{"action":"created","issue":{"url":"https://api.github.com/repos/ntop/nDPI/issues/155","repository_url":"https://api.github.com/repos/ntop/nDPI","labels_url":"https://api.github.com/repos/ntop/nDPI/issues/155/labels{/name}","comments_url":"https://api.github.com/repos/ntop/nDPI/issues/155/comments","events_url":"https://api.github.com/repos/ntop/nDPI/issues/155/events","html_url":"https://github.com/ntop/nDPI/issues/155","id":138363025,"number":155,"title":"Some HTTP detects as Apple","user":{"login":"zar1n","id":3011657,"avatar_url":"https://avatars.githubusercontent.com/u/3011657?v=3","gravatar_id":"","url":"https://api.github.com/users/zar1n","html_url":"https://github.com/zar1n","followers_url":"https://api.github.com/users/zar1n/followers","following_url":"https://api.github.com/users/zar1n/following{/other_user}","gists_url":"https://api.github.com/users/zar1n/gists{/gist_id}","starred_url":"https://api.github.com/users/zar1n/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zar1n/subscriptions","organizations_url":"https://api.github.com/users/zar1n/orgs","repos_url":"https://api.github.com/users/zar1n/repos","events_url":"https://api.github.com/users/zar1n/events{/privacy}","received_events_url":"https://api.github.com/users/zar1n/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-03-04T03:08:32Z","updated_at":"2016-03-04T16:11:32Z","closed_at":"2016-03-04T16:11:32Z","body":"Hello,\r\n\r\nLink to flow dump file - https://www.dropbox.com/s/oh8iwl6auxafclz/gesti-mnogo.net.pcap?dl=0\r\nURL - http://gestimnogo.net (nsfw)\r\n\r\n```\r\nDetected protocols:\r\n\tApple                packets: 1068          bytes: 145956        flows: 6            \r\n\r\n\r\nProtocol statistics:\r\n\tAcceptable                  145956 bytes\r\n\r\n\t1\tTCP 109.110.59.8:16147 <-> 104.28.10.17:80 [proto: 140/Apple][166 pkts/25517 bytes]\r\n\t2\tTCP 109.110.59.8:16151 <-> 104.28.10.17:80 [proto: 140/Apple][113 pkts/16800 bytes]\r\n\t3\tTCP 109.110.59.8:16153 <-> 104.28.10.17:80 [proto: 140/Apple][115 pkts/20849 bytes]\r\n\t4\tTCP 109.110.59.8:15432 <-> 104.28.10.17:80 [proto: 140/Apple][114 pkts/28115 bytes]\r\n\t5\tTCP 109.110.59.8:16148 <-> 104.28.10.17:80 [proto: 140/Apple][487 pkts/36686 bytes]\r\n\t6\tTCP 109.110.59.8:16150 <-> 104.28.10.17:80 [proto: 140/Apple][73 pkts/17989 bytes]\r\n```\r\n\r\nAnd several URLs without flow dump files:\r\nhttp://www.best-prava.eu/orenburg.html\r\nhttp://www.originals-diploms.com/ \r\nhttp://kalyanmir.ru/category/tabak/ \r\nhttp://best-prava.eu/price.html\r\nhttp://best-prava.eu/index.html\r\nhttp://cash-forum.biz/topic/4418-prodazha-udostoverenii-mvdskprokuratury-avto/\r\nhttp://slotsdoc.ru/igrovye-avtomaty/book-of-ra.htm\r\n\r\nAnd many other...\r\n\r\nUsed nDPI version 1.7.0 from sourcefordge.\r\n\r\nThank you."},"comment":{"url":"https://api.github.com/repos/ntop/nDPI/issues/comments/192338042","html_url":"https://github.com/ntop/nDPI/issues/155#issuecomment-192338042","issue_url":"https://api.github.com/repos/ntop/nDPI/issues/155","id":192338042,"user":{"login":"lucaderi","id":4493366,"avatar_url":"https://avatars.githubusercontent.com/u/4493366?v=3","gravatar_id":"","url":"https://api.github.com/users/lucaderi","html_url":"https://github.com/lucaderi","followers_url":"https://api.github.com/users/lucaderi/followers","following_url":"https://api.github.com/users/lucaderi/following{/other_user}","gists_url":"https://api.github.com/users/lucaderi/gists{/gist_id}","starred_url":"https://api.github.com/users/lucaderi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lucaderi/subscriptions","organizations_url":"https://api.github.com/users/lucaderi/orgs","repos_url":"https://api.github.com/users/lucaderi/repos","events_url":"https://api.github.com/users/lucaderi/events{/privacy}","received_events_url":"https://api.github.com/users/lucaderi/received_events","type":"User","site_admin":false},"created_at":"2016-03-04T16:11:31Z","updated_at":"2016-03-04T16:11:31Z","body":"Fixed in 1.7.1\r\n\r\nUsing nDPI (1.7.1-dev-299-20374b5) [1 thread(s)]\r\nReading packets from pcap file /Users/deri/Downloads/gesti-mnogo.net.pcap...\r\nRunning thread 0...\r\n\r\nnDPI Memory statistics:\r\n\tnDPI Memory (once):      105.91 KB    \r\n\tFlow Memory (per flow):  1.88 KB      \r\n\tActual Memory:           1.91 MB      \r\n\tPeak Memory:             1.91 MB      \r\n\r\nTraffic statistics:\r\n\tEthernet bytes:        171588        (includes ethernet CRC/IFC/trailer)\r\n\tDiscarded bytes:       0            \r\n\tIP packets:            1068          of 1068 packets total\r\n\tIP bytes:              145956        (avg pkt size 136 bytes)\r\n\tUnique flows:          6            \r\n\tTCP Packets:           1068         \r\n\tUDP Packets:           0            \r\n\tVLAN Packets:          0            \r\n\tMPLS Packets:          0            \r\n\tPPPoE Packets:         0            \r\n\tFragmented Packets:    0            \r\n\tMax Packet size:       1062         \r\n\tPacket Len < 64:       960          \r\n\tPacket Len 64-128:     0            \r\n\tPacket Len 128-256:    0            \r\n\tPacket Len 256-1024:   106          \r\n\tPacket Len 1024-1500:  2            \r\n\tPacket Len > 1500:     0            \r\n\tnDPI throughput:       371.74 K pps / 455.66 Mb/sec\r\n\tTraffic throughput:    112.87 pps / 141.68 Kb/sec\r\n\tTraffic duration:      9.462 sec\r\n\tGuessed flow protos:   6            \r\n\r\n\r\nDetected protocols:\r\n\tCloudflare           packets: 1068          bytes: 145956        flows: 6            \r\n\r\n\r\nProtocol statistics:\r\n\tAcceptable                  145956 bytes\r\n\r\n\t1\tTCP 109.110.59.8:16147 <-> 104.28.10.17:80 [proto: 7.220/HTTP.Cloudflare][166 pkts/25517 bytes][Host: gestimnogo.net]\r\n\t2\tTCP 109.110.59.8:16151 <-> 104.28.10.17:80 [proto: 7.220/HTTP.Cloudflare][113 pkts/16800 bytes][Host: gestimnogo.net]\r\n\t3\tTCP 109.110.59.8:16153 <-> 104.28.10.17:80 [proto: 7.220/HTTP.Cloudflare][115 pkts/20849 bytes][Host: gestimnogo.net]\r\n\t4\tTCP 109.110.59.8:15432 <-> 104.28.10.17:80 [proto: 7.220/HTTP.Cloudflare][114 pkts/28115 bytes][Host: gestimnogo.net]\r\n\t5\tTCP 109.110.59.8:16148 <-> 104.28.10.17:80 [proto: 7.220/HTTP.Cloudflare][487 pkts/36686 bytes][Host: gestimnogo.net]\r\n\t6\tTCP 109.110.59.8:16150 <-> 104.28.10.17:80 [proto: 7.220/HTTP.Cloudflare][73 pkts/17989 bytes][Host: gestimnogo.net]"}}