vrr/nDPI
2
0
Fork 0
mirror of https://github.com/vel21ripn/nDPI.git synced 2026-05-03 01:10:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

TINC: avoid processing SYN packets (#1676)

Browse source 
Since e6b332aa, we have proper support for detecting client/server
direction. So Tinc dissector is now able to properly initialize the
cache entry only when needed and not anymore at the SYN time; initializing
that entry for **every** SYN packets was a complete waste of resources.

Since 4896dabb, the various `struct ndpi_call_function_struct`
structures are not more separate objects and therefore comparing them
using only their pointers is bogus: this bug was triggered by this
change because `ndpi_str->callback_buffer_size_tcp_no_payload` is now 0.
This commit is contained in:
Ivan Nardi 2022-07-28 12:39:18 +02:00 • committed by GitHub
parent d8d525fff2
commit 172e698bb8
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
185 changed files with 201 additions and 204 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tests/result/WebattackSQLinj.pcap.out
View file

@ -2,7 +2,7 @@ Guessed flow protos: 0
DPI Packets (TCP): 54 (6.00 pkts/flow)
Confidence DPI : 9 (flows)
Num dissector calls: 162 (18.00 diss/flow)
Num dissector calls: 135 (15.00 diss/flow)
HTTP 94 30008 9