From 00a360f30a89fd479465db64d7e92e761645c101 Mon Sep 17 00:00:00 2001 From: Luca Deri Date: Tue, 9 Apr 2024 00:01:47 +0200 Subject: Disabled "known proto on non standard port" for FTP_DATA --- src/lib/ndpi_main.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'src/lib') diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c index c2583accc..b0a9107c0 100644 --- a/src/lib/ndpi_main.c +++ b/src/lib/ndpi_main.c @@ -8560,8 +8560,10 @@ static ndpi_protocol ndpi_internal_detection_process_packet(struct ndpi_detectio ntohs(flow->c_port), ntohs(flow->s_port)); if((r == NULL) - || ((r->proto->protoId != ret.app_protocol) && (r->proto->protoId != ret.master_protocol))) - ndpi_set_risk(flow, NDPI_KNOWN_PROTOCOL_ON_NON_STANDARD_PORT,NULL); + || ((r->proto->protoId != ret.app_protocol) && (r->proto->protoId != ret.master_protocol))) { + if(ret.app_protocol != NDPI_PROTOCOL_FTP_DATA) + ndpi_set_risk(flow, NDPI_KNOWN_PROTOCOL_ON_NON_STANDARD_PORT,NULL); + } } } -- cgit v1.2.3