diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2024-04-08 10:24:51 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-04-08 10:24:51 +0200 |
| commit | 1b3ef7d7b2dde9d58cb217d3d7fb6b14d6281153 (patch) | |
| tree | 868ce2beb4ba9dbfbe40dd05c9a1b200e367439c /src/lib/ndpi_main.c | |
| parent | f5905a62c7fc1922d0b49e9399d56e8cfee69516 (diff) | |
STUN: improve extraction of Mapped-Address metadata (#2370)
Enable parsing of Mapped-Address attribute for all STUN flows: that
means that STUN classification might require more packets.
Add a configuration knob to enable/disable this feature.
Note that we can have (any) STUN metadata also for flows *not*
classified as STUN (because of DTLS).
Add support for ipv6.
Restore the correct extra dissection logic for Telegram flows.
Diffstat (limited to 'src/lib/ndpi_main.c')
| -rw-r--r-- | src/lib/ndpi_main.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c index e0150fe6c..c2583accc 100644 --- a/src/lib/ndpi_main.c +++ b/src/lib/ndpi_main.c @@ -11216,6 +11216,7 @@ static const struct cfg_param { { "stun", "tls_dissection", "enable", NULL, NULL, CFG_PARAM_ENABLE_DISABLE, __OFF(stun_opportunistic_tls_enabled), NULL }, { "stun", "max_packets_extra_dissection", "4", "0", "255", CFG_PARAM_INT, __OFF(stun_max_packets_extra_dissection), NULL }, + { "stun", "metadata.attribute.mapped_address", "enable", NULL, NULL, CFG_PARAM_ENABLE_DISABLE, __OFF(stun_mapped_address_enabled), NULL }, { "dns", "subclassification", "enable", NULL, NULL, CFG_PARAM_ENABLE_DISABLE, __OFF(dns_subclassification_enabled), NULL }, { "dns", "process_response", "enable", NULL, NULL, CFG_PARAM_ENABLE_DISABLE, __OFF(dns_parse_response_enabled), NULL }, |