Added risks for checking

- invalid DNS traffic (probably carrying exfiltrated data)
- TLS traffic with no SNI extension

python/ndpi.py

@@ -314,6 +314,8 @@ typedef enum {
   NDPI_SMB_INSECURE_VERSION,
   NDPI_TLS_SUSPICIOUS_ESNI_USAGE,
   NDPI_UNSAFE_PROTOCOL,
+  NDPI_DNS_SUSPICIOUS_TRAFFIC,
+  NDPI_TLS_MISSING_SNI,
   /* Leave this as last member */
   NDPI_MAX_RISK
 } ndpi_risk_enum;