Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Add Discord dissector. (#1694) | Toni | 2022-08-03 |
| | | | | | * fixed RiotGames false positive Signed-off-by: lns <matzeton@googlemail.com> | ||
* | Add Activision dissector. (#1693) | Toni | 2022-08-02 |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | ||
* | TLS: avoid useless extra dissection (#1690) | Ivan Nardi | 2022-07-31 |
| | | | | | | | If we have seen Application Data blocks in both directions, it means we are after the handshake. At that point, extra dissection is useless. Useful feature with TLS mid-sessions, i.e. sessions without initial packets. | ||
* | Add Softether dissector. (#1679) | Toni | 2022-07-29 |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | ||
* | Patricia tree, Ahocarasick automa, LRU cache: add statistics (#1683) | Ivan Nardi | 2022-07-29 |
| | | | | | | | | | | Add (basic) internal stats to the main data structures used by the library; they might be usefull to check how effective these structures are. Add an option to `ndpiReader` to dump them; enabled by default in the unit tests. This new option enables/disables dumping of "num dissectors calls" values, too (see b4cb14ec). | ||
* | Update the protocol bitmask for some protocols (#1675) | Ivan Nardi | 2022-07-27 |
| | | | | | | | Tcp retransmissions should be ignored. Remove some unused protocol bitmasks. Update script to download Whatsapp IP list. | ||
* | DTLS: fix exclusion of DTLS protocol | Nardi Ivan | 2022-07-20 |
| | | | | Add an helper to exclude a generic protocol | ||
* | Improved Jabber/XMPP detection. (#1661) | Toni | 2022-07-13 |
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Keep track of how many dissectors calls we made for each flow (#1657) | Ivan Nardi | 2022-07-11 |
| | |||
* | Avoid spurious calls to extra dissection (#1648) | Ivan Nardi | 2022-07-07 |
| | | | | If the extra callabck is not set, calling the extra dissection is only a waste of resources... | ||
* | Fix handling of NDPI_UNIDIRECTIONAL_TRAFFIC risk (#1636) | Ivan Nardi | 2022-07-05 |
| | |||
* | Added unidirectional traffic flow risk | Luca Deri | 2022-06-20 |
| | |||
* | Updated tests results | Luca Deri | 2022-05-30 |
| | | | | Code cleanup | ||
* | Sync unit tests results (#1533) | Ivan Nardi | 2022-04-27 |
| | |||
* | Improved TLS application data detection. (#1532) | Toni | 2022-04-27 |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | ||
* | Add a "confidence" field about the reliability of the classification. (#1395) | Ivan Nardi | 2022-01-11 |
| | | | | | | | | | | | | | As a general rule, the higher the confidence value, the higher the "reliability/precision" of the classification. In other words, this new field provides an hint about "how" the flow classification has been obtained. For example, the application may want to ignore classification "by-port" (they are not real DPI classifications, after all) or give a second glance at flows classified via LRU caches (because of false positives). Setting only one value for the confidence field is a bit tricky: more work is probably needed in the next future to tweak/fix/improve the logic. | ||
* | ndpiReader: slight simplificaton of the output (#1378) | Ivan Nardi | 2021-11-27 |
| | |||
* | Fixed cleartext protocol assignment (#1357) | Ivan Nardi | 2021-10-25 |
| | |||
* | Refreshed results list | Luca Deri | 2021-10-16 |
| | |||
* | Updated output | Luca Deri | 2021-08-07 |
| | |||
* | ndpiReader: add statistics about nDPI performance (#1240) | Ivan Nardi | 2021-07-13 |
| | | | | | | | The goal is to have a (roughly) idea about how many packets nDPI needs to properly classify a flow. Log this information (and guessed flows number too) during unit tests, to keep track of improvements/regressions across commits. | ||
* | Added flow risk score | Luca Deri | 2021-05-18 |
| | |||
* | Added browser TLS heuristic | Luca Deri | 2021-05-13 |
| | |||
* | QUIC: improve handling of SNI (#1105) | Ivan Nardi | 2021-01-07 |
| | | | | | | | | | | | | | * QUIC: SNI should be always saved in flow->protos.stun_ssl.ssl.client_requested_server_name Close #1077 * QUIC: fix matching of custom categories * QUIC: add NDPI_TLS_MISSING_SNI support for older GQUIC versions * QUIC: fix serialization * QUIC: add DGA check for older GQUIC versions | ||
* | QUIC: extract User Agent information | Nardi Ivan | 2020-09-08 |
| | |||
* | Major rework of QUIC dissector | Nardi Ivan | 2020-08-21 |
| | | | | | Improve support for GQUIC (up to Q046) and add support for Q050 and (IETF-)QUIC Still no sub-classification for Q050 and QUIC | ||
* | Fixed partial TLS dissection | Luca Deri | 2020-07-30 |
| | |||
* | Changed due to bin size extension | Luca Deri | 2020-07-30 |
| | |||
* | Updated test results due to bin changes | Luca Deri | 2020-07-09 |
| | |||
* | Fixes #906 | Luca Deri | 2020-06-22 |
| | | | | Packet bins are not printed wehn empty | ||
* | Added ndpi_bin_XXX API | Luca Deri | 2020-06-22 |
| | | | | Added packet lenght distribution bins | ||
* | Added NDPI_TLS_CERTIFICATE_EXPIRED, NDPI_TLS_CERTIFICATE_MISMATCH, to ndpi_risk | Luca Deri | 2020-05-15 |
| | |||
* | Added TLS issuerDN and subjectDN | Luca Deri | 2020-05-07 |
| | |||
* | Results update | Luca Deri | 2020-04-17 |
| | |||
* | Remove decimals in test results for IAT, packet lengths and goodput ratio | emanuele-f | 2020-02-14 |
| | |||
* | Added export of TLS supported version in TLS header | Luca Deri | 2020-02-07 |
| | |||
* | Added TLS ALPN support | Luca Deri | 2020-02-07 |
| | |||
* | Reworked TLS dissection | Luca | 2020-01-01 |
| | |||
* | Updated results | Luca Deri | 2019-11-21 |
| | |||
* | Manual merge of pull #769 | Luca Deri | 2019-10-02 |
| | |||
* | Improves IAT calculation | Luca | 2019-09-24 |
| | |||
* | As TLS certificate fingerprint is computed, TLS without certificate protocol ↵ | Luca Deri | 2019-09-15 |
| | | | | | | has been removed Various improvemenets in detection quality | ||
* | Fixed timezone conversion | Luca Deri | 2019-09-10 |
| | |||
* | Changes in validity format | Luca Deri | 2019-09-10 |
| | |||
* | Uddated results | Luca Deri | 2019-09-10 |
| | |||
* | Parsed TLS certificate validity | Luca Deri | 2019-09-10 |
| | |||
* | Added -C to generate CSV analysis files | Luca | 2019-09-03 |
| | | | | Improved IAT and byte distribution | ||
* | Uodated results | Luca | 2019-08-29 |
| | |||
* | Added entropy, average, stddev, variance, bytes ratio calculation | Luca | 2019-08-28 |
| | |||
* | Implemented DTLS support | Luca | 2019-08-08 |
| | | | | Renamed ssl to tls |