diff options
author | mkfsn <p408865@gmail.com> | 2016-11-15 17:59:02 +0800 |
---|---|---|
committer | mkfsn <p408865@gmail.com> | 2016-11-15 17:59:02 +0800 |
commit | d9659617e93034f6f5c28c7b88f5bc5c2fa8367d (patch) | |
tree | 15c589bb5efd425ed985810bc0ef3e433c7023e2 /src/lib/protocols | |
parent | edf0b2fbfea7097c7a189399ff1b326231bf93e5 (diff) |
Add BJNP Protocol
Diffstat (limited to 'src/lib/protocols')
-rw-r--r-- | src/lib/protocols/bjnp.c | 61 |
1 files changed, 61 insertions, 0 deletions
diff --git a/src/lib/protocols/bjnp.c b/src/lib/protocols/bjnp.c new file mode 100644 index 000000000..260bbb9ea --- /dev/null +++ b/src/lib/protocols/bjnp.c @@ -0,0 +1,61 @@ +#include "ndpi_api.h" + +#ifdef NDPI_PROTOCOL_BJNP + + +static void ndpi_int_bjnp_add_connection(struct ndpi_detection_module_struct *ndpi_struct, + struct ndpi_flow_struct *flow, + u_int8_t due_to_correlation) +{ + ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_BJNP, NDPI_PROTOCOL_UNKNOWN); +} + + +static void ndpi_check_bjnp(struct ndpi_detection_module_struct *ndpi_struct, struct ndpi_flow_struct *flow) +{ + struct ndpi_packet_struct *packet = &flow->packet; + u_int32_t payload_len = packet->payload_packet_len; + + if(packet->udp != NULL) { + if(payload_len > 2) { + if(strncmp((const char *)packet->payload, "BJNP", 4) == 0) { + NDPI_LOG(NDPI_PROTOCOL_BJNP, ndpi_struct, NDPI_LOG_DEBUG, "Found bjnp.\n"); + ndpi_int_bjnp_add_connection(ndpi_struct, flow, 0); + return; + } + } + } + + NDPI_LOG(NDPI_PROTOCOL_BJNP, ndpi_struct, NDPI_LOG_DEBUG, "exclude bjnp.\n"); + NDPI_ADD_PROTOCOL_TO_BITMASK(flow->excluded_protocol_bitmask, NDPI_PROTOCOL_BJNP); +} + +void ndpi_search_bjnp(struct ndpi_detection_module_struct *ndpi_struct, struct ndpi_flow_struct *flow) +{ + struct ndpi_packet_struct *packet = &flow->packet; + + NDPI_LOG(NDPI_PROTOCOL_BJNP, ndpi_struct, NDPI_LOG_DEBUG, "bjnp detection...\n"); + + /* skip marked packets */ + if (packet->detected_protocol_stack[0] != NDPI_PROTOCOL_BJNP) { + if (packet->tcp_retransmission == 0) { + ndpi_check_bjnp(ndpi_struct, flow); + } + } +} + + +void init_bjnp_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id, NDPI_PROTOCOL_BITMASK *detection_bitmask) +{ + ndpi_set_bitmask_protocol_detection("BJNP", ndpi_struct, detection_bitmask, *id, + NDPI_PROTOCOL_BJNP, + ndpi_search_bjnp, + NDPI_SELECTION_BITMASK_PROTOCOL_UDP_WITH_PAYLOAD, + SAVE_DETECTION_BITMASK_AS_UNKNOWN, + ADD_TO_DETECTION_BITMASK); + *id += 1; +} + + + +#endif |