..
1kxun.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
4in4tunnel.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
4in6tunnel.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
6in4tunnel.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
6in6tunnel.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
443-chrome.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
443-curl.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
443-firefox.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
443-git.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
443-opvn.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
443-safari.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
activision.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
adult_content.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
afp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
agora-sd-rtn.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ah.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ajp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
alexa-app.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
alicloud.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
among_us.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
amqp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
android.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
anyconnect-vpn.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
anydesk.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
armagetron.pcapng
armagetron: update code ( #2777 )
2025-03-25 13:22:52 +01:00
atg.pcap
Add Automatic Tank Gauge protocol ( #2527 )
2024-08-23 22:35:08 +02:00
avast.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
avast_securedns.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
bacnet.pcap
Added BACnet dissector. ( #1940 )
2023-04-11 20:26:27 +02:00
bad-dns-traffic.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
badpackets.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
beckhoff_ads.pcapng
Add Beckhoff ADS protocol dissector ( #2181 )
2023-11-30 09:13:45 +01:00
bets.pcapng
Fix some errors found by fuzzers ( #2078 )
2023-09-10 11:09:59 +02:00
bfcp.pcapng
BFCP: fix check on payload length and extract metadata ( #2854 )
2025-05-26 15:08:53 +02:00
bfd.pcap
Add BFD protocol dissector ( #2332 )
2024-02-29 08:19:00 +01:00
BGP_Cisco_hdlc_slarp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
BGP_redist.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
bitcoin.pcap
Make some test traces smaller ( #2243 )
2024-01-08 17:04:12 +01:00
bittorrent.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
bittorrent_tcp_miss.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
bittorrent_utp.pcap
Improved uTorrent via utp (TCP-like streams over UDP). ( #2255 )
2024-01-11 16:49:25 +01:00
bjnp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
blizzard.pcap
blizzard: add detection of Overwatch2
2025-03-30 20:22:09 +02:00
bot.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
bt-dns.pcap
ndpiReader: fix export of DNS/BitTorrent attributes ( #1985 )
2023-05-20 17:23:48 +02:00
bt-http.pcapng
ndpiReader: fix export of HTTP attributes ( #1982 )
2023-05-20 15:12:14 +02:00
bt_search.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
c1222.pcapng
Add ANSI C12.22 protocol dissector ( #2317 )
2024-02-15 09:36:06 +01:00
cachefly.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
can.pcap
Add CAN over Ethernet dissector.
2023-10-23 13:45:56 +02:00
capwap.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
capwap_data.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
cassandra.pcap
Fix detection of new Cassandra versions ( #2272 )
2024-01-20 15:58:14 +01:00
ceph.pcap
Add Ceph protocol dissector ( #2242 )
2024-01-04 13:22:23 +01:00
check_mk_new.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
chrome.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
cip_io.pcap
Implemented CIP I/O (UDP version of the CIP protocol), Common Industrial protocol
2024-01-29 13:28:41 +01:00
citrix.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
cloudflare-warp.pcap
Improve detection of Cloudflare WARP traffic ( #2491 )
2024-07-04 08:59:04 +02:00
cnp_ip.pcapng
Add CNP/IP protocol support ( #2521 )
2024-08-22 15:26:32 +02:00
coap_mqtt.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
codm.pcap
Add Call of Duty Mobile support ( #2438 )
2024-05-15 12:46:02 +02:00
collectd.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
conncheck.pcap
Rework classification in ndpi_match_host_subprotocol()-like functions ( #2910 )
2025-07-01 17:01:59 +02:00
corba.pcap
Improve CORBA detection ( #2167 )
2023-11-27 13:10:50 +01:00
cpha.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
crawler_false_positive.pcapng
Improve detection of crawlers/bots ( #1968 )
2023-05-09 16:42:29 +02:00
crossfire.pcapng
CrossFire: update code ( #2834 )
2025-05-21 08:36:58 +02:00
crynet.pcap
Improved CryNetwork protocol dissector.
2023-10-23 13:44:34 +02:00
custom_breed_cat.pcap
Add category and breed support for custom rules ( #2872 )
2025-06-08 17:34:21 +02:00
custom_categories.pcapng
IPv6: add support for custom categories ( #2126 )
2023-10-29 12:56:44 +01:00
custom_risk_mask.pcapng
IPv6: add support for IPv6 risk exceptions ( #2122 )
2023-10-29 12:14:20 +01:00
custom_rules_ipv6.pcapng
fuzz: extend fuzzing coverage ( #2281 )
2024-01-24 21:16:58 +01:00
custom_rules_same-ip_multiple_ports.pcapng
ProtonVPN: split the ip list ( #2060 )
2023-07-27 09:05:22 +02:00
dazn.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dcerpc.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dhcp-fuzz.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
diameter.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dicom.pcap
Added DICOM support
2024-11-15 18:45:51 +01:00
dingtalk.pcap
Add DingTalk protocol support ( #2581 )
2024-10-07 15:45:51 +02:00
discord.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
discord_mid_flow.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dlep.pcapng
Add DLEP protocol dissector ( #2326 )
2024-02-20 16:05:41 +01:00
dlms.pcap
Add IEC62056 (DLMS/COSEM) protocol dissector ( #2229 )
2024-01-02 16:45:54 +01:00
dlt_ppp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dnp3.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dns-exf.pcap
Improved detection of invalid chars in DNS names
2023-09-09 17:46:13 +02:00
dns-google-nsid.pcapng
DNS: extract geolocation information, if available ( #2065 )
2023-07-31 07:44:43 +02:00
dns-invalid-chars.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dns-tunnel-iodine.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dns.pcap
DNS: fix message parsing ( #2732 )
2025-02-16 17:19:43 +01:00
dns2.pcap
DNS: extend tests
2025-02-11 12:44:46 +01:00
dns2tcp_tunnel.pcap
Added NDPI_TLS_ALPN_SNI_MISMATCH flow risk
2023-09-07 23:42:42 +02:00
dns_ambiguous_names.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dns_doh.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dns_dot.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dns_exfiltration.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dns_fragmented.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dns_invert_query.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dns_long_domainname.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dns_lots_of_answers.pcapng
DNS: fix dissection ( #2726 )
2025-02-15 15:13:01 +01:00
dns_multiple_transactions_same_flow.pcap
DNS: extend tests
2025-02-11 12:44:46 +01:00
dns_response_only.pcap
DNS: fix dissection when there is only the response message
2025-02-11 12:44:46 +01:00
dns_retransmissions.pcap
DNS: try to simplify the code ( #2718 )
2025-02-12 09:48:35 +01:00
dnscrypt-v1-and-resolver-pings.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dnscrypt-v2-doh.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dnscrypt-v2.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dnscrypt_skype_false_positive.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dofus.pcap
Dofus: update detection to version 3.X ( #2852 )
2025-05-25 20:06:12 +02:00
doh.pcapng
ndpireader: fix detection of DoH traffic based on packet distributions ( #2045 )
2023-07-14 23:20:06 +02:00
doq.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
doq_adguard.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dos_win98_smb_netbeui.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dotenv.pcap
Reduce snaplen of some traces ( #2490 )
2024-07-03 16:17:08 +02:00
drda_db2.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dropbox.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dtls.pcap
DTLS: add support for DTLS 1.3 ( #2445 )
2024-05-21 12:49:27 +02:00
dtls2.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dtls_certificate.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dtls_certificate_fragments.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dtls_mid_sessions.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dtls_old_version.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
dtls_session_id_and_coockie_both.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
EAQ.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
easyweather.pcap
Added EasyWeather protocol dissector ( #2912 )
2025-07-03 12:28:48 +02:00
edonkey.pcap
fuzz: extend fuzzing coverage ( #2052 )
2023-07-18 07:41:56 +02:00
egd.pcapng
Add Ethernet Global Data support ( #2437 )
2024-05-11 16:49:16 +02:00
elasticsearch.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
elf.pcap
Add ELF risk detection (detect transmitted linux executables). ( #2373 )
2024-04-06 19:32:51 +02:00
emotet.pcap
Make some test traces smaller ( #2243 )
2024-01-08 17:04:12 +01:00
encrypted_sni.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
epicgames.pcapng
Add support for Epic Games and GeForceNow/Nvidia ( #1990 )
2023-05-27 12:13:54 +02:00
esp.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ethereum.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ethernetIP.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ethersbus.pcap
Add Ether-S-Bus protocol dissector ( #2200 )
2023-12-05 17:20:38 +01:00
ethersio.pcap
Add Ether-S-I/O protocol dissector ( #2174 )
2023-11-27 19:04:05 +01:00
exe_download.pcap
Make some test traces smaller ( #2243 )
2024-01-08 17:04:12 +01:00
exe_download_as_png.pcap
Make some test traces smaller ( #2243 )
2024-01-08 17:04:12 +01:00
facebook.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
false_positives.pcapng
TLS: avoid sub-classification for RDP flows ( #2769 )
2025-03-14 15:13:29 +01:00
fastcgi.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
FAX-Call-t38-CA-TDM-SIP-FB-1.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
fins.pcap
Add Omron FINS protocol dissector ( #2172 )
2023-11-27 17:09:53 +01:00
firefox.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
fix.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
fix2.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
flow_risk_lists.pcapng
Fix configuration of ip lists of flow risks ( #2859 )
2025-05-28 20:19:19 +02:00
flute.pcapng
Add FLUTE protocol dissector ( #2351 )
2024-03-19 09:11:04 +01:00
forticlient.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ftp-start-tls.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ftp.pcap
Make some test traces smaller ( #2243 )
2024-01-08 17:04:12 +01:00
ftp_failed.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
fuzz-2006-06-26-2594.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
fuzz-2006-09-29-28586.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
fuzz-2020-02-16-11740.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
fuzz-2021-06-07-c6c72a0a56.pcap
Reduce snaplen of some traces ( #2490 )
2024-07-03 16:17:08 +02:00
fuzz-2021-10-13.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
gaijin_mobile_mixed.pcap
Add detection of Gaijin Entertainment games ( #2311 )
2024-02-09 11:07:48 +01:00
gaijin_warthunder.pcap
Add detection of Gaijin Entertainment games ( #2311 )
2024-02-09 11:07:48 +01:00
gearman.pcap
Add Gearman protocol dissector ( #2297 )
2024-02-01 19:46:57 +01:00
gearup_booster.pcap
Add GearUP Booster protocol dissector (heuristic based). ( #2765 )
2025-03-07 20:05:44 +01:00
geforcenow.pcapng
STUN: fix boundary checks on attribute list parsing ( #2387 )
2024-04-12 22:55:51 +02:00
genshin-impact.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
git.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
glbp.pcapng
Add GLBP dissector ( #2879 )
2025-06-10 15:26:10 +02:00
gnutella.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
google_chat.pcapng
Add Google Chat support ( #2244 )
2024-01-07 18:04:59 +01:00
google_meet.pcapng
Remove Google Hangouts/Duo stuff ( #2233 )
2024-01-02 14:01:33 +01:00
google_ssl.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
googledns_android10.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
gquic.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
gquic_only_from_server.pcap
QUIC: add heuristic to detect unidirectional *G*QUIC flows ( #2207 )
2023-12-13 17:14:04 +01:00
gre.pcapng
reader_util: fix GRE detunneling ( #2314 )
2024-02-10 09:16:27 +01:00
gtp.pcap
Fix isAppProtocol for GTP_U ( #2837 )
2025-05-21 14:30:36 +02:00
gtp_c.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
gtp_false_positive.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
gtp_prime.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
guildwars2.pcapng
Drop GW1 support and add basic GW2 detection ( #2836 )
2025-05-21 11:45:31 +02:00
h323-overflow.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
h323.pcap
H323: improve detection and avoid false positives ( #2432 )
2024-05-11 23:39:54 +02:00
hamachi.pcapng
Add Hamachi protocol detection support ( #2860 )
2025-06-02 14:00:31 +02:00
haproxy.pcap
Added HAProxy protocol. ( #2088 )
2023-10-02 18:10:47 +02:00
hart_ip.pcap
Add HART-IP protocol dissector ( #2163 )
2023-11-22 22:04:22 +01:00
hcl_notes.pcapng
Rename Lotus Notes to HCL Notes for product consistency
2025-05-15 21:43:34 +02:00
heuristic_tcp_ack_payload.pcap
Add an heuristic to detect/ignore some anomalous TCP ACK packets ( #1948 )
2023-04-25 19:25:07 +02:00
hislip.pcap
Add HiSLIP protocol dissector ( #2214 )
2023-12-17 11:52:55 +01:00
hl7.pcap
Added DICOM support
2024-11-15 18:45:51 +01:00
hls.pcapng
Add HLS support ( #2502 )
2024-07-16 12:01:28 +02:00
hots.pcapng
Add "Heroes of the Storm" video game signature detection. ( #1949 )
2023-04-22 18:28:43 +02:00
hpvirtgrp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
hsrp0.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
hsrp2.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
hsrp2_ipv6.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
http-basic-auth.pcap
Added HTTP credentials extraction
2024-10-31 21:20:46 +01:00
http-crash-content-disposition.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
http-lines-split.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
http-manipulated.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
http-proxy.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
http-pwd.pcapng
HTTP: fix leak and out-of-bound error on credential extraction ( #2611 )
2024-11-01 13:11:06 +01:00
http.pcapng
config: HTTP: enable/disable processing of HTTP responses
2024-01-18 10:21:24 +01:00
http2.pcapng
Add support for (un-encrypted) HTTP/2 ( #2087 )
2023-09-18 14:06:09 +02:00
http_asymmetric.pcapng
HTTP: improve extraction of metadata and of flow risks ( #1959 )
2023-05-05 13:35:20 +02:00
http_auth.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
http_connect.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
http_guessed_host_and_guessed.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
http_invalid_server.pcap
Fix compilation in CI jobs ( #2048 )
2023-07-15 14:26:51 +02:00
http_ipv6.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
http_on_sip_port.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
http_origin_different_than_host.pcap
HTTP: improve extraction of metadata and of flow risks ( #1959 )
2023-05-05 13:35:20 +02:00
http_starting_with_reply.pcapng
HTTP: improve extraction of metadata and of flow risks ( #1959 )
2023-05-05 13:35:20 +02:00
http_ua_splitted_in_two_pkts.pcapng
HTTP: improve extraction of metadata and of flow risks ( #1959 )
2023-05-05 13:35:20 +02:00
i3d.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
iax.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
icmp-tunnel.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
IEC104.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
iec60780-5-104.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ieee_c37118.pcap
Add IEEE C37.118 protocol dissector ( #2193 )
2023-12-05 08:06:15 +01:00
imap-starttls.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
imap.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
imaps.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
imo.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
instagram.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ip_fragmented_garbage.pcap
Make some test traces smaller ( #2243 )
2024-01-08 17:04:12 +01:00
iphone.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ipp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ipsec_isakmp_esp.pcap
Make some test traces smaller ( #2243 )
2024-01-08 17:04:12 +01:00
ipv6_in_gtp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
iqiyi.pcap
Remove PPStream protocol and add iQIYI ( #2403 )
2024-04-23 18:01:36 +02:00
irc.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
iso9506-1-mms.pcap
Add ISO 9506-1 MMS protocol dissector ( #2189 )
2023-12-01 09:03:07 +01:00
ja3_lots_of_cipher_suites.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ja3_lots_of_cipher_suites_2_anon.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
jabber.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
jrmi.pcap
Added protocol - JRMI - Java Remote Method Invocation ( #2470 )
2024-06-15 10:52:28 +02:00
jsonrpc.pcap
Add JSON-RPC protocol dissector ( #2217 )
2023-12-20 12:42:25 +01:00
kafka.pcapng
Improved Kafka dissector. ( #2456 )
2024-05-27 09:46:32 +02:00
KakaoTalk_chat.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
KakaoTalk_talk.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
kcp.pcap
Add KCP protocol dissector. ( #2257 )
2024-01-12 12:14:59 +01:00
kerberos-error.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
kerberos-login.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
kerberos.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
kerberos_fuzz.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
kismet.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
knxip.pcapng
Add KNXnet/IP protocol support ( #2397 )
2024-04-19 12:54:00 +02:00
lagofast.pcap
Add LagoFast protocol dissector. ( #2743 )
2025-02-23 13:13:38 +01:00
ldp.pcap
Add Label Distribution Protocol support ( #2385 )
2024-04-12 17:44:36 +02:00
line.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
linecall_falsepositve.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
lisp_registration.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
log4j-webapp-exploit.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
lol_wild_rift_udp.pcap
Improve LoL: Wild Rift detection ( #2359 )
2024-03-28 16:01:01 +01:00
long_tls_certificate.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
lru_ipv6_caches.pcapng
STUN: fix boundary checks on attribute list parsing ( #2387 )
2024-04-12 22:55:51 +02:00
lustre.pcapng
Add Lustre protocol detection support ( #2544 )
2024-09-04 10:22:04 +02:00
malformed_dns.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
malformed_icmp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
malware.pcap
Make some test traces smaller ( #2243 )
2024-01-08 17:04:12 +01:00
massscan.pcap
Added the support for multiple TCP fingerprint format
2025-05-24 10:30:33 +02:00
melsec.pcapng
Add MELSEC protocol support ( #2846 )
2025-05-23 11:13:52 +02:00
memcached.cap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
merakicloud.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
mgcp.pcap
Improved MGCP detection by allowing '\r' as line feed.
2023-10-11 16:44:26 +02:00
mikrotik_mndp.pcap
Implemented Mikrotik discovery protocol dissection and metadata extraction ( #2618 )
2024-11-14 23:34:31 +01:00
mining.pcapng
STUN: fix boundary checks on attribute list parsing ( #2387 )
2024-04-12 22:55:51 +02:00
modbus.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
monero.pcap
Add Monero protocol classification. ( #2196 )
2023-12-13 19:55:18 +01:00
mongo_false_positive.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
mongodb.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
mpeg-dash.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
mpeg.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
mpegts.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
mqtt.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
msdo.pcapng
Add Microsoft Delivery Optimization protocol ( #2799 )
2025-04-28 13:40:21 +02:00
mssql_tds.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
mullvad_dns.pcap
Mullvad VPN service added (based on entry node IP addresses) ( #2062 )
2023-08-02 19:44:16 +02:00
mullvad_wireguard.pcap
Mullvad VPN service added (based on entry node IP addresses) ( #2062 )
2023-08-02 19:44:16 +02:00
mumble.pcapng
Add Mumble detection support ( #2269 )
2024-01-19 07:46:51 +01:00
munin.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
mysql.pcapng
Improve MySQL detection ( #2279 )
2024-01-25 11:12:08 +01:00
nano.pcapng
Add Nano (XNO) protocol support ( #2508 )
2024-07-18 16:18:12 +02:00
natpmp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
nats.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
naver.pcap
Add Naver protocol support ( #2610 )
2024-11-01 14:56:25 +01:00
ndpi_match_string_subprotocol__error.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
nest_log_sink.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
netbios.pcap
fuzz: improve fuzzing coverage ( #2474 )
2024-06-17 13:45:47 +02:00
netbios_wildcard_dns_query.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
netease_games.pcapng
Add NetEase Games detection support ( #2335 )
2024-03-05 11:00:52 +01:00
netflix.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
netflow-fritz.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
netflowv9.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
nexon.pcapng
Rework the old MapleStory code to identify traffic from generic Nexon games ( #2773 )
2025-03-19 17:58:42 +01:00
nfsv2.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
nfsv3.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
nintendo.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
nntp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
no_sni.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
nomachine.pcapng
Add NoMachine NX protocol dissector ( #2234 )
2024-01-02 10:23:42 +01:00
nordvpn.pcap
Extend regression tests
2025-02-04 14:33:32 +01:00
NTPv2.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
NTPv3.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
NTPv4.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ocs.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ocsp.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
oicq.pcap
Added OICQ dissector. ( #1950 )
2023-04-21 11:30:10 +02:00
ookla.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
opc-ua.pcap
Add OPC UA protocol dissector ( #2169 )
2023-11-27 12:13:23 +01:00
openflow.pcap
Add OpenFlow protocol dissector ( #2222 )
2023-12-20 10:48:45 +01:00
openvpn-tlscrypt.pcap
OpenVPN: rework detection ( #2199 )
2023-12-06 10:24:26 +01:00
openvpn.pcap
OpenVPN, Wireguard: improve sub-classification
2024-09-05 16:36:50 +02:00
openvpn_nohmac.pcapng
OpenVPN: rework detection ( #2199 )
2023-12-06 10:24:26 +01:00
openvpn_nohmac_tcp.pcapng
OpenVPN: rework detection ( #2199 )
2023-12-06 10:24:26 +01:00
openvpn_obfuscated.pcapng
Add an heuristic to detect encrypted/obfuscated OpenVPN flows ( #2547 )
2024-09-16 18:38:26 +02:00
openwire.pcapng
Add OpenWire support ( #2513 )
2024-07-22 19:20:44 +02:00
opera-vpn.pcapng
Fix some errors found by fuzzers ( #2078 )
2023-09-10 11:09:59 +02:00
oracle12.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
os_detected.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
Oscar.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ospfv2_add_new_prefix.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ossfuzz_seed_fake_traces_1.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ossfuzz_seed_fake_traces_2.pcapng
fuzz: improve fuzzing coverage ( #2309 )
2024-02-09 19:19:03 +01:00
ossfuzz_seed_fake_traces_4.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
paltalk.pcapng
Add Paltalk protocol support ( #2606 )
2024-10-28 16:57:05 +01:00
path_of_exile.pcapng
Path of Exile 2 support ( #2654 )
2025-01-06 10:57:16 +01:00
pfcp.pcapng
Add PFCP protocol dissector ( #2342 )
2024-03-13 20:18:43 +01:00
pgm.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
pgsql.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
pgsql2.pcapng
fuzz: improve fuzzing coverage ( #2474 )
2024-06-17 13:45:47 +02:00
pia.pcap
Add PIA (Private Internet Access) support ( #2250 )
2024-01-09 18:28:57 +01:00
pim.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
pinterest.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
pluralsight.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
pop3.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
pop3_stls.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
pops.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
portable_executable.pcap
Add PE32/PE32+ risk detection (detect transmitted windows executables). ( #2312 )
2024-04-05 14:43:28 +02:00
pptp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
profinet-io-le.pcap
Add PROFINET/IO protocol dissector ( #2213 )
2023-12-16 13:30:21 +01:00
protobuf.pcap
Improved Protobuf dissector. ( #2119 )
2023-10-27 10:19:47 +02:00
protonvpn.pcap
ProtonVPN: split the ip list ( #2060 )
2023-07-27 09:05:22 +02:00
psiphon3.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ptpv2.pcap
Add IEEE 1588-2008 (PTPv2) dissector ( #2156 )
2023-11-21 13:39:54 +01:00
punycode-idn.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic-23.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic-24.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic-27.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic-28.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic-29.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic-33.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic-34.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic-forcing-vn-with-data.pcapng
QUIC: fix dissection of packets forcing VN
2023-06-08 17:07:25 +02:00
quic-fuzz-overflow.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic-mvfst-22.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic-mvfst-22_decryption_error.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic-mvfst-27.pcapng
Fix compilation in CI jobs ( #2048 )
2023-07-15 14:26:51 +02:00
quic-mvfst-exp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic-v2.pcapng
QUIC: add support for QUIC version 2
2023-06-08 17:07:25 +02:00
quic.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic046.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic_0RTT.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic_cc_ack.pcapng
fuzz: extend fuzzing coverage ( #2040 )
2023-07-11 10:12:08 +02:00
quic_crypto_aes_auth_size.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic_frags_ch_in_multiple_packets.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic_frags_ch_out_of_order_same_packet_craziness.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic_frags_different_dcid.pcapng
QUIC: fix decryption with CH fragments with different Destination CID ( #2278 )
2024-01-24 09:57:28 +01:00
quic_interop_V.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic_q39.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic_q43.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic_q46.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic_q46_b.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic_q50.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic_sh.pcap
QUIC: add a basic heuristic to detect mid-flows
2024-09-10 19:32:31 +02:00
quic_t50.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quic_t51.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
quickplay.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
radius_false_positive.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
radmin3.pcapng
Add Radmin protocol dissector ( #2283 )
2024-01-25 08:10:29 +01:00
raft.pcap
Add Raft protocol dissector. ( #2286 )
2024-01-25 20:26:18 +01:00
raknet.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
rdp.pcap
RDP: improve detection over UDP ( #2043 )
2023-07-13 10:50:13 +02:00
rdp2.pcap
fuzz: extend fuzzing coverage ( #2052 )
2023-07-18 07:41:56 +02:00
rdp3.pcap
Get rid of RDP false positives ( #2161 )
2023-11-23 09:35:43 +01:00
rdp_over_tls.pcap
Added support for RDP over TLS
2024-10-19 16:24:11 +02:00
README.txt
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
reasm_crash_anon.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
reasm_segv_anon.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
reddit.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
resp.pcap
Fix RESP detection ( #2289 )
2024-01-27 21:19:34 +01:00
riot.pcapng
Test files for riit games
2023-04-11 10:14:18 +02:00
riotgames.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ripe_atlas.pcap
Add Ripe Atlas probe protocol. ( #2473 )
2024-06-17 11:00:38 +02:00
rmcp.pcap
Add Remote Management Control Protocol (RMCP).
2023-10-19 19:50:57 +02:00
roblox.pcapng
Add detection of Roblox games ( #2054 )
2023-07-21 03:39:40 +02:00
rockstar_games.pcapng
Add Rockstar Games detection ( #2805 )
2025-04-28 19:54:00 +02:00
roughtime.pcap
Add Roughtime protocol dissector. ( #2248 )
2024-01-09 07:56:27 +01:00
rsh-syslog-false-positive.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
rsh.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
rsync.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
rtcp_multiple_pkts_in_the_same_datagram.pcap
RTP: rework code ( #2021 )
2023-06-23 08:12:40 +02:00
rtmp.pcap
RTMP: improve detection ( #2549 )
2024-09-10 16:33:06 +02:00
rtp.pcapng
support rtp/rtcp over tcp ( #2422 ) ( #2457 )
2024-05-28 22:01:08 +02:00
rtps.pcap
Add RTPS protocol dissector ( #2168 )
2023-11-27 07:17:39 +01:00
rtsp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
rtsp_setup_http.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
rx.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
s7comm-plus.pcap
Get rid of RDP false positives ( #2161 )
2023-11-23 09:35:43 +01:00
s7comm.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
safari.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
salesforce.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
scanner.pcap
Improved detection of TCP scanners
2025-05-27 22:17:38 +02:00
sccp_hw_conf_register.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
sctp.cap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
selfsigned.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
sflow.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
shadowsocks.pcap
Add an heuristic to detect fully encrypted flows ( #2058 )
2023-07-26 09:09:12 +02:00
shell.pcap
Add Shellscript risk detection. ( #2375 )
2024-04-10 15:36:54 +02:00
signal.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
signal_audiocall.pcapng
RTP, STUN: improve detection of multimedia flow type ( #2620 )
2024-11-19 16:38:14 +01:00
signal_audiocall_2.pcapng
Follow-up of latest Signal call change (see: 4d41588a7)
2025-04-05 14:22:05 +02:00
signal_multiparty.pcapng
signal: improve detection of chats and calls ( #2637 )
2024-12-04 16:14:27 +01:00
signal_videocall.pcapng
RTP, STUN: improve detection of multimedia flow type ( #2620 )
2024-11-19 16:38:14 +01:00
signal_videocall_multiparty.pcapng
RTP: improve detection of multimedia type for Signal calls ( #2697 )
2025-01-24 14:13:51 +01:00
simple-dnscrypt.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
sip.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
sip_hello.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
sites.pcapng
Workaround for big-endian builds
2025-07-19 16:44:56 +02:00
sites2.pcapng
Add support Yandex Alice ( #2633 )
2024-11-29 14:13:36 +01:00
sites3.pcapng
Workaround for big-endian builds
2025-07-19 16:44:56 +02:00
skinny.pcap
Make some test traces smaller ( #2243 )
2024-01-08 17:04:12 +01:00
skype-conference-call.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
smb_deletefile.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
smb_frags.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
smbv1.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
smpp_in_general.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
smtp-starttls.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
smtp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
smtps.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
snapchat.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
snapchat_call.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
snapchat_call_v1.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
snmp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
soap.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
socks.pcap
fuzz: extend fuzzing coverage ( #2052 )
2023-07-18 07:41:56 +02:00
softether.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
someip-tp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
someip-udp-method-call.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
someip_sd_sample.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
sonos.pcapng
Added sonos dissector
2024-10-13 18:50:34 +02:00
source_engine.pcap
Added Source Engine dissector. ( #1937 )
2023-04-11 14:31:57 +02:00
spotify_tcp.pcap
fuzz: improve fuzzing coverage ( #2220 )
2023-12-19 20:33:08 +01:00
sql_injection.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
srvloc-v1.pcapng
Add Service Location Protocol dissector. ( #2036 )
2023-08-01 08:50:46 +02:00
srvloc.pcap
Add Service Location Protocol dissector. ( #2036 )
2023-08-01 08:50:46 +02:00
ssdp-m-search-ua.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ssdp-m-search.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ssdp.pcapng
Update the capture length of the ssdp example ( #2741 )
2025-02-21 19:47:17 +01:00
ssh.pcap
fuzzing: improve coverage ( #2495 )
2024-07-12 14:22:25 +02:00
ssh_unidirectional.pcap
Reduce snaplen of some traces ( #2490 )
2024-07-03 16:17:08 +02:00
ssl-cert-name-mismatch.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
starcraft_battle.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
steam.pcapng
Rework Steam detection (part 1) ( #2264 )
2024-01-18 19:23:44 +01:00
stomp.pcapng
Add STOMP protocol dissector ( #2280 )
2024-01-23 21:08:13 +01:00
stun.pcap
STUN: add support for ipv6 in some metadata ( #2389 )
2024-04-13 14:12:20 +02:00
stun_classic.pcap
fuzz: extend fuzzing coverage ( #2040 )
2023-07-11 10:12:08 +02:00
stun_dtls_rtp.pcapng
RTP: fix detection over TCP ( #2462 )
2024-05-29 18:31:10 +02:00
stun_dtls_rtp_unidir.pcapng
STUN: improve demultiplexing of DTLS packets ( #2153 )
2023-11-27 11:10:38 +01:00
stun_dtls_unidirectional_client.pcap
STUN: major code rework ( #2116 )
2023-10-30 10:28:19 +01:00
stun_dtls_unidirectional_server.pcap
STUN: major code rework ( #2116 )
2023-10-30 10:28:19 +01:00
stun_google_meet.pcapng
STUN: fix detection of Google Meet over IPv6 ( #2241 )
2024-01-02 19:30:59 +01:00
stun_msteams_unidir.pcapng
STUN: fix Skype/MsTeams detection and monitoring logic ( #2028 )
2023-07-03 17:21:32 +02:00
stun_signal.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
stun_signal_tcp.pcapng
STUN: fix monitoring ( #2639 )
2024-12-06 20:19:28 +01:00
stun_tcp_multiple_msgs_same_pkt.pcap
STUN: major code rework ( #2116 )
2023-10-30 10:28:19 +01:00
stun_wa_call.pcapng
STUN: fix detection over TCP
2023-06-21 10:38:44 +02:00
stun_zoom.pcapng
STUN: major code rework ( #2116 )
2023-10-30 10:28:19 +01:00
syncthing.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
synscan.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
syslog.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tailscale.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
targusdataspeed_false_positives.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tcp_scan.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
teams.pcap
STUN: fix boundary checks on attribute list parsing ( #2387 )
2024-04-12 22:55:51 +02:00
teamspeak3.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
teamviewer.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
telegram.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
telegram_videocall.pcapng
STUN: major code rework ( #2116 )
2023-10-30 10:28:19 +01:00
telegram_videocall_2.pcapng
RTP, STUN: improve detection of multimedia flow type ( #2620 )
2024-11-19 16:38:14 +01:00
telegram_voice.pcapng
RTP, STUN: improve detection of multimedia flow type ( #2620 )
2024-11-19 16:38:14 +01:00
telnet.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tencent_games.pcap
Add more TencentGames signatures ( #2354 )
2024-03-21 14:38:47 +01:00
teredo.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
teso.pcapng
Add The Elder Scrolls Online support ( #2376 )
2024-04-10 18:04:02 +02:00
tftp.pcap
Improved TFTP. Fixes #2075 . ( #2149 )
2023-11-21 16:56:46 +01:00
threema.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
thrift.pcap
Add Apache Thrift protocol dissector. ( #2007 )
2023-06-22 13:07:32 +02:00
tinc.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
TivoDVR.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tk.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls-appdata.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls-esni-fuzzed.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls-rdn-extract.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_1.2_unidirectional_client.pcapng
Tls out of order ( #2561 )
2024-09-18 21:04:03 +02:00
tls_1.2_unidirectional_client_no_cert.pcapng
Tls out of order ( #2561 )
2024-09-18 21:04:03 +02:00
tls_1.2_unidirectional_server.pcapng
Tls out of order ( #2561 )
2024-09-18 21:04:03 +02:00
tls_1.2_unidirectional_server_no_cert.pcapng
Tls out of order ( #2561 )
2024-09-18 21:04:03 +02:00
tls_1.3_unidirectional_client.pcapng
Tls out of order ( #2561 )
2024-09-18 21:04:03 +02:00
tls_1.3_unidirectional_server.pcapng
Tls out of order ( #2561 )
2024-09-18 21:04:03 +02:00
tls_2_reasms.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_2_reasms_b.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_alert.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_certificate_too_long.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_change_cipher.pcap
TLS: improve handling of Change Cipher message ( #2564 )
2024-09-23 17:58:21 +02:00
tls_cipher_lens.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_client_certificate_with_missing_server_one.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_ech.pcapng
TLS: add basic, basic, detection of Encrypted ClientHello ( #2053 )
2023-07-21 03:41:43 +02:00
tls_esni_sni_both.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_false_positives.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_heur__shadowsocks-tcp.pcapng
Add some heuristics to detect encrypted/obfuscated/proxied TLS flows ( #2553 )
2024-09-24 14:20:31 +02:00
tls_heur__trojan-tcp-tls.pcapng
Add some heuristics to detect encrypted/obfuscated/proxied TLS flows ( #2553 )
2024-09-24 14:20:31 +02:00
tls_heur__vmess-tcp-tls.pcapng
Add some heuristics to detect encrypted/obfuscated/proxied TLS flows ( #2553 )
2024-09-24 14:20:31 +02:00
tls_heur__vmess-tcp.pcapng
Add some heuristics to detect encrypted/obfuscated/proxied TLS flows ( #2553 )
2024-09-24 14:20:31 +02:00
tls_heur__vmess-websocket.pcapng
Add some heuristics to detect encrypted/obfuscated/proxied TLS flows ( #2553 )
2024-09-24 14:20:31 +02:00
tls_invalid_reads.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_long_cert.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_malicious_sha1.pcapng
fuzz: extend fuzzing coverage ( #2205 )
2023-12-11 12:48:50 +01:00
tls_missing_ch_frag.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_multiple_synack_different_seq.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_port_80.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_torrent.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_unidirectional.pcap
Reduce snaplen of some traces ( #2490 )
2024-07-03 16:17:08 +02:00
tls_verylong_certificate.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tls_with_huge_ch.pcapng
TLS: detect abnormal padding usage ( #2579 )
2024-10-01 17:15:03 +02:00
toca-boca.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tor-browser.pcap
Improved Tor detection
2025-02-24 22:14:41 +01:00
tor.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tplink_shp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
trdp.pcapng
Add TRDP protocol support ( #2528 )
2024-08-25 13:31:39 +02:00
trickbot.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tumblr.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
tunnelbear.pcap
tunnelbear: improve detection over wireguard ( #2485 )
2024-07-01 08:20:18 +02:00
tuya_lp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
ubntac2.pcap
Improve Ubiquiti device discovery request/response detection. ( #2810 )
2025-05-12 13:00:08 +02:00
uftp_v4_v5.pcap
Add UFTP protocol dissector ( #2215 )
2023-12-18 11:21:07 +01:00
ultrasurf.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
umas.pcap
Add Schneider Electric’s UMAS detection support ( #2180 )
2023-11-28 18:03:00 +01:00
upnp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
viber.pcap
Viber: add detection of voip calls and avoid false positives ( #2434 )
2024-05-11 09:21:13 +02:00
vivox.pcapng
Add Vivox support ( #2668 )
2025-01-11 19:37:31 +01:00
vk.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
vnc.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
vrrp3.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
vxlan.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
wa_video.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
wa_voice.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
waze.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
WebattackRCE.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
WebattackSQLinj.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
WebattackXSS.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
webdav.pcap
fuzzing: improve coverage ( #2495 )
2024-07-12 14:22:25 +02:00
webex.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
websocket-chisel-ssh.pcap
Improved WebSocket-over-HTTP detection ( #2664 )
2025-01-11 11:23:42 +01:00
websocket.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
wechat.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
weibo.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
whatsapp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
whatsapp_login_call.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
whatsapp_login_chat.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
whatsapp_voice_and_message.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
whatsappfiles.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
whois.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
windowsupdate_over_http.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
windscribe.pcapng
Add detection of Windscribe VPN
2024-09-05 16:36:50 +02:00
wireguard.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
xdmcp.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
xiaomi.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
xss.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
yandex.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
yojimbo.pcap
Add Yojimbo (netcode) protocol dissector ( #2277 )
2024-01-21 17:47:42 +01:00
youtube_quic.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
youtubeupload.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
z3950.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
zabbix.pcap
zabbix: improve detection ( #2055 )
2023-07-21 03:42:36 +02:00
zattoo.pcap
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
zeromq.pcapng
Simplify ZeroMQ detection ( #2847 )
2025-05-23 16:09:16 +02:00
zmap.pcap
Added the support for multiple TCP fingerprint format
2025-05-24 10:30:33 +02:00
zoom.pcap
Zoom: improve detection ( #2270 )
2024-01-21 12:17:34 +01:00
zoom2.pcap
Make some test traces smaller ( #2243 )
2024-01-08 17:04:12 +01:00
zoom_p2p.pcapng
Test multiple ndpiReader configurations ( #1931 )
2023-04-06 11:30:36 +02:00
zug.pcap
Add ZUG consensus protocol dissector. ( #2458 )
2024-05-28 20:29:48 +02:00