From b6179467ebdf8c0ee1667cbe9390b3b76e82578f Mon Sep 17 00:00:00 2001 From: Luca Deri Date: Fri, 13 Oct 2023 00:01:55 +0200 Subject: Added NDPI_MALWARE_HOST_CONTACTED flow risk --- doc/flow_risks.rst | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'doc') diff --git a/doc/flow_risks.rst b/doc/flow_risks.rst index 7cecf5f42..08ded148a 100644 --- a/doc/flow_risks.rst +++ b/doc/flow_risks.rst @@ -322,3 +322,9 @@ Flow with Unknown protocol containing encrypted traffic. NDPI_TLS_ALPN_SNI_MISMATCH ========================= Invalid TLS ALPN/SNI mismatch. For instance ALPN advertises the flow as h2 (HTTP/2.0) and no SNI is reported. + +.. _Risk 053 + +NDPI_MALWARE_CONTACTED +====================== +Client contacted a server host labelled as malware. -- cgit v1.2.3