905 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Toni Uhlig	65fb7c2185	Disallow I/O Output for Distributors with all buffers in use/full ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-10-08 10:17:10 +02:00
Toni Uhlig	5d5c6c732c	Add TLS CRL option ... * harden OpenSSL usage * CRL: init/script * nDPIsrvd.h: increase max JSON tokens Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-10-06 07:17:55 +02:00
Toni Uhlig	ce6b9c5063	Fix nDPIsrvd.h OOB read + hardening ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-10-04 08:58:33 +02:00
Toni Uhlig	877c2d544f	Improved nDPIsrvd TLS handling ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-10-03 15:03:38 +02:00
Toni Uhlig	f241b86c04	Enhanced nDPId TLS JSON streaming ... * moved ncrypt entity from nDPI workflow to nDPId reader (not part of any nDPI related processing) * early init / late free nio context * add collector fd to event queue * process data received from collector destination and discard any data (except for TLS related record data i.e. rekeying etc) Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-10-01 11:55:37 +02:00
Toni Uhlig	33e233a208	Fixed some moderate issues ... * `get_ip_address_and_netmask` checks if address and netmask is set * if flow analyses memory allocation fails in `alloc_detection_data`, all memory must be free'd to prevent memory leak * fix possible `get_default_pcapdev` NULL deref * fix broken IPv6 address compare in `ip_tuples_compare` * fix (unlikely) underflow in `is_error_event_threshold` * immediately close collector socket fd on failure in `connect_to_collector` * fix invalid "IPv6 packet too short" error JSON event * fix broken `read_uuid_from_file` and fix usage in config file * fix `SIGPIPE` signal which might occur on first collector connect (i.e. if collector not reachable at startup) * fix possible `gethostname` off-by-one read Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-29 10:19:38 +02:00
Toni Uhlig	3eea211161	Decode nested IP and fix GRE tunnel check ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-27 21:36:59 +02:00
Toni Uhlig	19c918e6cd	Fixed some potential OOB reads ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-25 11:57:44 +02:00
Toni Uhlig	bc4db26fe4	Fixed potential DF and extend packet fuzzer ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-23 22:57:02 +02:00
Toni Uhlig	8b9ee5aee8	Netfilter Conntrack/Filter: Use DPI data to block traffic ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-22 12:13:23 +02:00
Toni Uhlig	6bd6d101e1	Update error events within examples ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-21 11:00:47 +02:00
Toni Uhlig	115eedc0d9	Add GTP Tunnel decoding ... * Improve GRE Tunnel decoding * Fully remove CAPTURE_SIZE_SMALLER_THAN_PACKET_SIZE as it does not provide any benefit * Config file: Tunnel decoding enabled per default Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-21 10:57:54 +02:00
Toni Uhlig	cd317c0f81	802.1Q VLAN: Decode Layer 2 again (could be nested 802.1Q) ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-20 11:17:23 +02:00
Toni Uhlig	cdeab8c8c7	Add Realtek L2 Ethertype and Nearest Customer Bridge frames ... * CI: fix BSD/OSX build failure Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-19 17:43:48 +02:00
Toni Uhlig	91f7465102	Skip Cisco CDP and Reverse ARP frames ... * add basic CMake Presets Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-19 16:12:36 +02:00
Toni Uhlig	7b0ac35eb6	Improved ncrypt/TLS error breporting ... * add hostname/DNS resolve for nDPId/nDPIsrvd/examples * remove hardcoded collector path in nDPId systemd unit Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-18 07:53:54 +02:00
Toni Uhlig	79a17aaa5a	Fix broken -I / -E for network interfaces with more then one address set ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-17 09:53:54 +02:00
Toni Uhlig	3eb6cc1bcf	Fixed NF Conntrack session deleter (again) ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-16 10:44:17 +02:00
Toni Uhlig	59e8586ee7	bump libnDPI to c8443f9747efa204fe8673f1fae99f462267d1f5 ... * incorporate recent changes related to nDPI flow host_server_name (ptr to heap allocated string instead of fixed-sized array) * fixed several missing categories Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-15 14:23:43 +02:00
Toni Uhlig	d94a773205	Fixed broken Netfilter Conntrack Query/Callback ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-15 11:22:52 +02:00
Toni Uhlig	3f5d253c7d	Rectify nf-conntrack cmdline/log semantic inaccuracies ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-09 15:40:03 +02:00
Toni Uhlig	45b80962de	bump libnDPI to 06bd23039fa0f6989c22c47a60095b3e166dfba1 ... * Incorporate recent flow core/metadata changes Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-09 14:33:50 +02:00
Toni Uhlig	f7616deb68	Add Netfilter Conntrack session deleter for NAT gateways ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-09-09 13:30:55 +02:00
Toni Uhlig	0cc9aeb4d0	bump libnDPI to 326b64cc5389acce6f8652eae864e31475811412 ... * Incorporate recent License changes * Removed Cent OS build Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-08-26 12:43:24 +02:00
Toni Uhlig	84285ae42d	Print sklearn probabilities cur, min and margins after prediction ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-06-10 10:43:28 +02:00
Toni Uhlig	4acbe57d0a	Fixed Keras VAE Model and added PCAP file generation ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-06-09 12:47:42 +02:00
Toni Uhlig	6193dff6a3	Add sklearn metrics ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-06-09 07:12:11 +02:00
Toni Uhlig	6bbe806228	Fixed issues in sklearn random forest (by Copilot) ... * added socat based TLS tunnel script Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-06-08 10:19:48 +02:00
Toni	28c3275cd4	Add support for nDPIsrvd TCP/TLS collectors. (#65) ... Add support for nDPIsrvd TCP/TLS collectors. * Removed fallback-to-blocking nonsense; a single-threaded event-io forwarding application is useless with such an option * Fix missing poll-in / poll-out handling for TLS / OpenSSL * Fix I/O (out)event handling * Fix error for select in NIO and fixed event mod ops in nDPIsrvd Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-06-07 12:35:40 +02:00
Toni Uhlig	7c11fa6ef1	Improve Rust Simple Example: TUI renders flow table partially ... * initialize some primitive types in nDPIsrvd.h Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-05-20 08:39:14 +02:00
Toni Uhlig	8987bfac1f	CI: build OpenWrt packages with all options enabled ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-05-17 21:08:14 +02:00
Toni Uhlig	f434783276	Updated (C) ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-05-17 16:57:06 +02:00
Toni Uhlig	d2ef772797	CI: Stop using (mostly broken) openwrt-gh-actions and switch directly to SDK usage ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-05-17 16:47:30 +02:00
Toni Uhlig	dfcd37f7fc	Merge branch 'main' into tmp	2026-05-17 14:14:54 +02:00
Toni Uhlig	29e0a3ab24	Fixed more serious and less serious issues ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-05-17 14:14:26 +02:00
Toni Uhlig	b5bdcebbce	Fixed (some) issues reported by SonarCloud ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-05-14 16:57:38 +02:00
Toni Uhlig	474474fed1	Merge branch 'tmp'	2026-05-14 16:45:24 +02:00
Toni Uhlig	b3330b5907	Fixed some minor issues reported by Github Copilot ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-05-14 16:44:17 +02:00
Toni Uhlig	ce3470c804	Fixed (some) issues reported by SonarCloud ... - updated deprecated Github Actions checkout/upload-artifact Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-05-14 09:39:16 +02:00
Toni Uhlig	85fa3ed6ae	Fixed (some) issues reported by SonarCloud ... - updated deprecated Github Actions checkout/upload-artifact Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-04-28 14:25:39 +02:00
Toni Uhlig	4b4cbf2bf2	Disable nDPId / PF_RING build on gcc-9 as upstream makes use of iso C23 ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2026-04-20 10:16:20 +02:00
Toni Uhlig	f712dbacfb	Github Actions update wget URL ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2025-12-09 10:38:15 +01:00
Toni Uhlig	5731b337d9	Fix SonarCloud / SonarQube Scan ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2025-12-09 10:38:15 +01:00
Toni Uhlig	a2ad747dc3	Fix build for CentOS ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2025-12-09 10:38:15 +01:00
Toni Uhlig	34ffa24a8d	Switch to MacOS 14 for Github Actions ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2025-12-09 10:38:15 +01:00
Toni Uhlig	613bfa91dc	bump libnDPI to 85a8ed8a10c033b5e18822608b34e0ce9536f0a5 ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2025-12-09 10:38:15 +01:00
Toni Uhlig	b6633a7c3a	Revert FreeBSD VM actions from main git branch to git tag ... * do not copy back files Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2025-12-09 10:38:15 +01:00
Toni Uhlig	d629fda779	bump libnDPI to 75db1a8a66476b3c16cc1a8bf63ca2b0e2fba3ed ... * incorporate upstream changes: - nDPI supports build directories now - set memory wrapper - classification states - process packet signature change * disabled fuzz-* test pcaps - cause timestamp diff's for some libpcap builds Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2025-11-18 09:54:15 +01:00
Toni Uhlig	643aa49d34	bump libnDPI to e9751cec26d80fe2d88706d4f7521a63ec12b3bb ... * incorporate replacement of "TLS Susp ESNI Usage" with "Mismatching Protocol with server IP address" Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2025-10-29 13:51:07 +01:00
Toni Uhlig	8dfaa7c86c	Fix CI ... Signed-off-by: Toni Uhlig <matzeton@googlemail.com>	2025-10-24 08:20:22 +02:00