From 72efa329db996a45f394457238b218252bae3e00 Mon Sep 17 00:00:00 2001
From: Luca Deri <deri@ntop.org>
Date: Tue, 31 May 2016 12:20:25 +0200
Subject: Enhanced fragments support in ndpiReader Improved RX protocol
 dissection and removed port guess as it caused false positives.

---
 example/ndpi_util.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'example/ndpi_util.c')

diff --git a/example/ndpi_util.c b/example/ndpi_util.c
index 939b3efd0..57a6505e9 100644
--- a/example/ndpi_util.c
+++ b/example/ndpi_util.c
@@ -736,7 +736,7 @@ void ndpi_workflow_process_packet (struct ndpi_workflow * workflow,
       goto iph_check;
     }
 
-    if((frag_off & 0x3FFF) != 0) {
+    if((frag_off & 0x1FFF) != 0) {
       static u_int8_t ipv4_frags_warning_used = 0;
       workflow->stats.fragmented_count++;
 
-- 
cgit v1.2.3