13 commits

Author	SHA1	Message	Date
Luca Deri	d5236c0aaf	Fixes TCP fingerprint calculation when multiple EOL are specified in TCP options	2024-10-27 08:17:27 +01:00
Luca Deri	4e78d903e8	Improved TCP fingerprint	2024-10-20 23:14:46 +02:00
Luca Deri	14b076a58b	Improved TCP fingerprint	2024-10-20 22:25:55 +02:00
Luca Deri	0cc84e4fdd	Improved TCP fingepring calculation ... Adde basidc OS detection based on TCP fingerprint	2024-10-18 23:47:34 +02:00
Luca Deri	0ef0752c80	Increased struct ndpi_flow_struct size (#2596) ... Build fix	2024-10-18 07:17:03 +02:00
Toni	bf93f77f02	Align serialized risk names to all others (first letter; uppercase letter) (#2541) ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2024-09-03 13:02:33 +02:00
Ivan Nardi	65e31b0ea3	FPC: small improvements (#2512) ... Add printing of fpc_dns statistics and add a general cconfiguration option. Rework the code to be more generic and ready to handle other logics.	2024-07-22 17:42:23 +02:00
Ivan Nardi	843e487270	Add infrastructure for explicit support of Fist Packet Classification (#2488) ... Let's start with some basic helpers and with FPC based on flow addresses. See: #2322	2024-07-03 18:02:07 +02:00
Nardi Ivan	526cf6f291	Zoom: remove "stun_zoom" LRU cache ... Since 070a0908b we are able to detect P2P calls directly from the packet content, without any correlation among flows	2024-06-17 10:19:55 +02:00
Ivan Nardi	95fe21015d	Remove "zoom" cache (#2420) ... This cache was added in b6b4967aa, when there was no real Zoom support. With 63f349319, a proper identification of multimedia stream has been added, making this cache quite useless: any improvements on Zoom classification should be properly done in Zoom dissector. Tested for some months with a few 10Gbits links of residential traffic: the cache pretty much never returned a valid hit.	2024-05-06 12:51:45 +02:00
Luca Deri	bd2968dcd3	Tuned DNS risk values ... Modified NDPI_BINARY_TRANSFER_ATTEMPT in NDPI_BINARY_DATA_TRANSFER	2024-04-09 10:22:01 +02:00
Luca Deri	98bf0e243e	Fixed false positives on binary application transfer risk	2024-04-08 23:52:27 +02:00
Luca	225ff7f8a4	Added binary data transfer risk alert	2024-04-03 15:41:26 +02:00