From 31d23aee5662c8a0b69770cf96960c1db68e647c Mon Sep 17 00:00:00 2001
From: Ivan Nardi <12729895+IvanNardi@users.noreply.github.com>
Date: Wed, 10 May 2023 12:50:24 +0200
Subject: All protocols should be excluded sooner or later (#1969)

For a lot of protocols, reduce the number of packets after which the
protocols dissector gives up.
The values are quite arbitary, tring to not impact on classification
---
 src/lib/protocols/rtcp.c | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'src/lib/protocols/rtcp.c')

diff --git a/src/lib/protocols/rtcp.c b/src/lib/protocols/rtcp.c
index e79738fd4..daa6c986f 100644
--- a/src/lib/protocols/rtcp.c
+++ b/src/lib/protocols/rtcp.c
@@ -37,6 +37,9 @@ static void ndpi_search_rtcp(struct ndpi_detection_module_struct *ndpi_struct,
       NDPI_LOG_INFO(ndpi_struct, "found rtcp\n");
       ndpi_int_rtcp_add_connection(ndpi_struct, flow);
     }
+
+    if(flow->packet_counter > 3)
+      NDPI_EXCLUDE_PROTO(ndpi_struct, flow);
   } else if(packet->udp != NULL) {
     /* Let's check first the RTCP packet length */
     u_int16_t len, offset = 0, rtcp_section_len;
-- 
cgit v1.2.3