From b833b1f16fca513a36e22720553ccd9679773911 Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Tue, 13 Jul 2021 13:47:17 +0200 Subject: Improved dnscrypt midstream detection. * fixed skype false-positive detection of dnscrypt traffic Signed-off-by: Toni Uhlig --- src/lib/protocols/dnscrypt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/lib/protocols/dnscrypt.c') diff --git a/src/lib/protocols/dnscrypt.c b/src/lib/protocols/dnscrypt.c index 6c89466f1..af147614a 100644 --- a/src/lib/protocols/dnscrypt.c +++ b/src/lib/protocols/dnscrypt.c @@ -38,7 +38,7 @@ void ndpi_search_dnscrypt(struct ndpi_detection_module_struct *ndpi_struct, NDPI_LOG_DBG(ndpi_struct, "search dnscrypt\n"); - if (flow->packet_counter > 2) + if (flow->packet_counter > 3) { NDPI_EXCLUDE_PROTO(ndpi_struct, flow); } -- cgit v1.2.3