From fd1856160957381b4bb4d3ca08e978d9e77726b7 Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Fri, 1 Jul 2022 13:29:43 +0200 Subject: Added Cloudflare WARP detection patterns. (#1615) Signed-off-by: Toni Uhlig --- src/lib/ndpi_content_match.c.inc | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src/lib/ndpi_content_match.c.inc') diff --git a/src/lib/ndpi_content_match.c.inc b/src/lib/ndpi_content_match.c.inc index b2e31d992..99b8cbffe 100644 --- a/src/lib/ndpi_content_match.c.inc +++ b/src/lib/ndpi_content_match.c.inc @@ -1690,6 +1690,8 @@ static ndpi_protocol_match host_match[] = { "tunnelbear.com", "TunnelBear", NDPI_PROTOCOL_TUNNELBEAR, NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_DEFAULT_LEVEL }, { "polargrizzly.com", "TunnelBear", NDPI_PROTOCOL_TUNNELBEAR, NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_DEFAULT_LEVEL }, + { "cloudflareclient.com", "CloudflareWarp", NDPI_PROTOCOL_CLOUDFLARE_WARP, NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_DEFAULT_LEVEL }, + #ifdef CUSTOM_NDPI_PROTOCOLS #include "../../../nDPI-custom/custom_ndpi_content_match_host_match.c.inc" #endif @@ -1710,6 +1712,7 @@ static ndpi_tls_cert_name_match tls_certificate_match [] = { { "OU=FortiGate", NDPI_PROTOCOL_FORTICLIENT }, { "CN=www.update.microsoft.com", NDPI_PROTOCOL_WINDOWS_UPDATE }, { "CN=*.tunnelbear.com", NDPI_PROTOCOL_TUNNELBEAR }, + { "CN=cloudflareclient.com", NDPI_PROTOCOL_CLOUDFLARE_WARP }, { NULL, 0 } }; -- cgit v1.2.3