From 80971e4a173a046adf0cab703387184f205bf596 Mon Sep 17 00:00:00 2001 From: Liam Wilson <37528501+liwilson1@users.noreply.github.com> Date: Fri, 20 Sep 2024 20:25:41 +1200 Subject: Allow IP guess before port in ndpi_detection_giveup (#2562) Add dpi.guess_ip_before_port which when enabled uses classification by-ip before classification by-port. --- doc/configuration_parameters.md | 1 + 1 file changed, 1 insertion(+) (limited to 'doc/configuration_parameters.md') diff --git a/doc/configuration_parameters.md b/doc/configuration_parameters.md index 75cc9beb1..fee2e5e6d 100644 --- a/doc/configuration_parameters.md +++ b/doc/configuration_parameters.md @@ -14,6 +14,7 @@ TODO | NULL | "dpi.compute_entropy" | 1 | NULL | NULL | Enable/disable computation of flow entropy | | NULL | "fpc" | enable | NULL | NULL | Enable/disable First Packet Classification | | NULL | "dpi.guess_on_giveup" | 0x03 | 0x00 | 0x03 | Tell the library to guess flow classification, if any DPI algorithms/logics fail. The value is a bitmask. Values: 0x0 = disabled; 0x01 = enable guessing by port; 0x02 = enable guessing by ip | +| NULL | "dpi.guess_ip_before_port" | disable | NULL | NULL | Enable/disable guessing by IP first when guessing flow classifcation. Disabled = guess by port first. | | NULL | "flow_risk_lists.load" | 1 | NULL | NULL | Enable/disable loading of every IP addresses lists used to check any flow risks | | NULL | "flow_risk.anonymous_subscriber.list.icloudprivaterelay.load" | 1 | NULL | NULL | Enable/disable loading of internal iCouldPrivateRealy IP address list used to check `NDPI_ANONYMOUS_SUBSCRIBER` flow risk | | NULL | "flow_risk.anonymous_subscriber.list.protonvpn.load" | 1 | NULL | NULL | Enable/disable loading of internal IP address list of ProtonVPN exit nodes used to check `NDPI_ANONYMOUS_SUBSCRIBER` flow risk | -- cgit v1.2.3