diff options
| author | Luca Deri <deri@ntop.org> | 2022-07-04 22:52:54 +0200 |
|---|---|---|
| committer | Luca Deri <deri@ntop.org> | 2022-07-04 22:52:54 +0200 |
| commit | 7fa8d882d83577334c7c91843eb40c2ebae8bf74 (patch) | |
| tree | bb599e4828303ea4c531dec6e224f90247ca8427 /src/lib/protocols/ftp_control.c | |
| parent | 461589517e50c201bf063c7d4dbb3639e43f4268 (diff) | |
Exported username in flow information
Diffstat (limited to 'src/lib/protocols/ftp_control.c')
| -rw-r--r-- | src/lib/protocols/ftp_control.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/src/lib/protocols/ftp_control.c b/src/lib/protocols/ftp_control.c index ff624c419..a0bec3864 100644 --- a/src/lib/protocols/ftp_control.c +++ b/src/lib/protocols/ftp_control.c @@ -50,10 +50,15 @@ static int ndpi_ftp_control_check_request(struct ndpi_detection_module_struct *n #endif if(ndpi_match_strprefix(payload, payload_len, "USER")) { + char buf[64]; + ndpi_user_pwd_payload_copy((u_int8_t*)flow->l4.tcp.ftp_imap_pop_smtp.username, sizeof(flow->l4.tcp.ftp_imap_pop_smtp.username), 5, payload, payload_len); - ndpi_set_risk(ndpi_struct, flow, NDPI_CLEAR_TEXT_CREDENTIALS, "Found FTP username"); + + snprintf(buf, sizeof(buf), "Found FTP username (%s)", + flow->l4.tcp.ftp_imap_pop_smtp.username); + ndpi_set_risk(ndpi_struct, flow, NDPI_CLEAR_TEXT_CREDENTIALS, buf); return 1; } |