Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | Removed debug statement | Luca Deri | 2021-02-09 | |
| | ||||
* | Partial fix for #1129 | Luca Deri | 2021-02-05 | |
| | ||||
* | Fix some memory leakes in reassembler code (#1127) | Ivan Nardi | 2021-02-04 | |
| | ||||
* | Added missing check | Luca Deri | 2021-02-04 | |
| | ||||
* | Fixed leak with DTLS | Luca Deri | 2021-02-03 | |
| | ||||
* | Fixes an issue with https://github.com/ntop/nDPI/pull/1122 that misprocsssed ↵ | Luca Deri | 2021-02-03 | |
| | | | | packets belonging to flows whose initial part (e.g. the 3WH) was not observed by nDPI (e.g. capture started in the middle of the flow) | |||
* | fragments management added (#1122) | Roberto AGOSTINO | 2021-02-03 | |
| | | | | | | Management of tcp segments managements. Co-authored-by: ragostino <ragostino73@gmail.com> Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com> | |||
* | DGA name improvement | Luca Deri | 2021-01-27 | |
| | ||||
* | Cleaned up tls/quic datatypes | Luca Deri | 2021-01-21 | |
| | ||||
* | Reworked TLS fingerprint calcolation | Luca Deri | 2021-01-21 | |
| | | | | Modified TLS memory free | |||
* | Rewored UPnP protocol that in essence was WSD hence it has been renamed | Luca | 2021-01-20 | |
| | | | | Cleaned up TLS code for DTLS detection by defining a new DTLS protocol | |||
* | (C) Update | Luca Deri | 2021-01-07 | |
| | ||||
* | QUIC: add suppport for DNS-over-QUIC (#1107) | Ivan Nardi | 2021-01-07 | |
| | | | | | | | | | Even if it is only an early internet draft, DoQ has already (at least) one deployed implementation. See: https://www.zdnet.com/article/ad-blocker-adguard-deploys-worlds-first-dns-over-quic-resolver/ Draft: https://tools.ietf.org/html/draft-huitema-dprive-dnsoquic-00 In the future, if this protocol will be really used, it might be worth to rename NDPI_PROTOCOL_DOH_DOT in NDPI_PROTOCOL_DOH_DOT_DOQ | |||
* | Split HTTP request from response Content-Type. Request Content-Type should ↵ | Luca Deri | 2021-01-06 | |
| | | | | be present with POSTs and not with other methods such as GET | |||
* | Remove FB_ZERO protocol (#1102) | Ivan Nardi | 2021-01-04 | |
| | | | | | | FB_ZERO was an experimental protocol run by Facebook. They switched to QUIC/TLS1.3 more than 2 years ago; no one ever used it but them so it is definitely dead. See: https://engineering.fb.com/2018/08/06/security/fizz/ | |||
* | Added a new API function `ndpi_free_flow_data' which free's all members of ↵ | Toni | 2021-01-04 | |
| | | | | | ndpi_flow_struct but not the struct itself. (#1101) Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | Fix memory leak introduced in b7376cc6 (#1100) | Ivan Nardi | 2021-01-04 | |
| | ||||
* | Updated ndpi_ptree_match_addr() prototype | Luca Deri | 2020-12-30 | |
| | ||||
* | Split ptree user data in 32 and 64 bit entries | Luca Deri | 2020-12-30 | |
| | ||||
* | Bugfix for host check (#1097) | pengtian | 2020-12-29 | |
| | | | this bug is from commit `427002d14` `2020-05-06 00:31:40` | |||
* | Added known protocol on unknown port for ntop | Luca Deri | 2020-12-28 | |
| | ||||
* | Initialization fix | Luca Deri | 2020-12-28 | |
| | ||||
* | Free flow fix | Luca Deri | 2020-12-28 | |
| | ||||
* | Removed space from protocol name | Luca Deri | 2020-12-23 | |
| | ||||
* | Fixed invalid TLS check for extra processing detection | Luca Deri | 2020-12-21 | |
| | ||||
* | Rule changes work in progress | Luca Deri | 2020-12-11 | |
| | ||||
* | Rename Jabber detection name as we are not sure if it is unencrypted e.g. if ↵ | Toni | 2020-12-08 | |
| | | | | | START_TLS used. (#1079) Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | Add a connectionless DCE/RPC detection (#1078) | rafaliusz | 2020-12-08 | |
| | | | | | | | * Add connectionless DCE/RPC detection * Add DCE/RPC pcap file as well as its test result Co-authored-by: rafal <rafal.burzynski@cryptomage.com> | |||
* | Add Virtual Asssitant (Alexa, Siri) support. (#1057) | Zied Aouini | 2020-11-16 | |
| | | | | | | | | | | | | | | | * Add AmazonAlexa protocol. * Add AmazonAlexa test file and result. * Include pcapng as file format. * Rename Category to VirtualAssistant. * Add AppleSiri virtual assistant. * Fix pcapng test files format support. Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com> | |||
* | Add Tumblr support. (#1061) | Zied Aouini | 2020-11-16 | |
| | | | | | | | * Add Tumblr protocol. * Add Tumblr test file and result. Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com> | |||
* | Add Reddit support. (#1060) | Zied Aouini | 2020-11-16 | |
| | | | | | | | * Add Reddit protocol. * Add Reddit test file and result. Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com> | |||
* | Add Pinterest support. (#1059) | Zied Aouini | 2020-11-16 | |
| | | | | | | | * Add Pinterest protocol. * Add Pinterest test file and result. Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com> | |||
* | Add DisneyPlus protocol. (#1058) | Zied Aouini | 2020-11-16 | |
| | ||||
* | Renumbered AmongUs protocol | Luca Deri | 2020-11-09 | |
| | ||||
* | Added support for AmongUs. (#1054) | Toni | 2020-11-09 | |
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | :bulb: Add mongodb protocol dissector (#1048) | Leonn | 2020-11-03 | |
| | ||||
* | Improve skype detection (#1039) | Igor Duarte | 2020-10-27 | |
| | | | | | | | * Add new skype pcap PCAP extracted from SkypeIRC.cap (available in https://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=get&target=SkypeIRC.cap) * Improve skype detection | |||
* | Added -D flag for detecting DoH in the wild | Luca Deri | 2020-10-26 | |
| | | | | Removed heuristic from CiscoVPN as it leads to false positives | |||
* | Various improvemement when using ndpi_pref_enable_tls_block_dissection: | Luca Deri | 2020-10-24 | |
| | | | | | | application data TLS blocks are now ignored when exchanged before - the end of certificate negotiation (up to TLS 1.2) - change cipher | |||
* | Added CPHA - CheckPoint High Availability Protocol protocl support | Luca Deri | 2020-10-22 | |
| | ||||
* | Fixes #1033 | Luca Deri | 2020-10-21 | |
| | ||||
* | Remove possible invalid read (#1035) | Igor Duarte | 2020-10-21 | |
| | ||||
* | Improved processing of IPv6 header | Luca Deri | 2020-10-15 | |
| | | | | Improved QUIC serialization | |||
* | Various optimizations to reduce not-necessary calls | Luca Deri | 2020-09-24 | |
| | | | | | Optimized various UDP dissectors Removed dead protocols such as pando and pplive | |||
* | Merge pull request #1017 from lnslbrty/fix/mingw-xcompile | Luca Deri | 2020-09-20 | |
|\ | | | | | Added support for mingw xcompile. | |||
| * | Fixed shlib xcompile for x86_64-w64-mingw32 | Toni Uhlig | 2020-09-08 | |
| | | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | | Added MDNS in extra packet dissection function | Luca Deri | 2020-09-18 | |
| | | ||||
* | | Reworked MDNS dissector that is not based on the DNS dissector | Luca Deri | 2020-09-17 | |
| | | ||||
* | | Reworked DGA checks | Luca Deri | 2020-09-11 | |
| | | ||||
* | | Added buffer check in DGA analysis | Luca Deri | 2020-09-10 | |
| | |