vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-05-05 19:15:03 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Implement alert on JA3 malicious signatures

Browse source 
Closes #2788
This commit is contained in:
emanuele-f 2019-08-28 18:32:06 +02:00
parent ae8674c41f
commit b66b71fd7e
11 changed files with 153 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

2
include/Flow.h
View file

@ -73,7 +73,7 @@ class Flow : public GenericHashEntry {
cli2srv_direction, twh_over, twh_ok, dissect_next_http_packet, passVerdict,
check_tor, l7_protocol_guessed, flow_alerted, flow_dropped_counts_increased,
good_low_flow_detected, good_ssl_hs, update_flow_port_stats,
quota_exceeded;
quota_exceeded, has_malicious_signature;
u_int16_t diff_num_http_requests;
#ifdef NTOPNG_PRO
bool counted_in_aggregated_flow, status_counted_in_aggregated_flow;