gold-miner – identify encrypted traffic

The gold-miner tool suite uses simple, rapid statistical analysis to identify encrypted traffic based on a training profile.

Contents:

• About
• Installation
  • Installing from pypi
  • Installing from the source tree
• Workflow
  • Steps to Classify Unknown Traffic Samples
  • 1. Generating individual training profiles
  • 2. Combine individual training profiles together
  • 3. Analyzing an unknown traffic source
• Automated test and evaluation
  • YAML configuration overview
  • Training
  • Testing
  • Optional attributes
  • Inheritance and Overrides
  • Algorithm selection
  • Output
  • Example
  • Command Line Arguments
• Gold-Miner Tools
  • gold-miner: analyzes unknown traffic
  • gold-miner-trainer: profiles a single PCAP training file
  • gold-miner-trainer-aggregator: builds a complete training profile
  • gold-miner-auditor: predicts what gold-miner may be good at identifying
  • gold-miner-fingerprint: builds a visual training profile image
• Development resources

Indices and tables

• Index

• Module Index

• Search Page