aboutsummaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorLuca Deri <deri@ntop.org>2023-09-09 18:09:57 +0200
committerLuca Deri <deri@ntop.org>2023-09-09 18:09:57 +0200
commit076edeab54bf4271e29f342882373171169fd651 (patch)
tree48cb1a463658a0467f3387ba13b2149dc91de3c5 /doc
parentf50a4d7e85c656f18a900f7cb930da45f5ed6df4 (diff)
Enhance DNS risk for long hostnames (> 32)
Diffstat (limited to 'doc')
-rw-r--r--doc/flow_risks.rst3
1 files changed, 2 insertions, 1 deletions
diff --git a/doc/flow_risks.rst b/doc/flow_risks.rst
index 295ecb1a6..052bd156d 100644
--- a/doc/flow_risks.rst
+++ b/doc/flow_risks.rst
@@ -141,7 +141,8 @@ This risk indicates that the protocol used is insecure and that a secure protoco
NDPI_DNS_SUSPICIOUS_TRAFFIC
===========================
-This risk is returned when DNS traffic returns an unexpected/obsolete `record type <https://en.wikipedia.org/wiki/List_of_DNS_record_types>`_.
+This risk is returned when DNS traffic returns an unexpected/obsolete `record type <https://en.wikipedia.org/wiki/List_of_DNS_record_types>`_
+or when a suspicious query with a very long host name is detected.
.. _Risk 024: