| Commit message (Collapse) | Author | Age | ||
|---|---|---|---|---|
| ... | ||||
| * | Fix blocks with inner-json mode | Alfredo Cardigliano | 2024-10-31 | |
| | | ||||
| * | Add new json serialization type ndpi_serialization_format_inner_json | Alfredo Cardigliano | 2024-10-31 | |
| | | ||||
| * | TikTok cleanup | Luca | 2024-10-30 | |
| | | ||||
| * | DNS reponse addresses are now serialized in JSON | Luca | 2024-10-30 | |
| | | ||||
| * | TLS: export heuristic fingerprint as metadata (#2609) | Ivan Nardi | 2024-10-28 | |
| | | ||||
| * | Add Paltalk protocol support (#2606) | Vladimir Gavrilov | 2024-10-28 | |
| | | ||||
| * | Added ndpi_str_endswith() | Luca Deri | 2024-10-28 | |
| | | ||||
| * | Fixes TCP fingerprint calculation when multiple EOL are specified in TCP options | Luca Deri | 2024-10-27 | |
| | | ||||
| * | Updated fingerprints | Luca Deri | 2024-10-27 | |
| | | ||||
| * | Added Ubuntu 20 fingerprint | Luca Deri | 2024-10-21 | |
| | | ||||
| * | Added further TCP fingerprints | Luca Deri | 2024-10-21 | |
| | | ||||
| * | Fix `ndpi_tot_allocated_memory` calculation if `ndpi_calloc()` used (#2604) | Toni | 2024-10-21 | |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Improved fingerprints | Luca Deri | 2024-10-21 | |
| | | ||||
| * | Improved TCP fingerprint | Luca Deri | 2024-10-20 | |
| | | ||||
| * | Improved TCP fingerprint | Luca Deri | 2024-10-20 | |
| | | ||||
| * | Reworked TCP fingeprint implementation | Luca Deri | 2024-10-20 | |
| | | ||||
| * | STUN: fix monitoring with RTCP flows (#2603) | Ivan Nardi | 2024-10-19 | |
| | | ||||
| * | Added support for RDP over TLS | Luca Deri | 2024-10-19 | |
| | | ||||
| * | Renamed os hints to avoid name clashes | Luca Deri | 2024-10-19 | |
| | | ||||
| * | Increased struct size (#2599) | Luca Deri | 2024-10-19 | |
| | | ||||
| * | Improved TCP fingepring calculation | Luca Deri | 2024-10-18 | |
| | | | | | Adde basidc OS detection based on TCP fingerprint | |||
| * | Add configuration of TCP fingerprint computation (#2598) | Ivan Nardi | 2024-10-18 | |
| | | | | Extend configuration of raw format of JA4C fingerprint | |||
| * | Added further boundary checks in TCP options parsing (#2597) | Luca Deri | 2024-10-18 | |
| | | | | * Added further memory checks | |||
| * | Increased struct ndpi_flow_struct size (#2596) | Luca Deri | 2024-10-18 | |
| | | | | Build fix | |||
| * | Added TCP header check | Luca Deri | 2024-10-18 | |
| | | ||||
| * | Fixes buffer overflow when parsing invalid TCP options | Luca Deri | 2024-10-17 | |
| | | ||||
| * | Added -L <domain suffix> for loading domain suffixes | Luca Deri | 2024-10-15 | |
| | | | | | Exported domainanme in JSON file (-K JSON) | |||
| * | Implemented nDPI TCP fingerprint | Luca Deri | 2024-10-15 | |
| | | ||||
| * | STUN: minor fix for RTCP traffic (#2593) | Ivan Nardi | 2024-10-15 | |
| | | ||||
| * | STUN: if the same metadata is found multiple times, keep the first value (#2591) | Ivan Nardi | 2024-10-15 | |
| | | ||||
| * | STUN: fix monitoring of Whatsapp and Zoom flows (#2590) | Ivan Nardi | 2024-10-15 | |
| | | ||||
| * | Add monitoring capability (#2588) | Ivan Nardi | 2024-10-14 | |
| | | | | | | | | | | | | | | Allow nDPI to process the entire flows and not only the first N packets. Usefull when the application is interested in some metadata spanning the entire life of the session. As initial step, only STUN flows can be put in monitoring. See `doc/monitoring.md` for further details. This feature is disabled by default. Close #2583 | |||
| * | Fixed JA4 invalid computation due to code bug and uninitialized values | Luca Deri | 2024-10-13 | |
| | | ||||
| * | Added sonos dissector | Luca Deri | 2024-10-13 | |
| | | ||||
| * | Added u_int8_t ndpi_is_public_ipv4(u_int32_t a /* host byte order */); | Luca Deri | 2024-10-13 | |
| | | ||||
| * | Added support for printing JA4r when enabled | Luca Deri | 2024-10-11 | |
| | | ||||
| * | Added -N option for dumping/restoring the DNS cache (when enabled) | Luca Deri | 2024-10-10 | |
| | | | | | Example ndpiReader -i en0 --cfg=dpi.address_cache_size,32768 -N /tmp/a | |||
| * | Added new API calls for serializing/restoring the DNS cache | Luca Deri | 2024-10-10 | |
| | | | | | | - bool ndpi_address_cache_dump(struct ndpi_address_cache *cache, char *path, u_int32_t epoch_now); - u_int32_t ndpi_address_cache_restore(struct ndpi_address_cache *cache, char *path, u_int32_t epoch_now); | |||
| * | TTL Cache Fix (#2582) | Luca Deri | 2024-10-08 | |
| | | | | | | * Added missing free * Win fix | |||
| * | Removed unused variable | Luca Deri | 2024-10-08 | |
| | | ||||
| * | Offset fix | Luca Deri | 2024-10-08 | |
| | | ||||
| * | Added missing #define | Luca Deri | 2024-10-08 | |
| | | ||||
| * | Implemented (disabled by default) DNS host cache. You can set the cache size ↵ | Luca Deri | 2024-10-07 | |
| | | | | | | | | | | | as follows: ndpiReader --cfg=dpi.address_cache_size,1000 -i <pcap>.pcap In the above example the cache has up to 1000 entries. In jcase ndpiReader exports data in JSON, the cache hostname (if found) is exported in the field server_hostname | |||
| * | Indent fix | Luca Deri | 2024-10-07 | |
| | | ||||
| * | Add DingTalk protocol support (#2581) | Vladimir Gavrilov | 2024-10-07 | |
| | | ||||
| * | Moved ndpi_lru in a separate file | Luca Deri | 2024-10-04 | |
| | | ||||
| * | Exports DNS A/AAAA responses (up to 4 addresses) | Luca | 2024-10-02 | |
| | | | | | Changed the default to IPv4 (used to be IPv6) in case of DNS error response | |||
| * | TLS: detect abnormal padding usage (#2579) | Ivan Nardi | 2024-10-01 | |
| | | | | | Padding is usually some hundreds byte long. Longer padding might be used as obfuscation technique to force unusual CH fragmentation | |||
| * | Added pki.goog domain name | Luca Deri | 2024-09-30 | |
| | | ||||
| * | TLS: heuristics: fix memory allocations (#2577) | Ivan Nardi | 2024-09-30 | |
| | | | | | Allocate heuristics state only if really needed. Fix memory leak (it happened with WebSocket traffic on port 443) | |||