Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | Improved DGA detection for skipping potential DGAs of known/popular domain names | Luca Deri | 2021-10-05 | |
| | ||||
* | Update unit tests results after da8eed5a (#1323) | Ivan Nardi | 2021-10-05 | |
| | ||||
* | Updated output | Luca Deri | 2021-08-07 | |
| | ||||
* | ndpiReader: add statistics about nDPI performance (#1240) | Ivan Nardi | 2021-07-13 | |
| | | | | | | | The goal is to have a (roughly) idea about how many packets nDPI needs to properly classify a flow. Log this information (and guessed flows number too) during unit tests, to keep track of improvements/regressions across commits. | |||
* | Added flow risk score | Luca Deri | 2021-05-18 | |
| | ||||
* | Added browser TLS heuristic | Luca Deri | 2021-05-13 | |
| | ||||
* | Modified JA3 fingerprint message | Luca Deri | 2021-02-24 | |
| | ||||
* | Added NDPI_MALICIOUS_JA3 flow risk | Luca Deri | 2021-02-22 | |
| | | | | Added ndpi_load_malicious_ja3_file() API call | |||
* | Improved (partial) TLS dissection | Luca Deri | 2021-02-04 | |
| | ||||
* | Tests update | Luca Deri | 2020-10-02 | |
| | ||||
* | Fixed false positive in suspicous user agent | Luca Deri | 2020-08-30 | |
| | | | | Optimized stddev calculation | |||
* | Fixed partial TLS dissection | Luca Deri | 2020-07-30 | |
| | ||||
* | Changed due to bin size extension | Luca Deri | 2020-07-30 | |
| | ||||
* | User agent detection improvements | Luca Deri | 2020-07-21 | |
| | ||||
* | Updated test results due to bin changes | Luca Deri | 2020-07-09 | |
| | ||||
* | Fixes #906 | Luca Deri | 2020-06-22 | |
| | | | | Packet bins are not printed wehn empty | |||
* | Added ndpi_bin_XXX API | Luca Deri | 2020-06-22 | |
| | | | | Added packet lenght distribution bins | |||
* | Added check in TLS 1.2+ for reporting a risk when TLS is not used to carry HTTPS | Luca Deri | 2020-06-08 | |
| | ||||
* | Added fix to avoid potential heap buffer overflow in H.323 dissector | Luca Deri | 2020-05-19 | |
| | | | | Modified HTTP report information to make it closer to the HTTP field names | |||
* | Added NDPI_TLS_CERTIFICATE_EXPIRED, NDPI_TLS_CERTIFICATE_MISMATCH, to ndpi_risk | Luca Deri | 2020-05-15 | |
| | ||||
* | Added TLS weak cipher and obsolete protocol version detection | Luca Deri | 2020-05-10 | |
| | ||||
* | Added the ability to detect when a known protocol is using a non-standard port | Luca Deri | 2020-05-10 | |
| | | | | Added check to spot executables exchanged via HTTP | |||
* | Added TLS issuerDN and subjectDN | Luca Deri | 2020-05-07 | |
| | ||||
* | Remove decimals in test results for IAT, packet lengths and goodput ratio | emanuele-f | 2020-02-14 | |
| | ||||
* | Improved DNS response decoding | Luca Deri | 2020-02-04 | |
| | | | | The first decoded address is now reported by ndpiReader | |||
* | Reworked TLS dissection | Luca | 2020-01-01 | |
| | ||||
* | Updated results | Luca Deri | 2019-11-21 | |
| | ||||
* | Initial work towards HTTP content-type export | Luca | 2019-10-31 | |
| | ||||
* | Added telnet dissector | Luca | 2019-10-29 | |
| | | | | Improved data report | |||
* | nDPI TLS improvements using the server certificate | Luca Deri | 2019-10-26 | |
| | ||||
* | Improved HTTP reporting in ndpiReader | Luca Deri | 2019-10-25 | |
| | ||||
* | SSH dissection improvements | Luca Deri | 2019-10-25 | |
| | ||||
* | Major cleanup | Luca Deri | 2019-10-24 | |
| | | | | Removed ndpi_pref_http_dont_dissect_response and ndpi_pref_dns_dont_dissect_response as the ndpi_extra_dissection_possible() call will now handle everything | |||
* | Manual merge of pull #769 | Luca Deri | 2019-10-02 | |
| | ||||
* | Added URL in results | Luca Deri | 2019-10-01 | |
| | ||||
* | Improves IAT calculation | Luca | 2019-09-24 | |
| | ||||
* | Fixed JA3C compuration wtih SSL (no TLS) traffic | Luca Deri | 2019-09-19 | |
| | ||||
* | As TLS certificate fingerprint is computed, TLS without certificate protocol ↵ | Luca Deri | 2019-09-15 | |
| | | | | | | has been removed Various improvemenets in detection quality | |||
* | Fixed timezone conversion | Luca Deri | 2019-09-10 | |
| | ||||
* | Changes in validity format | Luca Deri | 2019-09-10 | |
| | ||||
* | Uddated results | Luca Deri | 2019-09-10 | |
| | ||||
* | Parsed TLS certificate validity | Luca Deri | 2019-09-10 | |
| | ||||
* | Added -C to generate CSV analysis files | Luca | 2019-09-03 | |
| | | | | Improved IAT and byte distribution | |||
* | Uodated results | Luca | 2019-08-29 | |
| | ||||
* | Added entropy, average, stddev, variance, bytes ratio calculation | Luca | 2019-08-28 | |
| | ||||
* | Implemented DTLS support | Luca | 2019-08-08 | |
| | | | | Renamed ssl to tls | |||
* | Updated results when adding client hello | Luca Deri | 2019-08-07 | |
| | ||||
* | Added -e option to ndpiReader for searchign human readeable strings lenght | Luca Deri | 2019-07-24 | |
| | | | | Default human readeable strings lenght is not 5 chars (used to be 8) | |||
* | Refresh after data leak detection | Luca Deri | 2019-07-18 | |
| | ||||
* | Reworked output | Luca Deri | 2019-07-15 | |
| | | | | | -v 1 now prints only unknown flows -v 2 now prints all flows |