Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Add support for some Chinese shopping platforms (Temu, Shein and Taobao) (#2615) | Ivan Nardi | 2024-11-12 |
| | | | Extend content match list | ||
* | SIP: extract some basic metadata | Ivan Nardi | 2024-11-12 |
| | |||
* | SIP: rework detection | Ivan Nardi | 2024-11-12 |
| | |||
* | Unify ndpi debug logging to always use a u16 protocol id (#2613) | Toni | 2024-11-11 |
| | | | | | * fixes SonarCloud complaint Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Heap-buffer-overflow fix | Luca Deri | 2024-11-04 |
| | |||
* | fuzz: improve coverage (#2612) | Ivan Nardi | 2024-11-01 |
| | | | Add fuzzer to test `ndpi_quick_encrypt()` and `ndpi_quick_decrypt()` | ||
* | Add Naver protocol support (#2610) | Vladimir Gavrilov | 2024-11-01 |
| | |||
* | HTTP: fix leak and out-of-bound error on credential extraction (#2611) | Ivan Nardi | 2024-11-01 |
| | |||
* | Added HTTP credentials extraction | Luca Deri | 2024-10-31 |
| | |||
* | Update buff_diff | Alfredo Cardigliano | 2024-10-31 |
| | |||
* | Fix blocks with inner-json mode | Alfredo Cardigliano | 2024-10-31 |
| | |||
* | Add new json serialization type ndpi_serialization_format_inner_json | Alfredo Cardigliano | 2024-10-31 |
| | |||
* | TikTok cleanup | Luca | 2024-10-30 |
| | |||
* | DNS reponse addresses are now serialized in JSON | Luca | 2024-10-30 |
| | |||
* | TLS: export heuristic fingerprint as metadata (#2609) | Ivan Nardi | 2024-10-28 |
| | |||
* | Add Paltalk protocol support (#2606) | Vladimir Gavrilov | 2024-10-28 |
| | |||
* | Added ndpi_str_endswith() | Luca Deri | 2024-10-28 |
| | |||
* | Fixes TCP fingerprint calculation when multiple EOL are specified in TCP options | Luca Deri | 2024-10-27 |
| | |||
* | Updated fingerprints | Luca Deri | 2024-10-27 |
| | |||
* | Added Ubuntu 20 fingerprint | Luca Deri | 2024-10-21 |
| | |||
* | Added further TCP fingerprints | Luca Deri | 2024-10-21 |
| | |||
* | Fix `ndpi_tot_allocated_memory` calculation if `ndpi_calloc()` used (#2604) | Toni | 2024-10-21 |
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Improved fingerprints | Luca Deri | 2024-10-21 |
| | |||
* | Improved TCP fingerprint | Luca Deri | 2024-10-20 |
| | |||
* | Improved TCP fingerprint | Luca Deri | 2024-10-20 |
| | |||
* | Reworked TCP fingeprint implementation | Luca Deri | 2024-10-20 |
| | |||
* | STUN: fix monitoring with RTCP flows (#2603) | Ivan Nardi | 2024-10-19 |
| | |||
* | Added support for RDP over TLS | Luca Deri | 2024-10-19 |
| | |||
* | Renamed os hints to avoid name clashes | Luca Deri | 2024-10-19 |
| | |||
* | Improved TCP fingepring calculation | Luca Deri | 2024-10-18 |
| | | | | Adde basidc OS detection based on TCP fingerprint | ||
* | Add configuration of TCP fingerprint computation (#2598) | Ivan Nardi | 2024-10-18 |
| | | | Extend configuration of raw format of JA4C fingerprint | ||
* | Added further boundary checks in TCP options parsing (#2597) | Luca Deri | 2024-10-18 |
| | | | * Added further memory checks | ||
* | Added TCP header check | Luca Deri | 2024-10-18 |
| | |||
* | Fixes buffer overflow when parsing invalid TCP options | Luca Deri | 2024-10-17 |
| | |||
* | Added -L <domain suffix> for loading domain suffixes | Luca Deri | 2024-10-15 |
| | | | | Exported domainanme in JSON file (-K JSON) | ||
* | Implemented nDPI TCP fingerprint | Luca Deri | 2024-10-15 |
| | |||
* | STUN: minor fix for RTCP traffic (#2593) | Ivan Nardi | 2024-10-15 |
| | |||
* | STUN: if the same metadata is found multiple times, keep the first value (#2591) | Ivan Nardi | 2024-10-15 |
| | |||
* | STUN: fix monitoring of Whatsapp and Zoom flows (#2590) | Ivan Nardi | 2024-10-15 |
| | |||
* | Add monitoring capability (#2588) | Ivan Nardi | 2024-10-14 |
| | | | | | | | | | | | | | Allow nDPI to process the entire flows and not only the first N packets. Usefull when the application is interested in some metadata spanning the entire life of the session. As initial step, only STUN flows can be put in monitoring. See `doc/monitoring.md` for further details. This feature is disabled by default. Close #2583 | ||
* | Fixed JA4 invalid computation due to code bug and uninitialized values | Luca Deri | 2024-10-13 |
| | |||
* | Added sonos dissector | Luca Deri | 2024-10-13 |
| | |||
* | Added support for printing JA4r when enabled | Luca Deri | 2024-10-11 |
| | |||
* | Added -N option for dumping/restoring the DNS cache (when enabled) | Luca Deri | 2024-10-10 |
| | | | | Example ndpiReader -i en0 --cfg=dpi.address_cache_size,32768 -N /tmp/a | ||
* | Added new API calls for serializing/restoring the DNS cache | Luca Deri | 2024-10-10 |
| | | | | | - bool ndpi_address_cache_dump(struct ndpi_address_cache *cache, char *path, u_int32_t epoch_now); - u_int32_t ndpi_address_cache_restore(struct ndpi_address_cache *cache, char *path, u_int32_t epoch_now); | ||
* | TTL Cache Fix (#2582) | Luca Deri | 2024-10-08 |
| | | | | | * Added missing free * Win fix | ||
* | Removed unused variable | Luca Deri | 2024-10-08 |
| | |||
* | Offset fix | Luca Deri | 2024-10-08 |
| | |||
* | Implemented (disabled by default) DNS host cache. You can set the cache size ↵ | Luca Deri | 2024-10-07 |
| | | | | | | | | | | as follows: ndpiReader --cfg=dpi.address_cache_size,1000 -i <pcap>.pcap In the above example the cache has up to 1000 entries. In jcase ndpiReader exports data in JSON, the cache hostname (if found) is exported in the field server_hostname | ||
* | Indent fix | Luca Deri | 2024-10-07 |
| |