diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2022-07-07 16:46:18 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-07-07 16:46:18 +0200 |
| commit | d254ae54f3af143ff34c2657c028cda4198e9e9c (patch) | |
| tree | cf6307eefc4be5aab79a35645cb320c689c25f39 /src/lib/protocols/mail_smtp.c | |
| parent | feaa1df1ed69123af9c44420a5db1ae096631fa0 (diff) | |
SMTP: add support for X-ANONYMOUSTLS comamnd (#1650)
Diffstat (limited to 'src/lib/protocols/mail_smtp.c')
| -rw-r--r-- | src/lib/protocols/mail_smtp.c | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/src/lib/protocols/mail_smtp.c b/src/lib/protocols/mail_smtp.c index 2b1ffd52f..a2035bfe6 100644 --- a/src/lib/protocols/mail_smtp.c +++ b/src/lib/protocols/mail_smtp.c @@ -315,6 +315,27 @@ void ndpi_search_mail_smtp_tcp(struct ndpi_detection_module_struct *ndpi_struct, } } + if(packet->line[a].len >= 14) { + if((packet->line[a].ptr[0] == 'X' || packet->line[a].ptr[0] == 'x') + && (packet->line[a].ptr[1] == '-' || packet->line[a].ptr[1] == '-') + && (packet->line[a].ptr[2] == 'A' || packet->line[a].ptr[2] == 'a') + && (packet->line[a].ptr[3] == 'N' || packet->line[a].ptr[3] == 'n') + && (packet->line[a].ptr[4] == 'O' || packet->line[a].ptr[4] == 'o') + && (packet->line[a].ptr[5] == 'N' || packet->line[a].ptr[5] == 'n') + && (packet->line[a].ptr[6] == 'Y' || packet->line[a].ptr[6] == 'y') + && (packet->line[a].ptr[7] == 'M' || packet->line[a].ptr[6] == 'm') + && (packet->line[a].ptr[8] == 'O' || packet->line[a].ptr[6] == 'o') + && (packet->line[a].ptr[9] == 'U' || packet->line[a].ptr[6] == 'u') + && (packet->line[a].ptr[10] == 'S' || packet->line[a].ptr[6] == 's') + && (packet->line[a].ptr[11] == 'T' || packet->line[a].ptr[6] == 't') + && (packet->line[a].ptr[12] == 'L' || packet->line[a].ptr[6] == 'l') + && (packet->line[a].ptr[13] == 'S' || packet->line[a].ptr[7] == 's')) { + flow->l4.tcp.smtp_command_bitmask |= SMTP_BIT_STARTTLS; + flow->l4.tcp.ftp_imap_pop_smtp.auth_tls = 1; + flow->l4.tcp.ftp_imap_pop_smtp.auth_done = 0; + } + } + if(packet->line[a].len >= 4) { if((packet->line[a].ptr[0] == 'D' || packet->line[a].ptr[0] == 'd') && (packet->line[a].ptr[1] == 'A' || packet->line[a].ptr[1] == 'a') |