diff options
| author | Simone Mainardi <mainardi@ntop.org> | 2019-10-03 20:04:26 +0200 |
|---|---|---|
| committer | Simone Mainardi <mainardi@ntop.org> | 2019-10-03 20:04:26 +0200 |
| commit | 1982e6cef99fab6ce21650955fea9655fe35224e (patch) | |
| tree | 1575f0cc0d492d976644a7b433103f1b66bcb397 /CHANGELOG.md | |
| parent | d2f0a8d4937a498362bf00f7248b805be5abc00f (diff) | |
Adds nDPI 3.0 changelog
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 66 |
1 files changed, 66 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index fabdd2e95..fc20f2a18 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,71 @@ # CHANGELOG +#### nDPI 3.0 (October 2019) + +## New Features + +* Implemented Sequence of Packet Length and Time (SPLT) and Byte Distribution (BD) + * Available as library and in `ndpiReader` with option `-J` +* Added entropy, average, stddev, variance and bytes ratios calculation +* Added Inter-Arrival Time (IAT) calculation +* Implemented search of human readable strings + * Available as library and in `ndpiReader` with option `-e` +* Fingerprints + * JA3 (https://github.com/salesforce/ja3) + * HASSH (https://github.com/salesforce/hassh) + * DHCP +* Implemented a library to serialize/deserialize data in Type-Length-Value (TLV) format + * Used by nProbe/ntopng to exchange data via ZMQ + +## New Supported Protocols and Services + +* DTLS +* Hulu +* TikTok/Musical.ly +* WhatsApp Video +* DNSoverHTTPS +* Datasaver +* Line protocol +* Added QUIC 046 support +* Google Duo (detected as Hangout) +* WireGuard VPN +* IMO +* Zoom.us + +## Improvements + +* TLS + * Organizations + * Ciphers + * Certificate analysis +* Added PUBLISH/SUBSCRIBE methods to SIP +* Implemented STUN cache to enhance matching of STUN-based protocols +* Dissection improvements + * Viber + * WhatsApp + * AmazonVideo + * SnapChat + * FTP + * OpenVPN support for UDP-based VPNs + * Facebook Messenger mobile + * Various improvements for STUN, Hangout and Duo +* Added new categories: CUSTOM_CATEGORY_ANTIMALWARE, NDPI_PROTOCOL_CATEGORY_MUSIC, NDPI_PROTOCOL_CATEGORY_VIDEO, NDPI_PROTOCOL_CATEGORY_SHOPPING, NDPI_PROTOCOL_CATEGORY_PRODUCTIVITY and NDPI_PROTOCOL_CATEGORY_FILE_SHARING +* Added NDPI_PROTOCOL_DANGEROUS classification + +## Fixes + +* Fixed the dissection of certain invalid DNS responses +* Fixed Spotify dissection +* Fixed false positives with FTP and FTP_DATA +* Fix to discard STUN over TCP flows +* Fixed MySQL dissector +* Fix category detection due to missing initialization +* Fix DNS rsp_addr missing in some tiny responses +* Various hardening fixes + + +------------------------------------------------------------------------ + #### nDPI 2.8 (March 2019) ## New Supported Protocols and Services |