From 78ca74cf450b76fe4a6116a39ca0dc3d4a0c9582 Mon Sep 17 00:00:00 2001 From: Ivan Nardi <12729895+IvanNardi@users.noreply.github.com> Date: Thu, 27 Mar 2025 14:54:49 +0100 Subject: TLS: avoid exporting TLS heuristic fingerprint as metadata (#2783) --- src/lib/protocols/tls.c | 13 ------------- 1 file changed, 13 deletions(-) (limited to 'src/lib/protocols/tls.c') diff --git a/src/lib/protocols/tls.c b/src/lib/protocols/tls.c index b61387a3c..c892c8961 100644 --- a/src/lib/protocols/tls.c +++ b/src/lib/protocols/tls.c @@ -438,19 +438,6 @@ static int tls_obfuscated_heur_search(struct ndpi_detection_module_struct* ndpi_ if(check_set(ndpi_struct, set)) { /* Heuristic match */ - /* Export the matching set as metadata */ - flow->tls_quic.obfuscated_heur_matching_set = ndpi_calloc(1, sizeof(struct ndpi_tls_obfuscated_heuristic_matching_set)); - if(flow->tls_quic.obfuscated_heur_matching_set) { - flow->tls_quic.obfuscated_heur_matching_set->bytes[0] = set->bytes[0]; - flow->tls_quic.obfuscated_heur_matching_set->bytes[1] = set->bytes[1]; - flow->tls_quic.obfuscated_heur_matching_set->bytes[2] = set->bytes[2]; - flow->tls_quic.obfuscated_heur_matching_set->bytes[3] = set->bytes[3]; - flow->tls_quic.obfuscated_heur_matching_set->pkts[0] = set->pkts[0]; - flow->tls_quic.obfuscated_heur_matching_set->pkts[1] = set->pkts[1]; - flow->tls_quic.obfuscated_heur_matching_set->pkts[2] = set->pkts[2]; - flow->tls_quic.obfuscated_heur_matching_set->pkts[3] = set->pkts[3]; - } - return 2; /* Found */ } else { /* Close this set and open a new one... */ -- cgit v1.2.3