Skip to content

Add Hamachi protocol detection support#2860

Merged
IvanNardi merged 2 commits into
ntop:devfrom
0xA50C1A1:hamachi
Jun 2, 2025
Merged

Add Hamachi protocol detection support#2860
IvanNardi merged 2 commits into
ntop:devfrom
0xA50C1A1:hamachi

Conversation

@0xA50C1A1

Copy link
Copy Markdown
Contributor

Please sign (check) the below before submitting the Pull Request:

Describe changes:

While Hamachi isn't as widely used as it was in its 2010s heyday, it's still actively maintained by LogMeIn (acquired by GoTo in 2020) with paid subscriptions available.

Note: The TCP implementation currently only detects service traffic (via initial packet signature). Full TCP session detection could be added later - I've included sample pcaps in the attached archive for anyone interested in expanding this.

hamachi.zip

Traffic characteristics observed:

  • UDP: First 4 bytes and bytes 8-9 remain constant per session but differ between peers. Bytes 4-7 appear to be a packet counter (increments by 1 in subsequent packets).
  • TCP: First 4 bytes contain (packet_length-4) in big-endian format.

Comment thread src/lib/protocols/hamachi.c
@0xA50C1A1 0xA50C1A1 force-pushed the hamachi branch 2 times, most recently from 4300f58 to 1197e76 Compare May 31, 2025 09:33
@sonarqubecloud

sonarqubecloud Bot commented Jun 2, 2025

Copy link
Copy Markdown

@IvanNardi IvanNardi left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@IvanNardi IvanNardi merged commit 40fe26b into ntop:dev Jun 2, 2025
30 of 31 checks passed
@0xA50C1A1 0xA50C1A1 deleted the hamachi branch June 2, 2025 12:08
Comment thread src/lib/protocols/hamachi.c
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants