aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Added reference to the new DGA modelLuca Deri2024-10-26
|
* Added reference to the existing nDPI DGA codeLuca Deri2024-10-26
|
* Moved new DGA codeLuca Deri2024-10-26
|
* Not necessaryLuca Deri2024-10-26
|
* added dga ml tests file to EXTRA_DISTYellowMan2024-10-26
|
* ml tests for dga detectionYellowMan2024-10-26
|
* Added Ubuntu 20 fingerprintLuca Deri2024-10-21
|
* ndpiReader: fix command line options used by wireshark (#2605)Ivan Nardi2024-10-21
|
* Added further TCP fingerprintsLuca Deri2024-10-21
|
* Fix `ndpi_tot_allocated_memory` calculation if `ndpi_calloc()` used (#2604)Toni2024-10-21
| | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* Improved fingerprintsLuca Deri2024-10-21
|
* Improved TCP fingerprintLuca Deri2024-10-20
|
* Improved TCP fingerprintLuca Deri2024-10-20
|
* Reworked TCP fingeprint implementationLuca Deri2024-10-20
|
* Minor inf fixLuca Deri2024-10-20
|
* STUN: fix monitoring with RTCP flows (#2603)Ivan Nardi2024-10-19
|
* ndpiReader: explicitly remove non ipv4/6 packets (#2601)Ivan Nardi2024-10-19
|
* ndpiReader: add some statistics about monitoring (#2602)Ivan Nardi2024-10-19
|
* Added support for RDP over TLSLuca Deri2024-10-19
|
* Renamed os hints to avoid name clashesLuca Deri2024-10-19
|
* Increased struct size (#2599)Luca Deri2024-10-19
|
* Improved TCP fingepring calculationLuca Deri2024-10-18
| | | | Adde basidc OS detection based on TCP fingerprint
* Add configuration of TCP fingerprint computation (#2598)Ivan Nardi2024-10-18
| | | Extend configuration of raw format of JA4C fingerprint
* Added further boundary checks in TCP options parsing (#2597)Luca Deri2024-10-18
| | | * Added further memory checks
* Increased struct ndpi_flow_struct size (#2596)Luca Deri2024-10-18
| | | Build fix
* Update clang versionLuca Deri2024-10-18
|
* Added TCP header checkLuca Deri2024-10-18
|
* Fixes buffer overflow when parsing invalid TCP optionsLuca Deri2024-10-17
|
* Improved statisticsLuca Deri2024-10-16
|
* Added -L <domain suffix> for loading domain suffixesLuca Deri2024-10-15
| | | | Exported domainanme in JSON file (-K JSON)
* Parser for ndpiReader JSON filesLuca Deri2024-10-15
|
* Implemented nDPI TCP fingerprintLuca Deri2024-10-15
|
* STUN: minor fix for RTCP traffic (#2593)Ivan Nardi2024-10-15
|
* STUN: if the same metadata is found multiple times, keep the first value (#2591)Ivan Nardi2024-10-15
|
* CI: remove macos-12 (#2592)Ivan Nardi2024-10-15
| | | | It is deprecated and will be removed from GitHub. See: https://github.com/actions/runner-images/issues/10721
* STUN: fix monitoring of Whatsapp and Zoom flows (#2590)Ivan Nardi2024-10-15
|
* Add monitoring capability (#2588)Ivan Nardi2024-10-14
| | | | | | | | | | | | | Allow nDPI to process the entire flows and not only the first N packets. Usefull when the application is interested in some metadata spanning the entire life of the session. As initial step, only STUN flows can be put in monitoring. See `doc/monitoring.md` for further details. This feature is disabled by default. Close #2583
* Added TCP fingerprintLuca Deri2024-10-14
|
* Fixed JA4 invalid computation due to code bug and uninitialized valuesLuca Deri2024-10-13
|
* Fix Windows buildIvan Nardi2024-10-13
|
* Fix compilation on WindowsIvan Nardi2024-10-13
|
* Added sonos dissectorLuca Deri2024-10-13
|
* Added u_int8_t ndpi_is_public_ipv4(u_int32_t a /* host byte order */);Luca Deri2024-10-13
|
* Added TLS fingerprintsLuca Deri2024-10-11
|
* Added support for printing JA4r when enabledLuca Deri2024-10-11
|
* Fix unit tests on CI on GitHub Actions (#2587)Ivan Nardi2024-10-11
| | | | On CI, tests run in parallel, because of `NDPI_FORCE_PARALLEL_UTESTS` define
* Added JA4 statsLuca Deri2024-10-10
|
* fuzz: fix fuzzing (#2586)Ivan Nardi2024-10-10
|
* Added addr_dump_path definitionLuca Deri2024-10-10
|
* Added -N option for dumping/restoring the DNS cache (when enabled)Luca Deri2024-10-10
| | | | Example ndpiReader -i en0 --cfg=dpi.address_cache_size,32768 -N /tmp/a