[Coral-dev] Missed packets

andrey andrey at cs.dal.ca
Wed Jun 15 06:13:02 PDT 2011


 Hello,

 I have tried to classify data from a pcap file.
 The report was successfully created except for the graphs.
 The data of the tables was enough for me, I did not need the graphs.
 The problem I have encountered is that sometimes Coral-Reef will give 
 me wrong numbers.
 I used a file with only HTTPS in it. The program has found that there 
 is HTTPS in it but said there is 0%.
 There was no other data given except for  HTTPS with those 0%.
 The file has packets in it so there is problem with the calculation or 
 finding of packets.
 Over 50% of the packets in the file are HTTPS (sport: 443, protocol:6).
 This has happened later with other files and protocols as well.

 Did you encounter that problem before?
 Is there a solution to that problem?

 Thanks,
 Andrey



More information about the Coral-dev mailing list