diff options
author | Liam Wilson <37528501+liwilson1@users.noreply.github.com> | 2024-09-20 20:25:41 +1200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2024-09-20 10:25:41 +0200 |
commit | 80971e4a173a046adf0cab703387184f205bf596 (patch) | |
tree | 6935e9b4b76a403d8aa27731d73a106dd3f34559 /doc/configuration_parameters.md | |
parent | 191694f797639fc0b56adcf050bc9cfa8dc02f3d (diff) |
Allow IP guess before port in ndpi_detection_giveup (#2562)
Add dpi.guess_ip_before_port which when enabled uses classification
by-ip before classification by-port.
Diffstat (limited to 'doc/configuration_parameters.md')
-rw-r--r-- | doc/configuration_parameters.md | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/doc/configuration_parameters.md b/doc/configuration_parameters.md index 75cc9beb1..fee2e5e6d 100644 --- a/doc/configuration_parameters.md +++ b/doc/configuration_parameters.md @@ -14,6 +14,7 @@ TODO | NULL | "dpi.compute_entropy" | 1 | NULL | NULL | Enable/disable computation of flow entropy | | NULL | "fpc" | enable | NULL | NULL | Enable/disable First Packet Classification | | NULL | "dpi.guess_on_giveup" | 0x03 | 0x00 | 0x03 | Tell the library to guess flow classification, if any DPI algorithms/logics fail. The value is a bitmask. Values: 0x0 = disabled; 0x01 = enable guessing by port; 0x02 = enable guessing by ip | +| NULL | "dpi.guess_ip_before_port" | disable | NULL | NULL | Enable/disable guessing by IP first when guessing flow classifcation. Disabled = guess by port first. | | NULL | "flow_risk_lists.load" | 1 | NULL | NULL | Enable/disable loading of every IP addresses lists used to check any flow risks | | NULL | "flow_risk.anonymous_subscriber.list.icloudprivaterelay.load" | 1 | NULL | NULL | Enable/disable loading of internal iCouldPrivateRealy IP address list used to check `NDPI_ANONYMOUS_SUBSCRIBER` flow risk | | NULL | "flow_risk.anonymous_subscriber.list.protonvpn.load" | 1 | NULL | NULL | Enable/disable loading of internal IP address list of ProtonVPN exit nodes used to check `NDPI_ANONYMOUS_SUBSCRIBER` flow risk | |