Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Move `rtp` info out of `flow->protos` (#2739) | Ivan Nardi | 2025-02-21 |
| | | | | | Thiw way, the code is ready to handle rtp info from STUN flows too. And, most important, this change works as workaround to fix some crashes reported by oss-fuzz | ||
* | Fix build error due to an unused static function in the p17m fuzzer. (#2737) | Toni | 2025-02-21 |
| | | | | | * fixed buffer overflow in RTP dissector Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Added check | Luca | 2025-02-21 |
| | |||
* | Updated test result | Luca | 2025-02-21 |
| | |||
* | Improved RTP dissection with EVS and other mobile voice codecs | Luca Deri | 2025-02-20 |
| | |||
* | Updated test rsults after RTP payload extraction | Luca Deri | 2025-02-19 |
| | |||
* | Exported RTP payload in packet metadata | Luca Deri | 2025-02-19 |
| | | | | Added ndpi_rtp_payload_type2str() API call | ||
* | Further domain checks | Luca Deri | 2025-02-19 |
| | |||
* | Fixed bug in domain name computation | Luca Deri | 2025-02-17 |
| | |||
* | SSDP: add configuration for disabling metadata extraction (#2736) | Ivan Nardi | 2025-02-17 |
| | |||
* | DNS: rework "extra-dissection" code (#2735) | Ivan Nardi | 2025-02-17 |
| | |||
* | added metadata fields for M-NOTIFY (#2733) | Ivan Kapranov | 2025-02-17 |
| | |||
* | Fix/restore some public defines (#2734) | Ivan Nardi | 2025-02-17 |
| | | | See 6899f6c17 and 9bf513b34 | ||
* | Added defines | Luca Deri | 2025-02-16 |
| | |||
* | Reworked memory allocation | Luca Deri | 2025-02-16 |
| | |||
* | DNS: fix message parsing (#2732) | Ivan Nardi | 2025-02-16 |
| | |||
* | Implement SSDP Metadata export (#2729) | Ivan Kapranov | 2025-02-16 |
| | | | Close #2524 | ||
* | DNS: fix parsing of hostname for empty response messages (#2731) | Ivan Nardi | 2025-02-16 |
| | |||
* | DNS: rework adding entries to the FPC-DNS cache (#2730) | Ivan Nardi | 2025-02-16 |
| | | | | | Try to populate the FPC-DNS cache using directly the info from the current packet, and not from the metadata saved in `struct ndpi_flow_struct`. This will be important when adding monitoring support | ||
* | DNS: improved detection and handling of TCP packets (#2728) | Ivan Nardi | 2025-02-15 |
| | |||
* | DNS: rework code (#2727) | Ivan Nardi | 2025-02-15 |
| | |||
* | Added RUTUBE (#2725) | Ivan Kapranov | 2025-02-15 |
| | |||
* | DNS: fix dissection (#2726) | Ivan Nardi | 2025-02-15 |
| | |||
* | DNS: set `NDPI_MALFORMED_PACKET` risk if the answer message is invalid (#2724) | Ivan Nardi | 2025-02-15 |
| | | | We already set the same flow risk for invalid request messages | ||
* | reworked ntp info extraction (#2723) | Ivan Kapranov | 2025-02-15 |
| | |||
* | DNS: rework code parsing responses (#2722) | Ivan Nardi | 2025-02-14 |
| | |||
* | DNS: rework/isolate code to process domain name (#2721) | Ivan Nardi | 2025-02-13 |
| | |||
* | DNS: faster exclusion (#2719) | Ivan Nardi | 2025-02-12 |
| | |||
* | DNS: try to simplify the code (#2718) | Ivan Nardi | 2025-02-12 |
| | | | Set the classification in only one place in the code. | ||
* | ndpiReader: print more DNS information (#2717) | Ivan Nardi | 2025-02-11 |
| | |||
* | DNS: fix check for DGA domain (#2716) | Ivan Nardi | 2025-02-11 |
| | | | | If we have a (potential) valid sub-classification, we shoudn't check for DGA, even if the subclassification itself is disabled! | ||
* | DNS: disable subclassification by default (#2715) | Ivan Nardi | 2025-02-11 |
| | | | | Prelimary change to start supporting multiple DNS transactions on the same flow | ||
* | DNS: evaluate all flow risks even if sub-classification is disabled (#2714) | Ivan Nardi | 2025-02-11 |
| | |||
* | dns: fix writing to `flow->protos.dns` | Ivan Nardi | 2025-02-11 |
| | | | | | We can't write to `flow->protos.dns` until we are sure it is a valid DNS flow | ||
* | DNS: fix dissection when there is only the response message | Ivan Nardi | 2025-02-11 |
| | |||
* | DNS: extend tests | Ivan Nardi | 2025-02-11 |
| | |||
* | Removed trace | Luca Deri | 2025-02-10 |
| | |||
* | Added max element number in ndpi_protocol_qoe_category_t | Luca Deri | 2025-02-10 |
| | |||
* | Added ndpi_find_protocol_qoe() API call | Luca Deri | 2025-02-10 |
| | | | | Updated (C) | ||
* | Compilation fix | Luca | 2025-02-07 |
| | |||
* | Introduced QoE (Quality of Experience) protocol classification | Luca Deri | 2025-02-06 |
| | |||
* | Updated SNI for YandexMetrica and YandexAlice (#2711) | Ivan Kapranov | 2025-02-06 |
| | | | Co-authored-by: Ivan Kapranov <i.kapranov@securitycode.ru> | ||
* | Added additional VK ASNs | Luca Deri | 2025-02-05 |
| | |||
* | Remove some redundant tests (#2710) | Ivan Nardi | 2025-02-04 |
| | |||
* | Preliminary work to rework `struct ndpi_flow_struct` (#2705) | Ivan Nardi | 2025-02-04 |
| | | | | | | | | No significant changes: * Move around some fields to avoid holes in the structures. * Some fields are about protocols based only on TCP. * Remove some unused (or set but never read) fields. See #2631 | ||
* | Extend regression tests | Ivan Nardi | 2025-02-04 |
| | |||
* | DNS: another fix about the relationship between FPC and subclassification ↵ | Ivan Nardi | 2025-01-31 |
| | | | | | (#2709) See: c669bb314 | ||
* | Added ndpi_network_ptree6_match() API call | Luca Deri | 2025-01-31 |
| | |||
* | bittorrent: add configuration for "hash" metadata (#2706) | Ivan Nardi | 2025-01-31 |
| | | | Fix confidence value for same TCP flows | ||
* | microsoft: another follow-up about auto-generated list of domains | Ivan Nardi | 2025-01-31 |
| |