From 56bfb439f85b3e4054bd7c6b849a6e06e5c2ac27 Mon Sep 17 00:00:00 2001 From: Luca Deri Date: Wed, 3 Mar 2021 00:41:07 +0100 Subject: Improved DGA detection with trigrams. Disadvantage: slower startup time Reworked Tor dissector embedded in TLS (fixes #1141) Removed false positive on HTTP User-Agent --- src/lib/protocols/quic.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/lib/protocols/quic.c') diff --git a/src/lib/protocols/quic.c b/src/lib/protocols/quic.c index 655d90aa5..dd3493064 100644 --- a/src/lib/protocols/quic.c +++ b/src/lib/protocols/quic.c @@ -1283,7 +1283,7 @@ static void process_chlo(struct ndpi_detection_module_struct *ndpi_struct, /* Add check for missing SNI */ if(flow->protos.tls_quic_stun.tls_quic.client_requested_server_name[0] == '\0') { /* This is a bit suspicious */ - NDPI_SET_BIT(flow->risk, NDPI_TLS_MISSING_SNI); + ndpi_set_risk(flow, NDPI_TLS_MISSING_SNI); } } -- cgit v1.2.3