Skip to content

Commit 2279a01

Browse files
committed
Fix nBPF matches
1 parent 087c558 commit 2279a01

File tree

2 files changed

+3
-1
lines changed

2 files changed

+3
-1
lines changed

src/lib/ndpi_main.c

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9965,6 +9965,8 @@ static ndpi_protocol ndpi_internal_detection_process_packet(struct ndpi_detectio
99659965
ndpi_fill_protocol_category(ndpi_str, flow, &ret);
99669966
proto_stack_update(&flow->protocol_stack, ret.proto.master_protocol, ret.proto.app_protocol);
99679967
flow->confidence = NDPI_CONFIDENCE_NBPF;
9968+
/* Reason: nBPF match */
9969+
internal_giveup(ndpi_str, flow, &ret);
99689970

99699971
return(ret);
99709972
}

tests/cfgs/default/result/h323-overflow.pcap.out

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,4 +26,4 @@ Acceptable 1 58 1
2626

2727
Unspecified 1 58 1
2828

29-
1 TCP 192.168.1.1:31337 -> 192.168.1.2:80 [proto: 458/HomeRouter][Stack: HomeRouter][IP: 0/Unknown][ClearText][Confidence: nBPF][FPC: 0/Unknown, Confidence: Unknown][DPI packets: 1][Breed: Acceptable][1 pkts/58 bytes -> 0 pkts/0 bytes][Goodput ratio: 7/0][< 1 sec][Plen Bins: 100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
29+
1 TCP 192.168.1.1:31337 -> 192.168.1.2:80 [proto: 458/HomeRouter][Stack: HomeRouter][IP: 0/Unknown][ClearText][Confidence: nBPF][FPC: 0/Unknown, Confidence: Unknown][DPI packets: 1][Breed: Acceptable][1 pkts/58 bytes -> 0 pkts/0 bytes][Goodput ratio: 7/0][< 1 sec][Risk: ** Unidirectional Traffic **][Risk Score: 10][Risk Info: No server to client traffic][Plen Bins: 100,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]

0 commit comments

Comments
 (0)