vrr/nDPI
2
0
Fork 0
mirror of https://github.com/vel21ripn/nDPI.git synced 2026-04-28 23:19:42 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 6

Improved WebSocket-over-HTTP detection (#2664)

Browse source 
* detect `chisel` SSH-over-HTTP-WebSocket
 * use `strncasecmp()` for `LINE_*` matching macros

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
This commit is contained in:
Toni 2025-01-11 11:23:42 +01:00 • committed by GitHub
parent d351907af8
commit 9a0a3bb8e7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
91 changed files with 167 additions and 104 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tests/cfgs/default/result/WebattackXSS.pcap.out
View file

@ -3,7 +3,7 @@ Guessed flow protos: 639
DPI Packets (TCP): 3972 (6.01 pkts/flow)
Confidence Match by port : 639 (flows)
Confidence DPI : 22 (flows)
Num dissector calls: 330 (0.50 diss/flow)
Num dissector calls: 352 (0.53 diss/flow)
LRU cache ookla: 0/0/0 (insert/search/found)
LRU cache bittorrent: 0/1917/0 (insert/search/found)
LRU cache stun: 0/0/0 (insert/search/found)