Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove special handling of some TCP flows without SYN #1965

Merged
merged 1 commit into from
May 9, 2023

Commits on May 5, 2023

  1. Remove special handling of some TCP flows without SYN

    This piece of code has multiple problems:
    * nDPI is able to detect some TCP protocols even with mid-flows (i.e.
    without the initial packets of the session); TLS is the most
    significative example
    * since e6b332a it is perfectly valid
    to not pass the TCP Handshake packets to nDPI
    * in any case, we shouldn't call `ndpi_detection_giveup()`. That
    function is usually called by the application and we end up calling it
    twice in some cases.
    
    The simple solution is to completely remove that code: process these
    kinds of flows like everyone else.
    
    Note that the application can always avoid to pass to nDPI any TCP flows
    without the initial handshake; the flow managemnt is always up to the
    application.
    
    Looking at the CI results, some rare flows are now processed significantly
    longer. As a follow-up we could look into that.
    IvanNardi committed May 5, 2023
    Configuration menu
    Copy the full SHA
    8727ea0 View commit details
    Browse the repository at this point in the history