From cec61ed81c32603e316adc468e243b7ed15cde01 Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Mon, 26 Apr 2021 18:17:11 +0200 Subject: Check for common ALPNs and set a flow risk if not known. * Increased risk bitmask to 64bit (instead of 32bit). * Removed annoying "Unknown datalink" error message for fuzzers. Signed-off-by: Toni Uhlig --- src/include/ndpi_typedefs.h | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) (limited to 'src/include') diff --git a/src/include/ndpi_typedefs.h b/src/include/ndpi_typedefs.h index 54a5caaf6..c65d241ef 100644 --- a/src/include/ndpi_typedefs.h +++ b/src/include/ndpi_typedefs.h @@ -98,13 +98,14 @@ typedef enum { NDPI_RISKY_DOMAIN, NDPI_MALICIOUS_JA3, NDPI_MALICIOUS_SHA1_CERTIFICATE, - NDPI_DESKTOP_OR_FILE_SHARING_SESSION, - + NDPI_DESKTOP_OR_FILE_SHARING_SESSION, /* 30 */ + NDPI_TLS_UNCOMMON_ALPN, + /* Leave this as last member */ - NDPI_MAX_RISK /* must be <= 31 due to (**) */ + NDPI_MAX_RISK /* must be <= 63 due to (**) */ } ndpi_risk_enum; -typedef u_int32_t ndpi_risk; /* (**) */ +typedef u_int64_t ndpi_risk; /* (**) */ /* NDPI_VISIT */ typedef enum { -- cgit v1.2.3