mirror of
https://github.com/nfstream/nfstream.git
synced 2026-05-20 17:52:00 +00:00
68dfdb6120
* Upgrade nDPI from 4.7.0 to 5.0 with Windows build fix (#230) - Upgrade nDPI submodule from 4.7.0 to 5.0 - Fix all 9 nDPI 5.0 API breaking changes: * Protocol structure: .app_protocol -> .proto.app_protocol * Protocol structure: .master_protocol -> .proto.master_protocol * ndpi_protocol2name() signature change * ndpi_detection_giveup() signature change (removed enable_guess/guessed params) * ndpi_extra_dissection_possible() replaced with state check * ndpi_init_detection_module() now expects NULL * Protocol bitmask removed (all protocols enabled by default) * TCP/UDP struct size checks removed * Fingerprint extraction: ja3_client -> ja4_client - Maintain backward compatibility by keeping field names: * client_fingerprint: Now JA4 (TLS), HASSH client (SSH), DHCP fingerprint * server_fingerprint: Now JA3S (TLS), HASSH server (SSH) - Update build system for nDPI 5.0: * Add --with-only-libndpi flag to build.sh * Make CFFI marker extraction optional in engine_build.py - Update tests for nDPI 5.0: * Update fingerprint assertions (JA3 MD5 -> JA4 format) * Regenerate all 228 baseline test results * Remove invalid test file (memcached.cap) - All 29 tests passing * Fix memcpy buffer overreads and enable DNS subclassification - Fix buffer overread in fingerprint memcpy calls by using source size instead of destination size: - HASSH client/server: 33 bytes (was reading 48) - JA4 client: 37 bytes (was reading 48) - JA3 server: 33 bytes (was reading 48) - DHCP: 48 bytes (consistent with others) - Enable DNS subclassification (disabled by default in nDPI 5.0) to restore detection of DNS.Apple, DNS.Google, etc. - Regenerate test baselines with fixes applied * Replace outdated Steam test pcaps with nDPI 5.0 version - Remove steam.pcap and steam_datagram_relay_ping.pcapng (obsolete) - Add steam.pcapng from nDPI 5.0 test suite - nDPI 5.0 reworked Steam detection (ntop/nDPI#2264) * Fix Windows build: add missing configure step for nDPI 5.0 The Windows build script was missing the ./configure --with-only-libndpi step before make, causing nDPI headers to not be properly installed. This resulted in the CFFI preprocessing marker //CFFI.NDPI_PACKED_STRUCTURES being absent from ndpi_cdefinitions_packed.h, crashing engine_build.py. Aligns build_windows.sh with build.sh which already had this step. * Fix Windows build: install libpcap-dev for nDPI 5.0 configure nDPI 5.0 configure requires libpcap when --with-only-libndpi is used on MinGW (see ntop/nDPI#3114). Install mingw-w64-x86_64-libpcap via pacman to satisfy this dependency.
58 lines
1.6 KiB
Text
58 lines
1.6 KiB
Text
id,bidirectional_packets,bidirectional_bytes,application_name,application_category_name,application_is_guessed,application_confidence
|
|
0,95,92236,TLS.Webex,VoIP,0,6
|
|
1,56,109696,TLS.Webex,VoIP,0,6
|
|
2,11,1013,TLS.Webex,VoIP,0,6
|
|
3,9,905,TLS.Webex,VoIP,0,6
|
|
4,3,174,TLS,Web,1,1
|
|
5,3,174,TLS,Web,1,1
|
|
6,26,26384,TLS.Webex,VoIP,0,6
|
|
7,14,5202,TLS.Webex,VoIP,0,6
|
|
8,38,42482,TLS.Webex,VoIP,0,6
|
|
9,8,515,TLS,Web,0,6
|
|
10,17,5293,TLS.Webex,VoIP,0,6
|
|
11,14,7796,TLS.Webex,VoIP,0,6
|
|
12,14,7796,TLS.Webex,VoIP,0,6
|
|
13,16,7968,TLS.Webex,VoIP,0,6
|
|
14,17,7969,TLS.Webex,VoIP,0,6
|
|
15,13,4692,TLS.Webex,VoIP,0,6
|
|
16,17,7990,TLS.Webex,VoIP,0,6
|
|
17,15,5217,TLS.Webex,VoIP,0,6
|
|
18,15,5217,TLS.Webex,VoIP,0,6
|
|
19,11,4584,TLS.Webex,VoIP,0,6
|
|
20,16,7099,TLS.Webex,VoIP,0,6
|
|
21,18,7207,TLS.Webex,VoIP,0,6
|
|
22,17,8401,TLS.Webex,VoIP,0,6
|
|
23,22,15356,SIP,VoIP,0,6
|
|
24,17,6375,TLS.Google,Advertisement,0,6
|
|
25,11,697,TLS,Web,0,6
|
|
26,11,697,TLS,Web,0,6
|
|
27,11,697,TLS,Web,0,6
|
|
28,11,697,TLS,Web,0,6
|
|
29,11,697,TLS,Web,0,6
|
|
30,11,697,TLS,Web,0,6
|
|
31,11,697,TLS,Web,0,6
|
|
32,5,317,TLS,Web,0,6
|
|
33,8,668,TLS,Web,0,6
|
|
34,18,1972,TLS,Web,0,6
|
|
35,105,19286,TLS.Webex,VoIP,0,6
|
|
36,513,344086,TLS.Webex,VoIP,0,6
|
|
37,14,8239,TLS.Webex,VoIP,0,6
|
|
38,22,6555,TLS.Webex,VoIP,0,6
|
|
39,8,639,TLS,Web,0,6
|
|
40,23,6641,TLS.Webex,VoIP,0,6
|
|
41,22,6555,TLS.Webex,VoIP,0,6
|
|
42,8,639,TLS,Web,0,6
|
|
43,30,9568,TLS,Web,0,6
|
|
44,12,1791,HTTP,Web,0,6
|
|
45,10,1391,HTTP,Web,0,6
|
|
46,21,2530,TLS,Web,0,6
|
|
47,20,2475,TLS,Web,0,6
|
|
48,18,1972,TLS,Web,0,6
|
|
49,22,6555,TLS.Webex,VoIP,0,6
|
|
50,13,1733,TLS,Web,0,6
|
|
51,50,10360,TLS.Webex,VoIP,0,6
|
|
52,16,1171,Webex,VoIP,0,7
|
|
53,3,182,TLS,Web,1,1
|
|
54,11,717,TLS,Web,0,6
|
|
55,24,35888,TLS.Webex,VoIP,0,6
|
|
56,5,353,TLS,Web,0,6
|