diff options
Diffstat (limited to 'example/reader_util.h')
-rw-r--r-- | example/reader_util.h | 26 |
1 files changed, 13 insertions, 13 deletions
diff --git a/example/reader_util.h b/example/reader_util.h index 452f9023f..4086dd4b0 100644 --- a/example/reader_util.h +++ b/example/reader_util.h @@ -97,24 +97,24 @@ extern int dpdk_port_deinit(int port); extern "C" { #endif -// inner hash table (ja3 -> security state) -typedef struct ndpi_ja3_info { - char * ja3; +// inner hash table (ja -> security state) +typedef struct ndpi_ja_info { + char * ja; ndpi_cipher_weakness unsafe_cipher; UT_hash_handle hh; -} ndpi_ja3_info; +} ndpi_ja_info; -// external hash table (host ip -> <ip string, hash table ja3c, hash table ja3s>) +// external hash table (host ip -> <ip string, hash table ja4c, hash table ja3s>) // used to aggregate ja3 fingerprints by hosts -typedef struct ndpi_host_ja3_fingerprints { +typedef struct ndpi_host_ja_fingerprints { u_int32_t ip; char *ip_string; char *dns_name; - ndpi_ja3_info *host_client_info_hasht; - ndpi_ja3_info *host_server_info_hasht; + ndpi_ja_info *host_client_info_hasht; + ndpi_ja_info *host_server_info_hasht; UT_hash_handle hh; -} ndpi_host_ja3_fingerprints; +} ndpi_host_ja_fingerprints; //inner hash table @@ -125,13 +125,13 @@ typedef struct ndpi_ip_dns{ UT_hash_handle hh; } ndpi_ip_dns; -//hash table ja3 -> <host, ip, security>, used to aggregate host by ja3 fingerprints -typedef struct ndpi_ja3_fingerprints_host{ - char *ja3; //key +//hash table ja -> <host, ip, security>, used to aggregate host by ja fingerprints +typedef struct ndpi_ja_fingerprints_host{ + char *ja; //key ndpi_cipher_weakness unsafe_cipher; ndpi_ip_dns *ipToDNS_ht; UT_hash_handle hh; -} ndpi_ja3_fingerprints_host; +} ndpi_ja_fingerprints_host; struct flow_metrics { float entropy, average, stddev; |