From 20b438725f30deb9fc4ce10da0eeb97aa159f11b Mon Sep 17 00:00:00 2001
From: 0xA50C1A1 <mage.wizard.88@gmail.com>
Date: Wed, 20 Mar 2024 12:22:37 +0300
Subject: [PATCH] Add more signatures

---
 src/lib/protocols/tencent_games.c             |   8 ++++++++
 tests/cfgs/default/pcap/tencent_games.pcap    | Bin 1641 -> 2776 bytes
 .../default/result/tencent_games.pcap.out     |  17 +++++++++--------
 3 files changed, 17 insertions(+), 8 deletions(-)

diff --git a/src/lib/protocols/tencent_games.c b/src/lib/protocols/tencent_games.c
index 2348e799612..e10106d57db 100644
--- a/src/lib/protocols/tencent_games.c
+++ b/src/lib/protocols/tencent_games.c
@@ -65,6 +65,14 @@ static void ndpi_search_tencent_games(struct ndpi_detection_module_struct *ndpi_
       ndpi_int_tencent_games_add_connection(ndpi_struct, flow);
       return;
     }
+
+    if (get_u_int16_t(packet->payload, 0) == 0 &&
+        ntohs(get_u_int16_t(packet->payload, 2)) == (u_int16_t)(packet->payload_packet_len-4) &&
+        ntohs(get_u_int16_t(packet->payload, 4)) == 0x7801)
+    {
+      ndpi_int_tencent_games_add_connection(ndpi_struct, flow);
+      return;
+    }
   }
 
   NDPI_EXCLUDE_PROTO(ndpi_struct, flow);
diff --git a/tests/cfgs/default/pcap/tencent_games.pcap b/tests/cfgs/default/pcap/tencent_games.pcap
index a063ade4eb92761152d7d9978cb66069a9c59c94..1a14c48fd3c3cf25abadb2fdd57819135f912a09 100644
GIT binary patch
delta 1151
zcmaFKb3=4PCR_c(ykDtT!q^#X7#P6V6-e3EFfcf<<t1=kU(2}2uH@wMf`H%q8uhOL
zl`t$|`u~6T4+aJ%7PS{FOdMPS%a(M4#2J~HIYDOWW^phW0Qn#cGz&;M0L{vN0Wt?<
zUcm3=1?8{HUjxm%S|B7)&#*KRVi-_A1IU1XKm#;@nn4(7fQD@?*fGUuj=2gn<V}D8
zLj&h62C%+8fm{q#j0|Ax%D`A<TL;pYtAJIX1Vcm41fT^B^^ATMjHZF7vkn^w{F!dM
z+wHx3p5>G|OiM4!K6v7q)r=d{w7aJWe0o3iEz8RVvTrle-S{IuY=37f6T$fQ#dc-Y
z7O@HMjGq-V#_}ZJJzv1!b*eNlX+eW!o7nW!bP<C#^PLUS$CmO3r^%dOetv%c<0r{4
z{<iCQs+k?U|M}|TCWFWIQ#?gwv@XPWWOrP13R=`^xT$Folll4ge8+n4ZaC^%B7H<O
zwd(k@gG<AeYZdjD*`>-#dwhF-%eR;-{7&Lc(@M36xy^GT^m~mpREqZ`wg`KzDcUEP
z`#o*_%A6zb*9X^fJv4e!G*|3!!}_0LMX6Js_CzYS3iX74ICHFA|K_h(D)rZem+co=
z|8<_p9OujYGd{Aa$1krtqPny2bZolf6eFjp)3TckU-y5_{V#I#)E>>y)Vzq7e^Yz!
zDL$8d9d&fg8<XonQu-H+rrf&Gr%~~bxo_vBy`V@;58^_JL})7bfR+m0?5l4yR1Xl~
z|NoN%5{u>+xfpH&V-bXbv3S$A9u$i?2T)_tP#qlmz*xLK3lxitYbzL2gHGq&Q4skn
ze(hXGyP?5uomJ~Lt(+1XtC-W#e9TO5S#a;7pWovY<Xl&Mc=YQ|@w?y5Z{KbIRxdU;
zviaCivEalW=_z@$ozpKZ*e)UV*1W`xW&S7Sh(&C<hCO-ryO|=qS0piATHU>yUt42d
z{J#3?+N!u*o_ls5h1nhoyy1<JuiaQx!ls?W$&z;Mn#$t)duHoe)P2+VchNqs`pfE<
z7n64Gn<e={?kh*bNu6^!x6`*ZIkQzPdc33Fy?ntQ>&eWHZFl3ogg>jFI(5SB9HA|N
z5=#`CXCJouS!(qlhVOylnRg8$>2u$REDqVa=WWy}uGE|AbC+|-e2QGxR>d!x8YCJQ
zdvN-k#NyYD9M_6eHwx&gM{EiD<Ybt9se0F0ON$nz8G>G(+FhIVHnFwDUc2T~^2{O9
zJ!7fb{_-8RGgD8yay5x6iagIcUcPx<UY$s^QGsj9+{vDH`ELrI7v4|YzSZ_dULN1S
z@ag~BDm0TBzNqrll{LK2+xlyw_55qf+cmD69w{gcjDLN%^b3o;;$2RT$al+YVk<-@
f^<Ls~J=ribEAq6;@*v6AA0DXe`p;Z#byE)j&E5Dd

delta 7
Ocmca1`jTfuCK~__5(5GN

diff --git a/tests/cfgs/default/result/tencent_games.pcap.out b/tests/cfgs/default/result/tencent_games.pcap.out
index 4406ed8e594..67eeeb314e6 100644
--- a/tests/cfgs/default/result/tencent_games.pcap.out
+++ b/tests/cfgs/default/result/tencent_games.pcap.out
@@ -1,6 +1,6 @@
-DPI Packets (TCP):	8	(4.00 pkts/flow)
-Confidence DPI              : 2 (flows)
-Num dissector calls: 288 (144.00 diss/flow)
+DPI Packets (TCP):	12	(4.00 pkts/flow)
+Confidence DPI              : 3 (flows)
+Num dissector calls: 432 (144.00 diss/flow)
 LRU cache ookla:      0/0/0 (insert/search/found)
 LRU cache bittorrent: 0/0/0 (insert/search/found)
 LRU cache zoom:       0/0/0 (insert/search/found)
@@ -18,12 +18,13 @@ Patricia risk mask:   0/0 (search/found)
 Patricia risk mask IPv6: 0/0 (search/found)
 Patricia risk:        0/0 (search/found)
 Patricia risk IPv6:   0/0 (search/found)
-Patricia protocols:   2/2 (search/found)
+Patricia protocols:   3/3 (search/found)
 Patricia protocols IPv6: 0/0 (search/found)
 
-TencentGames	16	1361	2
+TencentGames	22	2400	3
 
-Fun                             16 1361          2            
+Fun                             22 2400          3            
 
-	1	TCP 10.215.173.1:43300 <-> 43.130.19.227:65010 [proto: 395/TencentGames][IP: 285/Tencent][ClearText][Confidence: DPI][DPI packets: 4][cat: Game/8][5 pkts/413 bytes <-> 5 pkts/405 bytes][Goodput ratio: 47/49][0.61 sec][bytes ratio: 0.010 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 4/4 103/104 200/200 95/96][Pkt Len c2s/s2c min/avg/max/stddev: 40/40 83/81 157/173 46/52][PLAIN TEXT (9089499565149320430)][Plen Bins: 0,0,50,25,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
-	2	TCP 10.215.173.1:46658 <-> 162.62.97.166:8085 [proto: 395/TencentGames][IP: 285/Tencent][ClearText][Confidence: DPI][DPI packets: 4][cat: Game/8][3 pkts/290 bytes <-> 3 pkts/253 bytes][Goodput ratio: 52/49][0.17 sec][bytes ratio: 0.068 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 7/8 51/40 95/71 44/32][Pkt Len c2s/s2c min/avg/max/stddev: 40/40 97/84 190/165 66/57][PLAIN TEXT (gcloud)][Plen Bins: 0,0,0,50,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	1	TCP 10.215.173.1:42864 <-> 162.62.116.201:20731 [proto: 395/TencentGames][IP: 285/Tencent][ClearText][Confidence: DPI][DPI packets: 4][cat: Game/8][4 pkts/951 bytes <-> 2 pkts/88 bytes][Goodput ratio: 81/0][0.23 sec][bytes ratio: 0.831 (Upload)][IAT c2s/s2c min/avg/max/stddev: 32/124 75/124 124/124 38/0][Pkt Len c2s/s2c min/avg/max/stddev: 40/40 238/44 473/48 191/4][Plen Bins: 0,0,0,0,0,0,0,0,0,0,50,0,0,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	2	TCP 10.215.173.1:43300 <-> 43.130.19.227:65010 [proto: 395/TencentGames][IP: 285/Tencent][ClearText][Confidence: DPI][DPI packets: 4][cat: Game/8][5 pkts/413 bytes <-> 5 pkts/405 bytes][Goodput ratio: 47/49][0.61 sec][bytes ratio: 0.010 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 4/4 103/104 200/200 95/96][Pkt Len c2s/s2c min/avg/max/stddev: 40/40 83/81 157/173 46/52][PLAIN TEXT (9089499565149320430)][Plen Bins: 0,0,50,25,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
+	3	TCP 10.215.173.1:46658 <-> 162.62.97.166:8085 [proto: 395/TencentGames][IP: 285/Tencent][ClearText][Confidence: DPI][DPI packets: 4][cat: Game/8][3 pkts/290 bytes <-> 3 pkts/253 bytes][Goodput ratio: 52/49][0.17 sec][bytes ratio: 0.068 (Mixed)][IAT c2s/s2c min/avg/max/stddev: 7/8 51/40 95/71 44/32][Pkt Len c2s/s2c min/avg/max/stddev: 40/40 97/84 190/165 66/57][PLAIN TEXT (gcloud)][Plen Bins: 0,0,0,50,50,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]