aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | Merge pull request #1012 from IvanNardi/uaLuca Deri2020-09-17
|\ \ \ | | | | | | | | QUIC: extract User Agent information
| * | | TLS: fix memory accesses in QUIC transport parameters extensionNardi Ivan2020-09-10
| | | |
| * | | QUIC: extract User Agent informationNardi Ivan2020-09-08
| | | |
| * | | http: create a common function to parse User Agent fieldNardi Ivan2020-09-08
| | |/ | |/| | | | | | | Prepare the code to handle UA information from flows other than HTTP
* | | Disabled QUIC tracing that pollutes the outputLuca Deri2020-09-17
| | |
* | | Update example.aouinizied2020-09-14
| | |
* | | Commented unused functionLuca2020-09-13
| | |
* | | Temporarily keep using snprintfAlfredo Cardigliano2020-09-11
| | |
* | | Reworked DGA checksLuca Deri2020-09-11
| | |
* | | Replace snprintf with ndpi_snappendAlfredo Cardigliano2020-09-11
| | |
* | | Added boundary checkLuca Deri2020-09-10
| | |
* | | Added buffer check in DGA analysisLuca Deri2020-09-10
| | |
* | | Complation fix as not on all platforms isnumber() is availablelucaderi2020-09-10
| | |
* | | Merge pull request #1014 from lnslbrty/improved/teamspeakLuca Deri2020-09-09
|\ \ \ | | | | | | | | Improved Teamspeak(3) protocol detection.
| * | | Improved Teamspeak(3) protocol detection.Toni Uhlig2020-09-09
| |/ / | | | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* | | Added extension to detect nested subdomains as used in Browsertunnel attack toolLuca Deri2020-09-09
| | | | | | | | | | | | https://github.com/veggiedefender/browsertunnel
* | | Add missing low-level serializer calls to the APIAlfredo Cardigliano2020-09-09
|/ /
* | Merge pull request #1008 from lnslbrty/add/dnscryptLuca Deri2020-09-08
|\ \ | | | | | | Improved dnscrypt v1/v2 protocol detection (and DoH provider).
| * | Added pcap file which contains dnscrypt-v1 data and resolver update ↵Toni Uhlig2020-09-07
| | | | | | | | | | | | | | | | | | | | | | | | requests/responses (v1/v2). * Renamed dnscrypt.pcap to simple-dnscrypt.pcap Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
| * | Added dnscrypt-v2-doh resolver test pcaps.Toni Uhlig2020-09-07
| | | | | | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
| * | Updated DoT/DoH provider.Toni Uhlig2020-09-07
| | | | | | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
| * | Improved dnscrypt v1/v2 protocol detection.Toni Uhlig2020-09-06
| |/ | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* / Added command for specifying the aux files dirLuca Deri2020-09-08
|/
* Add start_of_block/end_of_block support to TLVAlfredo Cardigliano2020-09-04
|
* Added some additional TLS mappingsLuca Deri2020-09-02
|
* Merge pull request #1003 from ↵Luca Deri2020-09-02
|\ | | | | | | | | lnslbrty/fix/fals-positive-cisco-hsrp-radius-detection Fixed false positive detection for Skype.SkypeCall (affects at least Cisco HSRP and RADIUS).
| * Fixed off-by-one error in Kerberos protocol.Toni Uhlig2020-09-02
| | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
| * Fixed false positive detection for Skype.SkypeCall (affects at least Cisco ↵Toni Uhlig2020-09-02
|/ | | | | | HSRP and RADIUS). Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* Added boundary checkLuca Deri2020-09-01
|
* Added trademark informationLuca Deri2020-09-01
|
* Added check for ndpi_ssl_version2str()Luca Deri2020-08-31
|
* Added (optional) notifier for LRU addLuca Deri2020-08-31
|
* Merge pull request #999 from IvanNardi/quicLuca Deri2020-08-30
|\ | | | | QUIC: add support for GQUIC T050 and T051
| * QUIC: add support for GQUIC T050 and T051Nardi Ivan2020-08-30
| | | | | | | | | | | | QUIC versioning wasn't complex enough without T05X family... These versions are very similar to Q050, but use TLS as their handshake protocol.
* | Merge pull request #998 from lnslbrty/fix/ndpireader-opt-sigsegvLuca Deri2020-08-30
|\ \ | | | | | | Fixed invalid memory access leading to a SIGSEGV in ndpiReader's option parser.
| * | Fixed invalid memory access leading to a SIGSEGV in ndpiReader's option parser.Toni Uhlig2020-08-28
| | | | | | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* | | Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are ↵Luca Deri2020-08-30
| |/ |/| | | | | not condidered safe/secure
* | Improved ntop detection over HTTPLuca Deri2020-08-30
| | | | | | | | Added cap on number of attempts for CiscoVPN
* | Stddev calculation changesLuca Deri2020-08-30
| |
* | Fixed false positive in suspicous user agentLuca Deri2020-08-30
| | | | | | | | Optimized stddev calculation
* | Merge pull request #996 from lnslbrty/fix/travis-ciLuca Deri2020-08-28
|\ \ | |/ |/| Fix travis-ci related errors.
| * Fixed travis-ci fuzzm job. Might be a false positive related to clang-7's MSAN.Toni Uhlig2020-08-27
| | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
| * Fixed use-of-uninitialized-value in QUIC clho decryption probably caused by ↵Toni Uhlig2020-08-27
| | | | | | | | | | | | a BUG in libgcrypt (not verified). Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
| * Moved NDPI_CURRENT_PROTO define before ndpi_api.h include to prevent a ↵Toni Uhlig2020-08-27
| | | | | | | | | | | | redefinition warning. Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
| * Fixed broken travis-ci YAML.Toni Uhlig2020-08-27
| | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* | Fixes control reaches end of non-void functionSimone Mainardi2020-08-27
| |
* | Passes method_len param to ndpi_http_str2methodSimone Mainardi2020-08-27
| |
* | Added ndpi_http_method ndpi_http_str2method(const char* method) API callLuca Deri2020-08-26
| |
* | Added ndpi_http_method2str() API callLuca Deri2020-08-26
| |
* | Merge pull request #992 from lnslbrty/fix/pkg-configLuca Deri2020-08-26
|\ \ | | | | | | Fixed broken pkg-config file which did not care about gcrypt/pcre.
Powered by cgit, Themed by Ted Yin.