aboutsummaryrefslogtreecommitdiff
path: root/src/lib/protocols
diff options
context:
space:
mode:
authorIvan Nardi <12729895+IvanNardi@users.noreply.github.com>2023-04-06 09:34:39 +0200
committerGitHub <noreply@github.com>2023-04-06 09:34:39 +0200
commit06a63dcbaad807f50b28b8012f518b2243639470 (patch)
treec8ed6035be17bacb0b6ce226beb325a1bf859a69 /src/lib/protocols
parent5c28dbbae24718aecd8ca36363059db81199b31b (diff)
MySql: improve detection (#1928)
Add support for flows with "caching_sha2_password" authentication plugin. See #1924
Diffstat (limited to 'src/lib/protocols')
1 files changed, 3 insertions, 1 deletions
diff --git a/src/lib/protocols/mysql.c b/src/lib/protocols/mysql.c
index 58e3c8f51..1a0402ca1 100644
--- a/src/lib/protocols/mysql.c
+++ b/src/lib/protocols/mysql.c
@@ -65,7 +65,9 @@ static void ndpi_search_mysql_tcp(struct ndpi_detection_module_struct *ndpi_stru
}
#else
if(strncmp((const char*)&packet->payload[packet->payload_packet_len-22],
- "mysql_", 6) == 0) {
+ "mysql_", 6) == 0 ||
+ strncmp((const char*)&packet->payload[packet->payload_packet_len-22],
+ "caching_", 8) == 0) {
NDPI_LOG_INFO(ndpi_struct, "found MySQL\n");
ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_MYSQL, NDPI_PROTOCOL_UNKNOWN, NDPI_CONFIDENCE_DPI);
return;
Powered by cgit, Themed by Ted Yin.