| Commit message (Collapse) | Author | Age | ||
|---|---|---|---|---|
| ... | ||||
| * | SIP: improve detection (#1654) | Ivan Nardi | 2022-07-09 | |
| | | ||||
| * | Enhances gprof usage. (#1651) | Toni | 2022-07-08 | |
| | | | | | | * gprof results were incorrectly displayed Signed-off-by: lns <matzeton@googlemail.com> | |||
| * | SMB: add (partial) support for messages split into multiple TCP segments (#1644) | Ivan Nardi | 2022-07-07 | |
| | | ||||
| * | Avoid spurious calls to extra dissection (#1648) | Ivan Nardi | 2022-07-07 | |
| | | | | | If the extra callabck is not set, calling the extra dissection is only a waste of resources... | |||
| * | Kerberos: add support for Krb-Error messages (#1647) | Ivan Nardi | 2022-07-07 | |
| | | ||||
| * | MONGODB: avoid false positives | Nardi Ivan | 2022-07-07 | |
| | | ||||
| * | TLS: ignore invalid Content Type values | Nardi Ivan | 2022-07-07 | |
| | | ||||
| * | Added Threema Messenger. (#1643) | Toni | 2022-07-06 | |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Added another RiotGames signature. | Toni Uhlig | 2022-07-06 | |
| | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Label SMTP w/ STARTTLS as SMTPS *and* dissect TLS clho. (#1639) | Toni | 2022-07-06 | |
| | | | | | | | | | | | | | | | | | | * Label SMTP w/ STARTTLS as SMTPS *and* dissect TLS clho. Signed-off-by: Toni Uhlig <matzeton@googlemail.com> * Revert "SMTP with STARTTLS is now identified as SMTPS" This reverts commit 52d987b603f49d996b4060f43265d1cf43c3c482. * Revert "Compilation fix" This reverts commit c019946f601bf3b55f64f78841a0d696e6c0bfc5. * Sync unit tests. Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Fix handling of NDPI_UNIDIRECTIONAL_TRAFFIC risk (#1636) | Ivan Nardi | 2022-07-05 | |
| | | ||||
| * | SMTP with STARTTLS is now identified as SMTPS | Luca Deri | 2022-07-05 | |
| | | ||||
| * | Detect SMTPs w/ STARTTLS as TLS and dissect client/server hello. Fixes ↵ | Toni | 2022-07-05 | |
| | | | | | | | | #1630. (#1637) * FTP needs to get updated as well as it has similiar STARTTLS semantics -> follow-up Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Run regression tests from different locations at the same time w/o side ↵ | Toni | 2022-07-05 | |
| | | | | | | effects on the results. (#1638) Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Exported username in flow information | Luca Deri | 2022-07-04 | |
| | | ||||
| * | Updated JA3/SSL fingerprints. | Toni Uhlig | 2022-07-04 | |
| | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Added UltraSurf protocol dissector. (#1618) | Toni | 2022-07-04 | |
| | | | | | | * TLSv1.3 UltraSurf flows are not detected by now Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Add two new confidence values: confidence by partial DPI (#1632) | Ivan Nardi | 2022-07-04 | |
| | | | | | Used for all classifications based on partial/incomplete DPI information, i.e. all classifications done in `ndpi_detection_giveup()`. | |||
| * | Update host content list match (#1633) | Ivan Nardi | 2022-07-04 | |
| | | | | | Improve classifications of Outlook, Cachefly, Cloudflare, Tiktok and Cybersecurity. | |||
| * | Sync Psiphon unit test. (#1634) | Toni | 2022-07-04 | |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Added Psiphon detection patterns. See #566 and #1099. (#1631) | Toni | 2022-07-04 | |
| | | | | | | * The traces are not up to date, but this is the best we got so far. Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Added i3D and RiotGames protocol dissectors. (#1609) | Toni | 2022-07-03 | |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | TargusDataspeed: avoid false positives (#1628) | Ivan Nardi | 2022-07-03 | |
| | | | | | | TargusDataspeed dissector doesn't perform any real DPI checks but it only looks at the TCP/UDP ports. Delete it, and use standard logic to classify these flows by port. | |||
| * | Skinny: rework and improve classification (#1625) | Ivan Nardi | 2022-07-03 | |
| | | ||||
| * | Skype_Teams, Mining, SnapchatCall: fix flow category (#1624) | Ivan Nardi | 2022-07-03 | |
| | | ||||
| * | Fix category for mail sessions (#1621) | Ivan Nardi | 2022-07-03 | |
| | | | | Close #629 | |||
| * | TLS: add support for old DTLS versions and for detection of mid-sessions (#1619) | Ivan Nardi | 2022-07-03 | |
| | | ||||
| * | Generate profiling results as PNG. | Toni Uhlig | 2022-07-03 | |
| | | | | | | | * use -ltcmalloc_and_profiler and try to get rid of LD_PRELOAD=/usr/lib/x86_64-linux-gnu/libprofiler.so Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | gprof test/CI integration | lns | 2022-07-03 | |
| | | | | | | Signed-off-by: lns <matzeton@googlemail.com> Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Improved TFTP. Dissect Read/Write Request filenames. (#1617) | Toni | 2022-07-03 | |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Fix byte-order issue during ndpiReader tcp/udp src/dst port serialization. ↵ | Toni | 2022-07-03 | |
| | | | | | | | | | Fixes #1608. (#1614) * fixed possible memory leak caused by an invalid call to `node_proto_guess_walker()` during serialization * execute serialization code while running regression tests Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Added Cloudflare WARP detection patterns. (#1615) (#1616) | Toni | 2022-07-02 | |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Fixed SMTP default port 587 | Luca Deri | 2022-07-02 | |
| | | ||||
| * | Added TunnelBear VPN detection patterns. (#1615) | Toni | 2022-07-01 | |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | sync unit tests (#1612) | Toni | 2022-06-30 | |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
| * | Fix after the protocol name update | Luca Deri | 2022-06-28 | |
| | | ||||
| * | Enhanced TLS risk info reported to users | Luca Deri | 2022-06-28 | |
| | | ||||
| * | Fix compilation and sync unit tests results (#1606) | Ivan Nardi | 2022-06-20 | |
| | | ||||
| * | Added unidirectional traffic flow risk | Luca Deri | 2022-06-20 | |
| | | ||||
| * | Improved SOAP via HTTP. (#1605) | Toni | 2022-06-18 | |
| | | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
| * | Improved GenshinImpact protocol dissector. (#1604) | Toni | 2022-06-18 | |
| | | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
| * | Added collectd dissector (again). (#1601) | Toni | 2022-06-17 | |
| | | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
| * | Improved IPSec/ISAKMP detection. (#1600) | Toni | 2022-06-16 | |
| | | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
| * | Added new test pcaps | Luca | 2022-06-15 | |
| | | ||||
| * | Add support for PIM (Protocol Indipendent Multicast) protocol (#1599) | Ivan Nardi | 2022-06-15 | |
| | | | | Close #1598 | |||
| * | Improved WhatsApp detection. (#1595) | Toni | 2022-06-14 | |
| | | | | Signed-off-by: lns <matzeton@googlemail.com> | |||
| * | DNS: fix TTL check and sync unit test results (#1594) | Ivan Nardi | 2022-06-14 | |
| | | ||||
| * | Updated DNS alert triggered only with TTL == 0 | Luca Deri | 2022-06-14 | |
| | | ||||
| * | Restored ndpi_set_proto_defaults() prototype | Luca Deri | 2022-06-13 | |
| | | | | | Updated test results | |||
| * | Improved DNS traffic analysis | Luca Deri | 2022-06-13 | |
| | | | | | Added ability to identify application and network protocols | |||