From 1dccaf37b075ebfb726d407b9c4d95fcf2983135 Mon Sep 17 00:00:00 2001 From: Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> Date: Tue, 11 Feb 2025 15:48:53 +0100 Subject: DNS: fix check for DGA domain (#2716) If we have a (potential) valid sub-classification, we shoudn't check for DGA, even if the subclassification itself is disabled! --- src/lib/protocols/fastcgi.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/lib/protocols/fastcgi.c') diff --git a/src/lib/protocols/fastcgi.c b/src/lib/protocols/fastcgi.c index 484d98ed6..699b61123 100644 --- a/src/lib/protocols/fastcgi.c +++ b/src/lib/protocols/fastcgi.c @@ -212,7 +212,7 @@ static void ndpi_search_fastcgi(struct ndpi_detection_module_struct *ndpi_struct strlen(flow->host_server_name), &ret_match, NDPI_PROTOCOL_FASTCGI, 1); ndpi_check_dga_name(ndpi_struct, flow, - flow->host_server_name, 1, 0); + flow->host_server_name, 1, 0, 0); if(ndpi_is_valid_hostname((char *)packet->host_line.ptr, packet->host_line.len) == 0) { char str[128]; -- cgit v1.2.3