Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | ndpiReader: print categories summary (#2895) | Ivan Nardi | 2025-06-21 |
| | |||
* | Sync unit tests results and fix `NDPI_HTTP_SUSPICIOUS_HEADER` (#2874) | Ivan Nardi | 2025-06-08 |
| | |||
* | Sync unit tests results | Ivan Nardi | 2025-06-08 |
| | |||
* | Improved HTTP risk report | Luca Deri | 2025-06-08 |
| | | | | PCRE2 is now enabled (if present) by default as necessary to report some HTTP risks | ||
* | Gnutella: simplify code, to support only gtk-gnutella client (#2830) | Ivan Nardi | 2025-05-20 |
| | | | Close #2818 | ||
* | Extend list of domains for SNI matching (#2791) | Ivan Nardi | 2025-04-05 |
| | |||
* | WoW: update detection | Ivan Nardi | 2025-03-30 |
| | | | | | Remove the specific dissector and use the Blizzard's generic one. For the time being, keep `NDPI_PROTOCOL_WORLDOFWARCRAFT` | ||
* | Rework the old MapleStory code to identify traffic from generic Nexon games ↵ | Ivan Nardi | 2025-03-19 |
| | | | | | | (#2773) Remove `NDPI_PROTOCOL_MAPLESTORY` and add a generic `NDPI_PROTOCOL_NEXON` | ||
* | Flow risk infos are always exported "in order" (by flow risk id) | Ivan Nardi | 2025-03-04 |
| | | | | | | | | This way, the `ndpiReader` output doesn't change if we change the internal logic about the order we set/check the various flow risks. Note that the flow risk *list* is already printed by `ndpiReader` in order. | ||
* | Improved WebSocket-over-HTTP detection (#2664) | Toni | 2025-01-11 |
| | | | | | | * detect `chisel` SSH-over-HTTP-WebSocket * use `strncasecmp()` for `LINE_*` matching macros Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Fixes TCP fingerprint calculation when multiple EOL are specified in TCP options | Luca Deri | 2024-10-27 |
| | |||
* | Improved TCP fingerprint | Luca Deri | 2024-10-20 |
| | |||
* | Improved TCP fingerprint | Luca Deri | 2024-10-20 |
| | |||
* | Improved TCP fingepring calculation | Luca Deri | 2024-10-18 |
| | | | | Adde basidc OS detection based on TCP fingerprint | ||
* | Increased struct ndpi_flow_struct size (#2596) | Luca Deri | 2024-10-18 |
| | | | Build fix | ||
* | FPC: small improvements (#2512) | Ivan Nardi | 2024-07-22 |
| | | | | Add printing of fpc_dns statistics and add a general cconfiguration option. Rework the code to be more generic and ready to handle other logics. | ||
* | Add infrastructure for explicit support of Fist Packet Classification (#2488) | Ivan Nardi | 2024-07-03 |
| | | | | | Let's start with some basic helpers and with FPC based on flow addresses. See: #2322 | ||
* | Zoom: remove "stun_zoom" LRU cache | Nardi Ivan | 2024-06-17 |
| | | | | | Since 070a0908b we are able to detect P2P calls directly from the packet content, without any correlation among flows | ||
* | Remove "zoom" cache (#2420) | Ivan Nardi | 2024-05-06 |
| | | | | | | | | | This cache was added in b6b4967aa, when there was no real Zoom support. With 63f349319, a proper identification of multimedia stream has been added, making this cache quite useless: any improvements on Zoom classification should be properly done in Zoom dissector. Tested for some months with a few 10Gbits links of residential traffic: the cache pretty much never returned a valid hit. | ||
* | ndpiReader: add breed stats on output used for CI (#2236) | Ivan Nardi | 2024-01-05 |
| | |||
* | Add HL7 protocol dissector (#2240) | Vladimir Gavrilov | 2024-01-02 |
| | | | | | | | * Add HL7 protocol dissector * Small fixes * Small fixes | ||
* | Add JSON-RPC protocol dissector (#2217) | Vladimir Gavrilov | 2023-12-20 |
| | | | | | | | * Add JSON-RPC protocol dissector * Small fixes * Improve detection | ||
* | ndpiReader: fix `guessed_flow_protocols` statistic (#2203) | Ivan Nardi | 2023-12-12 |
| | | | Increment the counter only if the flow has been guessed | ||
* | IPv6: add support for IPv6 risk exceptions (#2122) | Ivan Nardi | 2023-10-29 |
| | |||
* | IPv6: add support for IPv6 risk tree (#2118) | Ivan Nardi | 2023-10-27 |
| | | | Fix the script to download crawler addressess | ||
* | ipv6: add support for ipv6 addresses lists (#2113) | Ivan Nardi | 2023-10-26 |
| | |||
* | Adds new pcap for testing "funny" HTTP servers | Luca Deri | 2023-07-14 |