diff options
| author | Luca Deri <deri@ntop.org> | 2021-04-12 18:11:14 +0200 |
|---|---|---|
| committer | Luca Deri <deri@ntop.org> | 2021-04-12 18:11:14 +0200 |
| commit | 18c6c1c2d68c4cc185d4c2fa0583776edf523042 (patch) | |
| tree | 742591a0d5fd4c68a7714c5184f314379d779e41 /src/lib/protocols/tls.c | |
| parent | bf318e0b86ecfe88db3c15ed7ae285b43e51c304 (diff) | |
Added NDPI_DESKTOP_OR_FILE_SHARING_SESSION risk to remote protocols for remote assistance sessions
Diffstat (limited to 'src/lib/protocols/tls.c')
| -rw-r--r-- | src/lib/protocols/tls.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/src/lib/protocols/tls.c b/src/lib/protocols/tls.c index ffb3740c8..3a09f444b 100644 --- a/src/lib/protocols/tls.c +++ b/src/lib/protocols/tls.c @@ -555,9 +555,13 @@ static void processCertificateElements(struct ndpi_detection_module_struct *ndpi int rc = ndpi_match_string_value(ndpi_struct->tls_cert_subject_automa.ac_automa, rdnSeqBuf, strlen(rdnSeqBuf),&proto_id); - if(rc == 0) + if(rc == 0) { flow->detected_protocol_stack[0] = proto_id, flow->detected_protocol_stack[1] = NDPI_PROTOCOL_TLS; + + if(proto_id == NDPI_PROTOCOL_ANYDESK) + ndpi_set_risk(flow, NDPI_DESKTOP_OR_FILE_SHARING_SESSION); /* Remote assistance */ + } } } |