- Extract actual TCP/UDP payload data instead of analyzing headers - Implement direct BitTorrent handshake detection (19-byte 'BitTorrent protocol') - Add HTTP, TLS, and SSH payload signature detection - Remove non-functional nDPI flow processing
5.2 KiB
5.2 KiB