Commits on Mar 6, 2024

1. ahocorasick: improve matching with subdomains …

   The basic idea is to have the following logic:
   * pattern "DOMAIN" matches the domain itself (i.e exact match) *and* any
   subdomains (i.e. "ANYTHING.DOMAIN")
   * pattern "DOMAIN." matches *also* any strings for which is a prefix
   [please, note that this kind of match is handy but it is quite
   dangerous...]
   * pattern "-DOMAIN" matches *also* any strings for which is a postfix
   
   Examples:
   * pattern "wikipedia.it":
     * "wikipiedia.it" -> OK
     * "foo.wikipedia.it -> OK
     * "foowikipedia.it -> NO MATCH
     * "wikipedia.it.com -> NO MATCH
   * pattern "wikipedia.":
     * "wikipedia.it" -> OK
     * "foo.wikipedia.it -> OK
     * "foowikipedia.it -> NO MATCH
     * "wikipedia.it.com -> OK
   * pattern "-wikipedia.it":
     * "wikipedia.it" -> NO MATCH
     * "foo.wikipedia.it -> NO MATCH
     * "0001-wikipedia.it -> OK
     * "foo.0001-wikipedia.it -> OK
   
   Bottom line:
   * exact match
   * prefix with "." (always, implicit)
   * prefix with "-" (only if esplicitly set)
   * postfix with "." (only if esplicitly set)
   
   That means that the patterns cannot start with '.' anymore.
   
   Close ntop#2330

   

   IvanNardi committed Mar 6, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 6025ee0
   • Browse repository at this point

   Copy the full SHA

   6025ee0 View commit details

   Browse the repository at this point in the history