vrr/nfstream
2
0
Fork 0
mirror of https://github.com/nfstream/nfstream.git synced 2026-05-22 03:03:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update nDPI definitions.

Browse source
This commit is contained in:
aouinizied 2021-03-08 19:08:02 +01:00
parent 6edb552f21
commit 3c64e0ff55
2 changed files with 8 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
nfstream/engine/engine.py
View file

@ -157,7 +157,8 @@ typedef enum {
NDPI_HTTP_SUSPICIOUS_CONTENT,
NDPI_RISKY_ASN,
NDPI_RISKY_DOMAIN,
NDPI_RISKY_COUNTRY,
NDPI_MALICIOUS_JA3,
NDPI_MALICIOUS_SHA1,
/* Leave this as last member */
NDPI_MAX_RISK /* must be <= 31 due to (**) */
} ndpi_risk_enum;
@ -785,12 +786,14 @@ struct ndpi_detection_module_struct {
unsigned ndpi_num_supported_protocols;
unsigned ndpi_num_custom_protocols;
/* HTTP/DNS/HTTPS host matching */
/* HTTP/DNS/HTTPS/QUIC host matching */
ndpi_automa host_automa, /* Used for DNS/HTTPS */
content_automa, /* Used for HTTP subprotocol_detection */
subprotocol_automa, /* Used for HTTP subprotocol_detection */
bigrams_automa, impossible_bigrams_automa; /* TOR */
/* IMPORTANT: please update ndpi_finalize_initalization() whenever you add a new automa */
bigrams_automa, trigrams_automa, impossible_bigrams_automa, /* TOR */
risky_domain_automa, tls_cert_subject_automa,
malicious_ja3_automa, malicious_sha1_automa;
/* IMPORTANT: please update ndpi_finalize_initialization() whenever you add a new automa */
struct {
ndpi_automa hostnames, hostnames_shadow;

2
nfstream/engine/engine_cc.c
View file

@ -1941,7 +1941,7 @@ void dissector_configure(struct ndpi_detection_module_struct *dissector) {
NDPI_PROTOCOL_BITMASK protos;
NDPI_BITMASK_SET_ALL(protos); // Set bitmask for ALL protocols
ndpi_set_protocol_detection_bitmask2(dissector, &protos);
ndpi_finalize_initalization(dissector);
ndpi_finalize_initialization(dissector);
}
}