diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2022-03-08 00:21:51 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-03-08 00:21:51 +0100 |
| commit | 269be6c7ef038d2de377546813fbb2bacf80e510 (patch) | |
| tree | 33119a500bca58ce4694c6223481506587aec648 /src/lib/protocols | |
| parent | f91218360b8bce56dd96fac888c83a6a1c6bdc32 (diff) | |
Some small fixes (#1481)
FTP: if the authentication fails, stop analyzing the flow
WSD: call the initialization routine; the dissector code has never been
triggered
MINING: fix dissection
Diffstat (limited to 'src/lib/protocols')
| -rw-r--r-- | src/lib/protocols/ftp_control.c | 2 | ||||
| -rw-r--r-- | src/lib/protocols/mining.c | 3 |
2 files changed, 4 insertions, 1 deletions
diff --git a/src/lib/protocols/ftp_control.c b/src/lib/protocols/ftp_control.c index 04a5d2e96..6cc5c612a 100644 --- a/src/lib/protocols/ftp_control.c +++ b/src/lib/protocols/ftp_control.c @@ -570,6 +570,7 @@ static int ndpi_ftp_control_check_response(struct ndpi_flow_struct *flow, case '4': case '5': flow->l4.tcp.ftp_imap_pop_smtp.auth_failed = 1; + flow->l4.tcp.ftp_imap_pop_smtp.auth_done = 1; return(1); break; } @@ -636,6 +637,7 @@ static void ndpi_check_ftp_control(struct ndpi_detection_module_struct *ndpi_str #endif if(flow->l4.tcp.ftp_imap_pop_smtp.password[0] == '\0' && + flow->l4.tcp.ftp_imap_pop_smtp.auth_done == 0 && flow->l4.tcp.ftp_imap_pop_smtp.auth_tls == 0) /* TODO: any values on dissecting TLS handshake? */ flow->ftp_control_stage = 0; else diff --git a/src/lib/protocols/mining.c b/src/lib/protocols/mining.c index 7d1f32e67..f9e260689 100644 --- a/src/lib/protocols/mining.c +++ b/src/lib/protocols/mining.c @@ -87,7 +87,8 @@ void ndpi_search_mining_tcp(struct ndpi_detection_module_struct *ndpi_struct, /* Check connection over TCP */ if(packet->tcp && (packet->payload_packet_len > 10)) { - if(packet->tcp->source == htons(8333)) { + if(packet->tcp->source == htons(8333) || + packet->tcp->dest == htons(8333)) { /* Bitcoin |