Ivan Nardi

Can I share the session in some (semi) public forums? I would like to ask some questions about this trace

I proposed another solution to this issue in #1713. The main advantage is that it correctly decode the Initial/CH received after the 0-RTT, allowing sub-classification What do you think?

> Can you provide more information under what circumstances that NUL deref may happen? Maybe a PCAP? +1

@zliucd, there is no 'J' option. The help message is wrong: a patch will be merged soon

@zliucd , not sure if I am understanding it right... With https://github.com/ntop/nDPI/pull/1770 we are simply going to update the help message and remove the 'J' option from the list of...

You should have more information with `-v2` or `-v3`; you could also try something like `-P 4:8:10:128:25`. You will definitely get bytes distribution, chipher suites and certificate info These information...

Help message has been fixed in https://github.com/ntop/nDPI/commit/6c84ce85e430c6200b26aabeb34522db026d1bd8 @zliucd, do you need some other info or can we close this issue?

Closing. If you have some other issues, please open a new ticket

Traces will be extremely useful; some (most?) of these services are behind some kind of subscription and some of them are even unavailable in my country. Generally speaking, most of...

A PR will be very welcomed! You simply need to: * extend protocol list in `src/include/ndpi_protocol_ids.h` * extend rules at the end of `host_match` in `src/lib/ndpi_content_match.c.inc`: domain, protocol, a suitable...