Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Added EasyWeather protocol dissectoradd/easyweather | Toni Uhlig | 2025-07-03 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | ndpiReader: print categories summary (#2895) | Ivan Nardi | 2025-06-21 |
| | |||
* | Add GLBP dissector (#2879) | Vladimir Gavrilov | 2025-06-10 |
| | | | GLBP is a Cisco proprietary first-hop redundancy protocol similar to HSRP and VRRP, but with additional load balancing capabilities. | ||
* | Add Hamachi protocol detection support (#2860) | Vladimir Gavrilov | 2025-06-02 |
| | |||
* | Add MELSEC protocol support (#2846) | Vladimir Gavrilov | 2025-05-23 |
| | |||
* | IPP: fix selection bitmask (#2845) | Ivan Nardi | 2025-05-22 |
| | | | | IPP is identified *only* as HTTP subprotocol, so it can't be over UDP (HTTP is only over TCP...) | ||
* | Drop Warcraft 3 (pre Reforged) support (#2826) | Vladimir Gavrilov | 2025-05-19 |
| | |||
* | RTSP: simplify detection (#2822) | Ivan Nardi | 2025-05-18 |
| | |||
* | Remove Half-Life 2 support; improve Source Engine protocol detection | 0xA50C1A1 | 2025-05-16 |
| | |||
* | Remove Vhua support (#2816) | Vladimir Gavrilov | 2025-05-15 |
| | |||
* | Add GearUP Booster protocol dissector (heuristic based). (#2765) | Toni | 2025-03-07 |
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Add LagoFast protocol dissector. (#2743) | Toni | 2025-02-23 |
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | DNS: faster exclusion (#2719) | Ivan Nardi | 2025-02-12 |
| | |||
* | When triggering risk "Known Proto on Non Std Port", nDPi now reports the ↵ | Luca Deri | 2024-11-22 |
| | | | | port that was supposed to be used as default | ||
* | Implemented Mikrotik discovery protocol dissection and metadata extraction ↵ | Luca Deri | 2024-11-14 |
| | | | | (#2618) | ||
* | Improved TCP fingerprint | Luca Deri | 2024-10-20 |
| | |||
* | Improved TCP fingepring calculation | Luca Deri | 2024-10-18 |
| | | | | Adde basidc OS detection based on TCP fingerprint | ||
* | Increased struct ndpi_flow_struct size (#2596) | Luca Deri | 2024-10-18 |
| | | | Build fix | ||
* | Added sonos dissector | Luca Deri | 2024-10-13 |
| | |||
* | Add TRDP protocol support (#2528) | Vladimir Gavrilov | 2024-08-25 |
| | | | The Train Real Time Data Protocol (TRDP) is a UDP/TCP-based communication protocol designed for IP networks in trains, enabling data exchange between devices such as door controls and air conditioning systems. It is standardized by the IEC under IEC 61375-2-3 and is not related to the Remote Desktop Protocol (RDP). | ||
* | Add CNP/IP protocol support (#2521) | Vladimir Gavrilov | 2024-08-22 |
| | | | ISO/IEC 14908-4 defines how to tunnel Control Network Protocol (CNP) over IP networks. It encapsulates protocols like EIA-709, EIA-600, and CNP, making it a versatile solution for building automation and control systems. | ||
* | Fixed probing attempt risk that was creating false positives | Luca Deri | 2024-08-07 |
| | |||
* | FPC: small improvements (#2512) | Ivan Nardi | 2024-07-22 |
| | | | | Add printing of fpc_dns statistics and add a general cconfiguration option. Rework the code to be more generic and ready to handle other logics. | ||
* | Improve detection of Cloudflare WARP traffic (#2491) | Ivan Nardi | 2024-07-04 |
| | | | See: #2484 | ||
* | Add infrastructure for explicit support of Fist Packet Classification (#2488) | Ivan Nardi | 2024-07-03 |
| | | | | | Let's start with some basic helpers and with FPC based on flow addresses. See: #2322 | ||
* | Add Ripe Atlas probe protocol. (#2473) | Toni | 2024-06-17 |
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Zoom: remove "stun_zoom" LRU cache | Nardi Ivan | 2024-06-17 |
| | | | | | Since 070a0908b we are able to detect P2P calls directly from the packet content, without any correlation among flows | ||
* | Add ZUG consensus protocol dissector. (#2458) | Toni | 2024-05-28 |
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | More NDPI_PROBING_ATTEMPT changes | Luca | 2024-05-22 |
| | |||
* | Follow-up of 2093ac5bf (#2451) | Ivan Nardi | 2024-05-21 |
| | |||
* | Minor dissector optimizations | Luca Deri | 2024-05-20 |
| | |||
* | Add Call of Duty Mobile support (#2438) | Vladimir Gavrilov | 2024-05-15 |
| | |||
* | H323: improve detection and avoid false positives (#2432) | Ivan Nardi | 2024-05-11 |
| | |||
* | Add Ethernet Global Data support (#2437) | Vladimir Gavrilov | 2024-05-11 |
| | |||
* | Remove "zoom" cache (#2420) | Ivan Nardi | 2024-05-06 |
| | | | | | | | | | This cache was added in b6b4967aa, when there was no real Zoom support. With 63f349319, a proper identification of multimedia stream has been added, making this cache quite useless: any improvements on Zoom classification should be properly done in Zoom dissector. Tested for some months with a few 10Gbits links of residential traffic: the cache pretty much never returned a valid hit. | ||
* | Merge RTP and RTCP logic (#2416) | Ivan Nardi | 2024-05-06 |
| | | | | | | | | | Avoid code duplication between these two protocols. We remove support for RTCP over TCP; it is quite rare to find this kind of traffic and, more important, we have never had support for RTP over TCP: we should try to add both detecion as follow-up. Fix a message log in the LINE code | ||
* | eDonkey: improve/update classification (#2410) | Ivan Nardi | 2024-05-04 |
| | | | | | | | | | | eDonkey is definitely not as used as >10 years ago, but it seems it is still active. While having a basic TCP support seems easy, identification over UDP doesn't work and it is hard to do it rightly (packets might be only 2 bytes long): remove it. Credits to V.G <v.gavrilov@securitycode.ru> | ||
* | Add BFCP protocol support (#2401) | 0x41CEA55 | 2024-04-23 |
| | |||
* | Remove obsolete protocols: tuenty, tvuplayer and kontiki (#2398) | 0x41CEA55 | 2024-04-19 |
| | |||
* | Add KNXnet/IP protocol support (#2397) | 0x41CEA55 | 2024-04-19 |
| | | | | | * Add KNXnet/IP protocol support * Improve KNXnet/IP over TCP detection | ||
* | Add Label Distribution Protocol support (#2385) | Vladimir Gavrilov | 2024-04-12 |
| | | | | | | | * Add Label Distribution Protocol support * Fix typo * Update unit test results | ||
* | Add LoL: Wild Rift detection (#2356) | Vladimir Gavrilov | 2024-03-26 |
| | |||
* | Add FLUTE protocol dissector (#2351) | Vladimir Gavrilov | 2024-03-19 |
| | | | | | * Add FLUTE protocol dissector * Add flute.c to MSVC project | ||
* | Add PFCP protocol dissector (#2342) | Vladimir Gavrilov | 2024-03-13 |
| | |||
* | Add Naraka Bladepoint detection support (#2334) | Vladimir Gavrilov | 2024-03-04 |
| | |||
* | Add BFD protocol dissector (#2332) | Vladimir Gavrilov | 2024-02-29 |
| | |||
* | Add DLEP protocol dissector (#2326) | Vladimir Gavrilov | 2024-02-20 |
| | |||
* | Add ANSI C12.22 protocol dissector (#2317) | Vladimir Gavrilov | 2024-02-15 |
| | | | | | * Add ANSI C12.22 protocol dissector * Add UDP sample | ||
* | Skype: remove old detection logic (#1954) | Ivan Nardi | 2024-02-12 |
| | | | | | | | Skype has been using standard protocols (STUN/ICE or TLS) for a long, long time, now. Long gone are the days of Skype as a distribuited protocol. See: #2166 | ||
* | Add detection of Gaijin Entertainment games (#2311) | Vladimir Gavrilov | 2024-02-09 |
| | | | | | | | | | * Add detection of Gaijin Entertainment games * Short NDPI_PROTOCOL_GAIJINENTERTAINMENT to NDPI_PROTOCOL_GAIJIN * Add default UDP port for Gaijin Entertainment games * Remove NDPI_PROTOCOL_CROSSOUT protocol id |