From 76ac551ed385ad6e0e346b05b5c94dd7a00e693b Mon Sep 17 00:00:00 2001 From: Luca Deri Date: Wed, 10 Feb 2021 17:55:07 +0100 Subject: Improved FTP_CONTROL detection --- src/lib/protocols/ftp_control.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'src') diff --git a/src/lib/protocols/ftp_control.c b/src/lib/protocols/ftp_control.c index fa39962fa..7a644f6b8 100644 --- a/src/lib/protocols/ftp_control.c +++ b/src/lib/protocols/ftp_control.c @@ -590,7 +590,7 @@ static void ndpi_check_ftp_control(struct ndpi_detection_module_struct *ndpi_str return; } - /* Break after 20 packets. */ + /* Break after 8 packets. */ if(flow->packet_counter > 8) { NDPI_EXCLUDE_PROTO(ndpi_struct, flow); return; @@ -666,7 +666,7 @@ void init_ftp_control_dissector(struct ndpi_detection_module_struct *ndpi_struct ndpi_set_bitmask_protocol_detection("FTP_CONTROL", ndpi_struct, detection_bitmask, *id, NDPI_PROTOCOL_FTP_CONTROL, ndpi_search_ftp_control, - NDPI_SELECTION_BITMASK_PROTOCOL_V4_V6_TCP_WITHOUT_RETRANSMISSION, + NDPI_SELECTION_BITMASK_PROTOCOL_V4_V6_TCP_WITH_PAYLOAD_WITHOUT_RETRANSMISSION, SAVE_DETECTION_BITMASK_AS_UNKNOWN, ADD_TO_DETECTION_BITMASK); -- cgit v1.2.3