DGA name improvement

1 files changed, 9 insertions, 1 deletions

diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c
index d8c137227..4ca4bf415 100644
--- a/src/lib/ndpi_main.c
+++ b/src/lib/ndpi_main.c
@@ -6887,8 +6887,16 @@ int ndpi_check_dga_name(struct ndpi_detection_module_struct *ndpi_str,
 	}
 
 	switch(word[i]) {
-	case '_':
 	case '-':
+	  /* 
+	     Let's check for double+consecutive -- 
+	     that are usually ok
+	     r2---sn-uxaxpu5ap5-2n5e.gvt1.com
+	  */
+	  if(word[i+1] == '-')
+	    return(0); /* Double dash */
+	  
+	case '_':
 	case ':':
 	  continue;
 	  break;