| Commit message (Collapse) | Author | Age | |
|---|---|---|---|
| * | Fix `ndpi_do_guess()` (#1731) | Ivan Nardi | 2022-09-12 |
| | | | | | | Avoid a double call of `ndpi_guess_host_protocol_id()`. Some code paths work for ipv4/6 both Remove some never used code. | ||
| * | Avoid useless host automa lookup (#1724) | Ivan Nardi | 2022-09-05 |
| | | | | | | | | | | | | | | | | | | | | The host automa is used for two tasks: * protocol sub-classification (obviously); * DGA evaluation: the idea is that if a domain is present in this automa, it can't be a DGA, regardless of its format/name. In most dissectors both checks are executed, i.e. the code is something like: ``` ndpi_match_host_subprotocol(..., flow->host_server_name, ...); ndpi_check_dga_name(..., flow->host_server_name,...); ``` In that common case, we can perform only one automa lookup: if we check the sub-classification before the DGA, we can avoid the second lookup in the DGA function itself. | ||
| * | Patricia tree, Ahocarasick automa, LRU cache: add statistics (#1683) | Ivan Nardi | 2022-07-29 |
| | | | | | | | | | | | Add (basic) internal stats to the main data structures used by the library; they might be usefull to check how effective these structures are. Add an option to `ndpiReader` to dump them; enabled by default in the unit tests. This new option enables/disables dumping of "num dissectors calls" values, too (see b4cb14ec). | ||
| * | Keep track of how many dissectors calls we made for each flow (#1657) | Ivan Nardi | 2022-07-11 |
| | | |||
| * | Fix handling of NDPI_UNIDIRECTIONAL_TRAFFIC risk (#1636) | Ivan Nardi | 2022-07-05 |
| | | |||
| * | Added unidirectional traffic flow risk | Luca Deri | 2022-06-20 |
| | | |||
| * | Added new test pcaps | Luca | 2022-06-15 |