From eed47acfc8532486a830404268def82cb0794f77 Mon Sep 17 00:00:00 2001
From: Ivan Nardi <12729895+IvanNardi@users.noreply.github.com>
Date: Sun, 3 Jul 2022 18:51:16 +0200
Subject: Skype_Teams, Mining, SnapchatCall: fix flow category (#1624)

---
 src/lib/protocols/quic.c | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'src/lib/protocols/quic.c')

diff --git a/src/lib/protocols/quic.c b/src/lib/protocols/quic.c
index 61e7f6880..aafeb3397 100644
--- a/src/lib/protocols/quic.c
+++ b/src/lib/protocols/quic.c
@@ -1598,8 +1598,15 @@ static int ndpi_search_quic_extra(struct ndpi_detection_module_struct *ndpi_stru
      (packet->payload[1] == 201 || /* RTCP, Receiver Report */
       packet->payload[1] == 200 || /* RTCP, Sender Report */
       is_valid_rtp_payload_type(packet->payload[1] & 0x7F)) /* RTP */) {
+    ndpi_protocol proto;
+
     NDPI_LOG_DBG(ndpi_struct, "Found RTP/RTCP over QUIC\n");
     ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_SNAPCHAT_CALL, NDPI_PROTOCOL_QUIC, NDPI_CONFIDENCE_DPI);
+    /* In "extra_eval" data path, if we change the classification, we need to update the category, too */
+    proto.master_protocol = NDPI_PROTOCOL_QUIC;
+    proto.app_protocol = NDPI_PROTOCOL_SNAPCHAT_CALL;
+    proto.category = NDPI_PROTOCOL_CATEGORY_UNSPECIFIED;
+    ndpi_fill_protocol_category(ndpi_struct, flow, &proto);
   } else {
     /* Unexpected traffic pattern: we should investigate it... */
     NDPI_LOG_INFO(ndpi_struct, "To investigate...\n");
-- 
cgit v1.2.3