diff options
author | Luca Deri <deri@ntop.org> | 2021-03-03 00:41:07 +0100 |
---|---|---|
committer | Luca Deri <deri@ntop.org> | 2021-03-03 00:41:07 +0100 |
commit | 56bfb439f85b3e4054bd7c6b849a6e06e5c2ac27 (patch) | |
tree | 6c7e2066917acc1c2a313321c7c7be3043df195f /src/lib/protocols/quic.c | |
parent | 4c00ff89dfa64f1026c2f1d267dc081a86b45243 (diff) |
Improved DGA detection with trigrams. Disadvantage: slower startup time
Reworked Tor dissector embedded in TLS (fixes #1141)
Removed false positive on HTTP User-Agent
Diffstat (limited to 'src/lib/protocols/quic.c')
-rw-r--r-- | src/lib/protocols/quic.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/protocols/quic.c b/src/lib/protocols/quic.c index 655d90aa5..dd3493064 100644 --- a/src/lib/protocols/quic.c +++ b/src/lib/protocols/quic.c @@ -1283,7 +1283,7 @@ static void process_chlo(struct ndpi_detection_module_struct *ndpi_struct, /* Add check for missing SNI */ if(flow->protos.tls_quic_stun.tls_quic.client_requested_server_name[0] == '\0') { /* This is a bit suspicious */ - NDPI_SET_BIT(flow->risk, NDPI_TLS_MISSING_SNI); + ndpi_set_risk(flow, NDPI_TLS_MISSING_SNI); } } |