diff options
| author | Luca Deri <deri@ntop.org> | 2024-09-15 20:21:32 +0200 |
|---|---|---|
| committer | Luca Deri <deri@ntop.org> | 2024-09-15 20:21:32 +0200 |
| commit | b77d3e3ab6d216cda9a092794a5fb8b1eac86fe6 (patch) | |
| tree | 4acf88ed6aa948fab085db468078aa2c0ff3e870 /example/reader_util.c | |
| parent | fda3730cf0bdec6b4a1cd8e38d3a88c33f0d0ef1 (diff) | |
Enhanced DHCP fingerprint
Exported it with -E
Diffstat (limited to 'example/reader_util.c')
| -rw-r--r-- | example/reader_util.c | 15 |
1 files changed, 13 insertions, 2 deletions
diff --git a/example/reader_util.c b/example/reader_util.c index d2b60859d..51e8c3da0 100644 --- a/example/reader_util.c +++ b/example/reader_util.c @@ -1057,8 +1057,19 @@ static void dump_raw_fingerprint(struct ndpi_workflow * workflow, /* ****************************************************** */ static void dump_flow_fingerprint(struct ndpi_workflow * workflow, struct ndpi_flow_info *flow) { - if(flow->ndpi_flow->protos.tls_quic.ja4_client_raw != NULL) - dump_raw_fingerprint(workflow, flow, "JA4r", flow->ndpi_flow->protos.tls_quic.ja4_client_raw); + if(is_ndpi_proto(flow, NDPI_PROTOCOL_TLS) || is_ndpi_proto(flow, NDPI_PROTOCOL_QUIC)) { + if(flow->ndpi_flow->protos.tls_quic.ja4_client_raw != NULL) + dump_raw_fingerprint(workflow, flow, "JA4r", flow->ndpi_flow->protos.tls_quic.ja4_client_raw); + } else if(is_ndpi_proto(flow, NDPI_PROTOCOL_DHCP) + && (flow->ndpi_flow->protos.dhcp.fingerprint[0] != '\0')) { + char buf[256]; + + snprintf(buf, sizeof(buf), "%s_%s", + flow->ndpi_flow->protos.dhcp.options, + flow->ndpi_flow->protos.dhcp.fingerprint); + + dump_raw_fingerprint(workflow, flow, "DHCP_r", buf); + } } /* ****************************************************** */ |