| Commit message (Collapse) | Author | Age | ||
|---|---|---|---|---|
| ... | ||||
| * | Fix parsing of ipv6 packets with extension headers | Nardi Ivan | 2021-09-19 | |
| | | | | | | | | | Decoding of ipv6 traffic with extension headers was completely broken, since the beginning of the L4 header was always set to a wrong value. Handle the ipv6 fragments in the same way as the ipv4 ones: keep the first one and drop the others. | |||
| * | Updated output | Luca Deri | 2021-08-07 | |
| | | ||||
| * | Reworked flow risk implementation | Luca Deri | 2021-07-23 | |
| | | ||||
| * | ndpiReader: add statistics about nDPI performance (#1240) | Ivan Nardi | 2021-07-13 | |
| | | | | | | | | The goal is to have a (roughly) idea about how many packets nDPI needs to properly classify a flow. Log this information (and guessed flows number too) during unit tests, to keep track of improvements/regressions across commits. | |||
| * | Updated category labels | Luca Deri | 2021-07-08 | |
| | | ||||
| * | Improved TLS browser detection heuristics | Luca Deri | 2021-05-19 | |
| | | ||||
| * | Added flow risk score | Luca Deri | 2021-05-18 | |
| | | ||||
| * | Added browser TLS heuristic | Luca Deri | 2021-05-13 | |
| | | ||||
| * | Fixed invalid DNS dissection | Luca Deri | 2021-04-26 | |
| | | ||||
| * | Fixes #1029 | Luca Deri | 2020-11-27 | |
| | | ||||
| * | Updated results with numeric IP detection | Luca Deri | 2020-11-01 | |
| | | ||||
| * | Added -D flag for detecting DoH in the wild | Luca Deri | 2020-10-26 | |
| | | | | | Removed heuristic from CiscoVPN as it leads to false positives | |||
| * | Tests update | Luca Deri | 2020-10-02 | |
| | | ||||
| * | Added risks for checking | Luca Deri | 2020-09-21 | |
| | | | | | | - invalid DNS traffic (probably carrying exfiltrated data) - TLS traffic with no SNI extension | |||
| * | Updated results | Luca Deri | 2020-09-18 | |
| | | ||||
| * | Reworked MDNS dissector that is not based on the DNS dissector | Luca Deri | 2020-09-17 | |
| | | ||||
| * | Stddev calculation changes | Luca Deri | 2020-08-30 | |
| | | ||||
| * | Fixed false positive in suspicous user agent | Luca Deri | 2020-08-30 | |
| | | | | | Optimized stddev calculation | |||
| * | Added new traffic category for connectivity check detection | Luca Deri | 2020-08-04 | |
| | | ||||
| * | Fixed partial TLS dissection | Luca Deri | 2020-07-30 | |
| | | ||||
| * | Changed due to bin size extension | Luca Deri | 2020-07-30 | |
| | | ||||
| * | User agent detection improvements | Luca Deri | 2020-07-21 | |
| | | ||||
| * | Updated test results due to bin changes | Luca Deri | 2020-07-09 | |
| | | ||||
| * | Fixes #906 | Luca Deri | 2020-06-22 | |
| | | | | | Packet bins are not printed wehn empty | |||
| * | Added ndpi_bin_XXX API | Luca Deri | 2020-06-22 | |
| | | | | | Added packet lenght distribution bins | |||
| * | Added check in TLS 1.2+ for reporting a risk when TLS is not used to carry HTTPS | Luca Deri | 2020-06-08 | |
| | | ||||
| * | Added fix to avoid potential heap buffer overflow in H.323 dissector | Luca Deri | 2020-05-19 | |
| | | | | | Modified HTTP report information to make it closer to the HTTP field names | |||
| * | Added NDPI_TLS_CERTIFICATE_EXPIRED, NDPI_TLS_CERTIFICATE_MISMATCH, to ndpi_risk | Luca Deri | 2020-05-15 | |
| | | ||||
| * | Added TLS weak cipher and obsolete protocol version detection | Luca Deri | 2020-05-10 | |
| | | ||||
| * | Added detection of self-signed TLS certificates | Luca Deri | 2020-05-10 | |
| | | ||||
| * | Added the ability to detect when a known protocol is using a non-standard port | Luca Deri | 2020-05-10 | |
| | | | | | Added check to spot executables exchanged via HTTP | |||
| * | Added TLS issuerDN and subjectDN | Luca Deri | 2020-05-07 | |
| | | ||||
| * | Updated results | Luca Deri | 2020-04-21 | |
| | | ||||
| * | CiscoVPN dissection improvements | Luca Deri | 2020-04-17 | |
| | | ||||
| * | Results update | Luca Deri | 2020-04-17 | |
| | | ||||
| * | Remove decimals in test results for IAT, packet lengths and goodput ratio | emanuele-f | 2020-02-14 | |
| | | ||||
| * | Added export of TLS supported version in TLS header | Luca Deri | 2020-02-07 | |
| | | ||||
| * | Added TLS ALPN support | Luca Deri | 2020-02-07 | |
| | | ||||
| * | Improved DNS response decoding | Luca Deri | 2020-02-04 | |
| | | | | | The first decoded address is now reported by ndpiReader | |||
| * | Reworked TLS dissection | Luca | 2020-01-01 | |
| | | ||||
| * | Improvements to stop dissection when the first protocol is detected | Luca Deri | 2019-11-28 | |
| | | | | | | Used IP-based detection to compute the application protocol Improved application detection | |||
| * | Updated results | Luca Deri | 2019-11-21 | |
| | | ||||
| * | Updated content-type parsing | Luca | 2019-10-31 | |
| | | ||||
| * | Initial work towards HTTP content-type export | Luca | 2019-10-31 | |
| | | ||||
| * | Improved guess | Luca Deri | 2019-10-25 | |
| | | ||||
| * | Improved HTTP reporting in ndpiReader | Luca Deri | 2019-10-25 | |
| | | ||||
| * | Major cleanup | Luca Deri | 2019-10-24 | |
| | | | | | Removed ndpi_pref_http_dont_dissect_response and ndpi_pref_dns_dont_dissect_response as the ndpi_extra_dissection_possible() call will now handle everything | |||
| * | Add missing results | emanuele-f | 2019-10-03 | |