diff options
| author | Luca Deri <deri@ntop.org> | 2025-04-02 23:37:40 +0200 |
|---|---|---|
| committer | Luca Deri <deri@ntop.org> | 2025-04-02 23:37:40 +0200 |
| commit | 4d41588a7704fb89859fb708bcf526f1638eadb1 (patch) | |
| tree | d7225b0e463a584a80bb6c40518fe52e6d594a53 /src/lib/protocols/tls.c | |
| parent | f4691c518ad2885bea71fb80e8eba4faf0b77b3b (diff) | |
Implemented detection of the latest Signal video/audio calls leveraging on Cloudflare CDN
Diffstat (limited to 'src/lib/protocols/tls.c')
| -rw-r--r-- | src/lib/protocols/tls.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/lib/protocols/tls.c b/src/lib/protocols/tls.c index c892c8961..c6d19775b 100644 --- a/src/lib/protocols/tls.c +++ b/src/lib/protocols/tls.c @@ -2860,6 +2860,11 @@ int processClientServerHello(struct ndpi_detection_module_struct *ndpi_struct, ndpi_set_risk(ndpi_struct, flow, NDPI_NUMERIC_IP_HOST, sni); } + if(ndpi_str_endswith(sni, "signal.org")) { + /* printf("[SIGNAL] SNI: [%s]\n", sni); */ + signal_add_to_cache(ndpi_struct, flow); + } + if(ndpi_check_dga_name(ndpi_struct, flow, sni, 1, 0, 0)) { #ifdef DEBUG_TLS printf("[TLS] SNI: (DGA) [%s]\n", sni); |