From de24206adccf2347addc05d6d62b3bf743fef411 Mon Sep 17 00:00:00 2001
From: Ivan Nardi <12729895+IvanNardi@users.noreply.github.com>
Date: Wed, 18 Jan 2023 07:19:44 +0100
Subject: POP3: improve detection (#1856)

---
 src/lib/protocols/mail_pop.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/lib/protocols')

diff --git a/src/lib/protocols/mail_pop.c b/src/lib/protocols/mail_pop.c
index cbcc65a5b..16190fd15 100644
--- a/src/lib/protocols/mail_pop.c
+++ b/src/lib/protocols/mail_pop.c
@@ -206,7 +206,7 @@ void ndpi_search_mail_pop_tcp(struct ndpi_detection_module_struct
       if(flow->l4.tcp.mail_pop_stage > 0) {
 	
 	if((flow->l4.tcp.ftp_imap_pop_smtp.password[0] != '\0')
-	   || (flow->l4.tcp.mail_pop_stage > 3)) {
+	   || (flow->l4.tcp.mail_pop_stage >= 3)) {
 	  ndpi_int_mail_pop_add_connection(ndpi_struct, flow, NDPI_PROTOCOL_MAIL_POP);
 	  if(flow->l4.tcp.ftp_imap_pop_smtp.password[0] == '\0')
 	    popInitExtraPacketProcessing(flow);
-- 
cgit v1.2.3