diff options
| author | Toni <matzeton@googlemail.com> | 2022-07-02 14:57:56 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-07-02 14:57:56 +0200 |
| commit | 7c5c811eb0a58150045dccff612574820b02a628 (patch) | |
| tree | a1d42997b8ea4d16f5ec126d4c887ff188303c29 /src | |
| parent | 008a1790e4eda1db5c298693780c3eb1aba87a0b (diff) | |
Added Cloudflare WARP detection patterns. (#1615) (#1616)
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'src')
| -rw-r--r-- | src/include/ndpi_protocol_ids.h | 1 | ||||
| -rw-r--r-- | src/lib/ndpi_content_match.c.inc | 3 |
2 files changed, 4 insertions, 0 deletions
diff --git a/src/include/ndpi_protocol_ids.h b/src/include/ndpi_protocol_ids.h index 6d6386fcf..18faa4034 100644 --- a/src/include/ndpi_protocol_ids.h +++ b/src/include/ndpi_protocol_ids.h @@ -328,6 +328,7 @@ typedef enum { NDPI_PROTOCOL_IP_PIM = 297, NDPI_PROTOCOL_COLLECTD = 298, NDPI_PROTOCOL_TUNNELBEAR = 299, + NDPI_PROTOCOL_CLOUDFLARE_WARP = 300, #ifdef CUSTOM_NDPI_PROTOCOLS #include "../../../nDPI-custom/custom_ndpi_protocol_ids.h" diff --git a/src/lib/ndpi_content_match.c.inc b/src/lib/ndpi_content_match.c.inc index b2e31d992..99b8cbffe 100644 --- a/src/lib/ndpi_content_match.c.inc +++ b/src/lib/ndpi_content_match.c.inc @@ -1690,6 +1690,8 @@ static ndpi_protocol_match host_match[] = { "tunnelbear.com", "TunnelBear", NDPI_PROTOCOL_TUNNELBEAR, NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_DEFAULT_LEVEL }, { "polargrizzly.com", "TunnelBear", NDPI_PROTOCOL_TUNNELBEAR, NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_DEFAULT_LEVEL }, + { "cloudflareclient.com", "CloudflareWarp", NDPI_PROTOCOL_CLOUDFLARE_WARP, NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_DEFAULT_LEVEL }, + #ifdef CUSTOM_NDPI_PROTOCOLS #include "../../../nDPI-custom/custom_ndpi_content_match_host_match.c.inc" #endif @@ -1710,6 +1712,7 @@ static ndpi_tls_cert_name_match tls_certificate_match [] = { { "OU=FortiGate", NDPI_PROTOCOL_FORTICLIENT }, { "CN=www.update.microsoft.com", NDPI_PROTOCOL_WINDOWS_UPDATE }, { "CN=*.tunnelbear.com", NDPI_PROTOCOL_TUNNELBEAR }, + { "CN=cloudflareclient.com", NDPI_PROTOCOL_CLOUDFLARE_WARP }, { NULL, 0 } }; |