diff options
author | Luca Deri <deri@ntop.org> | 2023-01-24 22:58:17 +0100 |
---|---|---|
committer | Luca Deri <deri@ntop.org> | 2023-01-24 22:58:17 +0100 |
commit | 5849863ef91b9b6a3acc8f1799c6b3642d35f34c (patch) | |
tree | 93478fb1bcac0de8925b19dfc7f4b75af9343bf4 /src/include | |
parent | 5e8c1ebbb7f67033916ed4878cd6c2a662073898 (diff) |
Added new risk NDPI_TCP_ISSUES
Diffstat (limited to 'src/include')
-rw-r--r-- | src/include/ndpi_typedefs.h | 17 |
1 files changed, 9 insertions, 8 deletions
diff --git a/src/include/ndpi_typedefs.h b/src/include/ndpi_typedefs.h index 8c1b1823a..67f76473b 100644 --- a/src/include/ndpi_typedefs.h +++ b/src/include/ndpi_typedefs.h @@ -121,9 +121,10 @@ typedef enum { your app will clear this risk if future packets (not sent to nDPI) are received in the opposite direction */ NDPI_HTTP_OBSOLETE_SERVER, - NDPI_PERIODIC_FLOW, /* Set in case a flow repeats at a specific pace [used by apps on top of nDPI] */ - NDPI_MINOR_ISSUES, /* Generic packet issues (e.g. DNS with 0 TTL) */ - + NDPI_PERIODIC_FLOW, /* Set in case a flow repeats at a specific pace [used by apps on top of nDPI] */ + NDPI_MINOR_ISSUES, /* Generic packet issues (e.g. DNS with 0 TTL) */ + NDPI_TCP_ISSUES, /* TCP issues such as connection failed, probing or scan */ + /* Leave this as last member */ NDPI_MAX_RISK /* must be <= 63 due to (**) */ } ndpi_risk_enum; @@ -724,10 +725,9 @@ struct ndpi_flow_tcp_struct { u_int32_t postgres_stage:3; /* Part of the TCP header. */ - u_int32_t seen_syn:1; - u_int32_t seen_syn_ack:1; - u_int32_t seen_ack:1; - + u_int32_t seen_syn:1, seen_syn_ack:1, seen_ack:1, __notused:29; + u_int8_t cli2srv_tcp_flags, srv2cli_tcp_flags; + /* NDPI_PROTOCOL_ICECAST */ u_int32_t icecast_stage:1; @@ -1525,7 +1525,8 @@ struct ndpi_flow_struct { /* Only packets with L5 data (ie no TCP SYN, pure ACKs, ...) */ u_int16_t packet_counter; // can be 0 - 65000 u_int16_t packet_direction_counter[2]; - + u_int16_t all_packets_counter; /* All packets even those without payload */ + /* Every packets */ u_int16_t packet_direction_complete_counter[2]; // can be 0 - 65000 |