0002-Report-whether-a-protocol-is-encrypted.patch

@@ -0,0 +1,26 @@
+From 5f286a17c1ecb88b06ee069650fa73f7565165dc Mon Sep 17 00:00:00 2001
+From: Luca Deri <deri@ntop.org>
+Date: Sat, 7 Aug 2021 17:35:34 +0200
+Subject: [PATCH 2/3] Report whether a protocol is encrypted
+
+---
+ example/ndpiReader.c | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/example/ndpiReader.c b/example/ndpiReader.c
+index b4434650..053dc2ec 100644
+--- a/example/ndpiReader.c
++++ b/example/ndpiReader.c
+@@ -1368,6 +1368,9 @@ static void printFlow(u_int32_t id, struct ndpi_flow_info *flow, u_int16_t threa
+ 	  ndpi_protocol2name(ndpi_thread_info[thread_id].workflow->ndpi_struct,
+ 			     flow->detected_protocol, buf1, sizeof(buf1)));
+ 
++  fprintf(out, "[%s]",
++	  ndpi_is_encrypted_proto(ndpi_thread_info[thread_id].workflow->ndpi_struct, flow->detected_protocol) ? "Encrypted" : "ClearText");
++  
+   if(flow->detected_protocol.category != 0)
+     fprintf(out, "[cat: %s/%u]",
+ 	    ndpi_category_get_name(ndpi_thread_info[thread_id].workflow->ndpi_struct,
+-- 
+2.32.0
+

0003-Firs-crash-on-ARM-during-steam-protocol-dissection.patch

@@ -0,0 +1,43 @@
+From 817c00b65ab4d0bf78927e494227ac5308417f91 Mon Sep 17 00:00:00 2001
+From: Luca Deri <deri@ntop.org>
+Date: Wed, 18 Aug 2021 11:33:33 +0200
+Subject: [PATCH 3/3] Firs crash on ARM during steam protocol dissection
+
+---
+ src/lib/protocols/steam.c | 19 ++++++++++++-------
+ 1 file changed, 12 insertions(+), 7 deletions(-)
+
+diff --git a/src/lib/protocols/steam.c b/src/lib/protocols/steam.c
+index 8cd3ec41..53bbfc6a 100644
+--- a/src/lib/protocols/steam.c
++++ b/src/lib/protocols/steam.c
+@@ -114,14 +114,19 @@ static void ndpi_check_steam_udp1(struct ndpi_detection_module_struct *ndpi_stru
+   }
+ 
+   /* Check for Steam Datagram Relay (SDR) packets. */
+-  if (payload_len > 8 &&
+-      ndpi_ntohll(get_u_int64_t(packet->payload, 0)) == 0x0101736470696e67 /* "\x01\x01sdping" */)
+-  {
+-    NDPI_LOG_INFO(ndpi_struct, "found STEAM (Steam Datagram Relay)\n");
+-    ndpi_int_steam_add_connection(ndpi_struct, flow);
+-    return;
+-  }
++  if (payload_len > 8) {
++    u_int64_t n;
+ 
++    /* Necessary as simple cast crashes on ARM */
++    memcpy(&n, packet->payload, sizeof(u_int64_t));
++    
++    if(ndpi_ntohll(n) == 0x0101736470696e67 /* "\x01\x01sdping" */) {
++      NDPI_LOG_INFO(ndpi_struct, "found STEAM (Steam Datagram Relay)\n");
++      ndpi_int_steam_add_connection(ndpi_struct, flow);
++      return;
++    }  
++  }
++  
+   /* Check if we so far detected the protocol in the request or not. */
+   if (flow->steam_stage1 == 0) {
+     NDPI_LOG_DBG2(ndpi_struct, "STEAM stage 0: \n");
+-- 
+2.32.0
+

ndpi-4.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:99e0aba6396fd633c3840f30e4942f6591a08066d037f560b65ba64e7310f4d6
+size 120053617