vrr/nDPI

mirror of https://github.com/vel21ripn/nDPI.git synced 2026-04-29 15:39:42 +00:00

Author	SHA1	Message	Date
Ivan Nardi	91fd1bccd2	Rework the old MapleStory code to identify traffic from generic Nexon games (#2773 ) Remove `NDPI_PROTOCOL_MAPLESTORY` and add a generic `NDPI_PROTOCOL_NEXON`	2025-03-19 17:58:42 +01:00
Ivan Nardi	85fb7eb2e5	Flow risk infos are always exported "in order" (by flow risk id) This way, the `ndpiReader` output doesn't change if we change the internal logic about the order we set/check the various flow risks. Note that the flow risk list is already printed by `ndpiReader` in order.	2025-03-04 13:23:58 +01:00
Toni	9a0a3bb8e7	Improved WebSocket-over-HTTP detection (#2664 ) * detect `chisel` SSH-over-HTTP-WebSocket * use `strncasecmp()` for `LINE_*` matching macros Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2025-01-11 11:23:42 +01:00
Luca Deri	14b076a58b	Improved TCP fingerprint	2024-10-20 22:25:55 +02:00
Luca Deri	0cc84e4fdd	Improved TCP fingepring calculation Adde basidc OS detection based on TCP fingerprint	2024-10-18 23:47:34 +02:00
Luca Deri	0ef0752c80	Increased struct ndpi_flow_struct size (#2596 ) Build fix	2024-10-18 07:17:03 +02:00
Luca Deri	fc4fb4d409	Fixed probing attempt risk that was creating false positives	2024-08-07 11:38:41 +02:00
Ivan Nardi	65e31b0ea3	FPC: small improvements (#2512 ) Add printing of fpc_dns statistics and add a general cconfiguration option. Rework the code to be more generic and ready to handle other logics.	2024-07-22 17:42:23 +02:00
Ivan Nardi	843e487270	Add infrastructure for explicit support of Fist Packet Classification (#2488 ) Let's start with some basic helpers and with FPC based on flow addresses. See: #2322	2024-07-03 18:02:07 +02:00
Nardi Ivan	526cf6f291	Zoom: remove "stun_zoom" LRU cache Since `070a0908b` we are able to detect P2P calls directly from the packet content, without any correlation among flows	2024-06-17 10:19:55 +02:00
Luca	44a290286b	More NDPI_PROBING_ATTEMPT changes	2024-05-22 18:04:33 +02:00
Ivan Nardi	95fe21015d	Remove "zoom" cache (#2420 ) This cache was added in `b6b4967aa`, when there was no real Zoom support. With `63f349319`, a proper identification of multimedia stream has been added, making this cache quite useless: any improvements on Zoom classification should be properly done in Zoom dissector. Tested for some months with a few 10Gbits links of residential traffic: the cache pretty much never returned a valid hit.	2024-05-06 12:51:45 +02:00
Ivan Nardi	40797521af	ndpiReader: add breed stats on output used for CI (#2236 )	2024-01-05 13:02:39 +01:00
Vladimir Gavrilov	7f9973bd0c	Add HL7 protocol dissector (#2240 ) * Add HL7 protocol dissector * Small fixes * Small fixes	2024-01-02 20:57:05 +01:00
Vladimir Gavrilov	149067b3fc	Add JSON-RPC protocol dissector (#2217 ) * Add JSON-RPC protocol dissector * Small fixes * Improve detection	2023-12-20 12:42:25 +01:00
Ivan Nardi	32b50f5aa4	IPv6: add support for IPv6 risk exceptions (#2122 )	2023-10-29 12:14:20 +01:00
Ivan Nardi	e8e4b9e8ff	IPv6: add support for IPv6 risk tree (#2118 ) Fix the script to download crawler addressess	2023-10-27 13:58:15 +02:00
Ivan Nardi	611c3b66f0	ipv6: add support for ipv6 addresses lists (#2113 )	2023-10-26 20:15:44 +02:00
Luca Deri	fea09e825b	Fixes risk mask exception handling while improving the overall performance	2023-07-14 19:52:34 +02:00
Toni	1678888284	Add Apache Thrift protocol dissector. (#2007 ) Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2023-06-22 13:07:32 +02:00
Ivan Nardi	7714507f81	Test multiple `ndpiReader` configurations (#1931 ) Extend internal unit tests to handle multiple configurations. As some examples, add tests about: * disabling some protocols * disabling Ookla aggressiveness Every configurations data is stored in a dedicated directory under `tests\cfgs`	2023-04-06 11:30:36 +02:00

21 commits