pool/ndpi
SHA256
4
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity
31 Commits 2 Branches 0 Tags 184 KiB
factory
Commit Graph

31 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Ana Guerrero
5da0151144 Accepting request 1233260 from server:monitoring 
OBS-URL: https://build.opensuse.org/request/show/1233260
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=12
 2024-12-26 11:23:42 +00:00
Martin Hauke
e15d9e0fef - Update to version 4.12 
* https://github.com/ntop/nDPI/releases/tag/4.12
  * https://github.com/ntop/nDPI/releases/tag/4.10
  * https://github.com/ntop/nDPI/releases/tag/4.8
  * https://github.com/ntop/nDPI/releases/tag/4.6
  * https://github.com/ntop/nDPI/releases/tag/4.4
  * https://github.com/ntop/nDPI/releases/tag/4.2
- Drop not longer needed patches
  * 0001-Added-ability-to-report-whether-a-protocol-is-encryp.patch
  * 0002-Report-whether-a-protocol-is-encrypted.patch
  * 0003-Firs-crash-on-ARM-during-steam-protocol-dissection.patch
- Add patch:
  * fix-makefile.patch

OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=29
 2024-12-24 14:35:22 +00:00
Ana Guerrero
30cd397f29 Accepting request 1149576 from server:monitoring 
OBS-URL: https://build.opensuse.org/request/show/1149576
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=11
 2024-06-09 18:20:53 +00:00
Michael Vetter
acc7ab3148 Accepting request 1149476 from home:dimstar:rpm4.20:n 
Prepare for RPM 4.20

OBS-URL: https://build.opensuse.org/request/show/1149476
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=27
 2024-02-22 16:03:34 +00:00
Dominique Leuenberger
3580238835 Accepting request 914423 from server:monitoring 
- Add conflicts for ndpi-common package, as version 3 did not follow
  packaging guidelines fully
- Create -common subpackage
- Update to version 4.0
  New Features
  * Add API for computing RSI (Relative Strenght Index)
  * Add GeoIP support
  * Add fragments management
  * Add API for jitter calculation
  * Add single exponential smoothing API
  * Add timeseries forecasting support implementing Holt-Winters
    with confidence interval
  * Add support for MAC to radi tree and expose the full API to
    applications
  * Add JA3+, with ALPN and elliptic curve
  * Add double exponential smoothing implementation
  * Extended API for managing flow risks
  * Add flow risk score
  * New flow risks:
    + Desktop or File Sharing Session
    + HTTP suspicious content (useful for tracking trickbot)
    + Malicious JA3
    + Malicious SHA1
    + Risky domain
    + Risky AS
    + TLS Certificate Validity Too Long
    + TLS Suspicious Extension
  New Supported Protocols and Services
  * New protocols:
    + AmongUs
    + AVAST SecureDNS
    + CPHA (CheckPoint High Availability Protocol)
    + DisneyPlus
    + DTLS
    + Genshin Impact
    + HP Virtual Machine Group Management (hpvirtgrp)
    + Mongodb
    + Pinterest
    + Reddit
    + Snapchat VoIP calls
    + Tumblr
    + Virtual Asssitant (Alexa, Siri)
    + Z39.50
  * Add protocols to HTTP as subprotocols
  * Add detection of TLS browser type
  * Add connectionless DCE/RPC detection
  Improvements
  * 2.5x speed bump. Example ndpiReader with a long mixed pcap
    v3.4 - nDPI throughput: 1.29 M pps / 3.35 Gb/sec
    v4.0 - nDPI throughput: 3.35 M pps / 8.68 Gb/sec
  * Improve detection/dissection of:
    + AnyDesk
    + DNS
    + Hulu
    + DCE/RPC (avoid false positives)
    + dnscrypt
    + Facebook (add new networks)
    + Fortigate
    + FTP Control
    + HTTP
      - Fix user-agent parsing
      - Fix logs when NDPI_ENABLE_DEBUG_MESSAGES is defined
    + IEC104
    + IEC60870
    + IRC
    + Netbios
    + Netflix
    + Ookla speedtest (detection over IPv6)
    + openspeedtest.com
    + Outlook / MicrosoftMail
    + QUIC
      - update to draft-33
      - improve handling of SNI
      - support for fragmented Client Hello
      - support for DNS-over-QUIC
    + RTSP
    + RTSP via HTTP
    + SNMP (reimplemented)
    + Skype
    + SSH
    + Steam (Steam Datagram Relay - SDR)
    + STUN (avoid false positives, improved Skype detection)
    + TeamViewer (add new hosts)
    + TOR (update hosts)
    + TLS
      - Certificate Subject matching
      - Check for common ALPNs
      - Reworked fingerprint calculation
      - Fix extraction for TLS signature algorithms
      - Fix ClientHello parsing
    + UPnP
    + wireguard
    + Improve DGA detection
    + Improve JA3
    + Improve Mining detection
    + Improve string matching algorithm
    + Improve ndpi_pref_enable_tls_block_dissection
    + Optimize speed and memory size
    + Update ahocorasick library
    + Improve subprotocols detection
  Fixes
  * Fix partial application matching
  * Fix multiple segfault and leaks
  * Fix uninitialized memory use
  * Fix release of patterns allocated in ndpi_add_string_to_automa
  * Fix return value of ndpi_match_string_subprotocol
  * Fix setting of flow risks on 32 bit machines
  * Fix TLS certificate threshold
  * Fix a memory error in TLS JA3 code
  * Fix false positives in Z39.50
  * Fix off-by-one memory error for TLS-JA3
  * Fix bug in ndpi_lru_find_cache
  * Fix invalid xbox and playstation port guesses
  * Fix CAPWAP tunnel decoding
  * Fix parsing of DLT_PPP datalink type
  * Fix dissection of QUIC initial packets coalesced with 0-RTT one
  * Fix parsing of GTP headers
  * Add bitmap boundary checks
  Misc
  * Update download category name
  * Update category labels
  * Renamed Skype in Skype_Teams (the protocol is now shared across
    these apps)
  * Add IEC analysis wireshark plugin
  * Flow risk visualization in Wireshark
  * ndpiReader
    + add statistics about nDPI performance
    + fix memory leak
    + fix collecting of risks statistics
  * Move installed libraries from /usr/local to /usr
  * Improve NDPI_API_VERSION generation
  * Update ndpi_ptree_match_addr prototype
- Add patches (for compatibility with ntopng 5.0):
  * 0001-Added-ability-to-report-whether-a-protocol-is-encryp.patch
  * 0002-Report-whether-a-protocol-is-encrypted.patch
  * 0003-Firs-crash-on-ARM-during-steam-protocol-dissection.patch

OBS-URL: https://build.opensuse.org/request/show/914423
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=10
 2021-08-26 21:14:57 +00:00
Dirk Stoecker
22e01f5dd9 OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=26 2021-08-26 16:31:39 +00:00
Dirk Stoecker
161e1e2208 OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=25 2021-08-26 16:30:44 +00:00
Dirk Stoecker
08bb2e3737 Accepting request 914390 from home:mnhauke:monitoring 
- Create -common subpackage

OBS-URL: https://build.opensuse.org/request/show/914390
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=24
 2021-08-26 13:19:36 +00:00
Dirk Stoecker
85c6ff090c Accepting request 913748 from home:mnhauke:monitoring 
- Update to version 4.0
  New Features
  * Add API for computing RSI (Relative Strenght Index)
  * Add GeoIP support
  * Add fragments management
  * Add API for jitter calculation
  * Add single exponential smoothing API
  * Add timeseries forecasting support implementing Holt-Winters
    with confidence interval
  * Add support for MAC to radi tree and expose the full API to
    applications
  * Add JA3+, with ALPN and elliptic curve
  * Add double exponential smoothing implementation
  * Extended API for managing flow risks
  * Add flow risk score
  * New flow risks:
    + Desktop or File Sharing Session
    + HTTP suspicious content (useful for tracking trickbot)
    + Malicious JA3
    + Malicious SHA1
    + Risky domain
    + Risky AS
    + TLS Certificate Validity Too Long
    + TLS Suspicious Extension
  New Supported Protocols and Services
  * New protocols:
    + AmongUs
    + AVAST SecureDNS
    + CPHA (CheckPoint High Availability Protocol)
    + DisneyPlus

OBS-URL: https://build.opensuse.org/request/show/913748
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=23
 2021-08-24 12:10:43 +00:00
Dominique Leuenberger
f87218238b Accepting request 888209 from server:monitoring 
OBS-URL: https://build.opensuse.org/request/show/888209
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=9
 2021-04-24 21:09:24 +00:00
Martin Hauke
079ac060ec Accepting request 888103 from home:lemmy04:branches:server:monitoring 
- Update to 3.4
  * removed 001-Refresh-of-ndpi_netbios_name_interpret.patch, implemented
    upstream

OBS-URL: https://build.opensuse.org/request/show/888103
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=21
 2021-04-24 14:13:09 +00:00
Dominique Leuenberger
3ae1db6ac6 Accepting request 798122 from server:monitoring 
OBS-URL: https://build.opensuse.org/request/show/798122
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=8
 2020-04-27 21:38:49 +00:00
Martin Hauke
bf5303080f Accepting request 798042 from home:czerw:branches:server:monitoring 
- Add upstream patch to fix ntopng build failure (ntopng#3675)
  001-Refresh-of-ndpi_netbios_name_interpret.patch

OBS-URL: https://build.opensuse.org/request/show/798042
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=19
 2020-04-27 08:50:28 +00:00
Dominique Leuenberger
8b2dab88bb Accepting request 778081 from server:monitoring 
OBS-URL: https://build.opensuse.org/request/show/778081
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=7
 2020-02-22 18:07:48 +00:00
Lars Vogdt
5889a64983 Accepting request 777777 from home:mnhauke:security 
- Update to version 3.2
  New Features
  * New API calls
  * Protocol detection: ndpi_is_protocol_detected
  * Categories: ndpi_load_categories_file / ndpi_load_category
  * JSON/TLV serialization: ndpi_serialize_string_boolean /
    ndpi_serialize_uint32_boolean
  * Patricia tree: ndpi_load_ipv4_ptree
  * Module initialization: ndpi_init_detection_module /
    ndpi_finalize_initalization
  * Base64 encoding: ndpi_base64_encode
  * JSON export: ndpi_flow2json
  * Print protocol: ndpi_get_l4_proto_name / ndpi_get_l4_proto_info
  * Libfuzz integration
  * Implemented Community ID hash (API call ndpi_flowv6_flow_hash
    and ndpi_flowv4_flow_hash)
  * Detection of RCE in HTTP GET requests via PCRE
  * Integration of the libinjection library to detect SQL
    injections and XSS type attacks in HTTP requests
  New Supported Protocols and Services
  * TLS: new decode
  * Added ALPN support
  * Added export of supported version in TLS header
  * Added Telnet dissector with metadata extraction
  * Added Zabbix dissector
  * Added POP3/IMAP metadata extraction
  * Added FTP user/password extraction
  * Added NetBIOS metadata extraction
  * Added Kerberos metadata extraction
  * Implemented SQL Injection and XSS attack detection

OBS-URL: https://build.opensuse.org/request/show/777777
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=17
 2020-02-21 20:06:57 +00:00
Dominique Leuenberger
d6e87cabd7 Accepting request 761346 from server:monitoring 
OBS-URL: https://build.opensuse.org/request/show/761346
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=6
 2020-01-07 22:53:32 +00:00
Lars Vogdt
160d403fee Accepting request 760409 from home:mnhauke:security 
- Add hyperscan-devel as dependency to libndpi-devel

OBS-URL: https://build.opensuse.org/request/show/760409
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=15
 2020-01-07 07:54:42 +00:00
Dominique Leuenberger
71e6571e05 Accepting request 759921 from server:monitoring 
OBS-URL: https://build.opensuse.org/request/show/759921
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=5
 2019-12-30 11:35:08 +00:00
Lars Vogdt
7ebf3ddb22 Accepting request 759184 from home:mnhauke:security 
- Drop not longer needed patches (fixed upstream)
  * ndpi-fix-build.patch
  * reproducible.patch
- Update to version 3.0
  New Features
  * nDPI now reports the protocol ASAP even when specific fields
    have not yet been dissected because such packets have not yet
    been observed. This is important for inline applications that
    can immediately act on traffic. Applications that need full
    dissection need to call the new API function
    ndpi_extra_dissection_possible() to check if metadata dissection
    has been completely performed or if there is more to read before
    declaring it completed.
  * TLS (formerly identified as SSL in nDPI v2.x) is now dissected
    more deeply, certificate validity is extracted as well
    certificate SHA-1.
  * nDPIreader can now export data in CSV format with option -C
  * Implemented Sequence of Packet Length and Time (SPLT) and Byte
    Distribution (BD) as specified by Cisco Joy
    (https://github.com/cisco/joy). This allows malware activities
    on encrypted TLS streams.
  * Available as library and in ndpiReader with option -J
  * Promoted usage of protocol categories rather than protocol
    identifiers in order to classify protocols. This allows
    application protocols to be clustered in families and thus better
    managed by users/developers rather than using hundred of
    protocols unknown to most of the people.
  * Added Inter-Arrival Time (IAT) calculation used to detect
    protocol misbehaviour (e.g. slow-DoS detection)
  * Added data analysis features for computign metrics such as

OBS-URL: https://build.opensuse.org/request/show/759184
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=13
 2019-12-29 17:30:45 +00:00
Dominique Leuenberger
b3d04f9e0d Accepting request 707881 from server:monitoring 
OBS-URL: https://build.opensuse.org/request/show/707881
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=4
 2019-06-06 16:18:13 +00:00
Martin Hauke
aa19bf79d9 Accepting request 707688 from home:bmwiedemann:branches:server:monitoring 
Add reproducible.patch to override build date (boo#1047218)

OBS-URL: https://build.opensuse.org/request/show/707688
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=11
 2019-06-05 15:42:39 +00:00
Dominique Leuenberger
70f49a8003 Accepting request 691915 from server:monitoring 
OBS-URL: https://build.opensuse.org/request/show/691915
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=3
 2019-04-08 08:38:40 +00:00
Lars Vogdt
b7be32393a Accepting request 690051 from home:mnhauke:security 
- Update to version 2.8
  New Supported Protocols and Services
  * Added Modbus over TCP dissector
  Improvements
  * Wireshark Lua plugin compatibility with Wireshark 3
  * Improved MDNS dissection
  * Improved HTTP response code handling
  * Full dissection of HTTP responses
  Fixes
  * Fixed false positive mining detection
  * Fixed invalid TCP DNS dissection
  * Releasing buffers upon realloc failures
  * ndpiReader: Prevents references after free
  * Endianness fixes
  * Fixed IPv6 HTTP traffic dissection
  * Fixed H.323 detection
  Other
  * Disabled ookla statistics which need to be improved
  * Support for custom protocol files of arbitrary length
  * Update radius.c to RFC2865

OBS-URL: https://build.opensuse.org/request/show/690051
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=9
 2019-04-05 22:45:45 +00:00
Stephan Kulow
eeb2c8bc9d Accepting request 678573 from server:monitoring 
OBS-URL: https://build.opensuse.org/request/show/678573
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=2
 2019-02-25 16:56:22 +00:00
Martin Hauke
107f9cd5d6 Accepting request 678536 from home:Andreas_Schwab:Factory 
- override prefix and libdir during install
- ndpi-fix-build.patch: don't install multiple copies of the library

OBS-URL: https://build.opensuse.org/request/show/678536
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=7
 2019-02-24 19:00:52 +00:00
Dominique Leuenberger
83344202aa Accepting request 663892 from server:monitoring 
OBS-URL: https://build.opensuse.org/request/show/663892
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=1
 2019-01-21 09:47:49 +00:00
Martin Hauke
24360f7f5d Accepting request 663770 from home:jengelh:branches:server:monitoring 
- Compact descriptions of all but the most promiment package
  (libndpi2) for size. Trim bias and metadata redundancies, too.

OBS-URL: https://build.opensuse.org/request/show/663770
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=5
 2019-01-08 20:01:27 +00:00
Martin Hauke
503846e3b0 Accepting request 663446 from home:mnhauke:security 
- Add wireshark/ndpi.lua to the doc section of ndpi-tools
- Add a comment to clarify the license of wireshark/ndpi.lua

OBS-URL: https://build.opensuse.org/request/show/663446
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=4
 2019-01-07 21:59:09 +00:00
Martin Hauke
0147313fe6 Accepting request 661864 from home:mnhauke:security 
- Rename files according to the package name nDPI -> ndpi

- Update to version 2.6
  See /usr/share/doc/packages/libndpi2/CHANGELOG.md for the full
  changelog

- Initial package, version 2.0

OBS-URL: https://build.opensuse.org/request/show/661864
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=3
 2018-12-28 19:52:20 +00:00
Lars Vogdt
0ebcffe2ed Accepting request 660744 from home:mnhauke:security 
- Update to version 2.6
  See /usr/share/doc/packages/libndpi2/CHANGELOG.md for the full
  changelog

OBS-URL: https://build.opensuse.org/request/show/660744
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=2
 2018-12-28 14:25:06 +00:00
Lars Vogdt
465024cb12 Accepting request 535818 from home:mnhauke:security 
initial package for ndpi

OBS-URL: https://build.opensuse.org/request/show/535818
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=1
 2017-10-29 16:45:32 +00:00