20 commits

Author	SHA1	Message	Date
Luca Deri	0cc84e4fdd	Improved TCP fingepring calculation ... Adde basidc OS detection based on TCP fingerprint	2024-10-18 23:47:34 +02:00
Luca Deri	0ef0752c80	Increased struct ndpi_flow_struct size (#2596) ... Build fix	2024-10-18 07:17:03 +02:00
Luca Deri	fc4fb4d409	Fixed probing attempt risk that was creating false positives	2024-08-07 11:38:41 +02:00
Ivan Nardi	85501c9aaa	FPC: add DPI information (#2514) ... If the flow is classified (via DPI) after the first packet, we should use this information as FPC	2024-07-23 08:50:27 +02:00
Ivan Nardi	65e31b0ea3	FPC: small improvements (#2512) ... Add printing of fpc_dns statistics and add a general cconfiguration option. Rework the code to be more generic and ready to handle other logics.	2024-07-22 17:42:23 +02:00
Ivan Nardi	843e487270	Add infrastructure for explicit support of Fist Packet Classification (#2488) ... Let's start with some basic helpers and with FPC based on flow addresses. See: #2322	2024-07-03 18:02:07 +02:00
Nardi Ivan	526cf6f291	Zoom: remove "stun_zoom" LRU cache ... Since 070a0908b we are able to detect P2P calls directly from the packet content, without any correlation among flows	2024-06-17 10:19:55 +02:00
Maatuq	6127e04900	support rtp/rtcp over tcp (#2422) (#2457) ... Support rtp/rtcp over tcp as per rfc4571. Signed-off-by: mmaatuq <mahmoudmatook.mm@gmail.com>	2024-05-28 22:01:08 +02:00
Luca	44a290286b	More NDPI_PROBING_ATTEMPT changes	2024-05-22 18:04:33 +02:00
Ivan Nardi	95fe21015d	Remove "zoom" cache (#2420) ... This cache was added in b6b4967aa, when there was no real Zoom support. With 63f349319, a proper identification of multimedia stream has been added, making this cache quite useless: any improvements on Zoom classification should be properly done in Zoom dissector. Tested for some months with a few 10Gbits links of residential traffic: the cache pretty much never returned a valid hit.	2024-05-06 12:51:45 +02:00
Ivan Nardi	b7d77972bc	Remove workaround for TCP flows with multiple SYNs (#2421) ... Deciding when a session starts and ends is responsability of the applicationi (via its flow manager)i, not of the library. BTW, the removed code is incomplete at beast	2024-05-06 10:20:40 +02:00
0x41CEA55	905120588b	Remove obsolete protocols: tuenty, tvuplayer and kontiki (#2398)	2024-04-19 21:35:32 +02:00
Vladimir Gavrilov	248f3d5588	Rework Steam detection (part 1) (#2264) ... * Clean up Steam dissector * Add Steam Datagram Relay dissector * Update docs * Update test results * Remove csgo.c from MSVC project * Small fixes * Add Steam TLS pcap sample * Merge Steam pcap samples into single one * Fix typo * Update test results	2024-01-18 19:23:44 +01:00
Ivan Nardi	40797521af	ndpiReader: add breed stats on output used for CI (#2236)	2024-01-05 13:02:39 +01:00
Ivan Nardi	241c42ad7e	ndpiReader: fix guessed_flow_protocols statistic (#2203) ... Increment the counter only if the flow has been guessed	2023-12-12 19:44:03 +01:00
Ivan Nardi	32b50f5aa4	IPv6: add support for IPv6 risk exceptions (#2122)	2023-10-29 12:14:20 +01:00
Ivan Nardi	e8e4b9e8ff	IPv6: add support for IPv6 risk tree (#2118) ... Fix the script to download crawler addressess	2023-10-27 13:58:15 +02:00
Ivan Nardi	611c3b66f0	ipv6: add support for ipv6 addresses lists (#2113)	2023-10-26 20:15:44 +02:00
Luca Deri	fea09e825b	Fixes risk mask exception handling while improving the overall performance	2023-07-14 19:52:34 +02:00
Ivan Nardi	7714507f81	Test multiple ndpiReader configurations (#1931) ... Extend internal unit tests to handle multiple configurations. As some examples, add tests about: * disabling some protocols * disabling Ookla aggressiveness Every configurations data is stored in a dedicated directory under `tests\cfgs`	2023-04-06 11:30:36 +02:00

Renamed from tests/result/syslog.pcap.out (Browse further)