vrr/nDPI
2
0
Fork 0
mirror of https://github.com/vel21ripn/nDPI.git synced 2026-04-30 16:09:43 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 5
nDPI/tests/pcap
History
Darryl Sokoloski b8972d1b38
Added TP-LINK Smart Home Protocol dissector. (#1841) 
Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>

Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
2022-12-20 20:46:06 +01:00
..
1kxun.pcap Reimplemented 1kxun application protocol. (#1585) 2022-06-06 18:04:49 +02:00
4in4tunnel.pcap Add basic support for some ip-in-ip tunnels 2020-04-23 10:55:33 +02:00
4in6tunnel.pcap Add basic support for some ip-in-ip tunnels 2020-04-23 10:55:33 +02:00
6in4tunnel.pcap added 6in4 tunneling pcap for test 2015-10-23 17:15:28 +02:00
6in6tunnel.pcap Add basic support for some ip-in-ip tunnels 2020-04-23 10:55:33 +02:00
443-chrome.pcap Added new TLS test files 2020-02-08 10:38:22 +01:00
443-curl.pcap Added new TLS test files 2020-02-08 10:38:22 +01:00
443-firefox.pcap Added new TLS test files 2020-02-08 10:38:22 +01:00
443-git.pcap Added new TLS test files 2020-02-08 10:38:22 +01:00
443-opvn.pcap Added new TLS test files 2020-02-08 10:38:22 +01:00
443-safari.pcap Added new TLS test files 2020-02-08 10:38:22 +01:00
activision.pcap Add Activision dissector. (#1693) 2022-08-02 16:15:07 +02:00
afp.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
agora-sd-rtn.pcap Added proprietary Agora Software Defined Real-time Network (SD-RTN) protocol dissector. (#1520) 2022-04-20 18:31:28 +02:00
ah.pcapng Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
aimini-http.pcap Refactored nDPI subprotocol handling and aimini protocol detection. (#1156) 2021-03-23 11:46:12 +01:00
ajp.pcap 💡 Add Apache JServ Protocol Dissector 2018-04-22 01:54:28 -03:00
alexa-app.pcapng Add Virtual Asssitant (Alexa, Siri) support. (#1057) 2020-11-16 21:19:38 +01:00
alicloud.pcap Added AliCloud server access dissector. (#1672) 2022-07-23 11:21:49 +02:00
among_us.pcap Added support for AmongUs. (#1054) 2020-11-09 16:19:00 +01:00
amqp.pcap Added AMQP (Advanced Message Queueing Protocol) 2017-04-07 08:05:39 +02:00
android.pcap Added android.pcap 2020-03-23 10:08:57 +01:00
anyconnect-vpn.pcap Add Cisco anyconnect VPN signature. 2019-09-28 19:52:53 -07:00
anydesk.pcapng Anydesk: improve detection (#1735) 2022-09-13 20:55:11 +02:00
avast.pcap Add AVAST dissector. (#1674) 2022-07-25 18:07:44 +02:00
avast_securedns.pcapng Added AVAST SecureDNS protocol. (#1244) 2021-07-14 11:11:59 +02:00
bad-dns-traffic.pcap Added risks for checking 2020-09-21 19:57:23 +02:00
badpackets.pcap Added badpackets.pcap 2020-03-23 10:06:16 +01:00
BGP_Cisco_hdlc_slarp.pcap Removed non IP traffic to shrink pcaps 2015-10-20 16:20:59 +02:00
BGP_redist.pcap added cisco hdlc datalink type - fix MPLS header - added BGP pcap with cisco hdlc & MPLS header 2015-10-16 17:48:38 +02:00
bitcoin.pcap Implementation of Bitcoin, Ethereum, ZCash, Monero dissectors all identified as mining 2018-09-18 18:13:04 +02:00
bittorrent.pcap Added ability to extract BitTorrent hash (and eventually peerId) 2016-02-15 09:57:26 +01:00
bittorrent_utp.pcap Added trace for BitTorrrent u-TP 2016-02-25 08:31:59 +01:00
bjnp.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
bot.pcap Added newflow risk NDPI_HTTP_CRAWLER_BOT 2022-02-17 17:20:52 +01:00
bt_search.pcap Added BitTorrent search pcap file 2015-05-13 19:01:01 +02:00
cachefly.pcapng Update host content list match (#1633) 2022-07-04 13:21:11 +02:00
capwap.pcap Added capwap support 2019-10-27 19:03:23 +01:00
cassandra.pcap Add Cassandra protocol dissector (#1285) 2021-09-09 22:47:58 +02:00
check_mk_new.pcap Added test pcap for check_mk protocol 2017-11-30 10:15:19 +01:00
chrome.pcap Converted some test .pcapng files to pcap format 2021-05-13 20:51:11 +02:00
citrix.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
cloudflare-warp.pcap Added Cloudflare WARP detection patterns. (#1615) (#1616) 2022-07-02 14:57:56 +02:00
coap_mqtt.pcap fix for test pcap and output 2016-04-04 00:15:57 +02:00
collectd.pcap Added collectd dissector (again). (#1601) 2022-06-17 19:56:33 +02:00
corba.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
cpha.pcap Added CPHA - CheckPoint High Availability Protocol protocl support 2020-10-22 18:39:13 +02:00
crynet.pcap Add CryNetwork dissector. 2022-09-16 16:48:43 +02:00
dazn.pcapng Dazn: add support for Dazn streaming service (#1559) 2022-05-29 17:47:16 +02:00
dcerpc.pcap Add a connectionless DCE/RPC detection (#1078) 2020-12-08 15:48:53 +01:00
dhcp-fuzz.pcapng Fix writes to flow->protos union fields (#1354) 2021-11-15 16:20:57 +01:00
diameter.pcap added diameter protocol dissector 2018-01-02 13:47:46 +01:00
discord.pcap Improved Discord pattern. (#1707) 2022-08-10 21:00:11 +02:00
dlt_ppp.pcap Fix parsing of DLT_PPP datalink type (#1042) 2020-10-21 22:27:42 +02:00
dnp3.pcap Added new test pcaps 2019-11-23 13:27:34 +01:00
dns-invalid-chars.pcap Detect invalid characters in text and set a risk. Fixes #1347. (#1363) 2021-10-26 21:34:01 +02:00
dns-tunnel-iodine.pcap Added risks for checking 2020-09-21 19:57:23 +02:00
dns_ambiguous_names.pcap ahoсorasick. Code review. Part 2. (#1236) 2021-07-12 17:39:43 +02:00
dns_doh.pcap Renamed DNSoverHTTPS to handle bot DoH and DoT 2019-11-08 09:23:52 +00:00
dns_dot.pcap Renamed DNSoverHTTPS to handle bot DoH and DoT 2019-11-08 09:23:52 +00:00
dns_exfiltration.pcap Added dns_exfiltration.pcap 2020-03-23 10:06:00 +01:00
dns_fragmented.pcap Added DNS fragmented test pcap 2021-09-17 15:56:18 +02:00
dns_invert_query.pcapng Improve/add several protocols (#1383) 2021-12-18 13:24:51 +01:00
dns_long_domainname.pcap Added extension to detect nested subdomains as used in Browsertunnel attack tool 2020-09-09 23:25:19 +02:00
dnscrypt-v1-and-resolver-pings.pcap Added pcap file which contains dnscrypt-v1 data and resolver update requests/responses (v1/v2). 2020-09-07 21:04:23 +02:00
dnscrypt-v2-doh.pcap Added dnscrypt-v2-doh resolver test pcaps. 2020-09-07 20:22:52 +02:00
dnscrypt-v2.pcap Improved MDNS/LLMNR detection. (#1437) 2022-02-07 18:05:23 +01:00
dnscrypt_skype_false_positive.pcapng Improved dnscrypt midstream detection. (#1241) 2021-07-13 15:10:18 +02:00
doq.pcapng QUIC: add suppport for DNS-over-QUIC (#1107) 2021-01-07 10:56:39 +01:00
doq_adguard.pcapng QUIC: add suppport for DNS-over-QUIC (#1107) 2021-01-07 10:56:39 +01:00
dos_win98_smb_netbeui.pcap Added dos_win98_smb_netbeui.pcap 2020-03-23 10:05:24 +01:00
drda_db2.pcap results updated 2017-07-27 13:15:37 +02:00
dropbox.pcap FIX: dropbox dissector. UPD: updated pcap file with new dropbox pkts 2018-09-05 16:10:07 +02:00
dtls.pcap Reworked TLS dissection 2020-01-01 12:59:19 +01:00
dtls2.pcap DTLS: improve support (#1146) 2021-03-02 21:15:40 +01:00
dtls_certificate.pcapng DTLS: fix access to certificate cache (#1450) 2022-02-21 20:30:22 +01:00
dtls_certificate_fragments.pcap DTLS: handle (certificate) fragments (#1811) 2022-12-10 18:32:25 +01:00
dtls_mid_sessions.pcapng TLS: add support for old DTLS versions and for detection of mid-sessions (#1619) 2022-07-03 17:44:17 +02:00
dtls_old_version.pcapng TLS: add support for old DTLS versions and for detection of mid-sessions (#1619) 2022-07-03 17:44:17 +02:00
dtls_session_id_and_coockie_both.pcap DTLS: improve support (#1146) 2021-03-02 21:15:40 +01:00
EAQ.pcap Added testing files for EAQ, KakaoTalk, Torcedor, Meu 2015-06-14 12:28:59 +02:00
elasticsearch.pcap Add Elasticsearch protocol dissector. (#1782) 2022-10-21 20:01:54 +02:00
emotet.pcap Improved suspicious http user agent detection. (#1537) 2022-05-02 19:17:32 +02:00
encrypted_sni.pcap Refreshed test pcap 2020-05-28 21:23:02 +02:00
esp.pcapng Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
ethereum.pcap Various ethereum improvements 2020-01-08 22:01:45 +01:00
ethernetIP.pcap Added EthernetIP dissector 2022-01-12 21:48:39 +01:00
exe_download.pcap Improvements on GotoMeeting 2020-05-15 10:52:23 +02:00
exe_download_as_png.pcap Improvements on GotoMeeting 2020-05-15 10:52:23 +02:00
facebook.pcap Fix facebook certificate recognition 2016-09-06 00:44:17 +02:00
fastcgi.pcap Add FastCGI protocol detection. (#1711) 2022-08-24 13:22:46 +02:00
FAX-Call-t38-CA-TDM-SIP-FB-1.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
firefox.pcap Added browser TLS heuristic 2021-05-13 20:00:27 +02:00
fix.pcap added fix protocol https://github.com/ntop/nDPI/issues/372 2017-06-27 11:38:44 +02:00
fix2.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
forticlient.pcap Added TLS certifiacate caching 2021-05-15 10:52:16 +02:00
ftp-start-tls.pcap FTP: fix support for START-TLS sessions 2021-09-21 20:53:04 +02:00
ftp.pcap Added test file for FTP 2019-04-12 12:19:11 +02:00
ftp_failed.pcap Added auth failed support with FTP 2019-11-21 23:31:52 +01:00
fuzz-2006-06-26-2594.pcap Added fuzz-2006-06-26-2594.pcap fuzzy pcap 2020-03-23 10:24:11 +01:00
fuzz-2006-09-29-28586.pcap Added fuzz-2006-09-29-2858 fuzzy pcap 2020-03-23 10:25:28 +01:00
fuzz-2020-02-16-11740.pcap Added fuzz-2020-02-16-11 fuzzy pcap 2020-03-23 10:27:32 +01:00
fuzz-2021-06-07-c6c72a0a56.pcap Fix detunneling of GTP-U traffic (#1168) 2021-04-18 21:37:51 +02:00
fuzz-2021-10-13.pcap Fix broken fuzz_process_packet fuzzer by adding a call to ndpi_finalize_initialization(). (#1334) 2021-10-18 23:16:32 +02:00
genshin-impact.pcap Improved GenshinImpact protocol dissector. (#1604) 2022-06-18 15:11:59 +02:00
git.pcap added git protocol dissector and pcap for test 2016-06-24 13:19:14 +02:00
gnutella.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
google_ssl.pcap Added pcap for SSL regression 2015-06-16 18:34:43 +02:00
googledns_android10.pcap Added GoogleDNS DoH on Android 10 2020-06-19 09:55:58 +02:00
gquic.pcap Added som GQUIC and IETF QUIC test pcaps 2020-08-22 16:47:05 +02:00
gre_no_options.pcapng Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
gtp_c.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
gtp_false_positive.pcapng GTP: fix some false positives (#1394) 2022-01-08 20:40:24 +01:00
gtp_prime.pcapng Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
h323-overflow.pcap Fixed off-by-one error in h323. 2020-06-27 22:58:05 +02:00
h323.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
hangout.pcap Implemented #228 2016-07-20 01:40:16 +02:00
hpvirtgrp.pcap Add HP Virtual Machine Group Management (hpvirtgrp) protocol. (#1170) 2021-04-20 14:12:16 +02:00
hsrp0.pcap Added HSRP protocol detection 2022-02-08 18:04:57 +01:00
hsrp2.pcap Added HSRP protocol detection 2022-02-08 18:04:57 +01:00
hsrp2_ipv6.pcapng HSRP: add support for IPv6 (#1440) 2022-02-09 11:47:37 +01:00
http-crash-content-disposition.pcap Fixed use after free caused by dangling pointer 2020-06-21 20:05:38 +02:00
http-lines-split.pcap Improved HTTP line parsing if request splitted into multiple packets. 2020-07-05 18:36:57 +02:00
http-manipulated.pcap Skip whitespaces between HTTP method and URL. (#1271) 2021-08-08 17:00:10 +02:00
http-proxy.pcapng Improve handling of HTTP-Proxy and HTTP-Connect (#1673) 2022-07-25 12:57:33 +02:00
http_auth.pcap Added new risk for clear text credentials 2021-09-10 22:00:04 +02:00
http_connect.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
http_guessed_host_and_guessed.pcapng HTTP: correctly set the classification protocols 2022-09-06 14:58:31 +02:00
http_ipv6.pcap Fixed IPv6 HTTPs support 2015-11-23 10:08:44 +01:00
http_on_sip_port.pcap HTTP: fix classification (#1692) 2022-07-30 22:57:20 +02:00
i3d.pcap Added i3D and RiotGames protocol dissectors. (#1609) 2022-07-03 20:43:30 +02:00
iax.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
icmp-tunnel.pcap Add ICMP checksum check and set risk if mismatch detected. (#1464) 2022-03-02 13:12:01 +01:00
IEC104.pcap Fixed CPHA missing protocol initialization 2021-02-10 15:22:20 +01:00
iec60780-5-104.pcap Added new test pcaps 2019-11-23 13:27:34 +01:00
imap-starttls.pcap IMAP, POP3, SMTP: improve dissection (#1368) 2021-11-11 11:55:56 +01:00
imap.pcap IMAP, POP3, SMTP: improve dissection (#1368) 2021-11-11 11:55:56 +01:00
imaps.pcap SMTPS, POPS, IMAPS: fix classification and extra dissection (#1685) 2022-07-30 12:05:43 +02:00
imo.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
instagram.pcap Added flow extra info field 2020-01-10 22:21:16 +01:00
ip_fragmented_garbage.pcap Added pcap for testing fragments reassembly 2021-02-03 11:48:53 +01:00
iphone.pcap Added iphone.pcap 2020-03-23 10:09:14 +01:00
ipp.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
ipsec_isakmp_esp.pcap Improved IPSec/ISAKMP detection. (#1600) 2022-06-16 09:16:18 +02:00
ipv6_in_gtp.pcap Add basic support for some ip-in-ip tunnels 2020-04-23 10:55:33 +02:00
irc.pcap IRC test files 2021-02-09 21:25:48 +01:00
ja3_lots_of_cipher_suites.pcap TLS: extract JA3 signatures in some corner cases 2020-06-28 12:05:12 +02:00
ja3_lots_of_cipher_suites_2_anon.pcap TLS: extract JA3 signatures in some corner cases 2020-06-28 12:05:12 +02:00
jabber.pcap Improved Jabber/XMPP detection. (#1661) 2022-07-13 17:55:33 +02:00
KakaoTalk_chat.pcap Added flow extra info field 2020-01-10 22:21:16 +01:00
KakaoTalk_talk.pcap Added flow extra info field 2020-01-10 22:21:16 +01:00
kerberos-error.pcap Kerberos: add support for Krb-Error messages (#1647) 2022-07-07 16:45:49 +02:00
kerberos-login.pcap Improved ASN.1 parsing for Keberos. Fixes #1492. (#1497) 2022-04-10 10:36:10 +02:00
kerberos.pcap Implemented Kerberos metadata extraction 2019-10-08 13:32:21 +02:00
kerberos_fuzz.pcapng Fix writes to flow->protos union fields (#1354) 2021-11-15 16:20:57 +01:00
kismet.pcap Add Kismet protocol detection. (#1710) 2022-08-24 10:50:11 +02:00
kontiki.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
line.pcap LINE_CALL: add detection of LINE voip calls (#1761) 2022-10-06 17:09:26 +02:00
lisp_registration.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
log4j-webapp-exploit.pcap Added support for Log4J/Log4Shell detection in nDPI via a new flow risk named NDPI_POSSIBLE_EXPLOIT 2021-12-23 21:30:16 +01:00
long_tls_certificate.pcap Added TLS test with long certificate 2021-01-04 11:31:25 +01:00
lru_ipv6_caches.pcapng Make LRU caches ipv6 aware (#1810) 2022-12-03 12:07:32 +01:00
malformed_dns.pcap Reworked MDNS dissector that is not based on the DNS dissector 2020-09-17 23:24:02 +02:00
malformed_icmp.pcap Added malformed packet risk support 2020-06-26 22:37:52 +02:00
malware.pcap Add test for custom categories match on HTTP and SSL flows 2019-09-27 14:01:12 +02:00
memcached.cap Added new dissector for Memcached. 2018-08-15 16:47:21 -04:00
mgcp.pcapng Improved MGCP dissector. (#1717) 2022-08-30 11:21:58 +02:00
modbus.pcap Added Modbus over TCP dissector 2018-12-21 18:25:44 +01:00
monero.pcap Implementation of Bitcoin, Ethereum, ZCash, Monero dissectors all identified as mining 2018-09-18 18:13:04 +02:00
mongo_false_positive.pcapng MONGODB: avoid false positives 2022-07-07 15:36:05 +02:00
mongodb.pcap 💡 Add mongodb protocol dissector (#1048) 2020-11-03 16:16:02 +01:00
mpeg-dash.pcap Prohibit MPEG-DASH to set HTTP as application protocol. (#1560) 2022-05-30 14:54:27 +02:00
mpeg.pcap Test file for mpeg detection 2015-06-15 16:48:50 +02:00
mpegts.pcap Added MPEG TS protocol 2015-06-25 03:57:50 -07:00
mqtt.pcap Extend protocols support (#1422) 2022-01-29 09:19:26 +01:00
mssql_tds.pcap fix and merge mssql and tds in unique dissector mssql_tds due to latest release + minor fixes 2016-09-16 02:05:14 +02:00
munin.pcap Add Munin protocol dissector. 2022-10-20 22:10:35 +02:00
mysql-8.pcap Added (manipulated) MySQL 8 test pcap. 2020-08-20 23:46:47 +02:00
natpmp.pcap NAT-PMP: fix metadata extraction 2022-09-21 20:02:23 +02:00
nats.pcap Removed now obsolete MSN protocol 2020-05-03 18:20:21 +02:00
ndpi_match_string_subprotocol__error.pcapng Added test pcap 2021-07-06 18:57:52 +02:00
nest_log_sink.pcap New dissector: Nest Log Sink 2018-09-19 21:25:16 -04:00
netbios.pcap Added netbios.pcap 2020-03-23 10:05:41 +01:00
netbios_wildcard_dns_query.pcap Added the ability do identigy as DGA those host/domain names with too many consucutive repeated characters 2020-08-21 18:41:35 +02:00
netflix.pcap better improvement of netflix traffic detection - added netflix pcap and output - change little bit http detection behaviour 2017-03-05 12:38:15 +01:00
netflow-fritz.pcap Format update 2020-03-23 14:37:14 +01:00
netflowv9.pcap Added STUN check to avoid false positives 2019-09-11 17:13:49 +02:00
nfsv2.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
nfsv3.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
nintendo.pcap Reworked output 2019-07-15 14:45:25 +02:00
nntp.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
no_sni.pcap Updated ESNI/SNI alarm generation prolicy 2020-11-08 10:07:35 +01:00
NTPv2.pcap Enhance NTP support, add protocol version identification; Add pcap examples for NTPv2, NTPv3, NTPv4; Fix bug with identification of NTP monlist packets as QUIC 2015-07-29 14:19:32 +03:00
NTPv3.pcap Enhance NTP support, add protocol version identification; Add pcap examples for NTPv2, NTPv3, NTPv4; Fix bug with identification of NTP monlist packets as QUIC 2015-07-29 14:19:32 +03:00
NTPv4.pcap Enhance NTP support, add protocol version identification; Add pcap examples for NTPv2, NTPv3, NTPv4; Fix bug with identification of NTP monlist packets as QUIC 2015-07-29 14:19:32 +03:00
ocs.pcap added OCS service and related pcap for testing 2015-12-24 00:16:33 +01:00
ocsp.pcapng Add detection of OCSP (#1370) 2021-11-11 12:36:55 +01:00
ookla.pcap Added Ookla test pcap 2017-04-01 21:39:47 +02:00
openvpn.pcap Fix openvpn with multiple hard_reset_client not being recognized 2016-08-28 00:41:39 +02:00
oracle12.pcapng Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
os_detected.pcapng Added test pcap 2021-02-03 11:56:14 +01:00
Oscar.pcap added Oscar test 2015-07-13 15:01:51 +02:00
ospfv2_add_new_prefix.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
pgm.pcap Added Pragmatic General Multicast (PGM) protocol detection 2022-06-08 09:11:22 +02:00
pgsql.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
pim.pcap Add support for PIM (Protocol Indipendent Multicast) protocol (#1599) 2022-06-15 12:25:26 +02:00
pinterest.pcap Add Pinterest support. (#1059) 2020-11-16 21:11:43 +01:00
pluralsight.pcap Add support for Pluralsight site (#1503) 2022-03-27 15:13:12 +02:00
pop3.pcap IMAP, POP3, SMTP: improve dissection (#1368) 2021-11-11 11:55:56 +01:00
pop3_stls.pcap Add support to opportunistic TLS 2022-09-04 17:22:19 +02:00
pops.pcapng Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
pps.pcap added iqiyi media service and updated ppsetream protocol - added 1kxun media service 2016-11-20 13:07:00 +01:00
pptp.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
psiphon3.pcap Added Psiphon detection patterns. See #566 and #1099. (#1631) 2022-07-04 10:34:54 +02:00
punycode-idn.pcap Added new IDN/Punycode risk for spotting internationalized domain names 2022-02-03 09:17:54 +01:00
quic-23.pcap Major rework of QUIC dissector 2020-08-21 22:04:55 +02:00
quic-24.pcap Major rework of QUIC dissector 2020-08-21 22:04:55 +02:00
quic-27.pcap Major rework of QUIC dissector 2020-08-21 22:04:55 +02:00
quic-28.pcap QUIC: minor fixes 2020-08-24 13:53:36 +02:00
quic-29.pcap QUIC: minor fixes 2020-08-24 13:53:36 +02:00
quic-33.pcapng QUIC: update to draft-33 (#1104) 2021-01-04 15:50:14 +01:00
quic-34.pcap QUIC: fix dissection of draft-34 (#1484) 2022-03-09 22:37:56 +01:00
quic-fuzz-overflow.pcapng QUIC: fix an integer overflow (#1337) 2021-10-11 23:08:10 +02:00
quic-mvfst-22.pcap Major rework of QUIC dissector 2020-08-21 22:04:55 +02:00
quic-mvfst-22_decryption_error.pcap Major rework of QUIC dissector 2020-08-21 22:04:55 +02:00
quic-mvfst-27.pcapng QUIC: fix mvfst-27 test (#1145) 2021-03-02 21:15:02 +01:00
quic-mvfst-exp.pcap QUIC: add support for MVFST EXPERIMENTAL version 2020-09-20 16:38:28 +02:00
quic-v2-01.pcapng QUIC: add support for version 2 draft 01 (#1493) 2022-03-25 10:16:30 +01:00
quic.pcap upgrade quic test pcap with version 33 2016-05-17 23:43:05 +02:00
quic046.pcap Added QUIC v046 test pcap 2020-03-17 16:51:25 +01:00
quic_0RTT.pcap QUIC: add support for 0-RTT packets received before the Initial 2022-08-24 15:38:30 +02:00
quic_crypto_aes_auth_size.pcap Internal crypto: increase size of authentication buffer (#1468) 2022-03-02 15:14:57 +01:00
quic_frags_ch_in_multiple_packets.pcapng QUIC: add basic support for fragmented Client Hello (#1216) 2021-06-24 18:30:34 +02:00
quic_frags_ch_out_of_order_same_packet_craziness.pcapng QUIC: add basic support for fragmented Client Hello (#1216) 2021-06-24 18:30:34 +02:00
quic_interop_V.pcapng Quic fixes (#1067) 2020-11-22 11:04:10 +01:00
quic_q39.pcap Major rework of QUIC dissector 2020-08-21 22:04:55 +02:00
quic_q43.pcap Major rework of QUIC dissector 2020-08-21 22:04:55 +02:00
quic_q46.pcap Major rework of QUIC dissector 2020-08-21 22:04:55 +02:00
quic_q46_b.pcap Major rework of QUIC dissector 2020-08-21 22:04:55 +02:00
quic_q50.pcap Major rework of QUIC dissector 2020-08-21 22:04:55 +02:00
quic_t50.pcap QUIC: add support for GQUIC T050 and T051 2020-08-30 20:51:33 +02:00
quic_t51.pcap QUIC: add support for GQUIC T050 and T051 2020-08-30 20:51:33 +02:00
quickplay.pcap Reverted fix in quic.c as apparently it invalidates protocol detection 2015-06-24 07:49:02 -07:00
radius_false_positive.pcapng Improve/add several protocols (#1383) 2021-12-18 13:24:51 +01:00
raknet.pcap Added RakNet protocol dissector. (#1527) 2022-04-24 13:08:57 +02:00
rdp.pcap Updated results with the new SSL dissection 2019-05-30 11:15:50 +02:00
README.txt Directory that will contain files for regression testing of nDPI 2015-05-13 18:46:07 +02:00
reasm_crash_anon.pcapng Partial fix for #1129 2021-02-05 22:22:33 +01:00
reasm_segv_anon.pcapng Partial fix for #1129 2021-02-05 22:22:33 +01:00
reddit.pcap Add Reddit support. (#1060) 2020-11-16 21:13:01 +01:00
riotgames.pcap Added another RiotGames signature. 2022-07-06 14:37:26 +02:00
rsh-syslog-false-positive.pcap Added RSH dissector. Fixes #202. (#1581) 2022-06-04 19:12:53 +02:00
rsh.pcap Added RSH dissector. Fixes #202. (#1581) 2022-06-04 19:12:53 +02:00
rsync.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
rtmp.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
rtsp.pcap Improved RTSP detection and fixed HTTP false-positive. Fixes #1229. (#1266) 2021-07-31 23:31:49 +02:00
rtsp_setup_http.pcapng Improved RTSP via HTTP detection. (#1232) 2021-07-06 18:57:04 +02:00
rx.pcap Add RX testcase. 2016-04-15 15:47:39 +02:00
s7comm.pcap Added s7comm test pcap 2020-03-27 09:35:59 +01:00
safari.pcap Converted some test .pcapng files to pcap format 2021-05-13 20:51:11 +02:00
salesforce.pcap Added Salesforce detection 2021-11-26 19:07:45 +01:00
sccp_hw_conf_register.pcapng Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
sctp.cap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
selfsigned.pcap Added self signed certificate test pcap 2020-05-08 09:09:58 +02:00
sflow.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
signal.pcap Added signal test pcap 2019-09-21 09:40:20 +02:00
simple-dnscrypt.pcap Added pcap file which contains dnscrypt-v1 data and resolver update requests/responses (v1/v2). 2020-09-07 21:04:23 +02:00
sip.pcap Bug fix. Protocol SIP: command 'CANCEL sip:' is not recognized. 2017-10-31 22:04:14 +03:00
sip_hello.pcapng SIP: improve detection (#1654) 2022-07-09 05:45:42 +02:00
sites.pcapng Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
skinny.pcap Skinny: rework and improve classification (#1625) 2022-07-03 19:25:00 +02:00
skype-conference-call.pcap Reworked output 2019-07-15 14:45:25 +02:00
skype.pcap Skype test files 2015-05-19 08:14:33 +02:00
skype_no_unknown.pcap Skype test files 2015-05-19 08:14:33 +02:00
skype_udp.pcap Improve skype detection (#1039) 2020-10-27 08:45:09 +01:00
smb_deletefile.pcap Added smb_deletefile.pcap 2020-03-23 10:09:47 +01:00
smb_frags.pcap SMB: add (partial) support for messages split into multiple TCP segments (#1644) 2022-07-07 19:24:31 +02:00
smbv1.pcap Added SMBv1 test file 2019-08-08 23:33:40 +02:00
smpp_in_general.pcap Implemented Short Message Peer-to-Peer (SMPP) dissector 2016-12-14 21:57:33 +01:00
smtp-starttls.pcap Add support to opportunistic TLS 2022-09-04 17:22:19 +02:00
smtp.pcap IMAP, POP3, SMTP: improve dissection (#1368) 2021-11-11 11:55:56 +01:00
smtps.pcapng Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
snapchat.pcap Added support for Snapchat 2015-07-05 19:21:12 +02:00
snapchat_call.pcapng Add support for Snapchat voip calls (#1147) 2021-03-06 05:48:36 +01:00
snmp.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
soap.pcap Improved SOAP via HTTP. (#1605) 2022-06-18 17:19:16 +02:00
socks-http-example.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
softether.pcap Add Softether dissector. (#1679) 2022-07-29 19:29:54 +02:00
someip-tp.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
someip-udp-method-call.pcapng Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
someip_sd_sample.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
sql_injection.pcap Added new test pcaps 2022-06-15 18:57:46 +02:00
ssdp-m-search-ua.pcap [SSDP] Extract HTTP user-agent when available. (#1500) 2022-03-27 11:10:44 +02:00
ssdp-m-search.pcap Added example SSDP M-SEARCH capture file. 2018-07-20 13:28:38 -04:00
ssh.pcap SSH test file 2019-08-22 19:36:36 +02:00
ssl-cert-name-mismatch.pcap Improved SSL certificate name wildcard handling and risk. #1182 (#1183) 2021-05-11 21:38:26 +02:00
starcraft_battle.pcap Cleaned up starcraft protocol code 2015-07-21 14:10:50 +02:00
steam.pcap Improved packet datastructure cleanup after packet processing 2019-09-25 23:59:22 +02:00
steam_datagram_relay_ping.pcapng Improved Steam detection (Steam Datagram Relay - SDR). (#1243) 2021-07-14 11:09:58 +02:00
stun.pcap STUN: several improvements 2022-09-11 13:33:32 +02:00
stun_signal.pcapng Improve/add several protocols (#1383) 2021-12-18 13:24:51 +01:00
syncthing.pcap Add Syncthing dissector. 2022-09-16 15:21:49 +02:00
synscan.pcap New testing pcap with syn scan attack 2021-06-08 10:39:41 +02:00
syslog.pcap Fixed syslog false negatives. (#1582) 2022-06-05 23:01:56 +02:00
targusdataspeed_false_positives.pcap TargusDataspeed: avoid false positives (#1628) 2022-07-03 20:28:58 +02:00
teams.pcap Added detection of Microsoft Teams 2020-04-16 15:23:07 +02:00
teamspeak3.pcap Improved Teamspeak3 License/Weblist detection. (#1802) 2022-11-15 08:59:45 +01:00
teamviewer.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
telegram.pcap Updated automa API to use 32 bit values splits from protocol/categpry 2020-05-06 21:57:32 +02:00
telnet.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
teredo.pcap Added teredo protocol support. Fixed #74 2015-08-07 15:56:03 +02:00
tftp.pcap Improved TFTP. Dissect Read/Write Request filenames. (#1617) 2022-07-03 14:37:05 +02:00
threema.pcap Added Threema Messenger. (#1643) 2022-07-06 19:30:10 +02:00
tinc.pcap Added tinc protocol detection 2017-05-29 19:09:32 +02:00
TivoDVR.pcap Add TiVoConnect dissector. Fixes #1697. (#1699) 2022-08-08 19:04:20 +02:00
tk.pcap Added risky domain flow-risk support 2021-02-21 21:45:46 +01:00
tls-appdata.pcap Improved TLS application data detection. (#1541) 2022-05-08 19:56:08 +02:00
tls-esni-fuzzed.pcap Fixed heap overflow in tls esni extraction triggered by manipulated packets. 2020-06-29 21:51:46 +02:00
tls-rdn-extract.pcap Fixed stack overflow caused by missing length check 2020-06-18 00:52:04 +02:00
tls_2_reasms.pcapng TLS: improve reassembler (#1669) 2022-07-22 12:19:21 +02:00
tls_2_reasms_b.pcapng TLS: improve reassembler (#1669) 2022-07-22 12:19:21 +02:00
tls_alert.pcap Improved TLS alert detection. (#1542) 2022-05-08 20:33:59 +02:00
tls_certificate_too_long.pcap TLS Risks - Certificate Validity Too Long (#1239) 2021-07-14 11:13:22 +02:00
tls_cipher_lens.pcap TLS: fix a heap-buffer-overflow (#1356) 2021-10-22 14:57:49 +02:00
tls_client_certificate_with_missing_server_one.pcapng TLS: explicit ignore client certificate (#1776) 2022-10-18 16:40:15 +02:00
tls_esni_sni_both.pcap Suspicious ESNI usage: add a comment and a pcap example 2020-08-06 10:29:35 +02:00
tls_false_positives.pcapng TLS: ignore invalid Content Type values 2022-07-07 15:36:05 +02:00
tls_invalid_reads.pcap TLS: fix another use-of-uninitialized-value error in ClientHello parsing (#1179) 2021-05-09 15:10:14 +02:00
tls_long_cert.pcap Added TLS test 2020-01-01 21:27:18 +01:00
tls_missing_ch_frag.pcap TLS: improve reassembler (#1669) 2022-07-22 12:19:21 +02:00
tls_multiple_synack_different_seq.pcapng Add support to opportunistic TLS 2022-09-04 17:22:19 +02:00
tls_port_80.pcapng Avoid overwriting valid protocol in ndpi_detection_giveup (#1360) 2021-10-27 09:23:07 +02:00
tls_torrent.pcapng A final(?) effort to reduce memory usage per flow (#1389) 2021-12-22 19:54:06 +01:00
tls_unidirectional.pcap TLS: explicit ignore client certificate (#1776) 2022-10-18 16:40:15 +02:00
tls_verylong_certificate.pcap Removed TLS debug code that could have caused crashes 2020-01-05 21:28:35 +01:00
toca-boca.pcap Added Toca Boca protocol dissector. (#1517) 2022-04-19 19:32:49 +02:00
tor.pcap Removed false positives from CoAP protocol 2016-06-19 21:25:58 +02:00
tplink_shp.pcap Added TP-LINK Smart Home Protocol dissector. (#1841) 2022-12-20 20:46:06 +01:00
trickbot.pcap Added HTTP suspicious content securirty risk (useful for tracking trickbot) 2021-01-02 21:11:42 +01:00
tumblr.pcap Add Tumblr support. (#1061) 2020-11-16 21:14:06 +01:00
tunnelbear.pcap Added TunnelBear VPN detection patterns. (#1615) 2022-07-01 13:19:17 +02:00
tuya_lp.pcap Added TUYA LAN Protocol dissector. (#1838) 2022-12-19 17:02:19 +01:00
ubntac2.pcap Improvements for exporting info in MDNS and UBNTAC2 protocols 2017-02-13 01:29:25 +01:00
ultrasurf.pcap Added UltraSurf protocol dissector. (#1618) 2022-07-04 16:04:53 +02:00
upnp.pcap Added UPnP test pcap 2018-11-07 22:45:29 +01:00
viber.pcap Improved Viber (TCP) detection. (#1547) 2022-05-10 21:37:03 +02:00
vnc.pcap added vnc pcap to test folder 2016-10-12 00:14:46 +02:00
vrrp3.pcapng Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
vxlan.pcap Added VXLAN dissector (#1439) 2022-02-09 11:47:09 +01:00
wa_video.pcap Format update 2020-03-23 14:44:33 +01:00
wa_voice.pcap Format update 2020-03-23 14:44:33 +01:00
waze.pcap Fixes for issues #40 -> #52 2015-07-11 16:04:58 +02:00
WebattackRCE.pcap FIXED - nDPI now detect RCE injections via PCRE instead Intel Hyperscan 2020-02-01 17:18:35 +01:00
WebattackSQLinj.pcap Implemented SQL Injection and XSS attack detection 2019-11-01 23:05:11 +01:00
WebattackXSS.pcap Implemented SQL Injection and XSS attack detection 2019-11-01 23:05:11 +01:00
webex.pcap Added fix for Webex protol detection 2015-10-11 17:55:56 +02:00
websocket.pcap 💡 implement websocket protocol dissector 2020-04-26 02:53:12 -03:00
wechat.pcap improved wechat detection 2017-04-15 21:18:50 +02:00
weibo.pcap added Weibo service and pcap test 2016-05-13 01:05:13 +02:00
whatsapp.pcap Improved WhatsApp detection. (#1595) 2022-06-14 20:06:48 +02:00
whatsapp_login_call.pcap GIT commit count fix that should work on all platforms (RedHat/CentOS included) 2015-05-27 09:20:51 +02:00
whatsapp_login_chat.pcap GIT commit count fix that should work on all platforms (RedHat/CentOS included) 2015-05-27 09:20:51 +02:00
whatsapp_voice_and_message.pcap Improvements to WhatsApp voice 2015-07-25 10:13:47 +02:00
whatsappfiles.pcap Increased number of protocols to 512 2018-03-01 20:52:06 +01:00
whois.pcapng WHOIS: enhance detection, avoiding false positives (#1320) 2021-10-05 09:35:04 +02:00
windowsupdate_over_http.pcap HTTP: improve detection of WindowsUpdate (#1658) 2022-07-10 17:08:37 +02:00
wireguard.pcap Add test for WireGuard 2019-07-24 19:18:20 +03:00
wow.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
xdmcp.pcap Extend tests coverage (#1476) 2022-03-09 22:37:35 +01:00
xiaomi.pcap Improved Xiaomi HTTP detection. (#1546) 2022-05-10 11:10:04 +02:00
xss.pcap Added new test pcaps 2022-06-15 18:57:46 +02:00
youtube_quic.pcap Minor changes for tracking Youtube content 2017-03-13 01:16:58 +01:00
youtubeupload.pcap Added YouTube Upload protocol (used the identified unused by NDPI_PROTOCOL_SKYFILE_PREPAID) 2017-11-19 18:11:37 +01:00
z3950.pcapng Improved Z39.50 detection. (#1225) 2021-07-05 09:41:35 +02:00
zabbix.pcap Added zabbix dissector 2019-10-29 19:25:46 +01:00
zattoo.pcap Extend protocols support (#1422) 2022-01-29 09:19:26 +01:00
zcash.pcap Implementation of Bitcoin, Ethereum, ZCash, Monero dissectors all identified as mining 2018-09-18 18:13:04 +02:00
zoom.pcap Added Zoom protocol support removing invalid STUN/Skype detections 2019-09-26 21:52:42 +02:00
zoom2.pcap Improved Zoom protocol detection 2022-01-23 20:59:36 +01:00
zoom_p2p.pcapng STUN: add detection of ZOOM peer-to-peer flows (#1825) 2022-12-11 23:07:35 +01:00

README.txt 

Place here test pcaps used for regressions testing