From bc91192acadda102169adacfed967f57f395f1bd Mon Sep 17 00:00:00 2001
From: Ivan Nardi <12729895+IvanNardi@users.noreply.github.com>
Date: Thu, 27 Jul 2023 09:05:22 +0200
Subject: ProtonVPN: split the ip list (#2060)

Use two separate lists:
* one for the ingress nodes, which triggers a ProtonVPN classification
* one for the egress nodes, which triggers the
`NDPI_ANONYMOUS_SUBSCRIBER` risk

Add a command line option (to `ndpiReader`) to easily test IP/port
matching.

Add another example of custom rule.
---
 src/include/ndpi_typedefs.h | 1 +
 1 file changed, 1 insertion(+)

(limited to 'src/include/ndpi_typedefs.h')

diff --git a/src/include/ndpi_typedefs.h b/src/include/ndpi_typedefs.h
index 3d15517fc..f56fdab8f 100644
--- a/src/include/ndpi_typedefs.h
+++ b/src/include/ndpi_typedefs.h
@@ -1761,6 +1761,7 @@ typedef enum {
        This heuristic only analyzes the first packet of the flow.
        See: https://www.usenix.org/system/files/sec23fall-prepub-234-wu-mingshi.pdf */
     ndpi_disable_fully_encrypted_heuristic = (1 << 21),
+    ndpi_dont_load_protonvpn_exit_nodes_list = (1 << 22),
   } ndpi_prefs;
 
 typedef struct {
-- 
cgit v1.2.3