libndpi.git - Open Source Deep Packet Inspection Software Toolkit

	Commit message (Collapse)	Author	Age
*	Zoom: remove "stun_zoom" LRU cache	Nardi Ivan	2024-06-17
\| \| \| \| \|	Since 070a0908b we are able to detect P2P calls directly from the packet content, without any correlation among flows
*	RTP: fix detection over TCP (#2462)	Ivan Nardi	2024-05-29
\| \| \| \| \| \|	RFC4571 is not the only way to wrap RTP messages in TCP streams. For example, when RTP is encapsulated over TURN flows (i.e. via DATA attribute) there is no additional framing. See also 6127e0490
*	DTLS: fix JA4 fingerprint (#2446)	Ivan Nardi	2024-05-21
\|
*	Remove "zoom" cache (#2420)	Ivan Nardi	2024-05-06
\| \| \| \| \| \| \| \| \|	This cache was added in b6b4967aa, when there was no real Zoom support. With 63f349319, a proper identification of multimedia stream has been added, making this cache quite useless: any improvements on Zoom classification should be properly done in Zoom dissector. Tested for some months with a few 10Gbits links of residential traffic: the cache pretty much never returned a valid hit.
*	TLS: avoid setting `NDPI_TLS_SELFSIGNED_CERTIFICATE` for webrtc traffic (#2417)	Ivan Nardi	2024-05-06
\| \| \| \| \| \|	See RFC8122: it is quite likely that STUN/DTLS/SRTP flows use self-signed certificates Follow-up of b287d6ec8
*	STUN: slightly faster sub-classification with DTLS (#2404)	Ivan Nardi	2024-04-23
\|
*	Implemented STUN peer_address, relayed_address, response_origin, ↵	Luca Deri	2024-04-12
\| \| \| \| \| \| \|	other_address parsing Added code to ignore invalid STUN realm Extended JSON output with STUN information
*	STUN: improve extraction of Mapped-Address metadata (#2370)	Ivan Nardi	2024-04-08
\| \| \| \| \| \| \| \| \| \| \| \| \|	Enable parsing of Mapped-Address attribute for all STUN flows: that means that STUN classification might require more packets. Add a configuration knob to enable/disable this feature. Note that we can have (any) STUN metadata also for flows not classified as STUN (because of DTLS). Add support for ipv6. Restore the correct extra dissection logic for Telegram flows.
*	Add a specific protocol id for audio/video calls made using Google apps (#2341)	Ivan Nardi	2024-03-07
\| \| \|	Same logic already used for Signal/Whatsapp/Line/Facebook/...
*	ndpiReader: add breed stats on output used for CI (#2236)	Ivan Nardi	2024-01-05
\|
*	Remove Google Hangouts/Duo stuff (#2233)	Vladimir Gavrilov	2024-01-02
\| \| \| \| \|	* Remove Google Hangouts/Duo support * Update protocols.rst
*	ndpiReader: fix `guessed_flow_protocols` statistic (#2203)	Ivan Nardi	2023-12-12
\| \| \|	Increment the counter only if the flow has been guessed
*	STUN: improve demultiplexing of DTLS packets (#2153)	Ivan Nardi	2023-11-27
	Keep demultiplexing STUN/RTP/RTCP packets after DTLS ones. We might end up processing the session a little longer, because we will process the STUN/RTP/RTCP packets after the DTLS handshake.