diff options
author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2023-05-10 12:50:24 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2023-05-10 12:50:24 +0200 |
commit | 31d23aee5662c8a0b69770cf96960c1db68e647c (patch) | |
tree | 5c0a9fb22a109174452817ee8bcee93a1a85ac25 /src/lib/protocols/socks45.c | |
parent | 99d7066ea07d21bc282593c09fb6c306c67e09e3 (diff) |
All protocols should be excluded sooner or later (#1969)
For a lot of protocols, reduce the number of packets after which the
protocols dissector gives up.
The values are quite arbitary, tring to not impact on classification
Diffstat (limited to 'src/lib/protocols/socks45.c')
-rw-r--r-- | src/lib/protocols/socks45.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/src/lib/protocols/socks45.c b/src/lib/protocols/socks45.c index 3d7d43799..7bc73af2e 100644 --- a/src/lib/protocols/socks45.c +++ b/src/lib/protocols/socks45.c @@ -39,8 +39,8 @@ static void ndpi_check_socks4(struct ndpi_detection_module_struct *ndpi_struct, struct ndpi_packet_struct *packet = &ndpi_struct->packet; u_int32_t payload_len = packet->payload_packet_len; - /* Break after 20 packets. */ - if(flow->packet_counter > 20) { + /* Break after 10 packets. */ + if(flow->packet_counter > 10) { NDPI_EXCLUDE_PROTO(ndpi_struct, flow); return; } @@ -80,8 +80,8 @@ static void ndpi_check_socks5(struct ndpi_detection_module_struct *ndpi_struct, struct ndpi_packet_struct *packet = &ndpi_struct->packet; u_int32_t payload_len = packet->payload_packet_len; - /* Break after 20 packets. */ - if(flow->packet_counter > 20) { + /* Break after 10 packets. */ + if(flow->packet_counter > 10) { NDPI_EXCLUDE_PROTO(ndpi_struct, flow); return; } |