[Feature Request] Add support for NMEA 0183 standard protocol

[rm1984]

What would you like to add or change?: Hi, it would be great to have support (recognition + dissection), in both ntopng and nDPI, for standard NMEA 0183 protocol. Here is the protocol description and definition by Eric Raymond.

Why do you and others need this?: Very useful for network traffic analysis in the maritime industry. Examples of devides that use NMEA 0138 are:

• GPS receivers → send position, speed, and time data
• Chartplotters & navigation software → read NMEA sentences to display vessel position
• Autopilots → receive heading, route, and navigation commands
• Depth sounders / echo sounders → transmit depth below transducer
• Wind instruments → provide wind speed and direction data
• AIS transceivers (Automatic Identification System) → send/receive vessel identity, position, speed, and course
• Radar systems → can exchange heading and position data
• Marine radios (VHF with DSC) → use GPS input for distress calls
• Onshore monitoring systems → ports and tracking centers can also use NMEA data for vessel tracking

[lucaderi]

Can you please attach a pcap file for inspection

[rm1984]

Hello, I attached a ZIP file containing the samples from WireShark: NMEA_PCAP.zip In these sample cases, NMEA uses UDP, but it also works with TCP (port 10110, normally). Thanks!