Dominique Leuenberger
f87218238b
Accepting request 888209 from server:monitoring
...
OBS-URL: https://build.opensuse.org/request/show/888209
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=9
2021-04-24 21:09:24 +00:00
Martin Hauke
079ac060ec
Accepting request 888103 from home:lemmy04:branches:server:monitoring
...
- Update to 3.4
* removed 001-Refresh-of-ndpi_netbios_name_interpret.patch, implemented
upstream
OBS-URL: https://build.opensuse.org/request/show/888103
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=21
2021-04-24 14:13:09 +00:00
Dominique Leuenberger
3ae1db6ac6
Accepting request 798122 from server:monitoring
...
OBS-URL: https://build.opensuse.org/request/show/798122
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=8
2020-04-27 21:38:49 +00:00
Martin Hauke
bf5303080f
Accepting request 798042 from home:czerw:branches:server:monitoring
...
- Add upstream patch to fix ntopng build failure (ntopng#3675)
001-Refresh-of-ndpi_netbios_name_interpret.patch
OBS-URL: https://build.opensuse.org/request/show/798042
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=19
2020-04-27 08:50:28 +00:00
Dominique Leuenberger
8b2dab88bb
Accepting request 778081 from server:monitoring
...
OBS-URL: https://build.opensuse.org/request/show/778081
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=7
2020-02-22 18:07:48 +00:00
Lars Vogdt
5889a64983
Accepting request 777777 from home:mnhauke:security
...
- Update to version 3.2
New Features
* New API calls
* Protocol detection: ndpi_is_protocol_detected
* Categories: ndpi_load_categories_file / ndpi_load_category
* JSON/TLV serialization: ndpi_serialize_string_boolean /
ndpi_serialize_uint32_boolean
* Patricia tree: ndpi_load_ipv4_ptree
* Module initialization: ndpi_init_detection_module /
ndpi_finalize_initalization
* Base64 encoding: ndpi_base64_encode
* JSON export: ndpi_flow2json
* Print protocol: ndpi_get_l4_proto_name / ndpi_get_l4_proto_info
* Libfuzz integration
* Implemented Community ID hash (API call ndpi_flowv6_flow_hash
and ndpi_flowv4_flow_hash)
* Detection of RCE in HTTP GET requests via PCRE
* Integration of the libinjection library to detect SQL
injections and XSS type attacks in HTTP requests
New Supported Protocols and Services
* TLS: new decode
* Added ALPN support
* Added export of supported version in TLS header
* Added Telnet dissector with metadata extraction
* Added Zabbix dissector
* Added POP3/IMAP metadata extraction
* Added FTP user/password extraction
* Added NetBIOS metadata extraction
* Added Kerberos metadata extraction
* Implemented SQL Injection and XSS attack detection
OBS-URL: https://build.opensuse.org/request/show/777777
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=17
2020-02-21 20:06:57 +00:00
Dominique Leuenberger
d6e87cabd7
Accepting request 761346 from server:monitoring
...
OBS-URL: https://build.opensuse.org/request/show/761346
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=6
2020-01-07 22:53:32 +00:00
Lars Vogdt
160d403fee
Accepting request 760409 from home:mnhauke:security
...
- Add hyperscan-devel as dependency to libndpi-devel
OBS-URL: https://build.opensuse.org/request/show/760409
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=15
2020-01-07 07:54:42 +00:00
Dominique Leuenberger
71e6571e05
Accepting request 759921 from server:monitoring
...
OBS-URL: https://build.opensuse.org/request/show/759921
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=5
2019-12-30 11:35:08 +00:00
Lars Vogdt
7ebf3ddb22
Accepting request 759184 from home:mnhauke:security
...
- Drop not longer needed patches (fixed upstream)
* ndpi-fix-build.patch
* reproducible.patch
- Update to version 3.0
New Features
* nDPI now reports the protocol ASAP even when specific fields
have not yet been dissected because such packets have not yet
been observed. This is important for inline applications that
can immediately act on traffic. Applications that need full
dissection need to call the new API function
ndpi_extra_dissection_possible() to check if metadata dissection
has been completely performed or if there is more to read before
declaring it completed.
* TLS (formerly identified as SSL in nDPI v2.x) is now dissected
more deeply, certificate validity is extracted as well
certificate SHA-1.
* nDPIreader can now export data in CSV format with option -C
* Implemented Sequence of Packet Length and Time (SPLT) and Byte
Distribution (BD) as specified by Cisco Joy
(https://github.com/cisco/joy ). This allows malware activities
on encrypted TLS streams.
* Available as library and in ndpiReader with option -J
* Promoted usage of protocol categories rather than protocol
identifiers in order to classify protocols. This allows
application protocols to be clustered in families and thus better
managed by users/developers rather than using hundred of
protocols unknown to most of the people.
* Added Inter-Arrival Time (IAT) calculation used to detect
protocol misbehaviour (e.g. slow-DoS detection)
* Added data analysis features for computign metrics such as
OBS-URL: https://build.opensuse.org/request/show/759184
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=13
2019-12-29 17:30:45 +00:00
Dominique Leuenberger
b3d04f9e0d
Accepting request 707881 from server:monitoring
...
OBS-URL: https://build.opensuse.org/request/show/707881
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=4
2019-06-06 16:18:13 +00:00
Martin Hauke
aa19bf79d9
Accepting request 707688 from home:bmwiedemann:branches:server:monitoring
...
Add reproducible.patch to override build date (boo#1047218)
OBS-URL: https://build.opensuse.org/request/show/707688
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=11
2019-06-05 15:42:39 +00:00
Dominique Leuenberger
70f49a8003
Accepting request 691915 from server:monitoring
...
OBS-URL: https://build.opensuse.org/request/show/691915
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=3
2019-04-08 08:38:40 +00:00
Lars Vogdt
b7be32393a
Accepting request 690051 from home:mnhauke:security
...
- Update to version 2.8
New Supported Protocols and Services
* Added Modbus over TCP dissector
Improvements
* Wireshark Lua plugin compatibility with Wireshark 3
* Improved MDNS dissection
* Improved HTTP response code handling
* Full dissection of HTTP responses
Fixes
* Fixed false positive mining detection
* Fixed invalid TCP DNS dissection
* Releasing buffers upon realloc failures
* ndpiReader: Prevents references after free
* Endianness fixes
* Fixed IPv6 HTTP traffic dissection
* Fixed H.323 detection
Other
* Disabled ookla statistics which need to be improved
* Support for custom protocol files of arbitrary length
* Update radius.c to RFC2865
OBS-URL: https://build.opensuse.org/request/show/690051
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=9
2019-04-05 22:45:45 +00:00
Stephan Kulow
eeb2c8bc9d
Accepting request 678573 from server:monitoring
...
OBS-URL: https://build.opensuse.org/request/show/678573
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=2
2019-02-25 16:56:22 +00:00
Martin Hauke
107f9cd5d6
Accepting request 678536 from home:Andreas_Schwab:Factory
...
- override prefix and libdir during install
- ndpi-fix-build.patch: don't install multiple copies of the library
OBS-URL: https://build.opensuse.org/request/show/678536
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=7
2019-02-24 19:00:52 +00:00
Dominique Leuenberger
83344202aa
Accepting request 663892 from server:monitoring
...
OBS-URL: https://build.opensuse.org/request/show/663892
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ndpi?expand=0&rev=1
2019-01-21 09:47:49 +00:00
Martin Hauke
24360f7f5d
Accepting request 663770 from home:jengelh:branches:server:monitoring
...
- Compact descriptions of all but the most promiment package
(libndpi2) for size. Trim bias and metadata redundancies, too.
OBS-URL: https://build.opensuse.org/request/show/663770
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=5
2019-01-08 20:01:27 +00:00
Martin Hauke
503846e3b0
Accepting request 663446 from home:mnhauke:security
...
- Add wireshark/ndpi.lua to the doc section of ndpi-tools
- Add a comment to clarify the license of wireshark/ndpi.lua
OBS-URL: https://build.opensuse.org/request/show/663446
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=4
2019-01-07 21:59:09 +00:00
Martin Hauke
0147313fe6
Accepting request 661864 from home:mnhauke:security
...
- Rename files according to the package name nDPI -> ndpi
- Update to version 2.6
See /usr/share/doc/packages/libndpi2/CHANGELOG.md for the full
changelog
- Initial package, version 2.0
OBS-URL: https://build.opensuse.org/request/show/661864
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=3
2018-12-28 19:52:20 +00:00
Lars Vogdt
0ebcffe2ed
Accepting request 660744 from home:mnhauke:security
...
- Update to version 2.6
See /usr/share/doc/packages/libndpi2/CHANGELOG.md for the full
changelog
OBS-URL: https://build.opensuse.org/request/show/660744
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=2
2018-12-28 14:25:06 +00:00
Lars Vogdt
465024cb12
Accepting request 535818 from home:mnhauke:security
...
initial package for ndpi
OBS-URL: https://build.opensuse.org/request/show/535818
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/ndpi?expand=0&rev=1
2017-10-29 16:45:32 +00:00