From 11e9fd8cef7a1f70db9f864206a6ac9980ee100e Mon Sep 17 00:00:00 2001 From: Luca Deri Date: Sun, 15 Sep 2019 12:18:24 +0200 Subject: As TLS certificate fingerprint is computed, TLS without certificate protocol has been removed Various improvemenets in detection quality --- example/reader_util.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'example/reader_util.c') diff --git a/example/reader_util.c b/example/reader_util.c index 2564f4ffd..82251e85d 100644 --- a/example/reader_util.c +++ b/example/reader_util.c @@ -1164,8 +1164,8 @@ static struct ndpi_proto packet_processing(struct ndpi_workflow * workflow, if(enough_packets || (flow->detected_protocol.app_protocol != NDPI_PROTOCOL_UNKNOWN)) { if((!enough_packets) && (flow->detected_protocol.master_protocol == NDPI_PROTOCOL_TLS) - && (flow->ndpi_flow->protos.stun_ssl.ssl.ja3_server[0] == '\0')) - ; /* Wait for JA3S certificate */ + && (!flow->ndpi_flow->l4.tcp.tls_srv_cert_fingerprint_processed)) + ; /* Wait for certificate fingerprint */ else { /* New protocol detected or give up */ flow->detection_completed = 1; -- cgit v1.2.3