Revisions of ndpi
buildservice-autocommit
accepted
request 777777
from
Martin Hauke (mnhauke)
(revision 16)
auto commit by copy to link target
Martin Hauke (mnhauke)
committed
(revision 15)
- Update to version 3.2 New Features * New API calls * Protocol detection: ndpi_is_protocol_detected * Categories: ndpi_load_categories_file / ndpi_load_category * JSON/TLV serialization: ndpi_serialize_string_boolean / ndpi_serialize_uint32_boolean * Patricia tree: ndpi_load_ipv4_ptree * Module initialization: ndpi_init_detection_module / ndpi_finalize_initalization * Base64 encoding: ndpi_base64_encode * JSON export: ndpi_flow2json * Print protocol: ndpi_get_l4_proto_name / ndpi_get_l4_proto_info * Libfuzz integration * Implemented Community ID hash (API call ndpi_flowv6_flow_hash and ndpi_flowv4_flow_hash) * Detection of RCE in HTTP GET requests via PCRE * Integration of the libinjection library to detect SQL injections and XSS type attacks in HTTP requests New Supported Protocols and Services * TLS: new decode * Added ALPN support * Added export of supported version in TLS header * Added Telnet dissector with metadata extraction * Added Zabbix dissector * Added POP3/IMAP metadata extraction * Added FTP user/password extraction * Added NetBIOS metadata extraction * Added Kerberos metadata extraction * Implemented SQL Injection and XSS attack detection
buildservice-autocommit
accepted
request 760409
from
Martin Hauke (mnhauke)
(revision 14)
auto commit by copy to link target
Martin Hauke (mnhauke)
committed
(revision 13)
- Add hyperscan-devel as dependency to libndpi-devel
buildservice-autocommit
accepted
request 759184
from
Martin Hauke (mnhauke)
(revision 12)
auto commit by copy to link target
Martin Hauke (mnhauke)
committed
(revision 11)
- Drop not longer needed patches (fixed upstream) * ndpi-fix-build.patch * reproducible.patch - Update to version 3.0 New Features * nDPI now reports the protocol ASAP even when specific fields have not yet been dissected because such packets have not yet been observed. This is important for inline applications that can immediately act on traffic. Applications that need full dissection need to call the new API function ndpi_extra_dissection_possible() to check if metadata dissection has been completely performed or if there is more to read before declaring it completed. * TLS (formerly identified as SSL in nDPI v2.x) is now dissected more deeply, certificate validity is extracted as well certificate SHA-1. * nDPIreader can now export data in CSV format with option -C * Implemented Sequence of Packet Length and Time (SPLT) and Byte Distribution (BD) as specified by Cisco Joy (https://github.com/cisco/joy). This allows malware activities on encrypted TLS streams. * Available as library and in ndpiReader with option -J * Promoted usage of protocol categories rather than protocol identifiers in order to classify protocols. This allows application protocols to be clustered in families and thus better managed by users/developers rather than using hundred of protocols unknown to most of the people. * Added Inter-Arrival Time (IAT) calculation used to detect protocol misbehaviour (e.g. slow-DoS detection) * Added data analysis features for computign metrics such as
buildservice-autocommit
accepted
request 690051
from
Martin Hauke (mnhauke)
(revision 10)
auto commit by copy to link target
Martin Hauke (mnhauke)
committed
(revision 9)
- Update to version 2.8 New Supported Protocols and Services * Added Modbus over TCP dissector Improvements * Wireshark Lua plugin compatibility with Wireshark 3 * Improved MDNS dissection * Improved HTTP response code handling * Full dissection of HTTP responses Fixes * Fixed false positive mining detection * Fixed invalid TCP DNS dissection * Releasing buffers upon realloc failures * ndpiReader: Prevents references after free * Endianness fixes * Fixed IPv6 HTTP traffic dissection * Fixed H.323 detection Other * Disabled ookla statistics which need to be improved * Support for custom protocol files of arbitrary length * Update radius.c to RFC2865
buildservice-autocommit
accepted
request 663446
from
Martin Hauke (mnhauke)
(revision 8)
auto commit by copy to link target
Martin Hauke (mnhauke)
committed
(revision 7)
- Add wireshark/ndpi.lua to the doc section of ndpi-tools - Add a comment to clarify the license of wireshark/ndpi.lua
buildservice-autocommit
accepted
request 661864
from
Martin Hauke (mnhauke)
(revision 6)
auto commit by copy to link target
Martin Hauke (mnhauke)
committed
(revision 5)
- Rename files according to the package name nDPI -> ndpi - Update to version 2.6 See /usr/share/doc/packages/libndpi2/CHANGELOG.md for the full changelog - Initial package, version 2.0
buildservice-autocommit
accepted
request 660744
from
Martin Hauke (mnhauke)
(revision 4)
auto commit by copy to link target
Martin Hauke (mnhauke)
committed
(revision 3)
Martin Hauke (mnhauke)
committed
(revision 2)
- Update to version 2.6 See /usr/share/doc/packages/libndpi2/CHANGELOG.md for the full changelog
Martin Hauke (mnhauke)
committed
(revision 1)
Displaying all 16 revisions