diff options
| author | Campus <campus@ntop.org> | 2016-09-05 00:49:48 +0200 |
|---|---|---|
| committer | Campus <campus@ntop.org> | 2016-09-05 00:49:48 +0200 |
| commit | 7300e88cdb9d22c33e276862e29b1990b394a0c5 (patch) | |
| tree | d17a364822ac35cd2c0f8e9f02061c95708d6774 /src | |
| parent | 7364fcc7dfdff86fd7e5225f2ff2eda9d14646ab (diff) | |
fixed h323 dissector
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/protocols/h323.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/lib/protocols/h323.c b/src/lib/protocols/h323.c index 7a94dabd5..31d578455 100644 --- a/src/lib/protocols/h323.c +++ b/src/lib/protocols/h323.c @@ -64,7 +64,7 @@ void ndpi_search_h323(struct ndpi_detection_module_struct *ndpi_struct, struct n sport = ntohs(packet->udp->source), dport = ntohs(packet->udp->dest); NDPI_LOG(NDPI_PROTOCOL_H323, ndpi_struct, NDPI_LOG_DEBUG, "calculated dport over udp.\n"); - if(packet->payload_packet_len >= 5 && packet->payload[0] == 0x80 && packet->payload[1] == 0x08 && + if(packet->payload_packet_len >= 6 && packet->payload[0] == 0x80 && packet->payload[1] == 0x08 && (packet->payload[2] == 0xe7 || packet->payload[2] == 0x26) && packet->payload[4] == 0x00 && packet->payload[5] == 0x00) { @@ -81,7 +81,7 @@ void ndpi_search_h323(struct ndpi_detection_module_struct *ndpi_struct, struct n ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_H323, NDPI_PROTOCOL_UNKNOWN); return; } - else if(packet->payload_packet_len >= 20 || packet->payload_packet_len <= 117) + else if(packet->payload_packet_len >= 20 && packet->payload_packet_len <= 117) { NDPI_LOG(NDPI_PROTOCOL_H323, ndpi_struct, NDPI_LOG_DEBUG, "found H323 broadcast.\n"); ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_H323, NDPI_PROTOCOL_UNKNOWN); |