Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Added detection of self-signed TLS certificates | Luca Deri | 2020-05-10 |
| | |||
* | Added the ability to detect when a known protocol is using a non-standard port | Luca Deri | 2020-05-10 |
| | | | | Added check to spot executables exchanged via HTTP | ||
* | Cleaned hyperscan leftover | Luca Deri | 2020-05-08 |
| | | | | Added further hyperscan hooks | ||
* | Added TLS issuerDN and subjectDN | Luca Deri | 2020-05-07 |
| | |||
* | Reworked TLS dissector with a certificate RDN sequence reader | Luca Deri | 2020-05-07 |
| | |||
* | Fixed category matching | Luca Deri | 2020-05-06 |
| | |||
* | API cleanup for indetifying explicitly in automa's what we're searching ↵ | Luca Deri | 2020-05-06 |
| | | | | | | (protocol or category) Removed hyperscan support that is apperently unused | ||
* | Updated automa API to use 32 bit values splits from protocol/categpry | Luca Deri | 2020-05-06 |
| | |||
* | Added support for Telegram v6 | Luca Deri | 2020-05-06 |
| | |||
* | Introduced custom protocols with IP and (optional) port support | Luca Deri | 2020-05-06 |
| | | | | | | | | | | | | | | | | Example - Single IP address ip:213.75.170.11@CustomProtocol - IP address with CIDR ip:213.75.170.11/32@CustomProtocol - IP address with CIDR and port ip:213.75.170.11/32:443@CustomProtocol Please note that there are some restrictions on the port usage. They have been listed in example/protos.txt | ||
* | Various fixes to patricia tree handling | Luca Deri | 2020-05-06 |
| | |||
* | False positive fixes | Luca Deri | 2020-05-06 |
| | |||
* | Updated API | Luca Deri | 2020-05-06 |
| | |||
* | Reworked protocol handling chnging it is u_int16_t | Luca Deri | 2020-05-06 |
| | |||
* | Removed now obsolete MSN protocol | Luca Deri | 2020-05-03 |
| | | | | Added nats.io protocol dissector | ||
* | SSH boundary check rework | Luca Deri | 2020-04-30 |
| | |||
* | Minor cleanup | Luca Deri | 2020-04-30 |
| | |||
* | Better fix for integer overflow in SSH | Philippe Antoine | 2020-04-30 |
| | | | | Credits to GHSL | ||
* | Merge pull request #883 from leonn/websocket | Luca Deri | 2020-04-27 |
|\ | | | | | :bulb: implement WebSocket protocol dissector | ||
| * | :bulb: implement websocket protocol dissector | Leonn Paiva | 2020-04-26 |
| | | |||
* | | Handle empty blocks | Alfredo Cardigliano | 2020-04-27 |
|/ | |||
* | Enable IEC 60870-5-104 dissector | Alfredo Cardigliano | 2020-04-24 |
| | |||
* | Warning fix | Luca Deri | 2020-04-22 |
| | |||
* | Merge pull request #881 from leonn/bug_protocol_was_guessed | Luca Deri | 2020-04-22 |
|\ | | | | | Bug protocol was guessed | ||
| * | :bug: use protocol_was_guessed in ndpi_detection_giveup | Leonn Paiva | 2020-04-22 |
| | | |||
| * | :cool: code ident & style | Leonn Paiva | 2020-04-22 |
| | | |||
* | | Fix some compilation warnings | Nardi Ivan | 2020-04-20 |
| | | |||
* | | Office365 renamed to Microsoft365 (by Microsoft) | Luca Deri | 2020-04-20 |
| | | |||
* | | Updated node list (fixes #766) | Luca Deri | 2020-04-20 |
| | | |||
* | | CiscoVPN dissection improvements | Luca Deri | 2020-04-17 |
|/ | |||
* | Added detection of Microsoft Teams | Luca Deri | 2020-04-16 |
| | |||
* | Fixed invalid check | Luca Deri | 2020-04-15 |
| | |||
* | Adds netbios bound check | Philippe Antoine | 2020-04-15 |
| | |||
* | TLS initializes version_str | Philippe Antoine | 2020-04-15 |
| | |||
* | Adds tls check before reading memory | Philippe Antoine | 2020-04-15 |
| | |||
* | Use ndpi_handle_ipv6_extension_headers in reader_util | Philippe Antoine | 2020-04-15 |
| | |||
* | Adds bound check for IRC | Philippe Antoine | 2020-04-15 |
| | |||
* | Fix integer overflow in quic | Philippe Antoine | 2020-04-15 |
| | |||
* | Adds bound check in TLS | Philippe Antoine | 2020-04-15 |
| | |||
* | Fixes OOB reads in postgres | Philippe Antoine | 2020-04-15 |
| | | | | Reported by GHSL | ||
* | Restored ndpi_get_api_version() prototype | Luca Deri | 2020-04-15 |
| | |||
* | Invalid function definition fix | Luca Deri | 2020-04-13 |
| | |||
* | Merge pull request #869 from disconnect3d/patch-2 | Luca Deri | 2020-04-15 |
|\ | | | | | Fix incorrect "<iq from=\"' parsing | ||
| * | Fix incorrect "<iq from=\"' parsing | Disconnect3d | 2020-04-13 |
| | | | | | | This PR fixes a wrong size arg passed to memcmp when checking for "<iq from=\"" and "<iq from \'" strings. | ||
* | | Merge pull request #868 from disconnect3d/patch-1 | Luca Deri | 2020-04-15 |
|\ \ | | | | | | | Fix off by one when checking for "GET / HTTP" string | ||
| * | | Fix off by one when checking for "GET / HTTP" string | Disconnect3d | 2020-04-13 |
| |/ | |||
* | | Merge pull request #867 from IvanNardi/memory-leaks | Luca Deri | 2020-04-15 |
|\ \ | |/ |/| | Memory leaks | ||
| * | Fix some debug messages | Nardi Ivan | 2020-04-08 |
| | | |||
| * | kerberos: fix heap-overflow error | Nardi Ivan | 2020-04-08 |
| | | |||
| * | s7comm: fix heap-overflow error | Nardi Ivan | 2020-04-08 |
| | |