Improve CORBA detection

[0xA50C1A1]

Please sign (check) the below before submitting the Pull Request:

• I have signed the ntop Contributor License Agreement at https://github.com/ntop/legal/blob/main/individual-contributor-licence-agreement.md
• I have read the contributing guide lines at https://github.com/ntop/nDPI/blob/dev/CONTRIBUTING.md
• I have updated the documentation (in doc/) to reflect the changes made (if applicable)

Describe changes:

Added additional checks for Zipped Inter-ORB Protocol (ZIOP) and Unreliable Multicast Inter-ORB Protocol (MIOP, CORBA over UDP).

[IvanNardi]

If there isn't any specific reasons, could you restore the corba.pcap test, please?
If you are able, could you try to merge these 3 files corba.pcap, miop.pcap and ziop.pcap into only one trace, called corba.pcap?

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[0xA50C1A1]

If there isn't any specific reasons, could you restore the corba.pcap test, please? If you are able, could you try to merge these 3 files corba.pcap, miop.pcap and ziop.pcap into only one trace, called corba.pcap?

No problem, I did it.

[IvanNardi]

If there isn't any specific reasons, could you restore the corba.pcap test, please? If you are able, could you try to merge these 3 files corba.pcap, miop.pcap and ziop.pcap into only one trace, called corba.pcap?

No problem, I did it.

If I am not mistaken, there isn't the flow with the "ZIOP" pattern in the file... Might be useful to add it, if possible?

[0xA50C1A1]

If there isn't any specific reasons, could you restore the corba.pcap test, please? If you are able, could you try to merge these 3 files corba.pcap, miop.pcap and ziop.pcap into only one trace, called corba.pcap?

No problem, I did it.

If I am not mistaken, there isn't the flow with the "ZIOP" pattern in the file... Might be useful to add it, if possible?

Here it is. But this may not be the best sample of ZIOP traffic, since here this packet is the last one in the flow.

[IvanNardi]

If there isn't any specific reasons, could you restore the corba.pcap test, please? If you are able, could you try to merge these 3 files corba.pcap, miop.pcap and ziop.pcap into only one trace, called corba.pcap?

No problem, I did it.

If I am not mistaken, there isn't the flow with the "ZIOP" pattern in the file... Might be useful to add it, if possible?

Here it is. But this may not be the best sample of ZIOP traffic, since here this packet is the last one in the flow.

Ok, that'll do fine for the time being

[0xA50C1A1]

If there isn't any specific reasons, could you restore the corba.pcap test, please? If you are able, could you try to merge these 3 files corba.pcap, miop.pcap and ziop.pcap into only one trace, called corba.pcap?

No problem, I did it.

If I am not mistaken, there isn't the flow with the "ZIOP" pattern in the file... Might be useful to add it, if possible?

Here it is. But this may not be the best sample of ZIOP traffic, since here this packet is the last one in the flow.

Ok, that'll do fine for the time being

If there isn't any specific reasons, could you restore the corba.pcap test, please? If you are able, could you try to merge these 3 files corba.pcap, miop.pcap and ziop.pcap into only one trace, called corba.pcap?

No problem, I did it.

If I am not mistaken, there isn't the flow with the "ZIOP" pattern in the file... Might be useful to add it, if possible?

Here it is. But this may not be the best sample of ZIOP traffic, since here this packet is the last one in the flow.

Ok, that'll do fine for the time being

I guess this could be useful for detecting mid-flows.

[IvanNardi]

Thanks!