Ivan Nardi

HTTP sub-classification: best protocol classification

7

The attached session (extracted from the unit tests) contains a SOAP flow over HTTP with a Microsoft hostname. How this flow should be classified? 1) SOAP.Microsoft: current result. We lost...

`struct ndpi_detection_module_struct` and multi-thread

3

I am trying to summarize here the various discussions on multi threads support. What is the current situation? *) `struct ndpi_detection_module_struct` is not thread-safe and it has never been. *)...

Custom memory allocator

2

nDPI has always been able to use custom memory allocators, via `set_ndpi_malloc()` and `set_ndpi_free()` functions. But looking at the code, I started to have a doubt: are these functions supposed...

Add support for GRE decapsulation

4

It would be nice to have GRE de-tunneling capability in `ndpiReader` (like GTP or CAPWAP). Pcap example: [gre_sip.zip](https://github.com/ntop/nDPI/files/8035528/gre_sip.zip)

Commit 4cf853548c6744af6581ebf6becd37417e164a75 added support for VXLAN in nDPI. It would be nice to have VXLAN de-tunneling capability in `ndpiReader` (like GTP or CAPWAP). Pcap example: https://github.com/ntop/nDPI/blob/dev/tests/pcap/vxlan.pcap

TLS: out-of-order fragmented Client Hello

5

nDPI doesn't always handle out-of-order fragments of Client Hello messages in TLS sessions (see #1195 for some details about why this scenario is interesting) The case which is not handled...

QUIC connection migration

6

QUIC has an interesting feature called "Connection migration". Quoting directly https://tools.ietf.org/html/draft-ietf-quic-transport-32, section 9: `The use of a connection ID allows connections to survive changes to endpoint addresses (IP address and...

Hangout: avoid useless lookups in the protocol tree

2

We already performed exactly these lookups in the generic code to populate `flow->guessed_protocol_id_by_ip`: use it! This code probably needs a deeper review, since it is basicaly a simple matching on...

Custom ip/port rules

1

ndpi allow the users to define some custom rules via proto.txt" files. Among these rules, I am interested in talking about the ip/port rules (only). There are 4 kind of...

E2E Rest tests failure

12

**Environment**: * OS name: Ubuntu * OS version: 20.04 * Architecture: amd64 * ntopng version/revision: current dev 01bd9d153 **What happened**: It seems all rest tests fail with the same error...