diff options
author | Toni <matzeton@googlemail.com> | 2021-04-27 07:22:04 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2021-04-27 07:22:04 +0200 |
commit | da3e6bd61b7eaf54cad432bd737d5d894e6c9bf9 (patch) | |
tree | a17150a4de40c385c179202dbd875e0c7f210dfe /src/include | |
parent | d5b395f35a10ae22a2f35c087600e249d2c42d0f (diff) |
Check for common ALPNs and set a flow risk if not known. (#1175)
* Increased risk bitmask to 64bit (instead of 32bit).
* Removed annoying "Unknown datalink" error message for fuzzers.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'src/include')
-rw-r--r-- | src/include/ndpi_typedefs.h | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/src/include/ndpi_typedefs.h b/src/include/ndpi_typedefs.h index 54a5caaf6..c65d241ef 100644 --- a/src/include/ndpi_typedefs.h +++ b/src/include/ndpi_typedefs.h @@ -98,13 +98,14 @@ typedef enum { NDPI_RISKY_DOMAIN, NDPI_MALICIOUS_JA3, NDPI_MALICIOUS_SHA1_CERTIFICATE, - NDPI_DESKTOP_OR_FILE_SHARING_SESSION, - + NDPI_DESKTOP_OR_FILE_SHARING_SESSION, /* 30 */ + NDPI_TLS_UNCOMMON_ALPN, + /* Leave this as last member */ - NDPI_MAX_RISK /* must be <= 31 due to (**) */ + NDPI_MAX_RISK /* must be <= 63 due to (**) */ } ndpi_risk_enum; -typedef u_int32_t ndpi_risk; /* (**) */ +typedef u_int64_t ndpi_risk; /* (**) */ /* NDPI_VISIT */ typedef enum { |