diff options
| author | Luca Deri <deri@ntop.org> | 2021-02-09 21:48:46 +0100 |
|---|---|---|
| committer | Luca Deri <deri@ntop.org> | 2021-02-09 21:48:46 +0100 |
| commit | 0de3d4c37a06b800b740166b83a8ed108fbf76a4 (patch) | |
| tree | 96026c8aa74f244452723f9c4d74622ba6285325 /src | |
| parent | 512f73f3817bbeeea06217d9250887d11446e9bf (diff) | |
Dissection inprovements
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/protocols/ftp_control.c | 2 | ||||
| -rw-r--r-- | src/lib/protocols/irc.c | 3 |
2 files changed, 4 insertions, 1 deletions
diff --git a/src/lib/protocols/ftp_control.c b/src/lib/protocols/ftp_control.c index 15a917365..fa39962fa 100644 --- a/src/lib/protocols/ftp_control.c +++ b/src/lib/protocols/ftp_control.c @@ -591,7 +591,7 @@ static void ndpi_check_ftp_control(struct ndpi_detection_module_struct *ndpi_str } /* Break after 20 packets. */ - if(flow->packet_counter > 20) { + if(flow->packet_counter > 8) { NDPI_EXCLUDE_PROTO(ndpi_struct, flow); return; } diff --git a/src/lib/protocols/irc.c b/src/lib/protocols/irc.c index d8b6766bc..71d739025 100644 --- a/src/lib/protocols/irc.c +++ b/src/lib/protocols/irc.c @@ -439,6 +439,7 @@ void ndpi_search_irc_tcp(struct ndpi_detection_module_struct *ndpi_struct, struc } } +#if 0 if (flow->detected_protocol_stack[0] != NDPI_PROTOCOL_IRC && flow->packet_counter == 2 && (packet->payload_packet_len > 400 && packet->payload_packet_len < 1381)) { for (c1 = 50; c1 < packet->payload_packet_len - 23; c1++) { @@ -468,6 +469,7 @@ void ndpi_search_irc_tcp(struct ndpi_detection_module_struct *ndpi_struct, struc } } } +#endif if (flow->detected_protocol_stack[0] != NDPI_PROTOCOL_IRC && ndpi_search_irc_ssl_detect_ninety_percent_but_very_fast(ndpi_struct, flow) != 0) { @@ -511,6 +513,7 @@ void ndpi_search_irc_tcp(struct ndpi_detection_module_struct *ndpi_struct, struc || (memcmp(packet->payload, "PONG ", 5) == 0) || (memcmp(packet->payload, "PING ", 5) == 0) || (memcmp(packet->payload, "JOIN ", 5) == 0) + || (memcmp(packet->payload, "MODE ", 5) == 0) || (memcmp(packet->payload, "NOTICE ", 7) == 0) || (memcmp(packet->payload, "PRIVMSG ", 8) == 0) || (memcmp(packet->payload, "VERSION ", 8) == 0)) { |