da masu haɓaka aikin ntop (waɗanda ke haɓaka kayan aikin don kamawa da nazarin zirga -zirga) sanar kwanan nan aka sake shi sabon sigar nDPI, wanda shine babban ci gaba mai ɗorewa na mashahurin ɗakin karatu na OpenDP.
nDPI An nuna shi ta hanyar amfani da ntop da nProbe don ƙara gano ladabi a matakin aikace -aikacen, ba tare da la’akari da tashar jiragen ruwa da ake amfani da ita ba. Wannan yana nufin cewa ana iya gano ƙa'idodin ladabi akan tashoshin jiragen ruwa marasa daidaituwa.
Wannan aikin yana ba ku damar ƙayyade ƙa'idodin matakan aikace-aikacen da aka yi amfani da su a cikin zirga-zirgar ta hanyar nazarin yanayin ayyukan cibiyar sadarwa ba tare da daurewa tashoshin tashoshin sadarwa ba (zaku iya tantance sanannun ladabi waɗanda direbobinsu ke karɓar haɗin kan tashoshin tashar da ba ta dace ba, misali idan ba a aiko da http ba daga tashar jiragen ruwa ta 80 ba, ko kuma, akasin haka, lokacin da suke ƙoƙarin ɓoye wasu ayyukan cibiyar sadarwa kamar http da ke gudana akan tashar jiragen ruwa 80).
Bambance -banbance tare da OpenDPI suna tafasa don tallafawa don ƙarin ladabi, šaukuwa don dandamalin Windows, haɓaka aiki, daidaitawa don amfani a cikin aikace -aikacen don saka idanu kan zirga -zirga a cikin ainihin lokaci (an cire wasu takamaiman fasalulluka waɗanda suka rage injin), gina iya aiki a cikin tsarin kernel na Linux da tallafi don ayyana sub. -ladabi.
Gaba ɗaya Ana tallafawa ayyukan aikace -aikacen 247 da ƙa'idojin yarjejeniya, wanda waɗannan ke fitowa: FTP_CONTROL, POP3, SMTP, IMAP, DNS, HTTP, NetBIOS, NFS, SNMP, XDMCP, Syslog, DHCP, PostgreSQL, MySQL, Hotmail, Direct_Download_Link, POPS, VMware, SMTPS, FacebookZero, UBNTAC2, Open eTT, Gnut , Signal, Xbox, ShoutCast, IRC, Ayiya, Unencrypted_Jabber, Yahoo, Telnet, VNC, Dropbox, GMail, YouTube, TeamViewer, UPnP, Spotify, OpenVPN, CiscoVPN, Deezer, Instagram, Microsoft, Google Drive, Cloudflare, MS_OneDrive, OpenDNS, Git, Pastebin, LinkedIn, SoundCloud, Bidiyo na Amazon, Google Docs, Fayilolin WhatsApp, Targus Dataspeed, Zabbix, WebSocket, da sauransu.
Babban sabbin abubuwan nDPI 4.0
Dangane da sabbin abubuwan da aka gabatar a cikin wannan sabon sigar 4.0, an inganta shi ta fuskar sauri tare da haɓaka 2.5 dangane da jerin 3.x.
A ɓangaren canje -canjen, za mu iya ganin an aiwatar da shi tallafi don ingantacciyar hanyar tantance abokin ciniki JA3 + TLS, wanda ke ba da izini, dangane da halayen tattaunawar haɗin gwiwa da ƙayyadaddun sigogi, don tantance wace software ake amfani da ita don kafa haɗin gwiwa (alal misali, yana ba da damar ƙayyade amfani da Tor da sauran aikace -aikace na yau da kullun).
Bugu da ƙari an faɗaɗa adadin gano barazanar cibiyar sadarwa da matsalolin da ke tattare da haɗarin daidaitawa (haɗarin kwarara ruwa) zuwa 33, ƙari sabon tebur da masu gano barazanar haɗar fayil da aka ƙara, zirga -zirgar HTTP mai ban tsoro, ɓarna JA3 da SHA1, samun dama ga domains masu matsala da tsarin masu cin gashin kansu, amfani da takaddun shaida a cikin TLS tare da tsawaita ƙima ko kwanakin karewa.
Hakanan zamu iya samun hakan an ƙara ƙarin tallafi don ladabi da ayyuka, wanda yanzu za mu iya samunsa: Daga cikin UU, AVAST SecureDNS, CPHA (CheckPoint High Availability Protocol), DisneyPlus, DTLS, Tasirin Genshin, HP Virtual Machine Group Management (hpvirtgrp), Mongodb, Pinterest, Reddit, Snapchat VoIP, Tumblr, Virtual Asssitant ( Alexa, Siri), Z39.50.
Duk da yake don aiyukan dubawa da tantancewa da aka inganta a cikin wannan sabon sigar an ambaci: AnyDesk, DNS, Hulu, DCE / RPC, dnscrypt, Facebook, Fortigate, FTP Control, HTTP, IEC104, IEC60870, IRC, Netbios, Netflix, Ookla speedtest, openspeedtest.com, Outlook / MicrosoftMail, QUIC , Ladabi na RTSP, RTSP akan HTTP, SNMP, Skype, SSH, Steam, STUN, TeamViewer, TOR, TLS, UPnP, mai tsaro na waya.
Na sauran canje-canjen da suka yi fice na sabon sigar:
- Ingantaccen tallafi don hanyoyin nazarin zirga -zirgar ababen hawa (ETA).
- Ba kamar hanyar JA3 da aka tallafawa a baya ba, JA3 + yana da ƙarancin tabbatattun ƙarya.
- An aiwatar da ingantaccen haɓaka aiki, idan aka kwatanta da reshe na 3.0, an ƙara saurin sarrafa zirga -zirga sau 2.5.
- An ƙara tallafin GeoIP don tantance wuri ta adireshin IP.
- An ƙara API don ƙididdige RSI (Index ƙarfi na dangi).
- An aiwatar da sarrafa rarrabuwa.
- An ƙara API don ƙididdige daidaiton kwarara (jitter).
Finalmente idan kuna sha'awar ƙarin sani game da shi, zaka iya duba bayanan A cikin mahaɗin mai zuwa.