aboutsummaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorLuca Deri <deri@ntop.org>2022-06-20 00:22:13 +0200
committerLuca Deri <deri@ntop.org>2022-06-20 00:22:13 +0200
commitab09b8ce2e72c562ad1bfc2ec2cecca9c23fb2a8 (patch)
treefbfcf3755716752eb84ae35a4d14e0ac1c0df6e0 /doc
parentc287eb835b537ce64d9293a52ca13e670b6d3b0d (diff)
Added unidirectional traffic flow risk
Diffstat (limited to 'doc')
-rw-r--r--doc/flow_risks.rst7
1 files changed, 7 insertions, 0 deletions
diff --git a/doc/flow_risks.rst b/doc/flow_risks.rst
index de7b88d14..9d798bc97 100644
--- a/doc/flow_risks.rst
+++ b/doc/flow_risks.rst
@@ -278,3 +278,10 @@ NDPI_ANONYMOUS_SUBSCRIBER
===================================
The risk is set whenever the (source) ip address has been anonymized and it can't be used to identify the subscriber.
Example: the flow is generated by an iCloud-private-relay exit node.
+
+.. _Risk 046:
+
+NDPI_UNIDIRECTIONAL_TRAFFIC_SUBSCRIBER
+===================================
+The risk is set whenever the flow has unidirectional traffic (typically no traffic on the server to client direction). THis
+risk is not triggered for multicast/broadcast destinations.