From fd2b524dfb8842a575980d9280862eb6b82e1d7c Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Tue, 6 Jul 2021 19:59:56 +0200 Subject: Improved RTSP detection the second. (#1232) * RTSP is no subprotocol of HTTP (most of the time) * detection patterns should stay in rtsp.c * set detected HTTP protocol only if at least a valid HTTP method detected Signed-off-by: Toni Uhlig --- src/lib/protocols/rtsp.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'src/lib/protocols/rtsp.c') diff --git a/src/lib/protocols/rtsp.c b/src/lib/protocols/rtsp.c index 435d09db5..033c5c324 100644 --- a/src/lib/protocols/rtsp.c +++ b/src/lib/protocols/rtsp.c @@ -47,8 +47,11 @@ void ndpi_search_rtsp_tcp_udp(struct ndpi_detection_module_struct NDPI_LOG_DBG(ndpi_struct, "search RTSP\n"); - if (flow->detected_protocol_stack[0] == NDPI_PROTOCOL_HTTP && - packet->parsed_lines > 0 && + if (packet->parsed_lines == 0) + { + ndpi_parse_packet_line_info(ndpi_struct, flow); + } + if (packet->parsed_lines > 0 && LINE_STARTS(packet->line[0], "SETUP rtsp://") != 0 && LINE_ENDS(packet->line[0], "RTSP/1.0") != 0) { -- cgit v1.2.3