aboutsummaryrefslogtreecommitdiff
path: root/src/lib/ndpi_main.c
diff options
context:
space:
mode:
authorIvan Nardi <12729895+IvanNardi@users.noreply.github.com>2021-11-11 11:55:56 +0100
committerGitHub <noreply@github.com>2021-11-11 11:55:56 +0100
commit0f168d9150cfcc94464b84591605a2c5e17c728e (patch)
treee6bb951d91ce2413b86917744a376a57a636544e /src/lib/ndpi_main.c
parent9abf528c8ed2256c7a091d9f69c506987c8c756a (diff)
IMAP, POP3, SMTP: improve dissection (#1368)
Avoid NATS false positives
Diffstat (limited to 'src/lib/ndpi_main.c')
-rw-r--r--src/lib/ndpi_main.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c
index 907cc019f..0ab5e6c9a 100644
--- a/src/lib/ndpi_main.c
+++ b/src/lib/ndpi_main.c
@@ -7247,7 +7247,8 @@ u_int8_t ndpi_extra_dissection_possible(struct ndpi_detection_module_struct *ndp
case NDPI_PROTOCOL_MAIL_IMAP:
case NDPI_PROTOCOL_MAIL_SMTP:
if(flow->protos.ftp_imap_pop_smtp.password[0] == '\0' &&
- flow->protos.ftp_imap_pop_smtp.auth_tls == 0)
+ flow->protos.ftp_imap_pop_smtp.auth_tls == 0 &&
+ flow->protos.ftp_imap_pop_smtp.auth_done == 0)
return(1);
break;