diff options
| author | Luca Deri <deri@ntop.org> | 2021-09-10 22:00:04 +0200 |
|---|---|---|
| committer | Luca Deri <deri@ntop.org> | 2021-09-10 22:00:04 +0200 |
| commit | 00857abf2c008b77f3e1d9eba9505b1b22239543 (patch) | |
| tree | ce6adc2088f29a1e10bccc98363e190982d77bc2 /wireshark/ndpi.lua | |
| parent | 1fadf4754a1741e6fd690dbb65ae778fd1dc0313 (diff) | |
Added new risk for clear text credentials
Diffstat (limited to 'wireshark/ndpi.lua')
| -rw-r--r-- | wireshark/ndpi.lua | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/wireshark/ndpi.lua b/wireshark/ndpi.lua index 12347dff0..d2737ac71 100644 --- a/wireshark/ndpi.lua +++ b/wireshark/ndpi.lua @@ -74,6 +74,8 @@ flow_risks[32] = ProtoField.bool("ndpi.flow_risk.cert_validity_too_long", "TLS c flow_risks[33] = ProtoField.bool("ndpi.flow_risk.suspicious_extension", "TLS suspicious extension", num_bits_flow_risks, nil, bit(1), "nDPI Flow Risk: TLS suspicious extension") flow_risks[34] = ProtoField.bool("ndpi.flow_risk.fatal_alert", "TLS fatal alert detected", num_bits_flow_risks, nil, bit(2), "nDPI Flow Risk: TLS fatal alert") flow_risks[35] = ProtoField.bool("ndpi.flow_risk.suspicious_entropy", "Suspicious entropy", num_bits_flow_risks, nil, bit(3), "nDPI Flow Risk: suspicious entropy") +flow_risks[36] = ProtoField.bool("ndpi.flow_risk.clear_text_credentials", "Cleat-Text credentials", num_bits_flow_risks, nil, bit(3), "nDPI Flow Risk: cleat-text credentials") + -- Last one: keep in sync the bitmask when adding new risks!! flow_risks[64] = ProtoField.new("Unused", "ndpi.flow_risk.unused", ftypes.UINT32, nil, base.HEX, bit(32) - bit(4)) |