ImBenji
d9f87675d2
Replace broken nDPI detection with proper payload analysis
...
- Extract actual TCP/UDP payload data instead of analyzing headers
- Implement direct BitTorrent handshake detection (19-byte 'BitTorrent protocol')
- Add HTTP, TLS, and SSH payload signature detection
- Remove non-functional nDPI flow processing
2025-08-29 16:13:29 +01:00
ImBenji
6d2fa16717
Update nDPI analyzer for modern API
...
- Use ndpi_global_init() and proper initialization
- Remove deprecated NDPI_PROTOCOL_BITMASK and related functions
- Use ndpi_flow_input_info structure for packet processing
- Remove confidence field (not available in current API)
2025-08-29 16:07:08 +01:00
ImBenji
39e50ab4e4
Fix nDPI header include path
...
Changed from libndpi/ndpi_api.h to ndpi_api.h to match actual installation path in /usr/local/include/ndpi/.
2025-08-29 16:04:30 +01:00
ImBenji
3b0993f1d7
Enhance Dockerfile for protocol analyzer: add debug checks for nDPI installation and update include paths
2025-08-29 01:39:14 +01:00
ImBenji
7f28184857
Add nDPI protocol analyzer and integrate with handshake analysis
2025-08-29 01:29:06 +01:00
