aboutsummaryrefslogtreecommitdiff
path: root/src/lib/ndpi_main.c
Commit message (Collapse)AuthorAge
* Compute packet_direction consistently independently from endiannessLudovico Cavedon2019-01-16
| | | | | | | | | | | Ensure packet_direction is computed in the same way on little endian and big endian architectures. This change will convert IP addresses and port from little endian to host endian (instead of converting from network endian to host endian) so that it does not change the behavior on little endian architecture where ndpi is usually developed. A better (but more invasive) change would be to use the ntoh*() functions and then adjust all affected tests.
* nDPi now finally honours dissection of HTTP responsesLuca Deri2019-01-07
|
* Added Modbus over TCP dissectorLuca Deri2018-12-21
|
* Added Ookla cacheLuca Deri2018-12-17
|
* Expose ndpi_fill_ip_protocol_category api to handle ICMP flows categoryemanuele-f2018-12-12
|
* Improvements in SpeedTest (Ookla) detectionLuca Deri2018-12-10
|
* Added the concept of protocols that can have subprotocols. Example Spotify ↵Luca2018-11-30
| | | | | | cannot have subprotocols, DNS can (DNS.Spotify) Merged Skype call in/out in Skype Call
* Fix for custom protocol loadLuca2018-11-30
|
* Improved heuristicsLuca2018-11-29
| | | | Used the host guessed protocol if upper protocol has not been detected
* Added Signal.org dissectorLuca2018-11-28
|
* Improved skype, teredo, netbios heuristicsLuca Deri2018-11-21
| | | | Changed ndpi_detection_giveup() API: guess is now part of the call
* Improved Skype detectionLuca Deri2018-11-19
| | | | | Update test results Added initialization for some free protocols
* Improved WeChat supportLuca Deri2018-11-19
| | | | | Removed Musical.ly protocol as the service has been merged with another one and thus it is no longer used Improved guess for UDP protocols
* Added ndpi_flowv4_flow_hash and ndpi_flowv6_flow_hash skeletons forLuca Deri2018-11-14
| | | | implementing https://github.com/corelight/community-id-spec
* Merge pull request #636 from 2miksyn/devLuca Deri2018-11-14
|\ | | | | Improve SSL detection, prevent false positive SSL detection
| * Improve SSL detection, prevent false positive SSL detectionMikhail Smirnov2018-11-09
| |
* | Improved Skype detectionLuca Deri2018-11-09
| |
* | Improved Messenger/Hangout detectionLuca Deri2018-11-08
| |
* | Removed skype false positivesLuca Deri2018-11-08
|/ | | | better STUP detection
* Implemented UPnP dissectorLuca Deri2018-11-07
|
* Added NDPI_MIN_NUM_STUN_DETECTION constantLuca2018-10-29
|
* Fix category match not using client certificateemanuele-f2018-10-11
|
* Custom categories have now priority over protocol related categoriesemanuele-f2018-10-10
|
* Fix custom categories match by IP not workingemanuele-f2018-10-10
|
* Add function to search host in custom categoriesemanuele-f2018-10-10
|
* Fix category field not accounted in ndpi_get_proto_categoryemanuele-f2018-10-10
| | | | Fixes #627
* Merge pull request #610 from eglooca/pr-nest-log-sinkLuca Deri2018-10-02
|\ | | | | New dissector: Nest Log Sink
| * New dissector: Nest Log SinkDarryl Sokoloski2018-09-19
| | | | | | | | | | | | This is a dissector for the Nest Log Sink protocol which is used by the Nest Protect (https://nest.com/ca/smoke-co-alarm/overview/). Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* | Renamed files to avoid name clashes during compilation with other libsLuca Deri2018-09-29
| |
* | Renamed source files to avoid clashesLuca Deri2018-09-29
| |
* | Added check for not going beyond the string lenghtLuca Deri2018-09-24
|/
* Mapped the mining category in ndpi_category_get_name()Luca2018-09-18
|
* Implementation of Bitcoin, Ethereum, ZCash, Monero dissectors all identified ↵Luca2018-09-18
| | | | | | as mining Implements #503
* Addes support for SMBv1 traffic that has been split from SMBv23Luca Deri2018-09-17
|
* Added ndpi_protocol2id() API callLuca2018-09-17
|
* Prevent invalid reads past end-of-buffer.Darryl Sokoloski2018-09-11
| | | | | | The recent revert commit applied to ndpi_parse_packet_line_info resurrects an old bug where the last lines in packets that end with a CR+NL will not be parsed. This revert commit is an attempt to prevent invalid reads past the end of the packet buffer. This PR moves the end-of-bounds test to before the 16-bit read and returns if true. This fixes the case where a text line ends aligned to the buffer-end boundary, and it fixes the invalid read issue. Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* parse protocol's string_to_match into hex which could be match by hyperscan ↵诟屍2018-09-11
| | | | | | | | | | | | | (#589) * if one protocol do not have it's regex (pattern_to_match) then parse it's string (string_to_match) into hex so we can match every protocol with hyperscan * fix string2hex() * fix init_hyperscan(): check return value of string2hex()
* Fixes broken hyperscan compilationSimone Mainardi2018-09-11
|
* Avoid possible NULL pointer dereference in ndpi_detection_process_packetPavlos Antoniou2018-09-09
|
* Added fix for out of boundary memory accessLuca Deri2018-09-05
| | | | Fixes warning
* Merge pull request #598 from madpilot78/include_hyperscan_fixLuca Deri2018-08-30
|\ | | | | Move the configure include file inclusion and code depending on it in…
| * Move the configure include file inclusion and code depending on it in code ↵Guido Falsi2018-08-27
| | | | | | | | protected by the NDPI_LIB_COMPILATION define, this should avoid it polluting the environment when including this file from ntopng.
* | Added missing categorization when giveup/guess is calledLuca2018-08-30
|/ | | | | Added optimization for TCP flows that do not start with a SYN packet: early giveup is performed Code cleanup
* Merge branch 'pr-remove-autoconf-include' of ↵Campus2018-08-23
|\ | | | | | | https://github.com/eglooca/ndpi-pr into eglooca-pr-remove-autoconf-include
| * Remove autoconf include from typedefs headers.Darryl Sokoloski2018-08-16
| | | | | | | | | | | | Including this file in any "public" API header breaks all projects that also use autotools because macros such as PACKAGE_VERSION will be redefined. Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* | ADD: add prototype of function ht_free in hash.h - DEL: delete include file ↵Campus2018-08-23
| | | | | | | | .c in ndpi_main.c
* | Merge pull request #586 from eglooca/pr-sys-types-include-for-actypes-hLuca Deri2018-08-17
|\ \ | | | | | | Include <sys/types.h> for u_int16_t.
| * | Include sys/types.h for u_int16_t.Darryl Sokoloski2018-08-16
| |/ | | | | | | | | | | On various embedded environments (OpenWrt, EdgeOS), <sys/types.h> must be included for u_intX_t types. The Hyperscan changes made recently introducted a u_int16_t member in actypes.h which is undeclared in certainly environments without this include. Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* / Webex category fixSimone Mainardi2018-08-17
|/
* Adds hyperscan support for Apple and DropboxSimone Mainardi2018-08-16
|
Powered by cgit, Themed by Ted Yin.