From 429f5b2fa9751a50b659666acef7b113ee39ddf4 Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Mon, 12 May 2025 11:37:19 +0200 Subject: Improve Ubiquiti device discovery request/response detection. Signed-off-by: Toni Uhlig --- src/lib/protocols/ubntac2.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'src') diff --git a/src/lib/protocols/ubntac2.c b/src/lib/protocols/ubntac2.c index 90e67b972..978587d07 100644 --- a/src/lib/protocols/ubntac2.c +++ b/src/lib/protocols/ubntac2.c @@ -43,8 +43,8 @@ static void ndpi_search_ubntac2(struct ndpi_detection_module_struct *ndpi_struct if(packet->payload_packet_len >= 4 && (packet->udp->source == htons(10001) || packet->udp->dest == htons(10001)) && - packet->payload[0] == 0x02 && - packet->payload[1] == 0x06 && + (ntohs(get_u_int16_t(packet->payload, 0)) == 0x0206 || + ntohs(get_u_int16_t(packet->payload, 0)) == 0x0100 /* discovery request/reply */) && (4 + ntohs(*(u_int16_t *)&packet->payload[2]) == packet->payload_packet_len)) { NDPI_LOG_INFO(ndpi_struct, "UBNT AirControl 2 request\n"); ndpi_int_ubntac2_add_connection(ndpi_struct, flow); -- cgit v1.2.3