Re: nDPI HTTP dissection

Семенищев Павел Леонидо вич <[email protected]>
Newsgroups gmane.linux.ntop.general
Message-ID <5044FB82A325E54AA153A4B2B005EF0B02D4154B@perm-mailmbx-02.corp.ertelecom.loc>
Hi Luca,
Thanks for answer. But why my nDPI instance doesn’t generate HTTP_UA field? All HTTP fields but not UA. Do I have to make some settings?
[cid:[email protected]]

Kind regards,
Pavel Semenishhev
Head of WiFi networks group
Enforta ("Prestige-Internet")
Mobile:     +7 (903) 509-25-18

From: [email protected] [mailto:[email protected]] On Behalf Of Luca Deri
Sent: Wednesday, July 19, 2017 10:12 AM
To: [email protected]
Cc: [email protected]
Subject: Re: [Ntop] nDPI HTTP dissection

Pavel,
not quite true: https://github.com/ntop/nDPI/blob/dev/src/lib/protocols/http.c#L272 . The information is parsed by nDPI, so apps (like ntopng or nProbe) can use it.

Regards Luca

On 19 Jul 2017, at 09:06, Семенищев Павел Леонидович <[email protected]<mailto:[email protected]>> wrote:

Hello ntop teem,

I was unpleasantly surprised that the nDPI product does not actually inspect the pacts so deeply.
For example, it does not know how to parse HTTP packets and upload information about the User Agent.

As far as I understand, to solve my task, I have to use nProbe product with plug-ins?

Does Ntop plan to integrate plugins into the nDPI product?

Kind regards,
Pavel Semenishhev
Head of WiFi networks group

Enforta ("Prestige-Internet")
E-mail:    [email protected]<mailto:[email protected]>
Phone:       +7 (495) 739-75-59 (ext. 7718)
Mobile:     +7 (903) 509-25-18
Skype:     htechnoo
Address: Ovchinnikovskaya emb. 20, bldg. 2, Moscow, Russia, 115184
www.enforta.com<http://www.enforta.com/>

_______________________________________________
Ntop mailing list
[email protected]<mailto:[email protected]>
http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
image001.png (image/png, 4.5 KB) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.