From 2d040247a77c96a8411477e8ad38c0e07a5e1b54 Mon Sep 17 00:00:00 2001 From: Alfredo Cardigliano Date: Mon, 2 Sep 2024 18:11:02 +0200 Subject: Update doc --- doc/flow_risks.rst | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/doc/flow_risks.rst b/doc/flow_risks.rst index 47a992392..b84bda0fa 100644 --- a/doc/flow_risks.rst +++ b/doc/flow_risks.rst @@ -170,9 +170,9 @@ This is a placeholder for traffic exchanged with domain names that are considere .. _Risk 028: -NDPI_MALICIOUS_JA3 -================== -`JA3 `_ is a method to fingerprint TLS traffic. This risk indicates that the JA3 of the TLS connection is considered suspicious (i.e. it has been found in known malware JA3 blacklists). nDPI does not fill this risk that instead should be filled by aplications sitting on top of nDPI (e.g. ntopng). +NDPI_MALICIOUS_FINGERPRINT +========================== +This risk indicates that the Fingerprint of the TLS connection is considered suspicious. nDPI does not fill this risk that instead should be filled by aplications sitting on top of nDPI (e.g. ntopng). .. _Risk 029: -- cgit v1.2.3