Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | SKYPE: remove detection over TCP | Nardi Ivan | 2022-07-20 |
| | | | | | | Skype detection over TCP has been completely disable since 659f75138 (3 years ago!). Since that logic was too weak anyway, remove it. | ||
* | Improved Jabber/XMPP detection. (#1661) | Toni | 2022-07-13 |
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Keep track of how many dissectors calls we made for each flow (#1657) | Ivan Nardi | 2022-07-11 |
| | |||
* | Add a "confidence" field about the reliability of the classification. (#1395) | Ivan Nardi | 2022-01-11 |
| | | | | | | | | | | | | | As a general rule, the higher the confidence value, the higher the "reliability/precision" of the classification. In other words, this new field provides an hint about "how" the flow classification has been obtained. For example, the application may want to ignore classification "by-port" (they are not real DPI classifications, after all) or give a second glance at flows classified via LRU caches (because of false positives). Setting only one value for the confidence field is a bit tricky: more work is probably needed in the next future to tweak/fix/improve the logic. | ||
* | ndpiReader: slight simplificaton of the output (#1378) | Ivan Nardi | 2021-11-27 |
| | |||
* | IMAP, POP3, SMTP: improve dissection (#1368) | Ivan Nardi | 2021-11-11 |
Avoid NATS false positives |