From 6e1341c148195420ffa0faf7c130a4cbcb44ca1f Mon Sep 17 00:00:00 2001 From: emanuele-f Date: Fri, 12 Aug 2016 13:19:42 +0200 Subject: Add STARTTLS detection --- src/lib/protocols/ssl.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'src/lib/protocols/ssl.c') diff --git a/src/lib/protocols/ssl.c b/src/lib/protocols/ssl.c index e730c06c5..4e2ce1bf1 100644 --- a/src/lib/protocols/ssl.c +++ b/src/lib/protocols/ssl.c @@ -64,7 +64,11 @@ static void ndpi_int_ssl_add_connection(struct ndpi_detection_module_struct *ndp u_int16_t dport = ntohs(packet->tcp->dest); if((sport == 465) || (dport == 465)) protocol = NDPI_PROTOCOL_MAIL_SMTPS; - else if((sport == 993) || (dport == 993)) protocol = NDPI_PROTOCOL_MAIL_IMAPS; + else if((sport == 993) || (dport == 993) +#ifdef NDPI_PROTOCOL_MAIL_IMAP + || (flow->l4.tcp.mail_imap_starttls) +#endif + ) protocol = NDPI_PROTOCOL_MAIL_IMAPS; else if((sport == 995) || (dport == 995)) protocol = NDPI_PROTOCOL_MAIL_POPS; } break; -- cgit v1.2.3