9 commits

Author	SHA1	Message	Date
Ivan Nardi	d738b60cac	DNS: evaluate all flow risks even if sub-classification is disabled (#2714)	2025-02-11 13:16:03 +01:00
Ivan Nardi	c669bb3140	DNS: fix relationship between FPC and subclassification (#2702) ... Allow optimal FPC even if DNS subclassification is disabled	2025-01-30 21:26:47 +01:00
Luca	45323e3bf8	Exports DNS A/AAAA responses (up to 4 addresses) ... Changed the default to IPv4 (used to be IPv6) in case of DNS error response	2024-10-02 15:55:35 +02:00
Ivan Nardi	85501c9aaa	FPC: add DPI information (#2514) ... If the flow is classified (via DPI) after the first packet, we should use this information as FPC	2024-07-23 08:50:27 +02:00
Ivan Nardi	65e31b0ea3	FPC: small improvements (#2512) ... Add printing of fpc_dns statistics and add a general cconfiguration option. Rework the code to be more generic and ready to handle other logics.	2024-07-22 17:42:23 +02:00
Ivan Nardi	843e487270	Add infrastructure for explicit support of Fist Packet Classification (#2488) ... Let's start with some basic helpers and with FPC based on flow addresses. See: #2322	2024-07-03 18:02:07 +02:00
Nardi Ivan	526cf6f291	Zoom: remove "stun_zoom" LRU cache ... Since 070a0908b we are able to detect P2P calls directly from the packet content, without any correlation among flows	2024-06-17 10:19:55 +02:00
Ivan Nardi	95fe21015d	Remove "zoom" cache (#2420) ... This cache was added in b6b4967aa, when there was no real Zoom support. With 63f349319, a proper identification of multimedia stream has been added, making this cache quite useless: any improvements on Zoom classification should be properly done in Zoom dissector. Tested for some months with a few 10Gbits links of residential traffic: the cache pretty much never returned a valid hit.	2024-05-06 12:51:45 +02:00
Nardi Ivan	c704be1a20	config: DNS: add two configuration options ... * Enable/disable sub-classification of DNS flows * Enable/disable processing of DNS responses	2024-01-18 10:21:24 +01:00