satori

satori copied to clipboard

pcapng support

6

Hi, Can we somehow process pcapng file directly with satori without converting it into pcap first?

aziel12

Possible TCP signature generation issue due to type mismatch

1

There are many TCP signatures which have the 'T' oddity, for example in the signature below: https://github.com/xnih/satori/blob/063782388e02b1b5bd577ef2e620a42238bf6483/fingerprints/tcp.xml#L1014 By looking at the code that generates these oddities, I noticed that the...

boazwasserman

OS signature with wierd TTL

3

"Android 4.1.x" in tcp.xml has TTL of 60 - is this something that is implemented OS wise? this issue creates a problem when computing near TTL, as sometimes a packet...

nstylepro