From 704920414ac12467d048bddf44e7ecf76936e90c Mon Sep 17 00:00:00 2001 From: Toni Date: Tue, 10 May 2022 11:10:04 +0200 Subject: Improved Xiaomi HTTP detection. (#1546) * Merged Xiaomi pcap files Signed-off-by: lns --- src/lib/protocols/http.c | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'src') diff --git a/src/lib/protocols/http.c b/src/lib/protocols/http.c index 8f7f1c262..4b66a1da6 100644 --- a/src/lib/protocols/http.c +++ b/src/lib/protocols/http.c @@ -413,6 +413,12 @@ static void ndpi_http_parse_subprotocol(struct ndpi_detection_module_struct *ndp ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_OOKLA, NDPI_PROTOCOL_HTTP, NDPI_CONFIDENCE_DPI); } } + + if (flow->http.url != NULL && + strstr(flow->http.url, "micloud.xiaomi.net") != NULL) + { + ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_XIAOMI, NDPI_PROTOCOL_HTTP, NDPI_CONFIDENCE_DPI); + } } } -- cgit v1.2.3