diff options
| author | Luca Deri <deri@ntop.org> | 2021-03-03 00:41:07 +0100 |
|---|---|---|
| committer | Luca Deri <deri@ntop.org> | 2021-03-03 00:41:07 +0100 |
| commit | 56bfb439f85b3e4054bd7c6b849a6e06e5c2ac27 (patch) | |
| tree | 6c7e2066917acc1c2a313321c7c7be3043df195f /src/lib/protocols/smb.c | |
| parent | 4c00ff89dfa64f1026c2f1d267dc081a86b45243 (diff) | |
Improved DGA detection with trigrams. Disadvantage: slower startup time
Reworked Tor dissector embedded in TLS (fixes #1141)
Removed false positive on HTTP User-Agent
Diffstat (limited to 'src/lib/protocols/smb.c')
| -rw-r--r-- | src/lib/protocols/smb.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/protocols/smb.c b/src/lib/protocols/smb.c index 9f8364ec1..ec301c504 100644 --- a/src/lib/protocols/smb.c +++ b/src/lib/protocols/smb.c @@ -46,7 +46,7 @@ void ndpi_search_smb_tcp(struct ndpi_detection_module_struct *ndpi_struct, struc if(memcmp(&packet->payload[4], smbv1, sizeof(smbv1)) == 0) { if(packet->payload[8] != 0x72) /* Skip Negotiate request */ { ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_SMBV1, NDPI_PROTOCOL_NETBIOS); - NDPI_SET_BIT(flow->risk, NDPI_SMB_INSECURE_VERSION); + ndpi_set_risk(flow, NDPI_SMB_INSECURE_VERSION); } } else ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_SMBV23, NDPI_PROTOCOL_NETBIOS); |