diff options
| author | Toni <matzeton@googlemail.com> | 2022-07-01 13:19:17 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-07-01 13:19:17 +0200 |
| commit | bb72aa476733b9bec738bae87e1f6a5a664da897 (patch) | |
| tree | 4b189b449bf1dfce2bc36c76952e051a45d3c338 /src | |
| parent | 8f6a006e36eef0ae386f7e663d3ebecfad6a2dc9 (diff) | |
Added TunnelBear VPN detection patterns. (#1615)
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'src')
| -rw-r--r-- | src/include/ndpi_protocol_ids.h | 1 | ||||
| -rw-r--r-- | src/lib/ndpi_content_match.c.inc | 4 |
2 files changed, 5 insertions, 0 deletions
diff --git a/src/include/ndpi_protocol_ids.h b/src/include/ndpi_protocol_ids.h index c8812915b..6d6386fcf 100644 --- a/src/include/ndpi_protocol_ids.h +++ b/src/include/ndpi_protocol_ids.h @@ -327,6 +327,7 @@ typedef enum { NDPI_PROTOCOL_IP_PGM = 296, NDPI_PROTOCOL_IP_PIM = 297, NDPI_PROTOCOL_COLLECTD = 298, + NDPI_PROTOCOL_TUNNELBEAR = 299, #ifdef CUSTOM_NDPI_PROTOCOLS #include "../../../nDPI-custom/custom_ndpi_protocol_ids.h" diff --git a/src/lib/ndpi_content_match.c.inc b/src/lib/ndpi_content_match.c.inc index 41b9847c3..b2e31d992 100644 --- a/src/lib/ndpi_content_match.c.inc +++ b/src/lib/ndpi_content_match.c.inc @@ -1687,6 +1687,9 @@ static ndpi_protocol_match host_match[] = { "1kxun.com", "1kxun", NDPI_PROTOCOL_1KXUN, NDPI_PROTOCOL_CATEGORY_STREAMING, NDPI_PROTOCOL_FUN, NDPI_PROTOCOL_DEFAULT_LEVEL }, { "1kxun.mobi", "1kxun", NDPI_PROTOCOL_1KXUN, NDPI_PROTOCOL_CATEGORY_STREAMING, NDPI_PROTOCOL_FUN, NDPI_PROTOCOL_DEFAULT_LEVEL }, + { "tunnelbear.com", "TunnelBear", NDPI_PROTOCOL_TUNNELBEAR, NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_DEFAULT_LEVEL }, + { "polargrizzly.com", "TunnelBear", NDPI_PROTOCOL_TUNNELBEAR, NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_DEFAULT_LEVEL }, + #ifdef CUSTOM_NDPI_PROTOCOLS #include "../../../nDPI-custom/custom_ndpi_content_match_host_match.c.inc" #endif @@ -1706,6 +1709,7 @@ static ndpi_tls_cert_name_match tls_certificate_match [] = { { "CN=*.gateway.messenger.live.com", NDPI_PROTOCOL_SKYPE_TEAMS }, { "OU=FortiGate", NDPI_PROTOCOL_FORTICLIENT }, { "CN=www.update.microsoft.com", NDPI_PROTOCOL_WINDOWS_UPDATE }, + { "CN=*.tunnelbear.com", NDPI_PROTOCOL_TUNNELBEAR }, { NULL, 0 } }; |