{"action":"created","issue":{"url":"https://api.github.com/repos/ntop/nDPI/issues/155","repository_url":"https://api.github.com/repos/ntop/nDPI","labels_url":"https://api.github.com/repos/ntop/nDPI/issues/155/labels{/name}","comments_url":"https://api.github.com/repos/ntop/nDPI/issues/155/comments","events_url":"https://api.github.com/repos/ntop/nDPI/issues/155/events","html_url":"https://github.com/ntop/nDPI/issues/155","id":138363025,"number":155,"title":"Some HTTP detects as Apple","user":{"login":"zar1n","id":3011657,"avatar_url":"https://avatars.githubusercontent.com/u/3011657?v=3","gravatar_id":"","url":"https://api.github.com/users/zar1n","html_url":"https://github.com/zar1n","followers_url":"https://api.github.com/users/zar1n/followers","following_url":"https://api.github.com/users/zar1n/following{/other_user}","gists_url":"https://api.github.com/users/zar1n/gists{/gist_id}","starred_url":"https://api.github.com/users/zar1n/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zar1n/subscriptions","organizations_url":"https://api.github.com/users/zar1n/orgs","repos_url":"https://api.github.com/users/zar1n/repos","events_url":"https://api.github.com/users/zar1n/events{/privacy}","received_events_url":"https://api.github.com/users/zar1n/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-03-04T03:08:32Z","updated_at":"2016-03-04T16:41:49Z","closed_at":"2016-03-04T16:11:32Z","body":"Hello,\r\n\r\nLink to flow dump file - https://www.dropbox.com/s/oh8iwl6auxafclz/gesti-mnogo.net.pcap?dl=0\r\nURL - http://gestimnogo.net (nsfw)\r\n\r\n```\r\nDetected protocols:\r\n\tApple                packets: 1068          bytes: 145956        flows: 6            \r\n\r\n\r\nProtocol statistics:\r\n\tAcceptable                  145956 bytes\r\n\r\n\t1\tTCP 109.110.59.8:16147 <-> 104.28.10.17:80 [proto: 140/Apple][166 pkts/25517 bytes]\r\n\t2\tTCP 109.110.59.8:16151 <-> 104.28.10.17:80 [proto: 140/Apple][113 pkts/16800 bytes]\r\n\t3\tTCP 109.110.59.8:16153 <-> 104.28.10.17:80 [proto: 140/Apple][115 pkts/20849 bytes]\r\n\t4\tTCP 109.110.59.8:15432 <-> 104.28.10.17:80 [proto: 140/Apple][114 pkts/28115 bytes]\r\n\t5\tTCP 109.110.59.8:16148 <-> 104.28.10.17:80 [proto: 140/Apple][487 pkts/36686 bytes]\r\n\t6\tTCP 109.110.59.8:16150 <-> 104.28.10.17:80 [proto: 140/Apple][73 pkts/17989 bytes]\r\n```\r\n\r\nAnd several URLs without flow dump files:\r\nhttp://www.best-prava.eu/orenburg.html\r\nhttp://www.originals-diploms.com/ \r\nhttp://kalyanmir.ru/category/tabak/ \r\nhttp://best-prava.eu/price.html\r\nhttp://best-prava.eu/index.html\r\nhttp://cash-forum.biz/topic/4418-prodazha-udostoverenii-mvdskprokuratury-avto/\r\nhttp://slotsdoc.ru/igrovye-avtomaty/book-of-ra.htm\r\n\r\nAnd many other...\r\n\r\nUsed nDPI version 1.7.0 from sourcefordge.\r\n\r\nThank you."},"comment":{"url":"https://api.github.com/repos/ntop/nDPI/issues/comments/192349574","html_url":"https://github.com/ntop/nDPI/issues/155#issuecomment-192349574","issue_url":"https://api.github.com/repos/ntop/nDPI/issues/155","id":192349574,"user":{"login":"kYroL01","id":7222956,"avatar_url":"https://avatars.githubusercontent.com/u/7222956?v=3","gravatar_id":"","url":"https://api.github.com/users/kYroL01","html_url":"https://github.com/kYroL01","followers_url":"https://api.github.com/users/kYroL01/followers","following_url":"https://api.github.com/users/kYroL01/following{/other_user}","gists_url":"https://api.github.com/users/kYroL01/gists{/gist_id}","starred_url":"https://api.github.com/users/kYroL01/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kYroL01/subscriptions","organizations_url":"https://api.github.com/users/kYroL01/orgs","repos_url":"https://api.github.com/users/kYroL01/repos","events_url":"https://api.github.com/users/kYroL01/events{/privacy}","received_events_url":"https://api.github.com/users/kYroL01/received_events","type":"User","site_admin":false},"created_at":"2016-03-04T16:41:49Z","updated_at":"2016-03-04T16:41:49Z","body":"@zar1n just to make you better understand why is detected as CloudFlare, see http://whois.domaintools.com/gestimnogo.net"}}