diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2022-01-29 09:19:26 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-01-29 09:19:26 +0100 |
| commit | 513e386959e0d52c4b37cb704f6b0b7a128cc0e4 (patch) | |
| tree | d46f9bb6b85a1b36ab846ffd150e02971c0d8fd5 /src/lib/protocols/rx.c | |
| parent | 9b8679a320c3c210d9e3fda2c1ee8049d2b6c79f (diff) | |
Extend protocols support (#1422)
Add detection of AccuWeather site/app and Google Classroom.
Improve detection of Azure, Zattoo, Whatsapp, MQTT and LDAP.
Fix some RX false positives.
Fix some "Uncommon TLS ALPN"-risk false positives.
Fix "confidence" value for some Zoom/Torrent classifications.
Minor fix in Lua script for Wireshark extcap.
Update .gitignore file.
Let GitHub correctly detect the language type of *.inc files.
Zattoo example has been provided by @subhajit-cdot in #1148.
Diffstat (limited to 'src/lib/protocols/rx.c')
| -rw-r--r-- | src/lib/protocols/rx.c | 9 |
1 files changed, 3 insertions, 6 deletions
diff --git a/src/lib/protocols/rx.c b/src/lib/protocols/rx.c index e5bc70c5d..5022d55a7 100644 --- a/src/lib/protocols/rx.c +++ b/src/lib/protocols/rx.c @@ -72,6 +72,7 @@ struct ndpi_rx_header { #define PLUS_2 6 #define MORE_1 9 #define CLIENT_INIT_2 33 +#define PLUS_3 34 @@ -118,7 +119,7 @@ void ndpi_check_rx(struct ndpi_detection_module_struct *ndpi_struct, header->flags == PLUS_0 || header->flags == PLUS_1 || header->flags == PLUS_2 || header->flags == REQ_ACK || header->flags == MORE_1 || header->flags == CLIENT_INIT_1 || - header->flags == CLIENT_INIT_2) { + header->flags == CLIENT_INIT_2 || header->flags == PLUS_3) { /* TYPE and FLAGS combo */ switch(header->type) @@ -132,7 +133,7 @@ void ndpi_check_rx(struct ndpi_detection_module_struct *ndpi_struct, /* Fall-through */ case RX_ACK: if(header->flags == CLIENT_INIT_1 || header->flags == CLIENT_INIT_2 || - header->flags == EMPTY) + header->flags == EMPTY || header->flags == PLUS_3) goto security; /* Fall-through */ case RX_CHALLENGE: @@ -198,10 +199,6 @@ void ndpi_check_rx(struct ndpi_detection_module_struct *ndpi_struct, } else { flow->l4.udp.rx_conn_epoch = header->conn_epoch; flow->l4.udp.rx_conn_id = header->conn_id; - { - NDPI_LOG_INFO(ndpi_struct, "found RX\n"); - ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_RX, NDPI_PROTOCOL_UNKNOWN, NDPI_CONFIDENCE_DPI); - } } } |