diff --git a/kni_entry.c b/kni_entry.c
index 857a4e8..cacb4d3 100644
--- a/kni_entry.c
+++ b/kni_entry.c
@@ -425,7 +425,7 @@ int kni_judge_ssl(int thread_seq,char* tcp_data,int tcp_datalen,char* sni,int* s
 
 //	memcpy(&len_in_body,&ssl_body[ssl_body_len],3);
 	len_in_body=*(unsigned char*)&ssl_body[ssl_body_len+2]+256*(*(unsigned char*)&ssl_body[ssl_body_len+1])+65536*(*(unsigned char*)&ssl_body[ssl_body_len]);
-	if(len_in_body!=(len_in_header-SSL_BODY_LEN))
+	if(len_in_body+SSL_BODY_LEN!=len_in_header)
 	{
 		return KNI_FLAG_UNKNOW;
 	}