vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-29 23:49:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Use server name as MUD peer name when possible

Browse source
This commit is contained in:
emanuele-f 2019-09-05 19:31:42 +02:00
parent 5c174fe156
commit bd2bf91882
2 changed files with 12 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

13
scripts/lua/modules/mud_utils.lua
View file

@ -92,8 +92,17 @@ local function remote_full_mud_encode(info, peer_ip, peer_port, is_client)
local l7proto = interface.getnDPIProtoName(info["proto.ndpi_id"])
local fingerprints = getFingerprints(info, is_client)
-- TODO: this can take time, maybe postpone?
local peer_key = resolveAddress({host = peer_ip})
local peer_key = info["host_server_name"] or info["protos.dns.last_query"]
if(isEmptyString(peer_key)) then
-- TODO: this can take time, maybe postpone?
peer_key = resolveAddress({host = peer_ip})
end
-- Name Cleanup
if(string.find(peer_key, "www.") == 1) then
peer_key = string.sub(peer_key, 5)
end
return(string.format("%s|%s|%s|%s|%s|%s", info["proto.l4"], l7proto,
fingerprints[1], fingerprints[2], fingerprints[3], peer_key))