From 076edeab54bf4271e29f342882373171169fd651 Mon Sep 17 00:00:00 2001
From: Luca Deri <deri@ntop.org>
Date: Sat, 9 Sep 2023 18:09:57 +0200
Subject: Enhance DNS risk for long hostnames (> 32)

---
 doc/flow_risks.rst | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'doc')

diff --git a/doc/flow_risks.rst b/doc/flow_risks.rst
index 295ecb1a6..052bd156d 100644
--- a/doc/flow_risks.rst
+++ b/doc/flow_risks.rst
@@ -141,7 +141,8 @@ This risk indicates that the protocol used is insecure and that a secure protoco
 
 NDPI_DNS_SUSPICIOUS_TRAFFIC
 ===========================
-This risk is returned when DNS traffic returns an unexpected/obsolete `record type <https://en.wikipedia.org/wiki/List_of_DNS_record_types>`_.
+This risk is returned when DNS traffic returns an unexpected/obsolete `record type <https://en.wikipedia.org/wiki/List_of_DNS_record_types>`_
+or when a suspicious query with a very long host name is detected.
 
 .. _Risk 024:
 
-- 
cgit v1.2.3