Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Added extra check to avoid nDPI wrong matches | Luca Deri | 2019-02-21 |
| | |||
* | Fixes #671 | Luca Deri | 2019-02-14 |
| | |||
* | Change ndpi_fill_ip_protocol_category to pass IPs explicitly | emanuele-f | 2019-02-12 |
| | |||
* | Fix for avoid wrong substring match to happen | Luca Deri | 2019-02-10 |
| | |||
* | Aligned DNS to HTTP dissection | Luca Deri | 2019-02-07 |
| | |||
* | Releasing old buffer if realloc fails | cardigliano | 2019-01-31 |
| | |||
* | Support for protocol file files of arbitrary length | Alfredo Cardigliano | 2019-01-30 |
| | |||
* | Improved HTTP response code handling | Luca Deri | 2019-01-23 |
| | |||
* | Merge pull request #659 from cavedon/direction-endianness | Luca Deri | 2019-01-20 |
|\ | | | | | Compute packet_direction consistently independently from endianness | ||
| * | Compute packet_direction consistently independently from endianness | Ludovico Cavedon | 2019-01-16 |
| | | | | | | | | | | | | | | | | | | | | | | Ensure packet_direction is computed in the same way on little endian and big endian architectures. This change will convert IP addresses and port from little endian to host endian (instead of converting from network endian to host endian) so that it does not change the behavior on little endian architecture where ndpi is usually developed. A better (but more invasive) change would be to use the ntoh*() functions and then adjust all affected tests. | ||
* | | Removed debug code | Luca Deri | 2019-01-17 |
| | | |||
* | | Merge branch 'dev' of https://github.com/ntop/nDPI into dev | Luca Deri | 2019-01-17 |
|\ \ | |||
| * | | Warnign fixes | Luca Deri | 2019-01-17 |
| |/ | | | | | | | Updated test results | ||
* / | Removed this party LRU and replaced with home grown | Luca Deri | 2019-01-17 |
|/ | |||
* | nDPi now finally honours dissection of HTTP responses | Luca Deri | 2019-01-07 |
| | |||
* | Added Modbus over TCP dissector | Luca Deri | 2018-12-21 |
| | |||
* | Added Ookla cache | Luca Deri | 2018-12-17 |
| | |||
* | Expose ndpi_fill_ip_protocol_category api to handle ICMP flows category | emanuele-f | 2018-12-12 |
| | |||
* | Improvements in SpeedTest (Ookla) detection | Luca Deri | 2018-12-10 |
| | |||
* | Added the concept of protocols that can have subprotocols. Example Spotify ↵ | Luca | 2018-11-30 |
| | | | | | | cannot have subprotocols, DNS can (DNS.Spotify) Merged Skype call in/out in Skype Call | ||
* | Fix for custom protocol load | Luca | 2018-11-30 |
| | |||
* | Improved heuristics | Luca | 2018-11-29 |
| | | | | Used the host guessed protocol if upper protocol has not been detected | ||
* | Added Signal.org dissector | Luca | 2018-11-28 |
| | |||
* | Improved skype, teredo, netbios heuristics | Luca Deri | 2018-11-21 |
| | | | | Changed ndpi_detection_giveup() API: guess is now part of the call | ||
* | Improved Skype detection | Luca Deri | 2018-11-19 |
| | | | | | Update test results Added initialization for some free protocols | ||
* | Improved WeChat support | Luca Deri | 2018-11-19 |
| | | | | | Removed Musical.ly protocol as the service has been merged with another one and thus it is no longer used Improved guess for UDP protocols | ||
* | Added ndpi_flowv4_flow_hash and ndpi_flowv6_flow_hash skeletons for | Luca Deri | 2018-11-14 |
| | | | | implementing https://github.com/corelight/community-id-spec | ||
* | Merge pull request #636 from 2miksyn/dev | Luca Deri | 2018-11-14 |
|\ | | | | | Improve SSL detection, prevent false positive SSL detection | ||
| * | Improve SSL detection, prevent false positive SSL detection | Mikhail Smirnov | 2018-11-09 |
| | | |||
* | | Improved Skype detection | Luca Deri | 2018-11-09 |
| | | |||
* | | Improved Messenger/Hangout detection | Luca Deri | 2018-11-08 |
| | | |||
* | | Removed skype false positives | Luca Deri | 2018-11-08 |
|/ | | | | better STUP detection | ||
* | Implemented UPnP dissector | Luca Deri | 2018-11-07 |
| | |||
* | Added NDPI_MIN_NUM_STUN_DETECTION constant | Luca | 2018-10-29 |
| | |||
* | Fix category match not using client certificate | emanuele-f | 2018-10-11 |
| | |||
* | Custom categories have now priority over protocol related categories | emanuele-f | 2018-10-10 |
| | |||
* | Fix custom categories match by IP not working | emanuele-f | 2018-10-10 |
| | |||
* | Add function to search host in custom categories | emanuele-f | 2018-10-10 |
| | |||
* | Fix category field not accounted in ndpi_get_proto_category | emanuele-f | 2018-10-10 |
| | | | | Fixes #627 | ||
* | Merge pull request #610 from eglooca/pr-nest-log-sink | Luca Deri | 2018-10-02 |
|\ | | | | | New dissector: Nest Log Sink | ||
| * | New dissector: Nest Log Sink | Darryl Sokoloski | 2018-09-19 |
| | | | | | | | | | | | | This is a dissector for the Nest Log Sink protocol which is used by the Nest Protect (https://nest.com/ca/smoke-co-alarm/overview/). Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca> | ||
* | | Renamed files to avoid name clashes during compilation with other libs | Luca Deri | 2018-09-29 |
| | | |||
* | | Renamed source files to avoid clashes | Luca Deri | 2018-09-29 |
| | | |||
* | | Added check for not going beyond the string lenght | Luca Deri | 2018-09-24 |
|/ | |||
* | Mapped the mining category in ndpi_category_get_name() | Luca | 2018-09-18 |
| | |||
* | Implementation of Bitcoin, Ethereum, ZCash, Monero dissectors all identified ↵ | Luca | 2018-09-18 |
| | | | | | | as mining Implements #503 | ||
* | Addes support for SMBv1 traffic that has been split from SMBv23 | Luca Deri | 2018-09-17 |
| | |||
* | Added ndpi_protocol2id() API call | Luca | 2018-09-17 |
| | |||
* | Prevent invalid reads past end-of-buffer. | Darryl Sokoloski | 2018-09-11 |
| | | | | | | The recent revert commit applied to ndpi_parse_packet_line_info resurrects an old bug where the last lines in packets that end with a CR+NL will not be parsed. This revert commit is an attempt to prevent invalid reads past the end of the packet buffer. This PR moves the end-of-bounds test to before the 16-bit read and returns if true. This fixes the case where a text line ends aligned to the buffer-end boundary, and it fixes the invalid read issue. Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca> | ||
* | parse protocol's string_to_match into hex which could be match by hyperscan ↵ | 诟屍 | 2018-09-11 |
| | | | | | | | | | | | | | (#589) * if one protocol do not have it's regex (pattern_to_match) then parse it's string (string_to_match) into hex so we can match every protocol with hyperscan * fix string2hex() * fix init_hyperscan(): check return value of string2hex() |