Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Added check for binary scripts | Luca Deri | 2020-05-15 |
| | | | | | Added NDPI_HTTP_NUMERIC_IP_HOST risk ndpi_risk moved to 32 bit | ||
* | Fix for potential heap-buffer-overflow in ndpi_search_openvpn | Luca Deri | 2020-05-15 |
| | |||
* | Added NDPI_HTTP_SUSPICIOUS_USER_AGENT ndpi_risk | Luca Deri | 2020-05-15 |
| | |||
* | Merge branch 'dev' of https://github.com/ntop/nDPI into dev | Luca Deri | 2020-05-15 |
|\ | |||
| * | Added link to nfstream | Luca Deri | 2020-05-15 |
| | | |||
* | | Added NDPI_TLS_CERTIFICATE_EXPIRED, NDPI_TLS_CERTIFICATE_MISMATCH, to ndpi_risk | Luca Deri | 2020-05-15 |
|/ | |||
* | Gotomeeting address range fix | Luca Deri | 2020-05-15 |
| | |||
* | Improvements on GotoMeeting | Luca Deri | 2020-05-15 |
| | | | | Added pcap for testing malware | ||
* | Merge pull request #903 from Loures/dev | Luca Deri | 2020-05-14 |
|\ | | | | | Extend packet struct with Content-Disposition HTTP header field | ||
| * | Extend filetype matching for Content-Disposition header | loures | 2020-05-14 |
| | | |||
| * | Extend packet struct with Content-Disposition HTTP header field | loures | 2020-05-14 |
|/ | | | | and improve HTTP binary transfer mime type check | ||
* | Code clenup for PR #902 | Luca Deri | 2020-05-14 |
| | |||
* | Merge pull request #902 from Loures/dev | Luca Deri | 2020-05-14 |
|\ | | | | | Add check for HTTP transfer of executable files | ||
| * | Set risk field instead of changing protocol when checking for dangerous | loures | 2020-05-13 |
| | | | | | | | | HTTP traffic | ||
| * | Add check for HTTP transfer of executable files | loures | 2020-05-13 |
|/ | |||
* | Code cleanup | Luca Deri | 2020-05-13 |
| | |||
* | Merge pull request #897 from catenacyber/fuzzoracle | Luca Deri | 2020-05-12 |
|\ | | | | | Adds bound check in oracle protocol | ||
| * | Adds bound check in oracle protocol | Philippe Antoine | 2020-05-10 |
| | | | | | | | | | | Found by oss-fuzz https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21780 | ||
* | | Merge pull request #896 from IvanNardi/nats | Luca Deri | 2020-05-12 |
|\ \ | | | | | | | Fix NATS dissector | ||
| * | | Fix NATS dissector | Nardi Ivan | 2020-05-09 |
| |/ | |||
* | | Invalid TLS check | Luca Deri | 2020-05-12 |
| | | |||
* | | Added NDPI_XXX_BIT_16 | Luca Deri | 2020-05-11 |
| | | |||
* | | Added TLS weak cipher and obsolete protocol version detection | Luca Deri | 2020-05-10 |
| | | |||
* | | Added detection of self-signed TLS certificates | Luca Deri | 2020-05-10 |
| | | |||
* | | Added the ability to detect when a known protocol is using a non-standard port | Luca Deri | 2020-05-10 |
|/ | | | | Added check to spot executables exchanged via HTTP | ||
* | Cleaned hyperscan leftover | Luca Deri | 2020-05-08 |
| | | | | Added further hyperscan hooks | ||
* | Added self signed certificate test pcap | Luca Deri | 2020-05-08 |
| | |||
* | Added TLS issuerDN and subjectDN | Luca Deri | 2020-05-07 |
| | |||
* | Reworked TLS dissector with a certificate RDN sequence reader | Luca Deri | 2020-05-07 |
| | |||
* | Fixed category matching | Luca Deri | 2020-05-06 |
| | |||
* | API cleanup for indetifying explicitly in automa's what we're searching ↵ | Luca Deri | 2020-05-06 |
| | | | | | | (protocol or category) Removed hyperscan support that is apperently unused | ||
* | Updated automa API to use 32 bit values splits from protocol/categpry | Luca Deri | 2020-05-06 |
| | |||
* | Added support for Telegram v6 | Luca Deri | 2020-05-06 |
| | |||
* | Introduced custom protocols with IP and (optional) port support | Luca Deri | 2020-05-06 |
| | | | | | | | | | | | | | | | | Example - Single IP address ip:213.75.170.11@CustomProtocol - IP address with CIDR ip:213.75.170.11/32@CustomProtocol - IP address with CIDR and port ip:213.75.170.11/32:443@CustomProtocol Please note that there are some restrictions on the port usage. They have been listed in example/protos.txt | ||
* | Various fixes to patricia tree handling | Luca Deri | 2020-05-06 |
| | |||
* | False positive fixes | Luca Deri | 2020-05-06 |
| | |||
* | Updated API | Luca Deri | 2020-05-06 |
| | |||
* | Reworked protocol handling chnging it is u_int16_t | Luca Deri | 2020-05-06 |
| | |||
* | Removed now obsolete MSN protocol | Luca Deri | 2020-05-03 |
| | | | | Added nats.io protocol dissector | ||
* | SSH boundary check rework | Luca Deri | 2020-04-30 |
| | |||
* | Minor cleanup | Luca Deri | 2020-04-30 |
| | |||
* | Merge pull request #891 from catenacyber/ghsl2 | Luca Deri | 2020-04-30 |
|\ | | | | | Better fix for integer overflow in SSH | ||
| * | Better fix for integer overflow in SSH | Philippe Antoine | 2020-04-30 |
|/ | | | | Credits to GHSL | ||
* | Merge pull request #883 from leonn/websocket | Luca Deri | 2020-04-27 |
|\ | | | | | :bulb: implement WebSocket protocol dissector | ||
| * | :bulb: implement websocket protocol dissector | Leonn Paiva | 2020-04-26 |
| | | |||
* | | Merge pull request #884 from lnslbrty/dev | Luca Deri | 2020-04-27 |
|\ \ | | | | | | | Added missing ndpiReader dependency for the install target | ||
| * | | Added missing ndpiReader dependency for the install target | Toni Uhlig | 2020-04-22 |
| | | | | | | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | | | Merge pull request #887 from IvanNardi/tunnel | Luca Deri | 2020-04-27 |
|\ \ \ | | | | | | | | | Tunnel | ||
| * | | | Fix heap-overflow error in CAPWAP detunneling code | Nardi Ivan | 2020-04-24 |
| | | | | |||
| * | | | Fix "division by zero" runtime error | Nardi Ivan | 2020-04-23 |
| | | | |