Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | Imporoved SMBv1 heuristic to avoid triggering risks for SMBv1 broadcast ↵ | Luca Deri | 2025-01-03 | |
| | | | | messages when used to browse (old) network devices | |||
* | Removed Cobalt strike | Luca Deri | 2024-12-20 | |
| | ||||
* | IPv6: fix bad ipv6 format (#1890) (#2651) | paolomonti | 2024-12-20 | |
| | | | | | | ipv6 addresses already containing "::" token shall not be searched for ":0:" nor patched Close #1890 | |||
* | Moded to 4.13 | Luca Deri | 2024-12-17 | |
| | ||||
* | Update CHANGELOG.md | Ivan Nardi | 2024-12-14 | |
| | | | [no ci] | |||
* | Telegram STUN improvement | Luca Deri | 2024-12-13 | |
| | ||||
* | DNS: fix Index-out-of-bounds error (#2644) | Ivan Nardi | 2024-12-13 | |
| | | | | | | | | | | | | | ``` Running: /home/ivan/Downloads/clusterfuzz-testcase-minimized-fuzz_ndpi_reader_pl7m_simplest_internal-5759495480868864 protocols/dns.c:482:5: runtime error: index 4 out of bounds for type 'u_int8_t[4]' (aka 'unsigned char[4]') SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior protocols/dns.c:482:5 protocols/dns.c:483:5: runtime error: index 4 out of bounds for type 'u_int32_t[4]' (aka 'unsigned int[4]') SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior protocols/dns.c:483:5 protocols/dns.c:490:12: runtime error: index 4 out of bounds for type 'u_int32_t[4]' (aka 'unsigned int[4]') ``` Found by oss-fuzz See: https://issues.oss-fuzz.com/issues/383911300?pli=1 | |||
* | Added minor Citrix improvement | Luca Deri | 2024-12-13 | |
| | ||||
* | Update CHANGELOG.md | Ivan Nardi | 2024-12-13 | |
| | | | [no ci] | |||
* | Update all IPs lists (#2643) | Ivan Nardi | 2024-12-13 | |
| | ||||
* | Update CHANGELOG.md | Ivan Nardi | 2024-12-13 | |
| | | | [no ci] | |||
* | Update CHANGELOG.md | Ivan Nardi | 2024-12-12 | |
| | ||||
* | fuzz: improve fuzzing coverage (#2642) | Ivan Nardi | 2024-12-11 | |
| | | | Updtae pl7m code (Fix swap-direction mutation) | |||
* | STUN/RTP: improve metadata extraction (#2641) | Ivan Nardi | 2024-12-11 | |
| | ||||
* | Update script to download Azure IP list ranges (#2640) | Ivan Nardi | 2024-12-11 | |
| | ||||
* | Added missing check | Luca Deri | 2024-12-09 | |
| | ||||
* | STUN: fix monitoring (#2639) | Ivan Nardi | 2024-12-06 | |
| | ||||
* | Changed serializer buffer size to 256 bytes | Luca Deri | 2024-12-05 | |
| | ||||
* | signal: improve detection of chats and calls (#2637) | Ivan Nardi | 2024-12-04 | |
| | ||||
* | fix license typo (#2638) | Tina DiPierro | 2024-12-04 | |
| | ||||
* | Added STUN custom support | Luca Deri | 2024-12-02 | |
| | ||||
* | Minor fix | Luca Deri | 2024-11-29 | |
| | ||||
* | STUN counter changes | Luca Deri | 2024-11-29 | |
| | ||||
* | Add support Yandex Alice (#2633) | Evgeny Shtanov | 2024-11-29 | |
| | | | | Co-authored-by: Evgeny Shtanov <evg.shtanov@gmail.comm> Co-authored-by: Ivan Nardi <nardi.ivan@gmail.com> | |||
* | STUN: improve Whatsapp monitoring (#2635) | Ivan Nardi | 2024-11-29 | |
| | ||||
* | Enhanced STUN stats | Luca Deri | 2024-11-28 | |
| | ||||
* | Sync unit tests results | Toni Uhlig | 2024-11-27 | |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | Add a configuration file to ndpiReader (#2629) | Ivan Nardi | 2024-11-27 | |
| | | | | | | Example: ./example/ndpiReader --conf=./example/calls.conf -i ./tests/pcap/signal_videocall.pcapng -v2 Close #2608 | |||
* | Updated fingerprints | Luca Deri | 2024-11-26 | |
| | ||||
* | Removed old USE_LEGACY_AHO_CORASICK code | Luca Deri | 2024-11-26 | |
| | ||||
* | SIP: export metadata via json (#2630) | Ivan Nardi | 2024-11-26 | |
| | | | Fix: 1bda2bf41 | |||
* | Sync unit tests results | Ivan Nardi | 2024-11-26 | |
| | ||||
* | Fingerprint update | Luca Deri | 2024-11-25 | |
| | ||||
* | wireshark: lua: small fix | Ivan Nardi | 2024-11-25 | |
| | ||||
* | Update domains list | Ivan Nardi | 2024-11-25 | |
| | ||||
* | Add support for Paramount+ streaming service | Ivan Nardi | 2024-11-25 | |
| | ||||
* | Update `flow->flow_multimedia_types` to a bitmask (#2625) | Ivan Nardi | 2024-11-25 | |
| | | | In the same flow, we can have multiple multimedia types | |||
* | Sync unit tests results | Ivan Nardi | 2024-11-25 | |
| | ||||
* | Probing attempt check | Luca Deri | 2024-11-24 | |
| | ||||
* | Fingerprint update | Luca Deri | 2024-11-24 | |
| | ||||
* | When triggering risk "Known Proto on Non Std Port", nDPi now reports the ↵ | Luca Deri | 2024-11-22 | |
| | | | | port that was supposed to be used as default | |||
* | Update GitHub CI actions (#2627) | Ivan Nardi | 2024-11-21 | |
| | ||||
* | Sync unit tests results | Ivan Nardi | 2024-11-21 | |
| | ||||
* | Improved TCP probing attempt | Luca Deri | 2024-11-20 | |
| | ||||
* | fuzz: extend fuzzing coverage (#2626) | Ivan Nardi | 2024-11-20 | |
| | ||||
* | RTP, STUN: improve detection of multimedia flow type (#2620) | Ivan Nardi | 2024-11-19 | |
| | | | | Let's see if we are able to tell audio from video calls only looking at RTP Payload Type field... | |||
* | Small updates on domains list (#2623) | Ivan Nardi | 2024-11-18 | |
| | | | | See #2595 (no sure about the best way to handle the two domains about games...) | |||
* | Remove unused variable | Alfredo Cardigliano | 2024-11-18 | |
| | ||||
* | Zoom: fix heap-buffer-overflow (#2621) | Ivan Nardi | 2024-11-18 | |
| | | | | | | | | | | | | | ``` ================================================================= ==30923==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x50400023cc34 at pc 0x591f8b5dd546 bp 0x7ffe5ffc3530 sp 0x7ffe5ffc3528 READ of size 1 at 0x50400023cc34 thread T0 #0 0x591f8b5dd545 in is_sfu_5 /home/ivan/svnrepos/nDPI/src/lib/protocols/zoom.c:146:6 #1 0x591f8b5dda11 in zoom_search_again /home/ivan/svnrepos/nDPI/src/lib/protocols/zoom.c:166:6 #2 0x591f8b22182f in ndpi_process_extra_packet /home/ivan/svnrepos/nDPI/src/lib/ndpi_main.c:8156:9 #3 0x591f8b236f88 in ndpi_internal_detection_process_packet /home/ivan/svnrepos/nDPI/src/lib/ndpi_main.c:8793:5 ``` Found by oss-fuzz See: https://issues.oss-fuzz.com/issues/379072455 | |||
* | ndpiReader: fix statistic about total number of flows (#2622) | Ivan Nardi | 2024-11-18 | |
| | | | | | When capturing live traffic, accounting and export of expired flows is wrong (see #2617). Let's try to fix some statistics, at least |