Doesn't work with the latest nDPI build 9132

kong156 commented 9 years ago

Also noticed that youtube protocol is not recognized!?

mcitew commented 9 years ago

nDPI revision after 9089 needs further work to separate the usermode code from kernel mode code. Yes, it can be compiled, but with a patch.

betolj commented 9 years ago

The "ndpi-netfilter" projects with logical structure based on "ewildgoose" model don't work well nowadays.

Only one exclusive "conntrack notify" call: For this reason, it cann't be used in conjunction with nfnetlink. But, when you remove the nfnetlink kernel module, the conntrack application wont works anymore.
The web host detection depends on http or ssl protocols enabled: Youtube or Facebook protocols are not external modules (like /usr/src/nDPI/src/lib/protocols/*).

I finished xt_ndpi fixes today:

Remove "conntrack notifier" from source code and include a new ndpi flow garbage collector for 3.x kernel series. Now, no longer need remove the nfnetlink kernel module to install xt_ndpi.
Enable http and ssl protocol for youtube, facebook and others.

betolj / ndpi-netfilter