Moved ndpi_private.h to include directory

1 files changed, 655 insertions, 0 deletions

diff --git a/src/include/ndpi_private.h b/src/include/ndpi_private.h
new file mode 100644
index 000000000..76aee10b0
--- /dev/null
+++ b/src/include/ndpi_private.h
@@ -0,0 +1,655 @@
+#ifndef __NDPI_PRIVATE_H__
+#define __NDPI_PRIVATE_H__
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/* Not sure if we still need it.. keep it for the time being */
+#ifdef NDPI_LIB_COMPILATION
+
+/* Needed to have access to HAVE_* defines */
+#ifndef _NDPI_CONFIG_H_
+#include "ndpi_config.h"
+#define _NDPI_CONFIG_H_
+#endif
+
+/* NDPI_NODE */
+typedef struct node_t {
+  char *key;
+  struct node_t *left, *right;
+} ndpi_node;
+
+typedef struct {
+  char *string_to_match;
+  ndpi_protocol_category_t protocol_category;
+} ndpi_category_match;
+
+typedef struct {
+  char *string_to_match;
+  u_int16_t protocol_id;
+} ndpi_tls_cert_name_match;
+
+struct call_function_struct {
+  NDPI_PROTOCOL_BITMASK detection_bitmask;
+  NDPI_PROTOCOL_BITMASK excluded_protocol_bitmask;
+  void (*func) (struct ndpi_detection_module_struct *, struct ndpi_flow_struct *flow);
+  NDPI_SELECTION_BITMASK_PROTOCOL_SIZE ndpi_selection_bitmask;
+  u_int16_t ndpi_protocol_id;
+  u_int8_t detection_feature;
+};
+
+struct subprotocol_conf_struct {
+  void (*func) (struct ndpi_detection_module_struct *, char *attr, char *value, int protocol_id);
+};
+
+typedef struct default_ports_tree_node {
+  ndpi_proto_defaults_t *proto;
+  u_int8_t customUserProto;
+  u_int16_t default_port;
+} default_ports_tree_node_t;
+
+
+#define LINE_EQUALS(ndpi_int_one_line_struct, string_to_compare) \
+  ((ndpi_int_one_line_struct).len == strlen(string_to_compare) && \
+   LINE_CMP(ndpi_int_one_line_struct, string_to_compare, strlen(string_to_compare)) == 1)
+
+#define LINE_STARTS(ndpi_int_one_line_struct, string_to_compare) \
+  ((ndpi_int_one_line_struct).len >= strlen(string_to_compare) && \
+   LINE_CMP(ndpi_int_one_line_struct, string_to_compare, strlen(string_to_compare)) == 1)
+
+#define LINE_ENDS(ndpi_int_one_line_struct, string_to_compare) \
+  ((ndpi_int_one_line_struct).len >= strlen(string_to_compare) && \
+   memcmp((ndpi_int_one_line_struct).ptr + \
+          ((ndpi_int_one_line_struct).len - strlen(string_to_compare)), \
+          string_to_compare, strlen(string_to_compare)) == 0)
+
+#define LINE_CMP(ndpi_int_one_line_struct, string_to_compare, string_to_compare_length) \
+  ((ndpi_int_one_line_struct).ptr != NULL && \
+   memcmp((ndpi_int_one_line_struct).ptr, string_to_compare, string_to_compare_length) == 0)
+
+struct ndpi_int_one_line_struct {
+  const u_int8_t *ptr;
+  u_int16_t len;
+};
+
+struct ndpi_packet_struct {
+  const struct ndpi_iphdr *iph;
+  const struct ndpi_ipv6hdr *iphv6;
+  const struct ndpi_tcphdr *tcp;
+  const struct ndpi_udphdr *udp;
+  const u_int8_t *generic_l4_ptr;	/* is set only for non tcp-udp traffic */
+  const u_int8_t *payload;
+
+  u_int64_t current_time_ms;
+
+  struct ndpi_int_one_line_struct line[NDPI_MAX_PARSE_LINES_PER_PACKET];
+  /* HTTP headers */
+  struct ndpi_int_one_line_struct host_line;
+  struct ndpi_int_one_line_struct forwarded_line;
+  struct ndpi_int_one_line_struct referer_line;
+  struct ndpi_int_one_line_struct content_line;
+  struct ndpi_int_one_line_struct content_disposition_line;
+  struct ndpi_int_one_line_struct accept_line;
+  struct ndpi_int_one_line_struct authorization_line;
+  struct ndpi_int_one_line_struct user_agent_line;
+  struct ndpi_int_one_line_struct http_url_name;
+  struct ndpi_int_one_line_struct http_origin;
+  struct ndpi_int_one_line_struct server_line;
+  struct ndpi_int_one_line_struct http_method;
+  struct ndpi_int_one_line_struct http_response; /* the first "word" in this pointer is the
+						    response code in the packet (200, etc) */
+
+  u_int16_t l3_packet_len;
+  u_int16_t payload_packet_len;
+  u_int16_t parsed_lines;
+  u_int16_t empty_line_position;
+  u_int8_t tcp_retransmission;
+
+  u_int8_t packet_lines_parsed_complete:1,
+    packet_direction:1, empty_line_position_set:1, http_check_content:1, pad:4;
+};
+
+typedef struct ndpi_list_struct {
+  char *value;
+  struct ndpi_list_struct *next;
+} ndpi_list;
+
+#ifdef HAVE_NBPF
+typedef struct {
+  void *tree; /* cast to nbpf_filter* */
+  u_int16_t l7_protocol;
+} nbpf_filter;
+#endif
+
+struct ndpi_detection_module_struct {
+  NDPI_PROTOCOL_BITMASK detection_bitmask;
+
+  u_int64_t current_ts;
+  u_int16_t max_packets_to_process;
+  u_int16_t num_tls_blocks_to_follow;
+  u_int8_t skip_tls_blocks_until_change_cipher:1, _notused:7;
+  u_int8_t tls_certificate_expire_in_x_days;
+  
+  void *user_data;
+  char custom_category_labels[NUM_CUSTOM_CATEGORIES][CUSTOM_CATEGORY_LABEL_LEN];
+
+  /* callback function buffer */
+  struct call_function_struct *callback_buffer;
+  struct call_function_struct *callback_buffer_tcp_no_payload;
+  struct call_function_struct *callback_buffer_tcp_payload;
+  struct call_function_struct *callback_buffer_udp;
+  struct call_function_struct *callback_buffer_non_tcp_udp;
+  u_int32_t callback_buffer_size;
+  u_int32_t callback_buffer_size_tcp_no_payload;
+  u_int32_t callback_buffer_size_tcp_payload;
+  u_int32_t callback_buffer_size_udp;
+  u_int32_t callback_buffer_size_non_tcp_udp;
+
+  default_ports_tree_node_t *tcpRoot, *udpRoot;
+
+  ndpi_log_level_t ndpi_log_level; /* default error */
+
+#ifdef NDPI_ENABLE_DEBUG_MESSAGES
+  /* debug callback, only set when debug is used */
+  ndpi_debug_function_ptr ndpi_debug_printf;
+  const char *ndpi_debug_print_file;
+  const char *ndpi_debug_print_function;
+  NDPI_PROTOCOL_BITMASK debug_bitmask;
+#endif
+
+  /* misc parameters */
+  u_int32_t tcp_max_retransmission_window_size;
+
+  /* subprotocol registration handler */
+  struct subprotocol_conf_struct subprotocol_conf[NDPI_MAX_SUPPORTED_PROTOCOLS + 1];
+
+  u_int ndpi_num_supported_protocols;
+  u_int ndpi_num_custom_protocols;
+
+  int ac_automa_finalized;
+  /* HTTP/DNS/HTTPS/QUIC host matching */
+  ndpi_automa host_automa,                     /* Used for DNS/HTTPS */
+    risky_domain_automa, tls_cert_subject_automa,
+    host_risk_mask_automa, common_alpns_automa;
+  /* IMPORTANT: please, whenever you add a new automa:
+   * update ndpi_finalize_initialization()
+   * update automa_type above
+   */
+
+  ndpi_str_hash *malicious_ja3_hashmap, *malicious_sha1_hashmap;
+
+  ndpi_list *trusted_issuer_dn;
+
+  /* Patricia trees */
+  ndpi_patricia_tree_t *ip_risk_mask_ptree;
+  ndpi_patricia_tree_t *ip_risk_mask_ptree6;
+  ndpi_patricia_tree_t *ip_risk_ptree; 
+  ndpi_patricia_tree_t *ip_risk_ptree6;
+  ndpi_patricia_tree_t *protocols_ptree;  /* IP-based protocol detection */
+  ndpi_patricia_tree_t *protocols_ptree6;
+  
+  /* *** If you add a new Patricia tree, please update ptree_type above! *** */
+
+  struct {
+#ifdef USE_LEGACY_AHO_CORASICK
+    ndpi_automa hostnames, hostnames_shadow;
+#else
+    ndpi_domain_classify *sc_hostnames, *sc_hostnames_shadow;
+#endif
+    void *ipAddresses, *ipAddresses_shadow; /* Patricia */
+    void *ipAddresses6, *ipAddresses6_shadow; /* Patricia IPv6*/
+    u_int8_t categories_loaded;
+  } custom_categories;
+
+  u_int8_t ip_version_limit;
+
+  /* NDPI_PROTOCOL_TINC */
+  struct cache *tinc_cache;
+
+  /* NDPI_PROTOCOL_OOKLA */
+  struct ndpi_lru_cache *ookla_cache;
+  u_int32_t ookla_cache_num_entries;
+  u_int32_t ookla_cache_ttl;
+
+  /* NDPI_PROTOCOL_BITTORRENT */
+  struct ndpi_lru_cache *bittorrent_cache;
+  u_int32_t bittorrent_cache_num_entries;
+  u_int32_t bittorrent_cache_ttl;
+
+  /* NDPI_PROTOCOL_ZOOM */
+  struct ndpi_lru_cache *zoom_cache;
+  u_int32_t zoom_cache_num_entries;
+  u_int32_t zoom_cache_ttl;
+
+  /* NDPI_PROTOCOL_STUN and subprotocols */
+  struct ndpi_lru_cache *stun_cache;
+  u_int32_t stun_cache_num_entries;
+  u_int32_t stun_cache_ttl;
+  struct ndpi_lru_cache *stun_zoom_cache;
+  u_int32_t stun_zoom_cache_num_entries;
+  u_int32_t stun_zoom_cache_ttl;
+
+  /* NDPI_PROTOCOL_TLS and subprotocols */
+  struct ndpi_lru_cache *tls_cert_cache;
+  u_int32_t tls_cert_cache_num_entries;
+  int32_t tls_cert_cache_ttl;
+  
+  /* NDPI_PROTOCOL_MINING and subprotocols */
+  struct ndpi_lru_cache *mining_cache;
+  u_int32_t mining_cache_num_entries;
+  u_int32_t mining_cache_ttl;
+
+  /* NDPI_PROTOCOL_MSTEAMS */
+  struct ndpi_lru_cache *msteams_cache;
+  u_int32_t msteams_cache_num_entries;
+  u_int32_t msteams_cache_ttl;
+
+  /* *** If you add a new LRU cache, please update lru_cache_type above! *** */
+
+  int opportunistic_tls_smtp_enabled;
+  int opportunistic_tls_imap_enabled;
+  int opportunistic_tls_pop_enabled;
+  int opportunistic_tls_ftp_enabled;
+  int opportunistic_tls_stun_enabled;
+
+  u_int32_t aggressiveness_ookla;
+
+  int tcp_ack_paylod_heuristic;
+  int fully_encrypted_based_on_first_pkt_heuristic;
+
+  u_int16_t ndpi_to_user_proto_id[NDPI_MAX_NUM_CUSTOM_PROTOCOLS]; /* custom protocolId mapping */
+  ndpi_proto_defaults_t proto_defaults[NDPI_MAX_SUPPORTED_PROTOCOLS+NDPI_MAX_NUM_CUSTOM_PROTOCOLS];
+
+  u_int8_t direction_detect_disable:1, /* disable internal detection of packet direction */ _pad:7;
+
+#ifdef CUSTOM_NDPI_PROTOCOLS
+  #include "../../../nDPI-custom/custom_ndpi_typedefs.h"
+#endif
+
+  /* GeoIP */
+  void *mmdb_city, *mmdb_as;
+  u_int8_t mmdb_city_loaded, mmdb_as_loaded;
+
+  /* Current packet */
+  struct ndpi_packet_struct packet;
+  const struct ndpi_flow_input_info *input_info;
+
+#ifdef HAVE_NBPF
+  u_int8_t num_nbpf_custom_proto;
+  nbpf_filter nbpf_custom_proto[MAX_NBPF_CUSTOM_PROTO];
+#endif
+
+  u_int16_t max_payload_track_len;    
+};
+
+
+/* Used by ndpi_set_proto_subprotocols */
+#define NDPI_PROTOCOL_NO_MORE_SUBPROTOCOLS (-1)
+#define NDPI_PROTOCOL_MATCHED_BY_CONTENT (-2)
+
+
+
+
+/* Generic */
+
+char *strptime(const char *s, const char *format, struct tm *tm);
+
+u_int8_t iph_is_valid_and_not_fragmented(const struct ndpi_iphdr *iph, const u_int16_t ipsize);
+
+int current_pkt_from_client_to_server(const struct ndpi_detection_module_struct *ndpi_str, const struct ndpi_flow_struct *flow);
+int current_pkt_from_server_to_client(const struct ndpi_detection_module_struct *ndpi_str, const struct ndpi_flow_struct *flow);
+
+int ndpi_seen_flow_beginning(const struct ndpi_flow_struct *flow);
+
+void ndpi_set_detected_protocol(struct ndpi_detection_module_struct *ndpi_struct,
+				struct ndpi_flow_struct *flow,
+				u_int16_t upper_detected_protocol,
+				u_int16_t lower_detected_protocol,
+				ndpi_confidence_t confidence);
+
+void reset_detected_protocol(struct ndpi_detection_module_struct *ndpi_struct,
+			     struct ndpi_flow_struct *flow);
+
+void ndpi_set_detected_protocol_keeping_master(struct ndpi_detection_module_struct *ndpi_str,
+					       struct ndpi_flow_struct *flow,
+					       u_int16_t detected_protocol,
+					       ndpi_confidence_t confidence);
+
+void change_category(struct ndpi_detection_module_struct *ndpi_struct,
+		     struct ndpi_flow_struct *flow,
+		     ndpi_protocol_category_t protocol_category);
+
+
+char *ndpi_hostname_sni_set(struct ndpi_flow_struct *flow, const u_int8_t *value, size_t value_len);
+char *ndpi_user_agent_set(struct ndpi_flow_struct *flow, const u_int8_t *value, size_t value_len);
+
+void ndpi_parse_packet_line_info(struct ndpi_detection_module_struct *ndpi_struct,
+					  struct ndpi_flow_struct *flow);
+void ndpi_parse_packet_line_info_any(struct ndpi_detection_module_struct *ndpi_struct,
+					      struct ndpi_flow_struct *flow);
+
+void load_common_alpns(struct ndpi_detection_module_struct *ndpi_str);
+u_int8_t is_a_common_alpn(struct ndpi_detection_module_struct *ndpi_str,
+			    const char *alpn_to_check, u_int alpn_to_check_len);
+
+int64_t asn1_ber_decode_length(const unsigned char *payload, int payload_len, u_int16_t *value_len);
+
+u_int8_t ips_match(u_int32_t src, u_int32_t dst,
+		   u_int32_t net, u_int32_t num_bits);
+
+u_int8_t ends_with(struct ndpi_detection_module_struct *ndpi_struct,
+                   char *str, char *ends);
+
+u_int16_t check_for_email_address(struct ndpi_detection_module_struct *ndpi_struct,
+                                  u_int16_t counter);
+
+u_int ndpi_search_tcp_or_udp_raw(struct ndpi_detection_module_struct *ndpi_struct,
+				 struct ndpi_flow_struct *flow,
+				 u_int8_t protocol,
+				 u_int32_t saddr, u_int32_t daddr);
+
+u_int32_t ip_port_hash_funct(u_int32_t ip, u_int16_t port);
+
+char* ndpi_intoav4(unsigned int addr, char* buf, u_int16_t bufLen);
+
+u_int16_t icmp4_checksum(u_int8_t const * const buf, size_t len);
+
+int load_protocols_file_fd(struct ndpi_detection_module_struct *ndpi_mod, FILE *fd);
+int load_categories_file_fd(struct ndpi_detection_module_struct *ndpi_str, FILE *fd, void *user_data);
+int load_malicious_sha1_file_fd(struct ndpi_detection_module_struct *ndpi_str, FILE *fd);
+int load_malicious_ja3_file_fd(struct ndpi_detection_module_struct *ndpi_str, FILE *fd);
+int load_risk_domain_file_fd(struct ndpi_detection_module_struct *ndpi_str, FILE *fd);
+
+
+/* TLS */
+int processClientServerHello(struct ndpi_detection_module_struct *ndpi_struct,
+                             struct ndpi_flow_struct *flow, uint32_t quic_version);
+void processCertificateElements(struct ndpi_detection_module_struct *ndpi_struct,
+                                struct ndpi_flow_struct *flow,
+                                u_int16_t p_offset, u_int16_t certificate_len);
+void switch_to_tls(struct ndpi_detection_module_struct *ndpi_struct,
+			  struct ndpi_flow_struct *flow, int first_dtls_pkt);
+int is_dtls(const u_int8_t *buf, u_int32_t buf_len, u_int32_t *block_len);
+void switch_extra_dissection_to_tls(struct ndpi_detection_module_struct *ndpi_struct,
+				    struct ndpi_flow_struct *flow);
+
+/* HTTP */
+void http_process_user_agent(struct ndpi_detection_module_struct *ndpi_struct,
+                             struct ndpi_flow_struct *flow,
+                             const u_int8_t *ua_ptr, u_int16_t ua_ptr_len);
+
+/* OOKLA */
+int ookla_search_into_cache(struct ndpi_detection_module_struct* ndpi_struct,
+                            struct ndpi_flow_struct* flow);
+void ookla_add_to_cache(struct ndpi_detection_module_struct *ndpi_struct,
+                        struct ndpi_flow_struct *flow);
+
+/* QUIC */
+int quic_len(const uint8_t *buf, uint64_t *value);
+int quic_len_buffer_still_required(uint8_t value);
+int is_version_with_var_int_transport_params(uint32_t version);
+int is_version_with_tls(uint32_t version);
+void process_chlo(struct ndpi_detection_module_struct *ndpi_struct,
+                  struct ndpi_flow_struct *flow,
+                  const u_int8_t *crypto_data, uint32_t crypto_data_len);
+void process_tls(struct ndpi_detection_module_struct *ndpi_struct,
+                 struct ndpi_flow_struct *flow,
+                 const u_int8_t *crypto_data, uint32_t crypto_data_len);
+const uint8_t *get_crypto_data(struct ndpi_detection_module_struct *ndpi_struct,
+                               struct ndpi_flow_struct *flow,
+                               u_int8_t *clear_payload, uint32_t clear_payload_len,
+                               uint64_t *crypto_data_len);
+
+/* RTP */
+int is_valid_rtp_payload_type(uint8_t type);
+int is_rtp_or_rtcp(struct ndpi_detection_module_struct *ndpi_struct,
+                          struct ndpi_flow_struct *flow);
+u_int8_t rtp_get_stream_type(u_int8_t payloadType, ndpi_multimedia_flow_type *s_type);
+
+/* Bittorrent */
+u_int32_t make_bittorrent_host_key(struct ndpi_flow_struct *flow, int client, int offset);
+u_int32_t make_bittorrent_peers_key(struct ndpi_flow_struct *flow);
+int search_into_bittorrent_cache(struct ndpi_detection_module_struct *ndpi_struct,
+                                 struct ndpi_flow_struct *flow);
+
+
+/* Stun */
+int stun_search_into_zoom_cache(struct ndpi_detection_module_struct *ndpi_struct, struct ndpi_flow_struct *flow);
+
+/* TPKT */
+int tpkt_verify_hdr(const struct ndpi_packet_struct * const packet);
+
+/* Mining Protocols (Ethereum, Monero, ...) */
+u_int32_t mining_make_lru_cache_key(struct ndpi_flow_struct *flow);
+
+
+/* Protocols init */
+void init_diameter_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_afp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_armagetron_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_amqp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_bgp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_bittorrent_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_lisp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_teredo_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ciscovpn_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_citrix_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_corba_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_crossfire_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_dcerpc_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_dhcp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_dhcpv6_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_dns_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_dofus_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_dropbox_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_eaq_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_edonkey_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ftp_control_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ftp_data_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_gnutella_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_gtp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_hsrp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_guildwars_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_h323_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_halflife2_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_hots_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_http_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_iax_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_icecast_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ipp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_irc_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_jabber_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_kakaotalk_voice_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_kerberos_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_kontiki_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ldap_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_lotus_notes_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_mail_imap_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_mail_pop_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_mail_smtp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_maplestory_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_megaco_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_mgcp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_mining_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_mms_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_monero_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_nats_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_mpegts_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_mssql_tds_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_mysql_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_netbios_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_netflow_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_nfs_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_noe_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_non_tcp_udp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ntp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_openvpn_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_oracle_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_postgres_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ppstream_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_pptp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_qq_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_quake_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_quic_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_radius_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_rdp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_redis_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_rsync_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_rtcp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_rtmp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_rtp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_rtsp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_sflow_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_shoutcast_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_sip_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_imo_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_skinny_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_skype_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_smb_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_snmp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_socrates_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_socks_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_spotify_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ssh_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_tls_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_starcraft_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_steam_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_stun_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_syslog_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ssdp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_teamspeak_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_teamviewer_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_telegram_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_telnet_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_tftp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_tvuplayer_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_usenet_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_wsd_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_veohtv_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_vhua_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_viber_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_vmware_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_vnc_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_vxlan_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_warcraft3_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_whois_das_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_world_of_warcraft_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_world_of_kung_fu_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_xbox_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_xdmcp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_zattoo_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_zmq_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_stracraft_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ubntac2_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_coap_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_mqtt_dissector (struct ndpi_detection_module_struct *ndpi_struct,u_int32_t *id);
+void init_someip_dissector (struct ndpi_detection_module_struct *ndpi_struct,u_int32_t *id);
+void init_rx_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_git_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_drda_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_bjnp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_smpp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_tinc_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_fix_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_nintendo_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_csgo_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_checkmk_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_cpha_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_apple_push_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_amazon_video_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_whatsapp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ajp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_memcached_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_nest_log_sink_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ookla_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_modbus_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_capwap_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_zabbix_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_wireguard_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_dnp3_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_104_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_s7comm_dissector(struct ndpi_detection_module_struct *ndpi_struct,u_int32_t *id);
+void init_websocket_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_soap_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_dnscrypt_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_mongodb_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_among_us_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_hpvirtgrp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_genshin_impact_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_z3950_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_avast_securedns_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_cassandra_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ethernet_ip_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_toca_boca_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_sd_rtn_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_raknet_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_xiaomi_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_mpegdash_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_rsh_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ipsec_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_collectd_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_i3d_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_riotgames_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ultrasurf_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_threema_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_alicloud_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_avast_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_softether_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_activision_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_discord_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_tivoconnect_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_kismet_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_fastcgi_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_natpmp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_syncthing_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_crynet_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_line_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_munin_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_elasticsearch_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_tuya_lp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_tplink_shp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_merakicloud_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_tailscale_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_source_engine_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_bacnet_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_oicq_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_epicgames_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_bitcoin_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_apache_thrift_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_slp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_http2_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_haproxy_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_rmcp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_can_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_protobuf_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ethereum_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ptpv2_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_hart_ip_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_rtps_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_opc_ua_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_fins_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ethersio_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_beckhoff_ads_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_iso9506_1_mms_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ieee_c37118_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ethersbus_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_profinet_io_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_hislip_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_uftp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_openflow_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_json_rpc_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_kafka_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_nomachine_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_iec62056_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_hl7_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_ceph_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+void init_roughtime_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id);
+
+#endif
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif