| Commit message (Collapse) | Author | Age | |
|---|---|---|---|
| * | HTTP: fix classification (#1692) | Ivan Nardi | 2022-07-30 |
| If we have a valid HTTP sessions, we should ignore `flow->guessed_protocol_id` field (i.e. classification "by-port") altogheter. The attached trace was classified as "SIP/HTTP" only because the *client* port was 5060... As a general rule, having a classification such as "XXXX/HTTP" is *extremely* suspicious. | |||