diff options
author | Nardi Ivan <nardi.ivan@gmail.com> | 2022-07-18 16:31:32 +0200 |
---|---|---|
committer | Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> | 2022-07-20 16:13:55 +0200 |
commit | e1edb08f06c0ed153167cfe0f43a17247d3b0c2c (patch) | |
tree | ad07d3f6d9600fda321c6a8d2875b32070b29e94 /tests | |
parent | 5702c6fb0827042a16ce2fc61efa18d35ad4c3da (diff) |
SKYPE: fix detection over UDP
Commit ba6a48c9 is completely bogus: we can't set extra dissection
without having set a proper classification.
The idea behind that commit seems to be that we need to look for 2
(consecutives?) packets with the same crc/pattern: try to implement this
logic in a saner way.
Diffstat (limited to 'tests')
-rw-r--r-- | tests/result/dnscrypt_skype_false_positive.pcapng.out | 2 | ||||
-rw-r--r-- | tests/result/skype_udp.pcap.out | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/tests/result/dnscrypt_skype_false_positive.pcapng.out b/tests/result/dnscrypt_skype_false_positive.pcapng.out index 394f29792..97e47edca 100644 --- a/tests/result/dnscrypt_skype_false_positive.pcapng.out +++ b/tests/result/dnscrypt_skype_false_positive.pcapng.out @@ -1,6 +1,6 @@ Guessed flow protos: 0 -DPI Packets (UDP): 4 (4.00 pkts/flow) +DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) Num dissector calls: 118 (118.00 diss/flow) diff --git a/tests/result/skype_udp.pcap.out b/tests/result/skype_udp.pcap.out index c3971d04d..6016d74f0 100644 --- a/tests/result/skype_udp.pcap.out +++ b/tests/result/skype_udp.pcap.out @@ -2,7 +2,7 @@ Guessed flow protos: 0 DPI Packets (UDP): 2 (2.00 pkts/flow) Confidence DPI : 1 (flows) -Num dissector calls: 99 (99.00 diss/flow) +Num dissector calls: 117 (117.00 diss/flow) Skype_Teams 5 339 1 |