Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | Add support for PIM (Protocol Indipendent Multicast) protocol (#1599) | Ivan Nardi | 2022-06-15 | |
| | | | Close #1598 | |||
* | Improved WhatsApp detection. (#1595) | Toni | 2022-06-14 | |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
* | DNS: fix TTL check and sync unit test results (#1594) | Ivan Nardi | 2022-06-14 | |
| | ||||
* | Updated DNS alert triggered only with TTL == 0 | Luca Deri | 2022-06-14 | |
| | ||||
* | Restored ndpi_set_proto_defaults() prototype | Luca Deri | 2022-06-13 | |
| | | | | Updated test results | |||
* | Improved DNS traffic analysis | Luca Deri | 2022-06-13 | |
| | | | | Added ability to identify application and network protocols | |||
* | Added Pragmatic General Multicast (PGM) protocol detection | Luca Deri | 2022-06-08 | |
| | ||||
* | Dissect host line if SSDP contains such. (#1586) | Toni | 2022-06-07 | |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Reimplemented 1kxun application protocol. (#1585) | Toni | 2022-06-06 | |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Fixed syslog false negatives. (#1582) | Toni | 2022-06-05 | |
| | | | | | - RSH vs Syslog may still happen for midstream traffic Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Updated test results | Luca Deri | 2022-06-05 | |
| | ||||
* | Added RSH dissector. Fixes #202. (#1581) | Toni | 2022-06-04 | |
| | | | | | | - added syslog false-positive pcap that was missing in 09fbe0a64a11b08a35435f516e9a19f7e0c20d7c - added NDPI_ARRAY_LENGTH() macro, usable on `type var[]` declarations Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Add support for GoTo products (mainly GoToMeeting) (#1580) | Ivan Nardi | 2022-06-04 | |
| | | | There is some overlap with Citrix protocol. | |||
* | Fixed syslog false positives. (#1577) | Toni | 2022-06-03 | |
| | | | | | | | * syslog: removed unnecessary/unreliable printable string check * added `ndpi_isalnum()` * splitted `ndpi_is_printable_string()` into `ndpi_is_printable_buffer()` and `ndpi_normalize_printable_string()` Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Force roaring bitmap to use ndpi memory wrappers. (#1569) | Toni | 2022-05-31 | |
| | | | | | | | | GCC analyzer won't complain about possible use-after-free (false positive). * tests/do.sh prints word diff's only once and not the same over and over again * sync unit tests Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Updated risk results | Luca Deri | 2022-05-30 | |
| | ||||
* | Support word diff for tests/do.sh for better readability. (#1565) | Toni | 2022-05-30 | |
| | | | | | * Sync unit tests Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Prohibit MPEG-DASH to set HTTP as application protocol. (#1560) | Toni | 2022-05-30 | |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Certificate timestamps should be printed in UTC (#1563) | Ivan Nardi | 2022-05-30 | |
| | | | This way, the CI results are consistent | |||
* | Fixed dispay bug for risk_info | Luca Deri | 2022-05-30 | |
| | ||||
* | Updated tests results | Luca Deri | 2022-05-30 | |
| | | | | Code cleanup | |||
* | Dazn: add support for Dazn streaming service (#1559) | Ivan Nardi | 2022-05-29 | |
| | | | Update .gitignore file | |||
* | Added MPEG-DASH dissector. Fixes #1223. (#1555) | Toni | 2022-05-29 | |
| | | | | | | * Improved HTTP POST detection * Refactored subprotocol detection Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Fixed HTTP lower/upper protocol mess for Aimini/IPP. (#1557) | Toni | 2022-05-28 | |
| | | | | | * If HTTP was already detected, there is no need to overwrite the detection again Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Sync unit test results (#1554) | Ivan Nardi | 2022-05-26 | |
| | ||||
* | Updated SkypeCall -> Skype_TeamsCall | Luca Deri | 2022-05-26 | |
| | ||||
* | Improved detection of invalid SNI and hostnames in TLS, HTTP | Luca Deri | 2022-05-24 | |
| | ||||
* | Moved mgcp.pcapng to tests/pcap/ instead of tests/ | Toni Uhlig | 2022-05-16 | |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | Improved Viber (TCP) detection. (#1547) | Toni | 2022-05-10 | |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Improved Xiaomi HTTP detection. (#1546) | Toni | 2022-05-10 | |
| | | | | | * Merged Xiaomi pcap files Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Removed TLS patterns in the CiscoVPN aka Anyconnect dissector as mentioned ↵ | Toni | 2022-05-09 | |
| | | | | | in PR #1534. (#1543) Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Added Softether(-VPN) DDNS service detection. (#1544) | Toni | 2022-05-09 | |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Improved TLS alert detection. (#1542) | Toni | 2022-05-08 | |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Improved TLS application data detection. (#1541) | Toni | 2022-05-08 | |
| | | | | | | * #1532 did fx TLS appdata detection only partially * use flow->l4.tcp.tls.message.buffer_used instead of packet->payload Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Added Edgecast and Cachefly CDNs. (#1540) | Toni | 2022-05-07 | |
| | | | | | | | | * Improved ASN update script * Ran `utils/update_every_lists.sh' * `tests/do.sh.in' prints the amount of failed pcap(s) * `utils/asn_update.sh' prints the amount of failed download(s) Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Fix compilation (if `--enable-debug-messages` is used) (#1539) | Ivan Nardi | 2022-05-04 | |
| | ||||
* | Modified risk labels | Luca Deri | 2022-05-04 | |
| | ||||
* | Improved suspicious http user agent detection. (#1537) | Toni | 2022-05-02 | |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Added ndpi_get_flow_error_code() API call | Luca Deri | 2022-05-02 | |
| | | | | Fixed typo | |||
* | Sync unit tests results (#1533) | Ivan Nardi | 2022-04-27 | |
| | ||||
* | Improved TLS application data detection. (#1532) | Toni | 2022-04-27 | |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Added generic user agent setter. (#1530) | Toni | 2022-04-25 | |
| | | | | | * ndpiReader: Print user agent if one was set and not just for certain protocols. Signed-off-by: lns <matzeton@googlemail.com> | |||
* | XIAOMI: add detection of Xiaomi traffic (#1529) | Ivan Nardi | 2022-04-25 | |
| | | | Most of the credits should go to @utoni (see #1521) | |||
* | Added RakNet protocol dissector. (#1527) | Toni | 2022-04-24 | |
| | | | | | * Frame Set PDU's do not get fully dissected for the sake of simplicity Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Tiny gnutella improvement if gtk-gnutella used. (#1525) | Toni | 2022-04-22 | |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Updated `utils/whatsapp_ip_addresses_download.sh' to scrape the required IP ↵ | Toni | 2022-04-22 | |
| | | | | | | | | addresses/ranges. (#1524) * Replaced return statements in `utils/*.sh' with exit's (such scripts should never source'd) * Ran `utils/update_every_lists.sh' Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Add some scripts to easily update some IPs lists (#1522) | Ivan Nardi | 2022-04-21 | |
| | | | | | Follow-up of 8b062295 Add a new protocol id for generic Tencent/Wechat flows | |||
* | Added proprietary Agora Software Defined Real-time Network (SD-RTN) protocol ↵ | Toni | 2022-04-20 | |
| | | | | | dissector. (#1520) Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Added Toca Boca protocol dissector. (#1517) | Toni | 2022-04-19 | |
| | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
* | Improved sflow protocol detection false-positives. (#1518) | Toni | 2022-04-19 | |
| | | | Signed-off-by: lns <matzeton@googlemail.com> |