aboutsummaryrefslogtreecommitdiff
path: root/src/lib/ndpi_main.c
Commit message (Collapse)AuthorAge
* Improved Skype detectionLuca Deri2018-11-19
| | | | | Update test results Added initialization for some free protocols
* Improved WeChat supportLuca Deri2018-11-19
| | | | | Removed Musical.ly protocol as the service has been merged with another one and thus it is no longer used Improved guess for UDP protocols
* Added ndpi_flowv4_flow_hash and ndpi_flowv6_flow_hash skeletons forLuca Deri2018-11-14
| | | | implementing https://github.com/corelight/community-id-spec
* Merge pull request #636 from 2miksyn/devLuca Deri2018-11-14
|\ | | | | Improve SSL detection, prevent false positive SSL detection
| * Improve SSL detection, prevent false positive SSL detectionMikhail Smirnov2018-11-09
| |
* | Improved Skype detectionLuca Deri2018-11-09
| |
* | Improved Messenger/Hangout detectionLuca Deri2018-11-08
| |
* | Removed skype false positivesLuca Deri2018-11-08
|/ | | | better STUP detection
* Implemented UPnP dissectorLuca Deri2018-11-07
|
* Added NDPI_MIN_NUM_STUN_DETECTION constantLuca2018-10-29
|
* Fix category match not using client certificateemanuele-f2018-10-11
|
* Custom categories have now priority over protocol related categoriesemanuele-f2018-10-10
|
* Fix custom categories match by IP not workingemanuele-f2018-10-10
|
* Add function to search host in custom categoriesemanuele-f2018-10-10
|
* Fix category field not accounted in ndpi_get_proto_categoryemanuele-f2018-10-10
| | | | Fixes #627
* Merge pull request #610 from eglooca/pr-nest-log-sinkLuca Deri2018-10-02
|\ | | | | New dissector: Nest Log Sink
| * New dissector: Nest Log SinkDarryl Sokoloski2018-09-19
| | | | | | | | | | | | This is a dissector for the Nest Log Sink protocol which is used by the Nest Protect (https://nest.com/ca/smoke-co-alarm/overview/). Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* | Renamed files to avoid name clashes during compilation with other libsLuca Deri2018-09-29
| |
* | Renamed source files to avoid clashesLuca Deri2018-09-29
| |
* | Added check for not going beyond the string lenghtLuca Deri2018-09-24
|/
* Mapped the mining category in ndpi_category_get_name()Luca2018-09-18
|
* Implementation of Bitcoin, Ethereum, ZCash, Monero dissectors all identified ↵Luca2018-09-18
| | | | | | as mining Implements #503
* Addes support for SMBv1 traffic that has been split from SMBv23Luca Deri2018-09-17
|
* Added ndpi_protocol2id() API callLuca2018-09-17
|
* Prevent invalid reads past end-of-buffer.Darryl Sokoloski2018-09-11
| | | | | | The recent revert commit applied to ndpi_parse_packet_line_info resurrects an old bug where the last lines in packets that end with a CR+NL will not be parsed. This revert commit is an attempt to prevent invalid reads past the end of the packet buffer. This PR moves the end-of-bounds test to before the 16-bit read and returns if true. This fixes the case where a text line ends aligned to the buffer-end boundary, and it fixes the invalid read issue. Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* parse protocol's string_to_match into hex which could be match by hyperscan ↵诟屍2018-09-11
| | | | | | | | | | | | | (#589) * if one protocol do not have it's regex (pattern_to_match) then parse it's string (string_to_match) into hex so we can match every protocol with hyperscan * fix string2hex() * fix init_hyperscan(): check return value of string2hex()
* Fixes broken hyperscan compilationSimone Mainardi2018-09-11
|
* Avoid possible NULL pointer dereference in ndpi_detection_process_packetPavlos Antoniou2018-09-09
|
* Added fix for out of boundary memory accessLuca Deri2018-09-05
| | | | Fixes warning
* Merge pull request #598 from madpilot78/include_hyperscan_fixLuca Deri2018-08-30
|\ | | | | Move the configure include file inclusion and code depending on it in…
| * Move the configure include file inclusion and code depending on it in code ↵Guido Falsi2018-08-27
| | | | | | | | protected by the NDPI_LIB_COMPILATION define, this should avoid it polluting the environment when including this file from ntopng.
* | Added missing categorization when giveup/guess is calledLuca2018-08-30
|/ | | | | Added optimization for TCP flows that do not start with a SYN packet: early giveup is performed Code cleanup
* Merge branch 'pr-remove-autoconf-include' of ↵Campus2018-08-23
|\ | | | | | | https://github.com/eglooca/ndpi-pr into eglooca-pr-remove-autoconf-include
| * Remove autoconf include from typedefs headers.Darryl Sokoloski2018-08-16
| | | | | | | | | | | | Including this file in any "public" API header breaks all projects that also use autotools because macros such as PACKAGE_VERSION will be redefined. Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* | ADD: add prototype of function ht_free in hash.h - DEL: delete include file ↵Campus2018-08-23
| | | | | | | | .c in ndpi_main.c
* | Merge pull request #586 from eglooca/pr-sys-types-include-for-actypes-hLuca Deri2018-08-17
|\ \ | | | | | | Include <sys/types.h> for u_int16_t.
| * | Include sys/types.h for u_int16_t.Darryl Sokoloski2018-08-16
| |/ | | | | | | | | | | On various embedded environments (OpenWrt, EdgeOS), <sys/types.h> must be included for u_intX_t types. The Hyperscan changes made recently introducted a u_int16_t member in actypes.h which is undeclared in certainly environments without this include. Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* / Webex category fixSimone Mainardi2018-08-17
|/
* Adds hyperscan support for Apple and DropboxSimone Mainardi2018-08-16
|
* Hyperscan compilation fixSimone Mainardi2018-08-16
|
* Completed custom category implementationLuca Deri2018-08-16
|
* Merge branch 'dev' of https://github.com/ntop/nDPI into devLuca Deri2018-08-16
|\
| * Hyperscan compilation fixesSimone Mainardi2018-08-16
| |
* | Generic protocol cleanup (work in progress)Luca Deri2018-08-16
|/
* Added new dissector for Memcached.Darryl Sokoloski2018-08-15
| | | | Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* Merge pull request #577 from eglooca/pr-parse-packet-line-info-lengthLuca Deri2018-07-25
|\ | | | | Fix end-of-line bounds handling.
| * Fix end-of-line bounds handling.Darryl Sokoloski2018-07-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The existing implementation misses ending lines and as a result, fails to match certain protocols (SMTP for example, which needs to see at least 3 commain/response matches). It appears from the commit history that an attempt was made (end-1) to prevent reads past payload length. This can be ensured by simply not reading any payload that is < 3 bytes. The updated logic for this loop is: - Payload length is >= 3 bytes, or return. - Loop over payload, compare for EOL (CR + NL) sequence. - If found, process string. - If index 'a' plus two is less than payload length, increment 'a' by one and continue. - Loop return always increments index 'a' by one.
* | Added checks for missing protocol initializationLuca Deri2018-07-23
| | | | | | | | | | Fixed missing LOG_ERR initialization Fixed logging warnings
* | Fixed SEGV with undepcified protosLuca Deri2018-07-22
| |
* | Major code cleanupLuca2018-07-21
|/ | | | Converted some not popular protocols to NDPI_PROTOCOL_GENERIC with category detection
Powered by cgit, Themed by Ted Yin.