diff options
| author | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2024-05-28 14:07:48 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-05-28 14:07:48 +0200 |
| commit | 25f8964a235a6da1f3b4ebb5f883640a039ece79 (patch) | |
| tree | f3a24bd94ca0965c1c2b9d699aabee02750d2f4b /src/lib/protocols | |
| parent | abce6d4023c2b76f23e75deff446121687abe5d9 (diff) | |
CiscoVPN: we detect it only over UDP (#2454)
The original code handled also TCP/TLS, but it was removed in 6fc29b3ae
Diffstat (limited to 'src/lib/protocols')
| -rw-r--r-- | src/lib/protocols/ciscovpn.c | 9 |
1 files changed, 3 insertions, 6 deletions
diff --git a/src/lib/protocols/ciscovpn.c b/src/lib/protocols/ciscovpn.c index 792d060b1..b8bf8d09b 100644 --- a/src/lib/protocols/ciscovpn.c +++ b/src/lib/protocols/ciscovpn.c @@ -39,14 +39,11 @@ static void ndpi_int_ciscovpn_add_connection(struct ndpi_detection_module_struct static void ndpi_search_ciscovpn(struct ndpi_detection_module_struct *ndpi_struct, struct ndpi_flow_struct *flow) { struct ndpi_packet_struct *packet = &ndpi_struct->packet; - u_int16_t udport = 0, usport = 0; + u_int16_t udport, usport; NDPI_LOG_DBG(ndpi_struct, "search CISCOVPN\n"); - if(packet->udp != NULL) { - usport = ntohs(packet->udp->source), udport = ntohs(packet->udp->dest); - NDPI_LOG_DBG2(ndpi_struct, "calculated CISCOVPN over udp ports\n"); - } + usport = ntohs(packet->udp->source), udport = ntohs(packet->udp->dest); if((usport == 10000 && udport == 10000)) { if((packet->payload_packet_len >= 4) && @@ -73,7 +70,7 @@ void init_ciscovpn_dissector(struct ndpi_detection_module_struct *ndpi_struct, u ndpi_set_bitmask_protocol_detection("CiscoVPN", ndpi_struct, *id, NDPI_PROTOCOL_CISCOVPN, ndpi_search_ciscovpn, - NDPI_SELECTION_BITMASK_PROTOCOL_V4_V6_TCP_OR_UDP_WITH_PAYLOAD_WITHOUT_RETRANSMISSION, + NDPI_SELECTION_BITMASK_PROTOCOL_V4_V6_UDP_WITH_PAYLOAD, SAVE_DETECTION_BITMASK_AS_UNKNOWN, ADD_TO_DETECTION_BITMASK); *id += 1; |