From 4e7fa82affc876245ab7f008271a49bde80bcf9f Mon Sep 17 00:00:00 2001 From: Luca Date: Fri, 5 Apr 2019 12:47:58 +0200 Subject: Fixed false positive with FTP_DATA protocol Added coherency in application protol guess by exploiting the host server name Various protocol optimizations --- src/lib/protocols/ftp_data.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src/lib/protocols/ftp_data.c') diff --git a/src/lib/protocols/ftp_data.c b/src/lib/protocols/ftp_data.c index 7c646c363..3aaf6f97e 100644 --- a/src/lib/protocols/ftp_data.c +++ b/src/lib/protocols/ftp_data.c @@ -62,9 +62,11 @@ static int ndpi_match_ftp_data_directory(struct ndpi_detection_module_struct *nd ; } else return 0; + + return 1; } - return 1; + return 0; } static int ndpi_match_file_header(struct ndpi_detection_module_struct *ndpi_struct, struct ndpi_flow_struct *flow) { -- cgit v1.2.3