entries @@ -61,38 +61,36 @@ The result of the connection attempt, 'success' or failure type. Ability to determine that a specific host:port is blocked. ## Example output sample + +``` +{ + "bucket_date": "2015-12-29", + "data_format_version": "0.2.0", + "id": "6305de45-ce5d-43b5-ba11-fd9019e5e90c", + "input": "github.com:443\n", + "input_hashes": [ + "586ded3d64bcb8672fedb475c8ea799331779b446e529b204a2088bedc91e3f0" + ], + "options": [ + "-f", + "hosts.txt" + ], + "probe_asn": "AS13703", + "probe_cc": "US", + "probe_ip": "127.0.0.1", + "report_filename": "2015-12-29/20151225T201931Z-US-AS13703-tcp_connect-IHsje0cnGs2uOpRgEmfnkpuZAa8ysrZgdf8YyImTUhtBTSZSoTeXle79RuchYuzi-0.1.0-probe.json", + "report_id": "IHsje0cnGs2uOpRgEmfnkpuZAa8ysrZgdf8YyImTUhtBTSZSoTeXle79RuchYuzi", + "software_name": "ooniprobe", + "software_version": "1.3.1", + "backend_version": "1.1.4", + "probe_city": null, + "test_helpers": {}, + "test_keys": { + "connection": "success", + }, + "test_name": "tcp_connect", + "test_runtime": 0.0218939781, + "test_start_time": "2015-12-25 20:19:31", + "test_version": "0.1" +} ``` - ########################################### - # OONI Probe Report for tcp_connect (0.1) - # Wed Sep 18 20:41:49 2013 - ########################################### - --- - input_hashes: [e0611ecd28bead38a7afeb4dda8ae3449d0fc2e1ba53fa7355f2799dce9af290] - options: [-f, /home/ooni/.ooni/inputs/alexa-top-1m.txt] - probe_asn: AS1234 - probe_cc: US - probe_ip: 127.0.0.1 - software_name: ooniprobe - software_version: 1.0.0-rc3 - start_time: 1379536909.514028 - test_name: tcp_connect - test_version: '0.1' - ... - --- - {connection: success, input: 'google.com:80'} - ... - --- - {connection: success, input: 'youtube.com:80'} - ... - --- - {connection: success, input: 'google.com.hk:80'} - ... - --- - {connection: success, input: 'google.de:80'} - ... - --- - {connection: success, input: 'google.co.in:80'} - ... - --- - {connection: success, input: 'blogspot.com:80'} - ``` diff --git a/test-specs/ts-009-multi-protocol-traceroute.md b/test-specs/ts-009-multi-protocol-traceroute.md index 0a08457..211e736 100644 --- a/test-specs/ts-009-multi-protocol-traceroute.md +++ b/test-specs/ts-009-multi-protocol-traceroute.md @@ -1,6 +1,6 @@ # Specification version number -2013-10-07-000 +0.2.0 # Specification name @@ -69,2314 +69,549 @@ The report object will contain keys of the format "hops_" + port, e.g. report['hops_22']. The corresponding value is an ordered list of the parsed responses, encoded like so: -{'ttl': The TTL of the packet sent, - 'address', The address of the remote host at which the TTL expired, - 'rtt', the round-trip-time, measured as the difference between the received response and sent packet time. - 'sport', the source port of the sent packet +``` +{ + "ttl": "The TTL of the sent packet", + + "address": "The address of the remote host at which the TTL expired", + + "rtt": "The round-trip-time, measured as the difference between " + "the received response and sent packet time." + + "sport": "The source port of the sent packet" } +``` ## Possible conclusions -By examining the differences in the responses between protocols and destination ports, it is possible to ascertain that routing decisions are made on a protocol layer above IP, and determine what path was taken for different protocols. +By examining the differences in the responses between protocols and destination +ports, it is possible to ascertain that routing decisions are made on a +protocol layer above IP, and determine what path was taken for different +protocols. ## Example output sample ``` -########################################### -# OONI Probe Report for multi_protocol_traceroute_test (0.2) -# Thu Jan 2 16:54:10 2014 -########################################### ---- -input_hashes: [] -options: [-b, 8.8.8.8] -probe_asn: AS0 -probe_cc: null -probe_city: null -probe_ip: 127.0.0.1 -software_name: ooniprobe -software_version: 1.0.0-rc5 -start_time: 1388678050.83065 -test_name: multi_protocol_traceroute_test -test_version: '0.2' -... ---- -answer_flags: [ipsrc] -answered_packets: -- - raw_packet: !!binary | - RQAAOIKHAAD/ASMzCgABAX8AAAELAHHxAAAAAEUAAChcPgAAAQZCeQoAAQoICAgIgw4AAAAAAAAA - AAAAUAIgAPG6AAA= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOEGbAAD9AX7ECgHnmn8AAAELAHHxAAAAAEUAACgm8wAAAQZ3xAoAAQoICAgIgw4AAAAAAAAA - AAAAUAIgAPG6AAA= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOF4UAAD8AagiCvuhyX8AAAELAHHxAAAAAEUAACgexAAAAQZ/8woAAQoICAgIgw4AAAAAAAAA - AAAAUAIgAPG6AAA= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOAMQAAD7AQnWCvucGn8AAAELAHHxAAAAAEUAACg0uwAAAQZp/AoAAQoICAgIgw4AAAAAAAAA - AAAAUAIgAPG6AAA= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAODxjAAD8Ac6bCvudAX8AAAELAHHxAAAAAEUAACgBwgAAAQac9QoAAQoICAgIgw4AAAAAAAAA - AAAAUAIgAPG6AAA= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOIKJAAD/ASMxCgABAX8AAAELAOD/AAAAAEUAAChUkAAAAQZKJwoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOBVxAAB+ASIBCkjwAX8AAAELAOD/AAAAAEUAACgibwAAAQZ8SAoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOHJKAAD9AU4VCgHnmn8AAAELAOD/AAAAAEUAACglXAAAAQZ5WwoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOGivAAD8AZ2HCvuhyX8AAAELAOD/AAAAAEUAACh9egAAAQYhPQoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOGGbAAD7AatKCvucGn8AAAELAOD/AAAAAEUAACgQJAAAAQaOkwoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOBn4AAD8AfEGCvudAX8AAAELAOD/AAAAAEUAACgovgAAAQZ1+QoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOGuHAAD7AcAnCvd9VX8AAAELAOD/AAAAAEUAACgoPQAAAQZ2egoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOEMPAAD6AcXuCvuhwn8AAAELAOD/AAAAAEUAACgrYwAAAQZzVAoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOBCDAAD5AR/MCmd8BX8AAAELAOD/AAAAAEUAAChfGQAAAQY/ngoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOF1gAAD4AdAcCgGAPX8AAAELAOD/AAAAAEUAACgU/gAAAQaJuQoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOAFrAAD3AaEFCv4LTX8AAAELAOD/AAAAAEUAACguhwAAAQZwMAoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAODuqAAD3AVtFWWHIan8AAAELAOD/AAAAAEUAACgqZAAAAQZ0UwoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAYFCFAAD2AUauWWHI/n8AAAELAFI7AAAAAEUAACh3dQAAAQYnQgoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAB7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror / Padding -- - raw_packet: !!binary | - RQAAOAy/AAD2AYsdWWDIfn8AAAELAOD/AAAAAEUAACgNDwAAAQaRqAoAAQoICAgIE+kAFwAAAAAA - AAAAUAIgAGDJAAA= - summary: IP / ICMP 89.96.200.126 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOIKLAAD/ASMvCgABAX8AAAELADZXAAAAAEUAACh24gAAAQYn1QoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOE7uAAD9AXFxCgHnmn8AAAELADZXAAAAAEUAACgSBQAAAQaMsgoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOELGAAB+AfSrCkjwAX8AAAELADZXAAAAAEUAACgzAQAAAQZrtgoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOE9IAAD8AbbuCvuhyX8AAAELADZXAAAAAEUAACgfbwAAAQZ/SAoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAODJHAAD7AdqeCvucGn8AAAELADZXAAAAAEUAAChw0gAAAQYt5QoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOHr8AAD8AZACCvudAX8AAAELADZXAAAAAEUAACgxTwAAAQZtaAoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOCZ6AAD7AQU1Cvd9VX8AAAELADZXAAAAAEUAACh6uwAAAQYj/AoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOBpqAAD6Ae6TCvuhwn8AAAELADZXAAAAAEUAACg6sgAAAQZkBQoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAODEjAAD5Af8rCmd8BX8AAAELADZXAAAAAEUAACg8gwAAAQZiNAoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOFftAAD4AdWPCgGAPX8AAAELADZXAAAAAEUAACgq7wAAAQZzyAoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOED1AAD3AWF7Cv4LTX8AAAELADZXAAAAAEUAACgo9QAAAQZ1wgoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAODAMAAD3AWbjWWHIan8AAAELADZXAAAAAEUAAChHGgAAAQZXnQoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAYEdUAAD2AU/fWWHI/n8AAAELAMoiAAAAAEUAACgWnQAAAQaIGgoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgAPwxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror / Padding -- - raw_packet: !!binary | - RQAAOBb+AAD2AYDeWWDIfn8AAAELADZXAAAAAEUAACgR7AAAAQaMywoAAQoICAgIvlgAUAAAAAAA - AAAAUAIgALYgAAA= - summary: IP / ICMP 89.96.200.126 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOIKNAAD/ASMtCgABAX8AAAELAPmyAAAAAEUAACgRygAAAQaM7QoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgAHl8AAA= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOHk7AAD9AUckCgHnmn8AAAELAPmyAAAAAEUAACgZHQAAAQaFmgoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgAHl8AAA= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOHkEAAD8AY0yCvuhyX8AAAELAPmyAAAAAEUAAChagAAAAQZENwoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgAHl8AAA= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOEb4AAD7AcXtCvucGn8AAAELAPmyAAAAAEUAAChHjAAAAQZXKwoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgAHl8AAA= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOEeRAAD8AcNtCvudAX8AAAELAPmyAAAAAEUAAChcWwAAAQZCXAoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgAHl8AAA= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOFxtAAD7Ac9BCvd9VX8AAAELAPmyAAAAAEUAAChMHAAAAQZSmwoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgAHl8AAA= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAODriAAD6Ac4bCvuhwn8AAAELAPmyAAAAAEUAACgmkQAAAQZ4JgoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgAHl8AAA= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOF6XAAD5AdG3Cmd8BX8AAAELAPmyAAAAAEUAACgk9gAAAQZ5wQoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgAHl8AAA= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOCwQAAD4AQFtCgGAPX8AAAELAPmyAAAAAEUAACh8tQAAAQYiAgoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgAHl8AAA= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOB0EAAD3AYVsCv4LTX8AAAELAPmyAAAAAEUAACh6oAAAAQYkFwoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgAHl8AAA= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOFVxAAD3AUF+WWHIan8AAAELAPmyAAAAAEUAACggTwAAAQZ+aAoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgAHl8AAA= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAYDJ8AAD2AWS3WWHI/n8AAAELAGzNAAAAAEUAAChJIAAAAQZVlwoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgABzjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror / Padding -- - raw_packet: !!binary | - RQAAODLbAAD2AWT5WWDIhn8AAAELAPmyAAAAAEUAACgucgAAAQZwRQoAAQoICAgI+ZEBuwAAAAAA - AAAAUAIgAHl8AAA= - summary: IP / ICMP 89.96.200.134 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOIKPAAD/ASMrCgABAX8AAAELAGNSAAAAAEUAACg0TAAAAQZqawoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOEk/AAB+Ae4yCkjwAX8AAAELAGNSAAAAAEUAACgF/gAAAQaYuQoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOCihAAD9AZe+CgHnmn8AAAELAGNSAAAAAEUAACh8wgAAAQYh9QoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOH04AAD8AYj+CvuhyX8AAAELAGNSAAAAAEUAACg/7AAAAQZeywoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOGM+AAD7AamnCvucGn8AAAELAGNSAAAAAEUAAChmCwAAAQY4rAoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOApTAAD8AQCsCvudAX8AAAELAGNSAAAAAEUAAChHmQAAAQZXHgoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOBtSAAD7ARBdCvd9VX8AAAELAGNSAAAAAEUAACg1mAAAAQZpHwoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOHiXAAD6AZBmCvuhwn8AAAELAGNSAAAAAEUAAChv9gAAAQYuwQoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOGffAAD5AchvCmd8BX8AAAELAGNSAAAAAEUAAChZJQAAAQZFkgoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOCw9AAD4AQFACgGAPX8AAAELAGNSAAAAAEUAACh3CwAAAQYnrAoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOG8GAAD3ATNqCv4LTX8AAAELAGNSAAAAAEUAACgZRwAAAQaFcAoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOEBhAAD3AVaOWWHIan8AAAELAGNSAAAAAEUAACg5lAAAAQZlIwoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAYDcVAAD2AWAeWWHI/n8AAAELAPvAAAAAAEUAACgjogAAAQZ7FQoAAQoICAgIka3//wAAAAAA - AAAAUAIgAPeOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror / Padding -- - raw_packet: !!binary | - RQAAOEneAAD2AU32WWDIhn8AAAELAGNSAAAAAEUAACgprwAAAQZ1CAoAAQoICAgIka3//wAAAAAA - AAAAUAIgAOMbAAA= - summary: IP / ICMP 89.96.200.134 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOIKIAAD/ASMyCgABAX8AAAELAHmgAAAAAEUAACiAgwAAAQYeNAoAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAODfVAAB+Af+cCkjwAX8AAAELAHmgAAAAAEUAAChPqAAAAQZPDwoAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOAmvAAD9AbawCgHnmn8AAAELAHmgAAAAAEUAACgtrAAAAQZxCwoAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOD0PAAD8AcknCvuhyX8AAAELAHmgAAAAAEUAAChHnAAAAQZXGwoAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOArmAAD7AQIACvucGn8AAAELAHmgAAAAAEUAACh0ogAAAQYqFQoAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAODC1AAD8AdpJCvudAX8AAAELAHmgAAAAAEUAAChQfAAAAQZOOwoAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOAfoAAD7ASPHCvd9VX8AAAELAHmgAAAAAEUAAChSwQAAAQZL9goAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOEPGAAD6AcU3Cvuhwn8AAAELAHmgAAAAAEUAACg4kQAAAQZmJgoAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOGK6AAD5Ac2UCmd8BX8AAAELAHmgAAAAAEUAACg8jwAAAQZiKAoAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOC8sAAD4Af5QCgGAPX8AAAELAHmgAAAAAEUAACh6rgAAAQYkCQoAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAODMkAAD3AW9MCv4LTX8AAAELAHmgAAAAAEUAACg9EgAAAQZhpQoAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOHHtAAD3ASUCWWHIan8AAAELAHmgAAAAAEUAAChrqQAAAQYzDgoAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAYCipAAD2AW6KWWHI/n8AAAELAPcOAAAAAEUAACh+yQAAAQYf7goAAQoICAgIe0kAFgAAAAAA - AAAAUAIgABKPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror / Padding -- - raw_packet: !!binary | - RQAAOD/VAAD2AVf/WWDIhn8AAAELAHmgAAAAAEUAACgS3QAAAQaL2goAAQoICAgIe0kAFgAAAAAA - AAAAUAIgAPlpAAA= - summary: IP / ICMP 89.96.200.134 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOIKMAAD/ASMuCgABAX8AAAELAMqbAAAAAEUAAChzvgAAAQYq+QoAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOADVAAB+ATadCkjwAX8AAAELAMqbAAAAAEUAACg27QAAAQZnygoAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOBqVAAD9AaXKCgHnmn8AAAELAMqbAAAAAEUAACgbXgAAAQaDWQoAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOEMTAAD8AcMjCvuhyX8AAAELAMqbAAAAAEUAAChdAwAAAQZBtAoAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOBsqAAD7AfG7CvucGn8AAAELAMqbAAAAAEUAACh8VgAAAQYiYQoAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOH3pAAD8AY0VCvudAX8AAAELAMqbAAAAAEUAACgIXwAAAQaWWAoAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOE5BAAD7Ad1tCvd9VX8AAAELAMqbAAAAAEUAACheCQAAAQZArgoAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOBdKAAD6AfGzCvuhwn8AAAELAMqbAAAAAEUAACgQywAAAQaN7AoAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOGsMAAD5AcVCCmd8BX8AAAELAMqbAAAAAEUAACgcCwAAAQaCrAoAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOBhtAAD4ARUQCgGAPX8AAAELAMqbAAAAAEUAAChCKQAAAQZcjgoAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAODzTAAD3AWWdCv4LTX8AAAELAMqbAAAAAEUAACgQXQAAAQaOWgoAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOBI6AAD3AYS1WWHIan8AAAELAMqbAAAAAEUAACgkEAAAAQZ6pwoAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOC3zAAD2AdEhPmV8QX8AAAELAMqbAAAAAEUAACgWyAAAAQaH7woAAQoICAgIKekAewAAAAAA - AAAAUAIgAEplAAA= - summary: IP / ICMP 62.101.124.65 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAYGwiAAD2ASsRWWHI/n8AAAELAGD1AAAAAEUAACg3JwAAAQZnkAoAAQoICAgIKekAewAAAAAA - AAAAUAIgAPmjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror / Padding -- - raw_packet: !!binary | - RQAAOIKKAAD/ASMwCgABAX8AAAELANu1AAAAAEUAACi67wAAAQbjxwoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAODcjAAB+AQBPCkjwAX8AAAELANu1AAAAAEUAAChmjAAAAQY4KwoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOH8HAAD9AUFYCgHnmn8AAAELANu1AAAAAEUAACh5vwAAAQYk+AoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAODnqAAD8AcxMCvuhyX8AAAELANu1AAAAAEUAACgwaAAAAQZuTwoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAODG7AAD7AdsqCvucGn8AAAELANu1AAAAAEUAACgh4wAAAQZ81AoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOE65AAD8AbxFCvudAX8AAAELANu1AAAAAEUAACg+wwAAAQZf9AoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOFdRAAD7AdRdCvd9VX8AAAELANu1AAAAAEUAAChRbgAAAQZNSQoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOD3hAAD6AcscCvuhwn8AAAELANu1AAAAAEUAAChddAAAAQZBQwoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOF/GAAD5AdCICmd8BX8AAAELANu1AAAAAEUAACgOyQAAAQaP7goAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOE1DAAD4AeA5CgGAPX8AAAELANu1AAAAAEUAACgH0QAAAQaW5goAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOB+5AAD3AYK3Cv4LTX8AAAELANu1AAAAAEUAAChzbQAAAQYrSgoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOG1UAAD3ASmbWWHIan8AAAELANu1AAAAAEUAAChLowAAAQZTFAoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAYBk2AAD2AX39WWHI/n8AAAELAE2eAAAAAEUAACgftQAAAQZ/AgoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAB4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror / Padding -- - raw_packet: !!binary | - RQAAOGuvAAD2ASx9WWDILn8AAAELANu1AAAAAEUAAChiigAAAQY8LQoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 89.96.200.46 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOCEtAAD0AX8mSA7TWX8AAAELANu1AAAAAEUAAChfEgAAAQY/pQoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 72.14.211.89 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOAUmAAD1AfLi0VXxXH8AAAELANu1AAAAAEWAACh3ggAAAQYmtQoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 209.85.241.92 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAqFe+AADwATcwSA7oTn8AAAELAE2eAAAAAEWAACh7bAAAAQYiywoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAB4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAC68AAIAQF7BKkB - summary: IP / ICMP 72.14.232.78 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror / Padding -- - raw_packet: !!binary | - RQAAOEWeAAD0AaZU0VX+cn8AAAELANu1AAAAAEWAAChsnAAAAQYxmwoAAQoICAgIGRUANQAAAAAA - AAAAUAIgAFt/AAA= - summary: IP / ICMP 209.85.254.114 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAALHw7AAArBvh3CAgICH8AAAEANRkVUFkhMQAAAAFgEqeUSrEAAAIEBZY= - summary: IP / TCP 8.8.8.8:domain > 127.0.0.1:nim_wan SA -- - raw_packet: !!binary | - RQAALCVxAAArBk9CCAgICH8AAAEANRkVUFkhMQAAAAFgEqeUSrEAAAIEBZY= - summary: IP / TCP 8.8.8.8:domain > 127.0.0.1:nim_wan SA -- - raw_packet: !!binary | - RQAALGaKAAArBg4pCAgICH8AAAEANRkVUFkhMQAAAAFgEqeUSrEAAAIEBZY= - summary: IP / TCP 8.8.8.8:domain > 127.0.0.1:nim_wan SA -- - raw_packet: !!binary | - RQAALDqzAAArBjoACAgICH8AAAEANRkVUFkhMQAAAAFgEqeUSrEAAAIEBZY= - summary: IP / TCP 8.8.8.8:domain > 127.0.0.1:nim_wan SA -- - raw_packet: !!binary | - RQAALEoqAAArBiqJCAgICH8AAAEANRkVUFkhMQAAAAFgEqeUSrEAAAIEBZY= - summary: IP / TCP 8.8.8.8:domain > 127.0.0.1:nim_wan SA -- - raw_packet: !!binary | - RQAALAhaAAArBmxZCAgICH8AAAEANRkVUFkhMQAAAAFgEqeUSrEAAAIEBZY= - summary: IP / TCP 8.8.8.8:domain > 127.0.0.1:nim_wan SA -- - raw_packet: !!binary | - RQAALCwbAAArBkiYCAgICH8AAAEANRkVUFkhMQAAAAFgEqeUSrEAAAIEBZY= - summary: IP / TCP 8.8.8.8:domain > 127.0.0.1:nim_wan SA -- - raw_packet: !!binary | - RQAALBfiAAArBlzRCAgICH8AAAEANRkVUFkhMQAAAAFgEqeUSrEAAAIEBZY= - summary: IP / TCP 8.8.8.8:domain > 127.0.0.1:nim_wan SA -- - raw_packet: !!binary | - RQAALChYAAArBkxbCAgICH8AAAEANRkVUFkhMQAAAAFgEqeUSrEAAAIEBZY= - summary: IP / TCP 8.8.8.8:domain > 127.0.0.1:nim_wan SA -- - raw_packet: !!binary | - RQAALGkeAAArBguVCAgICH8AAAEANRkVUFkhMQAAAAFgEqeUSrEAAAIEBZY= - summary: IP / TCP 8.8.8.8:domain > 127.0.0.1:nim_wan SA -- - raw_packet: !!binary | - RQAALF+pAAArBhUKCAgICH8AAAEANRkVUFkhMQAAAAFgEqeUSrEAAAIEBZY= - summary: IP / TCP 8.8.8.8:domain > 127.0.0.1:nim_wan SA -- - raw_packet: !!binary | - RQAAOIKOAAD/ASMsCgABAX8AAAELAPNSAAAAAEUAACjlPQAAAQa5eQoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAHMcAAA= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOFrfAAD9AWWACgHnmn8AAAELAPNSAAAAAEUAACgEFAAAAQaaowoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAHMcAAA= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOEvyAAD8AbpECvuhyX8AAAELAPNSAAAAAEUAACh2JwAAAQYokAoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAHMcAAA= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOEoVAAD7AcLQCvucGn8AAAELAPNSAAAAAEUAAChWaQAAAQZITgoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAHMcAAA= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOGOZAAD8AadlCvudAX8AAAELAPNSAAAAAEUAAChLfgAAAQZTOQoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAHMcAAA= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RcAAOCkEAAD7AQKrCvd9VX8AAAELAPNSAAAAAEUAAChKTwAAAQZUaAoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAHMcAAA= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOHL8AAD6AZYBCvuhwn8AAAELAPNSAAAAAEUAAChGKwAAAQZYjAoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAHMcAAA= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOCBNAAD5ARACCmd8BX8AAAELAPNSAAAAAEUAACgaHwAAAQaEmAoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAHMcAAA= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOF3sAAD4Ac+QCgGAPX8AAAELAPNSAAAAAEUAACgV/QAAAQaIugoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAHMcAAA= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOCBhAAD3AYIPCv4LTX8AAAELAPNSAAAAAEUAAChuGQAAAQYwngoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAHMcAAA= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOFcAAAD3AT/vWWHIan8AAAELAPNSAAAAAEUAACgTdQAAAQaLQgoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAHMcAAA= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAYEpQAAD2AUzjWWHI/n8AAAELAJUsAAAAAEUAAChxMAAAAQYthwoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAO4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror / Padding -- - raw_packet: !!binary | - RQAAOAxnAAD2AfKtPmV8QX8AAAELAPNSAAAAAEUAACgBDgAAAQadqQoAAQoICAgI4hwfkAAAAAAA - AAAAUAIgAHMcAAA= - summary: IP / ICMP 62.101.124.65 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / TCPerror -- - raw_packet: !!binary | - RQAAOIKRAAD/ASMpCgABAX8AAAELABAzAAAAAEUAABwvFgAAARFvogoAAQoICAgIqwYAFwAIOac= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOFNsAAB+AeQFCkjwAX8AAAELAANFAAAAAEUAABw5ngAAARFlGgoAAQoICAgIqwYAFwAIRpU= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOHE6AAD9AU8lCgHnmn8AAAELAANFAAAAAEUAABxGtgAAARFYAgoAAQoICAgIqwYAFwAIRpU= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAODDfAAD8AdVXCvuhyX8AAAELAANFAAAAAEUAABxWXQAAARFIWwoAAQoICAgIqwYAFwAIRpU= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOHMbAAD7AZnKCvucGn8AAAELAANFAAAAAEUAABwFUAAAARGZaAoAAQoICAgIqwYAFwAIRpU= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOBQ5AAD8AfbFCvudAX8AAAELAANFAAAAAEUAABx9aQAAAREhTwoAAQoICAgIqwYAFwAIRpU= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOBMIAAD7ARinCvd9VX8AAAELANyRAAAAAEUAABwqfQAAARF0OwoAAQoICAgIqwYAFwAIbUg= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOFPQAAD6AbUtCvuhwn8AAAELANyRAAAAAEUAABwGygAAARGX7goAAQoICAgIqwYAFwAIbUg= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOCzvAAD5AQNgCmd8BX8AAAELANyRAAAAAEUAABwnsAAAARF3CAoAAQoICAgIqwYAFwAIbUg= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOArqAAD4ASKTCgGAPX8AAAELANyRAAAAAEUAABwXygAAARGG7goAAQoICAgIqwYAFwAIbUg= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOC5tAAD3AXQDCv4LTX8AAAELANyRAAAAAEUAABwUwgAAARGJ9goAAQoICAgIqwYAFwAIbUg= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOCujAAD3AWtMWWHIan8AAAELANyRAAAAAEUAABxoVgAAARE2YgoAAQoICAgIqwYAFwAIbUg= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAYAbjAAD2AZBQWWHI/n8AAAELANyRAAAAAEUAABx9VQAAAREhYwoAAQoICAgIqwYAFwAIbUgA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror / Padding -- - raw_packet: !!binary | - RQAAOCEkAAD2Ad3wPmV8QX8AAAELANyRAAAAAEUAABw+mwAAARFgHQoAAQoICAgIqwYAFwAIbUg= - summary: IP / ICMP 62.101.124.65 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOIKTAAD/ASMnCgABAX8AAAELABAzAAAAAEUAABwyEQAAARFspwoAAQoICAgIXY8AUAAIhuU= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOE9OAAD9AXERCgHnmn8AAAELAANFAAAAAEUAABxMDAAAARFSrAoAAQoICAgIXY8AUAAIk9M= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOHJUAAB+AcUdCkjwAX8AAAELAANFAAAAAEUAABwhEwAAARF9pQoAAQoICAgIXY8AUAAIk9M= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOBp0AAD8AevCCvuhyX8AAAELAANFAAAAAEUAABwb5AAAARGC1AoAAQoICAgIXY8AUAAIk9M= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOFjeAAD7AbQHCvucGn8AAAELAANFAAAAAEUAABwB+QAAARGcvwoAAQoICAgIXY8AUAAIk9M= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOHRxAAD8AZaNCvudAX8AAAELAANFAAAAAEUAABwLEAAAARGTqAoAAQoICAgIXY8AUAAIk9M= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOFq4AAD7AdD2Cvd9VX8AAAELANyRAAAAAEUAABw11wAAARFo4QoAAQoICAgIXY8AUAAIuoY= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOFKyAAD6AbZLCvuhwn8AAAELANyRAAAAAEUAABxcnwAAARFCGQoAAQoICAgIXY8AUAAIuoY= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOHqHAAD5AbXHCmd8BX8AAAELANyRAAAAAEUAABwHlAAAARGXJAoAAQoICAgIXY8AUAAIuoY= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOFQMAAD4AdlwCgGAPX8AAAELANyRAAAAAEUAABw7uQAAARFi/woAAQoICAgIXY8AUAAIuoY= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOALXAAD3AZ+ZCv4LTX8AAAELANyRAAAAAEUAABxbqQAAARFDDwoAAQoICAgIXY8AUAAIuoY= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAODYEAAD3AWDrWWHIan8AAAELANyRAAAAAEUAABxiqwAAARE8DQoAAQoICAgIXY8AUAAIuoY= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAYHabAAD2ASCYWWHI/n8AAAELANyRAAAAAEUAABxGQwAAARFYdQoAAQoICAgIXY8AUAAIuoYA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror / Padding -- - raw_packet: !!binary | - RQAAOHBeAAD2ASfOWWDILn8AAAELANyRAAAAAEUAABxWUQAAARFIZwoAAQoICAgIXY8AUAAIuoY= - summary: IP / ICMP 89.96.200.46 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOIKVAAD/ASMlCgABAX8AAAELABAzAAAAAEUAABwahgAAARGEMgoAAQoICAgIPaYBuwAIpWM= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOE8ZAAB+AehYCkjwAX8AAAELAANFAAAAAEUAABwUagAAARGKTgoAAQoICAgIPaYBuwAIslE= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOFOeAAD9AWzBCgHnmn8AAAELAANFAAAAAEUAABxKrQAAARFUCwoAAQoICAgIPaYBuwAIslE= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAODmqAAD8AcyMCvuhyX8AAAELAANFAAAAAEUAABxPPQAAARFPewoAAQoICAgIPaYBuwAIslE= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOFLIAAD7AbodCvucGn8AAAELAANFAAAAAEUAABxYFAAAARFGpAoAAQoICAgIPaYBuwAIslE= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOCJoAAD8AeiWCvudAX8AAAELAANFAAAAAEUAABxVHgAAARFJmgoAAQoICAgIPaYBuwAIslE= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOA5xAAD7AR0+Cvd9VX8AAAELANyRAAAAAEUAABw7RgAAARFjcgoAAQoICAgIPaYBuwAI2QQ= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAODo7AAD6Ac7CCvuhwn8AAAELANyRAAAAAEUAABx72QAAAREi3woAAQoICAgIPaYBuwAI2QQ= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOAeMAAD5ASjDCmd8BX8AAAELANyRAAAAAEUAABxiTwAAARE8aQoAAQoICAgIPaYBuwAI2QQ= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOGPpAAD4AcmTCgGAPX8AAAELANyRAAAAAEUAABxQHQAAARFOmwoAAQoICAgIPaYBuwAI2QQ= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOAndAAD3AZiTCv4LTX8AAAELANyRAAAAAEUAABxzpQAAARErEwoAAQoICAgIPaYBuwAI2QQ= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOFgXAAD3AT7YWWHIan8AAAELANyRAAAAAEUAABxnRwAAARE3cQoAAQoICAgIPaYBuwAI2QQ= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAYFGuAAD2AUWFWWHI/n8AAAELANyRAAAAAEUAABxq/QAAAREzuwoAAQoICAgIPaYBuwAI2QQA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror / Padding -- - raw_packet: !!binary | - RQAAOFZTAAD2AajBPmV8QX8AAAELANyRAAAAAEUAABwEFQAAARGaowoAAQoICAgIPaYBuwAI2QQ= - summary: IP / ICMP 62.101.124.65 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOIKXAAD/ASMjCgABAX8AAAELABAzAAAAAEUAABwTtAAAARGLBAoAAQoICAgIKu///wAIudU= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOEQZAAB+AfNYCkjwAX8AAAELAANFAAAAAEUAABxJIQAAARFVlwoAAQoICAgIKu///wAIxsM= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOFUpAAD9AWs2CgHnmn8AAAELAANFAAAAAEUAABwFwQAAARGY9woAAQoICAgIKu///wAIxsM= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOGsKAAD8AZssCvuhyX8AAAELAANFAAAAAEUAABxCgQAAARFcNwoAAQoICAgIKu///wAIxsM= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOAmpAAD7AQM9CvucGn8AAAELAANFAAAAAEUAABwYIAAAARGGmAoAAQoICAgIKu///wAIxsM= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOGCXAAD8AapnCvudAX8AAAELAANFAAAAAEUAABwTKgAAARGLjgoAAQoICAgIKu///wAIxsM= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOBOTAAD7ARgcCvd9VX8AAAELANyRAAAAAEUAABwVJwAAARGJkQoAAQoICAgIKu///wAI7XY= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAODC3AAD6AdhGCvuhwn8AAAELANyRAAAAAEUAABxDtQAAARFbAwoAAQoICAgIKu///wAI7XY= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAODedAAD5AfixCmd8BX8AAAELANyRAAAAAEUAABxN4QAAARFQ1woAAQoICAgIKu///wAI7XY= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOFx1AAD4AdEHCgGAPX8AAAELANyRAAAAAEUAABw0gwAAARFqNQoAAQoICAgIKu///wAI7XY= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOHArAAD3ATJFCv4LTX8AAAELANyRAAAAAEUAABwNQgAAARGRdgoAAQoICAgIKu///wAI7XY= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOEe3AAD3AU84WWHIan8AAAELANyRAAAAAEUAABwZfgAAARGFOgoAAQoICAgIKu///wAI7XY= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAYFc0AAD2AT//WWHI/n8AAAELANyRAAAAAEUAABwz2wAAARFq3QoAAQoICAgIKu///wAI7XYA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror / Padding -- - raw_packet: !!binary | - RQAAODTWAAD2AWNWWWDILn8AAAELANyRAAAAAEUAABxoqgAAARE2DgoAAQoICAgIKu///wAI7XY= - summary: IP / ICMP 89.96.200.46 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOIKQAAD/ASMqCgABAX8AAAELABAzAAAAAEUAABxylwAAAREsIQoAAQoICAgIO4EAFgAIqS0= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOCCDAAD9AZ/cCgHnmn8AAAELAANFAAAAAEUAABxqEAAAARE0qAoAAQoICAgIO4EAFgAIths= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOHMJAAB+AcRoCkjwAX8AAAELAANFAAAAAEUAABxhYgAAARE9VgoAAQoICAgIO4EAFgAIths= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOHFtAAD8AZTJCvuhyX8AAAELAANFAAAAAEUAABxsUwAAAREyZQoAAQoICAgIO4EAFgAIths= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOCG0AAD7AesxCvucGn8AAAELAANFAAAAAEUAABw13gAAARFo2goAAQoICAgIO4EAFgAIths= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOGzBAAD8AZ49CvudAX8AAAELAANFAAAAAEUAABxULwAAARFKiQoAAQoICAgIO4EAFgAIths= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOGVtAAD7AcZBCvd9VX8AAAELANyRAAAAAEUAABwlYwAAARF5VQoAAQoICAgIO4EAFgAI3M4= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAODepAAD6AdFUCvuhwn8AAAELANyRAAAAAEUAABwplgAAARF1IgoAAQoICAgIO4EAFgAI3M4= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOHKlAAD5Ab2pCmd8BX8AAAELANyRAAAAAEUAABwebwAAARGASQoAAQoICAgIO4EAFgAI3M4= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOD0XAAD4AfBlCgGAPX8AAAELANyRAAAAAEUAABwUBgAAARGKsgoAAQoICAgIO4EAFgAI3M4= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOD9VAAD3AWMbCv4LTX8AAAELANyRAAAAAEUAABxcmwAAARFCHQoAAQoICAgIO4EAFgAI3M4= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOBGoAAD3AYVHWWHIan8AAAELANyRAAAAAEUAABw3TAAAARFnbAoAAQoICAgIO4EAFgAI3M4= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAYENwAAD2AVPDWWHI/n8AAAELANyRAAAAAEUAABw0HwAAARFqmQoAAQoICAgIO4EAFgAI3M4A - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror / Padding -- - raw_packet: !!binary | - RQAAOEnSAAD2AU4KWWDIfn8AAAELANyRAAAAAEUAABwrHAAAARFznAoAAQoICAgIO4EAFgAI3M4= - summary: IP / ICMP 89.96.200.126 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOIKUAAD/ASMmCgABAX8AAAELABAzAAAAAEUAAByqJgAAARH0kQoAAQoICAgIc54AewAIcKs= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOE82AAB+Aeg7CkjwAX8AAAELAANFAAAAAEUAABxr8AAAAREyyAoAAQoICAgIc54AewAIfZk= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOG3VAAD9AVKKCgHnmn8AAAELAANFAAAAAEUAABx19QAAAREowwoAAQoICAgIc54AewAIfZk= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOCIYAAD8AeQeCvuhyX8AAAELAANFAAAAAEUAABwhzQAAARF86woAAQoICAgIc54AewAIfZk= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOGbTAAD7AaYSCvucGn8AAAELAANFAAAAAEUAABwbvQAAARGC+woAAQoICAgIc54AewAIfZk= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOD1WAAD8Ac2oCvudAX8AAAELAANFAAAAAEUAABwr9QAAARFywwoAAQoICAgIc54AewAIfZk= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOH6cAAD7Aa0SCvd9VX8AAAELANyRAAAAAEUAABxJwwAAARFU9QoAAQoICAgIc54AewAIpEw= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOCzzAAD6AdwKCvuhwn8AAAELANyRAAAAAEUAABwhMAAAARF9iAoAAQoICAgIc54AewAIpEw= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOGwyAAD5AcQcCmd8BX8AAAELANyRAAAAAEUAABwlAQAAARF5twoAAQoICAgIc54AewAIpEw= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOB9UAAD4AQ4pCgGAPX8AAAELANyRAAAAAEUAABwZwAAAARGE+AoAAQoICAgIc54AewAIpEw= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOAEzAAD3AaE9Cv4LTX8AAAELANyRAAAAAEUAABxWVgAAARFIYgoAAQoICAgIc54AewAIpEw= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOEZsAAD3AVCDWWHIan8AAAELANyRAAAAAEUAABwVYgAAARGJVgoAAQoICAgIc54AewAIpEw= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAYBbkAAD2AYBPWWHI/n8AAAELANyRAAAAAEUAABx+9wAAAREfwQoAAQoICAgIc54AewAIpEwA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror / Padding -- - raw_packet: !!binary | - RQAAOBWnAAD2AYI1WWDIfn8AAAELANyRAAAAAEUAABxpoQAAARE1FwoAAQoICAgIc54AewAIpEw= - summary: IP / ICMP 89.96.200.126 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOIKYAAD/ASMiCgABAX8AAAELAPT/AAAAAEUAABzb1QAAAQHC8goAAQoICAgICAD3/wAAAAA= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RQAAOHlSAAB+Ab4fCkjwAX8AAAELAJBjAAAAAEUAABxRTgAAAQFNegoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RcAAOCJxAAD9AZ3uCgHnmn8AAAELAJBjAAAAAEUAABwuRwAAAQFwgQoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RcAAOAkgAAD8Af0WCvuhyX8AAAELAJBjAAAAAEUAABxwFwAAAQEusQoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RcAAODfFAAD7AdUgCvucGn8AAAELAJBjAAAAAEUAABxTpQAAAQFLIwoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RcAAOD5TAAD8AcyrCvudAX8AAAELAJBjAAAAAEUAABwyrQAAAQFsGwoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RcAAOBEIAAD7ARqnCvd9VX8AAAELAJBjAAAAAEUAABwYRwAAAQGGgQoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RQAAOC3cAAD6AdshCvuhwn8AAAELAJBjAAAAAEUAABwg9gAAAQF90goAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RQAAOCthAAD5AQTuCmd8BX8AAAELAJBjAAAAAEUAABwaNQAAAQGEkwoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RQAAODD8AAD4AfyACgGAPX8AAAELAJBjAAAAAEUAABwhdgAAAQF9UgoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RQAAODi3AAD3AWm5Cv4LTX8AAAELAJBjAAAAAEUAABwoFAAAAQF2tAoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RQAAOB6fAAD3AXhQWWHIan8AAAELAJBjAAAAAEUAABwC/gAAAQGbygoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RQAAYHGYAAD2ASWbWWHI/n8AAAELAJBjAAAAAEUAABxc4wAAAQFB5QoAAQoICAgICABcnAAAAAAA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror / Padding -- - raw_packet: !!binary | - RQAAOEnfAAD2AU39WWDIfn8AAAELAJBjAAAAAEUAABwDBwAAAQGbwQoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 89.96.200.126 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RQAAODaSAAD2AWfjSA7TN38AAAELAJBjAAAAAEUAABxRwAAAAQFNCAoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 72.14.211.55 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RQAAOEIPAAD1AbX50VXxXH8AAAELAJBjAAAAAEWAABxj+gAAAQE6TgoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 209.85.241.92 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RQAAqBEjAADwAX3LSA7oTn8AAAELAJBjAAAAAEWAABwY8AAAAQGFWAoAAQoICAgICABcnAAAAAAA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIADZJgAIAQFczqkB - summary: IP / ICMP 72.14.232.78 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror / Padding -- - raw_packet: !!binary | - RQAAOEMpAADxAavH0VX+dH8AAAELAJBjAAAAAEWAABw+9gAAAQFfUgoAAQoICAgICABcnAAAAAA= - summary: IP / ICMP 209.85.254.116 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / ICMPerror -- - raw_packet: !!binary | - RQAAHAV3AAArAW9RCAgICH8AAAEAAP//AAAAAA== - summary: IP / ICMP 8.8.8.8 > 127.0.0.1 echo-reply 0 -- - raw_packet: !!binary | - RQAAHAJwAAArAXJYCAgICH8AAAEAAP//AAAAAA== - summary: IP / ICMP 8.8.8.8 > 127.0.0.1 echo-reply 0 -- - raw_packet: !!binary | - RQAAOIKSAAD/ASMoCgABAX8AAAELABAzAAAAAEUAABz9GQAAARGhngoAAQoICAgIJAYANQAIwIk= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAODjdAAD9AYeCCgHnmn8AAAELAANFAAAAAEUAABxkigAAARE6LgoAAQoICAgIJAYANQAIzXc= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAODaTAAD8Ac+jCvuhyX8AAAELAANFAAAAAEUAABwL2wAAARGS3QoAAQoICAgIJAYANQAIzXc= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOBigAAD7AfRFCvucGn8AAAELAANFAAAAAEUAABxTSQAAARFLbwoAAQoICAgIJAYANQAIzXc= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOEegAAD8AcNeCvudAX8AAAELAANFAAAAAEUAABwXpgAAARGHEgoAAQoICAgIJAYANQAIzXc= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOF63AAD7Acz3Cvd9VX8AAAELANyRAAAAAEUAABw6EgAAARFkpgoAAQoICAgIJAYANQAI9Co= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAODCFAAB+AQbtCkjwAX8AAAELAANFAAAAAEUAABwq2QAAARFz3woAAQoICAgIJAYANQAIzXc= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOFQoAAD6AbTVCvuhwn8AAAELANyRAAAAAEUAABwOIgAAARGQlgoAAQoICAgIJAYANQAI9Co= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOAyAAAD5ASPPCmd8BX8AAAELANyRAAAAAEUAABxhaAAAARE9UAoAAQoICAgIJAYANQAI9Co= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOAFtAAD4ASwQCgGAPX8AAAELANyRAAAAAEUAABxNUwAAARFRZQoAAQoICAgIJAYANQAI9Co= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOFSiAAD3AU3OCv4LTX8AAAELANyRAAAAAEUAABw9YgAAARFhVgoAAQoICAgIJAYANQAI9Co= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOEjBAAD3AU4uWWHIan8AAAELANyRAAAAAEUAABxokQAAARE2JwoAAQoICAgIJAYANQAI9Co= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAYG2bAAD2ASmYWWHI/n8AAAELANyRAAAAAEUAABx07gAAAREpygoAAQoICAgIJAYANQAI9CoA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror / Padding -- - raw_packet: !!binary | - RQAAOGhGAAD0ATgNSA7TWX8AAAELANyRAAAAAEUAABxZhwAAARFFMQoAAQoICAgIJAYANQAI9Co= - summary: IP / ICMP 72.14.211.89 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOCFhAADyAdml0VXxXn8AAAELANyRAAAAAEWAABwSvgAAARGLegoAAQoICAgIJAYANQAI9Co= - summary: IP / ICMP 209.85.241.94 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOEivAAD2AU8tWWDIfn8AAAELANyRAAAAAEUAABxjEwAAARE7pQoAAQoICAgIJAYANQAI9Co= - summary: IP / ICMP 89.96.200.126 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAqAQMAADzAYfkSA7oTH8AAAELANyRAAAAAEWAABw3RQAAARFm8woAAQoICAgIJAYANQAI9CoA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAsVwAIAQGJnikB - summary: IP / ICMP 72.14.232.76 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror / Padding -- - raw_packet: !!binary | - RQAAOB9EAAD0Acyw0VX+cH8AAAELANyRAAAAAEWAABwwgAAAARFtuAoAAQoICAgIJAYANQAI9Co= - summary: IP / ICMP 209.85.254.112 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOIKWAAD/ASMkCgABAX8AAAELABAzAAAAAEUAABw/owAAARFfFQoAAQoICAgISZgfkAAIe5w= - summary: IP / ICMP 10.0.1.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOFSYAAB+AeLZCkjwAX8AAAELAANFAAAAAEUAABw45QAAARFl0woAAQoICAgISZgfkAAIiIo= - summary: IP / ICMP 10.72.240.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOGbxAAD9AVluCgHnmn8AAAELAANFAAAAAEUAABwTpAAAARGLFAoAAQoICAgISZgfkAAIiIo= - summary: IP / ICMP 10.1.231.154 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOE4qAAD8AbgMCvuhyX8AAAELAANFAAAAAEUAABwCWgAAARGcXgoAAQoICAgISZgfkAAIiIo= - summary: IP / ICMP 10.251.161.201 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOAoSAAD7AQLUCvucGn8AAAELAANFAAAAAEUAABwlRgAAARF5cgoAAQoICAgISZgfkAAIiIo= - summary: IP / ICMP 10.251.156.26 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOArZAAD8AQAmCvudAX8AAAELAANFAAAAAEUAABxmogAAARE4FgoAAQoICAgISZgfkAAIiIo= - summary: IP / ICMP 10.251.157.1 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RcAAOFSsAAD7AdcCCvd9VX8AAAELANyRAAAAAEUAABxb5gAAARFC0goAAQoICAgISZgfkAAIrz0= - summary: IP / ICMP 10.247.125.85 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOEXfAAD6AcMeCvuhwn8AAAELANyRAAAAAEUAABwyUQAAARFsZwoAAQoICAgISZgfkAAIrz0= - summary: IP / ICMP 10.251.161.194 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOBG3AAD5AR6YCmd8BX8AAAELANyRAAAAAEUAABwhUQAAARF9ZwoAAQoICAgISZgfkAAIrz0= - summary: IP / ICMP 10.103.124.5 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOGqaAAD4AcLiCgGAPX8AAAELANyRAAAAAEUAABxRkQAAARFNJwoAAQoICAgISZgfkAAIrz0= - summary: IP / ICMP 10.1.128.61 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAODJzAAD3AW/9Cv4LTX8AAAELANyRAAAAAEUAABxrGQAAAREznwoAAQoICAgISZgfkAAIrz0= - summary: IP / ICMP 10.254.11.77 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAOA3LAAD3AYkkWWHIan8AAAELANyRAAAAAEUAABwaIAAAARGEmAoAAQoICAgISZgfkAAIrz0= - summary: IP / ICMP 89.97.200.106 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -- - raw_packet: !!binary | - RQAAYGx9AAD2ASq2WWHI/n8AAAELANyRAAAAAEUAABwmjgAAARF4KgoAAQoICAgISZgfkAAIrz0A - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - summary: IP / ICMP 89.97.200.254 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror / Padding -- - raw_packet: !!binary | - RQAAOB9FAAD2AXiPWWDIhn8AAAELANyRAAAAAEUAABwPIwAAARGPlQoAAQoICAgISZgfkAAIrz0= - summary: IP / ICMP 89.96.200.134 > 127.0.0.1 time-exceeded ttl-zero-during-transit - / IPerror / UDPerror -input: null -max_ttl: 30 -sent_packets: -- - raw_packet: !!binary | - RQAAKFw+AAABBs6BfwAAAQgICAiDDgAAAAAAAAAAAABQAiAAfcMAAA== - summary: IP / TCP 127.0.0.1:33550 > 8.8.8.8:0 S -- - raw_packet: !!binary | - RQAAKJOnAAACBpYYfwAAAQgICAiDDgAAAAAAAAAAAABQAiAAfcMAAA== - summary: IP / TCP 127.0.0.1:33550 > 8.8.8.8:0 S -- - raw_packet: !!binary | - RQAAKJHqAAADBpbVfwAAAQgICAiDDgAAAAAAAAAAAABQAiAAfcMAAA== - summary: IP / TCP 127.0.0.1:33550 > 8.8.8.8:0 S -- - raw_packet: !!binary | - RQAAKBF+AAAEBhZCfwAAAQgICAiDDgAAAAAAAAAAAABQAiAAfcMAAA== - summary: IP / TCP 127.0.0.1:33550 > 8.8.8.8:0 S -- - raw_packet: !!binary | - RQAAKOzMAAAFBjnzfwAAAQgICAiDDgAAAAAAAAAAAABQAiAAfcMAAA== - summary: IP / TCP 127.0.0.1:33550 > 8.8.8.8:0 S -- - raw_packet: !!binary | - RQAAKFSQAAABBtYvfwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKIDRAAACBqjufwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKLfnAAADBnDYfwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKDn1AAAEBu3KfwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKLfdAAAFBm7ifwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKOvCAAAGBjn9fwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKOK/AAAHBkIAfwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKLztAAAIBmbSfwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKAzkAAAJBhXcfwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKDFvAAAKBvBQfwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKOEmAAALBj+ZfwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKFMvAAAMBsyQfwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKMN6AAANBltFfwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKG0nAAAOBrCYfwAAAQgICAgT6QAXAAAAAAAAAABQAiAA7NEAAA== - summary: IP / TCP 127.0.0.1:5097 > 8.8.8.8:telnet S -- - raw_packet: !!binary | - RQAAKHbiAAABBrPdfwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKGakAAACBsMbfwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKEY6AAADBuKFfwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKB2mAAAEBgoafwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKMM1AAAFBmOKfwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKCInAAAGBgOZfwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKDT8AAAHBu/DfwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKALhAAAIBiDffwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKGNpAAAJBr9WfwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKOoKAAAKBje1fwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKNFAAAALBk9/fwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKNCoAAAMBk8XfwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKPa+AAANBigBfwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKI+PAAAOBo4wfwAAAQgICAi+WABQAAAAAAAAAABQAiAAQikAAA== - summary: IP / TCP 127.0.0.1:48728 > 8.8.8.8:http S -- - raw_packet: !!binary | - RQAAKBHKAAABBhj2fwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKHwXAAACBq2ofwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKOu2AAADBj0JfwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKCrXAAAEBvzofwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKAjxAAAFBh3PfwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKABrAAAGBiVVfwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKPZ9AAAHBi5CfwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKHDaAAAIBrLlfwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKEstAAAJBteSfwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKM77AAAKBlLEfwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKD9mAAALBuFZfwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKHghAAAMBqeefwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKHPmAAANBqrZfwAAAQgICAj5kQG7AAAAAAAAAABQAiAABYUAAA== - summary: IP / TCP 127.0.0.1:63889 > 8.8.8.8:https S -- - raw_packet: !!binary | - RQAAKDRMAAABBvZzfwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKE9xAAACBtpOfwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKPf1AAADBjDKfwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKD89AAAEBuiCfwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKLQcAAAFBnKjfwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKIQOAAAGBqGxfwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKCaJAAAHBv42fwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKOHXAAAIBkHofwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKOJcAAAJBkBjfwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKB1MAAAKBgR0fwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKNSbAAALBkwkfwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKKgHAAAMBne4fwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKJsTAAANBoOsfwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKN2lAAAOBkAafwAAAQgICAiRrf//AAAAAAAAAABQAiAAbyQAAA== - summary: IP / TCP 127.0.0.1:37293 > 8.8.8.8:65535 S -- - raw_packet: !!binary | - RQAAKICDAAABBqo8fwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKAdOAAACBiJyfwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKK/mAAADBnjZfwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKDrnAAAEBuzYfwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKED8AAAFBuXDfwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKC/2AAAGBvXJfwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKNPSAAAHBlDtfwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKK8cAAAIBnSjfwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKCjAAAAJBvn/fwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKBsiAAAKBgaefwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKBzHAAALBgP5fwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKNJzAAAMBk1MfwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKFORAAANBssufwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKAQSAAAOBhmufwAAAQgICAh7SQAWAAAAAAAAAABQAiAAhXIAAA== - summary: IP / TCP 127.0.0.1:31561 > 8.8.8.8:ssh S -- - raw_packet: !!binary | - RQAAKHO+AAABBrcBfwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKOH2AAACBkfJfwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKBSMAAADBhQ0fwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKMRzAAAEBmNMfwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKBnkAAAFBgzcfwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKKVKAAAGBoB1fwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKOSdAAAHBkAifwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKFpKAAAIBsl1fwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKO//AAAJBjLAfwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKNahAAAKBksefwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKFp7AAALBsZEfwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKAA8AAAMBh+EfwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKJGTAAANBo0sfwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKH97AAAOBp5EfwAAAQgICAgp6QB7AAAAAAAAAABQAiAA1m0AAA== - summary: IP / TCP 127.0.0.1:10729 > 8.8.8.8:ntp S -- - raw_packet: !!binary | - RQAAKLrvAAABBm/QfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKGt6AAACBr5FfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKMpXAAADBl5ofwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKJWZAAAEBpImfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKNMhAAAFBlOefwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKNVIAAAGBlB3fwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKL1bAAAHBmdkfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKIiDAAAIBps8fwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKINsAAAJBp9TfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKOAbAAAKBkGkfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKNldAAALBkdifwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKNSEAAAMBks7fwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKPsJAAANBiO2fwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKNXHAAAOBkf4fwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKP+lAAAPBh0afwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKFKwAAAQBskPfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKIngAAARBpDffwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKGkqAAASBrCVfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKPzhAAATBhvefwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKC7oAAAUBujXfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKJGvAAAVBoUQfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKL4+AAAWBleBfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKBY+AAAXBv6BfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKOsMAAAYBiizfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKPBTAAAZBiJsfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKFnUAAAaBrfrfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKCPlAAAbBuzafwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKAW7AAAcBgoFfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKAbRAAAdBgfvfwAAAQgICAgZFQA1AAAAAAAAAABQAiAA54cAAA== - summary: IP / TCP 127.0.0.1:nim_wan > 8.8.8.8:domain S -- - raw_packet: !!binary | - RQAAKOU9AAABBkWCfwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAKNFOAAACBlhxfwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAKES6AAADBuQFfwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAKFqUAAAEBs0rfwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAKKHtAAAFBoTSfwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAKMIXAAAGBmOofwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAKBphAAAHBgpffwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAKMb7AAAIBlzEfwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAKMoDAAAJBli8fwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAKMjKAAAKBlj1fwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAKBj7AAALBgfFfwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAKAyCAAAMBhM+fwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAKOF2AAANBj1JfwAAAQgICAjiHB+QAAAAAAAAAABQAiAA/yQAAA== - summary: IP / TCP 127.0.0.1:57884 > 8.8.8.8:http_alt S -- - raw_packet: !!binary | - RQAAHC8WAAABEfuqfwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHAJCAAACESd/fwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHIQuAAADEaSSfwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHIXkAAAEEaHcfwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHPTkAAAFETHcfwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHH1mAAAGEahafwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHBr3AAAHEQnKfwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHB4VAAAIEQWsfwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHEOxAAAJEd8PfwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHLfFAAAKEWn7fwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHEJ8AAALEd5EfwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHEmwAAAMEdYQfwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHPOaAAANESsmfwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHCQqAAAOEfmWfwAAAQgICAirBgAXAAjFrw== - summary: IP / UDP 127.0.0.1:43782 > 8.8.8.8:telnet -- - raw_packet: !!binary | - RQAAHDIRAAABEfivfwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHKViAAACEYRefwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHBDAAAADERgBfwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHIOvAAAEEaQRfwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHNa1AAAFEVALfwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHEkaAAAGEdymfwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHHEFAAAHEbO7fwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHG+qAAAIEbQWfwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHLRcAAAJEW5kfwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHO71AAAKETLLfwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHD0DAAALEeO9fwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHJAkAAAMEY+cfwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHNlvAAANEUVRfwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHECQAAAOEd0wfwAAAQgICAhdjwBQAAgS7g== - summary: IP / UDP 127.0.0.1:23951 > 8.8.8.8:http -- - raw_packet: !!binary | - RQAAHBqGAAABERA7fwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHLTJAAACEXT3fwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHNdaAAADEVFmfwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHGUXAAAEEcKpfwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHNbNAAAFEU/zfwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHCrmAAAGEfrafwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHBmqAAAHEQsXfwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHO0hAAAIETaffwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHF5DAAAJEcR9fwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHMFJAAAKEWB3fwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHAqRAAALERYwfwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHDaAAAAMEelAfwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHOYzAAANETiNfwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHH0cAAAOEaCkfwAAAQgICAg9pgG7AAgxbA== - summary: IP / UDP 127.0.0.1:15782 > 8.8.8.8:https -- - raw_packet: !!binary | - RQAAHBO0AAABERcNfwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHELQAAACEebwfwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHCQNAAADEQS0fwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHEy+AAAEEdsCfwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHFnEAAAFEcz8fwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHDD4AAAGEfTIfwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHFfLAAAHEcz1fwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHFtXAAAIEchpfwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHD2gAAAJEeUgfwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHM/GAAAKEVH6fwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHNDXAAALEU/pfwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHIwIAAAMEZO4fwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHEOjAAANEdsdfwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHHHdAAAOEavjfwAAAQgICAgq7///AAhF3g== - summary: IP / UDP 127.0.0.1:10991 > 8.8.8.8:65535 -- - raw_packet: !!binary | - RQAAHHKXAAABEbgpfwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHBVFAAACERR8fwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHB2zAAADEQsOfwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHCsLAAAEEfy1fwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHM8mAAAFEVeafwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHH1/AAAGEahBfwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHLcgAAAHEW2gfwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHA8LAAAIERS2fwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHFuuAAAJEccSfwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHBjXAAAKEQjqfwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHOKqAAALET4WfwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHCtvAAAMEfRRfwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHOb2AAANETfKfwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHNZ4AAAOEUdIfwAAAQgICAg7gQAWAAg1Ng== - summary: IP / UDP 127.0.0.1:15233 > 8.8.8.8:ssh -- - raw_packet: !!binary | - RQAAHKomAAABEYCafwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHJzvAAACEYzRfwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHHyAAAADEaxAfwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHBx6AAAEEQtHfwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHCdcAAAFEf9kfwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHKblAAAGEX7bfwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHJ9dAAAHEYVjfwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHBPTAAAIEQ/ufwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHM2WAAAJEVUqfwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHH05AAAKEaSHfwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHHATAAALEbCtfwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHMwRAAAMEVOvfwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHFCmAAANEc4afwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHEq/AAAOEdMBfwAAAQgICAhzngB7AAj8sw== - summary: IP / UDP 127.0.0.1:29598 > 8.8.8.8:ntp -- - raw_packet: !!binary | - RQAAHNvVAAABAU77fwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHJnCAAACAZAOfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHEhLAAADAeCFfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHPG/AAAEATYRfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHEvQAAAFAdsAfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHNROAAAGAVGCfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHG+aAAAHAbU2fwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHGw6AAAIAbeWfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHE23AAAJAdUZfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHETwAAAKAdzgfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHMl5AAALAVdXfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHEEkAAAMAd6sfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHOLVAAANATv7fwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHPtzAAAOASJdfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHKv2AAAPAXDafwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHJ4aAAAQAX22fwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHJmQAAARAYFAfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHM9gAAASAUpwfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHF87AAATAbmVfwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHJOVAAAUAYQ7fwAAAQgICAgIAPf/AAAAAA== - summary: IP / ICMP 127.0.0.1 > 8.8.8.8 echo-request 0 -- - raw_packet: !!binary | - RQAAHP0ZAAABES2nfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHCrQAAACEf7wfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHHnUAAADEa7sfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHH4+AAAEEamCfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHPc4AAAFES+IfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHN53AAAGEUdJfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHFi/AAAHEcwBfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHM4nAAAIEVWZfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHP0vAAAJESWRfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHJmRAAAKEYgvfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHIqdAAALEZYjfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHPJhAAAMES1ffwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHHdGAAANEad6fwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHPTYAAAOESjofwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHFvwAAAPEcDQfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHP3zAAAQER3NfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHGCzAAAREboNfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHIHZAAASEZfnfwAAAQgICAgkBgA1AAhMkg== - summary: IP / UDP 127.0.0.1:teamcoherence > 8.8.8.8:domain -- - raw_packet: !!binary | - RQAAHD+jAAABEesdfwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHEMVAAACEearfwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHPV4AAADETNIfwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHPWLAAAEETI1fwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHLphAAAFEWxffwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHGAvAAAGEcWRfwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHMi1AAAHEVwLfwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHN7VAAAIEUTrfwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHJmkAAAJEYkcfwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHBSfAAAKEQ0ifwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHOLfAAALET3hfwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHL25AAAMEWIHfwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHG7hAAANEa/ffwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -- - raw_packet: !!binary | - RQAAHAFfAAAOERxifwAAAQgICAhJmB+QAAgHpQ== - summary: IP / UDP 127.0.0.1:18840 > 8.8.8.8:http_alt -test_icmp_traceroute: - hops: - - {address: 10.0.1.1, rtt: 3.9715609550476074, ttl: 1} - - {address: 10.72.240.1, rtt: 4.018263101577759, ttl: 2} - - {address: 10.1.231.154, rtt: 4.0202929973602295, ttl: 3} - - {address: 10.251.161.201, rtt: 4.024235963821411, ttl: 4} - - {address: 10.251.156.26, rtt: 4.028274059295654, ttl: 5} - - {address: 10.251.157.1, rtt: 4.032228946685791, ttl: 6} - - {address: 10.247.125.85, rtt: 4.035927057266235, ttl: 7} - - {address: 10.251.161.194, rtt: 4.039880037307739, ttl: 8} - - {address: 10.103.124.5, rtt: 4.043823003768921, ttl: 9} - - {address: 10.1.128.61, rtt: 4.04759407043457, ttl: 10} - - {address: 10.254.11.77, rtt: 4.052925109863281, ttl: 11} - - {address: 89.97.200.106, rtt: 4.056672096252441, ttl: 12} - - {address: 89.97.200.254, rtt: 4.067225933074951, ttl: 13} - - {address: 89.96.200.126, rtt: 4.069293975830078, ttl: 14} - - {address: 72.14.211.55, rtt: 4.071274995803833, ttl: 15} - - {address: 209.85.241.92, rtt: 4.073256015777588, ttl: 16} - - {address: 72.14.232.78, rtt: 4.075243949890137, ttl: 17} - - {address: 209.85.254.116, rtt: 4.077281951904297, ttl: 18} - - {address: 8.8.8.8, rtt: 4.079555988311768, ttl: 19} - - {address: 8.8.8.8, rtt: 4.5740931034088135, ttl: 20} -test_tcp_traceroute: - hops_0: - - {address: 10.0.1.1, rtt: 0.8929989337921143, sport: 33550, ttl: 1} - - {address: 10.1.231.154, rtt: 0.9173901081085205, sport: 33550, ttl: 2} - - {address: 10.251.161.201, rtt: 0.9208340644836426, sport: 33550, ttl: 3} - - {address: 10.251.156.26, rtt: 0.9243190288543701, sport: 33550, ttl: 4} - - {address: 10.251.157.1, rtt: 0.9279429912567139, sport: 33550, ttl: 5} - hops_123: - - {address: 10.0.1.1, rtt: 1.057663917541504, sport: 10729, ttl: 1} - - {address: 10.72.240.1, rtt: 1.0832798480987549, sport: 10729, ttl: 2} - - {address: 10.1.231.154, rtt: 1.0852348804473877, sport: 10729, ttl: 3} - - {address: 10.251.161.201, rtt: 1.0872218608856201, sport: 10729, ttl: 4} - - {address: 10.251.156.26, rtt: 1.0913589000701904, sport: 10729, ttl: 5} - - {address: 10.251.157.1, rtt: 1.0950088500976562, sport: 10729, ttl: 6} - - {address: 10.247.125.85, rtt: 1.0984508991241455, sport: 10729, ttl: 7} - - {address: 10.251.161.194, rtt: 1.106515884399414, sport: 10729, ttl: 8} - - {address: 10.103.124.5, rtt: 1.1134669780731201, sport: 10729, ttl: 9} - - {address: 10.1.128.61, rtt: 1.1153309345245361, sport: 10729, ttl: 10} - - {address: 10.254.11.77, rtt: 1.1171259880065918, sport: 10729, ttl: 11} - - {address: 89.97.200.106, rtt: 1.118973970413208, sport: 10729, ttl: 12} - - {address: 62.101.124.65, rtt: 1.1317999362945557, sport: 10729, ttl: 13} - - {address: 89.97.200.254, rtt: 1.1352579593658447, sport: 10729, ttl: 14} - hops_22: - - {address: 10.0.1.1, rtt: 0.887671947479248, sport: 31561, ttl: 1} - - {address: 10.72.240.1, rtt: 0.9095978736877441, sport: 31561, ttl: 2} - - {address: 10.1.231.154, rtt: 0.9134628772735596, sport: 31561, ttl: 3} - - {address: 10.251.161.201, rtt: 0.9172408580780029, sport: 31561, ttl: 4} - - {address: 10.251.156.26, rtt: 0.9208929538726807, sport: 31561, ttl: 5} - - {address: 10.251.157.1, rtt: 0.9243419170379639, sport: 31561, ttl: 6} - - {address: 10.247.125.85, rtt: 0.9276900291442871, sport: 31561, ttl: 7} - - {address: 10.251.161.194, rtt: 0.9310119152069092, sport: 31561, ttl: 8} - - {address: 10.103.124.5, rtt: 0.937445878982544, sport: 31561, ttl: 9} - - {address: 10.1.128.61, rtt: 0.939384937286377, sport: 31561, ttl: 10} - - {address: 10.254.11.77, rtt: 0.9427988529205322, sport: 31561, ttl: 11} - - {address: 89.97.200.106, rtt: 0.9527590274810791, sport: 31561, ttl: 12} - - {address: 89.97.200.254, rtt: 0.95943284034729, sport: 31561, ttl: 13} - - {address: 89.96.200.134, rtt: 0.9697248935699463, sport: 31561, ttl: 14} - hops_23: - - {address: 10.0.1.1, rtt: 0.9211528301239014, sport: 5097, ttl: 1} - - {address: 10.72.240.1, rtt: 0.9416170120239258, sport: 5097, ttl: 2} - - {address: 10.1.231.154, rtt: 0.9434559345245361, sport: 5097, ttl: 3} - - {address: 10.251.161.201, rtt: 0.9484758377075195, sport: 5097, ttl: 4} - - {address: 10.251.156.26, rtt: 0.9505150318145752, sport: 5097, ttl: 5} - - {address: 10.251.157.1, rtt: 0.9561848640441895, sport: 5097, ttl: 6} - - {address: 10.247.125.85, rtt: 0.960468053817749, sport: 5097, ttl: 7} - - {address: 10.251.161.194, rtt: 0.9639179706573486, sport: 5097, ttl: 8} - - {address: 10.103.124.5, rtt: 0.9702839851379395, sport: 5097, ttl: 9} - - {address: 10.1.128.61, rtt: 0.9737949371337891, sport: 5097, ttl: 10} - - {address: 10.254.11.77, rtt: 0.9802989959716797, sport: 5097, ttl: 11} - - {address: 89.97.200.106, rtt: 0.9836268424987793, sport: 5097, ttl: 12} - - {address: 89.97.200.254, rtt: 0.99639892578125, sport: 5097, ttl: 13} - - {address: 89.96.200.126, rtt: 1.0050489902496338, sport: 5097, ttl: 14} - hops_443: - - {address: 10.0.1.1, rtt: 1.0840370655059814, sport: 63889, ttl: 1} - - {address: 10.1.231.154, rtt: 1.109666109085083, sport: 63889, ttl: 2} - - {address: 10.251.161.201, rtt: 1.113111972808838, sport: 63889, ttl: 3} - - {address: 10.251.156.26, rtt: 1.1165308952331543, sport: 63889, ttl: 4} - - {address: 10.251.157.1, rtt: 1.1198999881744385, sport: 63889, ttl: 5} - - {address: 10.247.125.85, rtt: 1.1232690811157227, sport: 63889, ttl: 6} - - {address: 10.251.161.194, rtt: 1.1285760402679443, sport: 63889, ttl: 7} - - {address: 10.103.124.5, rtt: 1.1326820850372314, sport: 63889, ttl: 8} - - {address: 10.1.128.61, rtt: 1.139185905456543, sport: 63889, ttl: 9} - - {address: 10.254.11.77, rtt: 1.1459689140319824, sport: 63889, ttl: 10} - - {address: 89.97.200.106, rtt: 1.1481139659881592, sport: 63889, ttl: 11} - - {address: 89.97.200.254, rtt: 1.1560420989990234, sport: 63889, ttl: 12} - - {address: 89.96.200.134, rtt: 1.1640660762786865, sport: 63889, ttl: 13} - hops_53: - - {address: 10.0.1.1, rtt: 0.9541549682617188, sport: 6421, ttl: 1} - - {address: 10.72.240.1, rtt: 0.9729020595550537, sport: 6421, ttl: 2} - - {address: 10.1.231.154, rtt: 0.9748890399932861, sport: 6421, ttl: 3} - - {address: 10.251.161.201, rtt: 0.9788179397583008, sport: 6421, ttl: 4} - - {address: 10.251.156.26, rtt: 0.9826369285583496, sport: 6421, ttl: 5} - - {address: 10.251.157.1, rtt: 0.9876649379730225, sport: 6421, ttl: 6} - - {address: 10.247.125.85, rtt: 0.9913709163665771, sport: 6421, ttl: 7} - - {address: 10.251.161.194, rtt: 0.997809886932373, sport: 6421, ttl: 8} - - {address: 10.103.124.5, rtt: 0.9996218681335449, sport: 6421, ttl: 9} - - {address: 10.1.128.61, rtt: 1.0029208660125732, sport: 6421, ttl: 10} - - {address: 10.254.11.77, rtt: 1.0111238956451416, sport: 6421, ttl: 11} - - {address: 89.97.200.106, rtt: 1.0159449577331543, sport: 6421, ttl: 12} - - {address: 89.97.200.254, rtt: 1.0279550552368164, sport: 6421, ttl: 13} - - {address: 89.96.200.46, rtt: 1.0326428413391113, sport: 6421, ttl: 14} - - {address: 72.14.211.89, rtt: 1.039456844329834, sport: 6421, ttl: 15} - - {address: 209.85.241.92, rtt: 1.0447049140930176, sport: 6421, ttl: 16} - - {address: 72.14.232.78, rtt: 1.0516810417175293, sport: 6421, ttl: 17} - - {address: 209.85.254.114, rtt: 1.058819055557251, sport: 6421, ttl: 18} - - {address: 8.8.8.8, rtt: 1.064857006072998, sport: 6421, ttl: 19} - - {address: 8.8.8.8, rtt: 1.074767827987671, sport: 6421, ttl: 20} - - {address: 8.8.8.8, rtt: 1.0773730278015137, sport: 6421, ttl: 21} - - {address: 8.8.8.8, rtt: 1.0835769176483154, sport: 6421, ttl: 22} - - {address: 8.8.8.8, rtt: 1.0862410068511963, sport: 6421, ttl: 23} - - {address: 8.8.8.8, rtt: 1.0980219841003418, sport: 6421, ttl: 24} - - {address: 8.8.8.8, rtt: 1.1042819023132324, sport: 6421, ttl: 25} - - {address: 8.8.8.8, rtt: 1.1147940158843994, sport: 6421, ttl: 26} - - {address: 8.8.8.8, rtt: 1.1190860271453857, sport: 6421, ttl: 27} - - {address: 8.8.8.8, rtt: 1.1216108798980713, sport: 6421, ttl: 28} - - {address: 8.8.8.8, rtt: 1.127511978149414, sport: 6421, ttl: 29} - hops_65535: - - {address: 10.0.1.1, rtt: 1.1430189609527588, sport: 37293, ttl: 1} - - {address: 10.72.240.1, rtt: 1.168022871017456, sport: 37293, ttl: 2} - - {address: 10.1.231.154, rtt: 1.1717679500579834, sport: 37293, ttl: 3} - - {address: 10.251.161.201, rtt: 1.1754209995269775, sport: 37293, ttl: 4} - - {address: 10.251.156.26, rtt: 1.177292823791504, sport: 37293, ttl: 5} - - {address: 10.251.157.1, rtt: 1.1840429306030273, sport: 37293, ttl: 6} - - {address: 10.247.125.85, rtt: 1.185985803604126, sport: 37293, ttl: 7} - - {address: 10.251.161.194, rtt: 1.1920018196105957, sport: 37293, ttl: 8} - - {address: 10.103.124.5, rtt: 1.1955947875976562, sport: 37293, ttl: 9} - - {address: 10.1.128.61, rtt: 1.1989409923553467, sport: 37293, ttl: 10} - - {address: 10.254.11.77, rtt: 1.2022309303283691, sport: 37293, ttl: 11} - - {address: 89.97.200.106, rtt: 1.2070260047912598, sport: 37293, ttl: 12} - - {address: 89.97.200.254, rtt: 1.236454963684082, sport: 37293, ttl: 13} - - {address: 89.96.200.134, rtt: 1.2652239799499512, sport: 37293, ttl: 14} - hops_80: - - {address: 10.0.1.1, rtt: 0.9794230461120605, sport: 48728, ttl: 1} - - {address: 10.1.231.154, rtt: 1.0122148990631104, sport: 48728, ttl: 2} - - {address: 10.72.240.1, rtt: 1.0160748958587646, sport: 48728, ttl: 3} - - {address: 10.251.161.201, rtt: 1.022981882095337, sport: 48728, ttl: 4} - - {address: 10.251.156.26, rtt: 1.0264310836791992, sport: 48728, ttl: 5} - - {address: 10.251.157.1, rtt: 1.036902904510498, sport: 48728, ttl: 6} - - {address: 10.247.125.85, rtt: 1.0441060066223145, sport: 48728, ttl: 7} - - {address: 10.251.161.194, rtt: 1.0476000308990479, sport: 48728, ttl: 8} - - {address: 10.103.124.5, rtt: 1.056222915649414, sport: 48728, ttl: 9} - - {address: 10.1.128.61, rtt: 1.0620770454406738, sport: 48728, ttl: 10} - - {address: 10.254.11.77, rtt: 1.0713310241699219, sport: 48728, ttl: 11} - - {address: 89.97.200.106, rtt: 1.0809619426727295, sport: 48728, ttl: 12} - - {address: 89.97.200.254, rtt: 1.0914230346679688, sport: 48728, ttl: 13} - - {address: 89.96.200.126, rtt: 1.0984768867492676, sport: 48728, ttl: 14} - hops_8080: - - {address: 10.0.1.1, rtt: 1.1146080493927002, sport: 57884, ttl: 1} - - {address: 10.1.231.154, rtt: 1.1394469738006592, sport: 57884, ttl: 2} - - {address: 10.251.161.201, rtt: 1.1429920196533203, sport: 57884, ttl: 3} - - {address: 10.251.156.26, rtt: 1.1465580463409424, sport: 57884, ttl: 4} - - {address: 10.251.157.1, rtt: 1.150658130645752, sport: 57884, ttl: 5} - - {address: 10.247.125.85, rtt: 1.1548030376434326, sport: 57884, ttl: 6} - - {address: 10.251.161.194, rtt: 1.1582081317901611, sport: 57884, ttl: 7} - - {address: 10.103.124.5, rtt: 1.1615681648254395, sport: 57884, ttl: 8} - - {address: 10.1.128.61, rtt: 1.1648681163787842, sport: 57884, ttl: 9} - - {address: 10.254.11.77, rtt: 1.1742961406707764, sport: 57884, ttl: 10} - - {address: 89.97.200.106, rtt: 1.177865982055664, sport: 57884, ttl: 11} - - {address: 89.97.200.254, rtt: 1.1897270679473877, sport: 57884, ttl: 12} - - {address: 62.101.124.65, rtt: 1.1932711601257324, sport: 57884, ttl: 13} -test_udp_traceroute: - hops_0: [] - hops_123: - - {address: 10.0.1.1, rtt: 2.8643651008605957, sport: 29598, ttl: 1} - - {address: 10.72.240.1, rtt: 2.9663000106811523, sport: 29598, ttl: 2} - - {address: 10.1.231.154, rtt: 2.985211133956909, sport: 29598, ttl: 3} - - {address: 10.251.161.201, rtt: 3.0045831203460693, sport: 29598, ttl: 4} - - {address: 10.251.156.26, rtt: 3.018602132797241, sport: 29598, ttl: 5} - - {address: 10.251.157.1, rtt: 3.0379550457000732, sport: 29598, ttl: 6} - - {address: 10.247.125.85, rtt: 3.0577399730682373, sport: 29598, ttl: 7} - - {address: 10.251.161.194, rtt: 3.071830987930298, sport: 29598, ttl: 8} - - {address: 10.103.124.5, rtt: 3.096630096435547, sport: 29598, ttl: 9} - - {address: 10.1.128.61, rtt: 3.110487937927246, sport: 29598, ttl: 10} - - {address: 10.254.11.77, rtt: 3.159827947616577, sport: 29598, ttl: 11} - - {address: 89.97.200.106, rtt: 3.1841320991516113, sport: 29598, ttl: 12} - - {address: 89.97.200.254, rtt: 3.221647024154663, sport: 29598, ttl: 13} - - {address: 89.96.200.126, rtt: 3.2409000396728516, sport: 29598, ttl: 14} - hops_22: - - {address: 10.0.1.1, rtt: 1.3334949016571045, sport: 15233, ttl: 1} - - {address: 10.1.231.154, rtt: 1.4409840106964111, sport: 15233, ttl: 2} - - {address: 10.72.240.1, rtt: 1.4585249423980713, sport: 15233, ttl: 3} - - {address: 10.251.161.201, rtt: 1.482278823852539, sport: 15233, ttl: 4} - - {address: 10.251.156.26, rtt: 1.5005879402160645, sport: 15233, ttl: 5} - - {address: 10.251.157.1, rtt: 1.531883955001831, sport: 15233, ttl: 6} - - {address: 10.247.125.85, rtt: 1.5560660362243652, sport: 15233, ttl: 7} - - {address: 10.251.161.194, rtt: 1.5865838527679443, sport: 15233, ttl: 8} - - {address: 10.103.124.5, rtt: 1.6111359596252441, sport: 15233, ttl: 9} - - {address: 10.1.128.61, rtt: 1.6353850364685059, sport: 15233, ttl: 10} - - {address: 10.254.11.77, rtt: 1.6537768840789795, sport: 15233, ttl: 11} - - {address: 89.97.200.106, rtt: 1.6786339282989502, sport: 15233, ttl: 12} - - {address: 89.97.200.254, rtt: 1.7631969451904297, sport: 15233, ttl: 13} - - {address: 89.96.200.126, rtt: 1.7871499061584473, sport: 15233, ttl: 14} - hops_23: - - {address: 10.0.1.1, rtt: 1.6981499195098877, sport: 43782, ttl: 1} - - {address: 10.72.240.1, rtt: 1.8316938877105713, sport: 43782, ttl: 2} - - {address: 10.1.231.154, rtt: 1.8493030071258545, sport: 43782, ttl: 3} - - {address: 10.251.161.201, rtt: 1.878938913345337, sport: 43782, ttl: 4} - - {address: 10.251.156.26, rtt: 1.9026379585266113, sport: 43782, ttl: 5} - - {address: 10.251.157.1, rtt: 1.9251139163970947, sport: 43782, ttl: 6} - - {address: 10.247.125.85, rtt: 1.9485108852386475, sport: 43782, ttl: 7} - - {address: 10.251.161.194, rtt: 1.9832098484039307, sport: 43782, ttl: 8} - - {address: 10.103.124.5, rtt: 2.0001959800720215, sport: 43782, ttl: 9} - - {address: 10.1.128.61, rtt: 2.0243330001831055, sport: 43782, ttl: 10} - - {address: 10.254.11.77, rtt: 2.047346830368042, sport: 43782, ttl: 11} - - {address: 89.97.200.106, rtt: 2.070168972015381, sport: 43782, ttl: 12} - - {address: 89.97.200.254, rtt: 2.1522560119628906, sport: 43782, ttl: 13} - - {address: 62.101.124.65, rtt: 2.9604408740997314, sport: 43782, ttl: 14} - hops_443: - - {address: 10.0.1.1, rtt: 3.1613810062408447, sport: 15782, ttl: 1} - - {address: 10.72.240.1, rtt: 3.2684850692749023, sport: 15782, ttl: 2} - - {address: 10.1.231.154, rtt: 3.2818000316619873, sport: 15782, ttl: 3} - - {address: 10.251.161.201, rtt: 3.300002098083496, sport: 15782, ttl: 4} - - {address: 10.251.156.26, rtt: 3.323151111602783, sport: 15782, ttl: 5} - - {address: 10.251.157.1, rtt: 3.3413009643554688, sport: 15782, ttl: 6} - - {address: 10.247.125.85, rtt: 3.359462022781372, sport: 15782, ttl: 7} - - {address: 10.251.161.194, rtt: 3.377542018890381, sport: 15782, ttl: 8} - - {address: 10.103.124.5, rtt: 3.396583080291748, sport: 15782, ttl: 9} - - {address: 10.1.128.61, rtt: 3.4149301052093506, sport: 15782, ttl: 10} - - {address: 10.254.11.77, rtt: 3.4378039836883545, sport: 15782, ttl: 11} - - {address: 89.97.200.106, rtt: 3.4557440280914307, sport: 15782, ttl: 12} - - {address: 89.97.200.254, rtt: 3.5199360847473145, sport: 15782, ttl: 13} - - {address: 62.101.124.65, rtt: 3.5376710891723633, sport: 15782, ttl: 14} - hops_53: - - {address: 10.0.1.1, rtt: 2.0826339721679688, sport: 9222, ttl: 1} - - {address: 10.1.231.154, rtt: 2.1999151706695557, sport: 9222, ttl: 2} - - {address: 10.251.161.201, rtt: 2.2224841117858887, sport: 9222, ttl: 3} - - {address: 10.251.156.26, rtt: 2.2450520992279053, sport: 9222, ttl: 4} - - {address: 10.251.157.1, rtt: 2.267009973526001, sport: 9222, ttl: 5} - - {address: 10.247.125.85, rtt: 2.2895491123199463, sport: 9222, ttl: 6} - - {address: 10.72.240.1, rtt: 2.4096531867980957, sport: 9222, ttl: 7} - - {address: 10.251.161.194, rtt: 2.425421953201294, sport: 9222, ttl: 8} - - {address: 10.103.124.5, rtt: 2.441133975982666, sport: 9222, ttl: 9} - - {address: 10.1.128.61, rtt: 2.457381010055542, sport: 9222, ttl: 10} - - {address: 10.254.11.77, rtt: 2.4967970848083496, sport: 9222, ttl: 11} - - {address: 89.97.200.106, rtt: 2.5189261436462402, sport: 9222, ttl: 12} - - {address: 89.97.200.254, rtt: 2.550632953643799, sport: 9222, ttl: 13} - - {address: 72.14.211.89, rtt: 2.5663211345672607, sport: 9222, ttl: 14} - - {address: 209.85.241.94, rtt: 2.582092046737671, sport: 9222, ttl: 15} - - {address: 89.96.200.126, rtt: 2.5982320308685303, sport: 9222, ttl: 16} - - {address: 72.14.232.76, rtt: 2.661022186279297, sport: 9222, ttl: 17} - - {address: 209.85.254.112, rtt: 2.7243690490722656, sport: 9222, ttl: 18} - hops_65535: - - {address: 10.0.1.1, rtt: 3.7303781509399414, sport: 10991, ttl: 1} - - {address: 10.72.240.1, rtt: 3.7946829795837402, sport: 10991, ttl: 2} - - {address: 10.1.231.154, rtt: 3.8064370155334473, sport: 10991, ttl: 3} - - {address: 10.251.161.201, rtt: 3.8219411373138428, sport: 10991, ttl: 4} - - {address: 10.251.156.26, rtt: 3.8330190181732178, sport: 10991, ttl: 5} - - {address: 10.251.157.1, rtt: 3.8488430976867676, sport: 10991, ttl: 6} - - {address: 10.247.125.85, rtt: 3.864877939224243, sport: 10991, ttl: 7} - - {address: 10.251.161.194, rtt: 3.9216160774230957, sport: 10991, ttl: 8} - - {address: 10.103.124.5, rtt: 3.9326281547546387, sport: 10991, ttl: 9} - - {address: 10.1.128.61, rtt: 3.9524900913238525, sport: 10991, ttl: 10} - - {address: 10.254.11.77, rtt: 3.9684531688690186, sport: 10991, ttl: 11} - - {address: 89.97.200.106, rtt: 3.9926950931549072, sport: 10991, ttl: 12} - - {address: 89.97.200.254, rtt: 4.027745008468628, sport: 10991, ttl: 13} - - {address: 89.96.200.46, rtt: 4.04297399520874, sport: 10991, ttl: 14} - hops_80: - - {address: 10.0.1.1, rtt: 2.4942288398742676, sport: 23951, ttl: 1} - - {address: 10.1.231.154, rtt: 2.584718942642212, sport: 23951, ttl: 2} - - {address: 10.72.240.1, rtt: 2.5997419357299805, sport: 23951, ttl: 3} - - {address: 10.251.161.201, rtt: 2.6360549926757812, sport: 23951, ttl: 4} - - {address: 10.251.156.26, rtt: 2.6616249084472656, sport: 23951, ttl: 5} - - {address: 10.251.157.1, rtt: 2.6992008686065674, sport: 23951, ttl: 6} - - {address: 10.247.125.85, rtt: 2.7195730209350586, sport: 23951, ttl: 7} - - {address: 10.251.161.194, rtt: 2.745745897293091, sport: 23951, ttl: 8} - - {address: 10.103.124.5, rtt: 2.7869420051574707, sport: 23951, ttl: 9} - - {address: 10.1.128.61, rtt: 2.8128459453582764, sport: 23951, ttl: 10} - - {address: 10.254.11.77, rtt: 2.838701009750366, sport: 23951, ttl: 11} - - {address: 89.97.200.106, rtt: 2.853529930114746, sport: 23951, ttl: 12} - - {address: 89.97.200.254, rtt: 2.945657968521118, sport: 23951, ttl: 13} - - {address: 89.96.200.46, rtt: 2.9657039642333984, sport: 23951, ttl: 14} - hops_8080: - - {address: 10.0.1.1, rtt: 3.457942008972168, sport: 18840, ttl: 1} - - {address: 10.72.240.1, rtt: 3.5681920051574707, sport: 18840, ttl: 2} - - {address: 10.1.231.154, rtt: 3.5803709030151367, sport: 18840, ttl: 3} - - {address: 10.251.161.201, rtt: 3.5968568325042725, sport: 18840, ttl: 4} - - {address: 10.251.156.26, rtt: 3.6134979724884033, sport: 18840, ttl: 5} - - {address: 10.251.157.1, rtt: 3.62577486038208, sport: 18840, ttl: 6} - - {address: 10.247.125.85, rtt: 3.6425728797912598, sport: 18840, ttl: 7} - - {address: 10.251.161.194, rtt: 3.659623861312866, sport: 18840, ttl: 8} - - {address: 10.103.124.5, rtt: 3.6761529445648193, sport: 18840, ttl: 9} - - {address: 10.1.128.61, rtt: 3.6931769847869873, sport: 18840, ttl: 10} - - {address: 10.254.11.77, rtt: 3.7094268798828125, sport: 18840, ttl: 11} - - {address: 89.97.200.106, rtt: 3.731276035308838, sport: 18840, ttl: 12} - - {address: 89.97.200.254, rtt: 3.7874269485473633, sport: 18840, ttl: 13} - - {address: 89.96.200.134, rtt: 3.823248863220215, sport: 18840, ttl: 14} -timeout: 5 -... +{ + "bucket_date": "2015-11-13", + "data_format_version": "0.2.0", + "id": "ea9f588b-49ca-4261-babf-0111307877c4", + "input": null, + "options": [], + "probe_asn": "AS8048", + "probe_cc": "VE", + "probe_ip": "127.0.0.1", + "report_filename": "2015-11-13/20151113T104654Z-VE-AS8048-multi_protocol_traceroute-iq0hFnbx4ex7bAvysJBenb9uJAuh7LT02BhDrvIhK6Lpwe7PdCvJ7BHFzm4voYe7-0.1.0-probe.json", + "report_id": "iq0hFnbx4ex7bAvysJBenb9uJAuh7LT02BhDrvIhK6Lpwe7PdCvJ7BHFzm4voYe7", + "software_name": "ooniprobe", + "software_version": "1.3.1", + "test_helpers": { + "backend": "213.138.109.232" + }, + "backend_version": "1.1.4", + "input_hashes": [], + "probe_city": null, + "test_keys": { + "answer_flags": [ + "ipsrc" + ], + "answered_packets": [ + { + "raw_packet": { + "data": "RcAAOFqPAAAwAeD/1Ypt6AoAAQQDA6VKAAAAAEUAABxEnwAAAREmvAoAAQTVim3oXIYAFgAI+w0=", + "format": "base64" + }, + "summary": "[<IP version=4L ihl=5L tos=0xc0 len=56 id=23183 flags= frag=0L ttl=48 proto=icmp chksum=0xe0ff src=213.138.109.232 dst=10.0.1.4 options=[] |<ICMP type=dest-unreach code=port-unreachable chksum=0xa54a unused=0 |<IPerror version=4L ihl=5L tos=0x0 len=28 id=17567 flags= frag=0L ttl=1 proto=udp chksum=0x26bc src=10.0.1.4 dst=213.138.109.232 options=[] |<UDPerror sport=23686 dport=ssh len=8 chksum=0xfb0d |>>>>]" + }, + { + "raw_packet": { + "data": "RQAAOBGSAAD/AZQuCgABAQoAAQQLAEOQAAAAAEUAABzCWAAAARGpAgoAAQTVim3ocGMAFwAIQO0=", + "format": "base64" + }, + "summary": "[<IP version=4L ihl=5L tos=0x0 len=56 id=4498 flags= frag=0L ttl=255 proto=icmp chksum=0x942e src=10.0.1.1 dst=10.0.1.4 options=[] |<ICMP type=time-exceeded code=ttl-zero-during-transit chksum=0x4390 unused=0 |<IPerror version=4L ihl=5L tos=0x0 len=28 id=49752 flags= frag=0L ttl=1 proto=udp chksum=0xa902 src=10.0.1.4 dst=213.138.109.232 options=[] |<UDPerror sport=28771 dport=telnet len=8 chksum=0x40ed |>>>>]" + }, + { + "raw_packet": { + "data": "RcAAOD57AADvAetXW986TwoAAQQLAJ1NAAAAAEUAABwySQAAARE5EgoAAQTVim3ogEgANQAI1yw=", + "format": "base64" + }, + "summary": "[<IP version=4L ihl=5L tos=0xc0 len=56 id=15995 flags= frag=0L ttl=239 proto=icmp chksum=0xeb57 src=91.223.58.79 dst=10.0.1.4 options=[] |<ICMP type=time-exceeded code=ttl-zero-during-transit chksum=0x9d4d unused=0 |<IPerror version=4L ihl=5L tos=0x0 len=28 id=12873 flags= frag=0L ttl=1 proto=udp chksum=0x3912 src=10.0.1.4 dst=213.138.109.232 options=[] |<UDPerror sport=32840 dport=domain len=8 chksum=0xd72c |>>>>]" + }, + { + "raw_packet": { + "data": "RcAAOCLEAAAwARjL1Ypt6AoAAQQDA6VKAAAAAEUAABwa6wAACxFGcAoAAQTVim3oZO4AFgAI8qU=", + "format": "base64" + }, + "summary": "[<IP version=4L ihl=5L tos=0xc0 len=56 id=8900 flags= frag=0L ttl=48 proto=icmp chksum=0x18cb src=213.138.109.232 dst=10.0.1.4 options=[] |<ICMP type=dest-unreach code=port-unreachable chksum=0xa54a unused=0 |<IPerror version=4L ihl=5L tos=0x0 len=28 id=6891 flags= frag=0L ttl=11 proto=udp chksum=0x4670 src=10.0.1.4 dst=213.138.109.232 options=[] |<UDPerror sport=25838 dport=ssh len=8 chksum=0xf2a5 |>>>>]" + }, + { + "raw_packet": { + "data": "RQAAOBGYAAD/AZQoCgABAQoAAQQLAEOQAAAAAEUAABxnSAAAAREEEwoAAQTVim3oU6f//wAIXcA=", + "format": "base64" + }, + "summary": "[<IP version=4L ihl=5L tos=0x0 len=56 id=4504 flags= frag=0L ttl=255 proto=icmp chksum=0x9428 src=10.0.1.1 dst=10.0.1.4 options=[] |<ICMP type=time-exceeded code=ttl-zero-during-transit chksum=0x4390 unused=0 |<IPerror version=4L ihl=5L tos=0x0 len=28 id=26440 flags= frag=0L ttl=1 proto=udp chksum=0x413 src=10.0.1.4 dst=213.138.109.232 options=[] |<UDPerror sport=21415 dport=65535 len=8 chksum=0x5dc0 |>>>>]" + }, + { + "raw_packet": { + "data": "RcAAOEz9AADvAdzVW986TwoAAQQLAJ1NAAAAAEUAABxiIAAAAREJOwoAAQTVim3o9N4fkAAIQzs=", + "format": "base64" + }, + "summary": "[<IP version=4L ihl=5L tos=0xc0 len=56 id=19709 flags= frag=0L ttl=239 proto=icmp chksum=0xdcd5 src=91.223.58.79 dst=10.0.1.4 options=[] |<ICMP type=time-exceeded code=ttl-zero-during-transit chksum=0x9d4d unused=0 |<IPerror version=4L ihl=5L tos=0x0 len=28 id=25120 flags= frag=0L ttl=1 proto=udp chksum=0x93b src=10.0.1.4 dst=213.138.109.232 options=[] |<UDPerror sport=62686 dport=http_alt len=8 chksum=0x433b |>>>>]" + }, + { + "raw_packet": { + "data": "RcAAOHZYAADvAbN6W986TwoAAQQLAJ1NAAAAAEUAABwZDgAAARFSTQoAAQTVim3ou3kAUAAIm+A=", + "format": "base64" + }, + "summary": "[<IP version=4L ihl=5L tos=0xc0 len=56 id=30296 flags= frag=0L ttl=239 proto=icmp chksum=0xb37a src=91.223.58.79 dst=10.0.1.4 options=[] |<ICMP type=time-exceeded code=ttl-zero-during-transit chksum=0x9d4d unused=0 |<IPerror version=4L ihl=5L tos=0x0 len=28 id=6414 flags= frag=0L ttl=1 proto=udp chksum=0x524d src=10.0.1.4 dst=213.138.109.232 options=[] |<UDPerror sport=47993 dport=http len=8 chksum=0x9be0 |>>>>]" + }, + { + "raw_packet": { + "data": "RQAAqAJHAAD5AalDCpYAMQoAAQQLAH/9AAAABEUAABxL8AAAAhEeawoAAQTVim3oxtsAFgAIkLiqqgAWAAjHuqqqABYACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAD5AwAIAQED8+H/", + "format": "base64" + }, + "summary": "[<IP version=4L ihl=5L tos=0x0 len=168 id=583 flags= frag=0L ttl=249 proto=icmp chksum=0xa943 src=10.150.0.49 dst=10.0.1.4 options=[] |<ICMP type=time-exceeded code=ttl-zero-during-transit chksum=0x7ffd unused=4 |<IPerror version=4L ihl=5L tos=0x0 len=28 id=19440 flags= frag=0L ttl=2 proto=udp chksum=0x1e6b src=10.0.1.4 dst=213.138.109.232 options=[] |<UDPerror sport=50907 dport=ssh len=8 chksum=0x90b8 |<Padding load='\\xaa\\xaa\\x00\\x16\\x00\\x08\\xc7\\xba\\xaa\\xaa\\x00\\x16\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 \\x00\\xf9\\x03\\x00\\x08\\x01\\x01\\x03\ \xf3\\xe1\\xff' |>>>>>]" + }, + { + "raw_packet": { + "data": "RQAAOFaJAAD4AVoOx6g/gQoAAQQLAJ1NAAAAAEUAABw/wAAAARErmwoAAQTVim3o3yEAFgAIeHI=", + "format": "base64" + }, + "summary": "[<IP version=4L ihl=5L tos=0x0 len=56 id=22153 flags= frag=0L ttl=248 proto=icmp chksum=0x5a0e src=199.168.63.129 dst=10.0.1.4 options=[] |<ICMP type=time-exceeded code=ttl-zero-during-transit chksum=0x9d4d unused=0 |<IPerror version=4L ihl=5L tos=0x0 len=28 id=16320 flags= frag=0L ttl=1 proto=udp chksum=0x2b9b src=10.0.1.4 dst=213.138.109.232 options=[] |<UDPerror sport=57121 dport=ssh len=8 chksum=0x7872 |>>>>]" + } + ], + "sent_packets": [ + { + "raw_packet": { + "data": "RQAAKIc9AAABBuQcCgABBNWKbeiRQgAAAACVawAAAABQAiAAGr4AAA==", + "format": "base64" + }, + "summary": "[<IP id=34621 frag=0 ttl=1 proto=tcp dst=213.138.109.232 |<TCP sport=37186 dport=0 seq=38251 flags=S |>>]" + }, + { + "raw_packet": { + "data": "RQAAKADhAAABBmp5CgABBNWKbehsSAAWAACbxwAAAABQAiAAOUYAAA==", + "format": "base64" + }, + "summary": "[<IP id=225 frag=0 ttl=1 proto=tcp dst=213.138.109.232 |<TCP sport=27720 dport=ssh seq=39879 flags=S |>>]" + }, + { + "raw_packet": { + "data": "RQAAKO9JAAABBnwQCgABBNWKbeg1bwAXAAApTwAAAABQAiAA4pYAAA==", + "format": "base64" + }, + "summary": "[<IP id=61257 frag=0 ttl=1 proto=tcp dst=213.138.109.232 |<TCP sport=13679 dport=telnet seq=10575 flags=S |>>]" + }, + { + "raw_packet": { + "data": "RQAAKNKoAAABBpixCgABBNWKbeixRwA1AABobwAAAABQAiAAJ4AAAA==", + "format": "base64" + }, + "summary": "[<IP id=53928 frag=0 ttl=1 proto=tcp dst=213.138.109.232 |<TCP sport=45383 dport=domain seq=26735 flags=S |>>]" + }, + { + "raw_packet": { + "data": "RQAAKPzTAAABBm6GCgABBNWKbejCJwBQAACA3wAAAABQAiAA/hQAAA==", + "format": "base64" + }, + "summary": "[<IP id=64723 frag=0 ttl=1 proto=tcp dst=213.138.109.232 |<TCP sport=49703 dport=http seq=32991 flags=S |>>]" + }, + { + "raw_packet": { + "data": "RQAAKNzQAAABBo6JCgABBNWKbejZyAB7AAD+NQAAAABQAiAAaPIAAA==", + "format": "base64" + }, + "summary": "[<IP id=56528 frag=0 ttl=1 proto=tcp dst=213.138.109.232 |<TCP sport=55752 dport=ntp seq=65077 flags=S |>>]" + } + ], + "test_icmp_traceroute": { + "hops": [ + { + "address": "141.136.98.238", + "rtt": 2.039386034, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.2439029217, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4453678131, + "ttl": 12 + } + ] + }, + "test_tcp_traceroute": { + "hops_0": [ + { + "address": "141.136.98.238", + "rtt": 2.0464248657, + "sport": 34854, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.2470018864, + "sport": 10415, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4521570206, + "sport": 0, + "ttl": 12 + } + ], + "hops_123": [ + { + "address": "141.136.98.238", + "rtt": 2.0381779671, + "sport": 50988, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.240860939, + "sport": 7867, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4443869591, + "sport": 123, + "ttl": 12 + } + ], + "hops_22": [ + { + "address": "141.136.98.238", + "rtt": 2.0354959965, + "sport": 36980, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.2357189655, + "sport": 26447, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4381670952, + "sport": 22, + "ttl": 12 + } + ], + "hops_23": [ + { + "address": "141.136.98.238", + "rtt": 2.0388379097, + "sport": 4690, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.2384901047, + "sport": 51177, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4421479702, + "sport": 23, + "ttl": 12 + } + ], + "hops_443": [ + { + "address": "141.136.98.238", + "rtt": 2.0386300087, + "sport": 11218, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.240696907, + "sport": 26319, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4430809021, + "sport": 443, + "ttl": 12 + } + ], + "hops_53": [ + { + "address": "141.136.98.238", + "rtt": 2.0381169319, + "sport": 36901, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.2402248383, + "sport": 60900, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4425189495, + "sport": 53, + "ttl": 12 + } + ], + "hops_65535": [ + { + "address": "141.136.98.238", + "rtt": 2.0387971401, + "sport": 57248, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.2455801964, + "sport": 52285, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4457411766, + "sport": 65535, + "ttl": 12 + } + ], + "hops_80": [ + { + "address": "141.136.108.130", + "rtt": 1.8421959877, + "sport": 23745, + "ttl": 9 + }, + { + "address": "141.136.98.238", + "rtt": 2.0382699966, + "sport": 22618, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.2403969765, + "sport": 45566, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4452321529, + "sport": 80, + "ttl": 12 + } + ], + "hops_8080": [ + { + "address": "141.136.98.238", + "rtt": 2.0389461517, + "sport": 57892, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.2410969734, + "sport": 51593, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4440560341, + "sport": 8080, + "ttl": 12 + } + ] + }, + "test_udp_traceroute": { + "hops_0": [], + "hops_123": [ + { + "address": "141.136.108.130", + "rtt": 1.920017004, + "sport": 57583, + "ttl": 9 + }, + { + "address": "91.223.58.79", + "rtt": 2.24168396, + "sport": 18721, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4463579655, + "sport": 25517, + "ttl": 12 + } + ], + "hops_22": [ + { + "address": "141.136.108.130", + "rtt": 1.9136769772, + "sport": 45625, + "ttl": 9 + }, + { + "address": "141.136.98.238", + "rtt": 2.0372998714, + "sport": 50609, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.2419588566, + "sport": 14160, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4428777695, + "sport": 23686, + "ttl": 12 + } + ], + "hops_23": [ + { + "address": "141.136.108.130", + "rtt": 1.9202280045, + "sport": 58718, + "ttl": 9 + }, + { + "address": "141.136.98.238", + "rtt": 2.0369830132, + "sport": 39310, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.2406070232, + "sport": 9348, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4436769485, + "sport": 56507, + "ttl": 12 + } + ], + "hops_443": [ + { + "address": "141.136.108.130", + "rtt": 1.9194400311, + "sport": 61062, + "ttl": 9 + }, + { + "address": "141.136.98.238", + "rtt": 2.0356152058, + "sport": 57814, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.2425971031, + "sport": 36493, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4469130039, + "sport": 20708, + "ttl": 12 + } + ], + "hops_53": [ + { + "address": "141.136.108.130", + "rtt": 1.9192700386, + "sport": 63309, + "ttl": 9 + }, + { + "address": "141.136.98.238", + "rtt": 2.0371799469, + "sport": 44259, + "ttl": 10 + }, + { + "address": "91.223.58.79", + "rtt": 2.2417399883, + "sport": 32840, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4441540241, + "sport": 6946, + "ttl": 12 + } + ], + "hops_65535": [ + { + "address": "141.136.108.130", + "rtt": 1.9188029766, + "sport": 16637, + "ttl": 9 + }, + { + "address": "91.223.58.79", + "rtt": 2.2441849709, + "sport": 56282, + "ttl": 11 + } + ], + "hops_80": [ + { + "address": "141.136.108.130", + "rtt": 1.9194018841, + "sport": 26666, + "ttl": 9 + }, + { + "address": "91.223.58.79", + "rtt": 2.2409110069, + "sport": 47993, + "ttl": 11 + }, + { + "address": "213.138.109.232", + "rtt": 2.4452769756, + "sport": 43930, + "ttl": 12 + } + ], + "hops_8080": [ + { + "address": "141.136.108.130", + "rtt": 1.9188380241, + "sport": 53083, + "ttl": 9 + }, + { + "address": "91.223.58.79", + "rtt": 2.2436709404, + "sport": 62686, + "ttl": 11 + } + ] + } + }, + "test_name": "multi_protocol_traceroute", + "test_runtime": 57.7884280682, + "test_start_time": "2015-11-13 10:46:54", + "test_version": "0.3" +} ``` # Privacy considerations diff --git a/test-specs/ts-010-captive-portal.md b/test-specs/ts-010-captive-portal.md index 00ed14b..ae469f2 100644 --- a/test-specs/ts-010-captive-portal.md +++ b/test-specs/ts-010-captive-portal.md @@ -1,10 +1,10 @@ # Specification version number - 2014-05-11-000 +0.2.0 # Specification name - Captive portal test. +Captive portal test. # Test preconditions @@ -12,11 +12,11 @@ # Expected impact - The ability to detect a captive portal. +The ability to detect a captive portal. # Test description - The test is split in four smaller tests: +The test is split in four smaller tests: 1. Http test that compares a requested document against the control one (vendor_tests). 2. DNS test that checks a NXDOMAIN response to random hostnames requests (part of the vendor_dns_tests). @@ -25,12 +25,13 @@ # Expected output - Relevant data to think about the existence of a captive portal grouped between the http and dns tests. +Relevant data to think about the existence of a captive portal grouped between the http and dns tests. ## Parent data format - df-001-httpt.md - df-002-dnst.md +df-001-httpt + +df-002-dnst ## Required output data @@ -40,47 +41,91 @@ ## Semantics - In addition to the data specified in the parent data format, the following fields are added to the report. +In addition to the data specified in the parent data format, the following fields are added to the report. - Version 0.2: +Version 0.2: - vendor_dns_tests: - google_dns_cp: set(IP address(es) of the random hostnames that don't resolve to NXDOMAIN) - ms_dns_cp: [IP address of the requested domain name] +``` +{ + "vendor_dns_tests": { + "google_dns_cp": [ + "IP address(es) of the random hostnames that don't resolve " + "to NXDOMAIN" + ], + "ms_dns_cp": [ + "IP address of the requested domain name" + ] + }, - vendor_tests: - result: true|false - vt: [URL, http_status_summary, http_status_number, User_Agent, name_test] + "vendor_tests": { + "result": "true|false" + "vt": [ + "URL", + "http_status_summary", + "http_status_number", + "User_Agent", + "name_test" + ] + }, - check0x20: - (name_match, serial_match, querynames, answernames, SOA_serials) + "check0x20": [ + ["name_match", "serial_match", "querynames", "answernames", "SOA_serials"] + ] +} +``` - Version 0.3: +Version 0.3: - vendor_dns_tests: - google_dns_cp: - result: true|false - addresses: set(IP address(es) of the random hostnames that don't resolve to NXDOMAIN) +``` +{ + "vendor_dns_tests": { + "google_dns_cp": { + "result": "true|false" + "addresses": [ + "IP address(es) of the random hostnames that don't resolve to NXDOMAIN" + ] + } + "ms_dns_cp": { + "result": "true|false" + "address": "IP address of the requested domain name" + } + }, - ms_dns_cp: - result: true|false - address: IP address of the requested domain name + "vendor_tests": { + "MS HTTP Captive Portal": { + "result": "true|false", + "url": "string", + "http_status_summary": "string", + "http_status_number": "number", + "User_Agent": "string" + }, + "W3 Captive Portal": { + "result": "true|false", + "url": "string", + "http_status_summary": "string", + "http_status_number": "number", + "User_Agent": "string" + }, + "Apple HTTP Captive Portal": { + "result": "true|false", + "url": "string", + "http_status_summary": "string", + "http_status_number": "number", + "User_Agent": "string" + } + }, - vendor_tests: - name_test: string - result: true|false - url: string - http_status_summary: string - http_status_number: number - User_Agent: string + "check0x20": { + "result": "true|false", + "name_match": "true|false" + "serial_match": "true|false" + "querynames": ["domain names of requested hostnames"] + "answernames": ["domain names of answered requests"] + "SOA_serials": ["serials of the DNSs zones of the requested queries"] + } - check0x20: - result: true|false - name_match: true|false - serial_match: true|false - querynames: [domain names of requested hostnames] - answernames: [domain names of answered requests] - SOA_serials: [serials of the DNSs zones of the requested queries] +} +``` ## Possible conclusions @@ -88,6 +133,8 @@ ## Example output sample +XXX update this + ########################################### # OONI Probe Report for captiveportal (0.2) # Sun May 11 16:39:09 2014 diff --git a/test-specs/ts-011-bridge-reachability.md b/test-specs/ts-011-bridge-reachability.md index e1f9caf..1fd1106 100644 --- a/test-specs/ts-011-bridge-reachability.md +++ b/test-specs/ts-011-bridge-reachability.md @@ -1,6 +1,6 @@ # Specification version number -2014-08-06-001 +0.2.0 # Specification name @@ -24,24 +24,31 @@ applicable). They should be in a flat text file one per line in the format: - IP:ORPort +``` +IP:ORPort +``` Example: - 203.0.113.27:1828 - 198.51.100.45:9045 +``` +203.0.113.27:1828 +198.51.100.45:9045 +``` -For normal Tor bridges. +For vanilla Tor bridges. For pluggable transport bridges the format is: - TransportType IP:ORPort +``` +TransportType IP:ORPort +``` Example: - - obfs2 203.0.113.27:1828 - obfs3 198.51.100.45:9045 +``` +obfs2 203.0.113.27:1828 +obfs3 198.51.100.45:9045 +``` # Test description @@ -100,7 +107,7 @@ timeout: transport_name: **string** indicating the name of transport name used by the bridge. - + vanilla: a regular, non pluggable transport, bridge. obfs2: for [obfs2 obfsproxy](https://gitweb.torproject.org/pluggable-transports/obfsproxy.git…. @@ -119,7 +126,7 @@ tor_version: tor_progress: **integer** indicating the percentage of tor bootstrapping at which we stopped. - + tor_progress_tag: **string** a string giving a textual description of what the progress percentage means. @@ -147,6 +154,8 @@ ones are not. ## Example output sample +XXX update this + ``` ########################################### # OONI Probe Report for bridge_reachability (0.1) diff --git a/test-specs/ts-012-dns-injection.md b/test-specs/ts-012-dns-injection.md index c24a2ee..293a086 100644 --- a/test-specs/ts-012-dns-injection.md +++ b/test-specs/ts-012-dns-injection.md @@ -1,6 +1,6 @@ # Specification version number -2014-12-09-001 +0.2.0 # Specification name

1 0

[spec/master] Fix version numbers for compatibility information of the oonibackend
by art＠torproject.org 09 May '16

09 May '16

commit 7b01d537ace09fb6a5de6ceaa1954a215cad3a5f Author: Arturo Filastò <arturo(a)filasto.net> Date: Fri Apr 22 13:28:32 2016 +0200 Fix version numbers for compatibility information of the oonibackend --- oonib.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/oonib.md b/oonib.md index 036aa7d..b0483c8 100644 --- a/oonib.md +++ b/oonib.md @@ -86,7 +86,7 @@ The HTTP request it performs is: related to prefixed by "AS" (ex. "AS1234") 'probe_cc': - NEW since oonibackend 1.3 + NEW since oonibackend 1.2.0 `string` the two-letter country code of the probe as defined in ISO3166-1 alpha-2 or ZZ when undefined (ex. "IT") @@ -99,12 +99,12 @@ The HTTP request it performs is: `string` the version of the test peforming the network measurement. 'data_format_version': - NEW since oonibackend 1.3 + NEW since oonibackend 1.2.0 `string` that must be either "json" or "yaml" to identify the format of the content. 'test_start_time': - NEW since oonibackend 1.3 + NEW since oonibackend 1.2.0 `string` timestamp in UTC of when the test was started using the format "%Y-%m-%d %H:%M:%S" 'input_hashes': @@ -117,7 +117,7 @@ The HTTP request it performs is: (optional) `string` the name of the required test_helper for this test. 'content': - DEPRECATED since oonibackend 1.3 + DEPRECATED since oonibackend 1.2.0 (optional) `string` it is optionally possible to create a report with already some data inside of it. @@ -130,7 +130,7 @@ The HTTP request it performs is: 'format': `string` that must be either "json" or "yaml" to identify the format of the content. - New since version 0.2.0 of the data format or 1.2 of the backend. + New since version 0.2.0 of the data format or 1.2.0 of the backend. } @@ -152,7 +152,7 @@ backend software like follows: (conditional) `string` the address of a test helper that the client requested. 'supported_formats': - NEW since oonibackend 1.3 + NEW since oonibackend 1.2.0 `list` of strings detailing what are the supported formats for submitted reports. Can either be "json" or "yaml".

1 0

[spec/master] Fix lantern test spec
by art＠torproject.org 09 May '16

09 May '16

commit 09109349ffb15f0ecd382c4257a38362273f6185 Author: anadahz <kojgelo(a)inbox.com> Date: Mon Dec 21 02:30:18 2015 +0100 Fix lantern test spec Upstream has changed the executable name and log output. --- test-specs/ts-012-lantern.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/test-specs/ts-012-lantern.md b/test-specs/ts-012-lantern.md index 4aa1f07..508bdfc 100644 --- a/test-specs/ts-012-lantern.md +++ b/test-specs/ts-012-lantern.md @@ -8,7 +8,7 @@ Lantern Test # Test preconditions -Downloaded or compiled the "lantern_linux" binary and made executable and in +Downloaded or compiled the "lantern" binary and made executable and in the users PATH environment variable. # Expected impact @@ -28,7 +28,7 @@ if it has bootstrapped. After bootstrap, it fetches the URL supplied by the --url option using Lanterns http proxy interface listening on 127.0.0.1.8787. The specific string used to determine bootstrap from Lantern output in version -"0.0.1" is "client (http) proxy at" from standard output. +"2.0.10" is "Connected to proxy on localhost" from standard output. # Expected output @@ -41,7 +41,7 @@ None. success: **boolean** The bootstrap status of Lantern (success or failure). -lantern_linux --headless: +lantern --headless: **dictionary** the parent key of Lanterns output that contains the keys stdout and stderr stdout: @@ -64,7 +64,7 @@ failure: 'success' - True or False - whether Lantern has bootstrapped. 'body' - http page body if successfully requested. 'failure' - optional, present if there is a failure. -'lantern_linux --headless': +'lantern --headless': 'stdout' - Contents of standard output produced by Lantern. 'stderr' - Contents of standard error produced by Lantern. @@ -95,7 +95,7 @@ body: "<HTML><HEAD><meta http-equiv=\"content-type\" content=\"text/html;charset <A HREF=\"http://www.google.com/\">here</A>.\r\n</BODY></HTML>\r\n" bootstrapped: true input: null -lantern_linux --headless: {exit_reason: process_done, stderr: '', stdout: ''} +lantern --headless: {exit_reason: process_done, stderr: '', stdout: ''} ``` ## Expected Post-processing efforts

1 0

[spec/master] Align version of the oonib specification to the version of the backend.
by art＠torproject.org 09 May '16

09 May '16

commit 7695a43969611482f8182110b2bc4acc9d011c75 Author: Arturo Filastò <arturo(a)filasto.net> Date: Fri Feb 5 15:14:49 2016 +0100 Align version of the oonib specification to the version of the backend. * Update to add support for the extra keys required by the new JSON data format --- oonib.md | 78 +++++++++++++++++++++++++++++++++++++++++++++++----------------- 1 file changed, 58 insertions(+), 20 deletions(-) diff --git a/oonib.md b/oonib.md index 88ab62a..90d7b99 100644 --- a/oonib.md +++ b/oonib.md @@ -1,7 +1,7 @@ # oonib specification -* version: 0.2 -* date: 2013-07-04 +* version: 1.3.0 +* date: 2016-02-05 * author: Arturo Filastò, Aaron Gibson This document aims at providing a functional specification of oonib. At the @@ -85,6 +85,11 @@ The HTTP request it performs is: `string` the Authonomous System Number of the network the test is related to prefixed by "AS" (ex. "AS1234") + 'probe_cc': + NEW since oonibackend 1.3 + `string` the two-letter country code of the probe as defined in + ISO3166-1 alpha-2 or ZZ when undefined (ex. "IT") + 'test_name': `string` the name of the test performing the network measurement. In the case of ooni-probe this is the test filename without the ".py" @@ -93,16 +98,26 @@ The HTTP request it performs is: 'test_version': `string` the version of the test peforming the network measurement. - 'input_hashes': + 'data_format_version': + NEW since oonibackend 1.3 + `string` that must be either "json" or "yaml" to identify the format + of the content. + + 'start_time': + NEW since oonibackend 1.3 + `float` seconds since epoch in UTC of when the measurement was started. + + 'input_hashes': (optional) `list` of hex encoded sha256sum of the contents of the inputs we are using for this test. This field is required if the collector backend only accepts certain inputs (that is it has a collector policy). For more information on policies see section 2.3. - 'test_helper': + 'test_helper': (optional) `string` the name of the required test_helper for this test. 'content': + DEPRECATED since oonibackend 1.3 (optional) `string` it is optionally possible to create a report with already some data inside of it. @@ -111,6 +126,12 @@ The HTTP request it performs is: test requires a test_helper the probe should inform oonib of it's IP address. We need to know this since we are not sure if the probe is accessing the report collector via Tor or not. + + 'format': + `string` that must be either "json" or "yaml" to identify the format + of the content. + New since version 0.2.0 of the data format or 1.2 of the backend. + } When a report is created the backend will respond with a report identifier @@ -119,7 +140,7 @@ backend software like follows: `Status Code: 201 (Created)` - { +{ 'backend_version': `string` containing the version of the backend @@ -130,7 +151,12 @@ backend software like follows: 'test_helper_address': (conditional) `string` the address of a test helper that the client requested. - } + 'supported_formats': + NEW since oonibackend 1.3 + `list` of strings detailing what are the supported formats for + submitted reports. Can either be "json" or "yaml". + +} The report identifier allows the probe to update the report and it will be contructed as follows: @@ -139,7 +165,7 @@ contructed as follows: A report identifier can be for example: - 1912-06-23T101234Z_AS1234_ihvhaeZDcBpDwYTbmdyqZSLCDNuJSQuoOdJMciiQWwAWUKJwmR + 19120623T101234Z_AS1234_ihvhaeZDcBpDwYTbmdyqZSLCDNuJSQuoOdJMciiQWwAWUKJwmR If the report does not match the collector policy it will not create a report or return a valid report_id. @@ -169,7 +195,8 @@ the report by referencing it by id: `PUT /report` - { +``` +{ 'report_id': `string` the report identifier @@ -178,7 +205,13 @@ the report by referencing it by id: `string` content to be added to the report. This can be one or more report entries in the format specified in df-000-base.md - } + 'format': + `string` that must be either "json" or "yaml" to identify the format + of the content. + New since version 0.3 of the data format or 1.2 of the backend. + +} +``` This method is deprecated, because it is not proper usage of HTTP request methods. PUT should only be used for operations that are idempotent. @@ -189,13 +222,20 @@ New collectors should use the following format for updating reports: `POST /report/$report_id` - { +``` +{ content: `string` content to be added to the report. This can be one or more report entries in the format specified in df-000-base.md - } + 'format': + `string` that must be either "json" or "yaml" to identify the format + of the content. + New since version 0.3 of the data format or 1.2 of the backend. + +} +``` ### 2.3.1.3 Closing a report @@ -233,14 +273,13 @@ This will list all the available decks. This will return the descriptor for the specified deck ``` -{ - 'name': "the name of the deck", - 'description': "a description of the deck", - 'version': "the deck version number", - 'author': "the author name and email address in the format John Doe <john(a)example.com>", - 'date': "the deck creation time in ISO 8601", +{ + 'name': "the name of the deck", + 'description': "a description of the deck", + 'version': "the deck version number", + 'author': "the author name and email address in the format John Doe <john(a)example.com>", + 'date': "the deck creation time in ISO 8601", } - ``` #### GET /deck/$deck_id/yaml @@ -269,14 +308,13 @@ This will list all the available inputs: This will return the descriptor for the specified input ``` -{ +{ 'name': "the name of the input", 'description': "a description of the input", 'version': "the input version number", 'author': "the author name and email address in the format John Doe <john(a)example.com>", 'date': "the input creation time in ISO 8601", } - ``` #### GET /input/$input_id/file

1 0

[tor-browser/tor-browser-45.1.0esr-6.0-1] fixup! Bug 13252 - Do not store data in the app bundle
by gk＠torproject.org 09 May '16

09 May '16

commit d4f5d1c3704007cadaf6a37f3b8330f4e1930828 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Mon May 2 17:54:39 2016 -0400 fixup! Bug 13252 - Do not store data in the app bundle Ignore the XRE_PROFILE_PATH environment variable during the restart that occurs immediately after updating from a version of Tor Browser that uses an embedded profile (fixes bug 18928). --- toolkit/xre/nsAppRunner.cpp | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/toolkit/xre/nsAppRunner.cpp b/toolkit/xre/nsAppRunner.cpp index 20be296..67bb2d3 100644 --- a/toolkit/xre/nsAppRunner.cpp +++ b/toolkit/xre/nsAppRunner.cpp @@ -2756,6 +2756,29 @@ SelectProfile(nsIProfileLock* *aResult, nsIToolkitProfileService* aProfileSvc, } nsCOMPtr<nsIFile> lf = GetFileFromEnv("XRE_PROFILE_PATH"); +#ifdef TOR_BROWSER_DATA_OUTSIDE_APP_DIR + // If we are transitioning away from an embedded profile, ignore the + // XRE_PROFILE_PATH value if it matches the old default profile location. + // This ensures that a new default profile will be created immediately + // after applying an update and that our migration code will then be + // executed. + if (lf) { + nsCOMPtr<nsIFile> oldTorProfileDir; + nsresult rv = GetAppRootDir(aAppDir, getter_AddRefs(oldTorProfileDir)); + NS_ENSURE_SUCCESS(rv, rv); + rv = oldTorProfileDir->AppendRelativeNativePath( + NS_LITERAL_CSTRING("TorBrowser" XPCOM_FILE_PATH_SEPARATOR + "Data" XPCOM_FILE_PATH_SEPARATOR + "Browser" XPCOM_FILE_PATH_SEPARATOR "profile.default")); + NS_ENSURE_SUCCESS(rv, rv); + bool isOldProfile = false; + rv = lf->Equals(oldTorProfileDir, &isOldProfile); + NS_ENSURE_SUCCESS(rv, rv); + if (isOldProfile) + lf = nullptr; // Ignore this XRE_PROFILE_PATH value. + } +#endif + if (lf) { nsCOMPtr<nsIFile> localDir = GetFileFromEnv("XRE_PROFILE_LOCAL_PATH");

1 0

[spec/master] Add draft of lantern test specification
by art＠torproject.org 09 May '16

09 May '16

commit 3d0a1117d9a6f8a4d02ad05310f8004449b72d4f Author: aagbsn <aagbsn(a)extc.org> Date: Mon Apr 6 14:31:30 2015 +0000 Add draft of lantern test specification --- test-specs/ts-012-lantern.md | 111 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 111 insertions(+) diff --git a/test-specs/ts-012-lantern.md b/test-specs/ts-012-lantern.md new file mode 100644 index 0000000..51d41e8 --- /dev/null +++ b/test-specs/ts-012-lantern.md @@ -0,0 +1,111 @@ +# Specification version number + +2015-04-03-000 + +# Specification name + +Lantern Test + +# Test preconditions + +Downloaded or compiled the "lantern_linux" binary and made executable and in +the users PATH environment variable. + +# Expected impact + +Ability to measure whether Lantern is working from the given network vantage point. + +# Expected inputs + +A single URL to fetch, supplied by command line argument "--url (-u)". To test +Lantern, it must be a URL from the whitelisted set. +See: https://github.com/getlantern/flashlight/blob/master/genconfig/proxiedsites/ + +# Test description + +This test launches Lantern in --headless mode, and parses output to determine +if it has bootstrapped. After bootstrap, it fetches the URL supplied by the +--url option using Lanterns http proxy interface listening on 127.0.0.1.8787. + +The specific string used to determine bootstrap from Lantern output in version +"0.0.1" is "client (http) proxy at" from standard output. + +# Expected output + +## Parent data format + +None. + +## Required output data + +bootstrapped: +**boolean** The bootstrap status of Lantern (success or failure). + +lantern_linux --headless: +**dictionary** the parent key of Lanterns output that contains the keys stdout and stderr + +stdout: +**string** Output produced by Lanterns standard output. + +stderr: +**string** Error produced by Lanterns standard error. + +body: +**string** The page body of a successful HTTP request. + +failure: +**string** If failure, then the corresponding failure message. + + +## Data specification version number + +## Semantics + +'bootstrapped' - True or False - whether Lantern has bootstrapped. +'body' - http page body if successfully requested. +'failure' - optional, present if there is a failure. +'lantern_linux --headless': + 'stdout' - Contents of standard output produced by Lantern. + 'stderr' - Contents of standard error produced by Lantern. + + +## Possible conclusions + +We can determine whether or not Lantern is able to bootstrap, according to its output. +We can determine whether or not a given URL is reachable via Lantern. + +## Example output sample +``` +--- +input_hashes: [] +options: [-u, google.com] +probe_asn: AS1234 +probe_cc: US +probe_city: null +probe_ip: 127.0.0.1 +software_name: ooniprobe +software_version: 1.2.3-rc1 +start_time: 1428344311.0 +test_name: lantern_circumvention_tool_test +test_version: 0.0.1 +... +--- +body: "<HTML><HEAD><meta http-equiv=\"content-type\" content=\"text/html;charset=utf-8\"\ + >\n<TITLE>301 Moved</TITLE></HEAD><BODY>\n<H1>301 Moved</H1>\nThe document has moved\n\ + <A HREF=\"http://www.google.com/\">here</A>.\r\n</BODY></HTML>\r\n" +bootstrapped: true +input: null +lantern_linux --headless: {exit_reason: process_done, stderr: '', stdout: ''} +``` + +## Expected Post-processing efforts + +# Privacy considerations + +Lantern does not seek to provide anonymity. Lantern contains tracking analytics +software and may connect directly to Lantern-provided proxy endpoints, or use +fronted domains via Content Delivery Networks (CDNs) as a data channel. + +# Packet capture considerations + +This test does not capture packets by default.

1 0

[spec/master] Rename test spec to conform with name test spec
by art＠torproject.org 09 May '16

09 May '16

commit 00dce89f3b9f9ac0bc7c299ee62b92d359f615b6 Author: anadahz <kojgelo(a)inbox.com> Date: Tue Oct 13 04:58:19 2015 +0200 Rename test spec to conform with name test spec --- test-specs/ts-013-meek-fronted-requests.md | 108 +++++++++++++++++++++++++++++ test-specs/ts-013-meek_fronted_requests.md | 108 ----------------------------- 2 files changed, 108 insertions(+), 108 deletions(-) diff --git a/test-specs/ts-013-meek-fronted-requests.md b/test-specs/ts-013-meek-fronted-requests.md new file mode 100644 index 0000000..f211cc4 --- /dev/null +++ b/test-specs/ts-013-meek-fronted-requests.md @@ -0,0 +1,108 @@ +# Specification version number + +2015-04-01-000 + +# Specification name + +Meek Fronted Request Test + +# Test preconditions + +* An internet connection + +# Expected impact + +Ability to detect uncensored fronted domains that can transmit requests to the +"inside" meek-server via an intermediary web service. + +# Expected inputs + +## Import document or import data format + +A list of domain names (fronted domains) and host headers (meek-server) of the +intermediary web service. + +## Semantics + +The input document may contain a domain name and a host header combination per +line separated by colon in the format: + + DomainName:HostHeader + +Example: + + www.google.com:meek-reflect.appspot.com + a0.awsstatic.com:d2zfqthxsdq309.cloudfront.net + +# Test description + +Performs a HTTP GET request to a list of fronted domains with the Host +Header of the "inside" meek-server. The meek-server handles a GET request and +response with: "I’m just a happy little web server.\n". + +# Expected output + +## Parent data format + +df-001-httpt-000 + +## Required output data + +* The domain name and host header used in the measurement + (DomainName:HostHeader) + +* The requests that have been made + +* The received responses + +* If the meek request is blocked + +## Semantics + +censored: + **boolean** indicates if an HTTP GET response to the meek server is + successfull + +## Possible conclusions + +If the fronted request/response to the meek server is successful. + +## Example output sample + +``` +agent: agent +censored: false +input: ajax.aspnetcdn.com:az668014.vo.msecnd.net +requests: +- request: + body: null + headers: + - - Host + - [az668014.vo.msecnd.net] + method: GET + tor: {is_tor: false} + url: https://ajax.aspnetcdn.com + response: + body: "I\u2019m just a happy little web server.\n" + code: 200 + headers: + - - Content-Length + - ['38'] + - - X-Cache + - [HIT] + - - X-Powered-By + - [ASP.NET] + - - Accept-Ranges + - [bytes] + - - Server + - [ECAcc (fcn/40C4)] + - - Last-Modified + - ['Wed, 01 Apr 2015 09:25:13 GMT'] + - - Connection + - [close] + - - Date + - ['Wed, 01 Apr 2015 10:01:37 GMT'] + - - Content-Type + - [text/plain; charset=utf-8] +socksproxy: null +``` diff --git a/test-specs/ts-013-meek_fronted_requests.md b/test-specs/ts-013-meek_fronted_requests.md deleted file mode 100644 index f211cc4..0000000 --- a/test-specs/ts-013-meek_fronted_requests.md +++ /dev/null @@ -1,108 +0,0 @@ -# Specification version number - -2015-04-01-000 - -# Specification name - -Meek Fronted Request Test - -# Test preconditions - -* An internet connection - -# Expected impact - -Ability to detect uncensored fronted domains that can transmit requests to the -"inside" meek-server via an intermediary web service. - -# Expected inputs - -## Import document or import data format - -A list of domain names (fronted domains) and host headers (meek-server) of the -intermediary web service. - -## Semantics - -The input document may contain a domain name and a host header combination per -line separated by colon in the format: - - DomainName:HostHeader - -Example: - - www.google.com:meek-reflect.appspot.com - a0.awsstatic.com:d2zfqthxsdq309.cloudfront.net - -# Test description - -Performs a HTTP GET request to a list of fronted domains with the Host -Header of the "inside" meek-server. The meek-server handles a GET request and -response with: "I’m just a happy little web server.\n". - -# Expected output - -## Parent data format - -df-001-httpt-000 - -## Required output data - -* The domain name and host header used in the measurement - (DomainName:HostHeader) - -* The requests that have been made - -* The received responses - -* If the meek request is blocked - -## Semantics - -censored: - **boolean** indicates if an HTTP GET response to the meek server is - successfull - -## Possible conclusions - -If the fronted request/response to the meek server is successful. - -## Example output sample - -``` -agent: agent -censored: false -input: ajax.aspnetcdn.com:az668014.vo.msecnd.net -requests: -- request: - body: null - headers: - - - Host - - [az668014.vo.msecnd.net] - method: GET - tor: {is_tor: false} - url: https://ajax.aspnetcdn.com - response: - body: "I\u2019m just a happy little web server.\n" - code: 200 - headers: - - - Content-Length - - ['38'] - - - X-Cache - - [HIT] - - - X-Powered-By - - [ASP.NET] - - - Accept-Ranges - - [bytes] - - - Server - - [ECAcc (fcn/40C4)] - - - Last-Modified - - ['Wed, 01 Apr 2015 09:25:13 GMT'] - - - Connection - - [close] - - - Date - - ['Wed, 01 Apr 2015 10:01:37 GMT'] - - - Content-Type - - [text/plain; charset=utf-8] -socksproxy: null -```

1 0

[spec/master] Merge pull request #40 from TheTorProject/feature/add_lantern_test_spec
by art＠torproject.org 09 May '16

09 May '16

commit 69e2b340faaab9ce77189ae5011b331f63a25589 Merge: 84b8d1c 49727e8 Author: Arturo Filastò <arturo(a)filasto.net> Date: Mon Jun 29 20:48:57 2015 +0200 Merge pull request #40 from TheTorProject/feature/add_lantern_test_spec Add draft of lantern test specification test-specs/ts-012-lantern.md | 111 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 111 insertions(+)

1 0

[spec/master] Update ts-012-lantern.md
by art＠torproject.org 09 May '16

09 May '16

commit 49727e85ecdff4e2bde31d48dff9775ee6a3dcd9 Author: Arturo Filastò <arturo(a)filasto.net> Date: Mon Jun 29 20:48:52 2015 +0200 Update ts-012-lantern.md --- test-specs/ts-012-lantern.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/test-specs/ts-012-lantern.md b/test-specs/ts-012-lantern.md index 51d41e8..4aa1f07 100644 --- a/test-specs/ts-012-lantern.md +++ b/test-specs/ts-012-lantern.md @@ -38,7 +38,7 @@ None. ## Required output data -bootstrapped: +success: **boolean** The bootstrap status of Lantern (success or failure). lantern_linux --headless: @@ -61,7 +61,7 @@ failure: ## Semantics -'bootstrapped' - True or False - whether Lantern has bootstrapped. +'success' - True or False - whether Lantern has bootstrapped. 'body' - http page body if successfully requested. 'failure' - optional, present if there is a failure. 'lantern_linux --headless':

1 0

[spec/master] Add draft of lantern test specification
by art＠torproject.org 09 May '16

09 May '16

commit ed70fa743fd5a05a56c2623c8191c0ace8f019c0 Author: aagbsn <aagbsn(a)extc.org> Date: Mon Apr 6 14:31:30 2015 +0000 Add draft of lantern test specification --- test-specs/ts-012-lantern.md | 111 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 111 insertions(+) diff --git a/test-specs/ts-012-lantern.md b/test-specs/ts-012-lantern.md new file mode 100644 index 0000000..51d41e8 --- /dev/null +++ b/test-specs/ts-012-lantern.md @@ -0,0 +1,111 @@ +# Specification version number + +2015-04-03-000 + +# Specification name + +Lantern Test + +# Test preconditions + +Downloaded or compiled the "lantern_linux" binary and made executable and in +the users PATH environment variable. + +# Expected impact + +Ability to measure whether Lantern is working from the given network vantage point. + +# Expected inputs + +A single URL to fetch, supplied by command line argument "--url (-u)". To test +Lantern, it must be a URL from the whitelisted set. +See: https://github.com/getlantern/flashlight/blob/master/genconfig/proxiedsites/ + +# Test description + +This test launches Lantern in --headless mode, and parses output to determine +if it has bootstrapped. After bootstrap, it fetches the URL supplied by the +--url option using Lanterns http proxy interface listening on 127.0.0.1.8787. + +The specific string used to determine bootstrap from Lantern output in version +"0.0.1" is "client (http) proxy at" from standard output. + +# Expected output + +## Parent data format + +None. + +## Required output data + +bootstrapped: +**boolean** The bootstrap status of Lantern (success or failure). + +lantern_linux --headless: +**dictionary** the parent key of Lanterns output that contains the keys stdout and stderr + +stdout: +**string** Output produced by Lanterns standard output. + +stderr: +**string** Error produced by Lanterns standard error. + +body: +**string** The page body of a successful HTTP request. + +failure: +**string** If failure, then the corresponding failure message. + + +## Data specification version number + +## Semantics + +'bootstrapped' - True or False - whether Lantern has bootstrapped. +'body' - http page body if successfully requested. +'failure' - optional, present if there is a failure. +'lantern_linux --headless': + 'stdout' - Contents of standard output produced by Lantern. + 'stderr' - Contents of standard error produced by Lantern. + + +## Possible conclusions + +We can determine whether or not Lantern is able to bootstrap, according to its output. +We can determine whether or not a given URL is reachable via Lantern. + +## Example output sample +``` +--- +input_hashes: [] +options: [-u, google.com] +probe_asn: AS1234 +probe_cc: US +probe_city: null +probe_ip: 127.0.0.1 +software_name: ooniprobe +software_version: 1.2.3-rc1 +start_time: 1428344311.0 +test_name: lantern_circumvention_tool_test +test_version: 0.0.1 +... +--- +body: "<HTML><HEAD><meta http-equiv=\"content-type\" content=\"text/html;charset=utf-8\"\ + >\n<TITLE>301 Moved</TITLE></HEAD><BODY>\n<H1>301 Moved</H1>\nThe document has moved\n\ + <A HREF=\"http://www.google.com/\">here</A>.\r\n</BODY></HTML>\r\n" +bootstrapped: true +input: null +lantern_linux --headless: {exit_reason: process_done, stderr: '', stdout: ''} +``` + +## Expected Post-processing efforts + +# Privacy considerations + +Lantern does not seek to provide anonymity. Lantern contains tracking analytics +software and may connect directly to Lantern-provided proxy endpoints, or use +fronted domains via Content Delivery Networks (CDNs) as a data channel. + +# Packet capture considerations + +This test does not capture packets by default.

1 0