Commit Graph

11 Commits

Author SHA256 Message Date
Lars Vogdt
160d403fee Accepting request 760409 from home:mnhauke:security
- Add hyperscan-devel as dependency to libndpi-devel

OBS-URL: https://build.opensuse.org/request/show/760409
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=15
2020-01-07 07:54:42 +00:00
Lars Vogdt
7ebf3ddb22 Accepting request 759184 from home:mnhauke:security
- Drop not longer needed patches (fixed upstream)
  * ndpi-fix-build.patch
  * reproducible.patch
- Update to version 3.0
  New Features
  * nDPI now reports the protocol ASAP even when specific fields
    have not yet been dissected because such packets have not yet
    been observed. This is important for inline applications that
    can immediately act on traffic. Applications that need full
    dissection need to call the new API function
    ndpi_extra_dissection_possible() to check if metadata dissection
    has been completely performed or if there is more to read before
    declaring it completed.
  * TLS (formerly identified as SSL in nDPI v2.x) is now dissected
    more deeply, certificate validity is extracted as well
    certificate SHA-1.
  * nDPIreader can now export data in CSV format with option -C
  * Implemented Sequence of Packet Length and Time (SPLT) and Byte
    Distribution (BD) as specified by Cisco Joy
    (https://github.com/cisco/joy). This allows malware activities
    on encrypted TLS streams.
  * Available as library and in ndpiReader with option -J
  * Promoted usage of protocol categories rather than protocol
    identifiers in order to classify protocols. This allows
    application protocols to be clustered in families and thus better
    managed by users/developers rather than using hundred of
    protocols unknown to most of the people.
  * Added Inter-Arrival Time (IAT) calculation used to detect
    protocol misbehaviour (e.g. slow-DoS detection)
  * Added data analysis features for computign metrics such as

OBS-URL: https://build.opensuse.org/request/show/759184
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=13
2019-12-29 17:30:45 +00:00
Martin Hauke
aa19bf79d9 Accepting request 707688 from home:bmwiedemann:branches:server:monitoring
Add reproducible.patch to override build date (boo#1047218)

OBS-URL: https://build.opensuse.org/request/show/707688
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=11
2019-06-05 15:42:39 +00:00
Lars Vogdt
b7be32393a Accepting request 690051 from home:mnhauke:security
- Update to version 2.8
  New Supported Protocols and Services
  * Added Modbus over TCP dissector
  Improvements
  * Wireshark Lua plugin compatibility with Wireshark 3
  * Improved MDNS dissection
  * Improved HTTP response code handling
  * Full dissection of HTTP responses
  Fixes
  * Fixed false positive mining detection
  * Fixed invalid TCP DNS dissection
  * Releasing buffers upon realloc failures
  * ndpiReader: Prevents references after free
  * Endianness fixes
  * Fixed IPv6 HTTP traffic dissection
  * Fixed H.323 detection
  Other
  * Disabled ookla statistics which need to be improved
  * Support for custom protocol files of arbitrary length
  * Update radius.c to RFC2865

OBS-URL: https://build.opensuse.org/request/show/690051
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=9
2019-04-05 22:45:45 +00:00
Martin Hauke
107f9cd5d6 Accepting request 678536 from home:Andreas_Schwab:Factory
- override prefix and libdir during install
- ndpi-fix-build.patch: don't install multiple copies of the library

OBS-URL: https://build.opensuse.org/request/show/678536
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=7
2019-02-24 19:00:52 +00:00
Dominique Leuenberger
83344202aa Accepting request 663892 from server:monitoring
OBS-URL: https://build.opensuse.org/request/show/663892
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=1
2019-01-21 09:47:49 +00:00
Martin Hauke
24360f7f5d Accepting request 663770 from home:jengelh:branches:server:monitoring
- Compact descriptions of all but the most promiment package
  (libndpi2) for size. Trim bias and metadata redundancies, too.

OBS-URL: https://build.opensuse.org/request/show/663770
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=5
2019-01-08 20:01:27 +00:00
Martin Hauke
503846e3b0 Accepting request 663446 from home:mnhauke:security
- Add wireshark/ndpi.lua to the doc section of ndpi-tools
- Add a comment to clarify the license of wireshark/ndpi.lua

OBS-URL: https://build.opensuse.org/request/show/663446
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=4
2019-01-07 21:59:09 +00:00
Martin Hauke
0147313fe6 Accepting request 661864 from home:mnhauke:security
- Rename files according to the package name nDPI -> ndpi

- Update to version 2.6
  See /usr/share/doc/packages/libndpi2/CHANGELOG.md for the full
  changelog

- Initial package, version 2.0

OBS-URL: https://build.opensuse.org/request/show/661864
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=3
2018-12-28 19:52:20 +00:00
Lars Vogdt
0ebcffe2ed Accepting request 660744 from home:mnhauke:security
- Update to version 2.6
  See /usr/share/doc/packages/libndpi2/CHANGELOG.md for the full
  changelog

OBS-URL: https://build.opensuse.org/request/show/660744
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=2
2018-12-28 14:25:06 +00:00
Lars Vogdt
465024cb12 Accepting request 535818 from home:mnhauke:security
initial package for ndpi

OBS-URL: https://build.opensuse.org/request/show/535818
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=1
2017-10-29 16:45:32 +00:00