Skip to content
/ nDPI Public
forked from ntop/nDPI

Open Source Deep Packet Inspection Software Toolkit

License

Notifications You must be signed in to change notification settings

KTZgraph/nDPI

This branch is 2588 commits behind ntop/nDPI:dev.

Folders and files

NameName
Last commit message
Last commit date

Latest commit

0554225 · Jul 6, 2020
Apr 18, 2020
Apr 2, 2020
Oct 15, 2016
Jul 3, 2020
Jul 6, 2020
Jun 22, 2020
Jan 6, 2020
Jun 12, 2020
Jul 6, 2020
Jul 6, 2020
Jan 8, 2020
Jul 2, 2020
Dec 16, 2019
Dec 16, 2019
Nov 28, 2018
Feb 15, 2020
Feb 19, 2020
Jul 23, 2019
Apr 19, 2015
Apr 19, 2015
Oct 31, 2019
May 15, 2020
Oct 6, 2017
May 29, 2016
Jun 26, 2020
Jul 6, 2020
Aug 25, 2018

Repository files navigation

ntop ntop

nDPI

Build Status Code Quality: Cpp Total Alerts Fuzzing Status

What is nDPI ?

nDPI is an open source LGPLv3 library for deep-packet inspection. Based on OpenDPI it includes ntop extensions. We have tried to push them into the OpenDPI source tree but nobody answered emails so we have decided to create our own source tree

How To Compile nDPI

In order to compile this library do

  • ./autogen.sh
  • ./configure
  • make

To run tests do additionally:

  • cd tests; ./do.sh

Please note that the pre-requisites for compilation include:

  • GNU tools (autogen, automake, autoconf, libtool)
  • GNU C compiler (gcc)

How To Add A New Protocol Dissector

The entire procedure of adding new protocols in detail:

  1. Add new protocol together with its unique ID to: src/include/ndpi_protocol_ids.h
  2. Create a new protocol in: src/lib/protocols/
  3. Variables to be kept for the duration of the entire flow (as state variables) need to be placed in: src/include/ndpi_typedefs.h in ndpi_flow_tcp_struct (for TCP only), ndpi_flow_udp_struct (for UDP only), or ndpi_flow_struct (for both).
  4. Add a new entry for the search function for the new protocol in: src/include/ndpi_protocols.h
  5. Choose (do not change anything) a selection bitmask from: src/include/ndpi_define.h
  6. Add a new entry in ndpi_set_protocol_detection_bitmask2 in: src/lib/ndpi_main.c
  7. Set protocol default ports in ndpi_init_protocol_defaults in: src/lib/ndpi_main.c
  8. ./autogen.sh
  9. make
  10. make check

How to use nDPI to Block Selected Traffic

You can use nDPI to selectively block selected Internet traffic by embedding it onto an application (remember that nDPI is just a library). Both ntopng and nProbe cento can do this.

nDPI-Related Projects

DISCLAIMER

While we do our best to detect network protocols, we cannot guarantee that our software is error free and 100% accurate in protocol detection. Please make sure that you respect the privacy of users and you have proper authorization to listen, capture and inspect network traffic.

nDPI is a registered trademark.

About

Open Source Deep Packet Inspection Software Toolkit

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C 69.9%
  • PHP 23.0%
  • Python 3.2%
  • Lua 1.7%
  • M4 0.9%
  • Makefile 0.5%
  • Other 0.8%