diff options
| author | Nardi Ivan <nardi.ivan@gmail.com> | 2024-06-14 20:20:58 +0200 |
|---|---|---|
| committer | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2024-06-17 10:19:55 +0200 |
| commit | 526cf6f2919398e1c9c5698b1b5783f18ed41fff (patch) | |
| tree | 52efef17aefb9aa01ca702b53b4831a199b17b5e /src/lib/protocols/zoom.c | |
| parent | 2bedd14aae1294528bafbe03b9307a4eacb09bcb (diff) | |
Zoom: remove "stun_zoom" LRU cache
Since 070a0908b we are able to detect P2P calls directly from the packet
content, without any correlation among flows
Diffstat (limited to 'src/lib/protocols/zoom.c')
| -rw-r--r-- | src/lib/protocols/zoom.c | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/src/lib/protocols/zoom.c b/src/lib/protocols/zoom.c index 4ec16353f..bb677d4de 100644 --- a/src/lib/protocols/zoom.c +++ b/src/lib/protocols/zoom.c @@ -187,8 +187,6 @@ static void ndpi_search_zoom(struct ndpi_detection_module_struct *ndpi_struct, u_int64_t ip_len, uuid_len; /* Check if it is a Peer-To-Peer call. - We have been identifing such flows using the "stun_zoom" LRU cache; let's - see if we are able to detect them properly via DPI. According to the paper, P2P calls should use "Zoom Media Encapsulation" header without any "Zoom SFU Encapsulation". Looking at the traces, it seems that the packet structure is something like: @@ -198,8 +196,6 @@ static void ndpi_search_zoom(struct ndpi_detection_module_struct *ndpi_struct, * an ip address (as string) * some kind of UUID * 4 bytes as 0x00 at the end - - TODO: if everything will work as expected, we can remove stun_zoom cache */ ip_len = ntohl(*(u_int32_t *)&packet->payload[24]); |