summaryrefslogtreecommitdiff
path: root/net/ndpi
AgeCommit message (Collapse)AuthorFilesLines
2019-07-12ndpi: updated to 2.8adam10-145/+73
2.8 Stable New Supported Protocols and Services * Added Modbus over TCP dissector Improvements * Wireshark Lua plugin compatibility with Wireshark 3 * Improved MDNS dissection * Improved HTTP response code handling * Full dissection of HTTP responses Fixes * Fixed false positive mining detection * Fixed invalid TCP DNS dissection * Releasing buffers upon realloc failures * ndpiReader: Prevents references after free * Endianness fixes * Fixed IPv6 HTTP traffic dissection * Fixed H.323 detection Other * Disabled ookla statistics which need to be improved * Support for custom protocol files of arbitrary length * Update radius.c to RFC2865
2018-10-18ndpi: updated to 2.4adam9-38/+181
2.4 Stable: New Supported Protocols and Services ------------------------------------ Showmax.com Musical.ly RapidVideo VidTO streaming service Apache JServ Protocol Facebook Messenger FacebookZero protocol Improvements ------------ Improved YouTube support Improved Netflix support Updated Google Hangout detection Updated Twitter address range Updated Viber ports, subnet and domain Updated AmazonVideo detection Updated list of FaceBook sites Initial Skype in/out support Improved Tor detection Improved hyperscan support and category definition Custom categories loading, extended ndpiReader (-c <file>) for loading name-based categories Fixes ----- Fixes for Instagram flows classified as Facebook Fixed Spotify detection Fixed minimum packet payload length for SSDP Fixed length check in MSN, x-steam-sid, Tor certificate name Increase client's maximum payload length for SSH Fixed end-of-line bounds handling Fixed substring matching Fix for handling IP address based custom categories Repaired wrong timestamp calculation Fixed memory leak Optimized memory usage Other/Changes ------------- New API calls: ndpi_set_detection_preferences() ndpi_load_hostname_category() ndpi_enable_loaded_categories() ndpi_fill_protocol_category() ndpi_process_extra_packet() Skype CallIn/CallOut are now set as Skype.SkypeCallOut Skype.SkypeCallIn Added support for SMTPS on port 587 Changed RTP from VoIP to Media category Added site unavailable category Added custom categories CUSTOM_CATEGORY_MINING, CUSTOM_CATEGORY_MALWARE, CUSTOM_CATEGORY_ADVERTISEMENT, CUSTOM_CATEGORY_BANNED_SITE Implemented hash-based categories Converted some not popular protocols to NDPI_PROTOCOL_GENERIC with category detection
2017-11-06ndpi: follow redirectwiz1-2/+2
2017-06-15Fix ndpi build on SunOS.fhajny3-2/+24
2016-07-01Added patches/patch-configure.acadam1-0/+15
2016-07-01Changes 2.4:adam3-23/+9
* Memory-management, stability and speed have been fundamentally improved * We have kept an eye on security and hardened the code to prevent privileges escalation and XSS * Alerts have been extended to include support for . Re-arming to avoid raising trains of identical alerts in short periods of time . Alert propagation to the infrastructure monitoring software Nagios . CIDR-based triggers to monitor the behavior of whole networks . The detection of suspicious probing attempts * Netfilter support has been added together with optional packet dropping features * Routing visibility is now possible through RIPE RIS * Availability of fine-grained historical data drill-down features, including top talkers, top applications, and interactions between hosts (more details here) * Integrations with other software . LDAP authentication support . alerts forwarding/withdrawal to Nagios . nBox integration to request full packet pcaps of monitored flows . Data export to Apache Kafka * We have extended and improved traffic monitoring . Visibility of TCP sessions throughput estimations and state breakdown (e.g., connections established, connections reset, etc.) . Goodput monitoring . Trends detection . Highlight of low-goodput flows and hosts . Visibility of hosts top-visited sites * Built-in support is now included for . GRE detunnelling . per-VLAN historical statistics . ICMP and ICMPv6 dissection * We have extended the set of supported OSes to include: Ubuntu 16, Debian 7, EdgeOS * There is also an optional support for hosts categorization via service flashstart.it
2016-04-08nDPI is an open source LGPLv3 library for deep-packet inspection. Based onadam6-0/+77
OpenDPI it includes ntop extensions. We have tried to push them into the OpenDPI source tree but nobody answered emails so we have decided to create our own source tree.