From 2c551afbd7b2e14df6102724e426799b86b38964 Mon Sep 17 00:00:00 2001 From: Luca Deri Date: Sat, 31 Dec 2022 16:55:55 +0100 Subject: Added NDPI_MINOR_ISSUES risk used for storing generic/relevant information about issues found on traffic. --- src/lib/protocols/dns.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'src/lib/protocols') diff --git a/src/lib/protocols/dns.c b/src/lib/protocols/dns.c index 7df825f8b..48da46e39 100644 --- a/src/lib/protocols/dns.c +++ b/src/lib/protocols/dns.c @@ -412,8 +412,8 @@ static int search_valid_dns(struct ndpi_detection_module_struct *ndpi_struct, rsp_ttl = ntohl(*((u_int32_t*)&packet->payload[x+2])); if(rsp_ttl == 0) - ndpi_set_risk(ndpi_struct, flow, NDPI_DNS_SUSPICIOUS_TRAFFIC, "DNS Record with zero TTL"); - + ndpi_set_risk(ndpi_struct, flow, NDPI_MINOR_ISSUES, "DNS Record with zero TTL"); + #ifdef DNS_DEBUG printf("[DNS] TTL = %u\n", rsp_ttl); printf("[DNS] [response] response_type=%d\n", rsp_type); -- cgit v1.2.3