Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | TLS: remove ESNI support (#2648) | Ivan Nardi | 2025-01-06 | |
| | | | | | ESNI has been superseded by ECH for years, now. See: https://blog.cloudflare.com/encrypted-client-hello/ Set the existing flow risk if we still found this extension. | |||
* | Path of Exile 2 support (#2654) | Vladimir Gavrilov | 2025-01-06 | |
| | ||||
* | Imporoved SMBv1 heuristic to avoid triggering risks for SMBv1 broadcast ↵ | Luca Deri | 2025-01-03 | |
| | | | | messages when used to browse (old) network devices | |||
* | IPv6: fix bad ipv6 format (#1890) (#2651) | paolomonti | 2024-12-20 | |
| | | | | | | ipv6 addresses already containing "::" token shall not be searched for ":0:" nor patched Close #1890 | |||
* | Update all IPs lists (#2643) | Ivan Nardi | 2024-12-13 | |
| | ||||
* | STUN/RTP: improve metadata extraction (#2641) | Ivan Nardi | 2024-12-11 | |
| | ||||
* | STUN: fix monitoring (#2639) | Ivan Nardi | 2024-12-06 | |
| | ||||
* | signal: improve detection of chats and calls (#2637) | Ivan Nardi | 2024-12-04 | |
| | ||||
* | Add support Yandex Alice (#2633) | Evgeny Shtanov | 2024-11-29 | |
| | | | | Co-authored-by: Evgeny Shtanov <evg.shtanov@gmail.comm> Co-authored-by: Ivan Nardi <nardi.ivan@gmail.com> | |||
* | Sync unit tests results | Toni Uhlig | 2024-11-27 | |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | Add a configuration file to ndpiReader (#2629) | Ivan Nardi | 2024-11-27 | |
| | | | | | | Example: ./example/ndpiReader --conf=./example/calls.conf -i ./tests/pcap/signal_videocall.pcapng -v2 Close #2608 | |||
* | Sync unit tests results | Ivan Nardi | 2024-11-26 | |
| | ||||
* | Add support for Paramount+ streaming service | Ivan Nardi | 2024-11-25 | |
| | ||||
* | Update `flow->flow_multimedia_types` to a bitmask (#2625) | Ivan Nardi | 2024-11-25 | |
| | | | In the same flow, we can have multiple multimedia types | |||
* | Sync unit tests results | Ivan Nardi | 2024-11-25 | |
| | ||||
* | When triggering risk "Known Proto on Non Std Port", nDPi now reports the ↵ | Luca Deri | 2024-11-22 | |
| | | | | port that was supposed to be used as default | |||
* | Sync unit tests results | Ivan Nardi | 2024-11-21 | |
| | ||||
* | RTP, STUN: improve detection of multimedia flow type (#2620) | Ivan Nardi | 2024-11-19 | |
| | | | | Let's see if we are able to tell audio from video calls only looking at RTP Payload Type field... | |||
* | Results update | Luca Deri | 2024-11-16 | |
| | ||||
* | Added DICOM support | Luca | 2024-11-15 | |
| | | | | Testing pcaps courtesy of https://github.com/virtalabs/tapirx.git | |||
* | Implemented Mikrotik discovery protocol dissection and metadata extraction ↵ | Luca Deri | 2024-11-14 | |
| | | | | (#2618) | |||
* | Add support for some Chinese shopping platforms (Temu, Shein and Taobao) (#2615) | Ivan Nardi | 2024-11-12 | |
| | | | Extend content match list | |||
* | SIP: extract some basic metadata | Ivan Nardi | 2024-11-12 | |
| | ||||
* | Unify ndpi debug logging to always use a u16 protocol id (#2613) | Toni | 2024-11-11 | |
| | | | | | * fixes SonarCloud complaint Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | |||
* | Add Naver protocol support (#2610) | Vladimir Gavrilov | 2024-11-01 | |
| | ||||
* | HTTP: fix leak and out-of-bound error on credential extraction (#2611) | Ivan Nardi | 2024-11-01 | |
| | ||||
* | Added HTTP credentials extraction | Luca Deri | 2024-10-31 | |
| | ||||
* | Add Paltalk protocol support (#2606) | Vladimir Gavrilov | 2024-10-28 | |
| | ||||
* | Fixes TCP fingerprint calculation when multiple EOL are specified in TCP options | Luca Deri | 2024-10-27 | |
| | ||||
* | Added reference to the new DGA model | Luca Deri | 2024-10-26 | |
| | ||||
* | Moved new DGA code | Luca Deri | 2024-10-26 | |
| | ||||
* | Not necessary | Luca Deri | 2024-10-26 | |
| | ||||
* | added dga ml tests file to EXTRA_DIST | YellowMan | 2024-10-26 | |
| | ||||
* | ml tests for dga detection | YellowMan | 2024-10-26 | |
| | ||||
* | Improved fingerprints | Luca Deri | 2024-10-21 | |
| | ||||
* | Improved TCP fingerprint | Luca Deri | 2024-10-20 | |
| | ||||
* | Improved TCP fingerprint | Luca Deri | 2024-10-20 | |
| | ||||
* | ndpiReader: explicitly remove non ipv4/6 packets (#2601) | Ivan Nardi | 2024-10-19 | |
| | ||||
* | ndpiReader: add some statistics about monitoring (#2602) | Ivan Nardi | 2024-10-19 | |
| | ||||
* | Added support for RDP over TLS | Luca Deri | 2024-10-19 | |
| | ||||
* | Improved TCP fingepring calculation | Luca Deri | 2024-10-18 | |
| | | | | Adde basidc OS detection based on TCP fingerprint | |||
* | Add configuration of TCP fingerprint computation (#2598) | Ivan Nardi | 2024-10-18 | |
| | | | Extend configuration of raw format of JA4C fingerprint | |||
* | Increased struct ndpi_flow_struct size (#2596) | Luca Deri | 2024-10-18 | |
| | | | Build fix | |||
* | STUN: if the same metadata is found multiple times, keep the first value (#2591) | Ivan Nardi | 2024-10-15 | |
| | ||||
* | STUN: fix monitoring of Whatsapp and Zoom flows (#2590) | Ivan Nardi | 2024-10-15 | |
| | ||||
* | Add monitoring capability (#2588) | Ivan Nardi | 2024-10-14 | |
| | | | | | | | | | | | | | Allow nDPI to process the entire flows and not only the first N packets. Usefull when the application is interested in some metadata spanning the entire life of the session. As initial step, only STUN flows can be put in monitoring. See `doc/monitoring.md` for further details. This feature is disabled by default. Close #2583 | |||
* | Fixed JA4 invalid computation due to code bug and uninitialized values | Luca Deri | 2024-10-13 | |
| | ||||
* | Added sonos dissector | Luca Deri | 2024-10-13 | |
| | ||||
* | Added readme | Luca Deri | 2024-10-08 | |
| | ||||
* | Add DingTalk protocol support (#2581) | Vladimir Gavrilov | 2024-10-07 | |
| |