diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2023-05-10 12:50:24 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-05-10 12:50:24 +0200 |
| commit | 31d23aee5662c8a0b69770cf96960c1db68e647c (patch) | |
| tree | 5c0a9fb22a109174452817ee8bcee93a1a85ac25 /src/lib/protocols/oracle.c | |
| parent | 99d7066ea07d21bc282593c09fb6c306c67e09e3 (diff) | |
All protocols should be excluded sooner or later (#1969)
For a lot of protocols, reduce the number of packets after which the
protocols dissector gives up.
The values are quite arbitary, tring to not impact on classification
Diffstat (limited to 'src/lib/protocols/oracle.c')
| -rw-r--r-- | src/lib/protocols/oracle.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/lib/protocols/oracle.c b/src/lib/protocols/oracle.c index b9be7102d..96012b31c 100644 --- a/src/lib/protocols/oracle.c +++ b/src/lib/protocols/oracle.c @@ -50,13 +50,17 @@ static void ndpi_search_oracle(struct ndpi_detection_module_struct *ndpi_struct, && (packet->payload[3] == 0x00)))) { NDPI_LOG_INFO(ndpi_struct, "found oracle\n"); ndpi_int_oracle_add_connection(ndpi_struct, flow); + return; } else if (packet->payload_packet_len == 213 && packet->payload[0] == 0x00 && packet->payload[1] == 0xd5 && packet->payload[2] == 0x00 && packet->payload[3] == 0x00 ) { NDPI_LOG_INFO(ndpi_struct, "found oracle\n"); ndpi_int_oracle_add_connection(ndpi_struct, flow); + return; } } + if(flow->packet_counter > 5) + NDPI_EXCLUDE_PROTO(ndpi_struct, flow); } |