From 05d76525b0ee93164001405e4a9ff82e5caa025c Mon Sep 17 00:00:00 2001
From: Luca Deri <deri@ntop.org>
Date: Sat, 2 Jan 2021 21:11:42 +0100
Subject: Added HTTP suspicious content securirty risk (useful for tracking
 trickbot)

---
 src/lib/ndpi_utils.c | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'src/lib/ndpi_utils.c')

diff --git a/src/lib/ndpi_utils.c b/src/lib/ndpi_utils.c
index 95a115110..97b94ed68 100644
--- a/src/lib/ndpi_utils.c
+++ b/src/lib/ndpi_utils.c
@@ -1721,6 +1721,9 @@ const char* ndpi_risk2str(ndpi_risk_enum risk) {
   case NDPI_TLS_MISSING_SNI:
     return("SNI TLS extension was missing");
     
+  case NDPI_HTTP_SUSPICIOUS_CONTENT:
+    return("HTTP suspicious content");
+    
   default:
     snprintf(buf, sizeof(buf), "%d", (int)risk);
     return(buf);
-- 
cgit v1.2.3