From 18e03a26ca781490f06bfdbd34628614fcb65ca9 Mon Sep 17 00:00:00 2001 From: Toni Date: Thu, 9 May 2024 15:24:11 +0200 Subject: Add extra entropy checks and more precise(?) analysis. (#2383) Signed-off-by: Toni Uhlig --- src/lib/protocols/http.c | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src/lib/protocols') diff --git a/src/lib/protocols/http.c b/src/lib/protocols/http.c index 8fc82dd67..c73bd47fe 100644 --- a/src/lib/protocols/http.c +++ b/src/lib/protocols/http.c @@ -222,8 +222,12 @@ static void ndpi_validate_http_content(struct ndpi_detection_module_struct *ndpi if(len >= 8 /* 4 chars for \r\n\r\n and at least 4 charts for content guess */) { double_ret += 4; + len -= 4; ndpi_http_check_human_redeable_content(ndpi_struct, flow, double_ret, len); + if (flow->skip_entropy_check == 0) { + flow->entropy = ndpi_entropy(double_ret, len); + } } } -- cgit v1.2.3