diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/ndpi_main.c | 1 | ||||
| -rw-r--r-- | src/lib/protocols/ciscovpn.c | 15 |
2 files changed, 1 insertions, 15 deletions
diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c index 63a5cec89..2d6ce131e 100644 --- a/src/lib/ndpi_main.c +++ b/src/lib/ndpi_main.c @@ -1327,6 +1327,7 @@ static void ndpi_init_protocol_defaults(struct ndpi_detection_module_struct *ndp ndpi_build_default_ports(ports_a, 443, 0, 0, 0, 0) /* TCP */, ndpi_build_default_ports(ports_b, 0, 0, 0, 0, 0) /* UDP */); ndpi_set_proto_subprotocols(ndpi_str, NDPI_PROTOCOL_TLS, + NDPI_PROTOCOL_CISCOVPN, NDPI_PROTOCOL_MATCHED_BY_CONTENT, NDPI_PROTOCOL_NO_MORE_SUBPROTOCOLS); /* NDPI_PROTOCOL_TLS can have (content-matched) subprotocols */ ndpi_set_proto_defaults(ndpi_str, 0 /* encrypted */, NDPI_PROTOCOL_SAFE, NDPI_PROTOCOL_DTLS, diff --git a/src/lib/protocols/ciscovpn.c b/src/lib/protocols/ciscovpn.c index d7fa21d5b..6df915df0 100644 --- a/src/lib/protocols/ciscovpn.c +++ b/src/lib/protocols/ciscovpn.c @@ -68,21 +68,6 @@ void ndpi_search_ciscovpn(struct ndpi_detection_module_struct *ndpi_struct, stru ndpi_int_ciscovpn_add_connection(ndpi_struct, flow); return; } -#if 0 - /* Code disabled as it is too generic and it can lead to false positives */ - else if(((tsport == 443 || tdport == 443) || - (tsport == 80 || tdport == 80)) && - (packet->payload_packet_len >= 5) && - ((packet->payload[0] == 0x17 /* TLS Application Data */ && - packet->payload[1] == 0x03 && packet->payload[2] == 0x03 && /* TLS 1.2 */ - packet->payload[3] == 0x00 && packet->payload[4] == 0x3A /* Length */))) - { - /* TLS signature of Cisco AnyConnect 0X170303003A */ - NDPI_LOG_INFO(ndpi_struct, "found CISCO Anyconnect VPN\n"); - ndpi_int_ciscovpn_add_connection(ndpi_struct, flow); - return; - } -#endif else if(((tsport == 8009 || tdport == 8009) || (tsport == 8008 || tdport == 8008)) && (packet->payload_packet_len >= 5) && |