diff options
| author | Luca <deri@ntop.org> | 2022-10-04 11:18:09 +0200 |
|---|---|---|
| committer | Luca <deri@ntop.org> | 2022-10-04 11:26:44 +0200 |
| commit | de59eb823724cea1f197f8012f41e6cb159b2a56 (patch) | |
| tree | fa23cd6bf7b3ec31708d550b5f94db4a643ce539 /example/reader_util.c | |
| parent | 66a8010ef7337aa734e430c40c690f4470384f62 (diff) | |
Added the ability to track the payload via -E and via the new option 'ndpi_track_flow_payload'
Diffstat (limited to 'example/reader_util.c')
| -rw-r--r-- | example/reader_util.c | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/example/reader_util.c b/example/reader_util.c index 7c19b31cb..498c834f8 100644 --- a/example/reader_util.c +++ b/example/reader_util.c @@ -78,7 +78,7 @@ extern u_int8_t max_num_udp_dissected_pkts /* 24 */, max_num_tcp_dissected_pkts static u_int32_t flow_id = 0; u_int8_t enable_doh_dot_detection = 0; -u_int8_t enable_ja3_plus = 0; +extern ndpi_init_prefs init_prefs; /* ****************************************************** */ @@ -403,7 +403,7 @@ struct ndpi_workflow* ndpi_workflow_init(const struct ndpi_workflow_prefs * pref set_ndpi_flow_malloc(NULL), set_ndpi_flow_free(NULL); /* TODO: just needed here to init ndpi ndpi_malloc wrapper */ - module = ndpi_init_detection_module(enable_ja3_plus ? ndpi_enable_ja3_plus : ndpi_no_prefs); + module = ndpi_init_detection_module(init_prefs); if(module == NULL) { LOG(NDPI_LOG_ERROR, "global structure initialization failed\n"); @@ -537,7 +537,8 @@ void ndpi_flow_info_free_data(struct ndpi_flow_info *flow) { ndpi_free_bin(&flow->payload_len_bin); #endif - if(flow->risk_str) ndpi_free(flow->risk_str); + if(flow->risk_str) ndpi_free(flow->risk_str); + if(flow->flow_payload) ndpi_free(flow->flow_payload); } /* ***************************************************** */ @@ -1329,6 +1330,9 @@ void process_ndpi_collected_info(struct ndpi_workflow * workflow, struct ndpi_fl if(workflow->__flow_detected_callback != NULL) workflow->__flow_detected_callback(workflow, flow, workflow->__flow_detected_udata); } + + flow->flow_payload = flow->ndpi_flow->flow_payload, flow->flow_payload_len = flow->ndpi_flow->flow_payload_len; + flow->ndpi_flow->flow_payload = NULL; /* We'll free the memory */ ndpi_free_flow_info_half(flow); } |