From ba3bf6c3d97a5a6ad313e78bc20d1f02a509731b Mon Sep 17 00:00:00 2001 From: emanuele-f Date: Tue, 6 Sep 2016 00:44:17 +0200 Subject: Fix facebook certificate recognition --- src/lib/ndpi_content_match.c.inc | 2 +- tests/pcap/facebook.pcap | Bin 0 -> 31495 bytes tests/result/facebook.pcap.out | 4 ++++ 3 files changed, 5 insertions(+), 1 deletion(-) create mode 100644 tests/pcap/facebook.pcap create mode 100644 tests/result/facebook.pcap.out diff --git a/src/lib/ndpi_content_match.c.inc b/src/lib/ndpi_content_match.c.inc index d35b9409a..fc5c35029 100644 --- a/src/lib/ndpi_content_match.c.inc +++ b/src/lib/ndpi_content_match.c.inc @@ -7283,7 +7283,7 @@ ndpi_protocol_match host_match[] = { { ".ebayrtm.com", "eBay", NDPI_SERVICE_EBAY, NDPI_PROTOCOL_ACCEPTABLE }, { ".ebaystratus.com", "eBay", NDPI_SERVICE_EBAY, NDPI_PROTOCOL_ACCEPTABLE }, { ".ebayimg.com", "eBay", NDPI_SERVICE_EBAY, NDPI_PROTOCOL_ACCEPTABLE }, - { ".facebook.com", "Facebook", NDPI_SERVICE_FACEBOOK, NDPI_PROTOCOL_FUN }, + { "facebook.com", "Facebook", NDPI_SERVICE_FACEBOOK, NDPI_PROTOCOL_FUN }, { "fbstatic-a.akamaihd.net", "Facebook", NDPI_SERVICE_FACEBOOK, NDPI_PROTOCOL_FUN }, { ".fbcdn.net", "Facebook", NDPI_SERVICE_FACEBOOK, NDPI_PROTOCOL_FUN }, { "fbcdn-", "Facebook", NDPI_SERVICE_FACEBOOK, NDPI_PROTOCOL_FUN }, /* fbcdn-video-a-akamaihd.net */ diff --git a/tests/pcap/facebook.pcap b/tests/pcap/facebook.pcap new file mode 100644 index 000000000..153d497a3 Binary files /dev/null and b/tests/pcap/facebook.pcap differ diff --git a/tests/result/facebook.pcap.out b/tests/result/facebook.pcap.out new file mode 100644 index 000000000..ad3cbdaad --- /dev/null +++ b/tests/result/facebook.pcap.out @@ -0,0 +1,4 @@ +Facebook 60 30511 2 + + 1 TCP 192.168.43.18:52066 <-> 66.220.156.68:443 [proto: 91.119/SSL.Facebook][19 pkts/5745 bytes][SSL client: facebook.com] + 2 TCP 192.168.43.18:44614 <-> 31.13.86.36:443 [proto: 91.119/SSL.Facebook][41 pkts/24766 bytes][SSL client: www.facebook.com] -- cgit v1.2.3