Get rid of Apache Cassandra false positives (#2159)

* Rewrite Apache Cassandra dissector

* Replace memcmp with strncmp

* Add payload length check

* Update Cassandra dissector

* Update test results

---------

Co-authored-by: 0xA50C1A1 <mage.wizard88@gmail.com>
This commit is contained in:
Vladimir Gavrilov 2023-11-21 18:56:01 +03:00 committed by GitHub
parent ae6e6d61f0
commit 35abafec4f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
61 changed files with 105 additions and 158 deletions

View file

@ -5,7 +5,7 @@ DPI Packets (UDP): 23 (1.35 pkts/flow)
DPI Packets (other): 2 (1.00 pkts/flow)
Confidence Match by port : 2 (flows)
Confidence DPI : 31 (flows)
Num dissector calls: 650 (19.70 diss/flow)
Num dissector calls: 653 (19.79 diss/flow)
LRU cache ookla: 0/0/0 (insert/search/found)
LRU cache bittorrent: 0/6/0 (insert/search/found)
LRU cache zoom: 7/0/0 (insert/search/found)