From f1b22b199f08469407c55dcd98ec24af85da0fd3 Mon Sep 17 00:00:00 2001 From: Luca Deri Date: Mon, 22 Feb 2021 23:19:23 +0100 Subject: Added NDPI_MALICIOUS_JA3 flow risk Added ndpi_load_malicious_ja3_file() API call --- src/lib/ndpi_utils.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'src/lib/ndpi_utils.c') diff --git a/src/lib/ndpi_utils.c b/src/lib/ndpi_utils.c index e3ae4b780..834d12e2e 100644 --- a/src/lib/ndpi_utils.c +++ b/src/lib/ndpi_utils.c @@ -1758,7 +1758,10 @@ const char* ndpi_risk2str(ndpi_risk_enum risk) { case NDPI_RISKY_DOMAIN: return("Risky domain name"); - + + case NDPI_MALICIOUS_JA3: + return("Malicious JA3 Fingerprint"); + default: snprintf(buf, sizeof(buf), "%d", (int)risk); return(buf); -- cgit v1.2.3