diff options
-rw-r--r-- | CHANGELOG.md | 129 | ||||
-rw-r--r-- | Makefile.am | 2 |
2 files changed, 130 insertions, 1 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index fd88d1c6a..188c52d4c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,134 @@ # CHANGELOG +#### nDPI 3.6 (July 2021) + +## New Features + - Add API for computing RSI (Relative Strenght Index) + - Add GeoIP support + - Add fragments management + - Add API for jitter calculation + - Add single exponential smoothing API + - Add timeseries forecasting support implementing Holt-Winters with confidence interval + - Add support for MAC to radi tree and expose the full API to applications + - Add JA3+, with ALPN and elliptic curve + - Add double exponential smoothing implementation + - Extended API for managing flow risks + - Add flow risk score + - New flow risks: + - Desktop or File Sharing Session + - HTTP suspicious content (useful for tracking trickbot) + - Malicious JA3 + - Malicious SHA1 + - Risky domain + - Risky AS + - TLS Certificate Validity Too Long + - TLS Suspicious Extension + +## New Supported Protocols and Services + - New protocols: + - AmongUs + - AVAST SecureDNS + - CPHA (CheckPoint High Availability Protocol) + - DisneyPlus + - DTLS + - Genshin Impact + - HP Virtual Machine Group Management (hpvirtgrp) + - Mongodb + - Pinterest + - Reddit + - Snapchat VoIP calls + - Tumblr + - Virtual Asssitant (Alexa, Siri) + - Z39.50 + - Add protocols to HTTP as subprotocols + - Add detection of TLS browser type + - Add connectionless DCE/RPC detection + +## Improvements + - Improve detection/dissection of: + - AnyDesk + - DNS + - Hulu + - DCE/RPC (avoid false positives) + - dnscrypt + - Facebook (add new networks) + - Fortigate + - FTP Control + - HTTP + - Fix user-agent parsing + - Fix logs when NDPI_ENABLE_DEBUG_MESSAGES is defined + - IEC104 + - IEC60870 + - IRC + - Netbios + - Netflix + - Ookla speedtest (detection over IPv6) + - openspeedtest.com + - Outlook / MicrosoftMail + - QUIC + - update to draft-33 + - improve handling of SNI + - support for fragmented Client Hello + - support for DNS-over-QUIC + - RTSP + - RTSP via HTTP + - SNMP (reimplemented) + - Skype + - SSH + - Steam (Steam Datagram Relay - SDR) + - STUN (avoid false positives, improved Skype detection) + - TeamViewer (add new hosts) + - TOR (update hosts) + - TLS + - Certificate Subject matching + - Check for common ALPNs + - Reworked fingerprint calculation + - Fix extraction for TLS signature algorithms + - Fix ClientHello parsing + - UPnP + - wireguard + - Improve DGA detection + - Improve JA3 + - Improve Mining detection + - Improve string matching algorithm + - Improve ndpi_pref_enable_tls_block_dissection + - Optimize speed and memory size + - Update ahocorasick library + - Improve subprotocols detection + +## Fixes + - Fix partial application matching + - Fix multiple segfault and leaks + - Fix uninitialized memory use + - Fix release of patterns allocated in ndpi_add_string_to_automa + - Fix return value of ndpi_match_string_subprotocol + - Fix setting of flow risks on 32 bit machines + - Fix TLS certificate threshold + - Fix a memory error in TLS JA3 code + - Fix false positives in Z39.50 + - Fix off-by-one memory error for TLS-JA3 + - Fix bug in ndpi_lru_find_cache + - Fix invalid xbox and playstation port guesses + - Fix CAPWAP tunnel decoding + - Fix parsing of DLT_PPP datalink type + - Fix dissection of QUIC initial packets coalesced with 0-RTT one + - Fix parsing of GTP headers + - Add bitmap boundary checks + +## Misc + - Update download category name + - Update category labels + - Renamed Skype in Skype_Teams (the protocol is now shared across these apps) + - Add IEC analysis wireshark plugin + - Flow risk visualization in Wireshark + - ndpiReader + - add statistics about nDPI performance + - fix memory leak + - fix collecting of risks statistics + - Move installed libraries from /usr/local to /usr + - Improve NDPI_API_VERSION generation + - Update ndpi_ptree_match_addr prototype + #### nDPI 3.4 (October 2020) ## New Features diff --git a/Makefile.am b/Makefile.am index 1e86ebf33..789a52ef3 100644 --- a/Makefile.am +++ b/Makefile.am @@ -11,4 +11,4 @@ pkgconfig_DATA = libndpi.pc EXTRA_DIST = README.md CHANGELOG.md CONTRIBUTING.md README.protocols autogen.sh configure.seed wireshark python windows utils packages doc/nDPI_QuickStartGuide.pages doc/nDPI_QuickStartGuide.pdf example/MacOS example/Win32 changelog: - git log --since={`curl -s https://github.com/ntop/ndpi/releases | grep datetime | head -n1 | egrep -o "[0-9]+\-[0-9]+\-[0-9]+"`} --name-only --pretty=format:" - %s" | grep "^ " > Changelog.latest + git log --since={`curl -s https://github.com/ntop/ndpi/releases | grep datetime | head -n1 | egrep -o "[0-9]+\-[0-9]+\-[0-9]+"`} --name-only --pretty=format:" - %s" | grep "^ " > CHANGELOG.latest |