Comments (9)
Lol, I just noticed that nDPI has a RESP protocol dissector, but it's just called "Redis" for some reason. Ofc it doesn't work, so this question is still relevant.
from ndpi.
RESP = Redis serialization protocol
Yeah, I know. RESP sounds more correct than just Redis.
from ndpi.
Something like (in pseudo code)?
if(payload[0] == '*' &&
(from offeset 1, one or more bytes are a number in ascii format) &&
(after the ascii characters there is "\r\n") {
FOUND
return;
}
EXCLUDE
It should be enough...
from ndpi.
Is it possible to use the field length for a successful detection?
// EDIT: Did not read the protocol specs yet. 😄
from ndpi.
Is it possible to use the field length for a successful detection?
// EDIT: Did not read the protocol specs yet. 😄
Well, I'm not sure about that. Btw, here are some pcap samples resp.zip
from ndpi.
Something like (in pseudo code)?
if(payload[0] == '*' && (from offeset 1, one or more bytes are a number in ascii format) && (after the ascii characters there is "\r\n") { FOUND return; } EXCLUDE
It should be enough...
So, you mean something like this?
if (packet->payload[0] == '*' && isascii(packet->payload[1]) && memcmp(&packet->payload[2], "\r\n", 2) == 0)
{
FOUND;
return;
}
from ndpi.
We can have a number bigger than 9... Just the idea (without all the necessary checks on payload length)
if (packet->payload[0] == '*') {
num_digit = 0;
while(isascii(packet->payload[1 + num_digit]) && num_digit++ < 3) { /* A reasonable upper bound ?*/
;
if(num_digit > 0 && memcmp(&packet->payload[1+num_digit], "\r\n", 2)
FOUND
}
```
from ndpi.
@IvanNardi Thanks for your help, now I have figured out how to solve this issue.
from ndpi.
RESP = Redis serialization protocol
from ndpi.
Related Issues (20)
- Question about source of test files HOT 4
- Implement ndpi_fill_ip_domain_category HOT 1
- mqtt was identified as TLS HOT 6
- WSP Protocol support request HOT 4
- Compilation errors on MacOS-14 on ARM64 with external libraries
- DEBUG_TRACE Build fails due to domainSearchUnitTest()
- Add support for DTLS over TCP
- Typo in ndpi_utils.c "Attemot" HOT 4
- Add support for RTP/RTCP over TCP HOT 2
- Improve RTP detection HOT 4
- Wireshark reports an error after linking the nDPI HOT 10
- Stun dissector, with method type.
- A compile error occurred while cross-compiling to the mips architecture HOT 2
- ndpi_serialize_uint32_float function is doubly declared since 4.6 in ndpi_api.h HOT 2
- Support for VPN and TOR browser detection HOT 14
- np. iil HOT 1
- Research project HOT 1
- How to Integrate nDPI for Deep Packet Inspection into a Python Project? HOT 4
- New nDPI roadmap HOT 2
- Implement SSDP Metadata export
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ndpi.