From 922a7be897b1bc444668cd880f3f926beff4bb10 Mon Sep 17 00:00:00 2001 From: Luca Deri Date: Tue, 8 Feb 2022 17:23:25 +0100 Subject: Added check to ignore multicast packets marking the as Skype --- src/lib/protocols/skype.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/lib/protocols/skype.c b/src/lib/protocols/skype.c index 71534ab5d..37704b36a 100644 --- a/src/lib/protocols/skype.c +++ b/src/lib/protocols/skype.c @@ -72,7 +72,10 @@ static void ndpi_check_skype(struct ndpi_detection_module_struct *ndpi_struct, s u_int32_t payload_len = packet->payload_packet_len; /* No need to do ntohl() with 0xFFFFFFFF */ - if(packet->iph && (packet->iph->daddr == 0xFFFFFFFF /* 255.255.255.255 */)) { + if(packet->iph + && ((packet->iph->daddr == 0xFFFFFFFF /* 255.255.255.255 */) + || ((ntohl(packet->iph->daddr) & 0xFFFFFF00) == 0xE0000000 /* multicast */) + )) { NDPI_EXCLUDE_PROTO(ndpi_struct, flow); return; } -- cgit v1.2.3