aboutsummaryrefslogtreecommitdiff
path: root/tests/result/whatsapp_login_chat.pcap.out
Commit message (Collapse)AuthorAge
* Improve protocol stacks (#1425)Ivan Nardi2022-01-30
| | | | | | | | | | | | | | | | | We should have two protocols in classification results only when the "master" protocol allows some sub-protocols. Classifications like `AmazonAWS`, `TLS/AmazonAWS`, `DNS/AmazonAWS` are fine. However classifications like `NTP/Apple`, `BitTorrent/Azure`, `DNScrypt.AmazonAWS` or `NestLogSink.Google` are misleading. For example, `ndpiReader`shows `BitTorrent/Azure` flows under `Azure` statistics; that seems to be wrong or, at least, very misleading. This is quite important since we have lots of addresses from CDN operators. The only drawback of this solution is that right now ICMP traffic is classified simply as `ICMP`; if we are really interested in ICMP stuff we can restore the old behaviour later.
* Extend protocols support (#1422)Ivan Nardi2022-01-29
| | | | | | | | | | | | | | | | | | Add detection of AccuWeather site/app and Google Classroom. Improve detection of Azure, Zattoo, Whatsapp, MQTT and LDAP. Fix some RX false positives. Fix some "Uncommon TLS ALPN"-risk false positives. Fix "confidence" value for some Zoom/Torrent classifications. Minor fix in Lua script for Wireshark extcap. Update .gitignore file. Let GitHub correctly detect the language type of *.inc files. Zattoo example has been provided by @subhajit-cdot in #1148.
* Add a "confidence" field about the reliability of the classification. (#1395)Ivan Nardi2022-01-11
| | | | | | | | | | | | | As a general rule, the higher the confidence value, the higher the "reliability/precision" of the classification. In other words, this new field provides an hint about "how" the flow classification has been obtained. For example, the application may want to ignore classification "by-port" (they are not real DPI classifications, after all) or give a second glance at flows classified via LRU caches (because of false positives). Setting only one value for the confidence field is a bit tricky: more work is probably needed in the next future to tweak/fix/improve the logic.
* ndpiReader: slight simplificaton of the output (#1378)Ivan Nardi2021-11-27
|
* Fixed cleartext protocol assignment (#1357)Ivan Nardi2021-10-25
|
* Refreshed results listLuca Deri2021-10-16
|
* Updated outputLuca Deri2021-08-07
|
* ndpiReader: add statistics about nDPI performance (#1240)Ivan Nardi2021-07-13
| | | | | | | The goal is to have a (roughly) idea about how many packets nDPI needs to properly classify a flow. Log this information (and guessed flows number too) during unit tests, to keep track of improvements/regressions across commits.
* Improved DNS dissectorLuca Deri2021-02-26
|
* Reworked MDNS dissector that is not based on the DNS dissectorLuca Deri2020-09-17
|
* Changed due to bin size extensionLuca Deri2020-07-30
|
* Added ndpi_bin_XXX APILuca Deri2020-06-22
| | | | Added packet lenght distribution bins
* Remove decimals in test results for IAT, packet lengths and goodput ratioemanuele-f2020-02-14
|
* Improved DNS response decodingLuca Deri2020-02-04
| | | | The first decoded address is now reported by ndpiReader
* Reworked TLS dissectionLuca2020-01-01
|
* Improvements to stop dissection when the first protocol is detectedLuca Deri2019-11-28
| | | | | Used IP-based detection to compute the application protocol Improved application detection
* Updated resultsLuca Deri2019-11-21
|
* Updated resultsLuca Deri2019-11-04
|
* Manual merge of pull #769Luca Deri2019-10-02
|
* Improves IAT calculationLuca2019-09-24
|
* Added -C to generate CSV analysis filesLuca2019-09-03
| | | | Improved IAT and byte distribution
* Average calculation fixLuca2019-08-29
|
* Compilation fix on systems without JSON-CLuca Deri2019-08-29
|
* Uodated resultsLuca2019-08-29
|
* Added entropy, average, stddev, variance, bytes ratio calculationLuca2019-08-28
|
* Implemented DTLS supportLuca2019-08-08
| | | | Renamed ssl to tls
* Added -e option to ndpiReader for searchign human readeable strings lenghtLuca Deri2019-07-24
| | | | Default human readeable strings lenght is not 5 chars (used to be 8)
* Refresh after data leak detectionLuca Deri2019-07-18
|
* Add dhcp fingerprints to expected resultsStuart Reilly2019-06-19
|
* Tests result fixLuca2019-04-05
| | | | Merge branch 'dev' of https://github.com/ntop/nDPI into dev
* Added the concept of protocols that can have subprotocols. Example Spotify ↵Luca2018-11-30
| | | | | | cannot have subprotocols, DNS can (DNS.Spotify) Merged Skype call in/out in Skype Call
* Improved heuristicsLuca2018-11-29
| | | | Used the host guessed protocol if upper protocol has not been detected
* Added missing categorization when giveup/guess is calledLuca2018-08-30
| | | | | Added optimization for TCP flows that do not start with a SYN packet: early giveup is performed Code cleanup
* Updated results based on the new output formatLuca2018-07-21
|
* Updated test resulsLuca Deri2018-05-18
|
* Updated test resultsLuca Deri2018-05-14
|
* update results for test pcapCampus2018-02-03
|
* Implemented flow sort based on total bytes so that we can (with -v X) ↵Luca2017-08-02
| | | | immediately spot elephants and mice
* update results after modificationsCampus2017-05-26
|
* Updated results are ndpiReader output has been modifiedLuca Deri2017-05-17
|
* update flow thanks to commit a9c01ded174ed380a2d135cfb9b903f616b0e175Campus2017-04-20
|
* Added memory check in patricia treeLuca Deri2016-12-05
| | | | | Improved AFP dissection Updated DHCP test results
* Recomputed results due to the previous commitLuca Deri2016-06-19
|
* Removed legacy linux_compat.h fileLuca2015-11-12
| | | | Updated IPv6 address dump format
* Fixes for issues #40 -> #52Luca2015-07-11
| | | | Implemented sub-protocol detection for SSL/HTTP/HTTPS
* Fixed bug that caused configure to generate GIT version information ↵Luca2015-06-04
| | | | | | | containing spaces Modified ndpiReader to include flow details in dumps (used for testing) Rebuilt all test results to include flow details
* GIT commit count fix that should work on all platforms (RedHat/CentOS included)Luca Deri2015-05-27
Powered by cgit, Themed by Ted Yin.