From 5c0143ce58c86fc678c5fdc7aae859fbd8a67a9f Mon Sep 17 00:00:00 2001
From: Ivan Nardi <12729895+IvanNardi@users.noreply.github.com>
Date: Sun, 12 Jan 2025 12:49:32 +0100
Subject: HTTP: fix entropy calculation (#2666)

We calculate HTTP entropy according to "Content-type:" header, see
`ndpi_validate_http_content()` on HTTP code
---
 src/lib/ndpi_main.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'src/lib')

diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c
index 33f737bdd..45b8991d1 100644
--- a/src/lib/ndpi_main.c
+++ b/src/lib/ndpi_main.c
@@ -9021,7 +9021,8 @@ static ndpi_protocol ndpi_internal_detection_process_packet(struct ndpi_detectio
      /* The following protocols do their own entropy calculation/classification. */
      ret.proto.app_protocol != NDPI_PROTOCOL_IP_ICMP) {
 
-    if (ret.proto.app_protocol != NDPI_PROTOCOL_HTTP) {
+    if (ret.proto.app_protocol != NDPI_PROTOCOL_HTTP &&
+        ret.proto.master_protocol != NDPI_PROTOCOL_HTTP) {
       flow->entropy = ndpi_entropy(packet->payload, packet->payload_packet_len);
     }
 
-- 
cgit v1.2.3