From d886a6107fd05a9e41de8ec3414cb4b353bda10e Mon Sep 17 00:00:00 2001 From: Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> Date: Tue, 2 Jan 2024 11:22:43 +0100 Subject: Teamviewer: varius fixes (#2228) We already have a generic (and up to date) logic to handle ip addresses: remove that stale list. Teamviewer uses TCP and UDP, both; we can't access `flow->l4.udp`. According to a comment, we set the flow risk `NDPI_DESKTOP_OR_FILE_SHARING_SESSION` only for the UDP flows. --- src/include/ndpi_typedefs.h | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) (limited to 'src/include/ndpi_typedefs.h') diff --git a/src/include/ndpi_typedefs.h b/src/include/ndpi_typedefs.h index af13a8fa8..792aea9ee 100644 --- a/src/include/ndpi_typedefs.h +++ b/src/include/ndpi_typedefs.h @@ -849,9 +849,6 @@ struct ndpi_flow_tcp_struct { /* NDPI_PROTOCOL_LOTUS_NOTES */ u_int8_t lotus_notes_packet_id; - /* NDPI_PROTOCOL_TEAMVIEWER */ - u_int8_t teamviewer_stage; - /* NDPI_PROTOCOL_ZMQ */ u_int8_t prev_zmq_pkt_len; u_char prev_zmq_pkt[10]; @@ -892,9 +889,6 @@ struct ndpi_flow_udp_struct { /* NDPI_PROTOCOL_SKYPE */ u_int8_t skype_crc[4]; - /* NDPI_PROTOCOL_TEAMVIEWER */ - u_int8_t teamviewer_stage; - /* NDPI_PROTOCOL_EAQ */ u_int8_t eaq_pkt_id; u_int32_t eaq_sequence; @@ -1455,6 +1449,8 @@ struct ndpi_flow_struct { /* NDPI_PROTOCOL_OOKLA */ u_int8_t ookla_stage : 1; + /* NDPI_PROTOCOL_TEAMVIEWER */ + u_int8_t teamviewer_stage : 3; /* NDPI_PROTOCOL_OPENVPN */ u_int8_t ovpn_session_id[2][8]; -- cgit v1.2.3