diff --git a/src/tsg_entry.cpp b/src/tsg_entry.cpp
index 6e05965..6ec6594 100644
--- a/src/tsg_entry.cpp
+++ b/src/tsg_entry.cpp
@@ -1029,7 +1029,6 @@ static int identify_application_protocol(const struct streaminfo *a_stream, stru
 {
 	int ret=0, length=0;
 	char buff[4096]={0};
-	context->proto = PROTO_UNKONWN;
 
 	switch(a_stream->type)
 	{
@@ -1185,6 +1184,11 @@ static int identify_application_protocol(const struct streaminfo *a_stream, stru
 		default:
 			break;
 	}
+
+	if(context->proto<PROTO_HTTP || context->proto>PROTO_MAX)
+	{
+		context->proto = PROTO_UNKONWN;
+	}
 	
 	return ret;
 }