mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2026-03-06 15:41:36 +01:00
Code Issues Projects Releases Wiki Activity

MINOR: contrib: Enhance peers dissector heuristic.

Browse Source 
When receiving a stick-table message header as two first bytes of a TCP segement
we consider this as being part of a peer protocol session.
This commit is contained in:
Frédéric Lécaille 2021-01-21 16:25:45 +01:00 committed by Christopher Faulet
parent 200f8fc9c2
commit 8d4f1dd704
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
contrib/wireshark-dissectors/peers/packet-happp.c
View File

@ -1624,6 +1624,14 @@ dissect_happp_heur_tcp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void
proto_strlen = strlen(HAPPP_PROTOCOL);
if (tvb_captured_length(tvb) < 2)
return FALSE;
if (tvb_get_guint8(tvb, 0) == PEER_MSG_CLASS_STICKTABLE &&
tvb_get_guint8(tvb, 1) >= PEER_MSG_STKT_UPDATE &&
tvb_get_guint8(tvb, 1) <= PEER_MSG_STKT_ACK)
goto found;
if (tvb_captured_length(tvb) < proto_strlen + 1)
return FALSE;
@ -1634,6 +1642,7 @@ dissect_happp_heur_tcp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void
tvb_get_guint8(tvb, proto_strlen) != ' ')
return FALSE;
found:
conversation = find_or_create_conversation(pinfo);
if (!conversation)
return FALSE;