From d8d525fff2dc34db62de2598767046de813e4f0d Mon Sep 17 00:00:00 2001 From: Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> Date: Wed, 27 Jul 2022 11:46:45 +0200 Subject: Update the protocol bitmask for some protocols (#1675) Tcp retransmissions should be ignored. Remove some unused protocol bitmasks. Update script to download Whatsapp IP list. --- src/lib/ndpi_main.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'src/lib/ndpi_main.c') diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c index 5f6ff9aa5..9337d003f 100644 --- a/src/lib/ndpi_main.c +++ b/src/lib/ndpi_main.c @@ -6383,8 +6383,10 @@ ndpi_protocol ndpi_detection_process_packet(struct ndpi_detection_module_struct flow->tree_risk_checked = 1; } - /* It is common to not trigger any dissectors for pure TCP ACK packets */ - if(num_calls == 0 && packet->payload_packet_len != 0) + /* It is common to don't trigger any dissectors for pure TCP ACKs + and for for retransmissions */ + if(num_calls == 0 && + (packet->tcp_retransmission == 0 && packet->payload_packet_len != 0)) flow->fail_with_unknown = 1; flow->num_dissector_calls += num_calls; -- cgit v1.2.3