diff options
| author | lns <matzeton@googlemail.com> | 2023-09-24 23:24:19 +0200 |
|---|---|---|
| committer | lns <matzeton@googlemail.com> | 2023-09-24 23:24:19 +0200 |
| commit | 6eae70e6c17e45534fc3754d8c4e58a7ff0255d8 (patch) | |
| tree | c047d63ec268de2a69aa72b05a96ed4187011adc /src/lib/protocols | |
| parent | 725fcf4852f06e2f54469c2439d13169d5d68d09 (diff) | |
Improed Steam detection by adding Steamdiscover patterns.improved/steam-by-adding-steamdiscover
Signed-off-by: lns <matzeton@googlemail.com>
Diffstat (limited to 'src/lib/protocols')
| -rw-r--r-- | src/lib/protocols/steam.c | 15 |
1 files changed, 14 insertions, 1 deletions
diff --git a/src/lib/protocols/steam.c b/src/lib/protocols/steam.c index 682628bab..60477866d 100644 --- a/src/lib/protocols/steam.c +++ b/src/lib/protocols/steam.c @@ -103,6 +103,18 @@ static void ndpi_check_steam_tcp(struct ndpi_detection_module_struct *ndpi_struc } } +static void ndpi_check_steamdiscover(struct ndpi_detection_module_struct *ndpi_struct, + struct ndpi_flow_struct *flow) +{ + struct ndpi_packet_struct *packet = &ndpi_struct->packet; + + if (ndpi_match_strprefix(packet->payload, packet->payload_packet_len, + "\xff\xff\xff\xff\x21\x4c\x5f\xa0")) + { + ndpi_int_steam_add_connection(ndpi_struct, flow); + } +} + static void ndpi_check_steam_udp1(struct ndpi_detection_module_struct *ndpi_struct, struct ndpi_flow_struct *flow) { struct ndpi_packet_struct *packet = &ndpi_struct->packet; u_int32_t payload_len = packet->payload_packet_len; @@ -262,7 +274,8 @@ static void ndpi_search_steam(struct ndpi_detection_module_struct *ndpi_struct, NDPI_EXCLUDE_PROTO(ndpi_struct, flow); return; } - + + ndpi_check_steamdiscover(ndpi_struct, flow); ndpi_check_steam_udp1(ndpi_struct, flow); if(flow->detected_protocol_stack[0] == NDPI_PROTOCOL_STEAM) |