diff options
| author | Maatuq <mahmoudmatook.mm@gmail.com> | 2023-05-31 09:31:01 +0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-05-31 07:31:01 +0200 |
| commit | e17fa1259aa3b2fb4a6479188ac98fb826967848 (patch) | |
| tree | a014031cdec592bdf1009fb574f192614eb65765 /src/lib/protocols/mining.c | |
| parent | a8d2eeddd207d5bf70575045d632e235dcab2533 (diff) | |
Add bitcoing protocol dissector. (#1992)
* Add bitcoing protocol dissector.
* remove bitcoin protcol detection from mining.c
* add a new bitcoin deissector.
* add a new category: Cryptocurrency.
Signed-off-by: Mahmoud Maatuq <mahmoudmatook.mm@gmail.com>
* Remove useless checks and add missing windows and docs file.
Signed-off-by: Mahmoud Maatuq <mahmoudmatook.mm@gmail.com>
* update affected tests.
Signed-off-by: Mahmoud Maatuq <mahmoudmatook.mm@gmail.com>
* add a brief version.
Add notes on the difference between normal bitcoin protocol and the
mining protocol.
Signed-off-by: Mahmoud Maatuq <mahmoudmatook.mm@gmail.com>
* update enable_payload_stat test after dev rebasing.
Signed-off-by: Mahmoud Maatuq <mahmoudmatook.mm@gmail.com>
---------
Signed-off-by: Mahmoud Maatuq <mahmoudmatook.mm@gmail.com>
Diffstat (limited to 'src/lib/protocols/mining.c')
| -rw-r--r-- | src/lib/protocols/mining.c | 17 |
1 files changed, 0 insertions, 17 deletions
diff --git a/src/lib/protocols/mining.c b/src/lib/protocols/mining.c index c6a3420b7..ba1da1454 100644 --- a/src/lib/protocols/mining.c +++ b/src/lib/protocols/mining.c @@ -98,23 +98,6 @@ static void ndpi_search_mining_tcp(struct ndpi_detection_module_struct *ndpi_str /* Check connection over TCP */ if(packet->payload_packet_len > 10) { - if(packet->tcp->source == htons(8333) || - packet->tcp->dest == htons(8333)) { - /* - Bitcoin - - bitcoin.magic == 0xf9beb4d9 || bitcoin.magic == 0xfabfb5da - */ - u_int32_t magic = htonl(0xf9beb4d9), magic1 = htonl(0xfabfb5da), *to_match = (u_int32_t*)packet->payload; - - if((*to_match == magic) || (*to_match == magic1)) { - ndpi_snprintf(flow->flow_extra_info, sizeof(flow->flow_extra_info), "%s", "ETH"); - ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_MINING, NDPI_PROTOCOL_UNKNOWN, NDPI_CONFIDENCE_DPI); - cacheMiningHostTwins(ndpi_struct, flow); - return; - } - } - if((packet->payload_packet_len > 300) && (packet->payload_packet_len < 600) && (packet->payload[2] == 0x04)) { |