aboutsummaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorLuca Deri <deri@ntop.org>2023-10-13 00:01:55 +0200
committerLuca Deri <deri@ntop.org>2023-10-13 00:01:55 +0200
commitb6179467ebdf8c0ee1667cbe9390b3b76e82578f (patch)
tree83decb11ad267154c1c1104fa91ede7a95a1ec11 /doc
parent30fc89e556e5c09bf62b9548862cc3d924b9ec81 (diff)
Added NDPI_MALWARE_HOST_CONTACTED flow risk
Diffstat (limited to 'doc')
-rw-r--r--doc/flow_risks.rst6
1 files changed, 6 insertions, 0 deletions
diff --git a/doc/flow_risks.rst b/doc/flow_risks.rst
index 7cecf5f42..08ded148a 100644
--- a/doc/flow_risks.rst
+++ b/doc/flow_risks.rst
@@ -322,3 +322,9 @@ Flow with Unknown protocol containing encrypted traffic.
NDPI_TLS_ALPN_SNI_MISMATCH
=========================
Invalid TLS ALPN/SNI mismatch. For instance ALPN advertises the flow as h2 (HTTP/2.0) and no SNI is reported.
+
+.. _Risk 053
+
+NDPI_MALWARE_CONTACTED
+======================
+Client contacted a server host labelled as malware.