Commit graph

338 commits

Author SHA1 Message Date
Philippe Antoine
5fc9d41eb0 Run ndpi_detection_process_packet only with payload
Real problem is decapsulation of all ipv6 headers
2020-02-26 17:05:08 +01:00
Philippe Antoine
83fdfe24d0 Fix read overflow before UDP header 2020-02-26 16:16:29 +01:00
Philippe Antoine
3eb9907dd7 Fix various buffer over reads 2020-02-18 11:50:22 +01:00
Luca Deri
fdf8dd724f Minor fix 2020-02-17 22:15:36 +01:00
Philippe Antoine
bf7dcd63c3 Checks length for next ip header 2020-02-14 14:18:31 +01:00
Philippe Antoine
b287dccecf Checks l4 size against l3 size 2020-02-14 14:02:19 +01:00
Luca Deri
83bbb4cb69 Compliation warning fixes 2020-02-08 11:24:40 +01:00
Luca Deri
33d761a55a
Merge pull request #838 from catenacyber/fix2
Adds missing checks
2020-02-08 11:20:54 +01:00
Luca Deri
5cad39f0e8 Added export of TLS supported version in TLS header 2020-02-07 23:26:03 +01:00
Luca Deri
3be263aafc Added TLS ALPN support 2020-02-07 21:54:04 +01:00
Luca Deri
fa26c62b0c Fix for IPv6 address format across the various platforms/distributions 2020-02-04 22:50:08 +01:00
Luca Deri
2701cc9491 Warnign fix 2020-02-04 22:34:08 +01:00
Luca Deri
0703ab5ac5 Improved DNS response decoding
The first decoded address is now reported by ndpiReader
2020-02-04 22:16:54 +01:00
Philippe Antoine
418ea234ae Adds missing checks
Found by fuzzing
2020-02-03 22:38:31 +01:00
Philippe Antoine
0bf2ca56a8 Uses ip_size in get_ndpi_flow_info6 2020-01-31 15:37:36 +01:00
Philippe Antoine
b97360d931 Fix infinite loop in ndpi_workflow_process_packet 2020-01-31 15:26:34 +01:00
Luca
812505b56b Added sanity check 2020-01-15 20:49:21 -07:00
Vitaliy Ivanov
cbabbd5865 example: fix compilation of ndpireader on latest dpdk.
reader_util.c:1708:43: error: 'ETHER_MAX_LEN' undeclared here (not in a function)
             .rxmode = { .max_rx_pkt_len = ETHER_MAX_LEN }
                                           ^~~~~~~~~~~~~

DPDK before 19.08 had a macro ETHER_MAX_LEN, in later versions it was
changed to RTE_ETHER_MAX_LEN.

Signed-off-by: Vitaliy Ivanov <vitaliyi@interfacemasters.com>
2020-01-13 16:10:09 +02:00
Luca Deri
5571ce114d Added flow extra info field
Updated tests/results
2020-01-10 22:21:16 +01:00
emanuele-f
798bb6e2e1 Fix leaks and sha1 certificate detection 2020-01-02 14:39:51 +01:00
Luca
8b01056b21 Renamed TLS requested server name 2020-01-02 07:37:03 +01:00
Luca
daae1cc9b1 Reworked TLS dissection 2020-01-01 12:59:19 +01:00
Luca
9fb3a57a71 Kerberos fixes
Minor TLS cleanup
2019-12-29 10:45:42 +01:00
Luca Deri
81012b3201 CSV output enhancements 2019-12-13 12:50:52 +01:00
Luca Deri
56eeb965bf Code cleanup 2019-12-09 13:10:21 +01:00
Luca Deri
c4d476cc58 Code improvements 2019-12-09 00:29:02 +01:00
Luca Deri
558983c99c
Merge pull request #813 from SimoneRicci97/dev
Fixed intrusion detection
2019-12-09 00:01:09 +01:00
Luca Deri
239842b821 Major kerberos rework 2019-12-08 23:47:04 +01:00
Simone Ricci
a65c959940 Fixed intrusion detection 2019-11-26 21:20:22 +01:00
Luca Deri
382217887b Nested encapsulation dissection 2019-11-23 11:53:00 +01:00
Luca Deri
bdc0719e76 Added auth failed support with FTP 2019-11-21 23:31:52 +01:00
Luca Deri
fc82cdfa4a Implemented telnet password export 2019-11-21 19:36:01 +01:00
Luca Deri
e98b994a39 Updated results 2019-11-21 13:35:04 +01:00
Luca Deri
a58c838c4c Added flow duration and goodput in output (-v and -c) 2019-11-21 13:31:56 +01:00
Luca Deri
65a629304c Kerberos dissection improvements 2019-11-17 22:35:10 +01:00
Luca Deri
8181d63a95 Added ndpi_init_detection_module() API preferences 2019-11-10 22:57:21 +01:00
Luca
fb56b042c0 Merge branch 'dev' of https://github.com/ntop/nDPI into dev 2019-11-05 12:15:27 +00:00
Luca
6298ecc271 Added tunnelling decapsulation 2019-11-05 08:21:31 +00:00
Luca Deri
9e42b525ec
Merge pull request #806 from oleg-umnik/fix_1
Don't leak memory in live capture mode
2019-11-03 17:13:49 +01:00
Luca
4802987178 Initial work towards HTTP content-type export 2019-10-31 00:14:20 +01:00
Luca
0e54f87b18 Added telnet dissector
Improved data report
2019-10-29 19:12:42 +01:00
Oleg A. Arkhangelsky
9f5e5b90e5 Don't leak memory in live capture mode 2019-10-29 21:11:31 +03:00
Luca Deri
3d5f0ee315 Implemented stacked DPI decoding 2019-10-27 23:20:56 +01:00
Luca Deri
8f2c7c0638 Code cleanup 2019-10-26 08:28:14 +02:00
Luca Deri
e6bd64b3ea Improved HTTP reporting in ndpiReader 2019-10-25 15:56:47 +02:00
Luca Deri
0974075fa0 Major cleanup
Removed ndpi_pref_http_dont_dissect_response and ndpi_pref_dns_dont_dissect_response as the ndpi_extra_dissection_possible() call will now handle everything
2019-10-24 19:48:55 +02:00
Luca Deri
0ffe5cf1ff Added extra processing for POP and SMTP 2019-10-22 00:57:35 +02:00
Luca Deri
960aa77b6d Reworked email metaata extraction 2019-10-21 01:27:07 +02:00
Luca Deri
58daa5ed7d Added POP3 metadata extraction 2019-10-20 23:06:05 +02:00
Luca Deri
437e8bd706 Implemented IMAP data extraction 2019-10-20 22:46:08 +02:00