diff options
| author | Campus <campus@ntop.org> | 2017-06-09 13:22:58 +0200 |
|---|---|---|
| committer | Campus <campus@ntop.org> | 2017-06-09 13:22:58 +0200 |
| commit | af3086fb82e4c4622e10370ab092822e55fb6716 (patch) | |
| tree | 88d23a7c23489ccc513cc033b39c2fdbfd9be60c /src/lib/protocols/ssl.c | |
| parent | e0366a99653debd29d57aae3ac81a0559a5434fb (diff) | |
add check for whatsapp in ssl
Diffstat (limited to 'src/lib/protocols/ssl.c')
| -rw-r--r-- | src/lib/protocols/ssl.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/lib/protocols/ssl.c b/src/lib/protocols/ssl.c index 94f3ad7e3..5860abed7 100644 --- a/src/lib/protocols/ssl.c +++ b/src/lib/protocols/ssl.c @@ -595,6 +595,11 @@ void ndpi_search_ssl_tcp(struct ndpi_detection_module_struct *ndpi_struct, struc && (packet->payload[3] <= 9))) { ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_WHATSAPP, NDPI_PROTOCOL_UNKNOWN); return; + } else if((packet->payload_packet_len == 4) + && (packet->payload[0] == 'W') + && (packet->payload[1] == 'A')){ + ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_WHATSAPP, NDPI_PROTOCOL_UNKNOWN); + return; } else { /* No whatsapp, let's try SSL */ if(sslDetectProtocolFromCertificate(ndpi_struct, flow) > 0) |