Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Detect SMTPs w/ STARTTLS as TLS and dissect client/server hello. Fixes ↵ | Toni | 2022-07-05 |
| | | | | | | | #1630. (#1637) * FTP needs to get updated as well as it has similiar STARTTLS semantics -> follow-up Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Added unidirectional traffic flow risk | Luca Deri | 2022-06-20 |
| | |||
* | Add a "confidence" field about the reliability of the classification. (#1395) | Ivan Nardi | 2022-01-11 |
| | | | | | | | | | | | | | As a general rule, the higher the confidence value, the higher the "reliability/precision" of the classification. In other words, this new field provides an hint about "how" the flow classification has been obtained. For example, the application may want to ignore classification "by-port" (they are not real DPI classifications, after all) or give a second glance at flows classified via LRU caches (because of false positives). Setting only one value for the confidence field is a bit tricky: more work is probably needed in the next future to tweak/fix/improve the logic. | ||
* | FTP: fix support for START-TLS sessions | Nardi Ivan | 2021-09-21 |
When TLS-over-FTP is used, the credentials are encrypted. So we must not wait for the username and the password commands, otherwise we elaborate a lot of packets for nothing. |