From 05d76525b0ee93164001405e4a9ff82e5caa025c Mon Sep 17 00:00:00 2001 From: Luca Deri <deri@ntop.org> Date: Sat, 2 Jan 2021 21:11:42 +0100 Subject: Added HTTP suspicious content securirty risk (useful for tracking trickbot) --- src/lib/ndpi_utils.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src/lib/ndpi_utils.c') diff --git a/src/lib/ndpi_utils.c b/src/lib/ndpi_utils.c index 95a115110..97b94ed68 100644 --- a/src/lib/ndpi_utils.c +++ b/src/lib/ndpi_utils.c @@ -1721,6 +1721,9 @@ const char* ndpi_risk2str(ndpi_risk_enum risk) { case NDPI_TLS_MISSING_SNI: return("SNI TLS extension was missing"); + case NDPI_HTTP_SUSPICIOUS_CONTENT: + return("HTTP suspicious content"); + default: snprintf(buf, sizeof(buf), "%d", (int)risk); return(buf); -- cgit v1.2.3