Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | Fixed nDPI prefs definition | Luca Deri | 2021-03-09 | |
| | ||||
* | Added experiemntal JA3+ implementation that can be used with -z i ndpiReader | Luca Deri | 2021-03-09 | |
| | ||||
* | HTTP: fix memory access in ndpi_http_parse_subprotocol() (#1151) | Ivan Nardi | 2021-03-09 | |
| | ||||
* | Ookla detection improvement | Luca Deri | 2021-03-09 | |
| | ||||
* | Added Ookla detection over IPv6 | Luca Deri | 2021-03-09 | |
| | ||||
* | Ookla fixes | Luca Deri | 2021-03-09 | |
| | ||||
* | Improved detection of Ookla speedtest and openspeedtest.com | Luca Deri | 2021-03-09 | |
| | ||||
* | Added the ability to define a custom DGA detection function by overwriting | Luca Deri | 2021-03-08 | |
| | | | | | the value of the function pointer ndpi_dga_function curently set to NULL (that means the nDPI internal DGA function will be used) | |||
* | Fix some stack-use-after-return errors in automa code (#1150) | Ivan Nardi | 2021-03-08 | |
| | ||||
* | Add support for Snapchat voip calls (#1147) | Ivan Nardi | 2021-03-06 | |
| | | | | | | | | | * Add support for Snapchat voip calls Snapchat multiplexes some of its audio/video real time traffic with QUIC sessions. The peculiarity of these sessions is that they are Q046 and don't have any SNI. * Fix tests with libgcrypt disabled | |||
* | Add ndpi_serialize_binary_boolean for consistency. Fix comments. | Alfredo Cardigliano | 2021-03-04 | |
| | ||||
* | Improved DGA detection | Luca Deri | 2021-03-03 | |
| | | | | | | | | Before Accuracy 66%, Precision 86%, Recall 38% After Accuracy 71%, Precision 89%, Recall 49% | |||
* | Removed check for knowns protocols (major and app protocols) | Luca Deri | 2021-03-03 | |
| | ||||
* | Improved DGA detection with trigrams. Disadvantage: slower startup time | Luca Deri | 2021-03-03 | |
| | | | | | Reworked Tor dissector embedded in TLS (fixes #1141) Removed false positive on HTTP User-Agent | |||
* | DTLS: improve support (#1146) | Ivan Nardi | 2021-03-02 | |
| | | | | | | | * DTLS: add some pcap tests * DTLS: fix parsing of Client/Server Helllo message * DTLS: add parsing of server certificates | |||
* | TOR: update node list (#1144) | Ivan Nardi | 2021-03-02 | |
| | | | | | https://panwdbl.appspot.com/lists/ettor.txt list is no more available Close #1141 | |||
* | Added HW checks | Luca Deri | 2021-03-01 | |
| | ||||
* | Added further HW checks | Luca Deri | 2021-03-01 | |
| | ||||
* | Holt-Winters calculation improvement | Luca Deri | 2021-02-27 | |
| | ||||
* | Added NDPI_MALICIOUS_SHA1 flow risk. (#1142) | Toni | 2021-02-26 | |
| | | | | | | * An external file which contains known malicious SSL certificate SHA-1 hashes can be loaded via ndpi_load_malicious_sha1_file(...) Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | Improved DNS dissector | Luca Deri | 2021-02-26 | |
| | ||||
* | [Fix] replace free to ndpi_free (#1140) | pengtian | 2021-02-25 | |
| | | | same as https://github.com/ntop/nDPI/issues/1096 | |||
* | Added protocol breed to JSON serializer. (#1137) | Toni | 2021-02-25 | |
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | Fix ndpi_fill_prefix_v6 | Alfredo Cardigliano | 2021-02-24 | |
| | ||||
* | Windows code cleanup | Luca Deri | 2021-02-24 | |
| | ||||
* | Modified JA3 fingerprint message | Luca Deri | 2021-02-24 | |
| | ||||
* | Add more utility functions to work with patricia trees | Alfredo Cardigliano | 2021-02-23 | |
| | ||||
* | Update ndpi_patricia_walk_inorder API | Alfredo Cardigliano | 2021-02-23 | |
| | ||||
* | Add support for MAC to Patricia tree. Expose full API to applications. Add ↵ | Alfredo Cardigliano | 2021-02-23 | |
| | | | | utility functions. | |||
* | Added NDPI_MALICIOUS_JA3 flow risk | Luca Deri | 2021-02-22 | |
| | | | | Added ndpi_load_malicious_ja3_file() API call | |||
* | Implemented TLS Certificate Sibject matching | Luca Deri | 2021-02-22 | |
| | | | | Improved AnyDesk detection | |||
* | Removed unused NDPI_RISKY_COUNTRY | Luca Deri | 2021-02-21 | |
| | ||||
* | Added risky domain flow-risk support | Luca Deri | 2021-02-21 | |
| | ||||
* | Fixes #1136 | Luca Deri | 2021-02-19 | |
| | ||||
* | Removed old unused code | Luca Deri | 2021-02-19 | |
| | ||||
* | Fix leak | Alfredo Cardigliano | 2021-02-19 | |
| | ||||
* | Added ndpi_get_geoip() APi call | Luca Deri | 2021-02-18 | |
| | ||||
* | GeoIP support | Luca Deri | 2021-02-18 | |
| | ||||
* | Initial geoip support | Luca Deri | 2021-02-18 | |
| | ||||
* | Improved nDPI string matching algorithm | Luca Deri | 2021-02-18 | |
| | ||||
* | Fixes due to the fragment mananegr code | Luca Deri | 2021-02-18 | |
| | ||||
* | Added new risks (future use) | Luca Deri | 2021-02-16 | |
| | | | | | | - NDPI_RISKY_ASN - NDPI_RISKY_DOMAIN - NDPI_RISKY_COUNTRY | |||
* | Fix warning | Alfredo Cardigliano | 2021-02-12 | |
| | ||||
* | Performance optimization to avoid un-necessary calls and thus increase the ↵ | Luca Deri | 2021-02-11 | |
| | | | | overall performance | |||
* | Some optimizations during flow guess | Luca Deri | 2021-02-10 | |
| | ||||
* | Code refactory | Luca Deri | 2021-02-10 | |
| | ||||
* | Removed now obsolete NDPI_DETECTION_SUPPORT_IPV6: code is more readeable now | Luca Deri | 2021-02-10 | |
| | ||||
* | Improved FTP_CONTROL detection | Luca Deri | 2021-02-10 | |
| | ||||
* | Added check for avoiding long dissections | Luca Deri | 2021-02-10 | |
| | ||||
* | Fix small memory leak (#1133) | Ivan Nardi | 2021-02-10 | |
| | | | Now function definition matches the prototype in ndpi_api.h.in |