nDPI

nDPI 5.0 (Nov 2025)

Major Changes

• Create a new nDPI fingerprint, combining TCP fingerprint, JA4 fingepriint and TLS SHA1 certificate (or JA3S if SHA1 is missing). See: https://www.ntop.org/beyond-ja3-ja4-introducing-ndpi-traffic-fingerprint/
• Add detection of (TLS/QUIC/HTTP) flows whose hostname was not previously resolved via DNS. See: https://www.ntop.org/when-snis-cannot-be-...

nDPI 4.14 (Apr 2025)

Major Changes

• Introduce QoE (Quality of Experience) classification

New Supported Protocols and Services

• Add DigitalOcean protocol
• Add GearUP Booster application protocol/dissector (heuristic based) (#2764 #2765)
• Add LagoFast protocol dissector. (#2743)
• Add RUTUBE (#2725)
• Add Vivox support (#2668)
• Add new protocol ID to handle Mo...

Major Changes

• Added detection of encrypted/obfuscated OpenVPN flows (https://github.com/ntop/nDPI/pull/2547, https://github.com/ntop/nDPI/pull/2560)
• Added detection of encrypted/obfuscated/proxied TLS flows (https://github.com/ntop/nDPI/pull/2553)
• Implemented nDPI TCP fingerprint (https://github.com/ntop/nDPI/commit/6b6dad4fdb2e60cd2887f7d381bcab2387ba9507)

For further details on...

Major Changes

• Initial work towards First Packet Classification (FPC)

New Supported Protocols and Services

• Add OpenWire support (#2513)
• FPC: add DNS correlation (#2497)
• ipaddr2list.py, ndpi2timeline.py: reformatted (#2509)
• Add Nano (XNO) protocol support (#2508)
• Added ClickHouse protocol
• Add HLS support (#2502)
• Add infrastructure for explicit support of Fist Packet...

Major Changes

• Reworked lists implementation that decreased memory usage of orders of magnitude
• Improved code robustness via extensive code fuzzing
• Various improvements to overall library performance
• Extended IPv6 support

New Supported Protocols and Services

• Add "Heroes of the Storm" video game signature detection. (#1949)
• Add Apache Thrift protocol dissector. (#2007...