Toni Uhlig
d629fda779
bump libnDPI to 75db1a8a66476b3c16cc1a8bf63ca2b0e2fba3ed
...
* incorporate upstream changes:
- nDPI supports build directories now
- set memory wrapper
- classification states
- process packet signature change
* disabled fuzz-* test pcaps
- cause timestamp diff's for some libpcap builds
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-11-18 09:54:15 +01:00
Toni Uhlig
643aa49d34
bump libnDPI to e9751cec26d80fe2d88706d4f7521a63ec12b3bb
...
* incorporate replacement of "TLS Susp ESNI Usage" with "Mismatching Protocol with server IP address"
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-10-29 13:51:07 +01:00
Toni Uhlig
8dfaa7c86c
Fix CI
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-10-24 08:20:22 +02:00
Toni Uhlig
59caa5231e
Dockerfile: build for ArchLinux as well
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-24 09:39:51 +02:00
Toni Uhlig
9c0f5141bc
Fix "Potentially Dangerous" breed in c-notifyd
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-23 12:05:41 +02:00
Toni Uhlig
e8ef267e0a
bump libnDPI to 560a4e4954e2db38d995d3cba2c1dcc4276f92d5
...
* fix some SonarCloud issues
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-17 10:37:51 +02:00
Toni Uhlig
2651833c58
CMake/CI: more robust against deprecations
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-16 11:19:02 +02:00
Toni Uhlig
bd7df393fe
CI: ENABLE_CRYPTO for some builds
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-16 10:34:46 +02:00
Toni Uhlig
88cfecdf95
Remove CMake limitation
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 16:34:19 +02:00
Toni Uhlig
a91aab493c
fixed spelling issue
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 15:09:18 +02:00
Toni Uhlig
fe42e998d0
fixed SonarCloud issues
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
22e44c1e0b
removed crypto example
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
d8cad33a70
restored nio code
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
37989db0bb
make TLS handshakes great again
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
19f80ba163
Added TLS ncrypt I/O
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
c8c58e0b16
nDPId crypto handshake done
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
6d3dc99fad
Switch to OpenSSL for all crypto stuff
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
b8d3cf9e8f
Added send packets with type i.e. keyex / json-data
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
510b03cbcd
Added preps for different packet types + AAD (type+size)
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
66aca303b6
Added HKDF to uniform distirbute a X25519 shared key
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
0e7e5216d8
Added preps for AAD/KeyEx
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
7ab7bb3772
Added some stats printing to c-decrypt
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
a47bc9caa3
Modified crypto to support multiple peers (multiple sender / multiple receiver) per ncrypt context
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
7d94632811
nDPId decryption example
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:46 +02:00
Toni Uhlig
2c81f116bf
nDPId decryption example
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:46 +02:00
Toni Uhlig
49b058d2d3
Updated OpenWrt In-Source build patch
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:46 +02:00
Toni Uhlig
fea52d98ca
Added nDPId decryption example
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:46 +02:00
Toni Uhlig
02b686241e
initial nDPId UDP crypto [WiP!]
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:46 +02:00
Toni Uhlig
2cb0d7941b
Improved/Updated Grafana Dashboard
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 10:22:17 +02:00
Toni Uhlig
97e60ad7ec
Add security vuln reporting guide
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 08:07:48 +02:00
Toni Uhlig
eea5a49638
Fixed some example inconsistencies due to recent libnDPI / nDPId updates
...
* removed unused, unmaintained and erroneous py-flow-dashboard
* adjusted Grafana dashboard flow breeds (flow categories will be done separately)
* (C) update (a bit late)
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-10 09:54:40 +02:00
Toni Uhlig
a9934e9c9e
Removed nDPI/nDPId version/api serialization for nDPId-test to reduce result diff's
...
* fixed some SonarCloud complains
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-09 12:52:58 +02:00
Toni Uhlig
644fa2dfb3
bump libnDPI to 1c1894720e3827857cfe1afd19bb7fb4618ee594
...
* fixes a build error with clang on ubuntu due to missing `static inline`s in header files
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-09 12:05:26 +02:00
Toni Uhlig
1a6b1feda9
Print NDPI_(C|LD)FLAGS
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-09 12:05:26 +02:00
Toni Uhlig
648dedc7ba
bump libnDPI to 70536876f2f97b977ed43474872195bf756de67d
...
* fixes upstream compilation warning due to string truncation
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-09 12:05:26 +02:00
Toni Uhlig
19036951c7
bump libnDPI to 1216ec6a2719408a487f696f5b601bdb9eec727d
...
* incorporated upstream API changes related to detection protocol bitmasks
* added missing flow detection categories
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-09 12:05:26 +02:00
Toni Uhlig
4e7e361d84
bump libnDPI to f8869cd670adc439cc41bde0bd04960e1befafc5
...
* fix API issue due to changed name of a public struct
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-20 11:05:53 +02:00
Toni Uhlig
9809ae4ea0
rs-simple: improved readability and stability
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-20 09:55:21 +02:00
Toni Uhlig
97387d0f1c
rs-simple: added argh command line parser and "stable" flow table index
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-18 14:58:32 +02:00
Toni Uhlig
46ef266139
rs-simple: added DaemonEventStatus deserialization and statistics mgmt
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-16 17:48:51 +02:00
Toni Uhlig
ae6864d4e4
CI: build Rust examples
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-15 09:23:35 +02:00
Toni Uhlig
f3c8ffe6c1
rs-simple: added first/last seen and timeout in
...
* prettify unit's
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-15 08:10:14 +02:00
Toni Uhlig
07d6018109
rs-simple: make primitive flow table work
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-14 12:36:38 +02:00
Toni Uhlig
dd909adeb8
rs-simple: add flow mgmt w/ TTL hash maps (moka-future)
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-03 15:22:57 +02:00
Toni Uhlig
8848420a72
CI: use FreeBSD vmactions main branch
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-04-30 23:00:53 +02:00
Toni Uhlig
f8181d7f6a
Fix CI build with PF_RING (build userspace lib only)
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-04-30 22:33:51 +02:00
Toni Uhlig
b747255a5d
Add simple rust example (WiP)
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-04-30 22:05:52 +02:00
Toni Uhlig
a52a37ef78
Fix CI
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-04-17 11:00:27 +02:00
Toni Uhlig
ae95c95617
bump libnDPI to c49d126d3642d5b1f5168d049e3ebf0ee3451edc
...
* fix API issue with a changed function signature
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-03-06 19:00:23 +01:00
Toni
42c54d3755
Initial tunnel decoding (GRE - Layer4 only atm) ( #55 )
...
Initial tunnel decoding (GRE - Layer4 only atm). Fixes #53
* make finally use of the thread distribution seed
* Handle GRE/PPP subprotocol the right way
* Add `-t` command line / config option
* Removed duplicated and obsolete IP{4,6}_SIZE_SMALLER_THAN_HEADER which is the same as IP{4,6}_PACKET_TOO_SHORT
* Updated error event schema
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-02-25 15:17:16 +01:00