From 7ffd31ebc3e6c191d0e82a9987bd110d2820bdb8 Mon Sep 17 00:00:00 2001
From: Ivan Nardi <12729895+IvanNardi@users.noreply.github.com>
Date: Mon, 3 Jul 2023 17:21:46 +0200
Subject: STUN: avoid FacebookVoip false positives (#2029)

Attribute 0xC057 is defined in the Google public implementation of
webrtc (which is used by Google products but also by other applications)
---
 src/lib/protocols/stun.c | 9 ---------
 1 file changed, 9 deletions(-)

(limited to 'src/lib/protocols')

diff --git a/src/lib/protocols/stun.c b/src/lib/protocols/stun.c
index 81e90e94f..3c64fd012 100644
--- a/src/lib/protocols/stun.c
+++ b/src/lib/protocols/stun.c
@@ -498,15 +498,6 @@ static ndpi_int_stun_t ndpi_int_check_stun(struct ndpi_detection_module_struct *
 	  }
 	  break;
 
-        case 0xC057: /* Messeger */
-          if(msg_type == 0x0001) {
-            if((msg_len == 100) || (msg_len == 104)) {
-              *app_proto = NDPI_PROTOCOL_FACEBOOK_VOIP;
-              return(NDPI_IS_STUN);
-            }
-          }
-          break;
-
         case 0x8054: /* Candidate Identifier */
           if((len == 4)
              && ((offset+7) < payload_length)
-- 
cgit v1.2.3