diff options
| author | Ivan Nardi <nardi.ivan@gmail.com> | 2025-03-04 16:08:48 +0100 |
|---|---|---|
| committer | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2025-03-04 18:15:00 +0100 |
| commit | fbb7b8c5784f4c9a4cb47c2d411bf906cc7271d4 (patch) | |
| tree | b9b6abf4ddb302006b3ab48624558ff266b55534 /dga | |
| parent | 85fb7eb2e5e352acf772c8513bd1e48d54093d68 (diff) | |
custom rules: try to have a coherent behaviour
Custom rules with *new* protocols are checked "first": if there is a
match, the first packet of the flow provides a complete and final
classification.
The same logic should apply to custom rules with "existing" protocols:
if there is match, nDPI shouldn't do anything else.
Remove the `tcp:3000@ntop` custom rule.
Fix the default port for ElasticSearch (in the protocol file)
Diffstat (limited to 'dga')
0 files changed, 0 insertions, 0 deletions