Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | Removed check for knowns protocols (major and app protocols) | Luca Deri | 2021-03-03 | |
| | ||||
* | Improved DGA detection with trigrams. Disadvantage: slower startup time | Luca Deri | 2021-03-03 | |
| | | | | | Reworked Tor dissector embedded in TLS (fixes #1141) Removed false positive on HTTP User-Agent | |||
* | DTLS: improve support (#1146) | Ivan Nardi | 2021-03-02 | |
| | | | | | | | * DTLS: add some pcap tests * DTLS: fix parsing of Client/Server Helllo message * DTLS: add parsing of server certificates | |||
* | TOR: update node list (#1144) | Ivan Nardi | 2021-03-02 | |
| | | | | | https://panwdbl.appspot.com/lists/ettor.txt list is no more available Close #1141 | |||
* | Added HW checks | Luca Deri | 2021-03-01 | |
| | ||||
* | Added further HW checks | Luca Deri | 2021-03-01 | |
| | ||||
* | Holt-Winters calculation improvement | Luca Deri | 2021-02-27 | |
| | ||||
* | Added NDPI_MALICIOUS_SHA1 flow risk. (#1142) | Toni | 2021-02-26 | |
| | | | | | | * An external file which contains known malicious SSL certificate SHA-1 hashes can be loaded via ndpi_load_malicious_sha1_file(...) Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | Improved DNS dissector | Luca Deri | 2021-02-26 | |
| | ||||
* | [Fix] replace free to ndpi_free (#1140) | pengtian | 2021-02-25 | |
| | | | same as https://github.com/ntop/nDPI/issues/1096 | |||
* | Added protocol breed to JSON serializer. (#1137) | Toni | 2021-02-25 | |
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | Fix ndpi_fill_prefix_v6 | Alfredo Cardigliano | 2021-02-24 | |
| | ||||
* | Windows code cleanup | Luca Deri | 2021-02-24 | |
| | ||||
* | Modified JA3 fingerprint message | Luca Deri | 2021-02-24 | |
| | ||||
* | Add more utility functions to work with patricia trees | Alfredo Cardigliano | 2021-02-23 | |
| | ||||
* | Update ndpi_patricia_walk_inorder API | Alfredo Cardigliano | 2021-02-23 | |
| | ||||
* | Add support for MAC to Patricia tree. Expose full API to applications. Add ↵ | Alfredo Cardigliano | 2021-02-23 | |
| | | | | utility functions. | |||
* | Added NDPI_MALICIOUS_JA3 flow risk | Luca Deri | 2021-02-22 | |
| | | | | Added ndpi_load_malicious_ja3_file() API call | |||
* | Implemented TLS Certificate Sibject matching | Luca Deri | 2021-02-22 | |
| | | | | Improved AnyDesk detection | |||
* | Removed unused NDPI_RISKY_COUNTRY | Luca Deri | 2021-02-21 | |
| | ||||
* | Added risky domain flow-risk support | Luca Deri | 2021-02-21 | |
| | ||||
* | Fixes #1136 | Luca Deri | 2021-02-19 | |
| | ||||
* | Removed old unused code | Luca Deri | 2021-02-19 | |
| | ||||
* | Fix leak | Alfredo Cardigliano | 2021-02-19 | |
| | ||||
* | Added ndpi_get_geoip() APi call | Luca Deri | 2021-02-18 | |
| | ||||
* | GeoIP support | Luca Deri | 2021-02-18 | |
| | ||||
* | Initial geoip support | Luca Deri | 2021-02-18 | |
| | ||||
* | Improved nDPI string matching algorithm | Luca Deri | 2021-02-18 | |
| | ||||
* | Fixes due to the fragment mananegr code | Luca Deri | 2021-02-18 | |
| | ||||
* | Added new risks (future use) | Luca Deri | 2021-02-16 | |
| | | | | | | - NDPI_RISKY_ASN - NDPI_RISKY_DOMAIN - NDPI_RISKY_COUNTRY | |||
* | Fix warning | Alfredo Cardigliano | 2021-02-12 | |
| | ||||
* | Performance optimization to avoid un-necessary calls and thus increase the ↵ | Luca Deri | 2021-02-11 | |
| | | | | overall performance | |||
* | Some optimizations during flow guess | Luca Deri | 2021-02-10 | |
| | ||||
* | Code refactory | Luca Deri | 2021-02-10 | |
| | ||||
* | Removed now obsolete NDPI_DETECTION_SUPPORT_IPV6: code is more readeable now | Luca Deri | 2021-02-10 | |
| | ||||
* | Improved FTP_CONTROL detection | Luca Deri | 2021-02-10 | |
| | ||||
* | Added check for avoiding long dissections | Luca Deri | 2021-02-10 | |
| | ||||
* | Fix small memory leak (#1133) | Ivan Nardi | 2021-02-10 | |
| | | | Now function definition matches the prototype in ndpi_api.h.in | |||
* | Fixed memory leaks caused by conditional free'ing for some TLS connec… (#1132) | Toni | 2021-02-10 | |
| | | | | | | | | | | | | | | | * Fixed memory leaks caused by conditional free'ing for some TLS connections. * Members of tls_quic struct should also free'd if the detected master protocol is IMAPS / POPS / SMTPS / etc. Signed-off-by: Toni Uhlig <matzeton@googlemail.com> * Prevent reader_util.c from exit()'ing if maximum flow count reached. This confuses the fuzzer. * Improved fuzz/Makefile.am to use LDADD for ../example/libndpiReader.a instead of LDFLAGS. That way, fuzz_ndpi_reader re-links to ../example/libndpiReader.a if something changed there. Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | STUN improvements | Luca Deri | 2021-02-10 | |
| | ||||
* | Fixed CPHA missing protocol initialization | Luca Deri | 2021-02-10 | |
| | | | | Improved IEC104 and IRC detection | |||
* | Dissection inprovements | Luca Deri | 2021-02-09 | |
| | ||||
* | Added checks for giving up faster on IRC and SMTP | Luca Deri | 2021-02-09 | |
| | ||||
* | Extended the API to calculate jitter | Luca Deri | 2021-02-09 | |
| | | | | | | - ndpi_jitter_init() - ndpi_jitter_free() - ndpi_jitter_add_value() | |||
* | Minor code improvements | Luca Deri | 2021-02-09 | |
| | ||||
* | Removed debug statement | Luca Deri | 2021-02-09 | |
| | ||||
* | Added timeseries forecasting support implementing Holt-Winters with ↵ | Luca Deri | 2021-02-08 | |
| | | | | | | | | | confidence interval New API calls added - ndpi_hw_init() - ndpi_hw_add_value() - ndpi_hw_free() | |||
* | Updated skype addresses | Luca Deri | 2021-02-07 | |
| | ||||
* | IP address matching update | Luca Deri | 2021-02-07 | |
| | ||||
* | Partial fix for #1129 | Luca Deri | 2021-02-05 | |
| |