diff options
author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2022-01-29 09:19:26 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2022-01-29 09:19:26 +0100 |
commit | 513e386959e0d52c4b37cb704f6b0b7a128cc0e4 (patch) | |
tree | d46f9bb6b85a1b36ab846ffd150e02971c0d8fd5 /src/lib/ndpi_main.c | |
parent | 9b8679a320c3c210d9e3fda2c1ee8049d2b6c79f (diff) |
Extend protocols support (#1422)
Add detection of AccuWeather site/app and Google Classroom.
Improve detection of Azure, Zattoo, Whatsapp, MQTT and LDAP.
Fix some RX false positives.
Fix some "Uncommon TLS ALPN"-risk false positives.
Fix "confidence" value for some Zoom/Torrent classifications.
Minor fix in Lua script for Wireshark extcap.
Update .gitignore file.
Let GitHub correctly detect the language type of *.inc files.
Zattoo example has been provided by @subhajit-cdot in #1148.
Diffstat (limited to 'src/lib/ndpi_main.c')
-rw-r--r-- | src/lib/ndpi_main.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c index 3cfc2b2ce..34cd6daeb 100644 --- a/src/lib/ndpi_main.c +++ b/src/lib/ndpi_main.c @@ -5255,12 +5255,14 @@ ndpi_protocol ndpi_detection_giveup(struct ndpi_detection_module_struct *ndpi_st flow->daddr, flow->dport)) { /* This looks like BitTorrent */ ret.app_protocol = NDPI_PROTOCOL_BITTORRENT; + flow->confidence = NDPI_CONFIDENCE_DPI_CACHE; } else if((flow->l4_proto == IPPROTO_UDP) /* Zoom/UDP used for video */ && (((ntohs(flow->sport) == 8801 /* Zoom port */) && ndpi_search_into_zoom_cache(ndpi_str, flow->saddr)) || ((ntohs(flow->dport) == 8801 /* Zoom port */) && ndpi_search_into_zoom_cache(ndpi_str, flow->daddr)) )) { /* This looks like Zoom */ ret.app_protocol = NDPI_PROTOCOL_ZOOM; + flow->confidence = NDPI_CONFIDENCE_DPI_CACHE; } } |