vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-29 23:49:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add support for Malicious JA3 signature using nDPI (#5045)

Browse source
This commit is contained in:
Alfredo Cardigliano 2021-02-23 18:35:19 +01:00
parent 6a02355395
commit db9adb9060
9 changed files with 132 additions and 124 deletions
Download patch file Download diff file Expand all files Collapse all files

5
scripts/lua/modules/flow_risk_utils.lua
View file

@ -33,7 +33,10 @@ local id2name = {
[22] = "ndpi_unsafe_protocol",
[23] = "ndpi_dns_suspicious_traffic",
[24] = "ndpi_tls_missing_sni",
[25] = "ndpi_http_invalid_content",
[25] = "ndpi_http_invalid_content",
[26] = "ndpi_risky_asn",
[27] = "ndpi_risky_domain",
[28] = "ndpi_malicious_ja3",
}
-- ##############################################