diff options
| author | Toni Uhlig <matzeton@googlemail.com> | 2021-04-26 18:17:11 +0200 |
|---|---|---|
| committer | Toni Uhlig <matzeton@googlemail.com> | 2021-04-26 18:17:11 +0200 |
| commit | cec61ed81c32603e316adc468e243b7ed15cde01 (patch) | |
| tree | 45f4b1adea7e4ceece56a0ea4d35c7d4f5582471 /src/lib/ndpi_utils.c | |
| parent | 87ad2b58dc4f9355ba6c3a728b8aedb0a0c86516 (diff) | |
Check for common ALPNs and set a flow risk if not known.add/tls-check-common-alpn
* Increased risk bitmask to 64bit (instead of 32bit).
* Removed annoying "Unknown datalink" error message for fuzzers.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'src/lib/ndpi_utils.c')
| -rw-r--r-- | src/lib/ndpi_utils.c | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/src/lib/ndpi_utils.c b/src/lib/ndpi_utils.c index 262cb2d72..05e7b086b 100644 --- a/src/lib/ndpi_utils.c +++ b/src/lib/ndpi_utils.c @@ -1776,7 +1776,10 @@ const char* ndpi_risk2str(ndpi_risk_enum risk) { case NDPI_DESKTOP_OR_FILE_SHARING_SESSION: return("Desktop/File Sharing Session"); - + + case NDPI_TLS_UNCOMMON_ALPN: + return("Uncommon TLS ALPN"); + default: snprintf(buf, sizeof(buf), "%d", (int)risk); return(buf); @@ -2460,7 +2463,7 @@ int ndpi_hash_add_entry(ndpi_str_hash *h, char *key, u_int8_t key_len, u_int8_t /* ******************************************************************** */ void ndpi_set_risk(struct ndpi_flow_struct *flow, ndpi_risk_enum r) { - u_int32_t v = 1 << r; + ndpi_risk v = 1ull << r; // NDPI_SET_BIT(flow->risk, (u_int32_t)r); flow->risk |= v; |