nDPI/tests/cfgs/guessing_disable
Luca Deri 11d74ea286 Implemented nDPI fingerprint that is computed using
- TCP fingerprint
- JA4 fingepriint
- TLS SHA1 certificate (if present), or JA3S fingerprint (is SHA1 is missing)

By default the fingerprint uses the client and server fingerprints (format 0)
and combines them. However you can chnge it format (eg. use only the client info,
format 1) with

--cfg NULL,metadata.ndpi_fingerprint_format,X

where X is the fingerprint format.

By default nDPI fingerprint is enabled but you can enable/disble it as follows

--cfg NULL,metadata.ndpi_fingerprint,0
2025-08-21 10:34:49 +02:00
..
pcap config: allow configuration of guessing algorithms 2024-01-18 10:21:24 +01:00
result Implemented nDPI fingerprint that is computed using 2025-08-21 10:34:49 +02:00
config.txt config: allow configuration of guessing algorithms 2024-01-18 10:21:24 +01:00