From 5a018e0bc065764c3ea7976cb0fa1a2ad711c098 Mon Sep 17 00:00:00 2001
From: Luca Deri <deri@ntop.org>
Date: Mon, 15 Jul 2019 00:19:45 +0200
Subject: Added Line protocol dissection Add fix for discarding STUN over TCP
 flows

---
 src/lib/protocols/stun.c | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'src/lib/protocols/stun.c')

diff --git a/src/lib/protocols/stun.c b/src/lib/protocols/stun.c
index 500251a25..d4a122926 100644
--- a/src/lib/protocols/stun.c
+++ b/src/lib/protocols/stun.c
@@ -55,6 +55,9 @@ static ndpi_int_stun_t ndpi_int_check_stun(struct ndpi_detection_module_struct *
   struct stun_packet_header *h = (struct stun_packet_header*)payload;
   u_int8_t can_this_be_whatsapp_voice = 1;
 
+  /* STUN over TCP does not look good */
+  if(flow->packet.tcp) return(NDPI_IS_NOT_STUN);
+  
   flow->protos.stun_ssl.stun.num_processed_pkts++;
 
   if(payload_length < sizeof(struct stun_packet_header)) {
-- 
cgit v1.2.3