Luca Deri
d9c72999ee
Test update
2021-10-06 00:06:34 +02:00
Luca Deri
408d78e628
Improved DGA detection for skipping potential DGAs of known/popular domain names
2021-10-05 16:51:24 +02:00
Zied Aouini
0994771974
Improve CI ( #1303 )
...
* Improve CI pipeline
* Fix branch name.
* Fix branch name.
* Fix libgcrypt configuration.
* Update build.yml
* Move to Github Actions instead of Travis CI.
* Fix mingw on ubuntu bionic.
* Reactivate cross compile on Ubuntu Bionic.
* Switch to single line steps.
* Add several compilers versions
* Minor fix.
* Fix build all and delete cxx
* Fix RCE detection.
* Fix PCRE configuration.
* Add condition on PCRE test pcap.
* Update WebattackRCE.pcap.out
* Add missing SUBST.
* Delete WebattackRCE.pcap.out
* Update WebAttackRCE result.
* Fix typo.
* Extend jobs with pcre+msan+maxminddb.
* Fix code inpector warnings.
* Delete .appveyor.yml
2021-09-22 12:10:52 +02:00
Luca Deri
e8455236bd
Updated output
2021-08-07 17:38:33 +02:00
Ivan Nardi
cccf794265
ndpiReader: add statistics about nDPI performance ( #1240 )
...
The goal is to have a (roughly) idea about how many packets nDPI needs
to properly classify a flow.
Log this information (and guessed flows number too) during unit tests,
to keep track of improvements/regressions across commits.
2021-07-13 12:28:39 +02:00
Luca Deri
732bcecd17
Added flow risk score
2021-05-18 21:05:47 +02:00
Luca Deri
eb37f8f1fb
Split HTTP request from response Content-Type. Request Content-Type should be present with POSTs and not with other methods such as GET
2021-01-06 18:28:24 +01:00
Luca Deri
2768da0637
Improved HTTP dissection
2020-12-16 14:45:29 +01:00
Luca Deri
e71df49b3e
Changed due to bin size extension
2020-07-30 00:06:46 +02:00
Luca Deri
879cec94b2
User agent detection improvements
2020-07-21 12:06:34 +02:00
Luca Deri
1a62f4c799
Added ndpi_bin_XXX API
...
Added packet lenght distribution bins
2020-06-22 01:02:54 +02:00
Toni Uhlig
6a9f5e4f7c
Fixed use after free caused by dangling pointer
...
* This fix also improved RCE Injection detection
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
2020-06-21 20:05:38 +02:00
Luca Deri
b7e666e465
Added fix to avoid potential heap buffer overflow in H.323 dissector
...
Modified HTTP report information to make it closer to the HTTP field names
2020-05-19 08:31:05 +02:00
Luca Deri
3d9285f1be
Added check for invalid HTTP URLs
2020-05-16 00:10:35 +02:00
Luca Deri
e5e69d0f7a
Added the ability to detect when a known protocol is using a non-standard port
...
Added check to spot executables exchanged via HTTP
2020-05-10 21:25:38 +02:00
emanuele-f
fd94270507
Remove decimals in test results for IAT, packet lengths and goodput ratio
2020-02-14 11:42:20 +01:00
Luca
3e99b73635
Updte WebattackRCE.pcap.out with libpcre disabled
2020-02-02 22:15:55 +01:00
MrTiz9
ce4f4fbe2f
Added missing pcap.out for RCE detections
2020-02-01 17:23:22 +01:00
MrTiz9
3422574c17
FIXED - nDPI now detect RCE injections via PCRE instead Intel Hyperscan
2020-02-01 17:18:35 +01:00
MrTiz9
daf15e70bf
Added missing pcap.out for RCE detections
2020-01-24 17:16:18 +01:00
