From e4453938d5329daaa0ea682bba55d354759c077e Mon Sep 17 00:00:00 2001 From: Toni Date: Tue, 13 Jul 2021 15:10:18 +0200 Subject: Improved dnscrypt midstream detection. (#1241) * fixed skype false-positive detection of dnscrypt traffic Signed-off-by: Toni Uhlig --- src/lib/protocols/dnscrypt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/lib/protocols/dnscrypt.c') diff --git a/src/lib/protocols/dnscrypt.c b/src/lib/protocols/dnscrypt.c index 6c89466f1..af147614a 100644 --- a/src/lib/protocols/dnscrypt.c +++ b/src/lib/protocols/dnscrypt.c @@ -38,7 +38,7 @@ void ndpi_search_dnscrypt(struct ndpi_detection_module_struct *ndpi_struct, NDPI_LOG_DBG(ndpi_struct, "search dnscrypt\n"); - if (flow->packet_counter > 2) + if (flow->packet_counter > 3) { NDPI_EXCLUDE_PROTO(ndpi_struct, flow); } -- cgit v1.2.3