remove tunneling flag in session_flags

This commit is contained in:
root
2024-09-04 02:03:05 +00:00
parent f42aa76d5c
commit 654718c56f
9 changed files with 9 additions and 304 deletions

View File

@@ -737,13 +737,6 @@ struct session_flags_result *session_flags(struct session_flags_plugin_info *sf_
session_flags_calculate_dir(stat, all_pkts);
session_flags_calculate_random_looking(sf_plugin_info, stat, session, topic_id, all_pkts);
const struct packet *pkt = session_get0_current_packet(session);
size_t payload_len = packet_get_payload_len(pkt);
if (g_sf_conf.tunneling_enabled && payload_len > 0 && (topic_id == sf_plugin_info->tcp_topic_id))// detect tunneling on tcp only
{
tunneling_scan_sequence(sf_plugin_info, session, ctx, payload_len, flow_type, all_pkts);
}
if (stat->stream_live_time_ms >= START_JUDGE_TIME_MS)
{
if (all_pkts > g_sf_conf.main_dir_front_n_pkts)