Luca Deri comments

Results 222 comments of


                                            Luca Deri

HTTP sub-classification: best protocol classification

In my opinion Tony is right but in the short term. For a long term solution i think we need to rethink how protocols are reported. Microsoft, Amazon or Google...

HTTP sub-classification: best protocol classification

Yes that's ok for me, but I think it's time to move IP classification on a separate "field" as discussed above,

HTTP sub-classification: best protocol classification

Yes i would like (my option, we're here to discuss) is that IP classification should go on a different field so we need to remove it from where it is...

RCE attack - risk detection technique

This was contributed code that might be imperfect. I see sometimes false positives. I would appreciate if you could fix the issues you have noticed.

Persistent Application Protocol IDs

@lnslbrty @IvanNardi @aouinizied What do you think?

DO NOT MERGE: Example implementation of permanent IDs

The problem exists and the idea is interesting however I would work differently. As @pjaitken did - I would add and "external" or "permanent" id to each protocol - add...

DO NOT MERGE: Example implementation of permanent IDs

Hi @pjaitken it is time to address your needs and merge this PR. My suggestion is - reserve id's range as you suggested - internal IDs are internal, nobody should...

nDPI fails to recognize SSH in ICMP

Please paste a pcap file I can use for testing

HTTP dissector enhancement for DWORD and hex formatted url

Sure: can you please attach a pcap for testing?

`struct ndpi_detection_module_struct` and multi-thread

I agree that "sharing" a ndpi_struct.packet could save memory, but this if and only if all threads are supposed to do the same job (for example you use RSS to...