Closed IvanNardi closed 2 months ago
"Invalid DNS Header"-risk should be set only if the flow has been already classified as DNS. Otherwise, almost any non-DNS flows on port 53 will end up having the NDPI_MALFORMED_PACKET risk set, which is a little bit confusing for non DNS traffic
NDPI_MALFORMED_PACKET
Issues 0 New issues 0 Accepted issues
Measures 0 Security Hotspots 0.0% Coverage on New Code 0.0% Duplication on New Code
See analysis details on SonarCloud
"Invalid DNS Header"-risk should be set only if the flow has been already classified as DNS. Otherwise, almost any non-DNS flows on port 53 will end up having the
NDPI_MALFORMED_PACKET
risk set, which is a little bit confusing for non DNS traffic