From 81ca06b0c7528a3da65ab0c8fab0b0b88c2f859d Mon Sep 17 00:00:00 2001
From: Ivan Nardi <nardi.ivan@gmail.com>
Date: Wed, 2 Jul 2025 08:27:20 +0200
Subject: websocket: `ndpi_set_detected_protocol()` should be called only once

Fix: b07a910dc
---
 src/lib/protocols/websocket.c | 1 +
 1 file changed, 1 insertion(+)

(limited to 'src/lib/protocols/websocket.c')

diff --git a/src/lib/protocols/websocket.c b/src/lib/protocols/websocket.c
index f100cce5d..fc8a89231 100644
--- a/src/lib/protocols/websocket.c
+++ b/src/lib/protocols/websocket.c
@@ -133,6 +133,7 @@ static void ndpi_search_websocket(struct ndpi_detection_module_struct *ndpi_stru
           ndpi_set_risk(ndpi_struct, flow, NDPI_OBFUSCATED_TRAFFIC,
                         "Obfuscated SSH-in-HTTP-WebSocket traffic");
         }
+        found = 1;
       }
     }
     if (i == packet->parsed_lines)
-- 
cgit v1.2.3