aboutsummaryrefslogtreecommitdiff
path: root/src
Commit message (Collapse)AuthorAge
...
* Implementation of Bitcoin, Ethereum, ZCash, Monero dissectors all identified ↵Luca2018-09-18
| | | | | | as mining Implements #503
* Addes support for SMBv1 traffic that has been split from SMBv23Luca Deri2018-09-17
|
* Added ndpi_protocol2id() API callLuca2018-09-17
|
* Merge branch 'dev' of https://github.com/ntop/nDPI into devLuca Deri2018-09-13
|\
| * Merge pull request #606 from eglooca/pr-fix-parse-packet-line-infoLuca Deri2018-09-13
| |\ | | | | | | Prevent missing text lines and invalid reads past end-of-buffer.
| | * Prevent invalid reads past end-of-buffer.Darryl Sokoloski2018-09-11
| | | | | | | | | | | | | | | | | | The recent revert commit applied to ndpi_parse_packet_line_info resurrects an old bug where the last lines in packets that end with a CR+NL will not be parsed. This revert commit is an attempt to prevent invalid reads past the end of the packet buffer. This PR moves the end-of-bounds test to before the 16-bit read and returns if true. This fixes the case where a text line ends aligned to the buffer-end boundary, and it fixes the invalid read issue. Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
| * | Fixed bug in spotify dissector (subnet /24 was matched as /22).Daniele De Sensi2018-09-11
| |/ | | | | | | Slight performance improvements in spotify dissector (avoid doing ntohl and masking in each and all if conditions).
* / Improved Facebook Messenger supportLuca Deri2018-09-13
|/
* parse protocol's string_to_match into hex which could be match by hyperscan ↵诟屍2018-09-11
| | | | | | | | | | | | | (#589) * if one protocol do not have it's regex (pattern_to_match) then parse it's string (string_to_match) into hex so we can match every protocol with hyperscan * fix string2hex() * fix init_hyperscan(): check return value of string2hex()
* Fixes broken hyperscan compilationSimone Mainardi2018-09-11
|
* Fixes #578Luca2018-09-11
|
* Merge pull request #603 from pavlosantoniou/devLuca Deri2018-09-11
|\ | | | | Avoid possible NULL pointer dereference in ndpi_detection_process_packet
| * Avoid possible NULL pointer dereference in ndpi_detection_process_packetPavlos Antoniou2018-09-09
| |
* | Fixes #601Luca2018-09-11
|/
* Added fix for out of boundary memory accessLuca Deri2018-09-05
| | | | Fixes warning
* FIX: dropbox dissector. UPD: updated pcap file with new dropbox pktsCampus2018-09-05
|
* Merge pull request #598 from madpilot78/include_hyperscan_fixLuca Deri2018-08-30
|\ | | | | Move the configure include file inclusion and code depending on it in…
| * Move the configure include file inclusion and code depending on it in code ↵Guido Falsi2018-08-27
| | | | | | | | protected by the NDPI_LIB_COMPILATION define, this should avoid it polluting the environment when including this file from ntopng.
* | Added missing categorization when giveup/guess is calledLuca2018-08-30
| | | | | | | | | | Added optimization for TCP flows that do not start with a SYN packet: early giveup is performed Code cleanup
* | Better clang handlingLuca2018-08-30
| |
* | Cleaned up makefileLuca2018-08-30
|/ | | | Used clang instead of gcc on MacOS
* Added target for shared liubrary creationLuca2018-08-25
| | | | | Added target for install Fixes #593
* Merge branch 'pr-remove-autoconf-include' of ↵Campus2018-08-23
|\ | | | | | | https://github.com/eglooca/ndpi-pr into eglooca-pr-remove-autoconf-include
| * Remove autoconf include from typedefs headers.Darryl Sokoloski2018-08-16
| | | | | | | | | | | | Including this file in any "public" API header breaks all projects that also use autotools because macros such as PACKAGE_VERSION will be redefined. Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* | Merge pull request #592 from alm-A/patch-3Michele Campus2018-08-23
|\ \ | | | | | | ndpi_typedefs.h : missing include
| * | ndpi_typedefs.h : missing includealm-A2018-08-22
| | | | | | | | | | | | | | | | | | include to ndpi_protocol_ids.h needed for: - NDPI_PROTOCOL_SIZE - NDPI_MAX_SUPPORTED_PROTOCOLS - NDPI_MAX_NUM_CUSTOM_PROTOCOLS
* | | ADD: add prototype of function ht_free in hash.h - DEL: delete include file ↵Campus2018-08-23
|/ / | | | | | | .c in ndpi_main.c
* | Changed type to ease compilation accross platformsLuca Deri2018-08-20
| |
* | Compilation fixLuca Deri2018-08-20
| |
* | Merge pull request #586 from eglooca/pr-sys-types-include-for-actypes-hLuca Deri2018-08-17
|\ \ | | | | | | Include <sys/types.h> for u_int16_t.
| * | Include sys/types.h for u_int16_t.Darryl Sokoloski2018-08-16
| |/ | | | | | | | | | | On various embedded environments (OpenWrt, EdgeOS), <sys/types.h> must be included for u_intX_t types. The Hyperscan changes made recently introducted a u_int16_t member in actypes.h which is undeclared in certainly environments without this include. Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* | Hyperscan regex for domains such as .com.cn or .co.ukSimone Mainardi2018-08-17
| |
* | Webex category fixSimone Mainardi2018-08-17
| |
* | Fixes hyperscan WeChat detectionSimone Mainardi2018-08-17
| |
* | Fixes hyperscan skype detectionSimone Mainardi2018-08-17
| |
* | Fixes weibo detectionSimone Mainardi2018-08-17
| |
* | Initial hyperscan support for all protocolsSimone Mainardi2018-08-17
|/
* Adds hyperscan support for Apple and DropboxSimone Mainardi2018-08-16
|
* Hyperscan compilation fixSimone Mainardi2018-08-16
|
* Fix for #400Luca Deri2018-08-16
|
* Completed custom category implementationLuca Deri2018-08-16
|
* Merge branch 'dev' of https://github.com/ntop/nDPI into devLuca Deri2018-08-16
|\
| * Hyperscan compilation fixesSimone Mainardi2018-08-16
| |
* | Generic protocol cleanup (work in progress)Luca Deri2018-08-16
|/
* Added new dissector for Memcached.Darryl Sokoloski2018-08-15
| | | | Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* Updated YouTube supportLuca Deri2018-08-06
|
* Merge pull request #576 from eglooca/pr-ssdp-min-lengthLuca Deri2018-07-25
|\ | | | | Adjust the SSDP dissector's minimum packet length
| * Decreased minimum packet payload length down to 19 from 100 for SSDP.Darryl Sokoloski2018-07-20
| | | | | | | | The minimum packet payload length is: "NOTIFY * HTTP/1.1" + 0x0d + 0x0a (19 bytes).
* | Merge pull request #577 from eglooca/pr-parse-packet-line-info-lengthLuca Deri2018-07-25
|\ \ | | | | | | Fix end-of-line bounds handling.
| * | Fix end-of-line bounds handling.Darryl Sokoloski2018-07-20
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The existing implementation misses ending lines and as a result, fails to match certain protocols (SMTP for example, which needs to see at least 3 commain/response matches). It appears from the commit history that an attempt was made (end-1) to prevent reads past payload length. This can be ensured by simply not reading any payload that is < 3 bytes. The updated logic for this loop is: - Payload length is >= 3 bytes, or return. - Loop over payload, compare for EOL (CR + NL) sequence. - If found, process string. - If index 'a' plus two is less than payload length, increment 'a' by one and continue. - Loop return always increments index 'a' by one.
Powered by cgit, Themed by Ted Yin.