Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | When triggering risk "Known Proto on Non Std Port", nDPi now reports the ↵ | Luca Deri | 2024-11-22 |
| | | | | port that was supposed to be used as default | ||
* | Added DICOM support | Luca | 2024-11-15 |
| | | | | Testing pcaps courtesy of https://github.com/virtalabs/tapirx.git | ||
* | Implemented Mikrotik discovery protocol dissection and metadata extraction ↵ | Luca Deri | 2024-11-14 |
| | | | | (#2618) | ||
* | Add Paltalk protocol support (#2606) | Vladimir Gavrilov | 2024-10-28 |
| | |||
* | Improved TCP fingerprint | Luca Deri | 2024-10-20 |
| | |||
* | Improved TCP fingepring calculation | Luca Deri | 2024-10-18 |
| | | | | Adde basidc OS detection based on TCP fingerprint | ||
* | Increased struct ndpi_flow_struct size (#2596) | Luca Deri | 2024-10-18 |
| | | | Build fix | ||
* | Added sonos dissector | Luca Deri | 2024-10-13 |
| | |||
* | Add DingTalk protocol support (#2581) | Vladimir Gavrilov | 2024-10-07 |
| | |||
* | Add an heuristic to detect encrypted/obfuscated OpenVPN flows (#2547) | Ivan Nardi | 2024-09-16 |
Based on the paper: "OpenVPN is Open to VPN Fingerprinting" See: https://www.usenix.org/conference/usenixsecurity22/presentation/xue-diwen Basic idea: * the distribution of the first byte of the messages (i.e. the distribution of the op-codes) is quite unique * this fingerprint might be still detectable even if the OpenVPN packets are somehow fully encrypted/obfuscated The heuristic is disabled by default. |