Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Improved DGA detection with trigrams. Disadvantage: slower startup time | Luca Deri | 2021-03-03 |
| | | | | | Reworked Tor dissector embedded in TLS (fixes #1141) Removed false positive on HTTP User-Agent | ||
* | Modified JA3 fingerprint message | Luca Deri | 2021-02-24 |
| | |||
* | Added NDPI_MALICIOUS_JA3 flow risk | Luca Deri | 2021-02-22 |
| | | | | Added ndpi_load_malicious_ja3_file() API call | ||
* | Improved nDPI string matching algorithm | Luca Deri | 2021-02-18 |
| | |||
* | QUIC: improve handling of SNI (#1105) | Ivan Nardi | 2021-01-07 |
| | | | | | | | | | | | | | * QUIC: SNI should be always saved in flow->protos.stun_ssl.ssl.client_requested_server_name Close #1077 * QUIC: fix matching of custom categories * QUIC: add NDPI_TLS_MISSING_SNI support for older GQUIC versions * QUIC: fix serialization * QUIC: add DGA check for older GQUIC versions | ||
* | Fixes #1029 | Luca Deri | 2020-11-27 |
| | |||
* | Reworked MDNS dissector that is not based on the DNS dissector | Luca Deri | 2020-09-17 |
| | |||
* | QUIC: extract User Agent information | Nardi Ivan | 2020-09-08 |
| | |||
* | Added new risk for NDPI_UNSAFE_PROTOCOL that identifies protocols that are ↵ | Luca Deri | 2020-08-30 |
| | | | | not condidered safe/secure | ||
* | Fixed false positive in suspicous user agent | Luca Deri | 2020-08-30 |
| | | | | Optimized stddev calculation | ||
* | Fixed partial TLS dissection | Luca Deri | 2020-07-30 |
| | |||
* | Changed due to bin size extension | Luca Deri | 2020-07-30 |
| | |||
* | Updated test results due to bin changes | Luca Deri | 2020-07-09 |
| | |||
* | Fixes #906 | Luca Deri | 2020-06-22 |
| | | | | Packet bins are not printed wehn empty | ||
* | Added ndpi_bin_XXX API | Luca Deri | 2020-06-22 |
| | | | | Added packet lenght distribution bins | ||
* | Added DGA risk for names that look like a DGA | Luca Deri | 2020-06-11 |
| | |||
* | Added TLS weak cipher and obsolete protocol version detection | Luca Deri | 2020-05-10 |
| | |||
* | Added TLS issuerDN and subjectDN | Luca Deri | 2020-05-07 |
| | |||
* | Updated results | Luca Deri | 2020-04-21 |
| | |||
* | Results update | Luca Deri | 2020-04-17 |
| | |||
* | NetBIOS dissection improvements | Luca Deri | 2020-03-01 |
| | |||
* | Remove decimals in test results for IAT, packet lengths and goodput ratio | emanuele-f | 2020-02-14 |
| | |||
* | Added export of TLS supported version in TLS header | Luca Deri | 2020-02-07 |
| | |||
* | Added TLS ALPN support | Luca Deri | 2020-02-07 |
| | |||
* | Improved DNS response decoding | Luca Deri | 2020-02-04 |
| | | | | The first decoded address is now reported by ndpiReader | ||
* | Reworked TLS dissection | Luca | 2020-01-01 |
| | |||
* | Updated results | Luca Deri | 2019-11-21 |
| | |||
* | Added NetBIOS metadata export | Luca Deri | 2019-10-08 |
| | |||
* | Manual merge of pull #769 | Luca Deri | 2019-10-02 |
| | |||
* | Improved category handlign in subprotocols | Luca Deri | 2019-09-27 |
| | | | | | Further DNS dissection fixes Fixed WeChat invalid category | ||
* | Improves IAT calculation | Luca | 2019-09-24 |
| | |||
* | As TLS certificate fingerprint is computed, TLS without certificate protocol ↵ | Luca Deri | 2019-09-15 |
| | | | | | | has been removed Various improvemenets in detection quality | ||
* | Fixed timezone conversion | Luca Deri | 2019-09-10 |
| | |||
* | Changes in validity format | Luca Deri | 2019-09-10 |
| | |||
* | Uddated results | Luca Deri | 2019-09-10 |
| | |||
* | Parsed TLS certificate validity | Luca Deri | 2019-09-10 |
| | |||
* | Refreshed Tor node list | Luca Deri | 2019-09-08 |
| | |||
* | Added -C to generate CSV analysis files | Luca | 2019-09-03 |
| | | | | Improved IAT and byte distribution | ||
* | Average calculation fix | Luca | 2019-08-29 |
| | |||
* | Compilation fix on systems without JSON-C | Luca Deri | 2019-08-29 |
| | |||
* | Uodated results | Luca | 2019-08-29 |
| | |||
* | Added entropy, average, stddev, variance, bytes ratio calculation | Luca | 2019-08-28 |
| | |||
* | Various TLS/STUN improvememnts | Luca | 2019-08-08 |
| | |||
* | Implemented DTLS support | Luca | 2019-08-08 |
| | | | | Renamed ssl to tls | ||
* | Updated results when adding client hello | Luca Deri | 2019-08-07 |
| | |||
* | Updated google docs detection in wechat.pcap | Luca Deri | 2019-07-25 |
| | |||
* | Added -e option to ndpiReader for searchign human readeable strings lenght | Luca Deri | 2019-07-24 |
| | | | | Default human readeable strings lenght is not 5 chars (used to be 8) | ||
* | Refresh after data leak detection | Luca Deri | 2019-07-18 |
| | |||
* | Reworked output | Luca Deri | 2019-07-15 |
| | | | | | -v 1 now prints only unknown flows -v 2 now prints all flows | ||
* | Updated test resultss after export changes | Luca Deri | 2019-07-13 |
| |