nDPI/example/obfuscation.conf
Ivan Nardi 29eb89a88f
Improved configuration to enable/disable export of flow risk info (#2780)
Follow-up of f568313363: now the
configuration is for flow-risk, not global
2025-03-25 21:35:01 +01:00

13 lines
453 B
Text

#Useful ndpiReader configuration to analyse VPN and/or obfuscated traffic
#Flow risk info: only about obfuscation
--cfg=flow_risk.all.info,0 --cfg=flow_risk.obfuscated.info,1
#Generic limits
--cfg=packets_limit_per_flow,255 -U 0 -T 0
#Fully encrypted protocols
--cfg=fully_encrypted_heuristic,1
#TLS heuristics
--cfg=tls,dpi.heuristics,0x07 --cfg=tls,dpi.heuristics.max_packets_extra_dissection,25
#OpenVPN heuristic
--cfg=openvpn,dpi.heuristics,0x01