From a08ae568bd877196ca6ae5aaa8f57f24ee5e4d25 Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Fri, 1 Jul 2022 08:06:53 +0200 Subject: Added TunnelBear VPN detection patterns. Signed-off-by: Toni Uhlig --- src/include/ndpi_protocol_ids.h | 1 + src/lib/ndpi_content_match.c.inc | 4 ++++ 2 files changed, 5 insertions(+) (limited to 'src') diff --git a/src/include/ndpi_protocol_ids.h b/src/include/ndpi_protocol_ids.h index c8812915b..6d6386fcf 100644 --- a/src/include/ndpi_protocol_ids.h +++ b/src/include/ndpi_protocol_ids.h @@ -327,6 +327,7 @@ typedef enum { NDPI_PROTOCOL_IP_PGM = 296, NDPI_PROTOCOL_IP_PIM = 297, NDPI_PROTOCOL_COLLECTD = 298, + NDPI_PROTOCOL_TUNNELBEAR = 299, #ifdef CUSTOM_NDPI_PROTOCOLS #include "../../../nDPI-custom/custom_ndpi_protocol_ids.h" diff --git a/src/lib/ndpi_content_match.c.inc b/src/lib/ndpi_content_match.c.inc index 41b9847c3..b2e31d992 100644 --- a/src/lib/ndpi_content_match.c.inc +++ b/src/lib/ndpi_content_match.c.inc @@ -1687,6 +1687,9 @@ static ndpi_protocol_match host_match[] = { "1kxun.com", "1kxun", NDPI_PROTOCOL_1KXUN, NDPI_PROTOCOL_CATEGORY_STREAMING, NDPI_PROTOCOL_FUN, NDPI_PROTOCOL_DEFAULT_LEVEL }, { "1kxun.mobi", "1kxun", NDPI_PROTOCOL_1KXUN, NDPI_PROTOCOL_CATEGORY_STREAMING, NDPI_PROTOCOL_FUN, NDPI_PROTOCOL_DEFAULT_LEVEL }, + { "tunnelbear.com", "TunnelBear", NDPI_PROTOCOL_TUNNELBEAR, NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_DEFAULT_LEVEL }, + { "polargrizzly.com", "TunnelBear", NDPI_PROTOCOL_TUNNELBEAR, NDPI_PROTOCOL_CATEGORY_VPN, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_DEFAULT_LEVEL }, + #ifdef CUSTOM_NDPI_PROTOCOLS #include "../../../nDPI-custom/custom_ndpi_content_match_host_match.c.inc" #endif @@ -1706,6 +1709,7 @@ static ndpi_tls_cert_name_match tls_certificate_match [] = { { "CN=*.gateway.messenger.live.com", NDPI_PROTOCOL_SKYPE_TEAMS }, { "OU=FortiGate", NDPI_PROTOCOL_FORTICLIENT }, { "CN=www.update.microsoft.com", NDPI_PROTOCOL_WINDOWS_UPDATE }, + { "CN=*.tunnelbear.com", NDPI_PROTOCOL_TUNNELBEAR }, { NULL, 0 } }; -- cgit v1.2.3