diff options
Diffstat (limited to 'src/lib/protocols/ciscovpn.c')
| -rw-r--r-- | src/lib/protocols/ciscovpn.c | 21 |
1 files changed, 18 insertions, 3 deletions
diff --git a/src/lib/protocols/ciscovpn.c b/src/lib/protocols/ciscovpn.c index eee7c4eb8..02e22bf2c 100644 --- a/src/lib/protocols/ciscovpn.c +++ b/src/lib/protocols/ciscovpn.c @@ -95,9 +95,24 @@ void ndpi_search_ciscovpn(struct ndpi_detection_module_struct *ndpi_struct, stru /* This is a good query fe577e2b */ NDPI_LOG_INFO(ndpi_struct, "found CISCOVPN\n"); ndpi_int_ciscovpn_add_connection(ndpi_struct, flow); - } else { - NDPI_EXCLUDE_PROTO(ndpi_struct, flow); - } + } + else if( + ( + (usport == 443 || udport == 443) + && + (packet->payload_packet_len >= 5) && + (packet->payload[0] == 0x17 && + packet->payload[1] == 0x01 && + packet->payload[2] == 0x00 && + packet->payload[3] == 0x00 && + packet->payload[4] == 0x01) + ) + ) + { + NDPI_LOG_INFO(ndpi_struct, "found CISCOVPN\n"); + ndpi_int_ciscovpn_add_connection(ndpi_struct, flow); + return; + } } |