diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2022-08-05 14:14:38 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-08-05 14:14:38 +0200 |
| commit | c0732eda45884de91e0c221e9dd23eeec364bf68 (patch) | |
| tree | 50a3146ccb9463fb4724fcf8268122d9bdccd371 /src/lib/protocols/gnutella.c | |
| parent | 346e274a1b1d713aedfc341f7d1300009f9f0e1a (diff) | |
HTTP: improve sub-classification (#1696)
Content-matched sub-protocols (DASH, IPP, MPEGDASH...) shouldn't
ovewrite the previous master protocol (if any; usually HTTP).
Furthermore. the HTTP dissector shouldn't update the classification
(in the extra-dissection code path) if a content-matched sub-protocols
has already been found.
This commit should address the first part of the changes described in #1687.
Diffstat (limited to 'src/lib/protocols/gnutella.c')
| -rw-r--r-- | src/lib/protocols/gnutella.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/lib/protocols/gnutella.c b/src/lib/protocols/gnutella.c index 7f6656424..a5ab04c3c 100644 --- a/src/lib/protocols/gnutella.c +++ b/src/lib/protocols/gnutella.c @@ -33,8 +33,9 @@ static void ndpi_int_gnutella_add_connection(struct ndpi_detection_module_struct struct ndpi_flow_struct *flow, ndpi_confidence_t confidence) { - ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_GNUTELLA, NDPI_PROTOCOL_UNKNOWN, confidence); NDPI_LOG_INFO(ndpi_struct, "found GNUTELLA\n"); + ndpi_set_detected_protocol_keeping_master(ndpi_struct, flow, NDPI_PROTOCOL_GNUTELLA, + confidence); } void ndpi_search_gnutella(struct ndpi_detection_module_struct *ndpi_struct, struct ndpi_flow_struct *flow) |